feat: usable spatial canvas — drag/pan/zoom, link UX, wiki-link editing

[hyperpolymath]

The final roadmap follow-up (Import/export ✅ → Accessibility+PWA ✅ → Differentiators ✅ → Usable canvas). Makes the spatial canvas directly usable with a mouse and turns links into first-class editor objects. Also lands wiki-link editing (the [[…]] parser shipped in #26; the picker + reconciliation live here as planned).

Canvas interaction (CanvasView + DomBindings)

• Drag notes: mousedown on a note starts a drag; one set of document-level mousemove/mouseup listeners moves it (delta ÷ zoom) even when the pointer leaves the note. Shift-click adds to the selection.
• Drag the background to pan (incremental PanCanvas); wheel to zoom.
• Keyboard equivalents (arrow-move / Alt-nudge) from feat: keyboard-accessible canvas (WCAG 2.2 AA) + installable PWA #27 still apply.

Link-creation UX (NoteEditor)

• Links and backlinks now render note titles, not raw UUIDs, and are clickable to navigate.
• An "add link" picker: type to filter other notes, click to link.
• A "Linked from" backlinks panel.

Wiki-link editing (core)

• Notebook::set_content derives [[Title]] links from a note's content (case-insensitive resolution, self-reference skipped, additive — never removes on text deletion). wasm update_content now returns a delta so target backlinks update in the UI too.

Verified

• cargo test — 29 unit tests (incl. set_content derivation) plus property/golden suites.
• deno task test:ui — 10 tests, incl. a new wiki-link delta contract across the wasm boundary.
• deno lint + cargo fmt --check + cargo clippy --features wasm -D warnings clean.
• E2E (headless Chromium): the picker adds a link shown by title; the backlinks panel lists the source; typing [[Alpha]] derives the link; a canvas note drags 150→230px; axe-core still 0 serious/critical WCAG 2.2 AA.

With this, the README MVP checklist is functionally complete (create/edit/delete, spatial canvas with drag-and-drop, bidirectional linking, search, local storage), plus the post-MVP differentiators (wiki-links, graph view, agents, import/export, PWA, accessibility). Known-red estate governance checks (ReScript-language ban, scorecard staleness) remain pre-existing policy on main and out of scope.

🤖 Generated with Claude Code

https://claude.ai/code/session_01PAEqVP7Y3bZDhtAaPUTbps

---

Generated by Claude Code

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

🔍 Hypatia Security Scan

Findings: 59 issues detected

Severity	Count
🔴 Critical	1
🟠 High	26
🟡 Medium	32

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in boj-build.yml",
    "type": "missing_timeout_minutes",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "missing_timeout_minutes",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "missing_timeout_minutes",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in hypatia-scan.yml",
    "type": "missing_timeout_minutes",
    "file": "hypatia-scan.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence