@bendyline/squisq-formats 1.4.2 → 2.0.0

package/dist/chunk-ZZ7D4DN6.js

@@ -0,0 +1,97 @@
+import {
+  ConversionError
+} from "./chunk-ODL3SSPT.js";
+import {
+  extractDocxTheme,
+  extractPptxTheme,
+  extractXlsxTheme
+} from "./chunk-CX3LH47J.js";
+import {
+  colorHintsFromExtraction,
+  compileExtractedTheme
+} from "./chunk-NKAJPJ4G.js";
+import {
+  openPackage
+} from "./chunk-4HJ6AK2Q.js";
+
+// src/infer/index.ts
+async function looksLikePdf(data) {
+  let head = null;
+  const blob = data;
+  if (typeof blob.size === "number" && typeof blob.slice === "function" && typeof blob.arrayBuffer === "function") {
+    head = new Uint8Array(await blob.slice(0, 5).arrayBuffer());
+  } else if (typeof data.byteLength === "number") {
+    const buf = data;
+    head = new Uint8Array(buf, 0, Math.min(5, buf.byteLength));
+  }
+  if (!head || head.length < 4) return false;
+  return head[0] === 37 && head[1] === 80 && head[2] === 68 && head[3] === 70;
+}
+function sniffOoxmlFormat(pkg) {
+  const values = [...pkg.contentTypes.overrides.values(), ...pkg.contentTypes.defaults.values()];
+  for (const ct of values) {
+    if (ct.includes("wordprocessingml")) return "docx";
+    if (ct.includes("presentationml")) return "pptx";
+    if (ct.includes("spreadsheetml")) return "xlsx";
+  }
+  return void 0;
+}
+var EXTRACTORS = {
+  docx: extractDocxTheme,
+  pptx: extractPptxTheme,
+  xlsx: extractXlsxTheme
+};
+async function inferThemeFromFile(data, options = {}) {
+  if (await looksLikePdf(data)) {
+    throw new ConversionError(
+      "unsupported-input",
+      "PDF theme inference is not supported \u2014 PDF files carry no theme color/font tables.",
+      { format: "pdf" }
+    );
+  }
+  let pkg;
+  try {
+    pkg = await openPackage(data, options);
+  } catch (err) {
+    throw new ConversionError(
+      "invalid-input",
+      "Could not read this file as a Word, PowerPoint, or Excel document.",
+      { cause: err }
+    );
+  }
+  const format = options.format ?? sniffOoxmlFormat(pkg);
+  if (!format) {
+    throw new ConversionError(
+      "invalid-input",
+      "Not a Word, PowerPoint, or Excel document \u2014 no theme to infer."
+    );
+  }
+  const extraction = await EXTRACTORS[format](pkg);
+  if (!extraction) {
+    throw new ConversionError("invalid-input", "No theme part found in this file.", { format });
+  }
+  const { theme, warnings: mapWarnings } = compileExtractedTheme(extraction, {
+    nameHint: options.nameHint
+  });
+  const warnings = [...extraction.warnings, ...mapWarnings];
+  let layouts;
+  if (options.inferLayouts) {
+    if (format !== "pptx") {
+      warnings.push("Layout inference is only available for PowerPoint files; skipped.");
+    } else {
+      const { analyzePptxLayouts } = await import("./layouts-7OUUVAGU.js");
+      const analysis = await analyzePptxLayouts(pkg, {
+        colors: colorHintsFromExtraction(extraction)
+      });
+      warnings.push(...analysis.warnings);
+      const defs = analysis.layouts.map((l) => l.verdict.kind === "custom" ? l.verdict.def : null).filter((d) => d !== null);
+      if (defs.length > 0) layouts = defs;
+    }
+  }
+  return { theme, extraction, ...layouts ? { layouts } : {}, warnings };
+}
+
+export {
+  inferThemeFromFile
+};
+//# sourceMappingURL=chunk-ZZ7D4DN6.js.map

package/dist/chunk-ZZ7D4DN6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/infer/index.ts"],"sourcesContent":["/**\n * @bendyline/squisq-formats Infer Module\n *\n * \"Infer theme and layouts from a file import\": read the OOXML theme\n * (colors + fonts) out of a DOCX/PPTX/XLSX file and compile it into a\n * Squisq `Theme`; for PPTX, optionally derive custom layout templates\n * from the deck's slide layouts/masters.\n *\n * Consumers:\n *   - the editor's theme customizer surfaces (upload / drag-drop a file)\n *   - the PPTX importer (theme + layouts ride along as frontmatter)\n *\n * PDF is deliberately unsupported: PDF files carry no theme tables, so\n * inference would produce a mostly-default theme. `inferThemeFromFile`\n * rejects PDF bytes with a clear `ConversionError`.\n */\n\nimport type { CustomTemplateDefinition, Theme } from '@bendyline/squisq/schemas';\nimport { openPackage } from '../ooxml/reader.js';\nimport type { OoxmlOpenOptions } from '../ooxml/reader.js';\nimport type { OoxmlPackage } from '../ooxml/types.js';\nimport { ConversionError } from '../registry/errors.js';\nimport type { ExtractedFileTheme, InferSourceFormat } from './types.js';\nimport { extractDocxTheme, extractPptxTheme, extractXlsxTheme } from './extract.js';\nimport { colorHintsFromExtraction, compileExtractedTheme } from './mapTheme.js';\n\nexport type { ExtractedFileTheme, InferSourceFormat, SchemeSlot } from './types.js';\nexport { extractDocxTheme, extractPptxTheme, extractXlsxTheme } from './extract.js';\nexport type { CompileExtractedOptions, MappedThemePartial } from './mapTheme.js';\nexport {\n  colorHintsFromExtraction,\n  compileExtractedTheme,\n  extractedThemeToPartial,\n} from './mapTheme.js';\n\nexport interface InferThemeOptions extends OoxmlOpenOptions {\n  /** Skip sniffing when the caller already knows the format (e.g. from the extension). */\n  format?: InferSourceFormat;\n  /** PPTX only: also derive custom layout templates from slide layouts/masters. */\n  inferLayouts?: boolean;\n  /** Preferred display name for the compiled theme (e.g. the file's basename). */\n  nameHint?: string;\n}\n\nexport interface InferredFileTheme {\n  /** Compiled, validated Squisq theme (`custom-<slug>` id, seeds recorded). */\n  theme: Theme;\n  /** Raw extraction, for callers mapping into their own editing model. */\n  extraction: ExtractedFileTheme;\n  /** Present only for PPTX with `inferLayouts` and ≥1 non-redundant layout. */\n  layouts?: CustomTemplateDefinition[];\n  /** Non-fatal notes: sysClr fallbacks, dropped accents, skipped layouts, … */\n  warnings: string[];\n}\n\nasync function looksLikePdf(data: ArrayBuffer | Blob): Promise<boolean> {\n  // Duck-typed (not instanceof): buffers routinely cross realms in test\n  // environments and web workers. Blobs carry `size`; ArrayBuffers carry\n  // `byteLength`.\n  let head: Uint8Array | null = null;\n  const blob = data as Blob;\n  if (\n    typeof blob.size === 'number' &&\n    typeof blob.slice === 'function' &&\n    typeof blob.arrayBuffer === 'function'\n  ) {\n    head = new Uint8Array(await blob.slice(0, 5).arrayBuffer());\n  } else if (typeof (data as ArrayBuffer).byteLength === 'number') {\n    const buf = data as ArrayBuffer;\n    head = new Uint8Array(buf, 0, Math.min(5, buf.byteLength));\n  }\n  if (!head || head.length < 4) return false;\n  // '%PDF'\n  return head[0] === 0x25 && head[1] === 0x50 && head[2] === 0x44 && head[3] === 0x46;\n}\n\n/**\n * Classify an opened package from its already-parsed content types.\n * (Deliberately not the registry's byte sniffer — that re-parses the zip\n * and carries `dbk` semantics this path doesn't want.)\n */\nfunction sniffOoxmlFormat(pkg: OoxmlPackage): InferSourceFormat | undefined {\n  const values = [...pkg.contentTypes.overrides.values(), ...pkg.contentTypes.defaults.values()];\n  for (const ct of values) {\n    if (ct.includes('wordprocessingml')) return 'docx';\n    if (ct.includes('presentationml')) return 'pptx';\n    if (ct.includes('spreadsheetml')) return 'xlsx';\n  }\n  return undefined;\n}\n\nconst EXTRACTORS: Record<\n  InferSourceFormat,\n  (pkg: OoxmlPackage) => Promise<ExtractedFileTheme | null>\n> = {\n  docx: extractDocxTheme,\n  pptx: extractPptxTheme,\n  xlsx: extractXlsxTheme,\n};\n\n/**\n * Infer a Squisq theme (and, for PPTX, optionally custom layout templates)\n * from an office file's bytes.\n *\n * Throws `ConversionError`:\n *   - `unsupported-input` for PDF bytes (no theme tables to read)\n *   - `invalid-input` for non-OOXML data or files with no theme part\n */\nexport async function inferThemeFromFile(\n  data: ArrayBuffer | Blob,\n  options: InferThemeOptions = {},\n): Promise<InferredFileTheme> {\n  if (await looksLikePdf(data)) {\n    throw new ConversionError(\n      'unsupported-input',\n      'PDF theme inference is not supported — PDF files carry no theme color/font tables.',\n      { format: 'pdf' },\n    );\n  }\n\n  let pkg: OoxmlPackage;\n  try {\n    pkg = await openPackage(data, options);\n  } catch (err: unknown) {\n    throw new ConversionError(\n      'invalid-input',\n      'Could not read this file as a Word, PowerPoint, or Excel document.',\n      { cause: err },\n    );\n  }\n\n  const format = options.format ?? sniffOoxmlFormat(pkg);\n  if (!format) {\n    throw new ConversionError(\n      'invalid-input',\n      'Not a Word, PowerPoint, or Excel document — no theme to infer.',\n    );\n  }\n\n  const extraction = await EXTRACTORS[format](pkg);\n  if (!extraction) {\n    throw new ConversionError('invalid-input', 'No theme part found in this file.', { format });\n  }\n\n  const { theme, warnings: mapWarnings } = compileExtractedTheme(extraction, {\n    nameHint: options.nameHint,\n  });\n  const warnings = [...extraction.warnings, ...mapWarnings];\n\n  let layouts: CustomTemplateDefinition[] | undefined;\n  if (options.inferLayouts) {\n    if (format !== 'pptx') {\n      warnings.push('Layout inference is only available for PowerPoint files; skipped.');\n    } else {\n      const { analyzePptxLayouts } = await import('../pptx/layouts.js');\n      const analysis = await analyzePptxLayouts(pkg, {\n        colors: colorHintsFromExtraction(extraction),\n      });\n      warnings.push(...analysis.warnings);\n      const defs = analysis.layouts\n        .map((l) => (l.verdict.kind === 'custom' ? l.verdict.def : null))\n        .filter((d): d is CustomTemplateDefinition => d !== null);\n      if (defs.length > 0) layouts = defs;\n    }\n  }\n\n  return { theme, extraction, ...(layouts ? { layouts } : {}), warnings };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAuDA,eAAe,aAAa,MAA4C;AAItE,MAAI,OAA0B;AAC9B,QAAM,OAAO;AACb,MACE,OAAO,KAAK,SAAS,YACrB,OAAO,KAAK,UAAU,cACtB,OAAO,KAAK,gBAAgB,YAC5B;AACA,WAAO,IAAI,WAAW,MAAM,KAAK,MAAM,GAAG,CAAC,EAAE,YAAY,CAAC;AAAA,EAC5D,WAAW,OAAQ,KAAqB,eAAe,UAAU;AAC/D,UAAM,MAAM;AACZ,WAAO,IAAI,WAAW,KAAK,GAAG,KAAK,IAAI,GAAG,IAAI,UAAU,CAAC;AAAA,EAC3D;AACA,MAAI,CAAC,QAAQ,KAAK,SAAS,EAAG,QAAO;AAErC,SAAO,KAAK,CAAC,MAAM,MAAQ,KAAK,CAAC,MAAM,MAAQ,KAAK,CAAC,MAAM,MAAQ,KAAK,CAAC,MAAM;AACjF;AAOA,SAAS,iBAAiB,KAAkD;AAC1E,QAAM,SAAS,CAAC,GAAG,IAAI,aAAa,UAAU,OAAO,GAAG,GAAG,IAAI,aAAa,SAAS,OAAO,CAAC;AAC7F,aAAW,MAAM,QAAQ;AACvB,QAAI,GAAG,SAAS,kBAAkB,EAAG,QAAO;AAC5C,QAAI,GAAG,SAAS,gBAAgB,EAAG,QAAO;AAC1C,QAAI,GAAG,SAAS,eAAe,EAAG,QAAO;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,IAAM,aAGF;AAAA,EACF,MAAM;AAAA,EACN,MAAM;AAAA,EACN,MAAM;AACR;AAUA,eAAsB,mBACpB,MACA,UAA6B,CAAC,GACF;AAC5B,MAAI,MAAM,aAAa,IAAI,GAAG;AAC5B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,QAAQ,MAAM;AAAA,IAClB;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,YAAY,MAAM,OAAO;AAAA,EACvC,SAAS,KAAc;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,EAAE,OAAO,IAAI;AAAA,IACf;AAAA,EACF;AAEA,QAAM,SAAS,QAAQ,UAAU,iBAAiB,GAAG;AACrD,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,aAAa,MAAM,WAAW,MAAM,EAAE,GAAG;AAC/C,MAAI,CAAC,YAAY;AACf,UAAM,IAAI,gBAAgB,iBAAiB,qCAAqC,EAAE,OAAO,CAAC;AAAA,EAC5F;AAEA,QAAM,EAAE,OAAO,UAAU,YAAY,IAAI,sBAAsB,YAAY;AAAA,IACzE,UAAU,QAAQ;AAAA,EACpB,CAAC;AACD,QAAM,WAAW,CAAC,GAAG,WAAW,UAAU,GAAG,WAAW;AAExD,MAAI;AACJ,MAAI,QAAQ,cAAc;AACxB,QAAI,WAAW,QAAQ;AACrB,eAAS,KAAK,mEAAmE;AAAA,IACnF,OAAO;AACL,YAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,uBAAoB;AAChE,YAAM,WAAW,MAAM,mBAAmB,KAAK;AAAA,QAC7C,QAAQ,yBAAyB,UAAU;AAAA,MAC7C,CAAC;AACD,eAAS,KAAK,GAAG,SAAS,QAAQ;AAClC,YAAM,OAAO,SAAS,QACnB,IAAI,CAAC,MAAO,EAAE,QAAQ,SAAS,WAAW,EAAE,QAAQ,MAAM,IAAK,EAC/D,OAAO,CAAC,MAAqC,MAAM,IAAI;AAC1D,UAAI,KAAK,SAAS,EAAG,WAAU;AAAA,IACjC;AAAA,EACF;AAEA,SAAO,EAAE,OAAO,YAAY,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,GAAI,SAAS;AACxE;","names":[]}

package/dist/container/index.d.ts

@@ -1,4 +1,6 @@
 import { ContentContainer, MemoryContentContainer } from '@bendyline/squisq/storage';
+import { c as ZipSafetyLimits } from '../zipLimits-bGYMS9cI.js';
+export { Z as ZipSafetyError, a as ZipSafetyErrorCode, b as ZipSafetyErrorOptions } from '../zipLimits-bGYMS9cI.js';
 
 /**
  * Container ZIP serialization — convert between ContentContainer and ZIP archives.
@@ -13,6 +15,8 @@ import { ContentContainer, MemoryContentContainer } from '@bendyline/squisq/stor
  *   timing.json
  */
 
+type ZipToContainerOptions = ZipSafetyLimits;
+
 /**
  * Serialize a ContentContainer to a ZIP blob.
  *
@@ -33,6 +37,6 @@ declare function containerToZip(container: ContentContainer): Promise<Blob>;
  * @param zipData — The ZIP archive as ArrayBuffer, Uint8Array, or Blob
  * @returns A MemoryContentContainer populated with the ZIP's contents
  */
-declare function zipToContainer(zipData: ArrayBuffer | Uint8Array | Blob): Promise<MemoryContentContainer>;
+declare function zipToContainer(zipData: ArrayBuffer | Uint8Array | Blob, options?: ZipToContainerOptions): Promise<MemoryContentContainer>;
 
-export { containerToZip, zipToContainer };
+export { ZipSafetyLimits, type ZipToContainerOptions, containerToZip, zipToContainer };

package/dist/container/index.js

@@ -1,3 +1,9 @@
+import {
+  ZipSafetyError,
+  assertSafeZipPath,
+  openBoundedZipArchive
+} from "../chunk-H7T5DXUU.js";
+
 // src/container/index.ts
 import JSZip from "jszip";
 import { MemoryContentContainer } from "@bendyline/squisq/storage";
@@ -5,6 +11,7 @@ async function containerToZip(container) {
   const zip = new JSZip();
   const entries = await container.listFiles();
   for (const entry of entries) {
+    assertSafeZipPath(entry.path);
     const data = await container.readFile(entry.path);
     if (data) {
       zip.file(entry.path, new Uint8Array(data));
@@ -16,27 +23,18 @@ async function containerToZip(container) {
     compressionOptions: { level: 6 }
   });
 }
-async function zipToContainer(zipData) {
-  const zip = await JSZip.loadAsync(zipData);
+async function zipToContainer(zipData, options = {}) {
+  const archive = await openBoundedZipArchive(zipData, options);
   const container = new MemoryContentContainer();
-  const filePromises = [];
-  zip.forEach((relativePath, zipEntry) => {
-    if (zipEntry.dir) return;
-    const entryPath = relativePath.startsWith("/") ? relativePath.slice(1) : relativePath;
-    if (!entryPath) return;
-    if (entryPath.startsWith("/") || entryPath.includes("\\") || entryPath.split("/").some((seg) => seg === "..")) {
-      return;
-    }
-    filePromises.push(
-      zipEntry.async("arraybuffer").then((data) => {
-        return container.writeFile(entryPath, data);
-      })
-    );
-  });
-  await Promise.all(filePromises);
+  for (const { path } of archive.entries) {
+    const data = await archive.read(path);
+    if (data) await container.writeFile(path, data);
+    archive.release(path);
+  }
   return container;
 }
 export {
+  ZipSafetyError,
   containerToZip,
   zipToContainer
 };

package/dist/container/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/container/index.ts"],"sourcesContent":["/**\n * Container ZIP serialization — convert between ContentContainer and ZIP archives.\n *\n * Uses JSZip (already a formats dependency) to serialize a ContentContainer to\n * a ZIP blob and to deserialize a ZIP blob into a MemoryContentContainer.\n *\n * ZIP structure mirrors the container's flat path hierarchy directly:\n *   index.md\n *   images/hero.jpg\n *   audio/narration.mp3\n *   timing.json\n */\n\nimport JSZip from 'jszip';\nimport type { ContentContainer } from '@bendyline/squisq/storage';\nimport { MemoryContentContainer } from '@bendyline/squisq/storage';\n\n/**\n * Serialize a ContentContainer to a ZIP blob.\n *\n * All files in the container are written to the ZIP archive preserving\n * their path structure. The resulting blob can be saved as a .zip file.\n *\n * @param container — The container to serialize\n * @returns A Blob containing the ZIP archive\n */\nexport async function containerToZip(container: ContentContainer): Promise<Blob> {\n  const zip = new JSZip();\n  const entries = await container.listFiles();\n\n  for (const entry of entries) {\n    const data = await container.readFile(entry.path);\n    if (data) {\n      zip.file(entry.path, new Uint8Array(data));\n    }\n  }\n\n  return zip.generateAsync({\n    type: 'blob',\n    compression: 'DEFLATE',\n    compressionOptions: { level: 6 },\n  });\n}\n\n/**\n * Deserialize a ZIP archive into a MemoryContentContainer.\n *\n * Reads all files from the ZIP and writes them into a new MemoryContentContainer.\n * Directory entries are skipped. The resulting container can be used immediately\n * for rendering, editing, or saving to persistent storage.\n *\n * @param zipData — The ZIP archive as ArrayBuffer, Uint8Array, or Blob\n * @returns A MemoryContentContainer populated with the ZIP's contents\n */\nexport async function zipToContainer(\n  zipData: ArrayBuffer | Uint8Array | Blob,\n): Promise<MemoryContentContainer> {\n  const zip = await JSZip.loadAsync(zipData);\n  const container = new MemoryContentContainer();\n\n  const filePromises: Promise<void>[] = [];\n\n  zip.forEach((relativePath, zipEntry) => {\n    // Skip directories\n    if (zipEntry.dir) return;\n\n    // Strip leading slash if present\n    const entryPath = relativePath.startsWith('/') ? relativePath.slice(1) : relativePath;\n    if (!entryPath) return;\n\n    // Path-traversal protection: reject absolute paths, backslashes, and .. segments\n    if (\n      entryPath.startsWith('/') ||\n      entryPath.includes('\\\\') ||\n      entryPath.split('/').some((seg) => seg === '..')\n    ) {\n      return;\n    }\n\n    filePromises.push(\n      zipEntry.async('arraybuffer').then((data) => {\n        return container.writeFile(entryPath, data);\n      }),\n    );\n  });\n\n  await Promise.all(filePromises);\n  return container;\n}\n"],"mappings":";AAaA,OAAO,WAAW;AAElB,SAAS,8BAA8B;AAWvC,eAAsB,eAAe,WAA4C;AAC/E,QAAM,MAAM,IAAI,MAAM;AACtB,QAAM,UAAU,MAAM,UAAU,UAAU;AAE1C,aAAW,SAAS,SAAS;AAC3B,UAAM,OAAO,MAAM,UAAU,SAAS,MAAM,IAAI;AAChD,QAAI,MAAM;AACR,UAAI,KAAK,MAAM,MAAM,IAAI,WAAW,IAAI,CAAC;AAAA,IAC3C;AAAA,EACF;AAEA,SAAO,IAAI,cAAc;AAAA,IACvB,MAAM;AAAA,IACN,aAAa;AAAA,IACb,oBAAoB,EAAE,OAAO,EAAE;AAAA,EACjC,CAAC;AACH;AAYA,eAAsB,eACpB,SACiC;AACjC,QAAM,MAAM,MAAM,MAAM,UAAU,OAAO;AACzC,QAAM,YAAY,IAAI,uBAAuB;AAE7C,QAAM,eAAgC,CAAC;AAEvC,MAAI,QAAQ,CAAC,cAAc,aAAa;AAEtC,QAAI,SAAS,IAAK;AAGlB,UAAM,YAAY,aAAa,WAAW,GAAG,IAAI,aAAa,MAAM,CAAC,IAAI;AACzE,QAAI,CAAC,UAAW;AAGhB,QACE,UAAU,WAAW,GAAG,KACxB,UAAU,SAAS,IAAI,KACvB,UAAU,MAAM,GAAG,EAAE,KAAK,CAAC,QAAQ,QAAQ,IAAI,GAC/C;AACA;AAAA,IACF;AAEA,iBAAa;AAAA,MACX,SAAS,MAAM,aAAa,EAAE,KAAK,CAAC,SAAS;AAC3C,eAAO,UAAU,UAAU,WAAW,IAAI;AAAA,MAC5C,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAED,QAAM,QAAQ,IAAI,YAAY;AAC9B,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../src/container/index.ts"],"sourcesContent":["/**\n * Container ZIP serialization — convert between ContentContainer and ZIP archives.\n *\n * Uses JSZip (already a formats dependency) to serialize a ContentContainer to\n * a ZIP blob and to deserialize a ZIP blob into a MemoryContentContainer.\n *\n * ZIP structure mirrors the container's flat path hierarchy directly:\n *   index.md\n *   images/hero.jpg\n *   audio/narration.mp3\n *   timing.json\n */\n\nimport JSZip from 'jszip';\nimport type { ContentContainer } from '@bendyline/squisq/storage';\nimport { MemoryContentContainer } from '@bendyline/squisq/storage';\nimport {\n  assertSafeZipPath,\n  openBoundedZipArchive,\n  ZipSafetyError,\n  type ZipSafetyLimits,\n  type ZipSafetyErrorCode,\n  type ZipSafetyErrorOptions,\n} from '../shared/zipSafety.js';\n\nexport type ZipToContainerOptions = ZipSafetyLimits;\nexport { ZipSafetyError };\nexport type { ZipSafetyLimits, ZipSafetyErrorCode, ZipSafetyErrorOptions };\n\n/**\n * Serialize a ContentContainer to a ZIP blob.\n *\n * All files in the container are written to the ZIP archive preserving\n * their path structure. The resulting blob can be saved as a .zip file.\n *\n * @param container — The container to serialize\n * @returns A Blob containing the ZIP archive\n */\nexport async function containerToZip(container: ContentContainer): Promise<Blob> {\n  const zip = new JSZip();\n  const entries = await container.listFiles();\n\n  for (const entry of entries) {\n    assertSafeZipPath(entry.path);\n    const data = await container.readFile(entry.path);\n    if (data) {\n      zip.file(entry.path, new Uint8Array(data));\n    }\n  }\n\n  return zip.generateAsync({\n    type: 'blob',\n    compression: 'DEFLATE',\n    compressionOptions: { level: 6 },\n  });\n}\n\n/**\n * Deserialize a ZIP archive into a MemoryContentContainer.\n *\n * Reads all files from the ZIP and writes them into a new MemoryContentContainer.\n * Directory entries are skipped. The resulting container can be used immediately\n * for rendering, editing, or saving to persistent storage.\n *\n * @param zipData — The ZIP archive as ArrayBuffer, Uint8Array, or Blob\n * @returns A MemoryContentContainer populated with the ZIP's contents\n */\nexport async function zipToContainer(\n  zipData: ArrayBuffer | Uint8Array | Blob,\n  options: ZipToContainerOptions = {},\n): Promise<MemoryContentContainer> {\n  const archive = await openBoundedZipArchive(zipData, options);\n  const container = new MemoryContentContainer();\n  for (const { path } of archive.entries) {\n    const data = await archive.read(path);\n    if (data) await container.writeFile(path, data);\n    archive.release(path);\n  }\n  return container;\n}\n"],"mappings":";;;;;;;AAaA,OAAO,WAAW;AAElB,SAAS,8BAA8B;AAuBvC,eAAsB,eAAe,WAA4C;AAC/E,QAAM,MAAM,IAAI,MAAM;AACtB,QAAM,UAAU,MAAM,UAAU,UAAU;AAE1C,aAAW,SAAS,SAAS;AAC3B,sBAAkB,MAAM,IAAI;AAC5B,UAAM,OAAO,MAAM,UAAU,SAAS,MAAM,IAAI;AAChD,QAAI,MAAM;AACR,UAAI,KAAK,MAAM,MAAM,IAAI,WAAW,IAAI,CAAC;AAAA,IAC3C;AAAA,EACF;AAEA,SAAO,IAAI,cAAc;AAAA,IACvB,MAAM;AAAA,IACN,aAAa;AAAA,IACb,oBAAoB,EAAE,OAAO,EAAE;AAAA,EACjC,CAAC;AACH;AAYA,eAAsB,eACpB,SACA,UAAiC,CAAC,GACD;AACjC,QAAM,UAAU,MAAM,sBAAsB,SAAS,OAAO;AAC5D,QAAM,YAAY,IAAI,uBAAuB;AAC7C,aAAW,EAAE,KAAK,KAAK,QAAQ,SAAS;AACtC,UAAM,OAAO,MAAM,QAAQ,KAAK,IAAI;AACpC,QAAI,KAAM,OAAM,UAAU,UAAU,MAAM,IAAI;AAC9C,YAAQ,QAAQ,IAAI;AAAA,EACtB;AACA,SAAO;AACT;","names":[]}

package/dist/docx/index.d.ts

@@ -1,6 +1,8 @@
-import { Doc } from '@bendyline/squisq/schemas';
+import { ThemeRegistry, Doc } from '@bendyline/squisq/schemas';
 import { MarkdownDocument } from '@bendyline/squisq/markdown';
+import { O as OoxmlOpenOptions } from '../reader-Gof6OrJX.js';
 import { ContentContainer } from '@bendyline/squisq/storage';
+import '../zipLimits-bGYMS9cI.js';
 
 /**
  * DOCX Export
@@ -41,6 +43,8 @@ interface DocxExportOptions {
      * the theme's primary color to headings.
      */
     themeId?: string;
+    /** Explicit caller-owned registry for non-document custom themes. */
+    themeRegistry?: ThemeRegistry;
     /**
      * Pre-resolved image data keyed by image URL/path as it appears in the
      * markdown source. When provided, images are embedded in the .docx file
@@ -94,7 +98,7 @@ declare function docToDocx(doc: Doc, options?: DocxExportOptions): Promise<Array
 /**
  * Options for DOCX import.
  */
-interface DocxImportOptions {
+interface DocxImportOptions extends OoxmlOpenOptions {
     /**
      * Whether to extract embedded images as base64 data URIs.
      * When false, images are represented as `[Image]` placeholders.

package/dist/docx/index.js

@@ -4,13 +4,15 @@ import {
   docxToDoc,
   docxToMarkdownDoc,
   markdownDocToDocx
-} from "../chunk-WWBIKRNP.js";
+} from "../chunk-2CSZJEAL.js";
 import "../chunk-6M7Z25LA.js";
 import "../chunk-PN52A5AA.js";
-import "../chunk-SHLPSADL.js";
+import "../chunk-XTLQXR4U.js";
 import "../chunk-U4MRIFKL.js";
+import "../chunk-4HJ6AK2Q.js";
+import "../chunk-H7T5DXUU.js";
 import "../chunk-SSUPBUF5.js";
-import "../chunk-DQAZR57U.js";
+import "../chunk-O3GVVND4.js";
 export {
   docToDocx,
   docxToContainer,

package/dist/epub/index.d.ts

@@ -1,4 +1,4 @@
-import { AudioSegment, Doc } from '@bendyline/squisq/schemas';
+import { ThemeRegistry, AudioSegment, Doc } from '@bendyline/squisq/schemas';
 import { MarkdownDocument } from '@bendyline/squisq/markdown';
 
 /**
@@ -37,6 +37,8 @@ interface EpubExportOptions {
     publisher?: string;
     /** Squisq theme ID for CSS styling */
     themeId?: string;
+    /** Explicit caller-owned registry for non-document custom themes. */
+    themeRegistry?: ThemeRegistry;
     /** Pre-resolved image data keyed by relative path as it appears in the markdown */
     images?: Map<string, ArrayBuffer>;
     /** Cover image data (JPEG or PNG) */

package/dist/epub/index.js

@@ -1,11 +1,11 @@
 import {
   docToEpub,
   markdownDocToEpub
-} from "../chunk-5LSSWZPU.js";
+} from "../chunk-4VUWTSGM.js";
 import "../chunk-PN52A5AA.js";
 import "../chunk-U4MRIFKL.js";
-import "../chunk-MJGRI6XR.js";
-import "../chunk-DQAZR57U.js";
+import "../chunk-MLX2BOJC.js";
+import "../chunk-O3GVVND4.js";
 export {
   docToEpub,
   markdownDocToEpub

package/dist/export-Djev9BLU.d.ts

@@ -0,0 +1,69 @@
+import { MarkdownDocument } from '@bendyline/squisq/markdown';
+import { O as OoxmlOpenOptions } from './reader-Gof6OrJX.js';
+import { Doc } from '@bendyline/squisq/schemas';
+
+/**
+ * XLSX import — SpreadsheetML (.xlsx) → MarkdownDocument.
+ *
+ * Reuses the shared ooxml/ reader (zip + DOMParser). Reads the workbook's
+ * sheet list, resolves each sheet part via relationships, pulls shared strings,
+ * and turns each worksheet's cell grid into a markdown table (first row treated
+ * as the header). By default every sheet is imported, each preceded by an H1 of
+ * the sheet name; pass `options.sheet` (index or name) to import just one.
+ */
+
+interface XlsxImportOptions extends OoxmlOpenOptions {
+    /** Which sheet to import (0-based index or sheet name). Default: all sheets. */
+    sheet?: number | string;
+}
+declare function xlsxToMarkdownDoc(data: ArrayBuffer | Blob, options?: XlsxImportOptions): Promise<MarkdownDocument>;
+
+/**
+ * XLSX export — MarkdownDocument → SpreadsheetML (.xlsx).
+ *
+ * Tables-only fidelity (honestly documented): every `table` node in the
+ * markdown AST becomes one worksheet; all other content (headings, prose,
+ * lists, images, …) is dropped except that the nearest preceding heading is
+ * used to name the sheet. This mirrors the import side (`xlsxToMarkdownDoc`),
+ * which turns each worksheet grid back into a markdown table.
+ *
+ * Cells are emitted as inline strings (`t="inlineStr"`) so no sharedStrings
+ * part is needed, except values matching a plain-number pattern, which are
+ * emitted as numeric cells. The package is assembled with the shared ooxml/
+ * writer (auto-generates `[Content_Types].xml` + `_rels`), so only the
+ * SpreadsheetML-specific parts (workbook, worksheets, styles) are written here.
+ *
+ * @example
+ * ```ts
+ * import { parseMarkdown } from '@bendyline/squisq/markdown';
+ * import { markdownDocToXlsx } from '@bendyline/squisq-formats/xlsx';
+ *
+ * const md = parseMarkdown('# Metrics\n\n| A | B |\n| - | - |\n| 1 | 2 |');
+ * const buffer = await markdownDocToXlsx(md);
+ * ```
+ */
+
+/**
+ * Options for XLSX export.
+ */
+interface XlsxExportOptions {
+    /** Workbook title (written to core properties). */
+    title?: string;
+    /** Workbook author (written to core properties). */
+    author?: string;
+    /** Prefix used for auto-named sheets when no heading precedes a table. Default: "Sheet". */
+    sheetNamePrefix?: string;
+}
+/**
+ * Convert a MarkdownDocument to a .xlsx file (tables-only fidelity).
+ *
+ * Each markdown `table` becomes one worksheet; a document with no tables
+ * yields a single empty sheet (a valid, openable file — never throws).
+ */
+declare function markdownDocToXlsx(doc: MarkdownDocument, options?: XlsxExportOptions): Promise<ArrayBuffer>;
+/**
+ * Convert a squisq Doc to a .xlsx file (via the markdown table model).
+ */
+declare function docToXlsx(doc: Doc, options?: XlsxExportOptions): Promise<ArrayBuffer>;
+
+export { type XlsxExportOptions as X, type XlsxImportOptions as a, docToXlsx as d, markdownDocToXlsx as m, xlsxToMarkdownDoc as x };

package/dist/extract-LNOA7DBK.js

@@ -0,0 +1,15 @@
+import {
+  extractDocxTheme,
+  extractPptxTheme,
+  extractXlsxTheme
+} from "./chunk-CX3LH47J.js";
+import "./chunk-X4USWOQ2.js";
+import "./chunk-YRT7GQ5Y.js";
+import "./chunk-4HJ6AK2Q.js";
+import "./chunk-H7T5DXUU.js";
+export {
+  extractDocxTheme,
+  extractPptxTheme,
+  extractXlsxTheme
+};
+//# sourceMappingURL=extract-LNOA7DBK.js.map

package/dist/extract-LNOA7DBK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/html/index.d.ts

@@ -1,52 +1,8 @@
-import { Doc, Theme } from '@bendyline/squisq/schemas';
+import { Theme, ThemeRegistry, Doc } from '@bendyline/squisq/schemas';
+import { H as HtmlExportOptions } from '../import-DTkDxHmZ.js';
+export { a as HtmlImportOptions, c as collectImagePaths, h as htmlToMarkdown, b as htmlToMarkdownDoc, d as htmlToMarkdownDocSync } from '../import-DTkDxHmZ.js';
 import { HtmlPolicy, MarkdownDocument } from '@bendyline/squisq/markdown';
 
-/**
- * HTML Template Generation for SquisqPlayer Exports
- *
- * Generates complete, self-contained HTML documents that load the SquisqPlayer
- * IIFE bundle and render a Doc as either an interactive slideshow or a static
- * scrollable document.
- *
- * Two variants:
- * 1. **Inline** — All JS, CSS, and images are embedded in the HTML (single file).
- * 2. **External** — JS is referenced via `<script src>`, images via relative paths.
- */
-
-interface HtmlExportOptions {
-    /** The IIFE player bundle source code (from @bendyline/squisq-react/standalone-source) */
-    playerScript: string;
-    /**
-     * Map of relative image paths (as they appear in the Doc) to binary image data.
-     * For inline HTML export, these are converted to base64 data URIs.
-     * For ZIP export, these are written as separate files.
-     */
-    images?: Map<string, ArrayBuffer>;
-    /**
-     * Map of audio segment identifiers to binary audio data.
-     * Keys should match the audio segment `name` or `url` fields in the Doc.
-     * Only used in ZIP exports — single HTML uses timer-based playback.
-     */
-    audio?: Map<string, ArrayBuffer>;
-    /** Rendering mode: 'slideshow' (interactive, default) or 'static' (scrollable) */
-    mode?: 'slideshow' | 'static';
-    /** HTML page title (default: 'Squisq Document') */
-    title?: string;
-    /** Auto-play slideshow on load (default: false) */
-    autoPlay?: boolean;
-    /**
-     * Squisq theme ID to apply (e.g., 'documentary', 'cinematic').
-     * When set, the theme is assigned to the Doc before rendering,
-     * so the SquisqPlayer renders with that theme's colors and typography.
-     */
-    themeId?: string;
-}
-/**
- * Collect all relative image paths referenced in a Doc's layers and template blocks.
- * Returns a Set of unique relative paths that need to be resolved.
- */
-declare function collectImagePaths(doc: Doc): Set<string>;
-
 /**
  * Image Utilities for HTML Export
  *
@@ -134,6 +90,8 @@ interface PlainHtmlExportOptions {
      * When both `theme` and `themeId` are provided, `theme` wins.
      */
     themeId?: string;
+    /** Explicit caller-owned registry for non-document custom themes. */
+    themeRegistry?: ThemeRegistry;
     /**
      * Optional FontAwesome CSS text to inline into the rendered page,
      * replacing the default cross-origin `<link>` to cdnjs. Required for
@@ -191,13 +149,14 @@ interface PlainHtmlBundleOptions {
     /** Optional theme applied uniformly to every page. Overrides {@link themeId}. */
     theme?: Theme;
     /**
-     * Optional theme id (e.g. `'warm-earth'`, `'gezellig'`). Resolved via
-     * `resolveTheme` and applied to every page. Convenient for callers
-     * that track themes by id (like the host export dialog) without
-     * having to resolve to a `Theme` object first. When both `theme` and
-     * `themeId` are supplied, `theme` wins.
+     * Optional theme id (e.g. `'warm-earth'`, `'gezellig'`) applied to every
+     * page. Each document resolves its own inline definition before consulting
+     * {@link themeRegistry}. When both `theme` and `themeId` are supplied,
+     * `theme` wins.
      */
     themeId?: string;
+    /** Explicit caller-owned registry for non-document custom themes. */
+    themeRegistry?: ThemeRegistry;
     /** Maximum recursion depth (default: unlimited; cycles always handled). */
     maxDepth?: number;
     /**
@@ -242,6 +201,7 @@ declare function collectLinkRefs(doc: MarkdownDocument): Set<string>;
  * `<a href>` at runtime — there is no post-render link rewrite hook in
  * the player path.
  */
+
 interface HtmlBundleOptions {
     /** Entry document path relative to the container root (e.g. `'home.md'`). */
     entryPath: string;
@@ -255,6 +215,8 @@ interface HtmlBundleOptions {
     title?: string;
     /** Theme id applied uniformly to every page. */
     themeId?: string;
+    /** Explicit caller-owned registry for non-document custom themes. */
+    themeRegistry?: ThemeRegistry;
     /** Rendering mode for every page (default: 'static' — scrollable, link-friendly). */
     mode?: 'slideshow' | 'static';
     /** Maximum recursion depth (default: unlimited; cycles always handled). */
@@ -278,38 +240,6 @@ interface HtmlBundleOptions {
  */
 declare function markdownDocsToHtmlBundle(options: HtmlBundleOptions): Promise<Blob>;
 
-/**
- * HTML Import Module — @bendyline/squisq-formats/html
- *
- * Converts an HTML document (or fragment) into a squisq `MarkdownDocument`.
- * Built on the existing `parseHtmlToNodes` (parse5-backed) + `sanitizeHtmlNodes`
- * from `@bendyline/squisq/markdown`, so no new dependency is introduced.
- *
- * The primary consumer is email: HTML mail bodies are hostile input, so the
- * parse is sanitized by default (scripts/styles/event handlers/dangerous URLs
- * stripped) before the tree is walked into markdown nodes.
- *
- * Two entry points mirror the docx/pdf importers:
- *   - `htmlToMarkdownDoc(data, options?)` → `MarkdownDocument`
- *   - `htmlToMarkdown(html, options?)` → markdown string (convenience for the
- *     string-in/string-out path email body conversion needs)
- */
-
-interface HtmlImportOptions {
-    /**
-     * Strip scripts / styles / event handlers / dangerous URLs before walking
-     * the tree. Default `true` — HTML email is untrusted; only disable for
-     * trusted input where you want raw fidelity.
-     */
-    sanitize?: boolean;
-}
-/** Parse HTML into a squisq `MarkdownDocument`. */
-declare function htmlToMarkdownDocSync(html: string, options?: HtmlImportOptions): MarkdownDocument;
-/** Async, ArrayBuffer-accepting entry mirroring docx/pdf importers. */
-declare function htmlToMarkdownDoc(data: ArrayBuffer | Uint8Array | string, options?: HtmlImportOptions): Promise<MarkdownDocument>;
-/** Convenience string→string conversion (used for email HTML bodies). */
-declare function htmlToMarkdown(html: string, options?: HtmlImportOptions): string;
-
 /**
  * HTML Export Module — @bendyline/squisq-formats/html
  *
@@ -404,4 +334,4 @@ declare function docToHtml(doc: Doc, options: HtmlExportOptions): string;
  */
 declare function docToHtmlZip(doc: Doc, options: HtmlZipExportOptions): Promise<Blob>;
 
-export { type HtmlBundleOptions, type HtmlExportOptions, type HtmlImportOptions, type HtmlZipExportOptions, type PlainHtmlBundleOptions, type PlainHtmlExportOptions, arrayBufferToBase64DataUrl, collectImagePaths, collectLinkRefs, docToHtml, docToHtmlZip, extractFilename, htmlToMarkdown, htmlToMarkdownDoc, htmlToMarkdownDocSync, inferMimeType, markdownDocToPlainHtml, markdownDocsToHtmlBundle, markdownDocsToPlainHtmlBundle };
+export { type HtmlBundleOptions, HtmlExportOptions, type HtmlZipExportOptions, type PlainHtmlBundleOptions, type PlainHtmlExportOptions, arrayBufferToBase64DataUrl, collectLinkRefs, docToHtml, docToHtmlZip, extractFilename, inferMimeType, markdownDocToPlainHtml, markdownDocsToHtmlBundle, markdownDocsToPlainHtmlBundle };

package/dist/html/index.js

@@ -9,13 +9,13 @@ import {
   markdownDocToPlainHtml,
   markdownDocsToHtmlBundle,
   markdownDocsToPlainHtmlBundle
-} from "../chunk-46FMDOWZ.js";
+} from "../chunk-LXYLOOST.js";
 import {
   arrayBufferToBase64DataUrl,
   extractFilename,
   inferMimeType
-} from "../chunk-MJGRI6XR.js";
-import "../chunk-DQAZR57U.js";
+} from "../chunk-MLX2BOJC.js";
+import "../chunk-O3GVVND4.js";
 export {
   arrayBufferToBase64DataUrl,
   collectImagePaths,

package/dist/images-7FBWPKE3.js

@@ -0,0 +1,7 @@
+import {
+  extToMime
+} from "./chunk-O3GVVND4.js";
+export {
+  extToMime
+};
+//# sourceMappingURL=images-7FBWPKE3.js.map

package/dist/images-7FBWPKE3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/import-DTkDxHmZ.d.ts

@@ -0,0 +1,84 @@
+import { ThemeRegistry, Doc } from '@bendyline/squisq/schemas';
+import { MarkdownDocument } from '@bendyline/squisq/markdown';
+
+/**
+ * HTML Template Generation for SquisqPlayer Exports
+ *
+ * Generates complete, self-contained HTML documents that load the SquisqPlayer
+ * IIFE bundle and render a Doc as either an interactive slideshow or a static
+ * scrollable document.
+ *
+ * Two variants:
+ * 1. **Inline** — All JS, CSS, and images are embedded in the HTML (single file).
+ * 2. **External** — JS is referenced via `<script src>`, images via relative paths.
+ */
+
+interface HtmlExportOptions {
+    /** The IIFE player bundle source code (from @bendyline/squisq-react/standalone-source) */
+    playerScript: string;
+    /**
+     * Map of relative image paths (as they appear in the Doc) to binary image data.
+     * For inline HTML export, these are converted to base64 data URIs.
+     * For ZIP export, these are written as separate files.
+     */
+    images?: Map<string, ArrayBuffer>;
+    /**
+     * Map of audio segment identifiers to binary audio data.
+     * Keys should match the audio segment `name` or `url` fields in the Doc.
+     * Only used in ZIP exports — single HTML uses timer-based playback.
+     */
+    audio?: Map<string, ArrayBuffer>;
+    /** Rendering mode: 'slideshow' (interactive, default) or 'static' (scrollable) */
+    mode?: 'slideshow' | 'static';
+    /** HTML page title (default: 'Squisq Document') */
+    title?: string;
+    /** Auto-play slideshow on load (default: false) */
+    autoPlay?: boolean;
+    /**
+     * Squisq theme ID to apply (e.g., 'documentary', 'cinematic').
+     * When set, the theme is assigned to the Doc before rendering,
+     * so the SquisqPlayer renders with that theme's colors and typography.
+     */
+    themeId?: string;
+    /** Explicit caller-owned registry for non-document custom themes. */
+    themeRegistry?: ThemeRegistry;
+}
+/**
+ * Collect all relative image paths referenced in a Doc's layers and template blocks.
+ * Returns a Set of unique relative paths that need to be resolved.
+ */
+declare function collectImagePaths(doc: Doc): Set<string>;
+
+/**
+ * HTML Import Module — @bendyline/squisq-formats/html
+ *
+ * Converts an HTML document (or fragment) into a squisq `MarkdownDocument`.
+ * Built on the existing `parseHtmlToNodes` (parse5-backed) + `sanitizeHtmlNodes`
+ * from `@bendyline/squisq/markdown`, so no new dependency is introduced.
+ *
+ * The primary consumer is email: HTML mail bodies are hostile input, so the
+ * parse is sanitized by default (scripts/styles/event handlers/dangerous URLs
+ * stripped) before the tree is walked into markdown nodes.
+ *
+ * Two entry points mirror the docx/pdf importers:
+ *   - `htmlToMarkdownDoc(data, options?)` → `MarkdownDocument`
+ *   - `htmlToMarkdown(html, options?)` → markdown string (convenience for the
+ *     string-in/string-out path email body conversion needs)
+ */
+
+interface HtmlImportOptions {
+    /**
+     * Strip scripts / styles / event handlers / dangerous URLs before walking
+     * the tree. Default `true` — HTML email is untrusted; only disable for
+     * trusted input where you want raw fidelity.
+     */
+    sanitize?: boolean;
+}
+/** Parse HTML into a squisq `MarkdownDocument`. */
+declare function htmlToMarkdownDocSync(html: string, options?: HtmlImportOptions): MarkdownDocument;
+/** Async, ArrayBuffer-accepting entry mirroring docx/pdf importers. */
+declare function htmlToMarkdownDoc(data: ArrayBuffer | Uint8Array | string, options?: HtmlImportOptions): Promise<MarkdownDocument>;
+/** Convenience string→string conversion (used for email HTML bodies). */
+declare function htmlToMarkdown(html: string, options?: HtmlImportOptions): string;
+
+export { type HtmlExportOptions as H, type HtmlImportOptions as a, htmlToMarkdownDoc as b, collectImagePaths as c, htmlToMarkdownDocSync as d, htmlToMarkdown as h };