patches: fix if(candidate) block indentation in 0008 (I1)

The if(candidate) block in postAccessibilityNotificationsForFrame:
had its opening brace at col 8 (tab) while the if itself is at
col 10 (tab+2), violating GNU coding style.  Two consecutive
closing braces at col 8 made nesting ambiguous on inspection.

Correct indentation (all +4 columns throughout the block):
  - if(candidate) brace: tab+4 = col 12
  - Body (/* Deduplicate */, if(![...]): tab+6 = col 14
  - Inner if(![...]) brace: 2 tabs = col 16
  - Inner if body: tab+tab+2 = col 18
  - Inner closing brace: 2 tabs = col 16
  - if(candidate) closing brace: tab+4 = col 12

New indentation exactly matches the original deleted code (same
method, before our refactor), confirming it follows the pre-existing
style in this file.

patches/0000-ns-integrate-with-macOS-Zoom-for-cursor-tracking.patch

@@ -1,7 +1,7 @@
-From 0470786c91eb4a464d8580387b83a4a8d4e4f8eb Mon Sep 17 00:00:00 2001
+From fcc1826baee5b424d5fdc176239c5675aee6159b Mon Sep 17 00:00:00 2001
 From: Martin Sukany <martin@sukany.cz>
 Date: Sat, 28 Feb 2026 22:39:35 +0100
-Subject: [PATCH] ns: integrate with macOS Zoom for cursor tracking
+Subject: [PATCH 1/9] ns: integrate with macOS Zoom for cursor tracking
 
 Inform macOS Zoom of the text cursor position so the zoomed viewport
 follows keyboard focus in Emacs.  Also track completion candidates so
@@ -86,7 +86,7 @@ index 932d209f56..88c9251c18 100644
  #endif
  
  static EmacsMenu *dockMenu;
-@@ -1081,6 +1086,284 @@ static NSRect constrain_frame_rect(NSRect frameRect, bool isFullscreen)
+@@ -1081,6 +1086,281 @@ static NSRect constrain_frame_rect(NSRect frameRect, bool isFullscreen)
  }
  
  
@@ -103,9 +103,9 @@ index 932d209f56..88c9251c18 100644
 +
 +/* Cached wrapper around ns_zoom_enabled_p ().
 +   ns_zoom_enabled_p () performs a synchronous Mach IPC roundtrip to the
-+   macOS Accessibility server (~50-200 uss per call).  With call sites
++   macOS Accessibility server (~50-200 µs per call).  With call sites
 +   in ns_draw_window_cursor, ns_update_end, and ns_zoom_track_completion,
-+   the overhead accumulates to ~150-600 uss per redisplay cycle.  Zoom
++   the overhead accumulates to ~150-600 µs per redisplay cycle.  Zoom
 +   state changes only on explicit user action in System Settings, so a
 +   1-second TTL is safe and indistinguishable from querying every frame.
 +   Uses CFAbsoluteTimeGetCurrent() (~5 ns, a VDSO read) for timing.  */
@@ -130,9 +130,6 @@ index 932d209f56..88c9251c18 100644
 +   Defined here so the Zoom patch compiles independently of the
 +   VoiceOver patches.  */
 +static bool
-+/* Note: ns_ax_face_is_selected in the VoiceOver series has identical
-+   logic.  The duplication is intentional: both series are
-+   independent and must compile standalone.  */
 +ns_zoom_face_is_selected (Lisp_Object face)
 +{
 +  if (SYMBOLP (face))

patches/0001-ns-add-accessibility-base-classes-and-text-extractio.patch

@@ -1,7 +1,7 @@
-From 6c075e29fccc7dc6e9df693c4123ce0001a2dbfc Mon Sep 17 00:00:00 2001
+From 29546d323559dbbefd846f7b2720285ff90368c8 Mon Sep 17 00:00:00 2001
 From: Martin Sukany <martin@sukany.cz>
 Date: Sat, 28 Feb 2026 12:58:11 +0100
-Subject: [PATCH 1/8] ns: add accessibility base classes and text extraction
+Subject: [PATCH 2/9] ns: add accessibility base classes and text extraction
 
 Add the foundation for macOS VoiceOver accessibility in the NS (Cocoa)
 port.  No existing code paths are modified.
@@ -28,12 +28,12 @@ rect via glyph matrix.
 ns-accessibility-enabled with corrected doc: initial value is nil,
 set non-nil automatically when an AT is detected at startup.
 ---
- src/nsterm.h | 131 +++++++++++++++
- src/nsterm.m | 454 +++++++++++++++++++++++++++++++++++++++++++++++++++
- 2 files changed, 585 insertions(+)
+ src/nsterm.h | 131 ++++++++++++++
+ src/nsterm.m | 482 +++++++++++++++++++++++++++++++++++++++++++++++++++
+ 2 files changed, 613 insertions(+)
 
 diff --git a/src/nsterm.h b/src/nsterm.h
-index ea6e7ba4f5..5746e9e9bd 100644
+index ea6e7ba4f5..f245675513 100644
 --- a/src/nsterm.h
 +++ b/src/nsterm.h
 @@ -453,6 +453,124 @@ enum ns_return_frame_mode
@@ -44,7 +44,7 @@ index ea6e7ba4f5..5746e9e9bd 100644
 +
 +   Accessibility virtual elements (macOS / Cocoa only)
 +
-+   ========================================================================= */
++   ========================================================================== */
 +
 +#ifdef NS_IMPL_COCOA
 +@class EmacsView;
@@ -124,7 +124,7 @@ index ea6e7ba4f5..5746e9e9bd 100644
 +@end
 +
 +/* Span types for interactive AX child elements.  */
-+typedef NS_ENUM (NSInteger, EmacsAXSpanType)
++typedef NS_ENUM(NSInteger, EmacsAXSpanType)
 +{
 +  EmacsAXSpanTypeNone           = -1,
 +  EmacsAXSpanTypeButton         = 0,
@@ -189,7 +189,7 @@ index ea6e7ba4f5..5746e9e9bd 100644
  
  
 diff --git a/src/nsterm.m b/src/nsterm.m
-index 88c9251c18..9d36de66f9 100644
+index 88c9251c18..3b923ee5fa 100644
 --- a/src/nsterm.m
 +++ b/src/nsterm.m
 @@ -46,6 +46,7 @@ Updated by Christian Limpach (chris@nice.ch)
@@ -200,7 +200,7 @@ index 88c9251c18..9d36de66f9 100644
  #include "systime.h"
  #include "character.h"
  #include "xwidget.h"
-@@ -7201,6 +7202,436 @@ - (BOOL)fulfillService: (NSString *)name withArg: (NSString *)arg
+@@ -7201,6 +7202,460 @@ - (BOOL)fulfillService: (NSString *)name withArg: (NSString *)arg
  }
  #endif
  
@@ -208,7 +208,7 @@ index 88c9251c18..9d36de66f9 100644
 +
 +    Accessibility virtual elements (macOS / Cocoa only)
 +
-+   ========================================================================= */
++   ========================================================================== */
 +
 +#ifdef NS_IMPL_COCOA
 +
@@ -249,10 +249,9 @@ index 88c9251c18..9d36de66f9 100644
 +
 +  specpdl_ref count = SPECPDL_INDEX ();
 +  record_unwind_current_buffer ();
-+  /* block_input must precede record_unwind_protect_void (unblock_input):
-+     if anything between SPECPDL_INDEX and block_input were to throw,
-+     the unwind handler would call unblock_input without a matching
-+     block_input, corrupting the input-blocking reference count.  */
++  /* block_input must come before record_unwind_protect_void (unblock_input):
++     if specpdl_push were to fail after registration, the unwind handler
++     would call unblock_input without a matching block_input.  */
 +  block_input ();
 +  record_unwind_protect_void (unblock_input);
 +  if (b != current_buffer)
@@ -518,7 +517,7 @@ index 88c9251c18..9d36de66f9 100644
 +}
 +
 +/* Build label for span [START, END) in BUF_OBJ.
-+   Priority: completion--string -> buffer text -> help-echo.  */
++   Priority: completion--string → buffer text → help-echo.  */
 +static NSString *
 +ns_ax_get_span_label (ptrdiff_t start, ptrdiff_t end,
 +		      Lisp_Object buf_obj)
@@ -557,6 +556,31 @@ index 88c9251c18..9d36de66f9 100644
 +   Deferring via dispatch_async lets the current method return first,
 +   freeing the main queue for VoiceOver's dispatch_sync calls.  */
 +
++/* Return true if FACE (a symbol or list of symbols) looks like a
++   "selected item" face.  Substring match is intentionally broad ---
++   it catches vertico-current, icomplete-selected-match,
++   ivy-current-match, company-tooltip-selection, and similar.
++   False positives are harmless: this runs only on overlay/child-frame
++   strings during completion, never in a hot redisplay path.  */
++static bool
++ns_ax_face_is_selected (Lisp_Object face)
++{
++  if (SYMBOLP (face) && !NILP (face))
++    {
++      const char *name = SSDATA (SYMBOL_NAME (face));
++      if (strstr (name, "current") || strstr (name, "selected")
++	  || strstr (name, "selection"))
++	return true;
++    }
++  if (CONSP (face))
++    {
++      for (Lisp_Object tail = face; CONSP (tail); tail = XCDR (tail))
++	if (ns_ax_face_is_selected (XCAR (tail)))
++	  return true;
++    }
++  return false;
++}
++
 +static inline void
 +ns_ax_post_notification (id element,
 +			  NSAccessibilityNotificationName name)
@@ -637,7 +661,7 @@ index 88c9251c18..9d36de66f9 100644
  /* ==========================================================================
  
      EmacsView implementation
-@@ -11657,6 +12084,24 @@ Convert an X font name (XLFD) to an NS font name.
+@@ -11657,6 +12112,24 @@ Convert an X font name (XLFD) to an NS font name.
    DEFSYM (Qns_drag_operation_generic, "ns-drag-operation-generic");
    DEFSYM (Qns_handle_drag_motion, "ns-handle-drag-motion");
  
@@ -662,7 +686,7 @@ index 88c9251c18..9d36de66f9 100644
    Fput (Qalt, Qmodifier_value, make_fixnum (alt_modifier));
    Fput (Qhyper, Qmodifier_value, make_fixnum (hyper_modifier));
    Fput (Qmeta, Qmodifier_value, make_fixnum (meta_modifier));
-@@ -11805,6 +12250,15 @@ Nil means use fullscreen the old (< 10.7) way.  The old way works better with
+@@ -11805,6 +12278,15 @@ Nil means use fullscreen the old (< 10.7) way.  The old way works better with
  This variable is ignored on Mac OS X < 10.7 and GNUstep.  */);
    ns_use_srgb_colorspace = YES;
  

patches/0002-ns-implement-buffer-accessibility-element-core-proto.patch

@@ -1,7 +1,7 @@
-From 705bba0809db081f538c124aa900bc911de9b0ff Mon Sep 17 00:00:00 2001
+From f587654717e7a3d3121e4871f04ffbf4e0d5e9be Mon Sep 17 00:00:00 2001
 From: Martin Sukany <martin@sukany.cz>
 Date: Sat, 28 Feb 2026 12:58:11 +0100
-Subject: [PATCH 2/8] ns: implement buffer accessibility element (core
+Subject: [PATCH 3/9] ns: implement buffer accessibility element (core
  protocol)
 
 Implement the NSAccessibility text protocol for Emacs buffer windows.
@@ -17,20 +17,26 @@ loop is safe: it runs only on actual character modifications.
 (accessibilityIndexForCharpos:): O(1) fast path for pure-ASCII runs
 (ax_length == length); fall back to sequence walk for multi-byte runs.
 (charposForAccessibilityIndex:): Symmetric O(1) fast path.
-(accessibilitySelectedTextRange, accessibilityLineForIndex:)
-(accessibilityIndexForLine:, accessibilityRangeForIndex:)
-(accessibilityStringForRange:, accessibilityFrameForRange:)
-(accessibilityRangeForPosition:, setAccessibilitySelectedTextRange:)
+(accessibilityRole, accessibilityLabel, accessibilityValue)
+(accessibilityNumberOfCharacters, accessibilitySelectedText)
+(accessibilitySelectedTextRange, accessibilityInsertionPointLineNumber)
+(accessibilityLineForIndex:): New method; return the line number for an
+AX character index; defined here so patches 0003+ can call it without
+forward reference.
+(accessibilityRangeForLine:, accessibilityRangeForIndex:)
+(accessibilityStyleRangeForIndex:, accessibilityFrameForRange:)
+(accessibilityRangeForPosition:, accessibilityVisibleCharacterRange)
+(accessibilityFrame, setAccessibilitySelectedTextRange:)
 (setAccessibilityFocused:): Implement NSAccessibility protocol methods.
 ---
- src/nsterm.m | 1115 ++++++++++++++++++++++++++++++++++++++++++++++++++
- 1 file changed, 1115 insertions(+)
+ src/nsterm.m | 1135 ++++++++++++++++++++++++++++++++++++++++++++++++++
+ 1 file changed, 1135 insertions(+)
 
 diff --git a/src/nsterm.m b/src/nsterm.m
-index 9d36de66f9..6256dbc22e 100644
+index 3b923ee5fa..41c6b8dc14 100644
 --- a/src/nsterm.m
 +++ b/src/nsterm.m
-@@ -7625,6 +7625,1121 @@ - (id)accessibilityTopLevelUIElement
+@@ -7653,6 +7653,1141 @@ - (id)accessibilityTopLevelUIElement
  
  @end
  
@@ -200,8 +206,8 @@ index 9d36de66f9..6256dbc22e 100644
 +  /* Block input to prevent concurrent redisplay from modifying buffer
 +     state while we read text properties.  Unwind-protected so
 +     block_input is always matched by unblock_input on signal.  */
-+  record_unwind_protect_void (unblock_input);
 +  block_input ();
++  record_unwind_protect_void (unblock_input);
 +  if (b != current_buffer)
 +    set_buffer_internal_1 (b);
 +
@@ -813,10 +819,9 @@ index 9d36de66f9..6256dbc22e 100644
 +
 +  specpdl_ref count = SPECPDL_INDEX ();
 +  record_unwind_current_buffer ();
-+  /* Ensure block_input is always matched by unblock_input even if
-+     Fset_marker or another Lisp call signals (longjmp).  */
-+  record_unwind_protect_void (unblock_input);
++  /* block_input must come before record_unwind_protect_void (unblock_input).  */
 +  block_input ();
++  record_unwind_protect_void (unblock_input);
 +
 +  /* Convert accessibility index to buffer charpos via mapping.  */
 +  ptrdiff_t charpos = [self charposForAccessibilityIndex:range.location];
@@ -870,10 +875,10 @@ index 9d36de66f9..6256dbc22e 100644
 +  if (!view || !view->emacsframe)
 +    return;
 +
-+  /* Use specpdl unwind protection for block_input safety.  */
++  /* block_input must come before record_unwind_protect_void (unblock_input).  */
 +  specpdl_ref count = SPECPDL_INDEX ();
-+  record_unwind_protect_void (unblock_input);
 +  block_input ();
++  record_unwind_protect_void (unblock_input);
 +
 +  /* Select the Emacs window so keyboard focus follows VoiceOver.  */
 +  struct frame *f = view->emacsframe;
@@ -951,6 +956,27 @@ index 9d36de66f9..6256dbc22e 100644
 +  return [self rangeForLine:(NSUInteger)line textLength:len];
 +}
 +
++- (NSInteger)accessibilityLineForIndex:(NSInteger)index
++{
++  if (![NSThread isMainThread])
++    {
++      __block NSInteger result;
++      dispatch_sync (dispatch_get_main_queue (), ^{
++	  result = [self accessibilityLineForIndex:index];
++	});
++      return result;
++    }
++  [self ensureTextCache];
++  if (!cachedText || index < 0)
++    return 0;
++
++  NSUInteger idx = (NSUInteger) index;
++  if (idx > [cachedText length])
++    idx = [cachedText length];
++
++  return [self lineForAXIndex:idx];
++}
++
 +- (NSRange)accessibilityRangeForIndex:(NSInteger)index
 +{
 +  if (![NSThread isMainThread])
@@ -1034,8 +1060,8 @@ index 9d36de66f9..6256dbc22e 100644
 +     so block_input is always matched by unblock_input, even if
 +     ensureTextCache triggers a Lisp signal (longjmp).  */
 +  specpdl_ref count = SPECPDL_INDEX ();
-+  record_unwind_protect_void (unblock_input);
 +  block_input ();
++  record_unwind_protect_void (unblock_input);
 +
 +  /* Find the glyph row at this y coordinate.  */
 +  struct glyph_matrix *matrix = w->current_matrix;

patches/0003-ns-add-buffer-notification-dispatch-and-mode-line-el.patch

@@ -1,7 +1,7 @@
-From 94d2aa2736ec116e2965d02241ad8b20d8daf4bc Mon Sep 17 00:00:00 2001
+From d8a98fc40d8285c19e0a73a7e8a53778926b9836 Mon Sep 17 00:00:00 2001
 From: Martin Sukany <martin@sukany.cz>
 Date: Sat, 28 Feb 2026 12:58:11 +0100
-Subject: [PATCH 3/8] ns: add buffer notification dispatch and mode-line
+Subject: [PATCH 4/9] ns: add buffer notification dispatch and mode-line
  element
 
 Add VoiceOver notification dispatch and mode-line readout.
@@ -26,10 +26,10 @@ mode line.
  1 file changed, 606 insertions(+)
 
 diff --git a/src/nsterm.m b/src/nsterm.m
-index 6256dbc22e..9e0e317237 100644
+index 41c6b8dc14..16343f978a 100644
 --- a/src/nsterm.m
 +++ b/src/nsterm.m
-@@ -8740,6 +8740,612 @@ - (NSRect)accessibilityFrame
+@@ -8788,6 +8788,612 @@ - (NSRect)accessibilityFrame
  
  @end
  
@@ -281,8 +281,8 @@ index 6256dbc22e..9e0e317237 100644
 +  ptrdiff_t currentOverlayStart = 0;
 +  ptrdiff_t currentOverlayEnd = 0;
 +
-+  block_input ();
 +  specpdl_ref count2 = SPECPDL_INDEX ();
++  block_input ();
 +  record_unwind_protect_void (unblock_input);
 +  record_unwind_current_buffer ();
 +  if (b != current_buffer)

patches/0004-ns-add-interactive-span-elements-for-Tab-navigation.patch

@@ -1,7 +1,7 @@
-From 3206d93511fe9337c4ca683a5dc1e6885ed9985c Mon Sep 17 00:00:00 2001
+From 9c233aa400c2769e1621ec37f326d1e24c0da2df Mon Sep 17 00:00:00 2001
 From: Martin Sukany <martin@sukany.cz>
 Date: Sat, 28 Feb 2026 12:58:11 +0100
-Subject: [PATCH 4/8] ns: add interactive span elements for Tab navigation
+Subject: [PATCH 5/9] ns: add interactive span elements for Tab navigation
 
 * src/nsterm.m (ns_ax_scan_interactive_spans): New function; scans the
 visible portion of a buffer for interactive text properties
@@ -14,14 +14,31 @@ elements with an AXPress action that sends a synthetic TAB keystroke.
 (accessibilityChildrenInNavigationOrder): Return cached span array,
 rebuilding lazily when interactiveSpansDirty is set.
 ---
- src/nsterm.m | 292 +++++++++++++++++++++++++++++++++++++++++++++++++++
- 1 file changed, 292 insertions(+)
+ src/nsterm.m | 302 ++++++++++++++++++++++++++++++++++++++++++++++++++-
+ 1 file changed, 298 insertions(+), 4 deletions(-)
 
 diff --git a/src/nsterm.m b/src/nsterm.m
-index 9e0e317237..8aa5b6ac1b 100644
+index 16343f978a..f5e5cea074 100644
 --- a/src/nsterm.m
 +++ b/src/nsterm.m
-@@ -9346,6 +9346,298 @@ - (NSRect)accessibilityFrame
+@@ -8669,12 +8669,12 @@ - (NSRange)accessibilityRangeForPosition:(NSPoint)screenPoint
+     return NSMakeRange (0, 0);
+ 
+   /* Block input to prevent concurrent redisplay from modifying the
+-     glyph matrix while we traverse it.  Use specpdl unwind protection
+-     so block_input is always matched by unblock_input, even if
+-     ensureTextCache triggers a Lisp signal (longjmp).  */
++     glyph matrix while we traverse it.  block_input must come before
++     record_unwind_protect_void (unblock_input) so that the unwind
++     handler is never called without a matching block_input.  */
+   specpdl_ref count = SPECPDL_INDEX ();
+-  record_unwind_protect_void (unblock_input);
+   block_input ();
++  record_unwind_protect_void (unblock_input);
+ 
+   /* Find the glyph row at this y coordinate.  */
+   struct glyph_matrix *matrix = w->current_matrix;
+@@ -9394,6 +9394,300 @@ - (NSRect)accessibilityFrame
  
  @end
  
@@ -76,6 +93,7 @@ index 9e0e317237..8aa5b6ac1b 100644
 +      EmacsAXSpanType span_type = EmacsAXSpanTypeNone;
 +      Lisp_Object limit_prop    = Qnil;
 +
++      /* Fplist_get third arg Qnil: use `eq' predicate (the default).  */
 +      if (!NILP (Fplist_get (plist, Qns_ax_widget, Qnil)))
 +	{
 +	  span_type  = EmacsAXSpanTypeWidget;
@@ -247,11 +265,12 @@ index 9e0e317237..8aa5b6ac1b 100644
 +       window being deleted between capture and execution.  */
 +    if (!WINDOWP (lwin) || NILP (Fwindow_live_p (lwin)))
 +      return;
-+    /* Use specpdl unwind protection so that block_input is always
-+       matched by unblock_input, even if Fselect_window signals.  */
++    /* block_input must come before record_unwind_protect_void (unblock_input)
++       so the unwind handler is never invoked without a matching block_input,
++       even if Fselect_window signals (longjmp).  */
 +    specpdl_ref count = SPECPDL_INDEX ();
-+    record_unwind_protect_void (unblock_input);
 +    block_input ();
++    record_unwind_protect_void (unblock_input);
 +    record_unwind_current_buffer ();
 +    Fselect_window (lwin, Qnil);
 +    struct window *w = XWINDOW (lwin);

patches/0005-ns-integrate-accessibility-with-EmacsView-and-redisp.patch

@@ -1,7 +1,7 @@
-From f2e97ea6ba4ffc1c73e625f9d61636b7261cbecf Mon Sep 17 00:00:00 2001
+From 411c0c3f06ad4c2d5aae2b17b809e8899ea892ba Mon Sep 17 00:00:00 2001
 From: Martin Sukany <martin@sukany.cz>
 Date: Sat, 28 Feb 2026 12:58:11 +0100
-Subject: [PATCH 5/8] ns: integrate accessibility with EmacsView and redisplay
+Subject: [PATCH 6/9] ns: integrate accessibility with EmacsView and redisplay
 
 Wire the accessibility element tree into EmacsView and hook it into
 the redisplay cycle.
@@ -23,8 +23,9 @@ com.apple.accessibility.api distributed notification.
 (accessibilityAttributeValue:forParameter:): New methods.
 ---
  etc/NEWS     |  13 ++
+ src/nsterm.h |   7 +-
  src/nsterm.m | 474 +++++++++++++++++++++++++++++++++++++++++++++++++--
- 2 files changed, 475 insertions(+), 12 deletions(-)
+ 3 files changed, 483 insertions(+), 11 deletions(-)
 
 diff --git a/etc/NEWS b/etc/NEWS
 index 4c149e41d6..7f917f93b2 100644
@@ -50,25 +51,34 @@ index 4c149e41d6..7f917f93b2 100644
  ---
  ** Re-introduced dictation, lost in Emacs v30 (macOS).
  We lost macOS dictation in v30 when migrating to NSTextInputClient.
+diff --git a/src/nsterm.h b/src/nsterm.h
+index f245675513..4bf79a9adb 100644
+--- a/src/nsterm.h
++++ b/src/nsterm.h
+@@ -590,7 +590,12 @@ typedef NS_ENUM(NSInteger, EmacsAXSpanType)
+   char *old_title;
+   BOOL maximizing_resize;
+   NSMutableArray *accessibilityElements;
+-  /* See GC safety comment on EmacsAccessibilityElement.lispWindow.  */
++  /* Lisp_Object ivars not visible to GC.  Both objects are always
++     reachable via the frame's live window tree, so GC cannot collect
++     them.  After a window-tree rebuild (delete-window, split-window)
++     a stale EQ match would merely skip a focus notification --- the
++     worst case is one spurious VoiceOver focus event per rebuild.
++     No staticpro() needed: the window tree holds a strong reference.  */
+   Lisp_Object lastSelectedWindow;
+   Lisp_Object lastRootWindow;
+   BOOL accessibilityTreeValid;
 diff --git a/src/nsterm.m b/src/nsterm.m
-index 8aa5b6ac1b..32eb04acef 100644
+index f5e5cea074..c3cd83b774 100644
 --- a/src/nsterm.m
 +++ b/src/nsterm.m
-@@ -1275,7 +1275,7 @@ If a completion candidate is selected (overlay or child frame),
- static void
- ns_zoom_track_completion (struct frame *f, EmacsView *view)
- {
--  if (!ns_zoom_enabled_p ())
-+  if (!ns_accessibility_enabled || !ns_zoom_enabled_p ())
-     return;
-   if (!WINDOWP (f->selected_window))
-     return;
 @@ -1393,7 +1393,8 @@ so the visual offset is (ov_line + 1) * line_h from
       (zoomCursorUpdated is NO).  */
  #if defined (MAC_OS_X_VERSION_MIN_REQUIRED) \
      && MAC_OS_X_VERSION_MIN_REQUIRED >= 101000
 -  if (view && !view->zoomCursorUpdated && ns_zoom_enabled_p ()
-+  if (ns_accessibility_enabled && view && !view->zoomCursorUpdated
++  if (view && !view->zoomCursorUpdated
 +      && ns_zoom_enabled_p ()
        && !NSIsEmptyRect (view->lastCursorRect))
      {
@@ -83,15 +93,6 @@ index 8aa5b6ac1b..32eb04acef 100644
  }
  
  static void
-@@ -3567,7 +3571,7 @@ EmacsView pixels (AppKit, flipped, top-left origin)
- 
- #if defined (MAC_OS_X_VERSION_MIN_REQUIRED) \
-     && MAC_OS_X_VERSION_MIN_REQUIRED >= 101000
--	if (ns_zoom_enabled_p ())
-+	if (ns_accessibility_enabled && ns_zoom_enabled_p ())
- 	  {
- 	    NSRect windowRect = [view convertRect:r toView:nil];
- 	    NSRect screenRect
 @@ -6723,9 +6727,56 @@ - (void)applicationDidFinishLaunching: (NSNotification *)notification
    }
  #endif
@@ -149,7 +150,7 @@ index 8aa5b6ac1b..32eb04acef 100644
  - (void)antialiasThresholdDidChange:(NSNotification *)notification
  {
  #ifdef NS_IMPL_COCOA
-@@ -7628,7 +7679,6 @@ - (id)accessibilityTopLevelUIElement
+@@ -7656,7 +7707,6 @@ - (id)accessibilityTopLevelUIElement
  
  
  
@@ -157,7 +158,7 @@ index 8aa5b6ac1b..32eb04acef 100644
  static BOOL
  ns_ax_find_completion_overlay_range (struct buffer *b, ptrdiff_t point,
  				     ptrdiff_t *out_start,
-@@ -8741,7 +8791,6 @@ - (NSRect)accessibilityFrame
+@@ -8789,7 +8839,6 @@ - (NSRect)accessibilityFrame
  @end
  
  
@@ -165,12 +166,16 @@ index 8aa5b6ac1b..32eb04acef 100644
  /* ===================================================================
     EmacsAccessibilityBuffer (Notifications) --- AX event dispatch
  
-@@ -9235,6 +9284,50 @@ - (void)postAccessibilityNotificationsForFrame:(struct frame *)f
+@@ -9283,6 +9332,54 @@ - (void)postAccessibilityNotificationsForFrame:(struct frame *)f
  	  granularity = ns_ax_text_selection_granularity_line;
  	}
  
++      /* Treat all moves as Emacs-initiated until voiceoverSetPoint
++	 tracking is introduced (subsequent patch).  */
++      BOOL emacsMovedCursor = YES;
++
 +      /* Programmatic jumps that cross a line boundary (]], [[, M-<,
-+	 xref, imenu, ...) are discontiguous: the cursor teleported to an
++	 xref, imenu, …) are discontiguous: the cursor teleported to an
 +	 arbitrary position, not one sequential step forward/backward.
 +	 Reporting AXTextSelectionDirectionDiscontiguous causes VoiceOver
 +	 to re-anchor its rotor browse cursor at the new
@@ -216,7 +221,7 @@ index 8aa5b6ac1b..32eb04acef 100644
        /* Post notifications for focused and non-focused elements.  */
        if ([self isAccessibilityFocused])
  	[self postFocusedCursorNotification:point
-@@ -9347,7 +9440,6 @@ - (NSRect)accessibilityFrame
+@@ -9395,7 +9492,6 @@ - (NSRect)accessibilityFrame
  @end
  
  
@@ -224,7 +229,7 @@ index 8aa5b6ac1b..32eb04acef 100644
  /* ===================================================================
     EmacsAccessibilityInteractiveSpan --- helpers and implementation
     =================================================================== */
-@@ -9683,6 +9775,7 @@ - (void)dealloc
+@@ -9733,6 +9829,7 @@ - (void)dealloc
    [layer release];
  #endif
  
@@ -232,7 +237,7 @@ index 8aa5b6ac1b..32eb04acef 100644
    [[self menu] release];
    [super dealloc];
  }
-@@ -11031,6 +11124,32 @@ - (void)windowDidBecomeKey      /* for direct calls */
+@@ -11081,6 +11178,32 @@ - (void)windowDidBecomeKey      /* for direct calls */
    XSETFRAME (event.frame_or_window, emacsframe);
    kbd_buffer_store_event (&event);
    ns_send_appdefined (-1);  // Kick main loop
@@ -265,7 +270,7 @@ index 8aa5b6ac1b..32eb04acef 100644
  }
  
  
-@@ -12268,6 +12387,332 @@ - (int) fullscreenState
+@@ -12318,6 +12441,332 @@ - (int) fullscreenState
    return fs_state;
  }
  
@@ -598,7 +603,7 @@ index 8aa5b6ac1b..32eb04acef 100644
  @end  /* EmacsView */
  
  
-@@ -14264,12 +14709,17 @@ Nil means use fullscreen the old (< 10.7) way.  The old way works better with
+@@ -14314,12 +14763,17 @@ Nil means use fullscreen the old (< 10.7) way.  The old way works better with
    ns_use_srgb_colorspace = YES;
  
    DEFVAR_BOOL ("ns-accessibility-enabled", ns_accessibility_enabled,

patches/0006-doc-add-VoiceOver-accessibility-section-to-macOS-app.patch

@@ -1,7 +1,7 @@
-From 4310549aa1e486dba054948a2937bb8bb236bb27 Mon Sep 17 00:00:00 2001
+From 274c545be1a3af3c7e6f416ac3a22e3b98626b0b Mon Sep 17 00:00:00 2001
 From: Martin Sukany <martin@sukany.cz>
 Date: Sat, 28 Feb 2026 12:58:11 +0100
-Subject: [PATCH 6/8] doc: add VoiceOver accessibility section to macOS
+Subject: [PATCH 7/9] doc: add VoiceOver accessibility section to macOS
  appendix
 
 * doc/emacs/macos.texi (VoiceOver Accessibility): New node between
@@ -11,12 +11,12 @@ enabled, and known limitations.  Use @xref for cross-reference at
 sentence start.  Correct description of ns-accessibility-enabled
 default: initial value is nil, set automatically at startup.
 ---
- doc/emacs/macos.texi | 76 ++++++++++++++++++++++++++++++++++++++++++++
+ doc/emacs/macos.texi | 77 ++++++++++++++++++++++++++++++++++++++++++++
  src/nsterm.m         | 10 ++++--
- 2 files changed, 83 insertions(+), 3 deletions(-)
+ 2 files changed, 84 insertions(+), 3 deletions(-)
 
 diff --git a/doc/emacs/macos.texi b/doc/emacs/macos.texi
-index 6bd334f48e..8d4a7825d8 100644
+index 6bd334f48e..72ac3a9aa9 100644
 --- a/doc/emacs/macos.texi
 +++ b/doc/emacs/macos.texi
 @@ -36,6 +36,7 @@ Support}), but we hope to improve it in the future.
@@ -27,7 +27,7 @@ index 6bd334f48e..8d4a7825d8 100644
  * GNUstep Support::             Details on status of GNUstep support.
  @end menu
  
-@@ -272,6 +273,82 @@
+@@ -272,6 +273,82 @@ and return the result as a string.  You can also use the Lisp function
  services and receive the results back.  Note that you may need to
  restart Emacs to access newly-available services.
  
@@ -97,24 +97,24 @@ index 6bd334f48e..8d4a7825d8 100644
 +Right-to-left (bidi) text is exposed correctly as buffer content,
 +but @code{accessibilityRangeForPosition} hit-testing assumes
 +left-to-right glyph layout.
++@item
++Block-style cursors are handled correctly: character navigation
++announces the character at the cursor position, not the character
++before it.
 +@end itemize
 +
 +  This support is available only on the Cocoa build.  GNUstep has a
 +different accessibility model and is not yet supported.
 +
-+Block-style cursors are handled
-+correctly: character navigation announces the character at the cursor
-+position, not the character before it.
-+
 +
  @node GNUstep Support
  @section GNUstep Support
  
 diff --git a/src/nsterm.m b/src/nsterm.m
-index 32eb04acef..8e5cc7e1d7 100644
+index c3cd83b774..e4e43dd7a3 100644
 --- a/src/nsterm.m
 +++ b/src/nsterm.m
-@@ -14710,9 +14710,13 @@ Nil means use fullscreen the old (< 10.7) way.  The old way works better with
+@@ -14764,9 +14764,13 @@ Nil means use fullscreen the old (< 10.7) way.  The old way works better with
  
    DEFVAR_BOOL ("ns-accessibility-enabled", ns_accessibility_enabled,
       doc: /* Non-nil enables Zoom cursor tracking and VoiceOver support.

patches/0007-ns-announce-overlay-completion-candidates-for-VoiceO.patch

@@ -1,28 +1,40 @@
-From affdaf60d28ad4d9836c6505216e19599b31c437 Mon Sep 17 00:00:00 2001
-From: Daneel <daneel@sukany.cz>
+From b87fb2b1824761fe3d91a27afe966eada39c1c45 Mon Sep 17 00:00:00 2001
+From: Martin Sukany <martin@sukany.cz>
 Date: Mon, 2 Mar 2026 18:39:46 +0100
-Subject: [PATCH 7/8] ns: announce overlay completion candidates for VoiceOver
+Subject: [PATCH 8/9] ns: announce overlay completion candidates for VoiceOver
 
-Overlay-based completion UIs (Vertico, Ivy, Icomplete) render candidates
-via overlay before-string/after-string properties.  Without this change
-VoiceOver cannot read overlay-based completion UIs.
+Completion frameworks such as Vertico, Ivy, and Icomplete render
+candidates via overlay before-string/after-string properties.  Without
+this change VoiceOver cannot read overlay-based completion UIs.
 
-* src/nsterm.m (ns_ax_face_is_selected): New static function; matches
-'current', 'selected', 'selection' in face symbol names.
-(ns_ax_selected_overlay_text): New function; scan overlay strings in
-the window for a line with a selected face; return its text.
-(EmacsAccessibilityBuffer(Notifications)
-postAccessibilityNotificationsForFrame:): Handle BUF_OVERLAY_MODIFF
+* src/nsterm.m (ns_ax_selected_overlay_text): New function; scan
+overlay strings in the window for a line with a selected face; return
+its text.
+(accessibilityStringForRange:, accessibilityAttributedStringForRange:)
+(accessibilityRangeForLine:): New NSAccessibility protocol methods.
+Moved here from planned patch 0008 to keep the AX protocol interface
+complete before notification logic uses it.
+(ensureTextCache): Switch cache-validity counter from BUF_CHARS_MODIFF
+to BUF_MODIFF.  Fold/unfold commands (org-mode, outline-mode,
+hideshow-mode) change the 'invisible text property via
+`put-text-property', which bumps BUF_MODIFF but not BUF_CHARS_MODIFF.
+Using BUF_CHARS_MODIFF would serve stale AX text across fold/unfold.
+The rebuild is O(visible-buffer-text) but ensureTextCache is called
+exclusively from AX getters at human interaction speed, never from the
+redisplay notification path; font-lock passes cause zero rebuild cost.
+(postAccessibilityNotificationsForFrame:): Handle BUF_OVERLAY_MODIFF
 changes independently of text changes.  Use BUF_CHARS_MODIFF to gate
-ValueChanged; keep overlay_modiff out of ensureTextCache to prevent a
-race where an AX query consumes the change before notification.
+ValueChanged.  Do not call ensureTextCache from the cursor-moved branch:
+the granularity detection uses cachedText directly (falling back to
+granularity_unknown when the cache is absent), so font-lock passes
+cannot trigger O(buffer-size) rebuilds via the notification path.
 ---
  src/nsterm.h |   1 +
- src/nsterm.m | 348 ++++++++++++++++++++++++++++++++++++++++++++-------
- 2 files changed, 307 insertions(+), 42 deletions(-)
+ src/nsterm.m | 384 ++++++++++++++++++++++++++++++++++++++++-----------
+ 2 files changed, 306 insertions(+), 79 deletions(-)
 
 diff --git a/src/nsterm.h b/src/nsterm.h
-index 5746e9e9bd..21a93bc799 100644
+index 4bf79a9adb..72ca210bb0 100644
 --- a/src/nsterm.h
 +++ b/src/nsterm.h
 @@ -510,6 +510,7 @@ typedef struct ns_ax_visible_run
@@ -34,10 +46,10 @@ index 5746e9e9bd..21a93bc799 100644
  @property (nonatomic, assign) BOOL cachedMarkActive;
  @property (nonatomic, copy) NSString *cachedCompletionAnnouncement;
 diff --git a/src/nsterm.m b/src/nsterm.m
-index 8e5cc7e1d7..8ef344d9fe 100644
+index e4e43dd7a3..c9fe93a57b 100644
 --- a/src/nsterm.m
 +++ b/src/nsterm.m
-@@ -7263,11 +7263,157 @@ Accessibility virtual elements (macOS / Cocoa only)
+@@ -7263,11 +7263,154 @@ Accessibility virtual elements (macOS / Cocoa only)
  
  /* ---- Helper: extract buffer text for accessibility ---- */
  
@@ -46,9 +58,6 @@ index 8e5cc7e1d7..8ef344d9fe 100644
 +   completion candidate.  Works for vertico-current,
 +   icomplete-selected-match, ivy-current-match, etc.  */
 +static bool
-+/* Note: ns_zoom_face_is_selected in the Zoom series has identical
-+   logic.  The duplication is intentional: both series are
-+   independent and must compile standalone.  */
 +ns_ax_face_is_selected (Lisp_Object face)
 +{
 +  if (SYMBOLP (face) && !NILP (face))
@@ -196,7 +205,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
  static NSString *
  ns_ax_buffer_text (struct window *w, ptrdiff_t *out_start,
  		   ns_ax_visible_run **out_runs, NSUInteger *out_nruns)
-@@ -7340,7 +7483,7 @@ Accessibility virtual elements (macOS / Cocoa only)
+@@ -7343,7 +7486,7 @@ Accessibility virtual elements (macOS / Cocoa only)
  
        /* Extract this visible run's text.  Use
  	 Fbuffer_substring_no_properties which correctly handles the
@@ -205,7 +214,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
  	 include garbage bytes when the run spans the gap position.  */
        Lisp_Object lstr = Fbuffer_substring_no_properties (
  	make_fixnum (pos), make_fixnum (run_end));
-@@ -7421,7 +7564,7 @@ Mode lines using icon fonts (e.g. nerd-font icons)
+@@ -7424,7 +7567,7 @@ Mode lines using icon fonts (e.g. nerd-font icons)
      return NSZeroRect;
  
    /* charpos_start and charpos_len are already in buffer charpos
@@ -214,7 +223,39 @@ index 8e5cc7e1d7..8ef344d9fe 100644
       charposForAccessibilityIndex which handles invisible text.  */
    ptrdiff_t cp_start = charpos_start;
    ptrdiff_t cp_end = cp_start + charpos_len;
-@@ -7896,6 +8039,7 @@ @implementation EmacsAccessibilityBuffer
+@@ -7606,31 +7749,6 @@ already on the main queue (e.g., inside postAccessibilityUpdates
+    freeing the main queue for VoiceOver's dispatch_sync calls.  */
+
+-/* Return true if FACE (a symbol or list of symbols) looks like a
+-   "selected item" face.  Substring match is intentionally broad ---
+-   it catches vertico-current, icomplete-selected-match,
+-   ivy-current-match, company-tooltip-selection, and similar.
+-   False positives are harmless: this runs only on overlay/child-frame
+-   strings during completion, never in a hot redisplay path.  */
+-static bool
+-ns_ax_face_is_selected (Lisp_Object face)
+-{
+-  if (SYMBOLP (face) && !NILP (face))
+-    {
+-      const char *name = SSDATA (SYMBOL_NAME (face));
+-      if (strstr (name, "current") || strstr (name, "selected")
+-	  || strstr (name, "selection"))
+-	return true;
+-    }
+-  if (CONSP (face))
+-    {
+-      for (Lisp_Object tail = face; CONSP (tail); tail = XCDR (tail))
+-	if (ns_ax_face_is_selected (XCAR (tail)))
+-	  return true;
+-    }
+-  return false;
+-}
+-
+ static inline void
+ ns_ax_post_notification (id element,
+ 			  NSAccessibilityNotificationName name)
+ {
+@@ -7924,6 +8043,7 @@ @implementation EmacsAccessibilityBuffer
  @synthesize cachedOverlayModiff;
  @synthesize cachedTextStart;
  @synthesize cachedModiff;
@@ -222,7 +263,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
  @synthesize cachedPoint;
  @synthesize cachedMarkActive;
  @synthesize cachedCompletionAnnouncement;
-@@ -7993,7 +8137,7 @@ - (void)ensureTextCache
+@@ -8021,7 +8141,7 @@ - (void)ensureTextCache
    NSTRACE ("EmacsAccessibilityBuffer ensureTextCache");
    /* This method is only called from the main thread (AX getters
       dispatch_sync to main first).  Reads of cachedText/cachedTextModiff
@@ -231,7 +272,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
       write section at the end needs synchronization to protect
       against concurrent reads from AX server thread.  */
    eassert ([NSThread isMainThread]);
-@@ -8005,25 +8149,34 @@ - (void)ensureTextCache
+@@ -8033,25 +8153,38 @@ - (void)ensureTextCache
    if (!b)
      return;
  
@@ -262,12 +303,16 @@ index 8e5cc7e1d7..8ef344d9fe 100644
 +     as if it were visible, or miss newly revealed content entirely.
 +
 +     BUF_MODIFF is bumped by all buffer modifications including
-+     text-property changes (e.g. font-lock face assignments), causing a
-+     full text-cache rebuild on each redisplay cycle.  This is acceptable
-+     because `ensureTextCache' is only called when VoiceOver queries
-+     accessibilityValue or related AX properties --- which happens at
-+     human interaction speed, not at redisplay speed.  The per-rebuild
-+     cost is O(visible-buffer-text).
++     text-property changes (e.g. font-lock face assignments).  The
++     per-rebuild cost is O(visible-buffer-text), but `ensureTextCache'
++     is called exclusively from AX getters (accessibilityValue,
++     accessibilitySelectedTextRange, etc.) which run at human interaction
++     speed --- not from the redisplay notification path.  Font-lock
++     passes do not call this method, so the rebuild cost per font-lock
++     cycle is zero.  The redisplay notification path (postAccessibility-
++     NotificationsForFrame:) uses cachedText directly without calling
++     ensureTextCache; granularity detection falls back gracefully when
++     the cache is absent.
 +
 +     Do NOT use BUF_OVERLAY_MODIFF alone: org-mode >= 29 (org-fold-core)
 +     uses text properties, not overlays, for folding, so
@@ -283,7 +328,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
        && cachedTextStart == BUF_BEGV (b)
        && pt >= cachedTextStart
        && (textLen == 0
-@@ -8039,7 +8192,7 @@ included in the cached AX text (it is handled separately via
+@@ -8067,7 +8200,7 @@ included in the cached AX text (it is handled separately via
      {
        [cachedText release];
        cachedText = [text retain];
@@ -292,7 +337,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
        cachedTextStart = start;
  
        if (visibleRuns)
-@@ -8051,9 +8204,9 @@ included in the cached AX text (it is handled separately via
+@@ -8079,9 +8212,9 @@ included in the cached AX text (it is handled separately via
  	 Walk the cached text once, recording the start offset of each
  	 line.  Uses NSString lineRangeForRange: --- O(N) in the total
  	 text --- but this loop runs only on cache rebuild, which is
@@ -305,7 +350,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
  	 enters this code.  */
        if (lineStartOffsets)
  	xfree (lineStartOffsets);
-@@ -8108,7 +8261,7 @@ - (NSUInteger)accessibilityIndexForCharpos:(ptrdiff_t)charpos
+@@ -8136,7 +8269,7 @@ - (NSUInteger)accessibilityIndexForCharpos:(ptrdiff_t)charpos
    /* Binary search: runs are sorted by charpos (ascending).  Find the
       run whose [charpos, charpos+length) range contains the target,
       or the nearest run after an invisible gap.  O(log n) instead of
@@ -314,7 +359,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
    NSUInteger lo = 0, hi = visibleRunCount;
    while (lo < hi)
      {
-@@ -8157,10 +8310,10 @@ by run length (visible window), not total buffer size.  */
+@@ -8185,10 +8318,10 @@ by run length (visible window), not total buffer size.  */
  
  /* Convert accessibility string index to buffer charpos.
     Safe to call from any thread: uses only cachedText (NSString) and
@@ -327,7 +372,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
    @synchronized (self)
    {
    if (visibleRunCount == 0)
-@@ -8202,7 +8355,7 @@ the slow path (composed character sequence walk), which is
+@@ -8230,7 +8363,7 @@ the slow path (composed character sequence walk), which is
  	  return cp;
  	}
      }
@@ -336,7 +381,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
    if (lo > 0)
      {
        ns_ax_visible_run *last = &visibleRuns[visibleRunCount - 1];
-@@ -8224,7 +8377,7 @@ the slow path (composed character sequence walk), which is
+@@ -8252,7 +8385,7 @@ the slow path (composed character sequence walk), which is
     deadlocking the AX server thread.  This is prevented by:
  
       1. validWindow checks WINDOW_LIVE_P and BUFFERP before every
@@ -345,58 +390,75 @@ index 8e5cc7e1d7..8ef344d9fe 100644
       2. All dispatch_sync blocks run on the main thread where no
          concurrent Lisp code can modify state between checks.
       3. block_input prevents timer events and process output from
-@@ -8570,6 +8723,50 @@ - (NSInteger)accessibilityInsertionPointLineNumber
+@@ -8597,26 +8730,26 @@ - (NSInteger)accessibilityInsertionPointLineNumber
    return [self lineForAXIndex:point_idx];
  }
  
+-- (NSRange)accessibilityRangeForLine:(NSInteger)line
 +- (NSString *)accessibilityStringForRange:(NSRange)range
-+{
-+  if (![NSThread isMainThread])
-+    {
+ {
+   if (![NSThread isMainThread])
+     {
+-      __block NSRange result;
 +      __block NSString *result;
-+      dispatch_sync (dispatch_get_main_queue (), ^{
+       dispatch_sync (dispatch_get_main_queue (), ^{
+-	  result = [self accessibilityRangeForLine:line];
 +	  result = [self accessibilityStringForRange:range];
-+	});
-+      return result;
-+    }
-+  [self ensureTextCache];
+ 	});
+       return result;
+     }
+   [self ensureTextCache];
+-  if (!cachedText || line < 0)
+-    return NSMakeRange (NSNotFound, 0);
+-
+-  NSUInteger len = [cachedText length];
+-  if (len == 0)
+-    return (line == 0) ? NSMakeRange (0, 0)
+-		       : NSMakeRange (NSNotFound, 0);
 +  if (!cachedText || range.location + range.length > [cachedText length])
 +    return @"";
 +  return [cachedText substringWithRange:range];
 +}
-+
+ 
+-  return [self rangeForLine:(NSUInteger)line textLength:len];
 +- (NSAttributedString *)accessibilityAttributedStringForRange:(NSRange)range
 +{
 +  NSString *str = [self accessibilityStringForRange:range];
 +  return [[[NSAttributedString alloc] initWithString:str] autorelease];
+ }
+ 
+ - (NSInteger)accessibilityLineForIndex:(NSInteger)index
+@@ -8638,6 +8771,29 @@ - (NSInteger)accessibilityLineForIndex:(NSInteger)index
+     idx = [cachedText length];
+ 
+   return [self lineForAXIndex:idx];
++
 +}
 +
-+- (NSInteger)accessibilityLineForIndex:(NSInteger)index
++- (NSRange)accessibilityRangeForLine:(NSInteger)line
 +{
 +  if (![NSThread isMainThread])
 +    {
-+      __block NSInteger result;
++      __block NSRange result;
 +      dispatch_sync (dispatch_get_main_queue (), ^{
-+	  result = [self accessibilityLineForIndex:index];
++	  result = [self accessibilityRangeForLine:line];
 +	});
 +      return result;
 +    }
 +  [self ensureTextCache];
-+  if (!cachedText || index < 0)
-+    return 0;
++  if (!cachedText || line < 0)
++    return NSMakeRange (NSNotFound, 0);
 +
-+  NSUInteger idx = (NSUInteger) index;
-+  if (idx > [cachedText length])
-+    idx = [cachedText length];
++  NSUInteger len = [cachedText length];
++  if (len == 0)
++    return (line == 0) ? NSMakeRange (0, 0)
++		       : NSMakeRange (NSNotFound, 0);
 +
-+  return [self lineForAXIndex:idx];
-+
-+}
-+
- - (NSRange)accessibilityRangeForLine:(NSInteger)line
- {
-   if (![NSThread isMainThread])
-@@ -8792,7 +8989,7 @@ - (NSRect)accessibilityFrame
++  return [self rangeForLine:(NSUInteger)line textLength:len];
+ }
+ 
+ - (NSRange)accessibilityRangeForIndex:(NSInteger)index
+@@ -8840,7 +8996,7 @@ - (NSRect)accessibilityFrame
  
  
  /* ===================================================================
@@ -405,7 +467,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
  
     These methods notify VoiceOver of text and selection changes.
     Called from the redisplay cycle (postAccessibilityUpdates).
-@@ -8807,7 +9004,7 @@ - (void)postTextChangedNotification:(ptrdiff_t)point
+@@ -8855,7 +9011,7 @@ - (void)postTextChangedNotification:(ptrdiff_t)point
    if (point > self.cachedPoint
        && point - self.cachedPoint == 1)
      {
@@ -414,7 +476,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
        [self invalidateTextCache];
        [self ensureTextCache];
        if (cachedText)
-@@ -8826,7 +9023,7 @@ - (void)postTextChangedNotification:(ptrdiff_t)point
+@@ -8874,7 +9030,7 @@ - (void)postTextChangedNotification:(ptrdiff_t)point
    /* Update cachedPoint here so the selection-move branch does NOT
       fire for point changes caused by edits.  WebKit and Chromium
       never send both ValueChanged and SelectedTextChanged for the
@@ -423,7 +485,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
    self.cachedPoint = point;
  
    NSDictionary *change = @{
-@@ -9220,16 +9417,83 @@ - (void)postAccessibilityNotificationsForFrame:(struct frame *)f
+@@ -9268,16 +9424,80 @@ - (void)postAccessibilityNotificationsForFrame:(struct frame *)f
    BOOL markActive = !NILP (BVAR (b, mark_active));
  
    /* --- Text changed (edit) --- */
@@ -465,9 +527,8 @@ index 8e5cc7e1d7..8ef344d9fe 100644
 +	 font-lock and other modes change BUF_OVERLAY_MODIFF on
 +	 every redisplay, triggering O(overlays) work per keystroke.
 +	 Restrict the scan to minibuffer windows.  */
-+      if (!MINI_WINDOW_P (w))
-+	goto skip_overlay_scan;
-+
++      if (MINI_WINDOW_P (w))
++	{
 +	  int selected_line = -1;
 +	  NSString *candidate
 +	    = ns_ax_selected_overlay_text (b, BUF_BEGV (b), BUF_ZV (b),
@@ -495,23 +556,37 @@ index 8e5cc7e1d7..8ef344d9fe 100644
 +		    NSApp,
 +		    NSAccessibilityAnnouncementRequestedNotification,
 +		    annInfo);
-+
++		}
 +	    }
 +	}
      }
-+  skip_overlay_scan:;
  
    /* --- Cursor moved or selection changed ---
 -     Use 'else if' --- edits and selection moves are mutually exclusive
 -     per the WebKit/Chromium pattern.  */
 -  else if (point != self.cachedPoint || markActive != self.cachedMarkActive)
-+     Independent check: the goto above may jump here from the overlay
-+     branch, so this must be a standalone if, not else-if.  */
++     Independent check from the overlay branch above.  */
 +  if (point != self.cachedPoint || markActive != self.cachedMarkActive)
      {
        ptrdiff_t oldPoint = self.cachedPoint;
        BOOL oldMarkActive = self.cachedMarkActive;
-@@ -12403,7 +12667,7 @@ - (int) fullscreenState
+@@ -9295,8 +9515,14 @@ - (void)postAccessibilityNotificationsForFrame:(struct frame *)f
+       bool isCtrlNP = ns_ax_event_is_line_nav_key (&ctrlNP);
+ 
+       /* --- Granularity detection --- */
++      /* Use cached text as-is; do NOT call ensureTextCache here.
++	 ensureTextCache is O(visible-buffer-text) and must not run on
++	 every redisplay cycle.  Using stale cached text for granularity
++	 classification is safe: the worst case is an incorrect
++	 granularity hint (defaulting to unknown), which causes VoiceOver
++	 to make its own determination.  Fresh text is always available
++	 to VoiceOver via the AX getter path (accessibilityValue etc.).  */
+       NSInteger granularity = ns_ax_text_selection_granularity_unknown;
+-      [self ensureTextCache];
+       if (cachedText && oldPoint > 0)
+ 	{
+ 	  NSUInteger tlen = [cachedText length];
+@@ -12457,7 +12683,7 @@ - (int) fullscreenState
  
    if (WINDOW_LEAF_P (w))
      {
@@ -520,7 +595,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
        EmacsAccessibilityBuffer *elem
  	= [existing objectForKey:[NSValue valueWithPointer:w]];
        if (!elem)
-@@ -12437,7 +12701,7 @@ - (int) fullscreenState
+@@ -12491,7 +12717,7 @@ - (int) fullscreenState
      }
    else
      {
@@ -529,7 +604,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
        Lisp_Object child = w->contents;
        while (!NILP (child))
  	{
-@@ -12549,7 +12813,7 @@ - (void)postAccessibilityUpdates
+@@ -12603,7 +12829,7 @@ - (void)postAccessibilityUpdates
    accessibilityUpdating = YES;
  
    /* Detect window tree change (split, delete, new buffer).  Compare
@@ -538,7 +613,7 @@ index 8e5cc7e1d7..8ef344d9fe 100644
    Lisp_Object curRoot = FRAME_ROOT_WINDOW (emacsframe);
    if (!EQ (curRoot, lastRootWindow))
      {
-@@ -12558,12 +12822,12 @@ - (void)postAccessibilityUpdates
+@@ -12612,12 +12838,12 @@ - (void)postAccessibilityUpdates
      }
  
    /* If tree is stale, rebuild FIRST so we don't iterate freed

patches/0008-ns-announce-child-frame-completion-candidates-for-Vo.patch

@@ -1,54 +1,50 @@
-From 1e3d3919fd41e4480a02190fb89bee1ef8107d62 Mon Sep 17 00:00:00 2001
-From: Daneel <daneel@sukany.cz>
+From 5bef7fa553d0dfd9ab933d341a8115d42e026b42 Mon Sep 17 00:00:00 2001
+From: Martin Sukany <martin@sukany.cz>
 Date: Mon, 2 Mar 2026 18:49:13 +0100
-Subject: [PATCH 8/8] ns: announce child frame completion candidates for
+Subject: [PATCH 9/9] ns: announce child frame completion candidates for
  VoiceOver
 
-Child frame popups (Corfu, Company-mode) render completion candidates in
-a separate frame whose buffer is not accessible via the minibuffer
-overlay path.  This patch scans child frame buffers for selected
-candidates and announces them via VoiceOver.
+Child frame popups (Corfu, Company-mode child frames) render completion
+candidates in a separate frame whose buffer is not accessible via the
+minibuffer overlay path.  This patch scans child frame buffers for
+selected candidates and announces them via VoiceOver.
 
 * src/nsterm.h (EmacsView): Add childFrameLastBuffer, childFrameLastModiff,
 childFrameLastCandidate, childFrameCompletionActive, lastEchoCharsModiff
-ivars; remove cachedOverlayModiffForText (unused after BUF_OVERLAY_MODIFF
-removed from ensureTextCache to prevent hl-line-mode O(N) rebuilds).
-Initialize voiceoverSetPoint, childFrameLastBuffer in initFrameFromEmacs:.
+ivars.  Initialize childFrameLastBuffer to Qnil in initFrameFromEmacs:.
 (EmacsAccessibilityBuffer): Add voiceoverSetPoint ivar.
-* src/nsterm.m (ns_ax_buffer_text): Add block_input protection for
-Lisp calls; use record_unwind_protect_void to guarantee unblock_input.
-(ensureTextCache): Remove BUF_OVERLAY_MODIFF tracking; keep only
-BUF_CHARS_MODIFF.  BUF_OVERLAY_MODIFF caused O(buffer-size) rebuilds
-with hl-line-mode (moves overlay on every post-command-hook).
+* src/nsterm.m (ns_ax_selected_child_frame_text): New function; scans
+child frame buffer text for the selected completion candidate.
 (announceChildFrameCompletion): New method; scans child frame buffers
 for selected completion candidates.  Store childFrameLastBuffer as
 BVAR(b, name) (buffer name symbol, GC-reachable via obarray) rather
-than make_lisp_ptr to avoid dangling pointer after buffer kill.
+than a raw buffer pointer to avoid a dangling pointer after buffer kill.
 (postEchoAreaAnnouncementIfNeeded): New method; announces echo area
-changes for commands like C-g.
+changes (e.g., "Wrote file", "Quit") for commands that produce output
+while the minibuffer is inactive.
 (postAccessibilityNotificationsForFrame:): Drive child frame and echo
-area announcements.
-* doc/emacs/macos.texi: Fix dangling semicolon in GNUstep paragraph.
+area announcements.  Add voiceoverSetPoint flag and singleLineMove
+adjacency detection to distinguish VoiceOver-initiated cursor moves
+from Emacs-initiated moves; sequential adjacent-line moves use
+next/previous direction, teleports use discontiguous.  Add didTextChange
+guard to suppress overlay completion announcements while the user types.
+(setAccessibilitySelectedTextRange:): Set voiceoverSetPoint so that the
+subsequent notification cycle uses sequential direction.
+* doc/emacs/macos.texi (VoiceOver Accessibility): Update to document
+echo area announcements and VoiceOver rotor cursor synchronization.
+Remove Zoom section (covered by patch 0000).  Fix dangling paragraph.
 ---
- doc/emacs/macos.texi |  14 +-
- etc/NEWS             |  25 ++-
+ doc/emacs/macos.texi |  13 +-
+ etc/NEWS             |  25 +-
  src/nsterm.h         |  21 ++
- src/nsterm.m         | 514 +++++++++++++++++++++++++++++++++++++++----
- 4 files changed, 510 insertions(+), 64 deletions(-)
+ src/nsterm.m         | 577 +++++++++++++++++++++++++++++++++++++------
+ 4 files changed, 541 insertions(+), 95 deletions(-)
 
 diff --git a/doc/emacs/macos.texi b/doc/emacs/macos.texi
-index 8d4a7825d8..03a657f970 100644
+index 72ac3a9aa9..cf5ed0ff28 100644
 --- a/doc/emacs/macos.texi
 +++ b/doc/emacs/macos.texi
-@@ -278,7 +278,6 @@ restart Emacs to access newly-available services.
- @cindex VoiceOver
- @cindex accessibility (macOS)
- @cindex screen reader (macOS)
--@cindex Zoom, cursor tracking (macOS)
- 
-   When built with the Cocoa interface on macOS, Emacs exposes buffer
- content, cursor position, mode lines, and interactive elements to the
-@@ -309,10 +308,15 @@ Shift-modified movement announces selected or deselected text.
+@@ -309,10 +309,15 @@ Shift-modified movement announces selected or deselected text.
    The @file{*Completions*} buffer announces each completion candidate
  as you navigate, even while keyboard focus remains in the minibuffer.
  
@@ -115,7 +111,7 @@ index 7f917f93b2..bbec21b635 100644
  interface and eliminate the associated overhead.
  
 diff --git a/src/nsterm.h b/src/nsterm.h
-index 21a93bc799..b5c9f84499 100644
+index 72ca210bb0..1c79c8aced 100644
 --- a/src/nsterm.h
 +++ b/src/nsterm.h
 @@ -504,9 +504,20 @@ typedef struct ns_ax_visible_run
@@ -139,12 +135,12 @@ index 21a93bc799..b5c9f84499 100644
  @property (nonatomic, assign) ptrdiff_t cachedOverlayModiff;
  @property (nonatomic, assign) ptrdiff_t cachedTextStart;
  @property (nonatomic, assign) ptrdiff_t cachedModiff;
-@@ -596,6 +607,14 @@ typedef NS_ENUM (NSInteger, EmacsAXSpanType)
+@@ -601,6 +612,14 @@ typedef NS_ENUM(NSInteger, EmacsAXSpanType)
    Lisp_Object lastRootWindow;
    BOOL accessibilityTreeValid;
    BOOL accessibilityUpdating;
 +  BOOL childFrameCompletionActive;
-+  char *childFrameLastCandidate;
++  NSString *childFrameLastCandidate;
 +  Lisp_Object childFrameLastBuffer;
 +  EMACS_INT childFrameLastModiff;
 +  /* Last BUF_CHARS_MODIFF seen for echo_area_buffer[0].  Used by
@@ -154,7 +150,7 @@ index 21a93bc799..b5c9f84499 100644
  #endif
    BOOL font_panel_active;
    NSFont *font_panel_result;
-@@ -665,6 +684,8 @@ typedef NS_ENUM (NSInteger, EmacsAXSpanType)
+@@ -670,6 +689,8 @@ typedef NS_ENUM(NSInteger, EmacsAXSpanType)
  - (void)rebuildAccessibilityTree;
  - (void)invalidateAccessibilityTree;
  - (void)postAccessibilityUpdates;
@@ -164,43 +160,39 @@ index 21a93bc799..b5c9f84499 100644
  @end
  
 diff --git a/src/nsterm.m b/src/nsterm.m
-index 8ef344d9fe..1acb64630a 100644
+index c9fe93a57b..f7574efb39 100644
 --- a/src/nsterm.m
 +++ b/src/nsterm.m
-@@ -1275,7 +1275,13 @@ If a completion candidate is selected (overlay or child frame),
+@@ -1275,6 +1275,12 @@ If a completion candidate is selected (overlay or child frame),
  static void
  ns_zoom_track_completion (struct frame *f, EmacsView *view)
  {
--  if (!ns_accessibility_enabled || !ns_zoom_enabled_p ())
 +  /* Zoom cursor tracking is controlled exclusively by
 +     ns_zoom_enabled_p ().  We do NOT gate on ns_accessibility_enabled:
 +     users can run Zoom without VoiceOver, and those users should still
 +     get completion-candidate tracking.  ns_accessibility_enabled is
 +     only set when a screen reader (VoiceOver or similar) activates the
 +     AX layer; it has no bearing on the Zoom feature.  */
-+  if (!ns_zoom_enabled_p ())
+   if (!ns_zoom_enabled_p ())
      return;
    if (!WINDOWP (f->selected_window))
-     return;
-@@ -1393,7 +1399,7 @@ so the visual offset is (ov_line + 1) * line_h from
-      (zoomCursorUpdated is NO).  */
- #if defined (MAC_OS_X_VERSION_MIN_REQUIRED) \
-     && MAC_OS_X_VERSION_MIN_REQUIRED >= 101000
--  if (ns_accessibility_enabled && view && !view->zoomCursorUpdated
-+  if (view && !view->zoomCursorUpdated
-       && ns_zoom_enabled_p ()
-       && !NSIsEmptyRect (view->lastCursorRect))
-     {
-@@ -3571,7 +3577,7 @@ EmacsView pixels (AppKit, flipped, top-left origin)
+@@ -1417,9 +1423,14 @@ so the visual offset is (ov_line + 1) * line_h from
  
- #if defined (MAC_OS_X_VERSION_MIN_REQUIRED) \
-     && MAC_OS_X_VERSION_MIN_REQUIRED >= 101000
--	if (ns_accessibility_enabled && ns_zoom_enabled_p ())
-+	if (ns_zoom_enabled_p ())
- 	  {
- 	    NSRect windowRect = [view convertRect:r toView:nil];
- 	    NSRect screenRect
-@@ -7407,6 +7413,117 @@ visual line index for Zoom (skip whitespace-only lines
+   /* Track completion candidates for Zoom (overlay and child frame).
+      Runs after cursor tracking so the selected candidate overrides
+-     the default cursor position.  */
++     the default cursor position.  Guard with the same version check
++     as ns_zoom_track_completion's callee (UAZoomChangeFocus requires
++     macOS 10.10+).  */
++#if defined (MAC_OS_X_VERSION_MIN_REQUIRED) \
++    && MAC_OS_X_VERSION_MIN_REQUIRED >= 101000
+   if (view)
+     ns_zoom_track_completion (f, view);
++#endif /* MAC_OS_X_VERSION_MIN_REQUIRED >= 101000 */
+ #endif /* NS_IMPL_COCOA */
+ 
+   /* Post accessibility notifications after each redisplay cycle.  */
+@@ -7407,6 +7418,119 @@ visual line index for Zoom (skip whitespace-only lines
  
    return nil;
  }
@@ -250,14 +242,16 @@ index 8ef344d9fe..1acb64630a 100644
 +  /* 128 lines is a safe upper bound for a completion child frame.
 +     The caller rejects buffers larger than 10,000 characters
 +     (BUF_ZV(b) - BUF_BEGV(b) > 10000 guard in announceChildFrameCompletion),
-+     so the worst case is ~10 KB / 1 byte per line < 128.  If a future
-+     caller removes that guard, lines beyond 128 are silently skipped;  */
-+  ptrdiff_t line_starts[128];
-+  ptrdiff_t line_ends[128];
++     so at most ~10,000 / 1-byte-per-line = 10,000 lines could appear,
++     but completion popups are typically < 512 lines.  Use 512 to match
++     the bound in ns_ax_selected_overlay_text; lines beyond 512 are
++     silently skipped.  */
++  ptrdiff_t line_starts[512];
++  ptrdiff_t line_ends[512];
 +  int nlines = 0;
 +  ptrdiff_t char_pos = 0, byte_pos = 0, lstart = 0;
 +
-+  while (byte_pos < byte_len && nlines < 128)
++  while (byte_pos < byte_len && nlines < 512)
 +    {
 +      if (data[byte_pos] == '\n')
 +	{
@@ -275,7 +269,7 @@ index 8ef344d9fe..1acb64630a 100644
 +	byte_pos++;
 +      char_pos++;
 +    }
-+  if (char_pos > lstart && nlines < 128)
++  if (char_pos > lstart && nlines < 512)
 +    {
 +      line_starts[nlines] = lstart;
 +      line_ends[nlines] = char_pos;
@@ -318,7 +312,24 @@ index 8ef344d9fe..1acb64630a 100644
  /* Build accessibility text for window W, skipping invisible text.
     Populates *OUT_START with the buffer start charpos.
     Populates *OUT_RUNS with an array of visible runs and *OUT_NRUNS
-@@ -8605,6 +8726,11 @@ - (void)setAccessibilitySelectedTextRange:(NSRange)range
+@@ -7440,11 +7564,12 @@ visual line index for Zoom (skip whitespace-only lines
+     return @"";
+ 
+   specpdl_ref count = SPECPDL_INDEX ();
+-  record_unwind_current_buffer ();
+-  /* block_input must come before record_unwind_protect_void (unblock_input):
+-     if specpdl_push were to fail after registration, the unwind handler
+-     would call unblock_input without a matching block_input.  */
++  /* block_input must precede record_unwind_protect_void (unblock_input):
++     if anything between SPECPDL_INDEX and block_input were to throw,
++     the unwind handler would call unblock_input without a matching
++     block_input, corrupting the input-blocking reference count.  */
+   block_input ();
++  record_unwind_current_buffer ();
+   record_unwind_protect_void (unblock_input);
+   if (b != current_buffer)
+     set_buffer_internal_1 (b);
+@@ -8613,6 +8738,11 @@ - (void)setAccessibilitySelectedTextRange:(NSRange)range
  
    [self ensureTextCache];
  
@@ -329,8 +340,8 @@ index 8ef344d9fe..1acb64630a 100644
 +
    specpdl_ref count = SPECPDL_INDEX ();
    record_unwind_current_buffer ();
-   /* Ensure block_input is always matched by unblock_input even if
-@@ -9053,20 +9179,38 @@ - (void)postFocusedCursorNotification:(ptrdiff_t)point
+   /* block_input must come before record_unwind_protect_void (unblock_input).  */
+@@ -9060,20 +9190,38 @@ - (void)postFocusedCursorNotification:(ptrdiff_t)point
         && granularity
  	  == ns_ax_text_selection_granularity_character);
  
@@ -379,7 +390,7 @@ index 8ef344d9fe..1acb64630a 100644
    ns_ax_post_notification_with_info (
      self,
      NSAccessibilitySelectedTextChangedNotification,
-@@ -9166,12 +9310,17 @@ user expectation ("w" jumps to next word and reads it).  */
+@@ -9173,12 +9321,17 @@ user expectation ("w" jumps to next word and reads it).  */
  	}
      }
  
@@ -392,7 +403,7 @@ index 8ef344d9fe..1acb64630a 100644
 +     - C-n/C-p: SelectedTextChanged carries granularity=line, but
 +       VoiceOver processes those keystrokes specially and may not
 +       produce speech; the explicit announcement is the reliable path.
-+     - Discontiguous jumps (]], M-<, xref, imenu, ...): granularity=line
++     - Discontiguous jumps (]], M-<, xref, imenu, …): granularity=line
 +       in the notification is omitted (see above) so VoiceOver will
 +       not announce automatically; this explicit announcement fills
 +       the gap.
@@ -402,7 +413,7 @@ index 8ef344d9fe..1acb64630a 100644
    if (cachedText
        && granularity == ns_ax_text_selection_granularity_line)
      {
-@@ -9236,6 +9385,11 @@ - (void)postCompletionAnnouncementForBuffer:(struct buffer *)b
+@@ -9243,6 +9396,11 @@ - (void)postCompletionAnnouncementForBuffer:(struct buffer *)b
  
    block_input ();
    specpdl_ref count2 = SPECPDL_INDEX ();
@@ -414,7 +425,7 @@ index 8ef344d9fe..1acb64630a 100644
    record_unwind_protect_void (unblock_input);
    record_unwind_current_buffer ();
    if (b != current_buffer)
-@@ -9412,12 +9566,29 @@ - (void)postAccessibilityNotificationsForFrame:(struct frame *)f
+@@ -9419,12 +9577,29 @@ - (void)postAccessibilityNotificationsForFrame:(struct frame *)f
    if (!b)
      return;
  
@@ -444,7 +455,7 @@ index 8ef344d9fe..1acb64630a 100644
    if (modiff != self.cachedModiff)
      {
        self.cachedModiff = modiff;
-@@ -9431,6 +9602,7 @@ Text property changes (e.g. face updates from
+@@ -9438,6 +9613,7 @@ Text property changes (e.g. face updates from
  	{
  	  self.cachedCharsModiff = chars_modiff;
  	  [self postTextChangedNotification:point];
@@ -452,12 +463,12 @@ index 8ef344d9fe..1acb64630a 100644
  	}
      }
  
-@@ -9453,8 +9625,15 @@ frameworks like Vertico bump BOTH BUF_MODIFF (via text property
+@@ -9460,41 +9636,49 @@ frameworks like Vertico bump BOTH BUF_MODIFF (via text property
  	 displayed in the minibuffer.  In normal editing buffers,
  	 font-lock and other modes change BUF_OVERLAY_MODIFF on
  	 every redisplay, triggering O(overlays) work per keystroke.
 -	 Restrict the scan to minibuffer windows.  */
--      if (!MINI_WINDOW_P (w))
+-      if (MINI_WINDOW_P (w))
 +	 Restrict the scan to minibuffer windows.
 +	 Skip overlay announcements when the user just typed a character
 +	 (didTextChange).  Completion frameworks update their overlay
@@ -466,11 +477,76 @@ index 8ef344d9fe..1acb64630a 100644
 +	 echo produced by postTextChangedNotification, making typed
 +	 characters inaudible.  VoiceOver should read the overlay
 +	 candidate only when the user navigates (C-n/C-p), not types.  */
-+      if (!MINI_WINDOW_P (w) || didTextChange)
- 	goto skip_overlay_scan;
++      if (MINI_WINDOW_P (w) && !didTextChange)
++	{
++
++	  int selected_line = -1;
++	  NSString *candidate
++	    = ns_ax_selected_overlay_text (b, BUF_BEGV (b), BUF_ZV (b),
++				       &selected_line);
++	  if (candidate)
+-	{
++	    {
+-	  int selected_line = -1;
+-	  NSString *candidate
+-	    = ns_ax_selected_overlay_text (b, BUF_BEGV (b), BUF_ZV (b),
+-					   &selected_line);
+-	  if (candidate)
++	      /* Deduplicate: only announce when the candidate changed.  */
++	      if (![candidate isEqualToString:
++			        self.cachedCompletionAnnouncement])
+-	    {
++		{
+-	      /* Deduplicate: only announce when the candidate changed.  */
+-	      if (![candidate isEqualToString:
+-			        self.cachedCompletionAnnouncement])
+-		{
+-		  self.cachedCompletionAnnouncement = candidate;
+-
+-		  /* Announce the candidate text directly via NSApp.
+-		     Do NOT post SelectedTextChanged --- that would cause
+-		     VoiceOver to read the AX text at the cursor position
+-		     (the minibuffer input line), not the overlay candidate.
+-		     AnnouncementRequested with High priority interrupts
+-		     any current speech and announces our text.  */
+-		  NSDictionary *annInfo = @{
+-		    NSAccessibilityAnnouncementKey: candidate,
+-		    NSAccessibilityPriorityKey:
+-		      @(NSAccessibilityPriorityHigh)
+-		  };
+-		  ns_ax_post_notification_with_info (
+-		    NSApp,
+-		    NSAccessibilityAnnouncementRequestedNotification,
+-		    annInfo);
+-		}
++		  self.cachedCompletionAnnouncement = candidate;
++
++		  /* Announce the candidate text directly via NSApp.
++		     Do NOT post SelectedTextChanged --- that would cause
++		     VoiceOver to read the AX text at the cursor position
++		     (the minibuffer input line), not the overlay candidate.
++		     AnnouncementRequested with High priority interrupts
++		     any current speech and announces our text.  */
++		  NSDictionary *annInfo = @{
++		    NSAccessibilityAnnouncementKey: candidate,
++		    NSAccessibilityPriorityKey:
++		      @(NSAccessibilityPriorityHigh)
++		  };
++		  ns_ax_post_notification_with_info (
++		    NSApp,
++		    NSAccessibilityAnnouncementRequestedNotification,
++		    annInfo);
+-	    }
++		}
+-	}
++	    }
++	}
+     }
  
-       int selected_line = -1;
-@@ -9500,7 +9679,18 @@ frameworks like Vertico bump BOTH BUF_MODIFF (via text property
+   /* --- Cursor moved or selection changed ---
+      Independent check from the overlay branch above.  */
+   if (point != self.cachedPoint || markActive != self.cachedMarkActive)
+@@ -9504,7 +9688,18 @@ frameworks like Vertico bump BOTH BUF_MODIFF (via text property
        self.cachedPoint = point;
        self.cachedMarkActive = markActive;
  
@@ -490,15 +566,15 @@ index 8ef344d9fe..1acb64630a 100644
        NSInteger direction = ns_ax_text_selection_direction_discontiguous;
        if (point > oldPoint)
  	direction = ns_ax_text_selection_direction_next;
-@@ -9512,6 +9702,7 @@ frameworks like Vertico bump BOTH BUF_MODIFF (via text property
- 
-       /* --- Granularity detection --- */
+@@ -9523,6 +9718,7 @@ granularity hint (defaulting to unknown), which causes VoiceOver
+ 	 to make its own determination.  Fresh text is always available
+ 	 to VoiceOver via the AX getter path (accessibilityValue etc.).  */
        NSInteger granularity = ns_ax_text_selection_granularity_unknown;
 +      BOOL singleLineMove = NO;
-       [self ensureTextCache];
        if (cachedText && oldPoint > 0)
  	{
-@@ -9526,7 +9717,18 @@ frameworks like Vertico bump BOTH BUF_MODIFF (via text property
+ 	  NSUInteger tlen = [cachedText length];
+@@ -9536,7 +9732,18 @@ to VoiceOver via the AX getter path (accessibilityValue etc.).  */
  	  NSRange newLine = [cachedText lineRangeForRange:
  				  NSMakeRange (newIdx, 0)];
  	  if (oldLine.location != newLine.location)
@@ -518,12 +594,16 @@ index 8ef344d9fe..1acb64630a 100644
  	  else
  	    {
  	      NSUInteger dist = (newIdx > oldIdx
-@@ -9548,34 +9750,23 @@ frameworks like Vertico bump BOTH BUF_MODIFF (via text property
+@@ -9558,38 +9765,23 @@ to VoiceOver via the AX getter path (accessibilityValue etc.).  */
  	  granularity = ns_ax_text_selection_granularity_line;
  	}
  
+-      /* Treat all moves as Emacs-initiated until voiceoverSetPoint
+-	 tracking is introduced (subsequent patch).  */
+-      BOOL emacsMovedCursor = YES;
+-
 -      /* Programmatic jumps that cross a line boundary (]], [[, M-<,
--	 xref, imenu, ...) are discontiguous: the cursor teleported to an
+-	 xref, imenu, …) are discontiguous: the cursor teleported to an
 -	 arbitrary position, not one sequential step forward/backward.
 -	 Reporting AXTextSelectionDirectionDiscontiguous causes VoiceOver
 -	 to re-anchor its rotor browse cursor at the new
@@ -566,7 +646,7 @@ index 8ef344d9fe..1acb64630a 100644
  	{
  	  NSWindow *win = [self.emacsView window];
  	  if (win)
-@@ -9734,6 +9925,13 @@ - (NSRect)accessibilityFrame
+@@ -9748,6 +9940,13 @@ - (NSRect)accessibilityFrame
    if (vis_start >= vis_end)
      return @[];
  
@@ -580,18 +660,17 @@ index 8ef344d9fe..1acb64630a 100644
    block_input ();
    specpdl_ref blk_count = SPECPDL_INDEX ();
    record_unwind_protect_void (unblock_input);
-@@ -10040,6 +10238,10 @@ - (void)dealloc
+@@ -10056,6 +10255,9 @@ - (void)dealloc
  #endif
  
    [accessibilityElements release];
 +#ifdef NS_IMPL_COCOA
-+  if (childFrameLastCandidate)
-+    xfree (childFrameLastCandidate);
++  [childFrameLastCandidate release];
 +#endif
    [[self menu] release];
    [super dealloc];
  }
-@@ -11489,6 +11691,9 @@ - (instancetype) initFrameFromEmacs: (struct frame *)f
+@@ -11505,6 +11708,9 @@ - (instancetype) initFrameFromEmacs: (struct frame *)f
  
    windowClosing = NO;
    processingCompose = NO;
@@ -601,7 +680,7 @@ index 8ef344d9fe..1acb64630a 100644
    scrollbarsNeedingUpdate = 0;
    fs_state = FULLSCREEN_NONE;
    fs_before_fs = next_maximized = -1;
-@@ -12797,6 +13002,161 @@ - (id)accessibilityFocusedUIElement
+@@ -12813,6 +13019,158 @@ - (id)accessibilityFocusedUIElement
     The existing elements carry cached state (modiff, point) from the
     previous redisplay cycle.  Rebuilding first would create fresh
     elements with current values, making change detection impossible.  */
@@ -621,7 +700,10 @@ index 8ef344d9fe..1acb64630a 100644
 +   Reads echo_area_buffer[0] directly because with_echo_area_buffer()
 +   sets current_buffer via set_buffer_internal_1() but does NOT call
 +   Fset_window_buffer(), so the minibuffer window's contents pointer
-+   still points to the inactive " *Minibuf-0*" buffer.  */
++   still points to the inactive " *Minibuf-0*" buffer.
++   echo_area_buffer[] is maintained by setup_echo_area_for_printing()
++   and clear_message() in xdisp.c; its lifetime is the process lifetime
++   and it is valid whenever BUFFERP (echo_area_buffer[0]) is true.  */
 +- (void)postEchoAreaAnnouncementIfNeeded
 +{
 +  if (minibuf_level != 0)
@@ -686,27 +768,22 @@ index 8ef344d9fe..1acb64630a 100644
 +  if (!BUFFER_LIVE_P (b))
 +    return;
 +  EMACS_INT modiff = BUF_MODIFF (b);
-+  /* Compare buffer identity via the buffer name symbol, which is always
-+     GC-reachable through the obarray.  Storing the name avoids keeping
-+     a direct buffer pointer in a non-GC-visible ObjC ivar: if the buffer
-+     were killed and GC swept, a stale make_lisp_ptr value could collide
-+     with a newly-allocated buffer at the same address.  */
++  /* Compare buffer identity via the buffer name symbol.  Interned
++     symbols (obarray) are GC-reachable without staticpro(), avoiding
++     a direct struct buffer pointer in a non-GC-visible ObjC ivar.
++     Caveat: if the buffer is renamed (rename-buffer), the stored
++     symbol no longer matches the new name and the equality check
++     returns nil, causing one redundant re-scan.  This is harmless ---
++     completion popups (Corfu, Company) are never renamed during a
++     completion session.  Using a sequence number would avoid the
++     rename edge case but would require another ivar; the name symbol
++     is a pragmatic, GC-safe approximation.  */
 +  if (EQ (childFrameLastBuffer, BVAR (b, name))
 +      && modiff == childFrameLastModiff)
 +    return;
-+  /* Store the buffer name symbol (an interned Lisp_Object from
-+     obarray) rather than a raw pointer to struct buffer.
-+     Interned symbols are reachable from obarray and will not be
-+     garbage-collected, so no staticpro() registration is needed
-+     for this ivar.  */
 +  childFrameLastBuffer = BVAR (b, name);
 +  childFrameLastModiff = modiff;
 +
-+  /* BUFFER_LIVE_P(b) is already checked at entry (line above the
-+     EQ comparison).  No code between that check and here can kill
-+     the buffer, so this second check is redundant.  */
-+  eassert (BUFFER_LIVE_P (b));
-+
 +  /* Skip buffers larger than a typical completion popup.
 +     This avoids scanning eldoc, which-key, or other child
 +     frame buffers that are not completion UIs.  */
@@ -730,11 +807,10 @@ index 8ef344d9fe..1acb64630a 100644
 +    return;
 +
 +  /* Deduplicate --- avoid re-announcing the same candidate.  */
-+  const char *cstr = [candidate UTF8String];
-+  if (childFrameLastCandidate && strcmp (cstr, childFrameLastCandidate) == 0)
++  if ([candidate isEqualToString:childFrameLastCandidate])
 +    return;
-+  xfree (childFrameLastCandidate);
-+  childFrameLastCandidate = xstrdup (cstr);
++  [childFrameLastCandidate release];
++  childFrameLastCandidate = [candidate copy];
 +
 +  NSDictionary *annInfo = @{
 +    NSAccessibilityAnnouncementKey: candidate,
@@ -763,7 +839,7 @@ index 8ef344d9fe..1acb64630a 100644
  - (void)postAccessibilityUpdates
  {
    NSTRACE ("[EmacsView postAccessibilityUpdates]");
-@@ -12807,11 +13167,69 @@ - (void)postAccessibilityUpdates
+@@ -12823,14 +13182,71 @@ - (void)postAccessibilityUpdates
  
    /* Re-entrance guard: VoiceOver callbacks during notification posting
       can trigger redisplay, which calls ns_update_end, which calls us