ODT: read and write tracked changes (text:tracked-changes)

[dkhlapov]

Gap 19 in docs/gaps.md (ODT depth): ODT files now keep their tracked changes.

Builds on #1516 (RTF tracked changes). This branch contains #1516's two commits and uses the same revision model. Please merge #1516 first; after that, this PR's own diff is the ODT commits.

What was wrong

ODT import skipped text:tracked-changes. The deleted text stored in each change region was lost, and inserted text became plain text. Export wrote no change tracking.

What changed

crates/formats/src/odt.rs, following ODF 1.3 Part 3 §5.5:

• Import:
  • Each text:changed-region gives its author and date.
  • Text between text:change-start and text:change-end becomes a tracked insertion.
  • At each text:change point, the region's deleted content is put back as tracked-deleted text. Deleted whole paragraphs keep their deleted paragraph marks, so Accept All and Reject All give the right paragraphs.
  • An insertion nested inside a deletion gives text that is both inserted and deleted.
  • An open body insertion doesn't leak onto deleted paragraph marks.
• Export: the tracked-changes regions are written with change-start/end for insertions, and a text:change point plus the region for deletions. Text that is both inserted and deleted is written as one deletion region with a nested insertion range.
  • dc:date is always written; the save time is used when a revision has no date.
  • Change marks may sit directly in the body or in table cells, which §5.5.7 allows.
• Hostile input is bounded: at most 10,000 regions and 64 open insertions; author and date capped at 256 characters; the first of any duplicate ids wins; each deletion is placed once.

Shared model (crates/formats/src/model.rs), on top of #1516's:

• RevMark.id keeps separate ODT regions as separate revisions. RTF leaves it empty and keeps merging by kind, author and date.
• Para.mark_ins / mark_del carry paragraph-mark revisions, and RTF: read and write tracked changes (insertions, deletions, authors, times) #1516's from_doc_tracked exports them.
• js-sys is added for wasm32 only (already in Cargo.lock), for the save time, as crates/pdf does.

Docs: docs/file-format-parity.md ODT row (deleted pictures and tables are dropped from deletions), docs/gaps.md gap 19, and a ROADMAP.md progress-log entry, each with its status line and revision history.

Tests

These failed before the change:

• import of an insertion by A and a deletion by B, with kinds, authors and dates;
• deleted whole paragraphs;
• an export → import round trip;
• engine Accept All and Reject All;
• inserted_then_deleted_text_keeps_both_marks, with a single revision kept after a save;
• exported_changes_always_have_a_date_and_keep_paragraph_separators;
• odt_inserted_then_deleted_text_round_trips;
• a_deleted_mark_inside_an_insertion_is_not_inserted;
• odt_deleted_mark_inside_an_insertion_survives_reject_all.

Coverage: insertions_end_before_a_table_and_inside_a_cell, plus hostile-input tests (20,000 regions, bad ids, nesting).

cargo xtask ci: all 6 steps passed (fmt, clippy, test, assets, layers, wasm). Not checked in LibreOffice.

Review

• The first review found that this PR and RTF: read and write tracked changes (insertions, deletions, authors, times) #1516 stored revisions in two different shapes in the shared model. The branch was rebuilt on RTF: read and write tracked changes (insertions, deletions, authors, times) #1516's model, adding change ids and paragraph-mark revisions; that also fixed inserted-then-deleted text losing its insertion.
• A re-review found an insertion leaking onto deleted paragraph marks, and one deletion being split into several regions. Fix round 2 fixed both. The final re-review approved.
• Left as is:
  • nested insertions in foreign files are read only if their region comes first, which our writer always does;
  • pictures and bookmarks split one insertion into several regions;
  • a deleted mark before a table or at the end of a story becomes a plain break;
  • paragraphs with tracked text aren't whitespace-trimmed;
  • export isn't byte-for-byte repeatable when a revision has no date.
• Overlaps: ODT import: keep each section’s page properties (#1379) #1506 (ours, ODT sections) adds model::Para.section and changes ODT import, so small textual conflicts are expected. ODT: read headers and footers from the master page (#863) #873, M12: RTF and ODT footnotes and endnotes round-trip #1075 and fix: resolve open issues and maintain multi-platform build scope #1472 also touch odt.rs.

🤖 Generated with Claude Code

[echelon]

I rebased this onto main now that #1516 has landed (squash-merged), keeping only the two ODT commits, and merged its ODT import with the per-section page settings from #1506 (parse_tracked now returns the last section too). formats/engine clippy and the ODT tests pass.

[echelon]

Thanks for the contribution, @dkhlapov! This has landed in main. If you haven't already, come join us on Discord: https://discord.gg/artcraft