@docx-editor.dev/core 2.28.0 → 2.30.0

package/dist/{index-Bsg7oIKP.d.ts → chrome-print-BM3Js-6X.d.ts}

@@ -1,24 +1,20 @@
-import { W as TreeDocOp, co as TextFormFieldRange, cn as TextFormFieldOptions, au as Unsubscribe, E as ExecResult, ao as DrawingPositionInput, aM as DrawingTransform, A as ParagraphTabStop, y as IndentFormatting, z as ParagraphFlags, aB as ParagraphDisagreements, aj as DrawingTreeDocOp, at as SelectionPin, Q as OoxmlPackage, g as ReviewRevisionKind, an as ImageWrapTarget } from './types-barrel-D3xCgQX6.js';
-import { k as FieldResultsMode, I as InsertImageInput, S as StoryScope, A as ApplyImagePropertiesInput, i as ImageIntentResult } from './tree-package-fragment-BeeKxDw8.js';
-import { a as ImageDecodePort, S as SupportedImageMime } from './image-resources-BN-hUgCn.js';
-import './document-protection-BAGVGqaP.js';
-import { EditorModule, ReviewModuleContribution } from './contracts/modules.js';
-import { D as DocumentSource, a as FontConfiguration, Z as ZoomMode, E as EditorFontError, i as Editor, e as EditorCommand, C as CanResult, p as SelectedImageState, z as FormatPainterSurfaceState, g as ScrollPlacement, r as TrackedChangePredicate, q as TrackedChangeFilterMode, F as FontFaceRequest, b as FontSource, I as ImageContext, B as TableBorderEdgeTarget, G as TableBorderSpec, J as TableBorderStyle, K as TableContext } from './editor-Ci7IZGmG.js';
-import { e as RevisionMarkupOptions, a as ReviewDisplayMode, i as RevisionMarkupChromeHandlers, d as ResolvedRevisionMarkup } from './revision-projection-DZ4kKVev.js';
-import { S as SemanticPosition, a as SemanticSelection, N as NavigationCommand } from './semantic-interaction-CIC-PooQ.js';
-import { e as FontConfigurationFragment, g as FontResolver, i as MarkedFontResolver, f as FontResolutionRequest } from './font-resolver-BVQB14qT.js';
-import { R as ReviewPaneOptions } from './review-pane-D9jm8DcY.js';
-import { EditorCollaborationSession, CollaborationRemoteSelection, CollaborationModuleContribution } from './collaboration.js';
-import { d as RevisionStyles, R as ReviewAuthorInfo, c as RevisionAuthorStyle, F as FieldShadingMode, f as DrawingPaintStrings } from './semantic-paint-BME37OMv.js';
-import { b as ResolvedFootnoteProperties, R as ResolvedEndnoteProperties, A as AuthoredNoteProperties } from './note-properties-4Y9o6Gyk.js';
-import { S as SemanticLayout, T as TextMeasurer, C as ContentControlBoundaryRecord } from './semantic-records-4B3WwFAi.js';
-import { B as BookmarkIndex } from './custom-node-writes-cvL5rhcD.js';
-import { C as CellSelection, S as SectionProperties } from './semantic-cell-selection-D9D1KSXq.js';
-import { T as TreeDocxSessionView, a as TreeApplyResult } from './tree-session-contract-CVbmlMlq.js';
+import { c as FontConfigurationFragment, g as FontResolver, M as MarkedFontResolver, f as FontResolutionRequest } from './font-resolver-CL9BVKZo.js';
+import { q as DocumentSource, Q as FontConfiguration, aN as ZoomMode, z as EditorFontError, t as Editor, R as ReviewPaneOptions, b as EditorCommand, C as CanResult, au as SelectedImageState, Y as FormatPainterSurfaceState, as as ScrollPlacement, aL as TrackedChangePredicate, aK as TrackedChangeFilterMode, S as FontFaceRequest, U as FontSource, a7 as ImageContext, ay as TableBorderEdgeTarget, az as TableBorderSpec, aA as TableBorderStyle, aF as TableContext } from './editor-DaEJd2so.js';
+import { V as ViewScope, a as EditorExecOptions } from './editor-scope-7o9xweiJ.js';
+import { ag as TreeDocOp, aN as TextFormFieldRange, aO as TextFormFieldOptions, ae as Unsubscribe, E as ExecResult, _ as DrawingPositionInput, aP as DrawingTransform, A as ParagraphTabStop, y as IndentFormatting, z as ParagraphFlags, a4 as ParagraphDisagreements, az as DrawingTreeDocOp, ab as SelectionPin, Q as OoxmlPackage, g as ReviewRevisionKind, a1 as ImageWrapTarget } from './types-barrel-CA0xB8kH.js';
+import { c as ImageDecodePort, S as SupportedImageMime } from './image-resources-Bipz8toD.js';
+import { T as TextMeasurer, a as ReviewDisplayMode, q as ResolvedRevisionMarkup, t as RevisionMarkupOptions, z as RevisionMarkupChromeHandlers, S as SemanticLayout, C as ContentControlBoundaryRecord, O as SectionProperties } from './semantic-records-CjcF26ZL.js';
+import { F as FieldResultsMode, C as ContentLockPolicy, I as InsertImageInput, S as StoryScope, A as ApplyImagePropertiesInput, i as ImageIntentResult } from './tree-package-store-DKhdEVym.js';
+import { F as FontShapingOptions } from './font-shaping-policy-BvpkrfxM.js';
+import { F as FieldShadingMode, d as RevisionStyles, f as DrawingPaintStrings, R as ReviewAuthorInfo, c as RevisionAuthorStyle } from './semantic-paint-Bz3FBAoH.js';
+import { ReviewModuleContribution, EditorModule } from './contracts/modules.js';
+import { S as SemanticPosition, a as SemanticSelection, N as NavigationCommand } from './semantic-interaction-Dc3pf3hr.js';
+import { CollaborationModuleContribution, EditorCollaborationSession, CollaborationRemoteSelection } from './collaboration.js';
+import { R as ResolvedFootnoteProperties, a as ResolvedEndnoteProperties, A as AuthoredNoteProperties } from './note-properties-9FH8zAeG.js';
+import { B as BookmarkIndex } from './custom-node-writes-0v0Kgw1T.js';
+import { C as CellSelection } from './semantic-cell-selection-Dr9yxFZt.js';
+import { T as TreeDocxSessionView, a as TreeApplyResult } from './tree-session-contract-CwnTEVLF.js';
 import { C as CollaborationStatus } from './failure-NS2lsya4.js';
-import { V as ViewScope, b as EditorExecOptions } from './editor-scope-OHPwVQ5l.js';
-import './contracts/document.js';
-import './contracts/interaction.js';
 
 /**
  * A blank document, freshly zipped per call (the caller may hand the
@@ -141,29 +137,47 @@ interface TextFormFieldChromeHandlers {
     readonly onRequest?: (session: TextFormFieldDialogSession) => void;
 }
 
-/**
- * Receives the element that shows the loading indicator on the first page, while a large
- * document lays out its remaining pages.
- *
- * @example
- * ```ts
- * editor.setOpeningIndicatorHost({
- *   publish(element) {
- *     // Render your indicator into `element`, or remove it when `element` is null.
- *   },
- * });
- * ```
- *
- * @public
- */
-interface OpeningIndicatorHost {
-    /**
-     * Called with the indicator element when the first pages show, and with `null` when the
-     * remaining pages are laid out or the open is abandoned. The element is empty while a host
-     * is set: render the host's content into it. It is centered on the first page, at most 30%
-     * of the window height below the page top, and scrolls with the document.
-     */
-    publish(element: HTMLElement | null): void;
+/** One addressable inline equation and its compact editable projection. */
+interface SurfaceEquation {
+    readonly id: string;
+    readonly paragraphId: string;
+    readonly start: number;
+    readonly end: number;
+    readonly linear: string;
+    readonly fallbackText: string;
+    /** True when every source construct belongs to the editable subset. */
+    readonly supported: boolean;
+}
+/** A user click on one painted equation. */
+interface EquationActivation {
+    readonly equation: SurfaceEquation;
+    readonly rect: {
+        readonly left: number;
+        readonly top: number;
+        readonly right: number;
+        readonly bottom: number;
+    };
+}
+/** Boundary-inclusive lookup, matching the hyperlink and field atom popovers. */
+declare function equationAtPosition(equations: readonly SurfaceEquation[], position: SemanticPosition): SurfaceEquation | null;
+type EquationAction = 'replace' | 'remove';
+/** Engine-owned capability result for equation editing chrome. */
+type EquationCanResult = {
+    readonly ok: true;
+} | {
+    readonly ok: false;
+    readonly code: 'locked' | 'notFound' | 'unsupported';
+    readonly reason: string;
+};
+/** Surface equation reads and atomic replace/remove writes. */
+interface EquationOps {
+    equationsInCaretParagraph(): SurfaceEquation[];
+    equationAtCaret(): SurfaceEquation | null;
+    equationById(equationId: string): SurfaceEquation | null;
+    /** Whether equation chrome can run an action, with the engine-owned refusal reason. */
+    can(equationId: string, action: EquationAction): EquationCanResult;
+    applyEquation(equationId: string, linear: string): boolean;
+    removeEquation(equationId: string): boolean;
 }
 
 /**
@@ -262,47 +276,210 @@ interface SurfaceNavigation {
     destroy(): void;
 }
 
-/** One addressable inline equation and its compact editable projection. */
-interface SurfaceEquation {
-    readonly id: string;
-    readonly paragraphId: string;
-    readonly start: number;
-    readonly end: number;
-    readonly linear: string;
-    readonly fallbackText: string;
-    /** True when every source construct belongs to the editable subset. */
-    readonly supported: boolean;
-}
-/** A user click on one painted equation. */
-interface EquationActivation {
-    readonly equation: SurfaceEquation;
-    readonly rect: {
-        readonly left: number;
-        readonly top: number;
-        readonly right: number;
-        readonly bottom: number;
+/**
+ * How the caret moves through an inline content control whose effective lock is
+ * `contentLocked` or `sdtContentLocked`.
+ *
+ * - `'characters'` (the default) — the caret walks through the control's characters, as in Word.
+ * - `'atomic'` — the control is one caret unit, as a `w:showingPlcHdr` prompt already is. Arrows
+ *   step over it, Shift+arrows select it whole, and a press or double click inside it selects it
+ *   whole. A press on its edge still places a caret beside it.
+ *
+ * It applies in the body, headers and footers; notes and text boxes publish no control
+ * boundaries, so they keep character navigation.
+ *
+ * Navigation only: what a lock refuses does not change. The rule covers keyboard motions and
+ * the engine's own pointer gestures. A selection set in code (`setSelection`, find) is kept as
+ * given, and `pointer: 'native'` leaves caret placement to the browser.
+ *
+ * @public
+ */
+type LockedControlNavigation = 'characters' | 'atomic';
+/**
+ * How a paginated surface opens. Every field is optional.
+ *
+ * `measurer` is the injection seam that keeps layout DOM-free — supply one to lay a document out
+ * on a server, or leave it off in a browser to get the canvas measurer.
+ */
+interface PaginatedSurfaceOptions {
+    /** UI labels for shared form controls; omitted keys fall back to English. */
+    readonly translate?: (key: string, params?: Record<string, string | number>) => string;
+    /** Regional conventions for new date input; defaults to en-US. */
+    readonly locale?: string;
+    /**
+     * The collaboration module's replica for this surface's session. Absent,
+     * the surface does not attach, and local store history remains the undo
+     * authority.
+     */
+    readonly collaborationModel?: CollaborationModuleContribution;
+    /**
+     * How saved field results are edited. `atomic` (the default) keeps every field one unit.
+     * `editable` lets the reader type, delete, and select inside the saved result of a DATE,
+     * MERGEFIELD, HYPERLINK, or similar field. Results must be unnested; simple fields inside
+     * complex field results are not supported. Refused with a {@link collaborationModel}.
+     */
+    readonly fieldResults?: FieldResultsMode;
+    readonly measurer?: TextMeasurer;
+    /** Ambient author for tracked edits. Required before suggesting can write anything. */
+    readonly author?: string;
+    /** Opening mode; changeable at runtime with `setEditingMode`. */
+    readonly editingMode?: SurfaceEditingMode;
+    /**
+     * Identifies the measurer for cache invalidation.
+     *
+     * Fonts resolve asynchronously, so a host that swaps its measurer must change this or the
+     * cached pre-font layout is served for the rest of the session.
+     */
+    readonly producer?: string;
+    /**
+     * Maps a document-declared font family to the alias its registered bytes live under, so
+     * painted runs can use embedded glyphs without the file's family name entering the
+     * page-global CSS font namespace.
+     */
+    readonly fontAlias?: (family: string) => string | undefined;
+    /** Points to CSS pixels. */
+    readonly scale?: number;
+    /**
+     * How revisions project into layout and paint. Omitted keeps the layout default
+     * (`all-markup`). The editor facade passes `proposed` when no review module is
+     * registered — the free tier's final-state rendering; the machinery below this
+     * option is shared either way.
+     */
+    readonly revisionDisplayMode?: ReviewDisplayMode;
+    /** Authors whose changes open in their accepted view-time projection. */
+    readonly hiddenRevisionAuthors?: readonly string[];
+    /**
+     * When a field's result wears Word's grey shading. Omitted keeps Word's own default,
+     * `when-selected`.
+     *
+     * Applies to ORDINARY fields only. Legacy form fields follow the document's
+     * `w:doNotShadeFormData`, because a form's blanks are the document's own statement about
+     * itself rather than a reader's preference.
+     *
+     * A paint-level option, not a layout one: it changes no geometry, so switching it repaints
+     * without remeasuring a single line.
+     */
+    readonly fieldShading?: FieldShadingMode;
+    /** Show paragraph-end furniture without changing document content. */
+    readonly showParagraphMarks?: boolean;
+    readonly onToggleParagraphMarks?: () => void;
+    /**
+     * How tracked changes are coloured: by AUTHOR (the default), by kind, or by author with
+     * host-pinned colours. A paint-level option like {@link fieldShading}: it changes no
+     * geometry, so switching it repaints without remeasuring a line. Applies wherever
+     * revision markup paints, whatever the {@link revisionDisplayMode} leaves visible.
+     */
+    readonly revisionStyles?: RevisionStyles;
+    readonly revisionMarkup?: ResolvedRevisionMarkup;
+    /**
+     * The review module's derivation hooks for this surface's session. Absent,
+     * `session.reviewItems()` is the typed empty queue and every review affordance
+     * built on it stays inert.
+     */
+    readonly reviewModel?: ReviewModuleContribution;
+    /**
+     * Opt-in relaxation of `w:lock` for run-property writes: `contentLocked` / `sdtContentLocked`
+     * controls can be restyled (toolbar, shortcuts, automation `setFont`) but not retyped.
+     * Absent, they refuse both, as ECMA-376 / Word do.
+     */
+    readonly contentLockPolicy?: ContentLockPolicy;
+    /**
+     * The family a run with no authored font is reported as by `formatting()` AND painted
+     * in — the face the measurer falls back to. Absent, such a run reports
+     * `fontFamily: null` and paints in whatever font the page inherits, which the measurer
+     * did not measure: visible glyphs drift from wrap points and caret geometry.
+     */
+    readonly defaultFontFamily?: string;
+    /**
+     * Who resolves a pointer to a caret.
+     *
+     * `'engine'` (the default) answers from the layout records, which is what makes a click in
+     * a margin, an indent or a cell's padding land where it was aimed. `'native'` binds no
+     * pointer handlers and leaves the browser's own caret placement in charge.
+     */
+    readonly pointer?: 'engine' | 'native';
+    /** How the caret moves through a content-locked inline control; see `LockedControlNavigation`. */
+    readonly lockedControlNavigation?: LockedControlNavigation;
+    readonly onChange?: (state: PaginatedSurfaceState) => void;
+    /**
+     * Told each time an edit is refused, with the raw reason: a store code such as `'locked'`,
+     * or the surface's own refusal sentence. The raw reason can be a sentence, so a listener
+     * maps it to a public code before it reports anything.
+     */
+    readonly onRejection?: (reason: string) => void;
+    /**
+     * Told the milliseconds of each layout pass and each paint. For `'input'`, told the browser
+     * timestamp of each key press or pointer press on the pages, so a listener can time it to
+     * the next frame. Numbers only.
+     */
+    readonly onTiming?: (phase: 'layout' | 'paint' | 'input', value: number) => void;
+    /**
+     * Told once for each local edit that changed the document, with `typing` true for buffered
+     * typing, which can land inside a later command's commit. Remote edits are not local.
+     */
+    readonly onEdit?: (typing: boolean) => void;
+    /**
+     * A plain click on an external (or inert) hyperlink, for a host to open its popover with.
+     *
+     * Absent means such a click does nothing. That is deliberate: a host with no popover
+     * mounted must not have clicks silently opening tabs, and the popover is the only path to
+     * activation (see the navigation module's single `window.open` gate).
+     */
+    readonly onHyperlinkPopover?: (activation: HyperlinkActivation) => void;
+    readonly onEquationPopover?: (activation: EquationActivation) => void;
+    /**
+     * Ctrl/Cmd+K — Word's Insert Hyperlink. The engine reports the request; the host's chrome
+     * decides what a link dialog looks like. A host that passes nothing leaves the key alone
+     * rather than doing something surprising with it.
+     */
+    readonly onRequestHyperlink?: () => void;
+    /** Return true when host chrome handles this session. */
+    readonly onRequestTextFormField?: (session: TextFormFieldDialogSession) => boolean;
+    readonly onRequestContentControlWidget?: (session: ContentControlWidgetSession) => boolean;
+    readonly onRequestInvalidTextFormField?: (session: InvalidTextFormFieldSession) => boolean;
+    /**
+     * Localized accessible names for core-owned table insertion furniture.
+     * Defaults to English from `@docx-editor.dev/i18n` when omitted.
+     */
+    readonly tableInteractionLabel?: (key: 'table.insertRowBelow' | 'table.insertColumnRight') => string;
+    /** Localized drawing refusal labels; defaults to English when omitted. */
+    readonly drawingStrings?: DrawingPaintStrings;
+    /** Override raster decode for package image intents; defaults to browser/headless. */
+    readonly imageDecodePort?: ImageDecodePort;
+    /**
+     * Localized name for a generated TOC, written as the control's `w:alias` on insert.
+     *
+     * The update ACTIONS are not here: they are rows in the host's context menu, which owns
+     * its own labels. The engine paints no menu of its own.
+     */
+    readonly tocLabels?: {
+        readonly title: string;
     };
 }
-/** Boundary-inclusive lookup, matching the hyperlink and field atom popovers. */
-declare function equationAtPosition(equations: readonly SurfaceEquation[], position: SemanticPosition): SurfaceEquation | null;
-type EquationAction = 'replace' | 'remove';
-/** Engine-owned capability result for equation editing chrome. */
-type EquationCanResult = {
-    readonly ok: true;
-} | {
-    readonly ok: false;
-    readonly code: 'locked' | 'notFound' | 'unsupported';
-    readonly reason: string;
-};
-/** Surface equation reads and atomic replace/remove writes. */
-interface EquationOps {
-    equationsInCaretParagraph(): SurfaceEquation[];
-    equationAtCaret(): SurfaceEquation | null;
-    equationById(equationId: string): SurfaceEquation | null;
-    /** Whether equation chrome can run an action, with the engine-owned refusal reason. */
-    can(equationId: string, action: EquationAction): EquationCanResult;
-    applyEquation(equationId: string, linear: string): boolean;
-    removeEquation(equationId: string): boolean;
+
+/**
+ * Receives the element that shows the loading indicator on the first page, while a large
+ * document lays out its remaining pages.
+ *
+ * @example
+ * ```ts
+ * editor.setOpeningIndicatorHost({
+ *   publish(element) {
+ *     // Render your indicator into `element`, or remove it when `element` is null.
+ *   },
+ * });
+ * ```
+ *
+ * @public
+ */
+interface OpeningIndicatorHost {
+    /**
+     * Called with the indicator element when the first pages show, and with `null` when the
+     * remaining pages are laid out or the open is abandoned. The element is empty while a host
+     * is set: render the host's content into it. It is centered on the first page, at most 30%
+     * of the window height below the page top, and scrolls with the document.
+     */
+    publish(element: HTMLElement | null): void;
 }
 
 /**
@@ -347,6 +524,8 @@ interface DocxEditorConfig {
      * requests — the engine never supplies one, so that stays your call.
      */
     fonts?: FontConfiguration | FontConfigurationFragment | FontResolver;
+    /** Explicit shaping execution limits. Omitted, the per-face byte ceiling remains 16 MiB. */
+    fontShaping?: FontShapingOptions;
     author?: string;
     /** BCP-47 locale for regional date input and generated labels; defaults to en-US. */
     locale?: string;
@@ -359,6 +538,14 @@ interface DocxEditorConfig {
      * reason. See {@link EditorModule}.
      */
     modules?: readonly EditorModule[];
+    /**
+     * Opt-in relaxation of content-control `w:lock`: with `allowFormattingInLockedContent`,
+     * `contentLocked` / `sdtContentLocked` controls refuse typing, pasting and deleting their
+     * text as always, but accept run formatting (toolbar, shortcuts, automation `setFont`) —
+     * for hosts that protect WHAT a control says and let authors style it. Default: Word's
+     * behaviour, where a content lock refuses every edit including formatting.
+     */
+    contentLockPolicy?: ContentLockPolicy;
     /**
      * The mode the editor opens in — one prop, matching the toolbar's three-state pill.
      *
@@ -415,6 +602,12 @@ interface DocxEditorConfig {
      * shared paragraph text keeps every field one unit.
      */
     fieldResults?: FieldResultsMode;
+    /**
+     * How the caret moves through an inline control with a content lock. `'atomic'` makes such a
+     * control one caret unit; `'characters'` (the default) walks through its characters, as Word
+     * does. Fixed for the instance.
+     */
+    lockedControlNavigation?: LockedControlNavigation;
     /** Override raster decode for insert/replace image commands; defaults to browser/headless. */
     imageDecodePort?: ImageDecodePort;
     /**
@@ -782,7 +975,8 @@ declare function canExecuteImageCommand(command: Extract<EditorCommand, {
  * Run an insert or replace, re-checking the same gates {@link canExecuteImageCommand} applies.
  *
  * Async because image bytes must be decoded to derive their natural extent before the drawing can
- * be projected — the one editor command that cannot complete synchronously.
+ * be projected — the one editor command that cannot complete synchronously. It runs outside
+ * `exec`, so it reports a refusal to the editor's diagnostics itself.
  */
 declare function executeImageCommand(editor: DocxEditorInstance, command: Extract<EditorCommand, {
     type: 'insertImage' | 'replaceImage';
@@ -1294,143 +1488,6 @@ interface RemoteCaretLabelHost {
     publish(anchors: readonly RemoteCaretLabelAnchor[]): void;
 }
 
-/**
- * How a paginated surface opens. Every field is optional.
- *
- * `measurer` is the injection seam that keeps layout DOM-free — supply one to lay a document out
- * on a server, or leave it off in a browser to get the canvas measurer.
- */
-interface PaginatedSurfaceOptions {
-    /** UI labels for shared form controls; omitted keys fall back to English. */
-    readonly translate?: (key: string, params?: Record<string, string | number>) => string;
-    /** Regional conventions for new date input; defaults to en-US. */
-    readonly locale?: string;
-    /**
-     * The collaboration module's replica for this surface's session. Absent,
-     * the surface does not attach, and local store history remains the undo
-     * authority.
-     */
-    readonly collaborationModel?: CollaborationModuleContribution;
-    /**
-     * How saved field results are edited. `atomic` (the default) keeps every field one unit.
-     * `editable` lets the reader type, delete, and select inside the saved result of a DATE,
-     * MERGEFIELD, HYPERLINK, or similar field. Results must be unnested; simple fields inside
-     * complex field results are not supported. Refused with a {@link collaborationModel}.
-     */
-    readonly fieldResults?: FieldResultsMode;
-    readonly measurer?: TextMeasurer;
-    /** Ambient author for tracked edits. Required before suggesting can write anything. */
-    readonly author?: string;
-    /** Opening mode; changeable at runtime with `setEditingMode`. */
-    readonly editingMode?: SurfaceEditingMode;
-    /**
-     * Identifies the measurer for cache invalidation.
-     *
-     * Fonts resolve asynchronously, so a host that swaps its measurer must change this or the
-     * cached pre-font layout is served for the rest of the session.
-     */
-    readonly producer?: string;
-    /**
-     * Maps a document-declared font family to the alias its registered bytes live under, so
-     * painted runs can use embedded glyphs without the file's family name entering the
-     * page-global CSS font namespace.
-     */
-    readonly fontAlias?: (family: string) => string | undefined;
-    /** Points to CSS pixels. */
-    readonly scale?: number;
-    /**
-     * How revisions project into layout and paint. Omitted keeps the layout default
-     * (`all-markup`). The editor facade passes `proposed` when no review module is
-     * registered — the free tier's final-state rendering; the machinery below this
-     * option is shared either way.
-     */
-    readonly revisionDisplayMode?: ReviewDisplayMode;
-    /** Authors whose changes open in their accepted view-time projection. */
-    readonly hiddenRevisionAuthors?: readonly string[];
-    /**
-     * When a field's result wears Word's grey shading. Omitted keeps Word's own default,
-     * `when-selected`.
-     *
-     * Applies to ORDINARY fields only. Legacy form fields follow the document's
-     * `w:doNotShadeFormData`, because a form's blanks are the document's own statement about
-     * itself rather than a reader's preference.
-     *
-     * A paint-level option, not a layout one: it changes no geometry, so switching it repaints
-     * without remeasuring a single line.
-     */
-    readonly fieldShading?: FieldShadingMode;
-    /** Show paragraph-end furniture without changing document content. */
-    readonly showParagraphMarks?: boolean;
-    readonly onToggleParagraphMarks?: () => void;
-    /**
-     * How tracked changes are coloured: by AUTHOR (the default), by kind, or by author with
-     * host-pinned colours. A paint-level option like {@link fieldShading}: it changes no
-     * geometry, so switching it repaints without remeasuring a line. Applies wherever
-     * revision markup paints, whatever the {@link revisionDisplayMode} leaves visible.
-     */
-    readonly revisionStyles?: RevisionStyles;
-    readonly revisionMarkup?: ResolvedRevisionMarkup;
-    /**
-     * The review module's derivation hooks for this surface's session. Absent,
-     * `session.reviewItems()` is the typed empty queue and every review affordance
-     * built on it stays inert.
-     */
-    readonly reviewModel?: ReviewModuleContribution;
-    /**
-     * The family a run with no authored font is reported as by `formatting()` AND painted
-     * in — the face the measurer falls back to. Absent, such a run reports
-     * `fontFamily: null` and paints in whatever font the page inherits, which the measurer
-     * did not measure: visible glyphs drift from wrap points and caret geometry.
-     */
-    readonly defaultFontFamily?: string;
-    /**
-     * Who resolves a pointer to a caret.
-     *
-     * `'engine'` (the default) answers from the layout records, which is what makes a click in
-     * a margin, an indent or a cell's padding land where it was aimed. `'native'` binds no
-     * pointer handlers and leaves the browser's own caret placement in charge.
-     */
-    readonly pointer?: 'engine' | 'native';
-    readonly onChange?: (state: PaginatedSurfaceState) => void;
-    /**
-     * A plain click on an external (or inert) hyperlink, for a host to open its popover with.
-     *
-     * Absent means such a click does nothing. That is deliberate: a host with no popover
-     * mounted must not have clicks silently opening tabs, and the popover is the only path to
-     * activation (see the navigation module's single `window.open` gate).
-     */
-    readonly onHyperlinkPopover?: (activation: HyperlinkActivation) => void;
-    readonly onEquationPopover?: (activation: EquationActivation) => void;
-    /**
-     * Ctrl/Cmd+K — Word's Insert Hyperlink. The engine reports the request; the host's chrome
-     * decides what a link dialog looks like. A host that passes nothing leaves the key alone
-     * rather than doing something surprising with it.
-     */
-    readonly onRequestHyperlink?: () => void;
-    /** Return true when host chrome handles this session. */
-    readonly onRequestTextFormField?: (session: TextFormFieldDialogSession) => boolean;
-    readonly onRequestContentControlWidget?: (session: ContentControlWidgetSession) => boolean;
-    readonly onRequestInvalidTextFormField?: (session: InvalidTextFormFieldSession) => boolean;
-    /**
-     * Localized accessible names for core-owned table insertion furniture.
-     * Defaults to English from `@docx-editor.dev/i18n` when omitted.
-     */
-    readonly tableInteractionLabel?: (key: 'table.insertRowBelow' | 'table.insertColumnRight') => string;
-    /** Localized drawing refusal labels; defaults to English when omitted. */
-    readonly drawingStrings?: DrawingPaintStrings;
-    /** Override raster decode for package image intents; defaults to browser/headless. */
-    readonly imageDecodePort?: ImageDecodePort;
-    /**
-     * Localized name for a generated TOC, written as the control's `w:alias` on insert.
-     *
-     * The update ACTIONS are not here: they are rows in the host's context menu, which owns
-     * its own labels. The engine paints no menu of its own.
-     */
-    readonly tocLabels?: {
-        readonly title: string;
-    };
-}
-
 /**
  * What the selection is currently formatted as.
  *
@@ -2395,6 +2452,8 @@ type OpenPaginatedResult = {
     readonly ok: false;
     readonly reason: string;
     readonly detail?: string;
+    /** The resource limit the package crossed, when the reason is a size refusal. */
+    readonly limit?: string;
 };
 
 /** One URL to fetch and the face it claims to be. */
@@ -3865,5 +3924,5 @@ interface ChromePrintJob {
  */
 declare function runChromePrint(editor: Pick<Editor, 'save'> & Partial<Pick<Editor, 'snapshot'>>, handlers?: ChromeExportHandlers, container?: Document | Element): Promise<ChromePrintJob>;
 
-export { IMAGE_OVERLAY_NUDGE_SHIFT_PT as $, CHROME_GROUPS as C, DEFAULT_TABLE_CHROME_DRAFT as F, EMU_PER_POINT as I, IMAGE_OVERLAY_NUDGE_PT as _, createFontSource as a$, applyTableChromePick as aJ, bindHistoryGroup as aK, blankDocumentBytes as aL, canExecuteImageCommand as aM, captureImageMutationPreconditions as aN, chromeControlCount as aO, chromeMenuSlots as aP, chromeProbeForSlot as aQ, chromeSlotId as aR, chromeSlotIsToggle as aS, commandExecOptions as aT, commandForSlot as aU, commandForSlotValue as aV, commandForTableChromeSlotValue as aW, computeImageResizeResult as aX, computeMovedImagePosition as aY, computeResizedImageExtentEmu as aZ, createDocxEditor as a_, TABLE_BORDER_STYLE_OPTIONS as ar, TABLE_BORDER_TARGET_OPTIONS as as, TABLE_BORDER_WIDTH_OPTIONS as at, TABLE_CHROME_SLOT_IDS as au, CHROME_MENUS as b, createImageOverlayScrollPort as b0, cssPixelsToLayoutPoints as b1, customFonts as b2, defaultChromeGroups as b3, defaultTableLabel as b4, emuToOverlayPoints as b5, equationAtPosition as b6, executeImageCommand as b7, finalizeImageOverlayInteraction as b8, formattingBarChromeGroups as b9, isChromePrintShortcut as ba, isStaleImageInteractionCommit as bb, isTableChromeSlot as bc, layoutPointsToCssPixels as bd, loadFonts as be, overlayFrameToSheetCssPixels as bf, overlayHostOrigin as bg, pointsToEmu as bh, probeTableChromeCommand as bi, resizePreservesAspect as bj, runChromeExport as bk, runChromePrint as bl, runSave as bm, runTableChromeCommand as bn, runTableCommand as bo, runToolbarCommand as bp, selectedDrawingOverlayTargetOf as bq, selectedImageStateOf as br, surfacePaintScale as bs, tableChromeIconPaths as bt, tableChromeLabelKeyForTarget as bu, tableChromeToolbarState as bv, tableChromeVisible as bw, tableCommandToolbarState as bx, toolbarCommandState as by, toolbarCommandStates as bz, CHROME_UNAVAILABLE_KEY as c, ChromeExportError as g, ChromePrintError as t };
-export type { AnchorFrameOrigin as A, CustomFontsOptions as B, DocxEditorInstance as D, CustomFontsResolver as E, DocxEditorConfig as G, DrawingSelectionIntent as H, EditorCommandExecute as J, EquationActivation as K, EquationChromeHandlers as L, EquationOps as M, FinalizedImageOverlayInteraction as N, OpenPaginatedResult as O, PaginatedSurfaceOptions as P, FontLoadFailure as Q, FontLoadFailureReason as R, FontMeasurementState as S, TableCommandPlan as T, FontUrlSource as U, HistoryGroupBinding as V, HistoryGroupBindingOptions as W, HyperlinkActivation as X, HyperlinkChromeHandlers as Y, HyperlinkOps as Z, PaginatedSurface as a, ImageInteractionSession as a0, ImageOverlayScrollPort as a1, ImageResizeHandle as a2, ImageResizeResult as a3, InvalidTextFormFieldChromeHandlers as a4, InvalidTextFormFieldSession as a5, LoadFontsRequest as a6, LoadFontsResult as a7, OpeningIndicatorHost as a8, OverlayFrameRect as a9, TableChromePick as aA, TableChromeSlotId as aB, TableInteractionLabelKey as aC, TextFormFieldChromeHandlers as aD, TextFormFieldDialogSession as aE, ToolbarCommandState as aF, ToolbarSlotValue as aG, ToolbarValueMap as aH, ToolbarValueSlot as aI, PaginatedSurfaceState as aa, ParagraphPropertyEdit as ab, PopupChromeRegistrationOptions as ac, RemoteCaretLabelAnchor as ad, RemoteCaretLabelHost as ae, ReviewWriteIntent as af, RunTableChromeCommandResult as ag, SectionAnchor as ah, SectionBreakInsertType as ai, SelectedDrawingOverlayTarget as aj, SurfaceEquation as ak, SurfaceFormatting as al, SurfaceHyperlink as am, SurfaceInsertImageInput as an, SurfaceNavigation as ao, SurfaceOverlayCoordinates as ap, SurfaceParagraphFormat as aq, TableBorderStyleOption as av, TableBorderTargetOption as aw, TableBorderTargetValue as ax, TableBorderWidthOption as ay, TableChromeDraft as az, ChromeControl as d, ChromeControlId as e, ChromeControlState as f, ChromeExportFormat as h, ChromeExportHandlers as i, ChromeExportResult as j, ChromeExportView as k, ChromeGroup as l, ChromeGroupId as m, ChromeMenu as n, ChromeMenuEntry as o, ChromeMenuId as p, ChromeMenuItemEntry as q, ChromeMenuSeparatorEntry as r, ChromeMenuSubmenuEntry as s, ChromePrintErrorCode as u, ChromePrintJob as v, ChromePrintOptions as w, ChromeSlotId as x, ContentControlWidgetChromeHandlers as y, ContentControlWidgetSession as z };
+export { CHROME_UNAVAILABLE_KEY as $, bindHistoryGroup as B, CHROME_GROUPS as C, blankDocumentBytes as E, chromeMenuSlots as G, commandForSlot as I, commandForSlotValue as J, createDocxEditor as K, createFontSource as M, customFonts as N, isChromePrintShortcut as O, loadFonts as P, runChromeExport as Q, runChromePrint as R, runToolbarCommand as U, toolbarCommandState as V, CHROME_MENUS as a, chromeControlCount as a$, DEFAULT_TABLE_CHROME_DRAFT as a8, TABLE_BORDER_STYLE_OPTIONS as aH, TABLE_BORDER_TARGET_OPTIONS as aI, TABLE_BORDER_WIDTH_OPTIONS as aJ, TABLE_CHROME_SLOT_IDS as aK, applyTableChromePick as aY, canExecuteImageCommand as aZ, captureImageMutationPreconditions as a_, EMU_PER_POINT as aa, IMAGE_OVERLAY_NUDGE_PT as ah, IMAGE_OVERLAY_NUDGE_SHIFT_PT as ai, ChromeExportError as b, chromeProbeForSlot as b0, chromeSlotId as b1, chromeSlotIsToggle as b2, commandExecOptions as b3, commandForTableChromeSlotValue as b4, computeImageResizeResult as b5, computeMovedImagePosition as b6, computeResizedImageExtentEmu as b7, createImageOverlayScrollPort as b8, cssPixelsToLayoutPoints as b9, toolbarCommandStates as bA, defaultChromeGroups as ba, defaultTableLabel as bb, emuToOverlayPoints as bc, equationAtPosition as bd, executeImageCommand as be, finalizeImageOverlayInteraction as bf, formattingBarChromeGroups as bg, isStaleImageInteractionCommit as bh, isTableChromeSlot as bi, layoutPointsToCssPixels as bj, overlayFrameToSheetCssPixels as bk, overlayHostOrigin as bl, pointsToEmu as bm, probeTableChromeCommand as bn, resizePreservesAspect as bo, runSave as bp, runTableChromeCommand as bq, runTableCommand as br, selectedDrawingOverlayTargetOf as bs, selectedImageStateOf as bt, surfacePaintScale as bu, tableChromeIconPaths as bv, tableChromeLabelKeyForTarget as bw, tableChromeToolbarState as bx, tableChromeVisible as by, tableCommandToolbarState as bz, ChromePrintError as l };
+export type { LockedControlNavigation as A, DocxEditorConfig as D, FontLoadFailure as F, HistoryGroupBinding as H, LoadFontsRequest as L, SurfaceHyperlink as S, ToolbarCommandState as T, PaginatedSurfaceOptions as W, OpenPaginatedResult as X, PaginatedSurface as Y, TableCommandPlan as Z, AnchorFrameOrigin as _, ChromeControl as a0, ChromeControlId as a1, ChromeControlState as a2, ChromeExportView as a3, ChromeGroup as a4, ChromeGroupId as a5, ContentControlWidgetChromeHandlers as a6, ContentControlWidgetSession as a7, DrawingSelectionIntent as a9, SelectedDrawingOverlayTarget as aA, SurfaceEquation as aB, SurfaceFormatting as aC, SurfaceInsertImageInput as aD, SurfaceNavigation as aE, SurfaceOverlayCoordinates as aF, SurfaceParagraphFormat as aG, TableBorderStyleOption as aL, TableBorderTargetOption as aM, TableBorderTargetValue as aN, TableBorderWidthOption as aO, TableChromeDraft as aP, TableChromePick as aQ, TableChromeSlotId as aR, TableInteractionLabelKey as aS, TextFormFieldChromeHandlers as aT, TextFormFieldDialogSession as aU, ToolbarSlotValue as aV, ToolbarValueMap as aW, ToolbarValueSlot as aX, EditorCommandExecute as ab, EquationActivation as ac, EquationChromeHandlers as ad, EquationOps as ae, FinalizedImageOverlayInteraction as af, HyperlinkOps as ag, ImageInteractionSession as aj, ImageOverlayScrollPort as ak, ImageResizeHandle as al, ImageResizeResult as am, InvalidTextFormFieldChromeHandlers as an, InvalidTextFormFieldSession as ao, OpeningIndicatorHost as ap, OverlayFrameRect as aq, PaginatedSurfaceState as ar, ParagraphPropertyEdit as as, PopupChromeRegistrationOptions as at, RemoteCaretLabelAnchor as au, RemoteCaretLabelHost as av, ReviewWriteIntent as aw, RunTableChromeCommandResult as ax, SectionAnchor as ay, SectionBreakInsertType as az, ChromeExportFormat as c, ChromeExportHandlers as d, ChromeExportResult as e, ChromeMenu as f, ChromeMenuEntry as g, ChromeMenuId as h, ChromeMenuItemEntry as i, ChromeMenuSeparatorEntry as j, ChromeMenuSubmenuEntry as k, ChromePrintErrorCode as m, ChromePrintJob as n, ChromePrintOptions as o, ChromeSlotId as p, CustomFontsOptions as q, CustomFontsResolver as r, DocxEditorInstance as s, FontLoadFailureReason as t, FontMeasurementState as u, FontUrlSource as v, HistoryGroupBindingOptions as w, HyperlinkActivation as x, HyperlinkChromeHandlers as y, LoadFontsResult as z };