v0.4.0

Added

Unified Anchor System

• ContentAnchor for block-level, point, and range anchors
• ContentAnchorUri for URI format parsing/formatting (#blockId/start-end)
• Mark::Anchor { id } variant for named anchor marks in text
• Full bidirectional conversion between anchor types

Phantom Extension

• PhantomClusters for off-page annotation clusters
• PhantomCluster with anchor, scope, author, and metadata
• Phantom with position, size, content, and connections
• PhantomScope for visibility control (Shared, Private, Role-based)
• PhantomConnection with style options (Line, Arrow, Dashed)
• Connection validation with cycle detection
• Archive integration: read_phantoms() and write_phantoms()

Scoped Signatures

• SignatureScope for layout attestation
• JCS (RFC 8785) serialization for deterministic scope hashing
• Signature.scope field for scoped signature support
• with_layout() builder for adding layout hashes

Declarative Validation Rules

• ValidationRule::ContainsUppercase - requires uppercase letter
• ValidationRule::ContainsLowercase - requires lowercase letter
• ValidationRule::ContainsDigit - requires digit
• ValidationRule::ContainsSpecial - requires special character
• ValidationRule::MatchesField - cross-field validation

Collaboration

• Collaborator.color field for real-time cursor coloring
• with_color() builder method

Spec Compliance: Core Struct Fields (PR #66)

• PhantomsRef struct and phantoms field on Manifest
• KeyManagementAlgorithm enum and key_management field on EncryptionMetadata
• ephemeral_public_key field on Recipient
• TrustedTimestamp struct and timestamp field on Signature

Spec Compliance: Content & Extension Fields (PR #67)

• CodeToken struct, highlighting and tokens fields on CodeBlock
• FigureNumbering enum, Subfigure struct, numbering and subfigures fields on FigureBlock
• uses and restate fields on Theorem
• StructuralInduction, Counting, Probabilistic variants on ProofMethod
• start_line field on Algorithm
• docket field on Caption

Spec Compliance: Key Wrapping (PR #71)

• EcdhEsKeyWrapper and EcdhEsKeyUnwrapper for ECDH-ES+A256KW key agreement (RFC 7518 / RFC 3394)
• WrappedKeyData struct for wrapped content encryption keys
• New key-wrapping feature flag (depends on encryption, adds aes-kw and hkdf)

Spec Compliance: Extended Key Wrapping + BOM (PR #73)

• RsaOaepKeyWrapper and RsaOaepKeyUnwrapper for RSA-OAEP-256 key wrapping
• Pbes2KeyWrapper and Pbes2KeyUnwrapper for PBES2-HS256+A256KW password-based key wrapping
• New key-wrapping-rsa and key-wrapping-pbes2 feature flags
• UTF-8 BOM stripping for all JSON files in archive reader

Spec Compliance: Form Conditional Validation (PR #75)

• ConditionalValidation, Condition, ConditionOperator, ConditionalAction types
• conditional_validation field on all 7 form field types
• Supports equals, notEquals, isEmpty, isNotEmpty operators

Spec Compliance: Advanced Presentation (PR #76)

• TypographyConfig with LineNumbering, BaselineGrid, HyphenationConfig
• ColumnLayout and GridLayout with GridArea for multi-column and CSS Grid layouts
• TocConfig with TocLeaders for table of contents configuration
• FootnotesConfig, FootnotePosition, FootnoteSeparator for footnote placement and styling
• EndnotesConfig for endnote section configuration

Changed

Spec Compliance: Validation Fixes (PR #70)

• Relax lineage validation: root (non-forked) documents can now reach Frozen/Published without lineage
• Enforce manifest-first ordering in archive reader (error instead of silent acceptance)
• Add decompression bomb protection: 256 MiB file size limit with declared-size pre-check and bounded reads
• Add is_url_safe_path() utility for spec SHOULD-level asset path validation
• Add FileTooLarge and InvalidArchiveStructure error variants

Dependencies

• Coordinated RustCrypto ecosystem upgrade:
  • rand_core 0.6 → 0.10 (stable); der 0.7 → 0.8 (stable)
  • p256 0.13 → 0.14.0-rc; p384 0.13 → 0.14.0-rc; ecdsa 0.16 → 0.17.0-rc
  • rsa 0.9 → 0.10.0-rc; x509-cert 0.2 → 0.3.0-rc
  • Migrate from OsRng / fill_bytes to getrandom::fill and Generate trait
  • Use rsa::sha2::Sha256 for RSA operations (sha2 0.10 → 0.11 split)
  • Use PublicKey::from_sec1_bytes for P-256 key parsing (replaces EncodedPoint chain)
  • Use tbs_certificate() / serial_number() / extensions() accessors (x509-cert 0.3 made fields private)
• Replace fips204 with RustCrypto ml-dsa 0.1.0-rc for ML-DSA-65 signatures (uses standard signature::Signer/Verifier traits, 32-byte seed key format)
• Bump zip from 7.2 to 8.0 (resolves yanked 7.4.0; no code changes required)
• Bump assert_cmd from 2.0 to 2.1.2
• Update keccak from 0.1.5 (yanked) to 0.1.6

Code Quality

• Enable clippy::pedantic in cdx-cli (already zero warnings; prevents regressions)
• Remove unused PropertySchema variants (Integer, Number, Boolean) and their match arms
• Replace strum derive macros for ~10 enum Display implementations (PR #55)
• Extract shared crypto helpers into crypto_common module (PR #57)
• Fix all pedantic lint warnings across workspace (PR #58)
• Tighten cargo-deny configuration: yanked = "deny", remove unused license allowances
• Replace clippy::too_many_arguments suppressions with parameter structs in CLI (PR #64)
• Bump uniffi from 0.28 to 0.31 in cdx-swift-bridge (PR #65)

Breaking Changes

• Paginated presentation: blockRef renamed to blockId, blockRefs to blockIds
• Forms: Removed ValidationRule::Custom (executable expressions prohibited per DD-010/DD-019)
• EquationGroup (PR #74): Equation renamed to EquationLine, latex field renamed to value, equations field renamed to lines, added tag field, added Alignat environment variant
• Legal SignatureBlock (PR #74): Signatory and FirmInfo flattened into LegalSigner, added role field on LegalSignatureBlock
• ML-DSA (PR #78): Switched from fips204 to RustCrypto ml-dsa crate; MlDsaSigner::from_bytes now accepts a 32-byte seed (was 4032-byte expanded key); key/signature bytes are incompatible with prior fips204-based output

CI

• Increase cargo-tarpaulin timeout to 180s and make coverage non-blocking (continue-on-error)

Documentation

• Clarified lineage requirements: parent only required for forked documents
• Clarified hash scope: document ID covers semantic content only, not layout
• Fix MSRV in CONTRIBUTING.md (1.85 → 1.88)
• Add security audit documentation (cargo audit, cargo deny) to CONTRIBUTING.md