[DGINXREAL]

Summary

Undo (Ctrl+Z) removed too much when typing fast

• ProseMirror's history merged all adjacent typing less than 500 ms apart into one undo step, so a fast typist lost a whole paragraph with one Ctrl+Z. The new UndoGrouping extension (src/editor/undoGrouping.ts) starts a new undo step at every word start. Pauses still split steps as before; IME composition is untouched.
• The editor is reused across notes and loading a note was undoable, so Ctrl+Z right after opening a note could restore the previous note's content and autosave it. clearUndoHistory now resets the undo stack after a note load and after an external (sync / other window) edit, keeping all other plugin state.

Cut/copy + paste came back half markdown, half formatted

• With a non-rich copy format (default: Markdown) the clipboard holds only markdown text. Pasted back, paste rules revived bold/italic but headings stayed literal # … and empty paragraphs vanished. The copied slice is now kept in memory (never persisted, since it may be decrypted vault content) and restored exactly when the clipboard still holds the text we wrote (src/editor/clipboardMemory.ts). Other apps still receive the configured format; code blocks keep plain-text paste.
• Known limit: separate note windows don't share the memory, so a cross-window paste keeps the old behaviour.

Dependencies

• Merges Dependabot build(deps): bump the minor-and-patch group across 1 directory with 31 updates #62 (npm minor/patch group, 31 updates) and build(deps): bump the minor-and-patch group across 1 directory with 17 updates #61 (Cargo minor/patch group, 17 updates).
• build(deps): bump the minor-and-patch group across 1 directory with 17 updates #61 failed CI on Linux: it raised tauri-plugin-deep-link to 2.6.2, which builds a rust-ini ParseOption literal that no longer compiles against rust-ini 0.21.3. Bumped to 2.6.3, which fills the new fields with defaults.
• vitest + @vitest/coverage-v8 → 5.0.0 together. Supersedes build(deps-dev): bump @vitest/coverage-v8 from 4.1.11 to 5.0.0 #48 and build(deps-dev): bump vitest from 4.1.11 to 5.0.0 #49, which failed because each bumped only one of the pair.
• npm audit fix (dompurify, handlebars, source-map-js, undici, vite): npm audit now reports 0 vulnerabilities.
• Verified locally: cargo fmt --check, cargo clippy -D warnings, cargo test (675 passed), npm run test:coverage (gates green), npm run build.

Test plan

• npx tsc --noEmit
• npx vitest run (1058 passed), incl. real-Tiptap tests for word-wise undo, history reset, and a cut → paste round trip
• Manual: type a sentence fast, Ctrl+Z removes one word at a time
• Manual: open note A, edit, switch to note B, Ctrl+Z does nothing harmful
• Manual: Ctrl+A, Ctrl+X, Ctrl+V on a formatted note restores it exactly

🤖 Generated with Claude Code