Skip to content

Merge main into stable#3813

Merged
caio-pizzol merged 9 commits into
stablefrom
merge/main-into-stable-2026-07-11
Jul 13, 2026
Merged

Merge main into stable#3813
caio-pizzol merged 9 commits into
stablefrom
merge/main-into-stable-2026-07-11

Conversation

@superdoc-bot

@superdoc-bot superdoc-bot Bot commented Jul 11, 2026

Copy link
Copy Markdown
Contributor

Summary

  • creates merge/main-into-stable-2026-07-11 from stable
  • merges main into the candidate branch
  • opens the promotion PR to stable

Auto-created by promote-stable workflow.

caio-pizzol and others added 9 commits July 7, 2026 19:21
)

* feat(oss-sync): direct-merge community PR lane with Orbit backflow

* fix: address PR review comments on #367

* fix: address PR review comments on #367

* fix: address PR review comments on #367

* fix: address PR review comments on #367

* fix: address PR review comments on #367

* feat(oss-sync): direct-merge community PR lane with Orbit backflow

* fix: address PR review comments on #367

* fix(oss-sync): reject multi-parent commits in community provenance

merge_commit_sha is set for merge-commit and rebase landings too, so it
cannot prove a squash. A multi-parent commit now fails the community
provenance check before any API lookup, closing the case where a PR whose
branch commits carry allowlisted bot emails would ingest wholesale through
the email check.

* fix(oss-sync): fail closed when community commit parent shape is unknown

classifyOssCommits is exported; a caller that omits parents must not skip
the squash-shape guard and fall through to PR verification.

Note: this ports only the public subtree changes from a mixed source commit (1 public path, 6 non-public paths ignored).

Ported-From-Source-Repo: superdoc/orbit
Ported-From-Source-Commit: cf57303e95dfe17a533ee35586036e29de6e5ba2
Ported-Public-Prefix: superdoc/public
…ering.xml (#3792)

* fix(super-editor): declare full namespace set on freshly-created numbering.xml (GH #3773)

Importing a docx with no word/numbering.xml and then adding the first
numbered list produced a numbering part missing xmlns:w16cid (and other
w16* namespaces), so Word refused to open/repair the exported file.

numbering-part-descriptor.ts's ensurePart() hand-maintained a 3-key
namespace map (xmlns:w/w15/mc) instead of reusing DEFAULT_DOCX_DEFS, the
full namespace + mc:Ignorable map that document.xml, comments.xml,
footnotes.xml, and people.xml already apply unconditionally. Since every
numbering-part creation goes through this ensurePart() (mutateNumbering ->
mutatePart -> executeMutate), the legacy SuperConverter#exportNumberingFile
baseNumbering fallback never runs for this path - the part descriptor's own
map has to be complete on its own.

Reuses DEFAULT_DOCX_DEFS instead of hand-picking namespaces one bug report
at a time. Adds a unit test on ensurePart() and an end-to-end regression
test (import numbering-less blank-doc.docx -> toggleOrderedList -> export
-> assert namespace-complete <w:numbering> root). Relaxes one
templates-adapter.integration.test.ts assertion that hardcoded the old
narrow mc:Ignorable merge result to match the sibling styles.xml test's
existing flexible pattern.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* docs(super-editor): correct w16cid provenance in numbering root attrs comment

---------

Co-authored-by: d.bilukcha <d.bilukha@foodtech.team>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Caio Pizzol <97641911+caio-pizzol@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Install Bun in the public React CI workflow so SDK contract generation can run during type checks.

Note: this ports only the public subtree changes from a mixed source commit (1 public path, 1 non-public path ignored).

Ported-From-Source-Repo: superdoc/orbit
Ported-From-Source-Commit: ac0394983c4c153163d3ca1baa54e056aa59da2b
Ported-Public-Prefix: superdoc/public
* chore(cli): 0.17.0 [skip ci]

Based on the commit messages, here are the release notes:

### What's New

- **Textbox editing** — Edit text content inside VML and DrawingML textboxes with full interaction support; clicks map to content positions.
- **Font family combobox** — Browse and select fonts directly from the toolbar.
- **Font size options** — UI API exposes font size choices for custom toolbars.
- **Comments API expansion** — `ui.comments.setActive()` highlights a comment without scrolling; pending-comments-update event carries `pendingSelection`.
- **Viewport scroll container** — `ui.viewport.getScrollContainer()` returns the editor's resolved scroll element.
- **Text range viewport geometry** — `ui.viewport.getRect()` now accepts Document API text addresses and targets.
- **Sidebar viewport observation** — `ui.viewport.observe` fires when comments rail opens or closes.
- **Zoom modes** — Manual and fit-width zoom with observable transitions, viewport metrics, `useSuperDocZoom` React hook, and toolbar command.
- **Table of contents hover** — Hovering TOC entries highlights corresponding sections.

### Improvements

- **Multi-column section balancing** — Continuous sections balance correctly with explicit per-column widths preserved throughout layout.
- **Column spacing precision** — Per-column gaps drive separator positions per ECMA-376; unequal-width columns honor per-column `w:space`.
- **Font substitutes** — Metric-compatible fallbacks load for Calibri, Cambria, Arial, Times New Roman, and Courier New before measurement.
- **Tracked table changes** — Inline cell edits consolidate into single review items instead of separate entries.

### Fixes

- Paragraphs with pageBreakBefore style no longer add blank pages when directly following explicit page breaks.
- Textbox text alignment matches Word when tables are inside textboxes.
- Table cell selection highlights appear over empty space; multiline selection interior lines render at full width.
- Plan engine recovers from stale block identities on recompile without crashes.
- Tab carets anchor to line top instead of bottom; soft-break continuation carets position alignment-aware at line start.
- DOCX export preserves generated line breaks as `<w:br/>` elements instead of raw newlines.
- Font toolbar no longer races on editor handoff; combobox selection flow handles edge cases.
- Viewport geometry invalidates on sidebar toggle without px-level jitter.
- Zoom state — PDF documents contribute to viewport metrics; mode-only transitions emit correctly.
- TOC anchor navigation preserves bookmark start/end order.
- Image alpha modifiers process correctly on import and export.
- Font picker keyboard behavior consistent across selection modes.
- Formatting preserved when typing text over toolbar font selections.

* chore(sdk): 1.16.0 [skip ci]

### What's New

- **Textbox editing** — Edit text content inside VML and DrawingML textboxes; clicks map to content positions with full interaction support.
- **Font family combobox** — Browse and select fonts directly from the toolbar.
- **Font size options** — UI API exposes font size choices for custom toolbars.
- **Comments API: activate-only highlight** — `ui.comments.setActive()` marks a comment active without scrolling.
- **Pending selection on comments event** — `pending-comments-update` event carries `pendingSelection` captured before the live selection clears.
- **Scroll container getter** — `ui.viewport.getScrollContainer()` returns the editor's resolved scroll element for overlay consumers.
- **Text range viewport geometry** — `ui.viewport.getRect()` accepts Document API text addresses and targets, not just entities.
- **Sidebar viewport observation** — `ui.viewport.observe` fires when the comments rail opens or closes.
- **Zoom modes** — Manual and fit-width zoom with observable mode transitions, viewport metrics, `useSuperDocZoom` React hook, and toolbar command.
- **Table of contents hover** — Hovering TOC entries highlights corresponding sections in the document.

### Improvements

- **Multi-column section balancing** — Continuous sections balance correctly with explicit per-column widths preserved throughout layout.
- **Column spacing precision** — Per-column gaps drive separator positions per ECMA-376; unequal-width columns honor per-column `w:space`.
- **Font substitutes** — Metric-compatible fallbacks load for Calibri, Cambria, Arial, Times New Roman, and Courier New before measurement; no reflow.
- **Tracked table changes** — Inline cell edits consolidate into single review items instead of separate entries.

### Fixes

- Paragraphs with `pageBreakBefore` style no longer add blank pages when directly following explicit page breaks.
- Textbox text alignment now matches Word when tables are inside textboxes.
- Table cell selection highlights appear over empty space; multiline selection interior lines render at full width.
- Plan engine recovers from stale block identities on recompile without crashes.
- Tab carets anchor to line top instead of bottom; soft-break continuation carets position alignment-aware at line start.
- DOCX export preserves generated line breaks as `<w:br/>` elements instead of raw newlines.
- Font toolbar no longer races on editor handoff; combobox selection flow handles edge cases.
- Viewport geometry invalidates on sidebar toggle without px-level jitter.
- Zoom state — PDF documents contribute to viewport metrics; mode-only transitions emit correctly.
- TOC anchor navigation preserves bookmark start/end order.
- Image alpha modifiers process correctly on import and export.
- Font picker keyboard behavior consistent across selection modes.
- Formatting preserved when typing text over toolbar font selections.

* chore(mcp): 0.12.0 [skip ci]

### What's New

- **Textbox editing** — Click, type, and select text directly inside VML and DrawingML textboxes; full caret and selection support.
- **Font family combobox** — Browse and select fonts from the toolbar; font selection flows through custom UI.
- **Font size API** — `ui.viewport` exposes available font sizes for custom toolbars and programmatic queries.
- **Comments API: activate-only highlight** — `ui.comments.setActive()` marks a comment active without scrolling or moving selection.
- **Pending selection on comment events** — `pending-comments-update` event carries `pendingSelection` captured before the live DOM selection clears.
- **Scroll container access** — `ui.viewport.getScrollContainer()` returns the editor's resolved scroll element for overlay consumers.
- **Text range viewport geometry** — `ui.viewport.getRect()` now accepts Document API text addresses and targets, not just entities.
- **Sidebar viewport observation** — `ui.viewport.observe` fires when the comments rail opens or closes.
- **Zoom modes** — Manual and fit-width zoom modes with observable transitions, viewport metrics, `useSuperDocZoom` React hook, and toolbar command.
- **Table of contents hover** — Hovering TOC entries highlights corresponding document sections.

### Improvements

- **Multi-column section balancing** — Continuous sections now balance correctly; explicit per-column widths preserved throughout layout.
- **Column spacing precision** — Per-column gaps drive separator positions per ECMA-376; unequal-width columns honor per-column `w:space` values.
- **Font substitutes load before measurement** — Metric-compatible fallbacks for Calibri, Cambria, Arial, Times New Roman, and Courier New load upfront; no reflow.
- **Tracked table changes consolidation** — Inline cell edits fold into a single review item instead of separate entries; one decision applies to the whole table.

### Fixes

- Paragraphs styled with `pageBreakBefore` no longer insert blank pages when directly following explicit page breaks.
- Textbox text alignment now matches Word behavior when tables are nested inside textboxes.
- Table cell selection highlights render over empty space; multiline selections show full-width interior lines.
- Plan engine recovers from stale block identities on recompile without crashes.
- Tab carets anchor to line top (not bottom); soft-break continuation carets position at line start with alignment-aware offset.
- DOCX export preserves generated line breaks as `<w:br/>` elements instead of raw newlines.
- Font toolbar no longer races on editor handoff; combobox selection handles edge cases correctly.
- Viewport geometry invalidates on sidebar toggle without pixel-level jitter.
- Zoom state — PDF documents contribute to viewport metrics; mode-only transitions emit correctly.
- TOC anchor navigation preserves `bookmarkStart`/`bookmarkEnd` order.
- Image alpha modifiers process correctly on import and export.
- Font picker keyboard behavior consistent across selection modes.
- Formatting is preserved when typing text over a toolbar font selection.

* chore(release): 1.40.0 [skip ci]

Now I have enough context. Let me write the release notes based on the actual changes:

### What's New

- **Textbox content editing** — Click, type, and edit text inside VML and DrawingML textboxes. Selection, caret rendering, and text updates work across body, header/footer, and table cell contexts.
- **Zoom modes and fit-width** — Set zoom as `manual` or `fit-width` (auto-fit to container). `ui.zoom` exposes mode, value, calculated fit-zoom, bounds, and viewport metrics; PDF documents measure at their rendered scale.
- **Viewport metrics and responsive layout events** — `viewport-change` event fires on container resize with measurements (document width, available width, fit-zoom). Consume viewport metrics from `getViewportMetrics()` to implement responsive zoom without polling.
- **Font family combobox** — Typeahead-enabled font picker in toolbar with per-document font options and substitution evidence (metric-safe vs. visual-only); dropdown stays in viewport.
- **Comments API expansion** — `ui.comments.setActive()` highlights a comment without scrolling; `pendingSelection` on pending comment events gives consumers the captured selection to pass to comment creation APIs.
- **Text range viewport targets** — `ui.viewport.getRect()` now accepts Document API text targets (addresses and segments), resolving to painted DOM rects for custom overlay and floating-UI anchoring.
- **Scroll container exposure** — `ui.viewport.getScrollContainer()` returns the actual scrollable ancestor (or null for document/window scroll), letting overlay consumers attach scroll listeners to the right element.
- **Sidebar geometry signals** — `ui.viewport.observe` fires when the comments rail opens/closes, invalidating cached viewport geometry.
- **TOC interactions** — Hover highlighting and section-link navigation for table of contents.

### Improvements

- **Column balancing at continuous breaks** — Multi-column sections now balance correctly at continuous section breaks, matching Word's layout. Explicit column widths (equal or unequal) and per-column spacing extract accurately.
- **Tracked change granularity** — Inline cell changes within a whole-table tracked change consolidate into one logical change in the review API (groupTrackedChanges), mirroring the comments containment rule.
- **Line break handling in mutations** — Generated newlines in text-mode mutations serialize as Word-native `<w:br/>` elements; read model treats lineBreak nodes as `\n` so search/query/rewrite stay consistent.
- **Caret geometry for tabs and soft breaks** — Tab carets anchor to line top; soft-break continuation carets position at line start with alignment-aware offset instead of the page right edge.
- **Page break suppression** — Style-driven pageBreakBefore directly after an explicit page break no longer renders a redundant blank page, matching Word's structural rule.
- **Textbox table content rendering** — Tables inside textboxes render with correct alignment and text flow.
- **Plan-engine block identity repair** — Runtime self-healing of duplicate block identities on compile, preventing stale cross-document references.
- **Font substitution evidence** — Font reports carry per-face evidence (metric-safe, visual-only, glyph exceptions) from the docfonts registry, giving consumers the fidelity detail behind each substitution.

### Fixes

- **Table cell selection collapse** — Dragging a body selection into an empty table cell no longer collapses the selection; prosemirror-tables normalization guard keeps the extended range.
- **Multiline selection rendering** — Interior lines of multi-line selections now render the full width highlight instead of slivers; per-line rect computation handles absolutely-positioned `.superdoc-line` elements across browsers.
- **Empty cell geometry** — Empty table cell paragraphs (no runs) resolve to their PM start instead of null, preventing frozen selections during active drags.
- **Image alpha export** — Process alphaModFix for images on export, preserving transparency properties.
- **Text selection in generated lineBreak contexts** — Search and offset resolution now treat lineBreak nodes as `\n`, so a match spanning text+lineBreak+text coalesces to one contiguous range.
- **Font toolbar updates** — Document font toolbar rebuilds and layout re-renders on fonts-changed events; dropdown state persists through editor handoff.
- **UV-deprecated legacy visual testing infrastructure** — Removed `/devtools/visual-testing`; layout validation now runs in the standard test suite.

* chore(react): 1.11.0 [skip ci]

### What's New

- **Textbox content editing** — Click to edit text inside textboxes in body, headers, footers, and table cells with full selection and caret support.
- **Zoom modes and fit-width** — Choose zoom mode (`manual` or `fit-width` for auto-fit) and read state, calculations, bounds, and viewport metrics from `ui.zoom`.
- **Viewport change events** — Listen for `viewport-change` when the container resizes to receive document width, available width, and calculated fit-zoom.
- **Font family combobox** — Search for fonts in the toolbar by name and see per-document options with substitution evidence.
- **Comments activation API** — Highlight comments without scrolling using `ui.comments.setActive()`, and access the captured selection from pending comment events.
- **Text range viewport rects** — Pass Document API text targets to `ui.viewport.getRect()` to get painted rects for overlay positioning.
- **Scroll container access** — Call `ui.viewport.getScrollContainer()` to find the element that actually scrolls, or null for window scroll.
- **Sidebar geometry updates** — `ui.viewport.observe` fires when the comments rail opens or closes.
- **TOC interactions** — Hover highlights sections in the table of contents, and click navigates to them.

### Improvements

- **Column balancing** — Multi-column sections balance at continuous section breaks, matching Word's behavior.
- **Grouped tracked changes** — Inline cell changes inside a whole-table tracked change now group as one review item.
- **Line break serialization** — Newlines in text mutations serialize as `<w:br/>` and round-trip without loss.
- **Tab and soft-break carets** — Tab carets anchor to line top, and soft-break carets position at line start with alignment awareness.
- **Page break suppression** — Removed blank pages when `pageBreakBefore` appears directly after an explicit page break.
- **Textbox table rendering** — Tables inside textboxes render with correct alignment and text flow.
- **Block identity repair** — Duplicate block identities fix automatically on compile.
- **Font substitution evidence** — Font reports carry per-face evidence (metric-safe, visual-only, glyph exceptions).

### Fixes

- **Empty table cell selection** — Dragging a selection into an empty cell no longer collapses.
- **Multiline selection rendering** — Interior lines of multi-line selections render full-width highlights.
- **Empty cell geometry** — Empty cell paragraphs resolve to a valid position for interaction.
- **Image alpha on export** — Images with transparency now preserve alpha on DOCX export.
- **Linebreak text selection** — Search spans and selections spanning text+linebreak+text now coalesce correctly.
- **Font toolbar updates** — Toolbar rebuilds when document fonts change or editor switches.

* chore(vscode): 2.12.0 [skip ci]

### What's New

- **Textbox content editing** — Click, type, and edit text inside VML and DrawingML textboxes. Selection, caret rendering, and text updates work across body, header/footer, and table cell contexts.
- **Zoom modes and fit-width** — Set zoom as `manual` or `fit-width` (auto-fit to container). `ui.zoom` exposes mode, value, calculated fit-zoom, bounds, and viewport metrics; PDF documents measure at their rendered scale.
- **Viewport metrics and responsive layout events** — `viewport-change` event fires on container resize with measurements (document width, available width, fit-zoom). Consume viewport metrics from `getViewportMetrics()` to implement responsive zoom without polling.
- **Font family combobox** — Typeahead-enabled font picker in toolbar with per-document font options and substitution evidence (metric-safe vs. visual-only); dropdown stays in viewport.
- **Comments API expansion** — `ui.comments.setActive()` highlights a comment without scrolling; `pendingSelection` on pending comment events gives consumers the captured selection to pass to comment creation APIs.
- **Text range viewport targets** — `ui.viewport.getRect()` now accepts Document API text targets (addresses and segments), resolving to painted DOM rects for custom overlay and floating-UI anchoring.
- **Scroll container exposure** — `ui.viewport.getScrollContainer()` returns the actual scrollable ancestor (or null for document/window scroll), letting overlay consumers attach scroll listeners to the right element.
- **Sidebar geometry signals** — `ui.viewport.observe` fires when the comments rail opens/closes, invalidating cached viewport geometry.
- **Table of contents interactions** — Hover highlighting and section-link navigation for table of contents.

### Improvements

- **Column balancing at continuous breaks** — Multi-column sections now balance correctly at continuous section breaks, matching Word's layout. Explicit column widths (equal or unequal) and per-column spacing extract accurately.
- **Tracked change granularity** — Inline cell changes within a whole-table tracked change consolidate into one logical change in the review API, mirroring the comments containment rule.
- **Line break handling in mutations** — Generated newlines in text-mode mutations serialize as Word-native `<w:br/>` elements; read model treats lineBreak nodes as `\n` so search/query/rewrite stay consistent.
- **Caret geometry for tabs and soft breaks** — Tab carets anchor to line top; soft-break continuation carets position at line start with alignment-aware offset instead of the page right edge.
- **Page break suppression** — Style-driven pageBreakBefore directly after an explicit page break no longer renders a redundant blank page, matching Word's structural rule.
- **Textbox table content rendering** — Tables inside textboxes render with correct alignment and text flow.
- **Plan-engine block identity repair** — Runtime self-healing of duplicate block identities on compile, preventing stale cross-document references.
- **Font substitution evidence** — Font reports carry per-face evidence (metric-safe, visual-only, glyph exceptions) from the docfonts registry, giving consumers the fidelity detail behind each substitution.

### Fixes

- **Table cell selection collapse** — Dragging a body selection into an empty table cell no longer collapses the selection; prosemirror-tables normalization guard keeps the extended range.
- **Multiline selection rendering** — Interior lines of multi-line selections now render the full width highlight instead of slivers; per-line rect computation handles absolutely-positioned `.superdoc-line` elements across browsers.
- **Empty cell geometry** — Empty table cell paragraphs (no runs) resolve to their ProseMirror start instead of null, preventing frozen selections during active drags.
- **Image alpha export** — Process alphaModFix for images on export, preserving transparency properties.
- **Text selection in generated lineBreak contexts** — Search and offset resolution now treat lineBreak nodes as `\n`, so a match spanning text+lineBreak+text coalesces to one contiguous range.
- **Font toolbar updates** — Document font toolbar rebuilds and layout re-renders on fonts-changed events; dropdown state persists through editor handoff.

* chore(esign): 2.7.2 [skip ci]

Based on my analysis of the commits and changes, here are the release notes:

### Fixes

- **Page breaks** — Removed redundant blank pages when a paragraph with pageBreakBefore style follows an explicit page break. Word's rule is structural, not geometric; we now match that behavior exactly.
- **Table cell selection** — Fixed selection highlight disappearing over empty space inside table cells. Also fixed multiline selection rendering and empty cell hit detection.
- **Textbox rendering** — Corrected rendering and text alignment for textboxes containing tables.
- **Image alpha transparency** — Process `alphaModFix` attributes correctly during import and export to preserve image transparency settings.
- **Block identity repair** — Runtime self-healing for duplicate block identities on compile, preventing stale references from breaking document operations.

### What's New

- **Textbox editing** — Phase 0 and 1 of textbox content editing. Render and edit VML and DrawingML textbox content. Full support for textboxes in headers, footers, and table cells with proper position preservation through import/export.

### Improvements

- **Font system** — Bundle docfonts 0.15 and 0.16 with expanded census rows and legal-cleared fallback fonts for better coverage.
- **Documentation** — Updated examples for custom UI APIs and clarified viewport geometry behavior.

* fix: roll back default toolbar fonts

* test: update font dropdown behavior expectations

* chore(cli): 0.17.1 [skip ci]

Based on my analysis of the commits, v0.17.1 contains a single fix: rolling back the default toolbar font options to a conservative baseline.

### Fixes

- **Toolbar fonts** — Reverted default font dropdown to the conservative baseline (Arial, Courier New, Georgia, Times New Roman). Per-document font options remain available through the font selector.

* chore(sdk): 1.16.1 [skip ci]

### Fixes

- **Default toolbar fonts** — Rolled back font dropdown to a conservative baseline (Arial, Courier New, Georgia, Times New Roman). Per-document font options remain available through the font selector.

* chore(mcp): 0.12.1 [skip ci]

Based on my analysis of the git diff, this patch release contains a single fix related to the toolbar font dropdown. Here are the release notes:

### Fixes

- **Toolbar fonts** — Rolled back font dropdown to conservative baseline (Arial, Courier New, Georgia, Times New Roman). Per-document font options remain available through the font selector.

* chore(release): 1.40.1 [skip ci]

### Fixes

- Toolbar font dropdown reverted to a conservative baseline (Arial, Courier New, Georgia, Times New Roman) while the optional font-pack selection UI is finalized. Full font resolution through documents remains unchanged.

* chore(react): 1.11.1 [skip ci]

### Fixes

- Toolbar font dropdown returns to a conservative baseline (Arial, Courier New, Georgia, Times New Roman) while the optional font-pack selection UI is finalized — full font resolution within documents remains unchanged.

* chore(vscode): 2.12.1 [skip ci]

### Fixes

- Toolbar font dropdown reverted to a conservative baseline (Arial, Courier New, Georgia, Times New Roman) while the optional font-pack selection UI is finalized. Document rendering of all fonts remains unchanged.

* fix: resolve stable merge conflicts

* fix: update font dropdown behavior expectations

* fix: align font option tests with rich pack

* fix: update ui font option expectations

* fix: avoid contract demo rebuild on dev

* fix: update react font hook expectations

* chore(cli): 0.18.0 [skip ci]

### What's New

- **Bundled fonts are now explicit and predictable.** The optional `@superdoc-dev/fonts` package (renamed from `@superdoc/fonts`) is now the only source for bundled font substitutes. Without it, the toolbar shows a safe baseline (Arial, Times New Roman, Courier New) and documents render with system fonts. With it configured, the full reviewed set becomes available.

- **Config-gated font availability prevents stray requests.** An unconfigured app never tries to fetch a substitute `.woff2` file it cannot serve, so there are no spurious 404s or one-time warnings. Availability is a config decision, not a runtime probe.

- **Curate bundled fonts by name with `createSuperDocFonts()`.** Use `include` to allow only specific Word families, or `exclude` to keep everything except a few. Names are validated at setup time — a typo fails fast instead of silently hiding fonts. Curation changes what the toolbar advertises and which families SuperDoc substitutes.

  ```js
  import { createSuperDocFonts } from '@superdoc-dev/fonts';

  new SuperDoc({
    selector: '#editor',
    document: 'contract.docx',
    fonts: createSuperDocFonts({ exclude: ['Cooper Black', 'Brush Script MT'] }),
  });
  ```

- **Document-scoped activation and curation.** Each document decides which bundled fonts it uses. A curated document never reuses a full-pack document's cached font measures, so resolution stays accurate regardless of what curation layers are in use.

### Improvements

- Updated all getting-started examples and documentation to use the new `@superdoc-dev/fonts` package and curation APIs.
- Toolbar font dropdown now correctly reflects availability based on pack configuration.

* chore(sdk): 1.17.0 [skip ci]

### What's New

- **Bundled fonts are now explicit and predictable.** The optional `@superdoc-dev/fonts` package (renamed from `@superdoc/fonts`) is now the only source for metric-compatible font substitutes. Without it, the toolbar shows a safe baseline (Arial, Courier New, Times New Roman) and documents render with system fonts. With it configured, the full 30-family set becomes available.

- **Config-gated font availability prevents stray requests.** An unconfigured app never tries to fetch a `.woff2` file it cannot serve — no spurious 404s, no one-time warnings. Availability is explicit, determined by your config, not discovered at runtime.

- **Curate bundled fonts by name with `createSuperDocFonts()`.** Use `include` to allow only specific Word families, or `exclude` to block a few. Names are validated at setup time — a typo fails fast with suggestions instead of silently hiding fonts. Curation changes what the toolbar advertises and which families get substituted.

  ```js
  import { createSuperDocFonts } from '@superdoc-dev/fonts';

  new SuperDoc({
    selector: '#editor',
    document: 'contract.docx',
    fonts: createSuperDocFonts({ exclude: ['Cooper Black', 'Brush Script MT'] }),
  });
  ```

- **Document-scoped activation and curation.** Each document independently decides which bundled fonts it uses. A curated document never reuses a full-pack document's cached font measures, so resolution stays accurate regardless of what layers are in use.

### Improvements

- Updated all getting-started examples and framework guides to use the new `@superdoc-dev/fonts` package.
- Toolbar font dropdown now correctly reflects availability based on your pack configuration.
- Font availability and curation signature are now document-scoped, eliminating cache collisions across different configurations.

* chore(mcp): 0.13.0 [skip ci]

### What's New

- **Bundled fonts are now explicit and predictable.** The optional `@superdoc-dev/fonts` package (renamed from `@superdoc/fonts`) is now the only source for metric-compatible font substitutes. Without it, the toolbar shows a safe baseline (Arial, Courier New, Times New Roman) and documents render with system fonts. With it configured, the full reviewed set becomes available.

- **Config-gated font availability prevents stray requests.** An unconfigured app never tries to fetch a `.woff2` file it cannot serve — no spurious 404s, no one-time warnings. Availability is explicit, determined by your config, not discovered at runtime.

- **Curate bundled fonts by name with `createSuperDocFonts()`.** Use `include` to allow only specific Word families, or `exclude` to block a few. Names are validated at setup time — a typo fails fast with suggestions instead of silently hiding fonts. Curation changes what the toolbar advertises and which families get substituted.

  ```js
  import { createSuperDocFonts } from '@superdoc-dev/fonts';

  new SuperDoc({
    selector: '#editor',
    document: 'contract.docx',
    fonts: createSuperDocFonts({ exclude: ['Cooper Black', 'Brush Script MT'] }),
  });
  ```

- **Document-scoped activation and curation.** Each document independently decides which bundled fonts it uses. A curated document never reuses a full-pack document's cached font measures, so resolution stays accurate regardless of what curation layers are in use.

### Improvements

- Updated all getting-started examples and framework guides to use the new `@superdoc-dev/fonts` package.
- Toolbar font dropdown now correctly reflects availability based on your pack configuration.
- Font availability and curation signature are now document-scoped, eliminating cache collisions across different configurations.

* chore(fonts): 0.1.1 [skip ci]

Based on my analysis of the changes in this release, here are the release notes:

### What's New

- **@superdoc-dev/fonts is now the only bundled font source** — The fonts package is now the single recommended way to load metric-compatible fallbacks. The core `superdoc` package no longer ships or bundles fonts.

### Improvements

- **Simplified fonts API** — Pass `superdocFonts` directly to SuperDoc's config, or use `createSuperDocFonts({ include, exclude })` to curate which families you need.
- **CDN build is baseline-by-default** — The CDN/`<script>` build ships without fonts. Load the separate `@superdoc-dev/fonts` browser build to enable the reviewed fallback pack.
- **Fonts package now has semantic release** — `@superdoc-dev/fonts` publishes independently with automated version management. The package and core `superdoc` can now version separately while staying in sync.
- **New CDN resolver for fonts** — Added `cdn-entry.ts` to resolve bundled fonts relative to their own `<script>` tag, with no bundler configuration needed.
- **Curation is now decoupled** — Font include/exclude validation lives in `curation.ts` so both bundler and CDN builds honor the same rules.

### Fixes

- **Aligned font option tests** — Fixed test expectations to match the published fonts pack.
- **Rolled back default toolbar fonts** — Restored baseline font list for the CDN build; users opt into the full reviewed set by loading the fonts package.

* chore(release): 1.41.0 [skip ci]

### What's New

**@superdoc-dev/fonts package** — Optional package containing 6 MB of `.woff2` font binaries for reviewed metric-compatible substitutes, published to npm under the org scope so the core stays small for apps that skip the pack.

**Config-gated bundled font availability** — Font availability is now explicit: without a configured pack, SuperDoc shows a conservative baseline (Arial, Times New Roman, Courier New), and documents render their original font names with system fonts; configuring the pack lights up the full reviewed set, so toolbar and rendering show the curated families you enable.

**Font curation API** — `createSuperDocFonts({ include / exclude })` validates family names against the pack and curates availability at setup time, so typos fail fast and a no-pack or curated document never reuses another document's full-pack measures.

### Improvements

**Better baseline behavior** — Unconfigured SuperDoc now shows one safe Word font per CSS generic instead of fetching missing substitutes from nowhere, and a one-time warning surfaces if the pack fails to load instead of silently degrading.

**Document-scoped font resolution** — Availability and curation are per-document in the resolver and offerings, keeping each editor's toolbar and rendering independent when multiple documents share a page.

**CDN-ready fonts** — The `@superdoc-dev/fonts` browser build exports a global `SuperDocFonts` with the same API, so `<script>` tag pages load the reviewed pack from jsDelivr, unpkg, or self-hosted servers with no bundler and no path config.

**Updated examples and docs** — Getting-started guides for Angular, Laravel, Next.js, Nuxt, React, Solid, Vanilla, and Vue now import and use `@superdoc-dev/fonts`.

* chore(react): 1.12.0 [skip ci]

### What's New

- **@superdoc-dev/fonts package** — Optional npm package with 6 MB of reviewed metric-compatible font binaries (Carlito, Liberation Serif, and others); bundler-resolvable assets, no copying files into `public/` or configuring paths.
- **Font curation API** — `createSuperDocFonts({ include / exclude })` validates family names against the pack and curates availability at setup time, so typos fail fast and documents never reuse another document's measures.
- **CDN-ready fonts** — Browser build exports `SuperDocFonts` global for `<script>` tag pages; load from jsDelivr, unpkg, or self-hosted with no bundler and no path config.

### Improvements

- **Config-gated bundled font availability** — Without configuration, SuperDoc shows a safe baseline (Arial, Times New Roman, Courier New); configuring the pack lights up the full reviewed set, gated by config presence rather than runtime probes.
- **Better baseline behavior** — Unconfigured SuperDoc now shows one safe Word font per CSS generic instead of fetching missing substitutes from nowhere; a one-time warning surfaces if the pack fails to load instead of silently degrading.
- **Document-scoped font resolution** — Availability and curation are per-document in the resolver and offerings, keeping each editor's toolbar and rendering independent when multiple documents share a page.
- **Updated examples and docs** — Getting-started guides for Angular, Laravel, Next.js, Nuxt, React, Solid, Vanilla, and Vue now import and use `@superdoc-dev/fonts`.

### Fixes

- Updated React font hook expectations to align with the new curation layer.
- Updated UI font option expectations to reflect the config-gated baseline.
- Aligned font option tests with the reviewed pack behavior.

* chore(vscode): 2.13.0 [skip ci]

### What's New

**@superdoc-dev/fonts package** — Optional npm package containing 6 MB of `.woff2` font binaries. Imports metric-compatible substitutes for proprietary Word fonts (Carlito for Calibri, Liberation Serif for Times New Roman, and others). Lets you ship the reviewed font set without a copy step or `assetBaseUrl` — bundle detects and rewrites asset URLs automatically.

**Config-gated bundled font availability** — Font availability is now explicit. Without a configured pack, SuperDoc shows a conservative baseline (Arial, Times New Roman, Courier New — one per CSS generic) and renders logical font names with system fonts. Configuring the pack via `superdocFonts`, `fonts.assetBaseUrl`/`fonts.resolveAssetUrl`, or the CDN browser build lights up the full reviewed set.

**Font curation API** — `createSuperDocFonts({ include / exclude })` narrows the pack to families you name by their Word logical names (e.g., `"Calibri"`). Validates family names at setup time, so typos fail fast. Include is an allow-list; exclude keeps everything but the named families. Does not affect custom fonts — those stay separate.

### Improvements

**Better baseline behavior** — Unconfigured SuperDoc now advertises only the safe Word baseline instead of guessing substitutes. A one-time warning surfaces if the pack fails to load instead of silently degrading.

**Document-scoped font resolution** — Font availability and curation are now per-document, so each editor's toolbar and rendering is independent when multiple documents share a page.

**CDN-ready fonts** — The `@superdoc-dev/fonts` browser build exports a global `SuperDocFonts` with the same API. Load it via `<script>` tag from jsDelivr, unpkg, or self-hosted servers — no bundler, no path config.

**Updated docs and examples** — All getting-started guides (Angular, Laravel, Next.js, Nuxt, React, Solid, Vanilla, Vue) now import and use `@superdoc-dev/fonts`.

* fix(cli): persist track-change scope across host calls

Both doc orchestrators used a fresh per-call invoke closure as the hook scope key, so resolved track-change ids never survived between operations in a host session; a repeat trackChanges.decide on an already-resolved id then fell through to the adapter and surfaced TARGET_NOT_FOUND instead of the intended NO_OP. Key the scope by the stable opened.doc handle the session pool reuses across calls, and add an orchestrator-level regression test driving distinct per-call closures over one shared doc (existing hook tests reused a single closure and could not catch this).

* chore(template-builder): 1.12.1 [skip ci]

### Bug Fixes

- linear sync

### Changes

- Merge branch 'orbit-canonical-publishing' (#3699)

* chore(cli): 0.19.0 [skip ci]

### What's New

**Textbox object interaction** — Select, resize, and move floating DrawingML textboxes with border-click selection, corner resize handles with live feedback, and drag-to-move with margin-offset preservation.

**Blocks API enhancements** — New `blocks.merge`, `blocks.split`, and `blocks.move` operations for programmatic paragraph manipulation (v2 sessions only).

**Paragraph numbering control** — Surface paragraph numbering on `blocks.list` and add `format.paragraph.setNumbering` to manage numbered sequences.

**Search deleted tracked changes** — Find and replace now searches within deleted tracked-change text, not just insertions.

**Lists API** — New `lists.apply`, `lists.continue`, `lists.restart`, `lists.remove`, and `lists.getState` operations for list manipulation.

**Mutation planning** — Add `mutations.planExecute` to plan and execute mutations in a single operation.

### Fixes

**Track-change scope persistence** — Fixed resolved track-change IDs not surviving between operations in host sessions; now keys scope by stable doc handle instead of per-call closure.

**Word field export** — Fixed passthrough importer attaching content to `passthroughInline` nodes, breaking MERGEFIELD and other unrecognized field export; instruction text now lives in `attrs.originalXml` only.

**Footnote rendering** — Fixed footnotes silently dropped when body fills terminal page; terminal-page reserve bump now grows body on relayout when footnote demand exceeds placed reserve.

**Note caret and selection** — Fixed drifting caret, selection rects, and arrow navigation in multi-paragraph note sessions by resolving geometry directly from painted pm ranges and falling back to offset bridge for unpainted positions.

**Note paragraph styles** — Fixed note paragraphs losing `FootnoteText` style on Enter or paste; appended transaction now re-stamps paragraphs without styleId using nearest styled sibling's properties.

**Cross-paragraph deletion in suggesting mode** — Fixed deletion spanning two paragraphs splitting instead of re-joining; `replaceStep.js` now compiles slices without inline content as plain tracked deletions and emits explicit caret hint.

**IME composition** — Deferred layout rerender and track-changes rewriting during IME composition to prevent editing breaks.

**Tracked-change review navigation** — Fixed review navigation getting stuck and unable to return to previous position.

**First-line list indentation** — Fixed justified-text width for numbered lists with first-line indent by computing marker-suffix tab width from actual tab stops instead of stale textStartX targets.

**Orphan calls** — Removed orphan superdoc-dev environment calls.

### Improvements

**Footnote keystroke performance** — Warm-start reserve convergence from previous fixed point, reducing footnote pipeline cost from 75ms to 12ms per keystroke on 25-footnote document.

**Numbering recompute** — Skip numbering plugin's full-document diff on `BLOCK_NODE_METADATA_UPDATE_META` transactions; saves ~16ms per keystroke on 776-paragraph documents.

**Toolbar refresh coalescing** — Coalesce headless toolbar refresh per microtask when `transaction` and `selectionUpdate` fire synchronously; eliminates redundant snapshot rebuilds.

**Layout engine** — Fold footnote warm-start seed into initial pagination for single-pagination steady state; page-token relayout preserves seeded options.

**V2 architecture** — New v2 package with unified editor runtime, review state management, drawing taxonomy for shape/textbox support, and v1 compatibility wiring.

**Test coverage** — 70+ new comprehensive tests covering v2 wiring, custom UI parity, mutations, and block API operations.

* chore(sdk): 1.18.0 [skip ci]

### What's New

**Document API — Image commands** — Crop, rotate, scale, flip, and replace images programmatically. Set alt text, captions, z-order, anchor options, and wrapping behavior. (#2290, #2295)

**Document API — Hyperlink commands** — Insert, get, list, patch, and remove hyperlinks. Wrap text in links. Full control over DOCX link elements. (#2294)

**Pasted hyperlinks** — Converting pasted text into real docx link elements instead of plain text. (#2270)

**Document API — Lists commands** — Apply list templates, set level-specific formatting (alignment, bullets, numbering, indentation, marker fonts, trailing characters). Improved sequence continuity when changing list types. (#2288, #2304)

**Clear content command** — Remove document content programmatically. (#2300)

**Table insertion** — Insert table with extra separator row to match MS Word behavior. (#2301)

**HTML extraction** — New `getHtml` operation to read document content as HTML. (#2264)

**TIFF image support** — Render TIFF images in DOCX documents alongside PNG, JPG, and GIF. (#2284)

**Markdown image import** — Automatically import images when converting markdown to documents. (#2303)

**Partial tracked change resolution** — Resolve individual tracked changes without resolving all. (#2252)

**LLM tools** — Alpha release of llm tools integration. (#2292)

**Web view layout engine** — New rendering engine for improved document layout and performance. (#2100)

### Improvements

**Document API — Styles** — Registry-driven `styles.apply` with schema validation for type safety. (#2267)

**SDK type definitions** — Added TypeScript types for `PresentationEditor`. (#2271)

**HTML operations** — Fixed HTML insert and improved SDK tool selection. (#2264)

**SDK API** — Made `expectedRevision` parameter optional. (#2265)

**Python SDK documentation** — Operations now render as snake_case in generated docs. (#2266)

### Fixes

**Header/footer editing** — Prevent focus loss when typing in header/footer editors. (#2238)

**Image resize handles** — Align handles with actual image position. (#2293)

**Virtualization scroll** — Compute scroll position relative to scroll container, not viewport. (#2263)

**Format persistence** — Route `format.caps` through text transform so `w:caps` persists on export. (#2297)

**List export** — Sync document XML before numbering pruning to preserve list definitions. (#36058c364)

**Link popover rendering** — Mount external popovers outside overflow:hidden containers. (#2308)

**Media handling** — Handle Uint8Array media values from persistence layers. (#2298)

**Scroll feedback loop** — Prevent scroll acceleration feedback loop in painter DOM. (#2291)

**Collaboration sessions** — Keep sessions alive in non-collaborative mode; checkpoint sessions even when not dirty. (#2289)

**CLI collaboration** — Prevent collab reopen from overwriting existing document with blank data. (#2296)

**Markdown conversion** — Harden markdown image conversion error handling. (#2303)

**Portrait orientation** — Fix document API handling of portrait orientation. (#dafab76af)

**Development experience** — Log warning when local dev server is unreachable. (#2309)

**Test stability** — Stabilize flaky `cleanUpParagraphWithAnnotations` tests. (#2262)

* chore(mcp): 0.14.0 [skip ci]

### What's New

**Footnote and endnote editing** — Double-click body markers to open notes, two-press Backspace to delete, clearing note content removes the footnote on both sides.

**Document API — Image commands** — Crop, rotate, scale, flip, and replace images programmatically; set alt text, captions, z-order, and wrapping.

**Document API — Hyperlink commands** — Insert, get, list, patch, and remove hyperlinks; wrap text in links with full DOCX control.

**Pasted hyperlinks** — Automatically converts pasted URLs into real docx link elements instead of plain text.

**Document API — Lists commands** — Apply list templates, set level-specific formatting (alignment, bullets, numbering, indentation, marker fonts).

**Document API — Table insertion** — Insert tables with extra separator row to match MS Word behavior.

**Textbox object interaction** — Select, resize, and move DrawingML textboxes with border-click selection, corner handles, and drag-to-move feedback.

**Blocks API enhancements** — New merge, split, and move operations for programmatic paragraph manipulation (v2 sessions).

**Paragraph numbering control** — Surface paragraph numbering on blocks.list; add format.paragraph.setNumbering for managing numbered sequences.

**Search deleted tracked changes** — Find and replace now searches within deleted tracked-change text, not just insertions.

**Lists API** — New lists.apply, lists.continue, lists.restart, lists.remove, and lists.getState operations.

**Mutation planning** — Plan and execute mutations in a single operation with mutations.planExecute.

**Clear content command** — Remove document content programmatically.

**HTML extraction** — New getHtml operation to read document content as HTML.

**TIFF image support** — Render TIFF images alongside PNG, JPG, and GIF.

**Markdown image import** — Automatically import images when converting markdown to documents.

**Partial tracked change resolution** — Resolve individual tracked changes without resolving all.

**LLM tools** — Alpha release of LLM tools integration.

**Web view layout engine** — New rendering engine for improved layout and performance.

### Improvements

**Document API styles** — Registry-driven styles.apply with schema validation for type safety.

**PresentationEditor types** — Added TypeScript types for PresentationEditor.

**SDK API** — Made expectedRevision parameter optional.

**Footnote keystroke performance** — Warm-start reserve convergence reduces keystroke cost on 25-footnote documents from 75ms to 12ms.

**Numbering recompute** — Skip full-document diff on block-node metadata transactions; saves ~16ms per keystroke on 776-paragraph documents.

**Toolbar refresh coalescing** — Coalesce headless toolbar refresh per microtask to eliminate redundant snapshot rebuilds.

**Layout engine** — Fold footnote warm-start seed into initial pagination for single-pagination steady state.

**V2 architecture** — New v2 package with unified editor runtime, review state management, drawing taxonomy, and v1 compatibility wiring.

**Test coverage** — 70+ new tests covering v2 wiring, custom UI parity, mutations, and block API operations.

### Fixes

**Track-change scope persistence** — Fixed resolved track-change IDs not surviving between operations in host sessions.

**Word field export** — Fixed passthrough importer breaking MERGEFIELD export; instruction text now lives in attrs.originalXml only.

**Footnote rendering** — Fixed footnotes silently dropped when body fills terminal page.

**Note caret and selection** — Fixed drifting caret, selection rects, and arrow navigation in multi-paragraph notes.

**Note paragraph styles** — Fixed note paragraphs losing FootnoteText style on Enter or paste.

**Cross-paragraph deletion** — Fixed deletion spanning two paragraphs splitting instead of re-joining in suggesting mode.

**IME composition** — Deferred layout rerender and track-changes rewriting during IME composition.

**Tracked-change review navigation** — Fixed review navigation getting stuck.

**First-line list indentation** — Fixed justified-text width for numbered lists with first-line indent.

**Header/footer editing** — Prevent focus loss when typing in header/footer editors.

**Image resize handles** — Align handles with actual image position.

**Virtualization scroll** — Compute scroll position relative to scroll container, not viewport.

**Format persistence** — Route format.caps through text transform so w:caps persists on export.

**List export** — Sync document XML before numbering pruning to preserve list definitions.

**Link popover rendering** — Mount external popovers outside overflow:hidden containers.

**Media handling** — Handle Uint8Array media values from persistence layers.

**Scroll feedback loop** — Prevent scroll acceleration feedback loop in painter DOM.

**Collaboration sessions** — Keep sessions alive in non-collaborative mode; checkpoint when not dirty.

**CLI collaboration** — Prevent collab reopen from overwriting documents with blank data.

**Markdown conversion** — Harden markdown image conversion error handling.

**Portrait orientation** — Fix document API handling of portrait orientation.

**Development experience** — Log warning when local dev server is unreachable.

* chore(fonts): 0.1.2 [skip ci]

### Fixes

- **First-line list indentation** — Fixed incorrect text start position for numbered lists with first-line indents. The layout engine now computes marker widths from actual rendered tab stops instead of stale measurements, ensuring correct justified text width calculations.

- **Fonts configuration robustness** — Malformed `fonts.bundled` configuration no longer crashes the editor. Hand-written config with invalid shapes (e.g., bare strings instead of arrays) now defaults to the full bundled pack and logs a single warning instead of throwing.

* chore(release): 1.42.0 [skip ci]

### What's New

**Footnotes and endnotes — full editor integration** — Double-click a reference marker to navigate to the note; delete from either side removes both marker and note; staged Backspace selects then removes; insert via `editor.commands.insertFootnote()`; caret and arrow navigation now track correctly in multi-paragraph notes; Font sizing respects document defaults.

**Textbox selection, resize, and move** — Click within 6px of a textbox border to select it (ProseMirror NodeSelection); resize via corner handles with live feedback; drag to move with margin-offset preservation; works in body, headers, and footers.

**Document API — image manipulation** — `images.crop`, `images.rotate`, `images.scale`, `images.flip`, `images.replace-source`; full control over alt text, captions, z-order, wrapping, and anchor; TIFF support added.

**Document API — hyperlinks** — `hyperlinks.insert`, `hyperlinks.wrap`, `hyperlinks.list`, `hyperlinks.patch`, `hyperlinks.remove`; pasted URLs automatically convert to real DOCX link elements.

**Document API — list operations** — `lists.apply`, `lists.continue`, `lists.restart`, `lists.remove`, `lists.getState`; level-specific formatting; control bullets, numbering, alignment, marker fonts, and indentation.

**Document API — block operations (v2 sessions)** — `blocks.merge` preserves first paragraph properties; `blocks.split`; `blocks.move`; returns affected ranges and transaction IDs.

**Document API — paragraph numbering** — `format.paragraph.setNumbering` attaches numbering to paragraphs; `blocks.list` surfaces list state; `format.paragraph.setMarkRunProps` controls marker appearance.

**Search in tracked deletions** — Find & Replace now searches text within deleted tracked changes, not just insertions.

**Cross-reference navigation** — Double-click a REF or NOTEREF field pointing at a footnote/endnote to navigate to that note.

**Mutations planning** — `mutations.planExecute` plans and executes mutations in a single operation with per-entry transactions and failure semantics.

**HTML extraction** — New `getHtml` operation to read document content as HTML.

**V2 package and runtime** — Unified v2 editor runtime with improved performance; v1 compatibility wiring for backward compatibility.

### Improvements

**List rendering fidelity** — First-line indent lists now compute marker suffix tab width from actual rendered tab stops instead of stale targets; justified text width is now correct.

**Footnote performance** — Warm-start reserve convergence reduces keystroke cost on 25-footnote documents from 75ms to 12ms; ONE pagination per keystroke instead of nine.

**Editor performance** — Block-node metadata transactions no longer trigger full-document numbering diffs; saves ~16ms per keystroke on 776-paragraph documents.

**Toolbar refresh** — Coalesce headless toolbar snapshots per microtask; eliminates redundant rebuilds on transaction + selectionUpdate bursts.

**IME composition** — Defer layout rerender and track-changes rewriting during input method editing to prevent conflicts.

**Font configuration robustness** — Malformed `fonts.bundled` configuration no longer crashes; defaults to full bundled pack with warning.

**Track changes — deletion handling** — Cross-paragraph deletes no longer split paragraphs in suggesting mode; position mapping no longer crashes; accept/reject now reports which decision was taken.

**URL paste intent detection** — Auto-linking now requires explicit URL intent (`www.`, `http(s)://`, `mailto:`, `tel:`, `sms:`) to prevent plain text or relative paths from being mistakenly linked.

**Passthrough nodes** — Inline passthrough nodes no longer attach content; instruction text lives in attrs.originalXml to fix MERGEFIELD export.

### Fixes

**Footnotes rendering** — Terminal-page reserve bump now ensures footnotes render when body fills last page (was silently dropping 0 of 6).

**Note caret and selection** — Multi-paragraph notes now track caret and selection correctly; arrow navigation no longer skips lines; goal-column preserved across presses; resolves against stale painted ranges via block identity.

**Note paragraph styles** — FootnoteText style now preserved on Enter, paste, and every paragraph-creation path; appendTransaction guard stamps missing styles after async mutations.

**Header/footer activation** — Double-click resolves note references only in body fragments; header/footer with behindDoc textboxes no longer break.

**Tracked-change review navigation** — Navigation no longer jumps and leaves the UI in inconsistent states.

**Comment behavior regressions** — Repaired regression in comment behavior after recent refactors.

**Format persistence** — `w:caps` now persists on export via text transform.

**List export** — Sync document XML before numbering pruning to preserve list definitions on export.

**Image resize handles** — Alignment with actual image position corrected.

**Link popover rendering** — Mount external popovers outside overflow:hidden containers to prevent clipping.

**Orphan references** — Removed orphan function calls that left the codebase in an inconsistent state.

**Security findings** — Remediated critical and high penetration test findings.

* chore(react): 1.13.0 [skip ci]

### What's New

**Footnotes and endnotes — full editor integration** — Double-click a reference marker to navigate to the note; delete from either side removes both marker and note; staged Backspace selects then removes; insert via `editor.commands.insertFootnote()`; caret and arrow navigation track correctly in multi-paragraph notes; font sizing respects document defaults.

**Textbox selection, resize, and move** — Click within 6px of a textbox border to select it (ProseMirror NodeSelection); resize via corner handles with live feedback; drag to move with margin-offset preservation; works in body, headers, and footers.

**Document API — image manipulation** — `images.crop`, `images.rotate`, `images.scale`, `images.flip`, `images.replace-source` for full control over alt text, captions, z-order, wrapping, and anchor; TIFF support added.

**Document API — hyperlinks** — `hyperlinks.insert`, `hyperlinks.wrap`, `hyperlinks.list`, `hyperlinks.patch`, `hyperlinks.remove`; pasted URLs automatically convert to real DOCX link elements.

**Document API — list operations** — `lists.apply`, `lists.continue`, `lists.restart`, `lists.remove`, `lists.getState` with level-specific formatting; control bullets, numbering, alignment, marker fonts, and indentation.

**Document API — block operations (v2 sessions)** — `blocks.merge` preserves first paragraph properties; `blocks.split`; `blocks.move`; returns affected ranges and transaction IDs.

**Document API — paragraph numbering** — `format.paragraph.setNumbering` attaches numbering to paragraphs; `blocks.list` surfaces list state; `format.paragraph.setMarkRunProps` controls marker appearance.

**Search in tracked deletions** — Find & Replace now searches text within deleted tracked changes, not just insertions.

**Cross-reference navigation** — Double-click a REF or NOTEREF field pointing at a footnote or endnote to navigate to that note.

**Mutations planning** — `mutations.planExecute` plans and executes mutations in a single operation with per-entry transactions and failure semantics.

**HTML extraction** — New `getHtml` operation to read document content as HTML.

**V2 package and runtime** — Unified v2 editor runtime with improved performance; v1 compatibility wiring for backward compatibility.

### Improvements

**List rendering fidelity** — First-line indent lists now compute marker suffix tab width from actual rendered tab stops instead of stale targets; justified text width is now correct.

**Footnote performance** — Warm-start reserve convergence reduces keystroke cost on 25-footnote documents from 75ms to 12ms; one pagination per keystroke instead of nine.

**Editor performance** — Block-node metadata transactions no longer trigger full-document numbering diffs; saves ~16ms per keystroke on 776-paragraph documents.

**Toolbar refresh** — Coalesce headless toolbar snapshots per microtask; eliminates redundant rebuilds on transaction + selectionUpdate bursts.

**IME composition** — Defer layout rerender and track-changes rewriting during input method editing to prevent conflicts.

**Font configuration robustness** — Malformed `fonts.bundled` configuration no longer crashes; defaults to full bundled pack with warning.

**Track changes — deletion handling** — Cross-paragraph deletes no longer split paragraphs in suggesting mode; position mapping no longer crashes; accept/reject now reports which decision was taken.

**URL paste intent detection** — Auto-linking now requires explicit URL intent (`www.`, `http(s)://`, `mailto:`, `tel:`, `sms:`) to prevent plain text or relative paths from being mistakenly linked.

**Passthrough nodes** — Inline passthrough nodes no longer attach content; instruction text lives in `attrs.originalXml` to fix MERGEFIELD export.

### Fixes

**Footnotes rendering** — Terminal-page reserve bump ensures footnotes render when body fills last page.

**Note caret and selection** — Multi-paragraph notes now track caret and selection correctly; arrow navigation no longer skips lines; goal-column preserved across presses.

**Note paragraph styles** — FootnoteText style now preserved on Enter, paste, and every paragraph-creation path.

**Header/footer activation** — Double-click resolves note references only in body fragments; behindDoc textboxes no longer break activation.

**Tracked-change review navigation** — Navigation no longer jumps and leaves the UI in inconsistent states.

**Comment behavior regressions** — Repaired regression in comment behavior after recent refactors.

**Format persistence** — `w:caps` now persists on export via text transform.

**List export** — Sync document XML before numbering pruning to preserve list definitions on export.

**Image resize handles** — Alignment corrected to match actual image position.

**Link popover rendering** — Mount external popovers outside `overflow:hidden` containers to prevent clipping.

**Orphan references** — Removed orphan function calls that left the codebase in an inconsistent state.

**Security** — Remediated critical and high penetration test findings.

* chore(vscode): 2.14.0 [skip ci]

### What's New

**Footnotes and endnotes — full editor integration** — Double-click a reference marker to navigate to the note. Staged Backspace selects the marker, second press removes it (and the note). Delete from the note area removes both marker and note. Caret and arrow navigation now track correctly in multi-paragraph notes. Insert notes via `editor.commands.insertFootnote()`. Font sizing respects document defaults.

**Textbox selection, resize, and move** — Click within 6px of a textbox border to select it as a ProseMirror NodeSelection instead of placing a caret. Drag corner handles to resize with live feedback. Drag the textbox to move; margins update to keep the opposite corner fixed. Works in body, headers, and footers.

**Document API — image manipulation** — `images.crop`, `images.rotate`, `images.scale`, `images.flip`, `images.replace-source`. Full control over alt text, captions, z-order, wrapping, and anchor. TIFF support added.

**Document API — hyperlinks** — `hyperlinks.insert`, `hyperlinks.wrap`, `hyperlinks.list`, `hyperlinks.patch`, `hyperlinks.remove`. Pasted URLs automatically convert to real DOCX link elements.

**Document API — list operations** — `lists.apply`, `lists.continue`, `lists.restart`, `lists.remove`, `lists.getState`. Level-specific formatting. Control bullets, numbering, alignment, marker fonts, and indentation.

**Document API — block operations (v2 sessions)** — `blocks.merge` preserves first paragraph properties; `blocks.split`, `blocks.move`. Returns affected ranges and transaction IDs.

**Document API — paragraph numbering** — `format.paragraph.setNumbering` attaches numbering to paragraphs. `format.paragraph.setMarkRunProps` controls marker appearance.

**Search in tracked deletions** — Find & Replace now searches text within deleted tracked changes, not just insertions.

**Cross-reference navigation** — Double-click a REF or NOTEREF field pointing at a footnote or endnote to navigate to that note.

**Mutations planning** — `mutations.planExecute` plans and executes mutations in a single operation with per-entry transactions and failure semantics.

**HTML extraction** — New `getHtml` operation to read document content as HTML.

**V2 package and runtime** — Unified v2 editor runtime with improved performance and v1 compatibility wiring for backward compatibility.

### Improvements

**Footnote performance** — Warm-start reserve convergence reduces keystroke cost on 25-footnote documents from 75ms to 12ms. One pagination per keystroke instead of nine.

**Editor performance** — Block-node metadata transactions no longer trigger full-document numbering diffs; saves ~16ms per keystroke on 776-paragraph documents. Toolbar snapshots now coalesce per microtask, eliminating redundant rebuilds.

**List rendering** — First-line indent lists now compute marker suffix tab width from rendered tab stops instead of stale targets. Justified text width is now correct.

**IME composition** — Layout rerender and track-changes rewriting now defer during input method editing to prevent conflicts.

**Font configuration robustness** — Malformed `fonts.bundled` configuration no longer crashes; defaults to full bundled pack with warning.

**Track changes — deletion handling** — Cross-paragraph deletes no longer split paragraphs in suggesting mode. Position mapping no longer crashes. Accept/reject now reports which decision was taken.

**URL paste intent detection** — Auto-linking now requires explicit URL intent (`www.`, `http(s)://`, `mailto:`, `tel:`, `sms:`) to prevent plain text or relative paths from being mistakenly linked.

**Passthrough nodes** — Inline passthrough nodes no longer attach content; instruction text lives in attrs.originalXml to fix MERGEFIELD export.

### Fixes

**Footnotes rendering** — Terminal-page reserve bump now ensures footnotes render when body fills last page.

**Note caret and selection** — Multi-paragraph notes now track c…
* docs: security - update privacy policy

docs: security - update privacy policy

* Add commercial license TOS

Add commercial license TOS

Ported-From-Source-Repo: superdoc/orbit
Ported-From-Source-Commit: 3455cf98be4222bddd920c0f79b4532577999b1d
Ported-Public-Prefix: superdoc/public
…lection after remove (IT-1230, IT-1231)

Reject attaching an anchored-metadata range that overlaps an existing anchor (INVALID_TARGET) instead of open-slicing it into a duplicate id/tag; normalize the selection on remove so a stale NodeSelection cannot strand the caret; store the canonical run-wrapped SDT content shape. Regression-tested against a real editor and schema.

Ported-From-Source-Repo: superdoc/orbit
Ported-From-Source-Commit: e50e2de7398852f9cd9a60c1593013c677553b84
Ported-Public-Prefix: superdoc/public
…#392)

* fix(super-editor): sync custom xml writes through part-sync

- metadata.* and customXml.parts.* writes routed through the parts
  mutation layer so partChanged fires and part-sync publishes
- a shared sandbox-and-diff wrapper commits every package path a custom
  xml create/update/remove touches (item, itemProps, item rels, document
  rels), not just the item xml
- two-client regression tests cover metadata attach and customXml
  create/patch/remove, including the remote client's converted xml

* fix(super-editor): record custom xml tombstones on remote part-sync deletes

Remote part deletions removed the part from convertedXml but never
populated removedCustomXmlPaths, so a collaborator whose original docx
contained the part re-emitted it on export. The consumer now records
tombstones for deleted custom xml storage parts, props parts, and item
rels (including rels-linked props paths), and clears stale tombstones
when a part is re-created remotely.

* fix(super-editor): tombstone absent custom xml parts on late-join and clear bibliography cache

- late joiners prune local custom xml parts absent from an authoritative
  parts map (a peer deleted them before this client joined), recording
  export tombstones through the same mutateParts mechanism hydration uses
- tombstoning a path now also invalidates converter caches, so deleting
  the bibliography storage part clears converter.bibliographyPart and
  export cannot resurrect it

* fix(super-editor): record hydration tombstones only after the prune mutation commits

Tombstones (and the bibliography cache clear) were applied before
mutateParts ran; a mutation failure rolled back the part store but left
the converter tombstoned. The prune now collects paths and records them
only after the mutation succeeds.

* fix(super-editor): clear stale custom xml tombstones during hydration

A client that tombstoned a custom xml part (e.g. deleted while offline)
and then rehydrated from an authoritative map containing the recreated
part kept the stale tombstone, so export dropped the recreated part.
Hydration now clears tombstones for present custom xml paths at the same
post-mutation point where absent paths are tombstoned - symmetric to the
live consumer path.

* fix(super-editor): invalidate bibliography cache on remote custom xml writes

Remote writes and hydration cleared stale tombstones but left the
bibliography cache pointing at the old content, so export rebuilt the
part from the stale cache over the collaborator's version. Written and
present custom xml paths now invalidate converter caches, and the part
path predicates agree on casing.

* fix(super-editor): clear hydration tombstones only for parts that hydrated

A key present in the authoritative map whose envelope failed to decode
never lands in convertedXml; clearing its tombstone would let export
copy the stale original zip entry through instead of dropping the part.

* ci: retrigger checks on current head

* fix(super-editor): scope hydration tombstone clearing to hydrated parts and make converter-state application rollback-safe

- hydration only clears a custom xml tombstone when the part actually
  hydrated this pass (a decode+op succeeded), not merely because a stale
  local copy is present; a failed-to-hydrate authoritative part no longer
  resurrects the stale local one on export
- applyConverterState is atomic and runs only after the part-store
  mutation durably commits, so a compound rollback cannot leave
  removedCustomXmlPaths / bibliographyPart mutated while the store is
  restored

* fix: address PR review comments on #392

* fix(super-editor): validate metadata payload before mutating on attach

metadata.attach serialized the payload only in the live path, inside the
part-sync sandbox that runs after the anchor is inserted. A non-serializable
payload (a BigInt or a cyclic object, neither of which the payload type can
rule out) therefore threw while building the envelope, after wrapRangeInAnchor
had already dispatched the anchor transaction, leaving an inline content
control with no matching customXml payload.

Build the envelope during the attach preview as well, so serialization fails
before the operation touches the document. Adds a regression test asserting a
cyclic payload throws without dispatching an anchor transaction.

* refactor(super-editor): serialize only the new entry in the attach preview

The attach preview rebuilt the whole metadata envelope to validate one payload,
re-serializing every existing entry in the namespace before the live path
serialized them again. Serialize just the new entry — existing entries were
already validated when they were written — so the preview stays a fail-fast
check for non-serializable payloads without the per-attach serialization cost.

* test(super-editor): fix concurrent-seed race in collaborator export test

The two-client export test created both collaborative editors on unsynced
ydocs, so both bootstrapped as a new room and both seeded the baseline
package into their parts maps as concurrent Yjs writes. The map-key conflict
on word/_rels/document.xml.rels is resolved by clientID, and with the wrong
random winner the second client's baseline seed discarded the first client's
published rels update, dropping the customXml document relationship from the
export (~50% failure rate; deterministically reproducible by pinning
clientIDs). Real clients receive room state before bootstrapping, see the
capability marker, and hydrate instead of seeding, so the conflict is an
artifact of the test's join order.

Create the second editor only after syncing the first editor's seeded state,
matching the real join flow, and wait for the received document rels content
(the baseline part always exists, so an existence check passed before the
remote update landed).

Ported-From-Source-Repo: superdoc/orbit
Ported-From-Source-Commit: 13119b74e8785850867256c4a8fffb06b41e73c3
Ported-Public-Prefix: superdoc/public
@superdoc-bot
superdoc-bot Bot requested a review from a team as a code owner July 11, 2026 05:55
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@caio-pizzol
caio-pizzol merged commit 3c0600e into stable Jul 13, 2026
55 checks passed
@caio-pizzol
caio-pizzol deleted the merge/main-into-stable-2026-07-11 branch July 13, 2026 12:50
@superdoc-bot

superdoc-bot Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

🎉 This PR is included in superdoc-cli v0.21.2

The release is available on GitHub release

@superdoc-bot

superdoc-bot Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

🎉 This PR is included in superdoc-sdk v1.20.2

@superdoc-bot

superdoc-bot Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

🎉 This PR is included in @superdoc-dev/mcp v0.16.2

The release is available on GitHub release

@superdoc-bot

superdoc-bot Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

🎉 This PR is included in superdoc v1.44.2

The release is available on GitHub release

@superdoc-bot

superdoc-bot Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

🎉 This PR is included in @superdoc-dev/react v1.15.2

The release is available on GitHub release

@superdoc-bot

superdoc-bot Bot commented Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

🎉 This PR is included in vscode-ext v2.16.2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants