@attentionform/astra-mcp-server 0.3.0 → 0.4.0

package/dist/index.js

@@ -5566,6 +5566,23 @@ function writeCorePropertiesPart(adapter, xml) {
   } catch {
   }
 }
+function registerExistingCorePropertiesPart(adapter) {
+  let present = false;
+  try {
+    present = adapter.readTextOrNull(CORE_PROPERTIES_PART) !== null;
+  } catch {
+    return;
+  }
+  if (!present) return;
+  try {
+    ensureContentTypeOverride(adapter);
+  } catch {
+  }
+  try {
+    ensurePackageRel(adapter);
+  } catch {
+  }
+}
 function patchToMetadata(patch) {
   const out = {};
   if (patch.title !== void 0) out.title = patch.title;
@@ -9811,6 +9828,41 @@ function hasLiveNumberingForSync(ast) {
   }
 }
 
+// ../engine/src/ooxml/quote-style.ts
+var QUOTE_STYLE_ID = "Quote";
+var QUOTE_INDENT_TWIPS = 720;
+var QUOTE_STYLE_BODY = `<w:style w:type="paragraph" w:styleId="Quote">
+    <w:name w:val="Quote"/>
+    <w:basedOn w:val="Normal"/>
+    <w:next w:val="Normal"/>
+    <w:uiPriority w:val="29"/>
+    <w:qFormat/>
+    <w:pPr>
+      <w:pBdr>
+        <w:left w:val="single" w:sz="18" w:space="10" w:color="94A3B8"/>
+      </w:pBdr>
+      <w:spacing w:before="120" w:after="120"/>
+      <w:ind w:left="${QUOTE_INDENT_TWIPS}"/>
+    </w:pPr>
+    <w:rPr>
+      <w:i/>
+      <w:color w:val="475569"/>
+    </w:rPr>
+  </w:style>`;
+var QUOTE_STYLE_XML = QUOTE_STYLE_BODY.replace("<w:style ", '<w:style xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main" ');
+function ensureQuoteStyle(stylesDom) {
+  if (!stylesDom) return false;
+  const root = stylesDom.getElementsByTagName("w:styles")[0];
+  if (!root) return false;
+  for (const style of Array.from(stylesDom.getElementsByTagName("w:style"))) {
+    if (style.getAttribute("w:styleId") === QUOTE_STYLE_ID) return false;
+  }
+  const fragment = new DOMParser().parseFromString(QUOTE_STYLE_XML, "text/xml").documentElement;
+  if (!fragment) return false;
+  root.appendChild(stylesDom.importNode(fragment, true));
+  return true;
+}
+
 // ../engine/src/parser.ts
 function hasAncestorTag(el, tag) {
   for (let n = el.parentNode; n; n = n.parentNode) {
@@ -10475,6 +10527,7 @@ var DocxParser = class _DocxParser {
     } else {
       this.stylesDom = null;
     }
+    registerExistingCorePropertiesPart(this.getZipAdapter());
     this.invalidateMediaCache();
     this.assignStableIds();
     this._bumpNodePagesRevision();
@@ -11040,6 +11093,27 @@ var DocxParser = class _DocxParser {
     return tracked;
   }
   // --- AST layer: stable id assignment ---
+  /** Orders AST blocks by where their element sits in the body; blocks inside one body child keep their order. */
+  sortBlocksInDocumentOrder(nodes) {
+    const body = this.documentDom.getElementsByTagName("w:body")[0];
+    if (!body || nodes.length < 2) return;
+    const topIndex = /* @__PURE__ */ new Map();
+    let position2 = 0;
+    for (let child = body.firstChild; child; child = child.nextSibling) {
+      if (child.nodeType === 1) topIndex.set(child, position2++);
+    }
+    const keyOf = (element) => {
+      let current = element;
+      while (current && current.parentNode !== body) current = current.parentNode;
+      return current ? topIndex.get(current) ?? Number.MAX_SAFE_INTEGER : Number.MAX_SAFE_INTEGER;
+    };
+    const keyed = nodes.map((node, index) => ({ node, index, key: keyOf(node.xml) }));
+    if (keyed.every((entry, i) => i === 0 || keyed[i - 1].key <= entry.key)) return;
+    keyed.sort((a, b) => a.key - b.key || a.index - b.index);
+    keyed.forEach((entry, i) => {
+      nodes[i] = entry.node;
+    });
+  }
   async getAST() {
     const ast = {
       metadata: {},
@@ -11417,6 +11491,7 @@ var DocxParser = class _DocxParser {
       ast.sectPrFlags = { titlePg: false, evenAndOddHeaders: false };
     }
     ast.nextChangeId = firstFreeRevisionId(this.maxPackageRevisionId());
+    this.sortBlocksInDocumentOrder(rootNodes);
     ast.sections.push(...splitIntoSections(rootNodes, fileSections));
     const prevNumberingAst = this.lastAstForNumbering;
     if (prevNumberingAst && prevNumberingAst !== ast) {
@@ -13191,6 +13266,7 @@ ${validation.errors.join("\n")}`, "repair the part XML or re-save the document i
       <w:spacing w:before="120" w:after="120" w:line="240" w:lineRule="auto"/>
     </w:pPr>
   </w:style>
+  ${QUOTE_STYLE_BODY}
   <w:style w:type="character" w:styleId="Code">
     <w:name w:val="Code"/>
     <w:rPr>
@@ -13573,15 +13649,26 @@ var import_isomorphic_git = __toESM(require("isomorphic-git"));
 var import_fs3 = __toESM(require("fs"));
 var import_promises = __toESM(require("fs/promises"));
 var import_path2 = __toESM(require("path"));
+function hasUriScheme(ref) {
+  if (/^[a-zA-Z]:[\\/]/.test(ref)) return false;
+  return /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(ref);
+}
+function withoutTrailingSeparator(p, normalized) {
+  const root = p.parse(normalized).root;
+  let out = normalized;
+  while (out.length > root.length && out.endsWith(p.sep)) out = out.slice(0, -1);
+  return out;
+}
 function isPathInsideDir(candidate, dir, platform = process.platform) {
-  const normC = import_path2.default.normalize(candidate);
-  const normD = import_path2.default.normalize(dir);
+  const p = platform === "win32" ? import_path2.default.win32 : import_path2.default.posix;
+  let c = withoutTrailingSeparator(p, p.normalize(candidate));
+  let d = withoutTrailingSeparator(p, p.normalize(dir));
   if (platform === "win32") {
-    const lc = normC.toLowerCase();
-    const ld = normD.toLowerCase();
-    return lc === ld || lc.startsWith(ld + import_path2.default.sep.toLowerCase());
+    c = c.toLowerCase();
+    d = d.toLowerCase();
   }
-  return normC === normD || normC.startsWith(normD + import_path2.default.sep);
+  if (c === d) return true;
+  return c.startsWith(d.endsWith(p.sep) ? d : d + p.sep);
 }
 function canonicalizeForAsset(resolved) {
   try {
@@ -14860,6 +14947,19 @@ function warnIfLowContrast(warnings, seen, fill, textColor, where) {
     warnings.push(msg);
   }
 }
+function autoTextForFill(fill, current) {
+  if (!/^[0-9A-Fa-f]{6}$/.test(fill)) return void 0;
+  if (contrastRatio((current ?? "000000").toUpperCase(), fill.toUpperCase()) >= TABLE_CONTRAST_MIN_RATIO) return void 0;
+  return contrastRatio("FFFFFF", fill.toUpperCase()) > contrastRatio("000000", fill.toUpperCase()) ? "FFFFFF" : "000000";
+}
+function noteAutoText(warnings, seen, fill, text2, where) {
+  const key = `auto:${fill}:${text2}`;
+  if (seen.has(key)) return;
+  seen.add(key);
+  warnings.push(
+    `Table note: text set to #${text2} at ${where} because black text is not readable on fill #${fill} (contrast ${contrastRatio(text2, fill).toFixed(2)}:1). Pass textColor to choose another colour.`
+  );
+}
 function paintCellTextColor(tc, doc, normColor) {
   let ps = directChildren5(tc, "w:p");
   if (ps.length === 0) {
@@ -15486,6 +15586,13 @@ async function executeTable(opIn, ast, guide) {
           let effectiveText;
           if (rIdx === 0) {
             effectiveText = explicitTextColor ?? guideTextForFill(rowFill);
+            if (effectiveText === void 0) {
+              const auto = autoTextForFill(rowFill, firstExplicitCellTextColor(tc));
+              if (auto) {
+                effectiveText = auto;
+                noteAutoText(warnings, warnedContrastPairs, rowFill, auto, `header cell (${rIdx + 1},${cIdx + 1}) of table '${tableNode.id}'`);
+              }
+            }
             if (effectiveText && tblEl.ownerDocument) {
               paintCellTextColor(tc, tblEl.ownerDocument, effectiveText);
             }
@@ -16012,7 +16119,14 @@ async function executeTable(opIn, ast, guide) {
       shd.setAttribute("w:color", "auto");
       shd.setAttribute("w:fill", normFill);
       sortChildrenBySchema(tcPr, TCPR_CHILD_ORDER);
-      const effectiveText = explicitTextColor ?? guideTextForFill(normFill);
+      let effectiveText = explicitTextColor ?? guideTextForFill(normFill);
+      if (effectiveText === void 0) {
+        const auto = autoTextForFill(normFill, firstExplicitCellTextColor(tc));
+        if (auto) {
+          effectiveText = auto;
+          noteAutoText(warnings, warnedContrastPairs, normFill, auto, `cell (${shown(rowIndex)},${shown(colIndex)}) of table '${tableNode.id}'`);
+        }
+      }
       if (effectiveText && tblEl.ownerDocument) {
         paintCellTextColor(tc, tblEl.ownerDocument, effectiveText);
       }
@@ -16296,7 +16410,7 @@ async function executeTable(opIn, ast, guide) {
       break;
     }
     case "setCellTextColor": {
-      const colorInput = raw.color ?? op.color;
+      const colorInput = raw.color ?? op.color ?? raw.textColor ?? op.textColor;
       if (colorInput === void 0 || colorInput === null || String(colorInput).trim() === "") {
         throw new Error(
           `E_VALIDATION: setCellTextColor requires color (got no color). Remedy: pass color as 6 hex digits without '#', e.g. color:'FFFFFF' for white header text.`
@@ -16752,6 +16866,13 @@ function sanitizeXml(xmlStr) {
 // ../engine/src/operation-schema.ts
 var import_zod2 = require("zod");
 
+// ../engine/src/anchor-alias.ts
+function anchorAliasOf(value) {
+  if (value === "start" || value === "@start") return "start";
+  if (value === "end" || value === "@end") return "end";
+  return null;
+}
+
 // ../engine/src/operation-params.ts
 var STRUCTURAL = /* @__PURE__ */ new Set(["action", "target", "tableId", "operation", "op", "params", "trackChanges", "expectedVersion"]);
 var ROW = ["rowIndex", "row"];
@@ -16777,9 +16898,17 @@ var TABLE_SUBOP_KEYS = {
   setCellAlignment: ["align", "alignment", ...ROW, ...COL],
   setTableAlignment: ["align", "alignment"],
   setCellPadding: ["padding", ...ROW, ...COL],
-  setCellTextColor: ["color", ...ROW, ...COL],
+  setCellTextColor: ["color", "textColor", ...ROW, ...COL],
   setKeepTogether: []
 };
+function describeTableSubOpKeys() {
+  const aliases = /* @__PURE__ */ new Set(["rowIndex", "colIndex", "columnIndex"]);
+  const parts = Object.entries(TABLE_SUBOP_KEYS).map(([sub, keys]) => {
+    const shown2 = keys.filter((k) => !aliases.has(k));
+    return shown2.length > 0 ? `${sub}(${shown2.join(",")})` : sub;
+  });
+  return `Parameters each operation reads (row and col count from 1): ${parts.join("; ")}.`;
+}
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -20733,6 +20862,8 @@ var expectedVersion = import_zod2.z.number().int().nonnegative().optional();
 var nestedParams = import_zod2.z.record(import_zod2.z.string(), import_zod2.z.unknown()).optional();
 var sectionNumber = import_zod2.z.number().int().positive("sections count from 1 (1 is the first section)").describe("Section number, counting from 1 (1 is the first section).");
 var position = import_zod2.z.enum(["before", "after"]);
+var ANCHOR_REF_DESCRIPTION = "A node id from inspect_document, or 'start' / 'end' for the first / last block of the document (no inspect needed; '@start' and '@end' work too). With 'start', position defaults to 'before'; with 'end', to 'after'.";
+var ANCHOR_REF_SHORT = "A node id, or 'start' / 'end' for the first / last block.";
 var operationInsertPosition = import_zod2.z.enum(["before", "after"]).optional();
 var FONT_SIZE_PT_REGEX = /^\s*(\d+(?:\.\d+)?)\s*pt\s*$/i;
 function parseFontSize(sz) {
@@ -20835,7 +20966,7 @@ var insertOp = import_zod2.z.object({
   // engine appends in call order without ever reading them) need no dummy
   // anchor. Body inserts still require both — enforced by the strict
   // validators below, not by this shape.
-  anchor: import_zod2.z.string().min(1).max(256).optional(),
+  anchor: import_zod2.z.string().min(1).max(256).describe(ANCHOR_REF_DESCRIPTION).optional(),
   position: operationInsertPosition,
   text: import_zod2.z.string().max(5e5).optional(),
   xml: import_zod2.z.string().max(5e5).optional(),
@@ -20957,7 +21088,7 @@ var clearFormatOp = import_zod2.z.object({
 var moveOp = import_zod2.z.object({
   action: import_zod2.z.literal("move"),
   target: nodeIdOrList,
-  anchor: import_zod2.z.string().min(1).max(256),
+  anchor: import_zod2.z.string().min(1).max(256).describe(ANCHOR_REF_SHORT),
   position,
   expectedVersion,
   params: nestedParams
@@ -20994,8 +21125,8 @@ var tableOp = import_zod2.z.object({
   action: import_zod2.z.literal("table"),
   target: import_zod2.z.string().min(1).max(256).optional(),
   tableId: import_zod2.z.string().min(1).max(256).optional(),
-  operation: tableSubOp.optional(),
-  op: tableSubOp.optional(),
+  operation: tableSubOp.describe(describeTableSubOpKeys()).optional(),
+  op: tableSubOp.describe("Alias of operation.").optional(),
   trackChanges: import_zod2.z.boolean().optional(),
   author: revisionAuthor,
   date: revisionDate,
@@ -21025,7 +21156,6 @@ var tableOp = import_zod2.z.object({
   border: import_zod2.z.string().max(32).optional(),
   color: import_zod2.z.string().max(16).optional(),
   sz: fontSizeOrSzSchema.optional(),
-  fontSize: fontSizeOrSzSchema.optional(),
   vAlign: import_zod2.z.string().max(16).optional(),
   align: tableAlignmentSchema.optional(),
   alignment: tableAlignmentSchema.optional(),
@@ -21087,7 +21217,7 @@ var namedStyleOp = import_zod2.z.object({
 var fieldOp = import_zod2.z.object({
   action: import_zod2.z.literal("field"),
   operation: import_zod2.z.enum(["insertTOC", "insertPageNumber", "insertWordCount", "updateFields"]),
-  anchor: import_zod2.z.string().min(1).max(256).optional(),
+  anchor: import_zod2.z.string().min(1).max(256).describe(ANCHOR_REF_SHORT).optional(),
   position: operationInsertPosition,
   title: import_zod2.z.string().max(1e3).optional(),
   levels: import_zod2.z.number().int().min(1).max(9).optional(),
@@ -21103,7 +21233,7 @@ var equationOp = import_zod2.z.object({
   action: import_zod2.z.literal("equation"),
   operation: import_zod2.z.enum(["insert", "replace"]),
   latex: import_zod2.z.string().min(1).max(5e4),
-  anchor: import_zod2.z.string().min(1).max(256).optional(),
+  anchor: import_zod2.z.string().min(1).max(256).describe(ANCHOR_REF_SHORT).optional(),
   position: operationInsertPosition,
   target: import_zod2.z.string().min(1).max(256).optional(),
   id: import_zod2.z.string().min(1).max(256).optional(),
@@ -21217,7 +21347,7 @@ var chartOp = import_zod2.z.object({
   categories: import_zod2.z.array(import_zod2.z.string().max(500)).max(1e3).optional(),
   series: import_zod2.z.array(chartSeries).max(100).optional(),
   style: chartStyle.optional(),
-  anchor: import_zod2.z.string().min(1).max(256).optional(),
+  anchor: import_zod2.z.string().min(1).max(256).describe(ANCHOR_REF_SHORT).optional(),
   id: import_zod2.z.string().min(1).max(256).optional(),
   widthEmu: import_zod2.z.number().positive().max(1e8).optional(),
   heightEmu: import_zod2.z.number().positive().max(1e8).optional(),
@@ -21227,7 +21357,7 @@ var chartOp = import_zod2.z.object({
 var imageOp = import_zod2.z.object({
   action: import_zod2.z.literal("image"),
   operation: import_zod2.z.enum(["insert", "resize", "reposition", "setWrap", "setCaption", "delete", "setAltText"]),
-  anchor: import_zod2.z.string().min(1).max(256).optional(),
+  anchor: import_zod2.z.string().min(1).max(256).describe(ANCHOR_REF_SHORT).optional(),
   target: import_zod2.z.string().min(1).max(256).optional(),
   fileData: import_zod2.z.string().max(2e7).optional(),
   filePath: import_zod2.z.string().min(1).max(1024).optional(),
@@ -21241,7 +21371,8 @@ var imageOp = import_zod2.z.object({
 var calloutOp = import_zod2.z.object({
   action: import_zod2.z.literal("callout"),
   text: import_zod2.z.string().min(1).max(1e5),
-  anchor: import_zod2.z.string().min(1).max(256).optional(),
+  anchor: import_zod2.z.string().min(1).max(256).describe(ANCHOR_REF_SHORT).optional(),
+  id: import_zod2.z.string().min(1).max(256).optional(),
   title: import_zod2.z.string().max(1e3).optional(),
   theme: import_zod2.z.string().max(32).optional(),
   position: operationInsertPosition,
@@ -21251,7 +21382,7 @@ var calloutOp = import_zod2.z.object({
 var footnoteOp = import_zod2.z.object({
   action: import_zod2.z.literal("footnote"),
   operation: import_zod2.z.enum(["insert"]).optional(),
-  anchor: import_zod2.z.string().min(1).max(256),
+  anchor: import_zod2.z.string().min(1).max(256).describe(ANCHOR_REF_SHORT),
   text: import_zod2.z.string().min(1).max(5e4),
   id: import_zod2.z.string().min(1).max(256).optional(),
   offset: import_zod2.z.number().int().nonnegative().optional(),
@@ -21260,7 +21391,7 @@ var footnoteOp = import_zod2.z.object({
 var endnoteOp = import_zod2.z.object({
   action: import_zod2.z.literal("endnote"),
   operation: import_zod2.z.enum(["insert"]).optional(),
-  anchor: import_zod2.z.string().min(1).max(256),
+  anchor: import_zod2.z.string().min(1).max(256).describe(ANCHOR_REF_SHORT),
   text: import_zod2.z.string().min(1).max(5e4),
   id: import_zod2.z.string().min(1).max(256).optional(),
   offset: import_zod2.z.number().int().nonnegative().optional(),
@@ -21439,11 +21570,11 @@ function insertBodyAnchorDetail(op) {
   if (effectiveTarget === "header" || effectiveTarget === "footer") return null;
   const missing = [];
   if (typeof rec["anchor"] !== "string" || rec["anchor"].length < 1) {
-    missing.push("anchor: anchor is required for body inserts [invalid_type]");
+    missing.push("anchor: anchor is required for body inserts: a node id from inspect_document, or 'start' / 'end' for the first / last block [invalid_type]");
   }
   const pos = rec["position"];
-  if (pos !== "before" && pos !== "after") {
-    missing.push("position: position is required for body inserts [invalid_type]");
+  if (pos !== "before" && pos !== "after" && anchorAliasOf(rec["anchor"]) === null) {
+    missing.push("position: position is required for body inserts (or use anchor 'start' / 'end', which imply it) [invalid_type]");
   }
   return missing.length > 0 ? missing.join("; ") : null;
 }
@@ -28157,7 +28288,7 @@ function resolveImageFilePath(allowedDir, filePath) {
       "use a plain relative file path inside the allowed directory"
     );
   }
-  if (/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(trimmed)) {
+  if (hasUriScheme(trimmed)) {
     throw toError(
       "E_SANDBOX",
       "image filePath points outside the allowed directory",
@@ -28328,7 +28459,7 @@ function resolveAssetPath(allowedDir, refPath, line2, what) {
   if (trimmed.includes("\0") || /%00/i.test(trimmed) || trimmed.includes("\n") || trimmed.includes("\r")) {
     fail(line2, `${what} reference path is not usable`, "use a plain relative file path inside the allowed directory");
   }
-  if (/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(trimmed)) {
+  if (hasUriScheme(trimmed)) {
     fail(line2, `${what} reference points outside the allowed directory`, "keep referenced files inside the allowed directory and use a relative path");
   }
   const candidate = import_path5.default.isAbsolute(trimmed) ? import_path5.default.resolve(trimmed) : import_path5.default.resolve(allowedDir, trimmed);
@@ -29598,7 +29729,8 @@ async function executeCallout(op, ast, parser2, guide) {
   if (!targetSection) throw new Error("No section available for callout box insertion");
   const ownerDoc = targetSection.nodes[0]?.xml?.ownerDocument || ownerDocumentOf(ast.sections);
   if (!ownerDoc) throw new Error("Cannot resolve XML DOM document");
-  const calloutId = isCalloutReproducible() ? (() => {
+  const clientId = pick("id", op.id);
+  const calloutId = typeof clientId === "string" && clientId.length > 0 ? clientId : isCalloutReproducible() ? (() => {
     const base = `callout_${calloutHash8(`${resolvedAnchor ?? ""}:${resolvedPosition}:${themeKey}:${resolvedTitle ?? ""}:${resolvedText}`)}`;
     const live = /* @__PURE__ */ new Set();
     try {
@@ -30909,6 +31041,208 @@ function executePageBorder(op, ast, parser2) {
   section.version += 1;
 }
 
+// ../engine/src/compose/pristine-seed.ts
+function pristineTemplateSeedIds(parser2, requestedTemplate) {
+  if (!parser2.hasPristineBuiltinSeed()) return null;
+  let summary;
+  try {
+    summary = parser2.getStructuralSummary();
+  } catch {
+    return null;
+  }
+  const nodes = summary.nodes ?? [];
+  if (![1, 2, 4, 5, 6].includes(nodes.length)) return null;
+  if (summary.hasTrackedChanges === true) return null;
+  if (Object.keys(summary.mediaFiles ?? {}).length > 0) return null;
+  if ((summary.headers ?? []).length > 0) return null;
+  if ((summary.footers ?? []).length > 0) return null;
+  if ((summary.charts ?? []).length > 0) return null;
+  try {
+    const zip = parser2.getZipAdapter?.();
+    if (typeof zip?.hasFile === "function") {
+      for (const part of [
+        "word/footnotes.xml",
+        "word/endnotes.xml",
+        "word/comments.xml",
+        "word/commentsExtended.xml"
+      ]) {
+        try {
+          if (zip.hasFile(part)) return null;
+        } catch {
+          return null;
+        }
+      }
+    } else {
+      return null;
+    }
+  } catch {
+    return null;
+  }
+  for (const n of nodes) {
+    if (n.hasTrackedChanges === true) return null;
+    const raw = n.rawXml ?? "";
+    if (raw.includes("w:footnoteReference") || raw.includes("w:endnoteReference") || raw.includes("w:commentReference") || raw.includes("w:commentRangeStart") || raw.includes("w:commentRangeEnd")) {
+      return null;
+    }
+  }
+  const ids = nodes.map((n) => n.id ?? "").filter((id) => id.length > 0);
+  if (ids.length !== nodes.length) return null;
+  if (nodes.length === 1) {
+    const node = nodes[0];
+    if (node.type !== "paragraph") return null;
+    if ((node.text ?? "").trim() !== "") return null;
+    return ids;
+  }
+  if (nodes.length === 2) {
+    const [first, second] = nodes;
+    const t0 = (first.text ?? "").trim();
+    const t1 = (second.text ?? "").trim();
+    if (t0 === BLANK_SEED_TITLE && t1 === BLANK_SEED_HINT) {
+      const firstRaw = first.rawXml ?? "";
+      const secondRaw = second.rawXml ?? "";
+      if (!firstRaw.includes('w:val="Title"') || !secondRaw.includes('w:val="Subtitle"')) return null;
+      return ids;
+    }
+    const tmpl = requestedTemplate?.toLowerCase();
+    if (t0 === "MEMORANDUM" && tmpl === "memo") return ids;
+    if (t0 === "Letter" && tmpl === "letter") return ids;
+    if (t0 === "Proposal" && tmpl === "proposal") return ids;
+    if (t0 === "INVOICE" && tmpl === "invoice") return ids;
+    return null;
+  }
+  if (nodes.length === 4) {
+    const t0 = (nodes[0].text ?? "").trim();
+    const tmpl = requestedTemplate?.toLowerCase();
+    if (t0 === "Research Benchmark Report" && tmpl === "research") return ids;
+    if (t0 === "Corporate Strategy Roadmap" && tmpl === "corporate") return ids;
+    if (t0 === "Velocity Audit & Performance" && tmpl === "bar-chart-3d") return ids;
+    return null;
+  }
+  if (nodes.length === 5) {
+    const t0 = (nodes[0].text ?? "").trim();
+    const tmpl = requestedTemplate?.toLowerCase();
+    if (t0 === "Financial Report & Audit" && tmpl === "financial") return ids;
+    return null;
+  }
+  if (nodes.length === 6) {
+    const t0 = (nodes[0].text ?? "").trim();
+    const t2 = (nodes[2].text ?? "").trim();
+    const tmpl = requestedTemplate?.toLowerCase();
+    if (t0 === "Q3 Executive Financial Performance Report" && t2 === "1. Executive Summary") {
+      if (tmpl === "report") return ids;
+      return null;
+    }
+    if (t0 === "Manuscript Title" && t2 === "Chapter 1: The Beginning" && tmpl === "novel") {
+      return ids;
+    }
+    if (t0 === "Neural Document Architectures: A Comparative Benchmark" && tmpl === "academic") {
+      return ids;
+    }
+    if (t0 === "The ASTra Dispatch \u2014 Monthly Engineering Gazette" && tmpl === "newsletter") return ids;
+    if (t0 === "ASTra Document Engine API Specification" && (tmpl === "api" || tmpl === "api-spec")) return ids;
+    return null;
+  }
+  return null;
+}
+var SEED_TEMPLATE_NAMES = [
+  "memo",
+  "letter",
+  "proposal",
+  "invoice",
+  "research",
+  "corporate",
+  "bar-chart-3d",
+  "financial",
+  "report",
+  "novel",
+  "academic",
+  "newsletter",
+  "api-spec"
+];
+function pristineSeedIdsOfAnyTemplate(parser2) {
+  const blank = pristineTemplateSeedIds(parser2);
+  if (blank !== null) return blank;
+  for (const name2 of SEED_TEMPLATE_NAMES) {
+    const ids = pristineTemplateSeedIds(parser2, name2);
+    if (ids !== null) return ids;
+  }
+  return null;
+}
+
+// ../engine/src/document-title.ts
+var TEMPLATE_NAMES = [
+  "blank",
+  "memo",
+  "report",
+  "letter",
+  "proposal",
+  "invoice",
+  "research",
+  "corporate",
+  "financial",
+  "novel",
+  "academic",
+  "newsletter",
+  "api-spec",
+  "bar-chart-3d"
+];
+var PLACEHOLDER_TITLES = new Set(TEMPLATE_NAMES.map((name2) => newDocumentTitle(name2).toLowerCase()));
+var DERIVED_TITLE_MAX = 200;
+var DEFAULT_CREATOR = "ASTra";
+function isPlaceholderTitle(title) {
+  if (typeof title !== "string") return true;
+  const clean = title.replace(/\s+/g, " ").trim().toLowerCase();
+  return clean === "" || PLACEHOLDER_TITLES.has(clean);
+}
+function cleanTitle(text2) {
+  const plain = typeof text2 === "string" ? Array.from(text2, (ch) => ch.charCodeAt(0) < 32 || ch.charCodeAt(0) === 127 ? " " : ch).join("").replace(/\s+/g, " ").trim() : "";
+  return plain.length > DERIVED_TITLE_MAX ? plain.slice(0, DERIVED_TITLE_MAX).trimEnd() : plain;
+}
+function deriveTitleFromContent(ast) {
+  const nodes = ast.sections.flatMap((section) => section.nodes);
+  const styleOf = (node) => {
+    const pPr = Array.from(node.xml.childNodes).find((c) => c.nodeType === 1 && c.tagName === "w:pPr");
+    const pStyle = pPr ? Array.from(pPr.childNodes).find((c) => c.nodeType === 1 && c.tagName === "w:pStyle") : void 0;
+    return pStyle?.getAttribute("w:val") ?? node.metadata?.namedStyle ?? void 0;
+  };
+  const textOf4 = (node) => {
+    const runs = node.xml.getElementsByTagName("w:t");
+    let text2 = "";
+    for (let i = 0; i < runs.length; i++) text2 += runs[i].textContent ?? "";
+    return text2 !== "" ? text2 : node.metadata?.text ?? "";
+  };
+  const pick = (match, from) => {
+    for (const node of nodes) {
+      if (node.type !== "paragraph" || !match(node)) continue;
+      const title = cleanTitle(textOf4(node));
+      if (title !== "" && !isPlaceholderTitle(title)) return { title, from };
+    }
+    return null;
+  };
+  return pick((n) => n.id.startsWith("cover_title_"), "cover page") ?? pick((n) => styleOf(n) === "Title", "Title") ?? pick((n) => styleOf(n) === "Heading1", "Heading 1");
+}
+function applyDocumentIdentity(ast, parser2) {
+  const result = {};
+  const patch = {};
+  if (isPlaceholderTitle(ast.metadata?.title)) {
+    const derived = deriveTitleFromContent(ast);
+    if (derived) {
+      patch.title = derived.title;
+      result.title = derived.title;
+      result.titleSetFrom = derived.from;
+    }
+  }
+  const author = typeof ast.settings?.defaultAuthor === "string" ? ast.settings.defaultAuthor.trim() : "";
+  if (author !== "" && author !== DEFAULT_CREATOR && ast.metadata?.creator === DEFAULT_CREATOR) {
+    patch.creator = author;
+    patch.lastModifiedBy = author;
+    result.creatorSet = author;
+  }
+  if (Object.keys(patch).length === 0) return result;
+  new CorePropertiesManipulator(ast, parser2?.getZipAdapter()).update(patch);
+  return result;
+}
+
 // ../engine/src/operations/coverPage.ts
 function isCoverReproducible(explicit, env) {
   try {
@@ -30973,6 +31307,7 @@ function executeCoverPage(op, ast, parser2) {
   if (!firstSection || firstSection.nodes.length === 0) {
     throw new Error("Cannot insert cover page into an empty document");
   }
+  const seedIds = parser2 ? pristineSeedIdsOfAnyTemplate(parser2) : null;
   const doc = firstSection.nodes[0].xml.ownerDocument;
   if (!doc) throw new Error("Document not found on first section");
   const sectPr = doc.getElementsByTagName("w:sectPr")[0];
@@ -31039,8 +31374,8 @@ function executeCoverPage(op, ast, parser2) {
   titleColor.setAttribute("w:val", accentColor);
   titleRPr.appendChild(titleFont);
   titleRPr.appendChild(titleBold);
-  titleRPr.appendChild(titleSz);
   titleRPr.appendChild(titleColor);
+  titleRPr.appendChild(titleSz);
   titleRun.appendChild(titleRPr);
   titleRun.appendChild(createTextElement(doc, titleText));
   titleP.appendChild(titleRun);
@@ -31066,8 +31401,8 @@ function executeCoverPage(op, ast, parser2) {
     subSz.setAttribute("w:val", "28");
     const subColor = createWordElement(doc, "w:color");
     subColor.setAttribute("w:val", "64748B");
-    subRPr.appendChild(subSz);
     subRPr.appendChild(subColor);
+    subRPr.appendChild(subSz);
     subRun.appendChild(subRPr);
     subRun.appendChild(createTextElement(doc, subtitleText));
     subP.appendChild(subRun);
@@ -31117,8 +31452,8 @@ function executeCoverPage(op, ast, parser2) {
   metaSz.setAttribute("w:val", "22");
   const metaColor = createWordElement(doc, "w:color");
   metaColor.setAttribute("w:val", "475569");
-  metaRPr.appendChild(metaSz);
   metaRPr.appendChild(metaColor);
+  metaRPr.appendChild(metaSz);
   metaRun.appendChild(metaRPr);
   const metaLines = [authorText, orgText, dateText].filter(Boolean).join(" \u2022 ");
   metaRun.appendChild(createTextElement(doc, metaLines || dateText));
@@ -31163,6 +31498,13 @@ function executeCoverPage(op, ast, parser2) {
       }
     }
   }
+  if (seedIds !== null && seedIds.length > 0) {
+    executeDelete({ action: "delete", target: seedIds }, ast, parser2);
+  }
+  try {
+    applyDocumentIdentity(ast, parser2);
+  } catch {
+  }
 }
 
 // ../engine/src/operations/metadata.ts
@@ -31334,8 +31676,9 @@ function collectBatchTouchedIds(ops, ast) {
   const touch = (raw) => {
     if (typeof raw !== "string" || raw.length === 0) return;
     let resolved = raw;
-    if (raw === "start") resolved = order[0] ?? raw;
-    else if (raw === "end") resolved = order[order.length - 1] ?? raw;
+    const alias = anchorAliasOf(raw);
+    if (alias === "start") resolved = order[0] ?? raw;
+    else if (alias === "end") resolved = order[order.length - 1] ?? raw;
     else {
       const cell = parseCellAddress(raw);
       if (cell && order.includes(cell.tableId)) resolved = cell.tableId;
@@ -31928,13 +32271,13 @@ var OperationEngine = class _OperationEngine {
   /**
    * R-4 helper: true when the op mints a live node id from the client id.
    * Only these routes use `op.id` verbatim as the node id; other actions
-   * either ignore `id` (footnote/callout/field generate their own) or are
+   * either ignore `id` (footnote/field generate their own) or are
    * rejected at the schema gate, so live collision applies here only.
    */
   static mintsNodeId(op) {
     const fields = op;
     const action = typeof fields["action"] === "string" ? String(fields["action"]) : "";
-    if (action === "insert") return true;
+    if (action === "insert" || action === "callout") return true;
     if (action === "equation") {
       const sub = fields["operation"] ?? fields["params"]?.["operation"];
       return sub === "insert";
@@ -32034,7 +32377,7 @@ var OperationEngine = class _OperationEngine {
    * E_VALIDATION + remedy.
    */
   static isAnchorAlias(value) {
-    return value === "start" || value === "end";
+    return anchorAliasOf(value) !== null;
   }
   resolveAnchorAlias(op) {
     const fields = op;
@@ -32050,6 +32393,10 @@ var OperationEngine = class _OperationEngine {
       }
     }
     if (aliasSeen === null) return;
+    for (const h of holders) {
+      const alias = anchorAliasOf(h["anchor"]);
+      if (alias !== null && h["position"] === void 0) h["position"] = alias === "start" ? "before" : "after";
+    }
     let first;
     let last;
     for (const section of this.ast.sections ?? []) {
@@ -32066,8 +32413,9 @@ var OperationEngine = class _OperationEngine {
       );
     }
     for (const h of holders) {
-      if (h["anchor"] === "start") h["anchor"] = first;
-      else if (h["anchor"] === "end") h["anchor"] = last;
+      const alias = anchorAliasOf(h["anchor"]);
+      if (alias === "start") h["anchor"] = first;
+      else if (alias === "end") h["anchor"] = last;
     }
   }
   async routeOperation(op, allowedDir) {
@@ -33324,7 +33672,11 @@ ${textLines.map((l) => `> ${l}`).join("\n")}
 `);
             } else {
               const textLines = text2 ? text2.split("\n") : [];
-              lines.push(`${textLines.map((l) => `> ${l}`).join("\n")}
+              const ind = node.xml?.getElementsByTagName?.("w:pPr")?.[0]?.getElementsByTagName?.("w:ind")?.[0] ?? null;
+              const left = ind ? parseInt(ind.getAttribute("w:left") || "0", 10) : 0;
+              const depth = style === "quote" && Number.isFinite(left) && left > 0 ? Math.min(3, Math.max(1, Math.round(left / 720))) : 1;
+              const marker = ">".repeat(1).concat(" >".repeat(depth - 1));
+              lines.push(`${textLines.map((l) => `${marker} ${l}`).join("\n")}
 `);
             }
           } else {
@@ -33828,17 +34180,19 @@ function directKids(parent, tag) {
   return out;
 }
 function cellTextOf(tc) {
-  let text2 = "";
+  const parts = [];
   try {
     const paras = directKids(tc, "w:p");
     for (const p of paras) {
+      let text2 = "";
       const ts = p.getElementsByTagName("w:t");
       for (let i = 0; i < ts.length; i++) text2 += ts[i].textContent || "";
+      if (text2.trim().length > 0) parts.push(text2);
     }
   } catch {
     return "";
   }
-  return text2;
+  return parts.join(" ");
 }
 function displayLen(value) {
   return [...value].length;
@@ -33937,6 +34291,23 @@ function renderTableGrid(grid) {
   const rows = [...byRow.keys()].sort((a, b) => a - b);
   return rows.map((r) => (byRow.get(r) ?? []).map(renderGridCell).join(" | ")).join(" ; ");
 }
+function tableGridPlainText(tbl) {
+  try {
+    const el = tbl;
+    if (!el || typeof el.getElementsByTagName !== "function") return void 0;
+    const grid = extractTableGrid(el);
+    if (grid.cells.length === 0) return void 0;
+    const byRow = /* @__PURE__ */ new Map();
+    for (const c of grid.cells) {
+      const list = byRow.get(c.row);
+      if (list) list.push(c.text);
+      else byRow.set(c.row, [c.text]);
+    }
+    return [...byRow.keys()].sort((a, b) => a - b).map((r) => (byRow.get(r) ?? []).join(" | ")).join("\n");
+  } catch {
+    return void 0;
+  }
+}
 function renderChartText(node) {
   const kind = node.type === "chart3d" ? "3D Chart" : "Chart";
   const data = node.metadata.chartData;
@@ -38010,6 +38381,134 @@ var HeadlessVisualRenderer = class {
 };
 var headlessScreenshotProvider = new HeadlessVisualRenderer();
 
+// ../engine/src/stats.ts
+function nearestOwner(el, tagName) {
+  let cur = el.parentNode;
+  while (cur && typeof cur === "object") {
+    const e = cur;
+    if (e.tagName === tagName) return e;
+    cur = e.parentNode;
+  }
+  return null;
+}
+function tableCellTextSpaced(node) {
+  try {
+    const xml = node.xml;
+    if (!xml || typeof xml.getElementsByTagName !== "function") return void 0;
+    const tcs = xml.getElementsByTagName("w:tc");
+    if (!tcs || tcs.length === 0) return void 0;
+    const cells = [];
+    for (let i = 0; i < tcs.length; i++) {
+      const tc = tcs[i];
+      const paras = tc.getElementsByTagName("w:p");
+      if (paras.length > 0) {
+        const parts = [];
+        for (let p = 0; p < paras.length; p++) {
+          const para = paras[p];
+          if (nearestOwner(para, "w:tc") !== tc) continue;
+          const runs = para.getElementsByTagName("w:t");
+          let t = "";
+          for (let r = 0; r < runs.length; r++) {
+            const run = runs[r];
+            if (nearestOwner(run, "w:tc") !== tc) continue;
+            if (nearestOwner(run, "w:p") !== para) continue;
+            t += run.textContent || "";
+          }
+          if (t.trim().length > 0) parts.push(t.trim());
+        }
+        if (parts.length > 0) cells.push(parts.join(" "));
+      } else {
+        const runs = tc.getElementsByTagName("w:t");
+        let t = "";
+        for (let r = 0; r < runs.length; r++) {
+          const run = runs[r];
+          if (nearestOwner(run, "w:tc") !== tc) continue;
+          t += run.textContent || "";
+        }
+        if (t.trim().length > 0) cells.push(t.trim());
+      }
+    }
+    if (cells.length === 0) return "";
+    return cells.join(" ");
+  } catch {
+    return void 0;
+  }
+}
+function nestedTableCount(node) {
+  try {
+    const xml = node.xml;
+    if (!xml || typeof xml.getElementsByTagName !== "function") return 0;
+    return xml.getElementsByTagName("w:tbl").length;
+  } catch {
+    return 0;
+  }
+}
+function isCalloutTable(node, dims) {
+  try {
+    const xml = node.xml;
+    if (!xml || typeof xml.getElementsByTagName !== "function") return false;
+    if (dims) {
+      if (dims.rows !== 1 || dims.cols !== 1) return false;
+    } else {
+      const rows = Array.from(xml.childNodes).filter((n) => n.nodeType === 1 && n.tagName === "w:tr");
+      if (rows.length !== 1) return false;
+      const cells = Array.from(rows[0].childNodes).filter((n) => n.nodeType === 1 && n.tagName === "w:tc");
+      if (cells.length !== 1) return false;
+    }
+    const fill = xml.getElementsByTagName("w:shd")[0]?.getAttribute("w:fill") ?? "";
+    return /^[0-9A-Fa-f]{6}$/.test(fill);
+  } catch {
+    return false;
+  }
+}
+function countExplicitPageBreaks(node) {
+  if (node.type === "pageBreak") return 1;
+  const text2 = node.metadata?.text || "";
+  let count = text2 === "[Page Break]" ? 1 : 0;
+  try {
+    const xml = node.xml;
+    if (xml && typeof xml.getElementsByTagName === "function") {
+      const brs = xml.getElementsByTagName("w:br");
+      let brCount = 0;
+      for (let i = 0; i < brs.length; i++) {
+        if (brs[i].getAttribute("w:type") === "page") brCount++;
+      }
+      if (brCount > count) count = brCount;
+    }
+  } catch {
+  }
+  return count;
+}
+function computeDocStats(ast) {
+  let words = 0;
+  let paragraphs = 0;
+  let tables = 0;
+  let callouts = 0;
+  let images = 0;
+  let pageBreaks = 0;
+  for (const sec of ast.sections) {
+    for (const node of sec.nodes) {
+      if (node.type === "paragraph") paragraphs += 1;
+      if (node.type === "table") {
+        if (isCalloutTable(node)) callouts += 1;
+        else tables += 1;
+        tables += nestedTableCount(node);
+      }
+      if (node.type === "image") images += 1;
+      pageBreaks += countExplicitPageBreaks(node);
+      let text2 = node.metadata?.text ?? "";
+      if (node.type === "table") {
+        const spaced = tableCellTextSpaced(node);
+        if (spaced !== void 0) text2 = spaced;
+      }
+      const hits = text2.match(/\S+/g);
+      if (hits) words += hits.length;
+    }
+  }
+  const pageBudget = words / 450 + (tables + callouts) * 0.45 + images * 0.5 + pageBreaks;
+  return { words, paragraphs, pages: Math.max(1, Math.ceil(pageBudget)), tables, callouts, images };
+}
+
 // ../engine/src/visual/telemetry.ts
 var VISUAL_TELEMETRY_TOKEN_BUDGET = 500;
 var VISUAL_WIREFRAME_WIDTH = 68;
@@ -38106,17 +38605,6 @@ var WIREFRAME_TABLE_ROWS = 3;
 function flatText(value) {
   return value.replace(/\s+/g, " ").trim();
 }
-function isCalloutTable(node, grid) {
-  if (!grid || grid.rows !== 1 || grid.cols !== 1) return false;
-  try {
-    const xml = node.xml;
-    const shd = xml?.getElementsByTagName("w:shd")[0];
-    const fill = shd?.getAttribute("w:fill") ?? "";
-    return /^[0-9A-Fa-f]{6}$/.test(fill);
-  } catch {
-    return false;
-  }
-}
 function tableRowLines(grid, width) {
   const byRow = /* @__PURE__ */ new Map();
   for (const cell of grid.cells) {
@@ -38339,7 +38827,7 @@ function generateVisualWireframe(ast, targetPage = 1, pageMap, maxNodes = 24, op
     } else if (node.type === "table") {
       lines.push(emptyLine);
       const grid = tableGridOf(node);
-      if (isCalloutTable(node, grid)) {
+      if (isCalloutTable(node, grid ? { rows: grid.rows, cols: grid.cols } : null)) {
         const note = flatText(grid?.cells[0]?.text ?? "");
         const body = note.length > 48 ? note.slice(0, 45) + "..." : note;
         lines.push(`| [CALLOUT] ${body}`.slice(0, W2 - 2).padEnd(W2 - 1) + "|");
@@ -38527,6 +39015,10 @@ function buildLineIndex(src, tokens) {
   }
   return out;
 }
+var QUOTE_INDENT = QUOTE_INDENT_TWIPS;
+var QUOTE_LIST_INDENT = 360;
+var QUOTE_MAX_LEVEL = 3;
+var CODE_BLOCK_BASE_INDENT = 80;
 function subLine(blockRaw, blockLine, excerpt) {
   const found = blockRaw.indexOf(excerpt);
   if (found === -1) return blockLine;
@@ -38701,12 +39193,17 @@ function compileMarkdownDetailed(markdown, options) {
   const pendingNotes = [];
   let seq = 0;
   let lastInsertId = null;
+  const idPrefix = options?.idPrefix ?? "md";
   const nextId = () => {
     seq += 1;
-    return `md_${String(seq).padStart(4, "0")}`;
+    return `${idPrefix}_${String(seq).padStart(4, "0")}`;
+  };
+  const startAnchor = {
+    anchor: options?.anchor ?? "end",
+    position: options?.position ?? "after"
   };
   const insertAnchor = () => {
-    if (lastInsertId === null) return { anchor: "end", position: "after" };
+    if (lastInsertId === null) return { ...startAnchor };
     return { anchor: lastInsertId, position: "after" };
   };
   const pushInsertParagraph = (text2, spans) => {
@@ -38834,12 +39331,12 @@ function compileMarkdownDetailed(markdown, options) {
       const inlineMime = inlineKind === "jpeg" ? "image/jpeg" : inlineKind === "svg" ? "image/svg+xml" : inlineKind === "tiff" ? "image/tiff" : `image/${inlineKind}`;
       const inlineFitted = fitImageEmus(decodeImagePixels(inlineBuf, inlineKind));
       const inlineId = nextId();
-      const inlineAnchor = lastInsertId === null ? "end" : lastInsertId;
+      const inlineAnchor = insertAnchor();
       ops.push({
         action: "insert",
         type: "image",
-        anchor: inlineAnchor,
-        position: "after",
+        anchor: inlineAnchor.anchor,
+        position: inlineAnchor.position,
         id: inlineId,
         fileData: `data:${inlineMime};base64,${inlineBuf.toString("base64")}`,
         ...inlineFitted ? { width: inlineFitted.width, height: inlineFitted.height } : {},
@@ -38848,7 +39345,7 @@ function compileMarkdownDetailed(markdown, options) {
       lastInsertId = inlineId;
       return { id: inlineId, kind: "image" };
     }
-    if (/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(target)) {
+    if (hasUriScheme(target)) {
       fail(line2, "image reference points outside the allowed directory", "keep referenced files inside the allowed directory and use a relative path");
     }
     if (allowedDir === void 0) {
@@ -38857,14 +39354,17 @@ function compileMarkdownDetailed(markdown, options) {
     const isChart = target.toLowerCase().endsWith(CHART_JSON_SUFFIX);
     const absPath = resolveAssetPath(allowedDir, target, line2, isChart ? "chart" : "image");
     const id = nextId();
-    const anchorId = lastInsertId === null ? "end" : lastInsertId;
+    const chartAnchor = insertAnchor();
     if (isChart) {
+      if (chartAnchor.position === "before") {
+        fail(line2, "a chart cannot be the first block when the compose goes before a node", "start the Markdown with a paragraph, or place the compose after the node");
+      }
       const asset2 = readChartAsset(absPath, line2, allowedDir);
       const title = asset2.title ?? (alt.trim().length > 0 ? alt.trim() : "Chart");
       ops.push({
         action: "chart",
         operation: "insert",
-        anchor: anchorId,
+        anchor: chartAnchor.anchor,
         id,
         chartType: asset2.chartType,
         title,
@@ -38875,7 +39375,7 @@ function compileMarkdownDetailed(markdown, options) {
       return { id, kind: "chart" };
     }
     const asset = readImageAsset(absPath, line2, allowedDir);
-    const anchor = lastInsertId === null ? { anchor: "end", position: "after" } : { anchor: lastInsertId, position: "after" };
+    const anchor = insertAnchor();
     ops.push({
       action: "insert",
       type: "image",
@@ -38893,15 +39393,11 @@ function compileMarkdownDetailed(markdown, options) {
     const walkAlert = (list) => {
       for (const tok of list) {
         const t = tok;
-        if (t.type === "strong" || t.type === "em" || t.type === "codespan") {
-          fail(line2, "rich text inside alerts is out of scope", "move bold, italic, or code into a body paragraph");
-        }
         if (t.type === "link") {
           const raw = t.raw;
           if (typeof raw === "string" && raw.startsWith("<")) {
             fail(line2, "raw HTML is out of scope in an alert", "use plain Markdown blocks instead of HTML tags");
           }
-          fail(line2, "links inside alerts are out of scope", "move the link into a body paragraph");
         }
         if (t.type === "image") {
           fail(line2, "images are out of scope in an alert", "put images on their own block line instead");
@@ -38919,7 +39415,7 @@ function compileMarkdownDetailed(markdown, options) {
     if (alertTokens) walkAlert(alertTokens);
   };
   const handleAlertBlockquote = (token, line2) => {
-    const inner = token.tokens ?? [];
+    const inner = (token.tokens ?? []).filter((child) => child.type !== "space");
     if (inner.length === 0) {
       fail(line2, "blockquotes are out of scope", "use a plain paragraph");
     }
@@ -38945,6 +39441,7 @@ ${rest}` : sameLineBody;
     }
     const restLines = rest.split("\n");
     let title;
+    let titleSegments;
     let bodySrc = rest;
     if (restLines.length > 0 && ALERT_TITLE_PATTERN.test(restLines[0].trim())) {
       const innerTitle = (ALERT_TITLE_PATTERN.exec(restLines[0].trim())?.[1] ?? "").trim();
@@ -38967,6 +39464,22 @@ ${rest}` : sameLineBody;
       CITATION_REF_PATTERN.lastIndex = 0;
       title = innerTitle;
       bodySrc = restLines.slice(1).join("\n");
+      let titleTokens;
+      try {
+        titleTokens = lexMarkdown(restLines[0].trim(), { dollarMath: options?.dollarMath });
+      } catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        throw toError("E_VALIDATION", `line ${line2}: alert title rejected (${detail})`, "keep the alert title to one line of inline text");
+      }
+      const titleBlocks = titleTokens.filter((t) => t.type !== "space");
+      if (titleBlocks.length !== 1 || titleBlocks[0].type !== "paragraph") {
+        fail(line2, `alert [!${alertType}] title must be one line of inline text`, "keep the title to one bold line");
+      }
+      const titleInlineTokens = titleBlocks[0].tokens;
+      failOnSpanTokensInAlert(titleInlineTokens, line2);
+      const parsedTitle = parseInlineTokens(titleInlineTokens, line2, "an alert title", citationDefs, citationOrder, citationNum, usedCitations);
+      title = parsedTitle.plainText.length > 0 ? parsedTitle.plainText : innerTitle;
+      titleSegments = parsedTitle.segments;
     }
     for (const bodyLine of bodySrc.split("\n")) {
       if (CONTAINER_FENCE_PATTERN.test(bodyLine)) {
@@ -38987,6 +39500,7 @@ ${rest}` : sameLineBody;
       throw toError("E_VALIDATION", `line ${line2}: alert body rejected (${detail})`, "keep alert bodies plain text");
     }
     const cleanParas = [];
+    const bodySegments = [];
     for (const bodyToken of bodyTokens) {
       if (bodyToken.type === "space") continue;
       if (bodyToken.type !== "paragraph") {
@@ -39002,31 +39516,214 @@ ${rest}` : sameLineBody;
       FOOTNOTE_REF_PATTERN.lastIndex = 0;
       failOnImageOrHtml(paraText2, paraLine, "an alert");
       failOnSpanTokensInAlert(para.tokens, paraLine);
-      cleanParas.push(plainJoin(replaceCitationsInPlainCell(paraText2, paraLine)));
+      const parsedPara = parseInlineTokens(para.tokens, paraLine, "an alert", citationDefs, citationOrder, citationNum, usedCitations);
+      if (parsedPara.footnoteRefs.length > 0) {
+        fail(paraLine, "footnote markers inside alerts are out of scope", "move the note reference into a body paragraph");
+      }
+      for (const key of parsedPara.citationKeys) usedCitations.add(key);
+      if (cleanParas.length > 0) bodySegments.push({ text: " ", bold: false, italic: false, code: false });
+      bodySegments.push(...parsedPara.segments);
+      cleanParas.push(parsedPara.plainText);
     }
     const text2 = plainJoin(cleanParas.join(" "));
     if (text2.length === 0) {
       fail(line2, `alert [!${alertType}] needs body text`, "write the alert text on > lines after the marker");
     }
-    const anchorId = lastInsertId === null ? "end" : lastInsertId;
+    const calloutAnchor = insertAnchor();
     const alertTag = alertType.toLowerCase();
     const tagThemeRaw = styleGuide?.callouts?.tagThemes?.[alertTag];
     const tagTheme = typeof tagThemeRaw === "string" && tagThemeRaw.length > 0 ? tagThemeRaw : void 0;
     const guideThemeRaw = styleGuide?.callouts?.defaultTheme;
     const guideTheme = typeof guideThemeRaw === "string" && guideThemeRaw.length > 0 ? guideThemeRaw : void 0;
+    const calloutId = nextId();
     const op = {
       action: "callout",
-      anchor: anchorId,
-      position: "after",
+      id: calloutId,
+      anchor: calloutAnchor.anchor,
+      position: calloutAnchor.position,
       text: text2,
       theme: tagTheme ?? guideTheme ?? ALERT_TYPE_TO_THEME[alertType] ?? "indigo"
     };
     if (title !== void 0) op["title"] = title;
+    const spanParams = {};
+    if (titleSegments !== void 0 && segmentsNeedSplit(titleSegments)) spanParams["mdTitleSpans"] = titleSegments;
+    if (segmentsNeedSplit(bodySegments)) spanParams["mdBodySpans"] = bodySegments;
+    if (Object.keys(spanParams).length > 0) op["params"] = spanParams;
     ops.push(op);
-    lastInsertId = null;
+    lastInsertId = calloutId;
   };
   let underTitle = false;
   let lastBlockKind = "none";
+  const compileList = (token, line2, quoteLevel = 0) => {
+    const listType = token.ordered === true ? "numbered" : "bullet";
+    const items = token.items ?? [];
+    if (items.length === 0) {
+      fail(line2, "empty list block", "add at least one list item");
+    }
+    const itemIds = [];
+    const itemBaseLine = line2;
+    for (const item of items) {
+      const itemLine = subLine(token.raw, itemBaseLine, item.raw);
+      if (item.task === true) {
+        fail(itemLine, "task-list items are out of scope", "use a plain bullet or numbered item");
+      }
+      for (const child of item.tokens ?? []) {
+        if (child.type === "list") {
+          const nestedRaw = child.raw;
+          const nestedLine = typeof nestedRaw === "string" && nestedRaw ? subLine(token.raw, itemBaseLine, nestedRaw) : itemLine;
+          fail(nestedLine, "nested lists are out of scope", "flatten nested items into the top-level list");
+        }
+        if (child.type !== "text" && child.type !== "paragraph" && child.type !== "space") {
+          fail(itemLine, `list items carry ${child.type} blocks, out of scope`, "keep list items plain text");
+        }
+      }
+      if (item.text.split("\n").some((entry) => FOOTNOTE_DEF_PATTERN.test(entry))) {
+        fail(itemLine, "footnote definition must stand alone as its own block", "move the definition out of the list");
+      }
+      if (item.text.split("\n").some((entry) => CITATION_DEF_PATTERN.test(entry))) {
+        fail(itemLine, "citation definition must stand alone as its own block", "move the definition out of the list");
+      }
+      failOnImageOrHtml(item.text, itemLine, "a list item");
+      const firstChild = (item.tokens ?? [])[0];
+      const inlineTokens = firstChild?.tokens ?? [];
+      if (inlineTokens.length === 1 && inlineTokens[0].type === "image") {
+        fail(itemLine, "images are out of scope in a list item", "put images on their own block line instead of inside a list");
+      }
+      for (const it of inlineTokens) {
+        if (it.type === "image") {
+          fail(itemLine, "images are out of scope in a list item", "put images on their own block line instead of inside a list");
+        }
+      }
+      const inline = parseInlineTokens(inlineTokens, itemLine, "a list item", citationDefs, citationOrder, citationNum, usedCitations);
+      for (const key of inline.citationKeys) usedCitations.add(key);
+      for (const label of inline.footnoteRefs) {
+        if (!defs.has(label)) {
+          fail(itemLine, `undefined footnote reference [^${label}]`, "add a matching [^label]: body definition");
+        }
+      }
+      const id = pushInsertParagraph(inline.plainText, inline.segments);
+      trackRefs(id, inline.footnoteEntries ?? inline.footnoteRefs, itemLine);
+      itemIds.push(id);
+    }
+    ops.push({ action: "list", operation: "create", target: itemIds, listType });
+    if (lastBlockKind === "table" && itemIds.length > 0) {
+      ops.push({ action: "style", target: itemIds[0], spacingBefore: 240 });
+    }
+    if (quoteLevel > 0) {
+      for (const itemId of itemIds) {
+        ops.push({ action: "namedStyle", operation: "apply", styleName: "Quote", target: itemId });
+        ops.push({ action: "style", target: itemId, indentLeft: quoteLevel * QUOTE_INDENT + QUOTE_LIST_INDENT, indentHanging: QUOTE_LIST_INDENT });
+      }
+    }
+  };
+  const compileCode = (token, line2, quoteLevel = 0) => {
+    const lang = (token.lang ?? "").trim();
+    if (CHART_FENCE_LANGUAGES.has(lang.toLowerCase())) {
+      fail(line2, `fenced code tagged '${lang}' requests a chart`, "describe the chart with a chart path reference instead");
+    }
+    const id = nextId();
+    const anchor = insertAnchor();
+    ops.push({
+      action: "insert",
+      type: "paragraph",
+      anchor: anchor.anchor,
+      position: anchor.position,
+      text: token.text ?? "",
+      id,
+      params: { codeBlock: true, ...lang ? { codeLanguage: lang } : {} }
+    });
+    lastInsertId = id;
+    if (lastBlockKind === "table") {
+      ops.push({ action: "style", target: id, spacingBefore: 240 });
+    }
+    if (quoteLevel > 0) {
+      ops.push({ action: "style", target: id, indentLeft: quoteLevel * QUOTE_INDENT + CODE_BLOCK_BASE_INDENT });
+    }
+  };
+  const compileQuote = (token, line2, level) => {
+    const effective = Math.min(level, QUOTE_MAX_LEVEL);
+    if (level > QUOTE_MAX_LEVEL) {
+      warnings.push(`line ${line2}: quote nesting deeper than ${QUOTE_MAX_LEVEL} levels was written at level ${QUOTE_MAX_LEVEL}.`);
+    }
+    const children2 = (token.tokens ?? []).filter((child) => child.type !== "space");
+    if (children2.length === 0) {
+      fail(line2, "blockquote is empty", "write the quote text after the > marker");
+    }
+    const strippedRaw = token.raw.split("\n").map((entry) => entry.replace(/^ {0,3}>[ ]?/, "")).join("\n");
+    for (const child of children2) {
+      const childRaw = child.raw ?? "";
+      const childLine = subLine(strippedRaw, line2, childRaw.split("\n")[0] ?? "");
+      switch (child.type) {
+        case "paragraph": {
+          const para = child;
+          const paraText2 = para.text ?? "";
+          const paraLines = childRaw.replace(/\n+$/, "").split("\n");
+          if (paraLines.some((entry) => FOOTNOTE_DEF_PATTERN.test(entry) || CITATION_DEF_PATTERN.test(entry))) {
+            fail(childLine, "note and citation definitions must stand alone as their own block", "move the definition out of the quote");
+          }
+          if (CONTAINER_FENCE_PATTERN.test(paraLines[0] ?? "")) {
+            fail(childLine, "container fences (:::) are out of scope as custom styles", "use plain Markdown blocks");
+          }
+          const paraTokens = para.tokens ?? [];
+          for (const it of paraTokens) {
+            if (it.type === "image") {
+              fail(childLine, "images are out of scope in a quote", "put images on their own block line after the quote");
+            }
+          }
+          failOnImageOrHtml(paraText2, childLine, "a quote");
+          const inline = parseInlineTokens(para.tokens, childLine, "a quote", citationDefs, citationOrder, citationNum, usedCitations);
+          for (const key of inline.citationKeys) usedCitations.add(key);
+          for (const label of inline.footnoteRefs) {
+            if (!defs.has(label)) {
+              fail(childLine, `undefined footnote reference [^${label}]`, "add a matching [^label]: body definition");
+            }
+          }
+          const id = pushInsertParagraph(inline.plainText, inline.segments);
+          trackRefs(id, inline.footnoteEntries ?? inline.footnoteRefs, childLine);
+          ops.push({ action: "namedStyle", operation: "apply", styleName: "Quote", target: id });
+          if (effective > 1) {
+            ops.push({ action: "style", target: id, indentLeft: effective * QUOTE_INDENT });
+          }
+          if (lastBlockKind === "table") {
+            ops.push({ action: "style", target: id, spacingBefore: 240 });
+          }
+          lastBlockKind = "quote";
+          underTitle = false;
+          break;
+        }
+        case "blockquote":
+          compileQuote(child, childLine, level + 1);
+          break;
+        case "list":
+          compileList(child, childLine, effective);
+          lastBlockKind = "list";
+          break;
+        case "code":
+          compileCode(child, childLine, effective);
+          lastBlockKind = "code";
+          break;
+        case "table":
+          fail(childLine, "tables inside a quote are out of scope", "Word cannot indent a table as a quote: put the table after the quote");
+          break;
+        case "heading":
+          fail(childLine, "headings inside a quote are out of scope", "put the heading before the quote");
+          break;
+        default:
+          fail(childLine, `${child.type} blocks inside a quote are out of scope`, "keep quotes to paragraphs, flat lists and code blocks");
+      }
+    }
+  };
+  const quoteOpensWithAlertMarker = (token, line2) => {
+    const first = (token.tokens ?? []).find((child) => child.type !== "space");
+    if (!first || first.type !== "paragraph") return false;
+    const head = (first.text ?? "").split("\n")[0]?.trim() ?? "";
+    if (ALERT_MARKER_PATTERN.test(head)) return true;
+    const unknown = /^\[!([A-Za-z][A-Za-z0-9_-]*)\]/.exec(head);
+    if (unknown) {
+      fail(line2, `unknown alert type [!${unknown[1]}]`, "use NOTE, TIP, IMPORTANT, WARNING or CAUTION, or drop the [!...] marker for a plain quote");
+    }
+    return false;
+  };
   for (const rawToken of tokens) {
     const token = rawToken;
     const line2 = lineOf.get(rawToken) ?? 1;
@@ -39136,60 +39833,7 @@ ${rest}` : sameLineBody;
         break;
       }
       case "list": {
-        const listType = token.ordered === true ? "numbered" : "bullet";
-        const items = token.items ?? [];
-        if (items.length === 0) {
-          fail(line2, "empty list block", "add at least one list item");
-        }
-        const itemIds = [];
-        const itemBaseLine = line2;
-        for (const item of items) {
-          const itemLine = subLine(token.raw, itemBaseLine, item.raw);
-          if (item.task === true) {
-            fail(itemLine, "task-list items are out of scope", "use a plain bullet or numbered item");
-          }
-          for (const child of item.tokens ?? []) {
-            if (child.type === "list") {
-              const nestedRaw = child.raw;
-              const nestedLine = typeof nestedRaw === "string" && nestedRaw ? subLine(token.raw, itemBaseLine, nestedRaw) : itemLine;
-              fail(nestedLine, "nested lists are out of scope", "flatten nested items into the top-level list");
-            }
-            if (child.type !== "text" && child.type !== "paragraph" && child.type !== "space") {
-              fail(itemLine, `list items carry ${child.type} blocks, out of scope`, "keep list items plain text");
-            }
-          }
-          if (item.text.split("\n").some((entry) => FOOTNOTE_DEF_PATTERN.test(entry))) {
-            fail(itemLine, "footnote definition must stand alone as its own block", "move the definition out of the list");
-          }
-          if (item.text.split("\n").some((entry) => CITATION_DEF_PATTERN.test(entry))) {
-            fail(itemLine, "citation definition must stand alone as its own block", "move the definition out of the list");
-          }
-          failOnImageOrHtml(item.text, itemLine, "a list item");
-          const firstChild = (item.tokens ?? [])[0];
-          const inlineTokens = firstChild?.tokens ?? [];
-          if (inlineTokens.length === 1 && inlineTokens[0].type === "image") {
-            fail(itemLine, "images are out of scope in a list item", "put images on their own block line instead of inside a list");
-          }
-          for (const it of inlineTokens) {
-            if (it.type === "image") {
-              fail(itemLine, "images are out of scope in a list item", "put images on their own block line instead of inside a list");
-            }
-          }
-          const inline = parseInlineTokens(inlineTokens, itemLine, "a list item", citationDefs, citationOrder, citationNum, usedCitations);
-          for (const key of inline.citationKeys) usedCitations.add(key);
-          for (const label of inline.footnoteRefs) {
-            if (!defs.has(label)) {
-              fail(itemLine, `undefined footnote reference [^${label}]`, "add a matching [^label]: body definition");
-            }
-          }
-          const id = pushInsertParagraph(inline.plainText, inline.segments);
-          trackRefs(id, inline.footnoteEntries ?? inline.footnoteRefs, itemLine);
-          itemIds.push(id);
-        }
-        ops.push({ action: "list", operation: "create", target: itemIds, listType });
-        if (lastBlockKind === "table" && itemIds.length > 0) {
-          ops.push({ action: "style", target: itemIds[0], spacingBefore: 240 });
-        }
+        compileList(token, line2);
         lastBlockKind = "list";
         break;
       }
@@ -39302,25 +39946,7 @@ ${rest}` : sameLineBody;
         break;
       }
       case "code": {
-        const lang = (token.lang ?? "").trim();
-        if (CHART_FENCE_LANGUAGES.has(lang.toLowerCase())) {
-          fail(line2, `fenced code tagged '${lang}' requests a chart`, "describe the chart with a chart path reference instead");
-        }
-        const id = nextId();
-        const anchor = insertAnchor();
-        ops.push({
-          action: "insert",
-          type: "paragraph",
-          anchor: anchor.anchor,
-          position: anchor.position,
-          text: token.text ?? "",
-          id,
-          params: { codeBlock: true, ...lang ? { codeLanguage: lang } : {} }
-        });
-        lastInsertId = id;
-        if (lastBlockKind === "table") {
-          ops.push({ action: "style", target: id, spacingBefore: 240 });
-        }
+        compileCode(token, line2);
         lastBlockKind = "code";
         break;
       }
@@ -39339,8 +39965,12 @@ ${rest}` : sameLineBody;
         fail(line2, "raw HTML blocks are out of scope", "use plain Markdown blocks instead of HTML tags");
         break;
       case "blockquote":
-        handleAlertBlockquote(token, line2);
-        lastBlockKind = "callout";
+        if (quoteOpensWithAlertMarker(token, line2)) {
+          handleAlertBlockquote(token, line2);
+          lastBlockKind = "callout";
+        } else {
+          compileQuote(token, line2, 1);
+        }
         break;
       case "image": {
         const img = token;
@@ -39424,107 +40054,15 @@ ${rest}` : sameLineBody;
 }
 
 // ../engine/src/compose/markdown.ts
-function pristineTemplateSeedIds(parser2, requestedTemplate) {
-  if (!parser2.hasPristineBuiltinSeed()) return null;
-  let summary;
-  try {
-    summary = parser2.getStructuralSummary();
-  } catch {
-    return null;
-  }
-  const nodes = summary.nodes ?? [];
-  if (![1, 2, 4, 5, 6].includes(nodes.length)) return null;
-  if (summary.hasTrackedChanges === true) return null;
-  if (Object.keys(summary.mediaFiles ?? {}).length > 0) return null;
-  if ((summary.headers ?? []).length > 0) return null;
-  if ((summary.footers ?? []).length > 0) return null;
-  if ((summary.charts ?? []).length > 0) return null;
-  try {
-    const zip = parser2.getZipAdapter?.();
-    if (typeof zip?.hasFile === "function") {
-      for (const part of [
-        "word/footnotes.xml",
-        "word/endnotes.xml",
-        "word/comments.xml",
-        "word/commentsExtended.xml"
-      ]) {
-        try {
-          if (zip.hasFile(part)) return null;
-        } catch {
-          return null;
-        }
-      }
-    } else {
-      return null;
-    }
-  } catch {
-    return null;
-  }
-  for (const n of nodes) {
-    if (n.hasTrackedChanges === true) return null;
-    const raw = n.rawXml ?? "";
-    if (raw.includes("w:footnoteReference") || raw.includes("w:endnoteReference") || raw.includes("w:commentReference") || raw.includes("w:commentRangeStart") || raw.includes("w:commentRangeEnd")) {
-      return null;
-    }
-  }
-  const ids = nodes.map((n) => n.id ?? "").filter((id) => id.length > 0);
-  if (ids.length !== nodes.length) return null;
-  if (nodes.length === 1) {
-    const node = nodes[0];
-    if (node.type !== "paragraph") return null;
-    if ((node.text ?? "").trim() !== "") return null;
-    return ids;
-  }
-  if (nodes.length === 2) {
-    const [first, second] = nodes;
-    const t0 = (first.text ?? "").trim();
-    const t1 = (second.text ?? "").trim();
-    if (t0 === BLANK_SEED_TITLE && t1 === BLANK_SEED_HINT) {
-      const firstRaw = first.rawXml ?? "";
-      const secondRaw = second.rawXml ?? "";
-      if (!firstRaw.includes('w:val="Title"') || !secondRaw.includes('w:val="Subtitle"')) return null;
-      return ids;
-    }
-    const tmpl = requestedTemplate?.toLowerCase();
-    if (t0 === "MEMORANDUM" && tmpl === "memo") return ids;
-    if (t0 === "Letter" && tmpl === "letter") return ids;
-    if (t0 === "Proposal" && tmpl === "proposal") return ids;
-    if (t0 === "INVOICE" && tmpl === "invoice") return ids;
-    return null;
-  }
-  if (nodes.length === 4) {
-    const t0 = (nodes[0].text ?? "").trim();
-    const tmpl = requestedTemplate?.toLowerCase();
-    if (t0 === "Research Benchmark Report" && tmpl === "research") return ids;
-    if (t0 === "Corporate Strategy Roadmap" && tmpl === "corporate") return ids;
-    if (t0 === "Velocity Audit & Performance" && tmpl === "bar-chart-3d") return ids;
-    return null;
-  }
-  if (nodes.length === 5) {
-    const t0 = (nodes[0].text ?? "").trim();
-    const tmpl = requestedTemplate?.toLowerCase();
-    if (t0 === "Financial Report & Audit" && tmpl === "financial") return ids;
-    return null;
-  }
-  if (nodes.length === 6) {
-    const t0 = (nodes[0].text ?? "").trim();
-    const t2 = (nodes[2].text ?? "").trim();
-    const tmpl = requestedTemplate?.toLowerCase();
-    if (t0 === "Q3 Executive Financial Performance Report" && t2 === "1. Executive Summary") {
-      if (tmpl === "report") return ids;
-      return null;
-    }
-    if (t0 === "Manuscript Title" && t2 === "Chapter 1: The Beginning" && tmpl === "novel") {
-      return ids;
-    }
-    if (t0 === "Neural Document Architectures: A Comparative Benchmark" && tmpl === "academic") {
-      return ids;
-    }
-    if (t0 === "TECH HORIZONS" && tmpl === "newsletter") return ids;
-    if (t0 === "Platform Core API Reference" && (tmpl === "api" || tmpl === "api-spec")) return ids;
-    return null;
-  }
-  return null;
+function nextComposeIdPrefix(ast) {
+  const live = /* @__PURE__ */ new Set();
+  for (const section of ast.sections ?? []) for (const node of section.nodes ?? []) live.add(node.id);
+  const used = (prefix) => {
+    for (const id of live) if (id.startsWith(`${prefix}_`)) return true;
+    return false;
+  };
+  if (!used("md")) return "md";
+  for (let n = 2; ; n++) if (!used(`md${n}`)) return `md${n}`;
 }
 var pristineBlankSeedIds = pristineTemplateSeedIds;
 function assertTemplateSeed(parser2, template) {
@@ -39568,15 +40106,26 @@ function assertTemplateSeed(parser2, template) {
 function applyInlineSpans(parser2, ast, operations) {
   const docParser = parser2;
   const liveAst = ast;
+  const targets = [];
   for (const op of operations) {
     const rec = op;
-    if (rec["action"] !== "insert" || rec["type"] !== "paragraph") continue;
     const params = rec["params"];
-    const rawSpans = params?.["mdSpans"];
-    if (!Array.isArray(rawSpans) || !segmentsNeedSplit(rawSpans)) continue;
-    const spans = rawSpans;
     const id = String(rec["id"] ?? "");
     if (!id) continue;
+    if (rec["action"] === "callout") {
+      const titleSpans = params?.["mdTitleSpans"];
+      const bodySpans = params?.["mdBodySpans"];
+      if (Array.isArray(titleSpans) && segmentsNeedSplit(titleSpans)) targets.push({ id, spans: titleSpans, part: "calloutTitle" });
+      if (Array.isArray(bodySpans) && segmentsNeedSplit(bodySpans)) targets.push({ id, spans: bodySpans, part: "calloutBody" });
+      continue;
+    }
+    if (rec["action"] !== "insert" || rec["type"] !== "paragraph") continue;
+    const rawSpans = params?.["mdSpans"];
+    if (!Array.isArray(rawSpans) || !segmentsNeedSplit(rawSpans)) continue;
+    targets.push({ id, spans: rawSpans, part: "paragraph" });
+  }
+  for (const target of targets) {
+    const { id, spans, part } = target;
     let node;
     for (const section of liveAst.sections) {
       const found = section.nodes.find((n) => n.id === id);
@@ -39590,7 +40139,18 @@ function applyInlineSpans(parser2, ast, operations) {
         `E_VALIDATION: line 1: span target paragraph '${id}' is missing after compose. Remedy: retry the compose without manual edits in between.`
       );
     }
-    const para = node.xml;
+    let para = node.xml;
+    let baseRPr;
+    if (part !== "paragraph") {
+      const cellParas = Array.from(para.getElementsByTagName("w:p"));
+      const hasTitle = cellParas.length > 1;
+      const picked = part === "calloutTitle" ? hasTitle ? cellParas[0] : void 0 : cellParas[cellParas.length - 1];
+      if (!picked) continue;
+      para = picked;
+      const firstRun = Array.from(para.childNodes).find((k) => k.nodeType === 1 && k.tagName === "w:r");
+      const rPrEl = firstRun ? Array.from(firstRun.childNodes).find((k) => k.nodeType === 1 && k.tagName === "w:rPr") : void 0;
+      baseRPr = rPrEl ? rPrEl : void 0;
+    }
     const doc = para.ownerDocument;
     if (!doc) continue;
     const keptFootRefs = [];
@@ -39622,10 +40182,12 @@ function applyInlineSpans(parser2, ast, operations) {
     }
     const buildRun = (seg) => {
       const run = createWordElement(doc, "w:r");
-      const needsRPr = seg.bold || seg.italic || seg.strike || seg.code || seg.linkUrl !== void 0;
+      const needsRPr = seg.bold || seg.italic || seg.strike || seg.code || seg.linkUrl !== void 0 || baseRPr !== void 0;
       if (needsRPr) {
         const rPr = createWordElement(doc, "w:rPr");
-        if (seg.bold) rPr.appendChild(createWordElement(doc, "w:b"));
+        const baseBold = baseRPr !== void 0 && baseRPr.getElementsByTagName("w:b").length > 0;
+        const baseColor = baseRPr?.getElementsByTagName("w:color")[0]?.getAttribute("w:val") ?? void 0;
+        if (seg.bold || baseBold) rPr.appendChild(createWordElement(doc, "w:b"));
         if (seg.italic) rPr.appendChild(createWordElement(doc, "w:i"));
         if (seg.strike) rPr.appendChild(createWordElement(doc, "w:strike"));
         if (seg.code) {
@@ -39634,6 +40196,11 @@ function applyInlineSpans(parser2, ast, operations) {
           rFonts.setAttribute("w:hAnsi", COMPOSE_CODE_FONT);
           rPr.appendChild(rFonts);
         }
+        if (seg.linkUrl === void 0 && baseColor) {
+          const color = createWordElement(doc, "w:color");
+          color.setAttribute("w:val", baseColor);
+          rPr.appendChild(color);
+        }
         if (seg.linkUrl !== void 0) {
           const color = createWordElement(doc, "w:color");
           color.setAttribute("w:val", "0066CC");
@@ -39719,35 +40286,76 @@ function applyInlineSpans(parser2, ast, operations) {
     );
     for (let i = 0; i < refSibs.length; i++) {
       const refEl = refSibs[i];
-      const op2 = noteOps[i];
-      insertRunAtOffset(para, refEl, op2?.offset);
+      const op = noteOps[i];
+      insertRunAtOffset(para, refEl, op?.offset);
     }
     node.version += 1;
   }
 }
+function validateComposedOperations(operations) {
+  validateOperationsStrict(
+    operations.map((op) => {
+      const rec = op;
+      const params = rec["params"];
+      if (rec["action"] !== "callout" || !params) return op;
+      const { mdTitleSpans: _t, mdBodySpans: _b, ...publicParams } = params;
+      void _t;
+      void _b;
+      const { params: _p, ...rest } = rec;
+      void _p;
+      return Object.keys(publicParams).length > 0 ? { ...rest, params: publicParams } : rest;
+    })
+  );
+}
 async function composeDocument(parser2, markdown, options) {
   if (!parser2 || typeof parser2.getAST !== "function") {
     throw new Error(
       "E_VALIDATION: line 1: composeDocument needs an open document parser. Remedy: open a document first, then compose into it."
     );
   }
+  const liveAst = await parser2.getAST();
+  const idPrefix = options?.idPrefix ?? nextComposeIdPrefix(liveAst);
   if (options?.template !== void 0) {
+    if (idPrefix !== "md") {
+      throw new Error(
+        "E_VALIDATION: line 1: template is accepted only on the first compose of a document. Remedy: omit template on this compose; the document already holds composed content."
+      );
+    }
     assertTemplateSeed(parser2, String(options.template));
   }
+  if (options?.position !== void 0 && options.anchor === void 0) {
+    throw new Error(
+      "E_VALIDATION: line 1: position needs an anchor. Remedy: pass anchor (a node id, start or end) together with position, or omit position to append at the end."
+    );
+  }
+  if (options?.anchor !== void 0 && anchorAliasOf(options.anchor) === null) {
+    const known = liveAst.sections.some((section) => section.nodes.some((node) => node.id === options.anchor));
+    if (!known) {
+      throw new Error(
+        `E_VALIDATION: line 1: anchor '${options.anchor}' is not a node of this document. Remedy: pass a node id from inspect_document, or start or end.`
+      );
+    }
+  }
   const styleGuide = resolveComposeStyleGuide(options?.styleGuide);
   const { operations, warnings: compileWarnings } = compileMarkdownDetailed(markdown, {
+    idPrefix,
+    ...options?.anchor !== void 0 ? { anchor: options.anchor } : {},
+    ...options?.position !== void 0 ? { position: options.position } : {},
     allowedDir: options?.allowedDir,
     ...options?.styleGuide !== void 0 ? { styleGuide: options.styleGuide } : {},
     ...options?.dollarMath ? { dollarMath: true } : {}
   });
-  validateOperationsStrict(operations);
+  validateComposedOperations(operations);
+  if (operations.some((op) => op.action === "namedStyle" && op.styleName === QUOTE_STYLE_ID)) {
+    ensureQuoteStyle(parser2.getStylesDom());
+  }
   const chunkSize = options?.chunkSize !== void 0 ? Math.floor(options.chunkSize) : ENGINE_MAX_OPS;
   if (!Number.isInteger(chunkSize) || chunkSize < 1 || chunkSize > ENGINE_MAX_OPS) {
     throw new Error(
       `E_VALIDATION: line 1: chunkSize must be an integer in [1, ${ENGINE_MAX_OPS}]. Remedy: omit chunkSize or pass a value inside that range.`
     );
   }
-  const ast = await parser2.getAST();
+  const ast = liveAst;
   const blankSeedIds = pristineBlankSeedIds(parser2, options?.template);
   let preBatchSnapshot = null;
   try {
@@ -39800,7 +40408,17 @@ async function composeDocument(parser2, markdown, options) {
     }
     base += chunk.length;
   }
-  if (!aggregate.success) return aggregate;
+  if (!aggregate.success) {
+    if (aggregate.appliedCount > 0 && preBatchSnapshot !== null) {
+      try {
+        parser2.restorePackageSnapshot(preBatchSnapshot);
+        aggregate.appliedCount = 0;
+        aggregate.rollbackTriggered = true;
+      } catch {
+      }
+    }
+    return aggregate;
+  }
   if (blankSeedIds !== null) {
     const seedCleanup = await engine.executeBatch({
       operations: [{ action: "delete", target: blankSeedIds }],
@@ -39871,119 +40489,19 @@ async function composeDocument(parser2, markdown, options) {
     if (/^E_VALIDATION/.test(detail)) throw err;
     throw new Error(`E_VALIDATION: line 1: inline formatting failed (${detail}). Remedy: simplify bold, italic, code, or link spans and retry.`);
   }
-  return aggregate;
-}
-
-// ../engine/src/stats.ts
-function nearestOwner(el, tagName) {
-  let cur = el.parentNode;
-  while (cur && typeof cur === "object") {
-    const e = cur;
-    if (e.tagName === tagName) return e;
-    cur = e.parentNode;
-  }
-  return null;
-}
-function tableCellTextSpaced(node) {
   try {
-    const xml = node.xml;
-    if (!xml || typeof xml.getElementsByTagName !== "function") return void 0;
-    const tcs = xml.getElementsByTagName("w:tc");
-    if (!tcs || tcs.length === 0) return void 0;
-    const cells = [];
-    for (let i = 0; i < tcs.length; i++) {
-      const tc = tcs[i];
-      const paras = tc.getElementsByTagName("w:p");
-      if (paras.length > 0) {
-        const parts = [];
-        for (let p = 0; p < paras.length; p++) {
-          const para = paras[p];
-          if (nearestOwner(para, "w:tc") !== tc) continue;
-          const runs = para.getElementsByTagName("w:t");
-          let t = "";
-          for (let r = 0; r < runs.length; r++) {
-            const run = runs[r];
-            if (nearestOwner(run, "w:tc") !== tc) continue;
-            if (nearestOwner(run, "w:p") !== para) continue;
-            t += run.textContent || "";
-          }
-          if (t.trim().length > 0) parts.push(t.trim());
-        }
-        if (parts.length > 0) cells.push(parts.join(" "));
-      } else {
-        const runs = tc.getElementsByTagName("w:t");
-        let t = "";
-        for (let r = 0; r < runs.length; r++) {
-          const run = runs[r];
-          if (nearestOwner(run, "w:tc") !== tc) continue;
-          t += run.textContent || "";
-        }
-        if (t.trim().length > 0) cells.push(t.trim());
-      }
-    }
-    if (cells.length === 0) return "";
-    return cells.join(" ");
-  } catch {
-    return void 0;
-  }
-}
-function nestedTableCount(node) {
-  try {
-    const xml = node.xml;
-    if (!xml || typeof xml.getElementsByTagName !== "function") return 0;
-    return xml.getElementsByTagName("w:tbl").length;
-  } catch {
-    return 0;
-  }
-}
-function countExplicitPageBreaks(node) {
-  if (node.type === "pageBreak") return 1;
-  const text2 = node.metadata?.text || "";
-  let count = text2 === "[Page Break]" ? 1 : 0;
-  try {
-    const xml = node.xml;
-    if (xml && typeof xml.getElementsByTagName === "function") {
-      const brs = xml.getElementsByTagName("w:br");
-      let brCount = 0;
-      for (let i = 0; i < brs.length; i++) {
-        if (brs[i].getAttribute("w:type") === "page") brCount++;
-      }
-      if (brCount > count) count = brCount;
-    }
+    const identity = applyDocumentIdentity(ast, parser2);
+    if (identity.titleSetFrom) aggregate.titleSetFrom = identity.titleSetFrom;
   } catch {
   }
-  return count;
-}
-function computeDocStats(ast) {
-  let words = 0;
-  let paragraphs = 0;
-  let tables = 0;
-  let images = 0;
-  let pageBreaks = 0;
-  for (const sec of ast.sections) {
-    for (const node of sec.nodes) {
-      if (node.type === "paragraph") paragraphs += 1;
-      if (node.type === "table") tables += 1 + nestedTableCount(node);
-      if (node.type === "image") images += 1;
-      pageBreaks += countExplicitPageBreaks(node);
-      let text2 = node.metadata?.text ?? "";
-      if (node.type === "table") {
-        const spaced = tableCellTextSpaced(node);
-        if (spaced !== void 0) text2 = spaced;
-      }
-      const hits = text2.match(/\S+/g);
-      if (hits) words += hits.length;
-    }
-  }
-  const pageBudget = words / 450 + tables * 0.45 + images * 0.5 + pageBreaks;
-  return { words, paragraphs, pages: Math.max(1, Math.ceil(pageBudget)), tables, images };
+  return aggregate;
 }
 
 // ../engine/src/style-guide/resolve.ts
 var import_fs8 = __toESM(require("fs"));
 var import_path7 = __toESM(require("path"));
 function hasScheme(ref) {
-  return /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(ref);
+  return hasUriScheme(ref);
 }
 function failValidation(message, remedy) {
   throw toError("E_VALIDATION", message, remedy);
@@ -40166,7 +40684,13 @@ function mcpErrorFrom(err, fallbackCode, fallbackRemedy) {
   const rawMessage = err instanceof Error ? err.message : String(err);
   const message = rewritePhantomMcpToolNames(sanitizeMcpClientMessage(rawMessage));
   const remedy = err?.remedy && typeof err.remedy === "string" ? rewritePhantomMcpToolNames(String(err.remedy)) : rewritePhantomMcpToolNames(fallbackRemedy);
-  return { ok: false, code: resolved, message, remedy };
+  const shape = { ok: false, code: resolved, message, remedy };
+  const carried = err;
+  if (carried && Array.isArray(carried.errors) && carried.errors.length > 0 && typeof carried.errorCount === "number") {
+    shape.errorCount = carried.errorCount;
+    shape.errors = carried.errors;
+  }
+  return shape;
 }
 function sanitizeMcpClientMessage(raw) {
   let text2 = typeof raw === "string" ? raw : String(raw ?? "");
@@ -40352,7 +40876,8 @@ function collectAstIdTexts(ast) {
       for (const n of sec.nodes ?? []) {
         if (typeof n.id !== "string" || !n.id) continue;
         order.push(n.id);
-        texts.set(n.id, String(n.metadata?.text ?? ""));
+        const grid = n.type === "table" ? tableGridPlainText(n.xml) : void 0;
+        texts.set(n.id, grid ?? String(n.metadata?.text ?? ""));
       }
     }
   } catch {
@@ -40662,6 +41187,25 @@ function descriptionOf(e) {
 function firstMessages(result, limit = 5) {
   return (result.errors ?? []).slice(0, limit).map((e) => descriptionOf(e).slice(0, 300));
 }
+var AUDIT_VALIDATION_ERRORS_MAX = 10;
+function summarizeValidationErrors(errors, max = AUDIT_VALIDATION_ERRORS_MAX) {
+  const raw = Array.isArray(errors) ? errors.slice(0, max) : [];
+  return raw.map((e) => {
+    const err = e;
+    const description = String(
+      typeof err.description === "string" && err.description || typeof err.message === "string" && err.message || "OOXML validation error"
+    ).slice(0, 500);
+    const xp = typeof err.xPath === "string" ? err.xPath : typeof err.path === "string" ? err.path : void 0;
+    return xp ? { description, xPath: xp } : { description };
+  });
+}
+function toAuditValidation(validation, max = AUDIT_VALIDATION_ERRORS_MAX) {
+  return {
+    valid: validation.ok,
+    errorCount: Array.isArray(validation.errors) ? validation.errors.length : 0,
+    errors: summarizeValidationErrors(validation.errors, max)
+  };
+}
 function introducedError(toolName, verdict) {
   const first = verdict.introduced[0];
   const desc = descriptionOf(first);
@@ -40670,7 +41214,12 @@ function introducedError(toolName, verdict) {
     new Error(
       `E_VALIDATION: ${toolName} blocked: this edit adds ${verdict.introduced.length} validator error(s) (the file already had ${verdict.preExisting}): ${desc.slice(0, 2e3)}`
     ),
-    { code: "E_VALIDATION", remedy: remedyForValidationError(xp, desc) }
+    {
+      code: "E_VALIDATION",
+      remedy: remedyForValidationError(xp, desc),
+      errorCount: verdict.introduced.length,
+      errors: summarizeValidationErrors(verdict.introduced)
+    }
   );
 }
 function validationField(result, verdict) {
@@ -40680,10 +41229,12 @@ function validationField(result, verdict) {
       tolerated: true,
       preExistingErrors: verdict.preExisting,
       introducedErrors: 0,
-      messages: firstMessages(result)
+      messages: firstMessages(result),
+      valid: false,
+      errorCount: Array.isArray(result.errors) ? result.errors.length : verdict.preExisting
     };
   }
-  return { ok: true };
+  return { ok: true, valid: true, errorCount: 0 };
 }
 function withToleratedNote(message, preExisting) {
   const note = ` (saved with ${preExisting} existing validator errors, 0 introduced)`;
@@ -40955,6 +41506,13 @@ function getMcpAllowedRoots() {
   }
   return [...new Set(roots)];
 }
+function describeAllowedFolders() {
+  const named = getExistingExtraRoots();
+  if (named.length > 0) {
+    return `inside the folder${named.length > 1 ? "s" : ""} this server allows: ${[...new Set(named)].join(", ")}`;
+  }
+  return "inside ./documents or the system temp folder, or start the server with --allowed-dir <folder> to allow another folder";
+}
 setTrustedWriteRootsProvider(getMcpAllowedRoots);
 function getExistingExtraRoots() {
   const raw = (process.env.ASTRA_EXTRA_DOC_ROOTS || "").trim();
@@ -40993,7 +41551,7 @@ function assertNoDotSegments(canonical, root) {
     if (seg.startsWith(".")) {
       throw Object.assign(new Error(`Document path traverses a hidden directory "${seg}"`), {
         code: "E_SANDBOX",
-        remedy: "Use a non-hidden path inside documents/ or the system temp dir."
+        remedy: `Use a path with no hidden (dot-prefixed) folder, ${describeAllowedFolders()}.`
       });
     }
   }
@@ -41035,7 +41593,7 @@ function validateDocPath(rawPath) {
   if (segments.includes("..")) {
     throw Object.assign(new Error('Document path contains forbidden ".." traversal'), {
       code: "E_SANDBOX",
-      remedy: "Use a path inside the workspace documents directory."
+      remedy: `Use a path ${describeAllowedFolders()}.`
     });
   }
   const resolved = path12.resolve(trimmed);
@@ -41043,7 +41601,7 @@ function validateDocPath(rawPath) {
   if (resolvedSegments.includes("..")) {
     throw Object.assign(new Error("Document path resolves outside its directory"), {
       code: "E_SANDBOX",
-      remedy: "Use a path inside the workspace documents directory."
+      remedy: `Use a path ${describeAllowedFolders()}.`
     });
   }
   const canonical = canonicalizeForAsset(resolved);
@@ -41672,12 +42230,17 @@ var PARITY_TOOL_NAMES = [
 var MCP_ECMA_ESSENTIALS = "ECMA-376 essentials: colors are hex without # (e.g. 4F46E5, never #4F46E5); font sizes are half-points in w:sz (e.g. 28 = 14pt, 22 = 11pt); spacing/margins/cellMar use twips dxa (twentieths of a point, e.g. 240 = 12pt, 180 = 9pt); borders use eighths-of-a-point sz (e.g. 32 = 4pt left accent).";
 var MCP_WORKFLOW = "Workflow: open_document -> inspect_document -> search_content -> execute_batch -> save_document -> close_document. Always inspect first, batch second, save third. Single edit = 1-item batch. Never call twice when once suffices.";
 var MCP_ENVELOPE_NOTE = "";
-function withSharedDocs(body) {
-  return `${body} ${MCP_ECMA_ESSENTIALS} ${MCP_WORKFLOW} ${MCP_ENVELOPE_NOTE}`;
+function withSharedDocs(body, shared = {}) {
+  const parts = [body.trimEnd()];
+  if (shared.ecma) parts.push(MCP_ECMA_ESSENTIALS);
+  if (shared.workflow) parts.push(MCP_WORKFLOW);
+  if (MCP_ENVELOPE_NOTE) parts.push(MCP_ENVELOPE_NOTE);
+  return parts.join(" ");
 }
 var LEAN6_DESCRIPTIONS = {
   open_document: withSharedDocs(
-    'Open a .docx file into a session (Map sessionId->DocHandle, LRU 10 docs / 200MB / 30min idle evict). Returns {ok:true,sessionId,revision,summary,evicted} where evicted:string[] lists sessions dropped by the capacity cap to make room (re-open them if needed; later calls with an evicted id fail with E_SESSION plus a close_document remedy). The default summary is compact: palette, counts, header/footer text, chart ids and pending-revision flag. Pass {"summaryOnly":false} for the full structural summary including styles XML. Example input {"path":"documents/report.docx"} -> {"ok":true,"sessionId":"sess_abc","revision":1,"evicted":[]}. Open first; keep the sessionId for every later call. The response also carries validation: {status:"valid"}, {status:"invalid",preExistingErrors,messages,baselineComparable,note} when the file already has validator errors (edits that add no new error can still be saved), {status:"timed-out"} or {status:"skipped"}. The check waits validationTimeoutMs (default 5000 ms; 0 skips it; server flag --open-validation-timeout, env ASTRA_OPEN_VALIDATION_TIMEOUT_MS) and never refuses the open. Macro/active content refuses by default (E_VALIDATION naming the parts): pass {"allowMacros":true} to preserve or {"stripMacros":true} to strip (never both). Session ids are server-minted (sess_<uuid>, DEPRECATED to supply sessionId: client-supplied values are rejected with E_VALIDATION; deterministic ids are test-only via --allow-client-session-ids). IDs are session-scoped: valid only in the issuing session, must not be stored across sessions, and duplicate client-supplied ids are rejected.'
+    'Open a .docx file into a session (Map sessionId->DocHandle, LRU 10 docs / 200MB / 30min idle evict). Returns {ok:true,sessionId,revision,summary,evicted} where evicted:string[] lists sessions dropped by the capacity cap to make room (re-open them if needed; later calls with an evicted id fail with E_SESSION plus a close_document remedy). The default summary is compact: palette, counts, header/footer text, chart ids and pending-revision flag. Pass {"summaryOnly":false} for the full structural summary including styles XML. Example input {"path":"documents/report.docx"} -> {"ok":true,"sessionId":"sess_abc","revision":1,"evicted":[]}. Open first; keep the sessionId for every later call. The response also carries validation: {status:"valid"}, {status:"invalid",preExistingErrors,messages,baselineComparable,note} when the file already has validator errors (edits that add no new error can still be saved), {status:"timed-out"} or {status:"skipped"}. The check waits validationTimeoutMs (default 5000 ms; 0 skips it; server flag --open-validation-timeout, env ASTRA_OPEN_VALIDATION_TIMEOUT_MS) and never refuses the open. Macro/active content refuses by default (E_VALIDATION naming the parts): pass {"allowMacros":true} to preserve or {"stripMacros":true} to strip (never both). Session ids are server-minted (sess_<uuid>, DEPRECATED to supply sessionId: client-supplied values are rejected with E_VALIDATION; deterministic ids are test-only via --allow-client-session-ids). IDs are session-scoped: valid only in the issuing session, must not be stored across sessions, and duplicate client-supplied ids are rejected.',
+    { workflow: true }
   ),
   inspect_document: withSharedDocs(
     'Inspect a session: standard TOON outline (fidelity compact|standard|full, default standard) plus style palette passthrough {availableStyles,brandColors,primaryFont} parsed from word/styles.xml, plus document core properties `metadata` {title,creator,subject,description,keywords,category,lastModifiedBy,revision,created,modified} read from docProps/core.xml (absent when the docx has no core part). Use include:["comments","revisions"] for review records paged by reviewOffset/reviewLimit (max 50; offset/limit page nodes only); commentId or revisionId reads full detail and needs its include. Renders the in-memory session state (includes unsaved execute_batch edits); `dirty:true` means the session differs from the last saved file, `revision` is the in-memory revision. Node ids are verbatim: paragraphs carry 8-hex w14:paraId (e.g. 3F2A9C1B), tables t_001.., sections sec_root, sec_2, sec_3.. by position; use them as-is for targets/anchors. A repeat paragraph sharing one native paraId reports a `<paraId>_dup` session id instead (e.g. 3F2A9C1B_dup): saving refuses until the repeat is deleted and its text reinserted for a fresh id. Tables render one row per table with grid cells as rNcM coordinates (r1c1 value | r1c2 value, rows joined by ;); merged spans are marked (spanN); merge covers are tagged hidden-cover (not directly editable, address the restart cell). Cell edits: the replace, style, namedStyle, clearFormat, hyperlink, bookmark and comment actions accept target "<tableId>:r<row>c<col>" (1-based, as the grid prints it; add ":p<n>" to pick one paragraph of a multi-paragraph cell). Other actions, including table, take the table id. Every row and column number counts from 1 (cell addresses, rowIndex, colIndex, columnIndex, row, col, index, afterIndex, fromRow/toRow/fromCol/toCol), so r3c2 and {rowIndex:3,colIndex:2} are the same cell. Chart nodes render style chart|chart3d with title + categories + series in the text ([Chart column] Title | cats: Q1,Q2 | ARR: 10,25), read from the chart part. Flag legend: [TBL] table [IMG] image/drawing [EQ] equation [CITE] citation [CMT] comment [TRK] tracked [LNK] link [BKMK] bookmark [L#] list level (1 is the top level; list ops count the same way) [+ADDED]/[~MODIFIED] diff; standard tier adds [B] bold [I] italic [C:hex] color [SZ:half-points] size [RS:name] run style [J:just] [N:num] numbering [HDR]/[ZEBRA] table look [CH:type]/[RID:id] chart. Palette lists every style id verbatim with no trim (large templates return the full list). 3-tier workflow for large docs: (1) macro-overview inspect (compact, first window) -> (2) search_content to find a target node id -> (3) local zoom via {aroundNode:"<id>",window:5} or page with {offset,limit}. Windowing opts: offset (min 0, default 0), limit (1-200, default 50), aroundNode + window (1-20, default 5) returning [node-w,node+w], maxTokens (200-8000, cuts on a clean row boundary, always reported via truncated/hasMore). aroundNode and offset/limit are mutually exclusive (use one or the other). Windowed renders preserve the requested tier; the TOON fidelity marker stays lossy by design (TOON is a lossy projection). Docs under ~2000 tokens return the full TOON (unchanged); larger docs default to the first ~50-node window {totalNodes,returnedNodes,offset,limit,hasMore,nextOffset,toonText} with a navigation remedy. Full fidelity requires sectionId; sectionId is a section id or a node id (a node id prefix needs 4 characters or more), and an id that matches nothing is an error that names the available section ids. Example {"sessionId":"sess_abc","fidelity":"standard"} -> TOON text + palette. Use the palette style names verbatim (e.g. Corporate Callout); never invent styles. When the session carries a style guide, the envelope also includes its compact styleGuide summary {name,headerFill,headerText,chartPalette,calloutTheme}. IDs are session-scoped: valid only in the issuing session, must not be stored across sessions, and duplicate client-supplied ids are rejected.'
@@ -41686,10 +42249,12 @@ var LEAN6_DESCRIPTIONS = {
     'Search live paragraph/table w:t text; returns [{id,preview}] node hits for anchors/targets. Use scope:"comments" or scope:"all" to search comment text; the default scope is body. At most 50 matches come back; truncated:true says more exist. A table hit also lists `cells` (up to 5 addresses such as t_001:r3c1) for the cells that hold the match; pass one as the target of replace/style/namedStyle/clearFormat/hyperlink/bookmark/comment. Chart titles/series are NOT matched by search (they live in the chart part, not w:t); discover them in inspect TOON chart rows, then anchor by the chart node id. Image alt text and footnote/endnote bodies are NOT matched either (search covers body w:t text only); find images via inspect [IMG] rows and footnotes via their anchor ids. Search extension to those parts is a later-program candidate, not this surface. Default is an exact literal substring (case-insensitive); pass {"regex":true} to interpret the query as a regular expression (bounded: pattern <=200 chars, ~500ms evaluation budget, case-insensitive). Caps: first 50 hits, 120-char previews. Literal queries containing regex metacharacters return literal results plus a hint that regex:true exists. Example {"sessionId":"sess_abc","query":"Executive Summary"} -> {"ok":true,"matches":[{"id":"3F2A9C1B","preview":"Executive ..."}]}. Search before editing when the anchor id is unknown.'
   ),
   execute_batch: withSharedDocs(
-    'Apply 1..500 strictly-typed operations atomically (strict discriminatedUnion per action; sequential:true default preserves document order; Tracked edits return revisionIds; trackedChange accept/reject selects by ids, author or target and reports revisionResolution {resolved,unresolved,removedBookmarks,removedComments,staleLinks}. Comment operations include resolve, unresolve and delete and take an id as 3 or comment:3. single edit = 1-item batch). Caps 500 ops / 200MB throw E_QUOTA with remedy (maxSteps is an optional positive integer, unbounded when omitted). Client-supplied op ids are honored where the schema allows (insert/equation/footnote/chart accept `id`; strict schemas reject it elsewhere). Style ops support word-level spans: `match` styles only the matched substring (run splitting; `matchAll` styles every occurrence, `matchCase:false` matches case-insensitively); an absent match fails with E_NOT_FOUND. Returns {ok:true,appliedCount,revision,skippedIds,createdNodeIds,results:[{index,action,createdNodeIds}],revisionsPending,revisionsUnresolved?,revisionsRemedy?} where createdNodeIds After a trackedChange that left revisions it could not resolve, revisionsUnresolved counts them and revisionsRemedy lists kind, node and reason instead of repeating acceptAll. lists new node ids in document order (use them as anchors in the next batch without re-inspecting). A batch that drops a non-empty redo stack signals it (redoCleared:true + redoClearedWarning naming the depth): a fresh edit invalidates redo, so redo_document afterwards reports an empty stack. Example {"sessionId":"sess_abc","operations":[{"action":"replace","target":"p_001","text":"Hello"}],"sequential":true} -> {"ok":true,"appliedCount":1,"revision":2}. On failure returns {ok:false,code,remedy} with a fix-and-retry hint. Image inserts take exactly one source: {action:"image",operation:"insert",anchor,fileData} for inline base64 bytes, or {action:"image",operation:"insert",anchor,filePath} for a file read from a directory jail (both together fail with E_VALIDATION). The jail resolves explicit allowedDir first, else the session anchor (dirname of the open document); outside-jail refs fail with E_SANDBOX, missing files with E_IO, oversize files with E_LIMIT; batch reads nothing otherwise. Callout themes (operations/callout.ts THEMES): indigo|emerald|amber|slate|rose (default indigo; unknown names render indigo). Optional styleGuide (bundled guide name or guide .md path, jailed like filePath: explicit allowedDir else the session anchor; remote URLs fail closed) overrides the session guide for this batch only; it never replaces or persists (to re-skin the session use compose_document with styleGuide). Omitted inherits the session guide. Guides cannot be detached: an empty styleGuide fails with E_VALIDATION; open a new session to work without a guide. Unknown names fail with E_VALIDATION naming the available set. Guide parse notes ride both server stderr and the client-visible warnings array. Layout operations: {action:"section",operation:"setColumns",columns,spacing,separator} (columns 1-12, spacing in twips, separator draws the dividing rule), {action:"section",operation:"split"|"merge",...}, and {action:"pageSetup",orientation:"portrait"|"landscape",paperSize:"A4"|"Letter"|"Legal"|"A3",marginTop,marginBottom,marginLeft,marginRight,columns,sectionIndex} (margins in twips and written as given, never rotated; orientation turns the page by swapping its width and height; sectionIndex counts sections from 1 and limits the change to one section, omit it to change every section). Section breaks: {action:"insert",type:"sectionBreak",anchor,position,breakType:"nextPage"|"continuous"|"evenPage"|"oddPage"|"nextColumn"}; the section before the break keeps the page setup and headers of the section it splits. Headers and footers: {action:"headerFooter",operation:"set",targetType:"header"|"footer",text,alignment,sectionIndex (from 1, default the first section)}; {PAGE} and {NUMPAGES} inside text become live page-number fields. Images: width and height are integers in EMU (914400 per inch, 12700 per point, 9525 per pixel at 96 dpi); give one and the other follows the image aspect ratio, give neither and the image keeps its own size fitted to the page. Tables created by insert type:"table" or by Markdown repeat their header row across pages by default. Equations: {action:"equation",operation:"insert"|"replace",latex,mode:"auto"|"latex"|"plain"}; LaTeX that contains a backslash, ^ or _ becomes a real Word equation, and mode:"plain" keeps the text exactly as written. IDs are session-scoped: valid only in the issuing session, must not be stored across sessions, and duplicate client-supplied ids are rejected.'
+    'Apply 1..500 strictly-typed operations atomically (strict discriminatedUnion per action; sequential:true default preserves document order; Tracked edits return revisionIds; trackedChange accept/reject selects by ids, author or target and reports revisionResolution {resolved,unresolved,removedBookmarks,removedComments,staleLinks}. Comment operations include resolve, unresolve and delete and take an id as 3 or comment:3. single edit = 1-item batch). Caps 500 ops / 200MB throw E_QUOTA with remedy (maxSteps is an optional positive integer, unbounded when omitted). Client-supplied op ids are honored where the schema allows (insert/equation/footnote/chart accept `id`; strict schemas reject it elsewhere). Style ops support word-level spans: `match` styles only the matched substring (run splitting; `matchAll` styles every occurrence, `matchCase:false` matches case-insensitively); an absent match fails with E_NOT_FOUND. Returns {ok:true,appliedCount,revision,skippedIds,createdNodeIds,results:[{index,action,createdNodeIds}],revisionsPending,revisionsUnresolved?,revisionsRemedy?} where createdNodeIds After a trackedChange that left revisions it could not resolve, revisionsUnresolved counts them and revisionsRemedy lists kind, node and reason instead of repeating acceptAll. lists new node ids in document order (use them as anchors in the next batch without re-inspecting). A batch that drops a non-empty redo stack signals it (redoCleared:true + redoClearedWarning naming the depth): a fresh edit invalidates redo, so redo_document afterwards reports an empty stack. Example {"sessionId":"sess_abc","operations":[{"action":"replace","target":"p_001","text":"Hello"}],"sequential":true} -> {"ok":true,"appliedCount":1,"revision":2}. On failure returns {ok:false,code,remedy} with a fix-and-retry hint. Image inserts take exactly one source: {action:"image",operation:"insert",anchor,fileData} for inline base64 bytes, or {action:"image",operation:"insert",anchor,filePath} for a file read from a directory jail (both together fail with E_VALIDATION). The jail resolves explicit allowedDir first, else the session anchor (dirname of the open document); outside-jail refs fail with E_SANDBOX, missing files with E_IO, oversize files with E_LIMIT; batch reads nothing otherwise. Callout themes (operations/callout.ts THEMES): indigo|emerald|amber|slate|rose (default indigo; unknown names render indigo). Optional styleGuide (bundled guide name or guide .md path, jailed like filePath: explicit allowedDir else the session anchor; remote URLs fail closed) overrides the session guide for this batch only; it never replaces or persists (to re-skin the session use compose_document with styleGuide). Omitted inherits the session guide. Guides cannot be detached: an empty styleGuide fails with E_VALIDATION; open a new session to work without a guide. Unknown names fail with E_VALIDATION naming the available set. Guide parse notes ride both server stderr and the client-visible warnings array. Layout operations: {action:"section",operation:"setColumns",columns,spacing,separator} (columns 1-12, spacing in twips, separator draws the dividing rule), {action:"section",operation:"split"|"merge",...}, and {action:"pageSetup",orientation:"portrait"|"landscape",paperSize:"A4"|"Letter"|"Legal"|"A3",marginTop,marginBottom,marginLeft,marginRight,columns,sectionIndex} (margins in twips and written as given, never rotated; orientation turns the page by swapping its width and height; sectionIndex counts sections from 1 and limits the change to one section, omit it to change every section). Section breaks: {action:"insert",type:"sectionBreak",anchor,position,breakType:"nextPage"|"continuous"|"evenPage"|"oddPage"|"nextColumn"}; the section before the break keeps the page setup and headers of the section it splits. Headers and footers: {action:"headerFooter",operation:"set",targetType:"header"|"footer",text,alignment,sectionIndex (from 1, default the first section)}; {PAGE} and {NUMPAGES} inside text become live page-number fields. Images: width and height are integers in EMU (914400 per inch, 12700 per point, 9525 per pixel at 96 dpi); give one and the other follows the image aspect ratio, give neither and the image keeps its own size fitted to the page. Tables created by insert type:"table" or by Markdown repeat their header row across pages by default. Equations: {action:"equation",operation:"insert"|"replace",latex,mode:"auto"|"latex"|"plain"}; LaTeX that contains a backslash, ^ or _ becomes a real Word equation, and mode:"plain" keeps the text exactly as written. IDs are session-scoped: valid only in the issuing session, must not be stored across sessions, and duplicate client-supplied ids are rejected.',
+    { workflow: true, ecma: true }
   ),
   save_document: withSharedDocs(
-    `Validate then persist the session docx; the default policy permits pre-existing validation errors when no new normalized error signatures are detected. Save-blocked remedies are xpath-specific (drawing docPr/id, table tbl/tr/tc, relationships, header/footer parts, session tracking-attribute leaks each name their own fix). Optional commit params: message (commit subject, single-line, max 500 chars; newlines become spaces; blank/omitted falls back to \`save_document: rev <n> (<k> ops since last save)\`); author (max 100 chars; blank/omitted falls back to ASTra Agent). Over-long message/author fail at the handler with E_VALIDATION plus a shorten-and-retry remedy (never a bare MCP -32602: caps are enforced in the handler, not the wire schema). A successful save clears the session dirty flag (revision is re-synced to the file on disk). A file that already had validator errors when it was opened is saved when the edit adds none: the envelope then carries validation:{ok:false,tolerated:true,preExistingErrors,introducedErrors:0,messages}. An edit that adds an error is refused with E_VALIDATION naming both numbers. Pass {"strict":true} (or start the server with --strict-validation, or set ASTRA_STRICT_VALIDATION=1) to refuse every validator error as before. Paragraphs that share a w14:paraId are renumbered by the save: the first keeps its id, each later copy gets a new one and is listed in normalized, and the state before is recorded in the history (revert_document returns it); strict refuses such a document instead. The success envelope also carries revisionsPending (every revision element left in the saved package; a move counts as each of its markers) plus a revisionsRemedy when >0. The success envelope also carries advisory changedValues [{nodeId,before,after}] (old saved text -> new live text, bounded: at most ${CHANGED_VALUES_MAX} entries, each side at most ${CHANGED_VALUE_TEXT_MAX} chars, truncated flag honest; empty + reason when no baseline is computable). When the session carries a style guide (new_document/compose_document styleGuide), the envelope also carries advisory styleWarnings [{nodeId,rule,message}] (table contrast, chart duplicate colors, split-table orphans), never blocking. Example {"sessionId":"sess_abc"} -> {"ok":true,"path":"documents/report.docx"}. Always save after execute_batch; close afterwards. IDs are session-scoped: valid only in the issuing session, must not be stored across sessions, and duplicate client-supplied ids are rejected.`
+    `Validate then persist the session docx; the default policy permits pre-existing validation errors when no new normalized error signatures are detected. Save-blocked remedies are xpath-specific (drawing docPr/id, table tbl/tr/tc, relationships, header/footer parts, session tracking-attribute leaks each name their own fix). Optional commit params: message (commit subject, single-line, max 500 chars; newlines become spaces; blank/omitted falls back to \`save_document: rev <n> (<k> ops since last save)\`); author (max 100 chars; blank/omitted falls back to ASTra Agent). Over-long message/author fail at the handler with E_VALIDATION plus a shorten-and-retry remedy (never a bare MCP -32602: caps are enforced in the handler, not the wire schema). A successful save clears the session dirty flag (revision is re-synced to the file on disk). When dc:title is still a template placeholder ("Blank Document", "Report") the save writes it from the cover title, the first Title or the first Heading 1 and reports title and titleSetFrom; a title already set is never changed. A file that already had validator errors when it was opened is saved when the edit adds none: the envelope then carries validation:{ok:false,valid:false,errorCount,tolerated:true,preExistingErrors,introducedErrors:0,messages}; a clean save carries validation:{ok:true,valid:true,errorCount:0}. An edit that adds an error is refused with E_VALIDATION naming both numbers, with errorCount and the first 10 errors as errors[{description,xPath}] (validate_document lists them all). Pass {"strict":true} (or start the server with --strict-validation, or set ASTRA_STRICT_VALIDATION=1) to refuse every validator error as before. Paragraphs that share a w14:paraId are renumbered by the save: the first keeps its id, each later copy gets a new one and is listed in normalized, and the state before is recorded in the history (revert_document returns it); strict refuses such a document instead. The success envelope also carries revisionsPending (every revision element left in the saved package; a move counts as each of its markers) plus a revisionsRemedy when >0. The success envelope also carries advisory changedValues [{nodeId,before,after}] (old saved text -> new live text, bounded: at most ${CHANGED_VALUES_MAX} entries, each side at most ${CHANGED_VALUE_TEXT_MAX} chars, truncated flag honest; empty + reason when no baseline is computable). When the session carries a style guide (new_document/compose_document styleGuide), the envelope also carries advisory styleWarnings [{nodeId,rule,message}] (table contrast, chart duplicate colors, split-table orphans), never blocking. Example {"sessionId":"sess_abc"} -> {"ok":true,"path":"documents/report.docx"}. Always save after execute_batch; close afterwards. IDs are session-scoped: valid only in the issuing session, must not be stored across sessions, and duplicate client-supplied ids are rejected.`,
+    { workflow: true }
   ),
   close_document: withSharedDocs(
     'Evict a session and release its lock/memory. Returns {ok:true,sessionId,dirty,discardedRevisions,warning?}: a dirty close warns (dirty:true + warning naming the discarded unsaved revision count) instead of silently discarding; save first when the warning matters. Example {"sessionId":"sess_abc"} -> {"ok":true,"dirty":false,"discardedRevisions":0}. Close when finished; expired sessions (30min idle) must be re-opened.'
@@ -41697,7 +42262,7 @@ var LEAN6_DESCRIPTIONS = {
 };
 var GIT_HISTORY_DESCRIPTIONS = {
   get_document_history: withSharedDocs(
-    'List the saved git history for a session (newest first, read-only: never mutates, never flips dirty). Paginate with limit (1-100, default 20) and offset (default 0). Returns {ok:true,sessionId,documentPath,currentCommit,totalCommits,history:[{oid,message,author,timestamp,timestampMs,opCount,affectedNodeIds,resultingHeadOid}]} (timestampMs = ms-precision epoch millis; commit-time clock for tracked commits, git seconds for older ones; opCount is always present (0 for pre-tracking commits and heals-only saves: it folds operations, not normalizer rewrites); affectedNodeIds is always present ([] when untracked); resultingHeadOid always equals oid (append-only; refs never move). Example {"sessionId":"sess_abc","limit":10} -> history slice. Use the oids with revert_document (or preview_revert first) to restore an earlier saved state. IDs are session-scoped: valid only in the issuing session, must not be stored across sessions, and duplicate client-supplied ids are rejected.'
+    'List the saved git history for a session (newest first, read-only: never mutates, never flips dirty). Paginate with limit (1-100, default 20) and offset (default 0). Returns {ok:true,sessionId,documentPath,currentCommit,totalCommits,history:[{oid,message,author,timestamp,timestampMs,opCount,affectedNodeIds,resultingHeadOid}]} (timestampMs = ms-precision epoch millis; commit-time clock for tracked commits, git seconds for older ones; opCount is always present (0 for pre-tracking commits and heals-only saves: it folds operations, not normalizer rewrites); affectedNodeIds is always present ([] when untracked); resultingHeadOid always equals oid (append-only; refs never move). Example {"sessionId":"sess_abc","limit":10} -> history slice. Use the oids with revert_document (or preview_revert first) to restore an earlier saved state. '
   ),
   preview_revert: withSharedDocs(
     `Read-only WOULD-restore preview for revert_document (never mutates: no revision bump, no disk write, no redo-stack change). Target one commit: {steps:N} walks back N saved commits from the head (1 = the previous saved commit, must be < totalCommits) OR {commitOid:"<40-hex>"} jumps to that commit (mutually exclusive). Returns {ok:true,sessionId,targetOid,targetMessage,targetAuthor,stepsBack,affectedFiles,changedValues,changedValuesTruncated,changedValuesPositional,dirty,dirtyHandling,currentHeadOid,totalCommits} where affectedFiles lists package paths that differ from the target (word/document.xml plus tracked extras). The preview also carries advisory changedValues [{nodeId,before,after}] (live current text -> target restore text, bounded: at most ${CHANGED_VALUES_MAX} entries, each side at most ${CHANGED_VALUE_TEXT_MAX} chars, truncated flag honest; changedValuesPositional:true means either side held orphan ids (no shared id across the boundary, common under duplicate native ids) so before/after pairing is positional, not identity; empty + changedValuesReason when the target range is not computable). Example {"sessionId":"sess_abc","steps":1} -> preview summary. Preview first when a revert would discard unsaved edits.`
@@ -41714,19 +42279,19 @@ var EXPORT_AUDIT_TRAIL_DESCRIPTION = withSharedDocs(
 );
 var PARITY_DESCRIPTIONS = {
   validate_document: withSharedDocs(
-    'Preflight read-only OOXML audit for a session: runs the same validator gate save_document enforces, before anything is written. Detects schema violations while they are still cheap to fix. Strictly read-only: zero session mutation (revision and dirty flag untouched), zero disk writes, zero history commits. Returns {ok:true,sessionId,revision,dirty,validation:{valid,errorCount,errors}} where errors carry description + xPath (first 10, same shape as the save-blocked envelope). The verdict is on the document as a save would write it (children put in schema order first); when that save would repair something the result also carries pendingNormalizations (a list of repairs, absent when none), so a valid verdict is not mistaken for "valid exactly as it stands". Use before save_document when the package may be non-conforming; save_document re-gates before writing. Example {"sessionId":"sess_abc"} -> {"ok":true,"validation":{"valid":true,"errorCount":0,"errors":[]}}. IDs are session-scoped: valid only in the issuing session, must not be stored across sessions.'
+    'Preflight read-only OOXML audit for a session: runs the same validator gate save_document enforces, before anything is written. Detects schema violations while they are still cheap to fix. Strictly read-only: zero session mutation (revision and dirty flag untouched), zero disk writes, zero history commits. Returns {ok:true,sessionId,revision,dirty,validation:{valid,errorCount,errors}} where errors carry description + xPath (first 10, same shape as the save-blocked envelope). The verdict is on the document as a save would write it (children put in schema order first); when that save would repair something the result also carries pendingNormalizations (a list of repairs, absent when none), so a valid verdict is not mistaken for "valid exactly as it stands". Use before save_document when the package may be non-conforming; save_document re-gates before writing. Example {"sessionId":"sess_abc"} -> {"ok":true,"validation":{"valid":true,"errorCount":0,"errors":[]}}. '
   ),
   get_stats: withSharedDocs(
-    'Token-cheap document census for a session: words, paragraphs, tables, images, and an estimated editorial page budget (layout-weighted by words, tables, images, and explicit page breaks) in a single small envelope. Counters are the exact engine counters behind CLI stats, so both surfaces always agree. Physical pagination is finalized when exporting to PDF via LibreOffice. Read-only: never mutates, never bumps the revision. Returns {ok:true,sessionId,revision,dirty,words,paragraphs,tables,images,pages}. Use instead of inspect_document when only counts are needed (a full TOON dump costs thousands of tokens for the same question). Example {"sessionId":"sess_abc"} -> {"ok":true,"words":42,"paragraphs":5}. IDs are session-scoped: valid only in the issuing session, must not be stored across sessions.'
+    'Token-cheap document census for a session: words, paragraphs, tables, callouts, images, and an estimated editorial page budget (layout-weighted by words, tables, images, and explicit page breaks) in a single small envelope. Counters are the exact engine counters behind CLI stats, so both surfaces always agree. Physical pagination is finalized when exporting to PDF via LibreOffice. Read-only: never mutates, never bumps the revision. Returns {ok:true,sessionId,revision,dirty,words,paragraphs,tables,callouts,images,pages}. A callout (a "> [!NOTE]" alert or a callout op: a one-cell table with a fill) is counted in callouts and not in tables. Use instead of inspect_document when only counts are needed (a full TOON dump costs thousands of tokens for the same question). Example {"sessionId":"sess_abc"} -> {"ok":true,"words":42,"paragraphs":5}. '
   ),
   sanitize_document: withSharedDocs(
-    `Scrub an open session document. By default it removes revision ids, authorship, embedded EXIF and hidden text PII. Tracked changes and comments are kept, with the text of every tracked deletion, unless you ask: acceptAllRevisions:true accepts all tracked changes (deleted text is removed) and stripComments:true removes comments. The CLI presets (bare sanitize, --client-safe, --metadata-only, --redact-pii) turn both on; this tool does not. Macro/active parts are removed on request. It uses the same engine scrub path as CLI sanitize. Body text is kept. Options mirror the engine scrub keys 1:1 (zeroRetention, purgeRSIDs, purgeAuthors, purgeExif, purgePII, acceptAllRevisions, stripComments, replacementAuthor, allowMacros, stripMacros); omitted options take engine defaults. With acceptAllRevisions it returns E_VALIDATION and no file when revision markup remains that cannot be resolved. allowMacros and stripMacros together fail with E_VALIDATION. ${piiCoverageSentence()} Returns {ok:true,sessionId,revision,dirty,removedRSIDs,purgedAuthors,strippedExifBytes,purgedPII,bodyPII,piiCoverage,acceptedRevisions,strippedComments,strippedMacros,macroParts,filesTouched,droppedRogue,...} plus the standard redoCleared signal when a redo chain is dropped. Example {"sessionId":"sess_abc","stripMacros":true} -> scrubbed session at a new revision (save after). IDs are session-scoped: valid only in the issuing session, must not be stored across sessions.`
+    `Scrub an open session document. By default it removes revision ids, authorship, embedded EXIF and hidden text PII. Tracked changes and comments are kept, with the text of every tracked deletion, unless you ask: acceptAllRevisions:true accepts all tracked changes (deleted text is removed) and stripComments:true removes comments. The CLI presets (bare sanitize, --client-safe, --metadata-only, --redact-pii) turn both on; this tool does not. Macro/active parts are removed on request. It uses the same engine scrub path as CLI sanitize. Body text is kept. Options mirror the engine scrub keys 1:1 (zeroRetention, purgeRSIDs, purgeAuthors, purgeExif, purgePII, acceptAllRevisions, stripComments, replacementAuthor, allowMacros, stripMacros); omitted options take engine defaults. With acceptAllRevisions it returns E_VALIDATION and no file when revision markup remains that cannot be resolved. allowMacros and stripMacros together fail with E_VALIDATION. ${piiCoverageSentence()} Returns {ok:true,sessionId,revision,dirty,removedRSIDs,purgedAuthors,strippedExifBytes,purgedPII,bodyPII,piiCoverage,acceptedRevisions,strippedComments,strippedMacros,macroParts,filesTouched,droppedRogue,...} plus the standard redoCleared signal when a redo chain is dropped. Example {"sessionId":"sess_abc","stripMacros":true} -> scrubbed session at a new revision (save after). `
   ),
   normalize_document: withSharedDocs(
-    'Canonical repair for an open session document: runs the same allowlist normalizer CLI normalize calls (verified tag renames, whitelisted default infills, schema-sequence sorts) over the live package, then refreshes the session view and proves the result with a read-only validation verdict. Output bytes match CLI normalize on the same input. When the package is still invalid afterwards, the session is restored untouched and the call fails with E_VALIDATION plus a fix-and-retry remedy (same contract as CLI normalize writing nothing on failure). After the normalizer it repairs known validator error kinds one rule at a time; a rule that adds a validator error or changes the visible text is dropped and listed in rolledBack. Returns {ok:true,sessionId,revision,dirty,normalized,remaining,rolledBack,validation:{valid:true,...}} where normalized lists every rewrite once and remaining counts the validator errors left (-1 when the validator did not run), plus the standard redoCleared signal when a redo chain is dropped. Example {"sessionId":"sess_abc"} -> {"ok":true,"normalized":[...]}. Save after to persist. IDs are session-scoped: valid only in the issuing session, must not be stored across sessions.'
+    'Canonical repair for an open session document: runs the same allowlist normalizer CLI normalize calls (verified tag renames, whitelisted default infills, schema-sequence sorts) over the live package, then refreshes the session view and proves the result with a read-only validation verdict. Output bytes match CLI normalize on the same input. When the package is still invalid afterwards, the session is restored untouched and the call fails with E_VALIDATION plus a fix-and-retry remedy (same contract as CLI normalize writing nothing on failure). After the normalizer it repairs known validator error kinds one rule at a time; a rule that adds a validator error or changes the visible text is dropped and listed in rolledBack. Returns {ok:true,sessionId,revision,dirty,normalized,remaining,rolledBack,validation:{valid:true,...}} where normalized lists every rewrite once and remaining counts the validator errors left (-1 when the validator did not run), plus the standard redoCleared signal when a redo chain is dropped. Example {"sessionId":"sess_abc"} -> {"ok":true,"normalized":[...]}. Save after to persist. '
   ),
   import_document: withSharedDocs(
-    'Ingest an on-disk Markdown file into the OPEN session (the file-ingress half compose_document lacks: compose takes an inline string only). Reads the file under the workspace jail, then runs the identical compose pipeline (strict compile gate, quotas, template-seed check, inline-span splitting), so the result is byte-equal to composing the same Markdown inline. sessionId is strictly required: the tool never auto-creates sessions (fresh templated document: new_document first, then import; existing file: open_document first, then import). Accepts .md/.markdown/.txt; .html/.htm refuse with E_VALIDATION (convert to Markdown first, same verdict as CLI import); .docx refuses with E_VALIDATION naming open_document (open .docx files directly). Outside-jail reads fail E_SANDBOX, missing files E_IO, oversize files E_LIMIT. Optional allowedDir (image refs), template (report|memo|blank seed check), and styleGuide (same attach semantics as compose_document). Optional dollarMath (default false) treats $...$ as inline math; off by default because prices and shell text can look like math. Example {"sessionId":"sess_abc","path":"documents/notes.md"} -> compose envelope. IDs are session-scoped: valid only in the issuing session, must not be stored across sessions.'
+    'Ingest an on-disk Markdown file into the OPEN session (the file-ingress half compose_document lacks: compose takes an inline string only). Reads the file under the workspace jail, then runs the identical compose pipeline (strict compile gate, quotas, template-seed check, inline-span splitting), so the result is byte-equal to composing the same Markdown inline. sessionId is strictly required: the tool never auto-creates sessions (fresh templated document: new_document first, then import; existing file: open_document first, then import). Accepts .md/.markdown/.txt; .html/.htm refuse with E_VALIDATION (convert to Markdown first, same verdict as CLI import); .docx refuses with E_VALIDATION naming open_document (open .docx files directly). Outside-jail reads fail E_SANDBOX, missing files E_IO, oversize files E_LIMIT. Optional allowedDir (image refs), template (report|memo|blank seed check), and styleGuide (same attach semantics as compose_document). Optional dollarMath (default false) treats $...$ as inline math; off by default because prices and shell text can look like math. Example {"sessionId":"sess_abc","path":"documents/notes.md"} -> compose envelope. '
   )
 };
 
@@ -41768,7 +42333,7 @@ var InspectDocumentSchema = import_zod4.z.object({
   // defaults (offset 0, limit 50, window 5) are applied manually in
   // handleInspectDocument AFTER the explicit-presence check below.
   offset: import_zod4.z.number().int().min(0).optional(),
-  limit: import_zod4.z.number().int().min(1).max(200).optional(),
+  limit: import_zod4.z.number().int().min(1).max(200, "limit is at most 200 per call; use offset and nextOffset to read more").optional(),
   aroundNode: import_zod4.z.string().min(1).max(256).optional(),
   window: import_zod4.z.number().int().min(1).max(20).optional(),
   maxTokens: import_zod4.z.number().int().min(200).max(8e3).optional(),
@@ -41776,7 +42341,7 @@ var InspectDocumentSchema = import_zod4.z.object({
   // FX-13: review records (include) page on their own window, so they never move the node window.
   // reviewLimit above 50 is clamped to 50 by the handler, as limit was before.
   reviewOffset: import_zod4.z.number().int().min(0).optional(),
-  reviewLimit: import_zod4.z.number().int().min(1).max(200).optional(),
+  reviewLimit: import_zod4.z.number().int().min(1).max(200, "reviewLimit is at most 200 per call; use reviewOffset to read more").optional(),
   commentId: import_zod4.z.number().int().nonnegative().optional(),
   revisionId: import_zod4.z.number().int().nonnegative().optional()
 }).strict();
@@ -42213,7 +42778,7 @@ var import_zod5 = require("zod");
 var COMPOSE_MARKDOWN_MAX = 5e5;
 var COMPOSE_VALIDATION_ERRORS_MAX = 3;
 function hasGuideScheme(ref) {
-  return /^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(ref.trim());
+  return hasUriScheme(ref.trim());
 }
 function guideSandboxError(message, remedy) {
   return Object.assign(new Error(message), { code: "E_SANDBOX", remedy });
@@ -42251,9 +42816,13 @@ var ComposeDocumentSchema = import_zod5.z.object({
   // on purpose so the hint (not a bare schema error) reaches the caller.
   styleGuide: import_zod5.z.string().max(1024).optional(),
   // Read $...$ as inline math (off by default: prices and shell text can look like math).
-  dollarMath: import_zod5.z.boolean().optional()
+  dollarMath: import_zod5.z.boolean().optional(),
+  // Placement of a later compose: a node id, start or end. Absent = append after the last node.
+  anchor: import_zod5.z.string().min(1).max(256).optional(),
+  // Side of anchor the first block goes on (default after). Needs anchor.
+  position: import_zod5.z.enum(["before", "after"]).optional()
 }).strict();
-var COMPOSE_DOCUMENT_DESCRIPTION = 'Compose a Markdown string into the open session document (appends after existing content, except an unchanged built-in template created in this session has its sample content replaced). Runs the engine compose path, then applies the resulting operations through the same execute_batch path (strict schema gate, per-chunk quotas, structural checks, per-chunk atomic rollback, then inline-span run splitting), so every gate a batch meets applies here unchanged. Supported input: #/##/### headings (real Heading1..3 styles), blank-line paragraphs (single newlines join with a space), flat bullet (-, *, +) and ordered (1., 1)) lists with real numbering, GitHub-style tables with a header separator row (header row shaded and repeated), --- dividers, fenced or indented code blocks (monospace, line breaks kept), [^label] footnotes with definitions, inline spans (**bold**, *italic*, `code`, [text](url)) applied as runs with real hyperlink targets, and standalone block images/charts (![alt](path)) resolved from allowedDir. Out-of-scope input fails closed with E_VALIDATION plus a 1-based line number and writes nothing: raw HTML (except [!NOTE]-style alert callouts, which compile to callout containers), custom styles, general blockquotes, deeper headings, nested lists or tables, task items. Block image/chart refs need allowedDir pointing at the folder holding the files (refs stay jailed inside it; without allowedDir they fail closed); remote URL refs fail closed; inline data-URL block images bypass allowedDir by design (bytes decode in memory through the same image gates). Sources compiling past 500 operations apply as sequential 500-operation chunks; each chunk is atomic, but a later-chunk failure leaves earlier chunks applied (same exposure as any multi-batch caller). Compiled node ids are deterministic per source, so a second compose into the same session is rejected by the duplicate-id gate (compose once per session with the full source). Optional template (report|memo|blank) requires the open document to still hold that template seed, otherwise composition fails before any write (for a fresh templated document call new_document first, then compose_document with template), and placement is append after existing content except for an unchanged built-in template created in this session. Reopened documents and external templates keep existing content. Returns {ok:true,opCount,appliedCount,revision,createdNodeIds,results,validation:{valid,errorCount,errors}} where createdNodeIds lists new node ids in document order (use them as anchors without re-inspecting) and validation proves the post-compose package state via a read-only OOXML check (save_document re-gates before writing). A compose that drops a non-empty redo stack signals it (redoCleared:true + redoClearedWarning naming the depth): a fresh edit invalidates redo. Optional styleGuide (bundled guide name or guide .md path, jailed like image refs: explicit allowedDir else the session anchor; remote URLs fail closed) replaces the session guide (not a one-batch override: later batches inherit it until another compose replaces it) and skins this compose (table/header-fill, chart-palette, callout, and code defaults apply where ops omit params; explicit params still win). Guides cannot be detached: open a new session to work without a guide. With no guide, compose uses the built-in Default Corporate look (navy table header, bold white header text, striped rows). styleGuide "legacy" gives the older grey header for this call only and is not stored on the session. An italic-only line directly under the opening # title becomes the Subtitle; a [!NOTE]-style line outside a blockquote stays plain text and comes back in warnings. Later batches inherit it, inspect_document shows its compact summary, save_document reports advisory styleWarnings. Unknown names fail with E_VALIDATION naming the available set. Math: $$ ... $$ or \\[ ... \\] blocks become display equations and \\(...\\) becomes inline math (one line, up to 500 characters; refused inside links and table cells). Display blocks are top level only (inside a list item or alert body they fail closed). Optional dollarMath (default false) treats $...$ as inline math; off by default because prices and shell text can look like math. Workflow: open_document -> compose_document -> save_document. Example {"sessionId":"sess_abc","markdown":"# Plan\\n\\n- a\\n- b\\n"} (add "allowedDir":"<dir>" for image/chart refs, "template":"report|memo|blank" to verify the seed). IDs are session-scoped: valid only in the issuing session, must not be stored across sessions. persistentIds maps each created paragraph id (md_0003) to the paragraph id the saved file carries, so a reopened session can be addressed with it (tables are renumbered t_001.. by position on reopen).';
+var COMPOSE_DOCUMENT_DESCRIPTION = 'Compose a Markdown string into the open session document (appends after existing content, or at anchor with position before|after; an unchanged built-in template created in this session has its sample content replaced). A document can be built in several compose calls: the first call of a session mints ids md_0001..., later calls mint md2_0001..., md3_0001..., so ids never collide; pass anchor (a node id, start or end) and position to add a section in the middle without another tool. Runs the engine compose path, then applies the resulting operations through the same execute_batch path (strict schema gate, per-chunk quotas, structural checks, per-chunk atomic rollback, then inline-span run splitting), so every gate a batch meets applies here unchanged. Supported input: #/##/### headings (real Heading1..3 styles), blank-line paragraphs (single newlines join with a space), flat bullet (-, *, +) and ordered (1., 1)) lists with real numbering, GitHub-style tables with a header separator row (header row shaded and repeated), --- dividers, fenced or indented code blocks (monospace, line breaks kept), [^label] footnotes with definitions, inline spans (**bold**, *italic*, `code`, [text](url)) applied as runs with real hyperlink targets, plain `> quote` blocks (written in the Quote paragraph style: blank > lines start a new paragraph, > > nests up to 3 levels, flat lists and fenced code are kept inside, a table, heading or image inside a quote fails), and standalone block images/charts (![alt](path)) resolved from allowedDir. Out-of-scope input fails closed with E_VALIDATION plus a 1-based line number and writes nothing: raw HTML (except [!NOTE]-style alert callouts, which compile to callout containers and keep bold, italic, code and links), custom styles, deeper headings, nested lists or tables, task items. Block image/chart refs need allowedDir pointing at the folder holding the files (refs stay jailed inside it; without allowedDir they fail closed); remote URL refs fail closed; inline data-URL block images bypass allowedDir by design (bytes decode in memory through the same image gates). Sources compiling past 500 operations apply as sequential 500-operation chunks; the compose is atomic as a whole: when any chunk fails, every chunk before it is rewound and the document stays as it was. Citation numbers and the References list restart in each compose call. Optional template (report|memo|blank) is accepted on the first compose only and requires the open document to still hold that template seed, otherwise composition fails before any write (for a fresh templated document call new_document first, then compose_document with template), and placement is append after existing content except for an unchanged built-in template created in this session. Reopened documents and external templates keep existing content. Returns {ok:true,opCount,appliedCount,revision,createdNodeIds,results,validation:{valid,errorCount,errors}} where createdNodeIds lists new node ids in document order (use them as anchors without re-inspecting) and validation proves the post-compose package state via a read-only OOXML check (save_document re-gates before writing). A compose that drops a non-empty redo stack signals it (redoCleared:true + redoClearedWarning naming the depth): a fresh edit invalidates redo. Optional styleGuide (bundled guide name or guide .md path, jailed like image refs: explicit allowedDir else the session anchor; remote URLs fail closed) replaces the session guide (not a one-batch override: later batches inherit it until another compose replaces it) and skins this compose (table/header-fill, chart-palette, callout, and code defaults apply where ops omit params; explicit params still win). Guides cannot be detached: open a new session to work without a guide. With no guide, compose uses the built-in Default Corporate look (navy table header, bold white header text, striped rows). styleGuide "legacy" gives the older grey header for this call only and is not stored on the session. An italic-only line directly under the opening # title becomes the Subtitle; a [!NOTE]-style line outside a blockquote stays plain text and comes back in warnings. Later batches inherit it, inspect_document shows its compact summary, save_document reports advisory styleWarnings. Unknown names fail with E_VALIDATION naming the available set. Math: $$ ... $$ or \\[ ... \\] blocks become display equations and \\(...\\) becomes inline math (one line, up to 500 characters; refused inside links and table cells). Display blocks are top level only (inside a list item or alert body they fail closed). Optional dollarMath (default false) treats $...$ as inline math; off by default because prices and shell text can look like math. Workflow: open_document -> compose_document -> save_document. Example {"sessionId":"sess_abc","markdown":"# Plan\\n\\n- a\\n- b\\n"} (add "allowedDir":"<dir>" for image/chart refs, "template":"report|memo|blank" to verify the seed). IDs are session-scoped: valid only in the issuing session, must not be stored across sessions. When dc:title is still a template placeholder it is set from the first Title or Heading 1 (titleSetFrom says so); a title already set is kept. persistentIds maps each created paragraph id (md_0003) to the paragraph id the saved file carries, so a reopened session can be addressed with it (tables are renumbered t_001.. by position on reopen).';
 function persistentParagraphIds(ast, createdIds) {
   const wanted = new Set(createdIds);
   const out = {};
@@ -42316,7 +42885,7 @@ function assertPathAllowed(allowedDir, roots) {
   if (segments.includes("..")) {
     throw Object.assign(new Error('allowedDir contains forbidden ".." traversal'), {
       code: "E_SANDBOX",
-      remedy: "Use a folder inside the workspace documents directory or the system temp dir."
+      remedy: `Use a folder ${describeAllowedFolders()}.`
     });
   }
   const resolved = path13.resolve(trimmed);
@@ -42341,7 +42910,7 @@ function assertPathAllowed(allowedDir, roots) {
       new Error(`allowedDir is outside the allowed directories (${roots.join(", ")})`),
       {
         code: "E_SANDBOX",
-        remedy: "Point allowedDir at a folder under documents/ or the system temp dir, or set ASTRA_EXTRA_DOC_ROOTS."
+        remedy: `Point allowedDir at a folder ${describeAllowedFolders()}.`
       }
     );
   }
@@ -42366,7 +42935,7 @@ async function handleComposeDocument(store, rawArgs) {
     } catch (err) {
       return composeErrorFrom(
         err,
-        "Point allowedDir at a folder under documents/ or the system temp dir, or set ASTRA_EXTRA_DOC_ROOTS."
+        `Point allowedDir at a folder ${describeAllowedFolders()}.`
       );
     }
   }
@@ -42382,7 +42951,7 @@ async function handleComposeDocument(store, rawArgs) {
     );
   }
   try {
-    validateOperationsStrict(operations);
+    validateComposedOperations(operations);
   } catch (err) {
     return composeErrorFrom(
       err,
@@ -42435,10 +43004,15 @@ async function handleComposeDocument(store, rawArgs) {
         }
       }
       const sessionGuide = legacyLook ? "legacy" : handle.styleGuide;
-      if (sessionGuide !== void 0) {
+      const idPrefix = nextComposeIdPrefix(handle.ast);
+      if (sessionGuide !== void 0 || idPrefix !== "md" || parsed.data.anchor !== void 0) {
         operations = compileMarkdown(parsed.data.markdown, {
           ...canonicalAllowedDir !== void 0 ? { allowedDir: canonicalAllowedDir } : {},
-          styleGuide: sessionGuide
+          ...sessionGuide !== void 0 ? { styleGuide: sessionGuide } : {},
+          ...parsed.data.dollarMath ? { dollarMath: true } : {},
+          idPrefix,
+          ...parsed.data.anchor !== void 0 ? { anchor: parsed.data.anchor } : {},
+          ...parsed.data.position !== void 0 ? { position: parsed.data.position } : {}
         });
         ({ shadows: opShadows, actions: opActions, targets: opTargets } = shadowsOf(operations));
       }
@@ -42446,7 +43020,10 @@ async function handleComposeDocument(store, rawArgs) {
         ...canonicalAllowedDir !== void 0 ? { allowedDir: canonicalAllowedDir } : {},
         ...template !== void 0 ? { template } : {},
         ...sessionGuide !== void 0 ? { styleGuide: sessionGuide } : {},
-        ...parsed.data.dollarMath ? { dollarMath: true } : {}
+        ...parsed.data.dollarMath ? { dollarMath: true } : {},
+        idPrefix,
+        ...parsed.data.anchor !== void 0 ? { anchor: parsed.data.anchor } : {},
+        ...parsed.data.position !== void 0 ? { position: parsed.data.position } : {}
       });
       if (!aggregate.success) {
         const first = aggregate.errors[0];
@@ -42515,6 +43092,7 @@ async function handleComposeDocument(store, rawArgs) {
         dirty: store.isDirty(handle),
         createdNodeIds,
         ...Object.keys(persistentIds).length > 0 ? { persistentIds } : {},
+        ...aggregate.titleSetFrom ? { titleSetFrom: aggregate.titleSetFrom } : {},
         results,
         validation: {
           valid: validation.ok,
@@ -42802,6 +43380,13 @@ async function handleExecuteBatch(store, input) {
       const afterOrder = collectAstIdTexts(handle.ast).order;
       const createdNodeIds = afterOrder.filter((id) => !beforeIds.has(id));
       const results = attributeCreatedIds(opActions, opShadows, createdNodeIds);
+      const coverIndex = opActions.indexOf("coverPage");
+      if (coverIndex >= 0) {
+        const afterSet = new Set(afterOrder);
+        const named = new Set(opTargets);
+        const removed = [...beforeIds].filter((id) => !afterSet.has(id) && !named.has(id));
+        if (removed.length > 0) results[coverIndex].removedSeedNodes = removed;
+      }
       store.accumulatePendingAudit(handle, res.appliedCount, [...opTargets, ...createdNodeIds]);
       const batchRevisionsPending = typeof res.revisionsPending === "number" ? res.revisionsPending : countPendingRevisionsInParser(handle.parser);
       const batchRevisionsRemedy = typeof res.revisionsRemedy === "string" ? String(res.revisionsRemedy) : revisionsRemedy(batchRevisionsPending, res.revisionResolution?.unresolved);
@@ -42911,6 +43496,11 @@ async function executeSaveDocument(store, input) {
     const strict = parsed.data.strict ?? strictValidationDefault();
     const paraIdPolicy = strict ? "refuse" : "renumber";
     const dupPreState = paraIdPolicy === "renumber" && handle.parser.getDuplicateParaIds().length > 0 ? { xml: handle.parser.readDocumentXml(), extras: collectTrackedExtrasForGit(handle.parser) } : null;
+    let identity = {};
+    try {
+      identity = applyDocumentIdentity(handle.ast, handle.parser);
+    } catch {
+    }
     const validation = await handle.parser.validateOOXML({ maxErrors: BASELINE_MAX_ERRORS, duplicateParaIds: paraIdPolicy });
     const verdict = validation.ok ? { kind: "clean" } : strict ? { kind: "incomparable", reason: "no-baseline" } : judgeAgainstBaseline(validation, await resolveBaseline(handle));
     if (verdict.kind === "introduced") throw introducedError("save_document", verdict);
@@ -42924,7 +43514,9 @@ async function executeSaveDocument(store, input) {
         code: "E_VALIDATION",
         // Phase C-1c: xpath-specific remedy (docPr/@id, tbl children,
         // relationships each name their own fix).
-        remedy: remedyForValidationError(xp, desc)
+        remedy: remedyForValidationError(xp, desc) + (count ? " validate_document lists every error with its location." : ""),
+        errorCount: validation.errors.length,
+        errors: summarizeValidationErrors(validation.errors)
       });
     }
     if (dupPreState) {
@@ -43060,6 +43652,8 @@ async function executeSaveDocument(store, input) {
       ...changedValuesReason ? { changedValuesReason } : {},
       // Display-only: the core save-path hook healed during the rezip above.
       normalized: saveNormalized,
+      ...identity.titleSetFrom ? { title: identity.title, titleSetFrom: identity.titleSetFrom } : {},
+      ...identity.creatorSet ? { creatorSet: identity.creatorSet } : {},
       // Advisory style pass under the session guide (read-only, best-effort,
       // never blocks the save). Absent without a guide. The stored chart
       // reader mirrors validate/document-manager so persisted twin colors
@@ -44498,7 +45092,7 @@ var NewDocumentSchema = import_zod8.z.object({
     "DEPRECATED: session ids are server-minted (sess_<uuid>); omit sessionId and use the returned id. Client-supplied values are rejected with E_VALIDATION (deterministic ids are test-only via --allow-client-session-ids)."
   )
 }).strict();
-var NEW_DOCUMENT_DESCRIPTION = 'Create a new .docx from a template (report|memo|blank, default blank) at outPath inside an allowed directory (--allowed-dir / documents / system temp). Validates the fresh package before writing (E_VALIDATION when invalid, never writes corruption); refuses to overwrite without {force:true} (E_CONFLICT). Success returns {ok:true,path,sessionId,revision,template,bytes} with the file opened into a session (use sessionId for inspect/execute_batch/save). Example {"outPath":"documents/new-report.docx","template":"report"}. Session ids are server-minted (sess_<uuid>, DEPRECATED to supply sessionId: client-supplied values are rejected with E_VALIDATION; deterministic ids are test-only via --allow-client-session-ids). IDs are session-scoped: valid only in the issuing session, must not be stored across sessions. Optional styleGuide (bundled guide name or guide .md path, jailed to the document folder; remote URLs fail closed) attaches a house style to the session at creation: later batches inherit its table/chart/callout defaults, inspect_document shows its compact summary, save_document reports advisory styleWarnings. Guides cannot be detached afterwards: open a new session to work without a guide. Unknown names fail with E_VALIDATION naming the available set.';
+var NEW_DOCUMENT_DESCRIPTION = 'Create a new .docx from a template (report|memo|blank, default blank) at outPath inside an allowed folder (the folders named with --allowed-dir or ASTRA_EXTRA_DOC_ROOTS; only when none are named, ./documents and the system temp folder). Validates the fresh package before writing (E_VALIDATION when invalid, never writes corruption); refuses to overwrite without {force:true} (E_CONFLICT). Success returns {ok:true,path,sessionId,revision,template,bytes} with the file opened into a session (use sessionId for inspect/execute_batch/save). Example {"outPath":"documents/new-report.docx","template":"report"}. Session ids are server-minted (sess_<uuid>, DEPRECATED to supply sessionId: client-supplied values are rejected with E_VALIDATION; deterministic ids are test-only via --allow-client-session-ids). IDs are session-scoped: valid only in the issuing session, must not be stored across sessions. Optional styleGuide (bundled guide name or guide .md path, jailed to the document folder; remote URLs fail closed) attaches a house style to the session at creation: later batches inherit its table/chart/callout defaults, inspect_document shows its compact summary, save_document reports advisory styleWarnings. Guides cannot be detached afterwards: open a new session to work without a guide. Unknown names fail with E_VALIDATION naming the available set.';
 function newDocError(code, message, remedy) {
   return { ok: false, code, message, remedy };
 }
@@ -44659,24 +45253,7 @@ async function handleNewDocument(store, rawArgs) {
 // src/lib/mcp/handlers/parity.ts
 var fs17 = __toESM(require("fs"));
 var path19 = __toESM(require("path"));
-var AUDIT_VALIDATION_ERRORS_MAX = 10;
 var IMPORT_FILE_MAX_BYTES = COMPOSE_MARKDOWN_MAX;
-function toAuditValidation(validation, max = AUDIT_VALIDATION_ERRORS_MAX) {
-  const rawErrors = Array.isArray(validation.errors) ? validation.errors.slice(0, max) : [];
-  const errors = rawErrors.map((e) => {
-    const err = e;
-    const description = String(
-      typeof err.description === "string" && err.description || typeof err.message === "string" && err.message || "OOXML validation error"
-    ).slice(0, 500);
-    const xp = typeof err.xPath === "string" ? err.xPath : typeof err.path === "string" ? err.path : void 0;
-    return xp ? { description, xPath: xp } : { description };
-  });
-  return {
-    valid: validation.ok,
-    errorCount: Array.isArray(validation.errors) ? validation.errors.length : 0,
-    errors
-  };
-}
 async function refreshSessionAst(handle) {
   await refreshAstInPlace(handle.ast, handle.parser);
 }
@@ -44758,6 +45335,7 @@ async function handleGetStats(store, input) {
         words: stats.words,
         paragraphs: stats.paragraphs,
         tables: stats.tables,
+        callouts: stats.callouts,
         images: stats.images,
         pages: stats.pages
       };
@@ -44916,7 +45494,7 @@ async function handleNormalizeDocument(store, input) {
 }
 function readImportMarkdownFile(rawPath, roots = getMcpAllowedRoots()) {
   if (typeof rawPath !== "string" || !rawPath.trim()) {
-    throw toError("E_SANDBOX", "import path must be a non-empty string", "Pass a .md path inside documents/ or the system temp dir.");
+    throw toError("E_SANDBOX", "import path must be a non-empty string", `Pass a .md path ${describeAllowedFolders()}.`);
   }
   if (rawPath.includes("\0") || /%00/i.test(rawPath)) {
     throw toError("E_SANDBOX", "import path contains a null byte", "Remove null bytes from the path and retry.");
@@ -45003,7 +45581,7 @@ function readImportMarkdownFile(rawPath, roots = getMcpAllowedRoots()) {
       return normC === normR || normC.startsWith(normR + path19.sep);
     });
     if (!stillInside) {
-      throw toError("E_SANDBOX", "import path points outside the allowed directory", "Keep Markdown files inside documents/ or the system temp dir.");
+      throw toError("E_SANDBOX", "import path points outside the allowed directory", `Keep Markdown files ${describeAllowedFolders()}.`);
     }
     return buf.toString("utf8");
   } finally {
@@ -45080,7 +45658,7 @@ var import_zod9 = require("zod");
 // package.json
 var package_default = {
   name: "@attentionform/astra-mcp-server",
-  version: "0.3.0",
+  version: "0.4.0",
   description: "Official Model Context Protocol (MCP) server for ASTra document IDE",
   main: "dist/index.js",
   types: "dist/index.d.ts",
@@ -45121,8 +45699,8 @@ var package_default = {
     "adm-zip-gate": "node ../../scripts/check-adm-zip-imports.mjs"
   },
   dependencies: {
-    "@attentionform/astra-engine": "^0.3.0",
-    "@attentionform/ooxml-validator": "^0.3.0",
+    "@attentionform/astra-engine": "^0.4.0",
+    "@attentionform/ooxml-validator": "^0.4.0",
     "@modelcontextprotocol/sdk": "^1.32.2",
     "@xmldom/xmldom": "0.8.15",
     "adm-zip": "0.6.1",
@@ -45528,6 +46106,10 @@ async function main(argv = process.argv) {
   return 0;
 }
 function isDirectEntry() {
+  try {
+    if (typeof require !== "undefined" && typeof module !== "undefined" && require.main === module) return true;
+  } catch {
+  }
   const entry = process.argv?.[1] ?? "";
   return entry.endsWith("/index.js") || entry.endsWith("\\index.js") || entry.endsWith("/index.ts") || entry.endsWith("astra-mcp-server");
 }