v0.4.0 Wave 17: local comments (anchored threads, reply/resolve/assign, PPTX persistence)

[900Labs]

Summary

Wave 17 adds local comments — threaded annotations anchored to slides, shapes, or text ranges. Support reply, resolve, assignment, and deletion. Comments persist in the PPTX custom XML manifest and survive round-trip.

What changed

Model (slides-core)

• Comment, CommentThread, CommentAnchor (slide / shape / text-range). Additive Deck.comments (#[serde(default)]).
• 5 reversible commands: AddComment, ReplyToComment, SetCommentResolved, AssignComment, DeleteCommentThread.

PPTX (slides-pptx)

• Comments serialized as JSON inside a CDATA section of the 900Slides manifest XML.
• CDATA split on ]]> to prevent corruption from comment bodies containing that sequence (found during review).
• 7 round-trip tests including the ]]> edge case.

Desktop (apps/desktop/)

• Comments sidebar (Comments.svelte, +697 lines): toggle with C, threads grouped by slide, reply/resolve/assign/delete.
• Context menu: "Add comment" on shapes, "Comment on selection" on text ranges.
• 5 Tauri commands, all transactional. Zero @html (no XSS).

Review process

Control-tower pipeline applied: review subagent (mechanical line-by-line) + contextual triage. One WARNING found and fixed before merge (CDATA ]]> injection). No CRITICAL issues.

Test results

• 337 workspace tests pass (slides-core +12, slides-pptx +7).
• npm run check (svelte-check): 0 errors, 0 warnings.
• scripts/verify-local.sh: green. scripts/verify-public-release.sh: green.