@docx-editor.dev/core 2.7.0 → 2.9.0

package/dist/{ooxml-tree-BU0e3DVi.d.cts → ooxml-package-CdEy9ufK.d.ts}

@@ -1,3 +1,226 @@
+/**
+ * Why a part or relationship name was refused.
+ *
+ * Path traversal is the reason this exists: a name with `..` or a leading `/` is refused rather
+ * than normalized, because normalizing is how a crafted package reaches outside itself.
+ */
+type NameRejection = 'empty' | 'control-char' | 'backslash' | 'drive-or-unc' | 'encoded-separator' | 'encoded-dot' | 'bad-encoding' | 'empty-segment' | 'dot-segment' | 'unsafe-key' | 'segment-trailing-dot' | 'traversal-escape' | 'not-absolute-uri' | 'unsafe-scheme';
+/** A validated OPC name, or the typed reason it was refused. */
+type NameResult = {
+    readonly ok: true;
+    readonly partName: string;
+} | {
+    readonly ok: false;
+    readonly reason: NameRejection;
+};
+/**
+ * Normalize a ZIP entry name or OPC part name into a canonical part name
+ * (`/word/document.xml`). Accepts leading-slash and no-leading-slash inputs;
+ * rejects traversal, dot segments, and the attack surface. Duplicate detection
+ * folds ASCII case (OPC part-name equivalence).
+ */
+declare function normalizePartName(raw: string): NameResult;
+/**
+ * ASCII-only lowercase fold. OPC part-name/extension equivalence is US-ASCII
+ * case-insensitive; a locale `toLowerCase()` mis-folds e.g. Turkish `I`/`İ` and
+ * could let two "equivalent" part names evade duplicate detection.
+ */
+declare function asciiFold(s: string): string;
+/** Case-folded key for OPC part-name equivalence / duplicate detection. */
+declare function partNameKey(partName: string): string;
+/**
+ * Detect archive entries that collide after normalization (before inflation).
+ * Returns the case-folded keys that more than one raw name maps to.
+ */
+declare function detectDuplicateNames(rawNames: readonly string[]): {
+    readonly duplicates: readonly string[];
+    readonly rejected: readonly {
+        raw: string;
+        reason: NameRejection;
+    }[];
+};
+/**
+ * Resolve an internal relationship target against its owner part, without
+ * escaping the package root. `ownerPartName` is a canonical part name; the base
+ * is its containing folder. A leading "/" target is package-absolute. `.`/`..`
+ * segments resolve on a stack; popping above root is `traversal-escape`.
+ */
+declare function resolveInternalTarget(ownerPartName: string, rawTarget: string): NameResult;
+/**
+ * Validate an external-mode relationship target. It MUST be an absolute URI, is
+ * retained verbatim by the caller, and is NEVER owner-resolved or fetched here.
+ * Unsafe schemes (javascript/vbscript/data/file) are rejected for runtime sinks;
+ * the raw lexical form is still preserved separately by the authored record.
+ */
+declare function validateExternalTarget(raw: string): NameResult;
+
+/** One `<Default>`: a file extension mapped to a content type. */
+interface DefaultRecord {
+    readonly extension: string;
+    readonly contentType: string;
+    readonly order: number;
+}
+/** One `<Override>`: a specific part name mapped to a content type. Beats any Default. */
+interface OverrideRecord {
+    readonly partName: string;
+    readonly contentType: string;
+    readonly order: number;
+}
+/**
+ * The authored `[Content_Types].xml` records, in significant order.
+ *
+ * Retained rather than collapsed into a lookup, because the file's lexical form and ordering are
+ * part of what a lossless save re-emits.
+ */
+interface ContentTypeRecords {
+    readonly defaults: readonly DefaultRecord[];
+    readonly overrides: readonly OverrideRecord[];
+}
+/**
+ * Why content-type records could not be indexed.
+ *
+ * All fail CLOSED: conflicting Defaults on one extension, duplicate normalized Override names, or
+ * invalid MIME syntax are refused rather than resolved by picking one.
+ */
+type ContentTypeError = {
+    readonly code: 'invalid-mime';
+    readonly value: string;
+} | {
+    readonly code: 'conflicting-default';
+    readonly extension: string;
+} | {
+    readonly code: 'duplicate-override';
+    readonly partName: string;
+} | {
+    readonly code: 'invalid-override-name';
+    readonly partName: string;
+} | {
+    readonly code: 'too-many-records';
+    readonly limit: number;
+};
+/** Whether a string is syntactically a MIME type. Syntax only — no registry lookup. */
+declare function isValidMime(value: string): boolean;
+/** ASCII-case-insensitive extension key (leading dot removed; ASCII-only fold). */
+declare function extensionKey(extension: string): string;
+/** The resolved lookup: Override by case-folded part name, Default by case-insensitive extension. */
+interface ContentTypeIndex {
+    /** ext key -> single MIME (identical duplicates collapsed). */
+    readonly defaults: ReadonlyMap<string, string>;
+    /** case-folded part name -> MIME. */
+    readonly overrides: ReadonlyMap<string, string>;
+}
+/** The built index, or the conflict that made it impossible. */
+type IndexResult = {
+    readonly ok: true;
+    readonly index: ContentTypeIndex;
+} | {
+    readonly ok: false;
+    readonly error: ContentTypeError;
+};
+/**
+ * Build a resolved content-type index, failing closed on conflict/duplicate/MIME
+ * errors. `maxRecords` bounds the combined record count (N/N+1 gate).
+ */
+declare function buildContentTypeIndex(records: ContentTypeRecords, maxRecords?: number): IndexResult;
+/**
+ * A part's content type, or why it has none.
+ *
+ * An orphan record never determines a part's type — a Default with no matching part is preserved
+ * inertly rather than applied.
+ */
+type ResolveResult = {
+    readonly ok: true;
+    readonly contentType: string;
+    readonly source: 'override' | 'default';
+} | {
+    readonly ok: false;
+    readonly reason: 'unknown';
+};
+/** Resolve a part's content type: Override wins over Default; else unknown. */
+declare function resolveContentType(index: ContentTypeIndex, partName: string): ResolveResult;
+
+/** OOXML image relationship type for embedded or linked media parts. */
+declare const IMAGE_RELATIONSHIP_TYPE = "http://schemas.openxmlformats.org/officeDocument/2006/relationships/image";
+/**
+ * Whether a relationship points inside the package or out of it.
+ *
+ * The security-relevant distinction: an `External` target is retained VERBATIM and never
+ * owner-resolved or fetched, because auto-loading a file-supplied remote target is a zero-click
+ * external fetch.
+ */
+type TargetMode = 'Internal' | 'External';
+/**
+ * One authored relationship, with nothing materialized away: owner part, id, type, raw target
+ * lexical form, mode, and position.
+ */
+interface RelationshipRecord {
+    readonly ownerPart: string;
+    readonly id: string;
+    readonly type: string;
+    readonly rawTarget: string;
+    readonly targetMode: TargetMode;
+    readonly order: number;
+}
+/** Why a relationship set is invalid. Duplicate ids within one owner fail closed. */
+type RelationshipError = {
+    readonly code: 'duplicate-id';
+    readonly ownerPart: string;
+    readonly id: string;
+};
+/** The validated relationship set, or the conflict that rejected it. */
+type RelationshipSetResult = {
+    readonly ok: true;
+    readonly byOwner: ReadonlyMap<string, readonly RelationshipRecord[]>;
+} | {
+    readonly ok: false;
+    readonly error: RelationshipError;
+};
+/** Group relationships by owner in authored order; reject duplicate ids per owner. */
+declare function buildRelationshipSet(records: readonly RelationshipRecord[]): RelationshipSetResult;
+/**
+ * A relationship resolved to a part, or the reason it could not be.
+ *
+ * External targets resolve to a refusal by design: they are never followed from a file.
+ */
+type ResolvedRelationship = {
+    readonly mode: 'Internal';
+    readonly target: NameResult;
+    readonly raw: string;
+} | {
+    readonly mode: 'External';
+    readonly sinkSafe: NameResult;
+    readonly raw: string;
+};
+/**
+ * Resolve a relationship to a runtime projection while the raw target stays
+ * authored. Internal -> owner-relative part name; External -> sink-safe
+ * validation only (never owner-resolved, never fetched). `raw` is always the
+ * verbatim authored target.
+ */
+declare function resolveRelationship(rec: RelationshipRecord): ResolvedRelationship;
+/**
+ * An image relationship resolved to package bytes, or why it was refused.
+ *
+ * External-mode image rels are refused rather than fetched — the no-zero-click-external-fetch
+ * rule applies to images exactly as it does to links.
+ */
+type ImageRelationshipResolution = {
+    readonly mode: 'internal';
+    readonly partName: string;
+    readonly raw: string;
+} | {
+    readonly mode: 'external';
+    readonly sinkSafe: boolean;
+    readonly raw: string;
+} | {
+    readonly mode: 'missing';
+};
+/**
+ * Resolve an image relationship id from an owner part. Internal targets resolve
+ * owner-relative; external targets are never fetched; a missing id is `missing`.
+ */
+declare function resolveImageRelationship(records: readonly RelationshipRecord[] | undefined, ownerPart: string, relationshipId: string): ImageRelationshipResolution;
+
 /**
  * One parsed XML node, preserving significant order, whitespace and raw lexical values.
  *
@@ -868,4 +1091,132 @@ type OoxmlInvariantResult = {
  */
 declare function readOoxmlPart(xml: string, metadata: OoxmlPartMetadata, limits?: XmlLimits): OoxmlReadResult;
 
-export { type OoxmlPartMetadata as $, type OoxmlBookmarkEndNode as A, type OoxmlBookmarkStartNode as B, type OoxmlContentControlCalendarNode as C, type OoxmlContentControlCheckboxNode as D, type OoxmlContentControlCheckedNode as E, type OoxmlContentControlCheckedStateNode as F, type OoxmlContentControlComboBoxNode as G, type OoxmlContentControlDataBindingNode as H, type OoxmlContentControlDateFormatNode as I, type OoxmlContentControlDateNode as J, type OoxmlContentControlDropDownListNode as K, type OoxmlContentControlLidNode as L, type OoxmlContentControlListItemNode as M, type OoxmlContentControlStoreMappedDataAsNode as N, type OoxmlNode as O, type OoxmlContentControlTextNode as P, type OoxmlContentControlUncheckedStateNode as Q, type OoxmlDocumentNode as R, type OoxmlGenericExtensionAttribute as S, type OoxmlHyperlinkNode as T, type OoxmlInvariantIssueCode as U, type OoxmlKnownNodeAttribute as V, type OoxmlNamespaceBinding as W, type XmlLimits as X, type OoxmlNodeId as Y, type OoxmlNodeIdentityRules as Z, type OoxmlParagraphPropertiesNode as _, type OoxmlElement as a, type OoxmlReadResult as a0, type OoxmlRunNode as a1, type OoxmlRunPropertiesNode as a2, type OoxmlTabNode as a3, type OoxmlTextElementNode as a4, type OoxmlTextNode as a5, type OoxmlWmlValAttribute as a6, type OoxmlXmlSpaceAttribute as a7, WML_NAMESPACE_URI as a8, XMLNS_NAMESPACE_URI as a9, XML_NAMESPACE_URI as aa, type XmlNode as ab, type XmlRejection as ac, type XmlResult as ad, childElements as ae, findElement as af, isContentRevisionKind as ag, isRangeMarkerKind as ah, readOnOffChild as ai, readOoxmlPart as aj, readXml as ak, textContent as al, type OoxmlContentControlNode as b, type OoxmlGenericElementNode as c, type OoxmlContentControlContentNode as d, type OoxmlPart as e, type OoxmlParagraphNode as f, type OoxmlNoteNode as g, type OoxmlContinuationSeparatorNode as h, type OoxmlEndnotesNode as i, type OoxmlFootnotesNode as j, type OoxmlNoteRefNode as k, type OoxmlNoteReferenceNode as l, type OoxmlSeparatorNode as m, type OoxmlReadRejection as n, type OoxmlDrawingNode as o, type OoxmlContentControlEndPropertiesNode as p, type OoxmlContentControlPropertiesNode as q, type OoxmlInvariantResult as r, type OoxmlInvariantIssue as s, type OoxmlHardBreakNode as t, type OoxmlFldCharNode as u, type OoxmlFldSimpleNode as v, type OoxmlInstrTextNode as w, type OoxmlAttribute as x, OOXML_NODE_IDENTITY_RULES as y, type OoxmlBodyNode as z };
+/**
+ * Why a zip was refused at the trust boundary.
+ *
+ * `too-large` and `too-many-entries` are the zip-bomb guards; `bad-name` catches path traversal —
+ * an entry with `..` or a leading `/` is rejected rather than normalized.
+ */
+type ZipRejection = 'too-many-entries' | 'too-large' | 'bad-name' | 'inflate-error';
+/** Archive caps: entry count, total decompressed bytes, and the decompression ratio. */
+interface ZipLimits {
+    readonly maxEntries: number;
+    /** Max total UNCOMPRESSED bytes across the archive. */
+    readonly maxTotalBytes: number;
+    /** Max per-entry uncompressed:compressed ratio (zip-bomb guard). */
+    readonly maxRatio?: number;
+}
+/** The archive caps in force when a host configures none. Conservative and finite. */
+declare const DEFAULT_ZIP_LIMITS: ZipLimits;
+/** The read entries, or the typed refusal. Never throws — the bytes are untrusted. */
+type ZipReadResult = {
+    readonly ok: true;
+    readonly entries: ReadonlyMap<string, Uint8Array>;
+} | {
+    readonly ok: false;
+    readonly reason: ZipRejection;
+    readonly detail?: string;
+};
+/**
+ * Inflate a ZIP archive with bounds + OPC name normalization. Entry name, count,
+ * compression-ratio, and total-uncompressed-size limits are enforced BEFORE each
+ * entry is decompressed (via fflate's pre-inflation filter), so a zip bomb or a
+ * traversal name is rejected without ever being inflated. Keys are canonical part
+ * names.
+ */
+declare function readZip(bytes: Uint8Array, limits?: ZipLimits): ZipReadResult;
+/** Deflate a set of canonical-part-name -> bytes into a ZIP archive. Every part name
+ *  is re-validated through the OPC normalization profile before writing, so a
+ *  traversal/encoded/normalized-alias name from an untrusted serialized model can
+ *  never be smuggled into a ZIP entry (write-side path-traversal guard). */
+declare function writeZip(entries: ReadonlyMap<string, Uint8Array>): Uint8Array;
+
+/** Caps applied while loading a package: zip, XML, part count and relationship count. */
+interface OoxmlPackageLimits {
+    readonly zip?: ZipLimits;
+    readonly xml?: XmlLimits;
+    /** Cap on parts converted into canonical trees (N/N+1 gate, not a soft target). */
+    readonly maxXmlParts?: number;
+    /** Cap on relationship records across every rels part. */
+    readonly maxRelationships?: number;
+}
+/** The limits in force when a host configures none. Conservative and finite. */
+declare const DEFAULT_OOXML_PACKAGE_LIMITS: Required<Pick<OoxmlPackageLimits, 'maxXmlParts' | 'maxRelationships'>>;
+/**
+ * An external relationship target. Retained verbatim as authored evidence, with the
+ * sink-safety verdict alongside it. Never resolved against the package, never fetched.
+ */
+interface OoxmlExternalTarget {
+    readonly ownerPart: string;
+    readonly id: string;
+    readonly type: string;
+    readonly rawTarget: string;
+    /** False when the target is not a safe sink (javascript:, file:, ...). Still not fetched. */
+    readonly sinkSafe: boolean;
+}
+/**
+ * A loaded package: every XML part as a canonical tree, plus the non-XML parts kept verbatim.
+ *
+ * The preservation model in one value. Modelled parts re-emit normalized; everything else is
+ * byte-identical, which is why an unrecognized part never costs a document anything.
+ */
+interface OoxmlPackage {
+    /** Canonical trees, keyed by canonical part name. Non-XML parts are absent by design. */
+    readonly parts: ReadonlyMap<string, OoxmlPart>;
+    /** Raw bytes of every entry, including the non-XML parts that have no tree. */
+    readonly partBytes: ReadonlyMap<string, Uint8Array>;
+    /** Internal relationships by owner part, in authored order. */
+    readonly relationships: ReadonlyMap<string, readonly RelationshipRecord[]>;
+    readonly externalTargets: readonly OoxmlExternalTarget[];
+    readonly contentTypes: ContentTypeIndex;
+    /** Canonical name of the part the root `officeDocument` relationship points at. */
+    readonly mainDocumentPart: string;
+}
+/** Why a package could not be loaded. Every code describes the FILE, not the caller. */
+type OoxmlPackageRejection = ZipRejection | OoxmlReadRejection | 'no-content-types' | 'bad-content-types' | 'no-main-document' | 'bad-relationship-target' | 'duplicate-relationship-id' | 'too-many-relationships' | 'too-many-xml-parts';
+/** A loaded package, or a typed refusal. Never throws. */
+type OoxmlPackageResult = {
+    readonly ok: true;
+    readonly package: OoxmlPackage;
+} | {
+    readonly ok: false;
+    readonly reason: OoxmlPackageRejection;
+    readonly detail?: string;
+};
+/**
+ * Load an OPC package into canonical typed/generic OOXML trees.
+ *
+ * Fails closed on every limit, malformed name, unresolvable internal target, duplicate
+ * relationship id, and XML rejection. An external relationship never causes a failure and
+ * never causes a fetch: it is recorded with its sink-safety verdict for a later, explicitly
+ * user-gated lane.
+ */
+/**
+ * Load DOCX bytes into canonical trees, bounded at every step.
+ *
+ * THE trust boundary for a document. Composes the hardened primitives — zip limits and OPC name
+ * normalization, content-type indexing, relationship validation, entity-free XML — into one
+ * loader, and returns a typed rejection rather than throwing from inside a decoder.
+ */
+declare function readOoxmlPackage(bytes: Uint8Array, limits?: OoxmlPackageLimits): OoxmlPackageResult;
+/**
+ * Serialize a canonical package back to DOCX bytes.
+ *
+ * Starts from the ORIGINAL entry bytes and overwrites only the parts held as trees. A part
+ * the loader did not model — media, fonts, an XML part outside the modeled set — passes
+ * through untouched, so round-tripping a document cannot lose a part the engine never
+ * claimed to understand.
+ *
+ * The modeled parts are re-emitted NORMALIZED from the tree rather than patched as text.
+ * That is the whole point of the canonical tree: correctness is judged by the two D9
+ * oracles (the namespace-aware fingerprint and the save/reopen semantic digest), not by
+ * byte equality, so a different-but-equivalent spelling is not a defect.
+ *
+ * `writeZip` re-validates every part name, so a name that became unsafe between load and
+ * save cannot be smuggled into the archive.
+ */
+declare function writeOoxmlPackage(pkg: OoxmlPackage): Uint8Array;
+/** Replace one part's tree, returning a new package. Pure, like the tree edits themselves. */
+declare function withPart(pkg: OoxmlPackage, part: OoxmlPart): OoxmlPackage;
+
+export { type OoxmlContentControlLidNode as $, type OoxmlAttribute as A, type ContentTypeIndex as B, type ContentTypeError as C, type ContentTypeRecords as D, DEFAULT_OOXML_PACKAGE_LIMITS as E, DEFAULT_ZIP_LIMITS as F, type DefaultRecord as G, type ImageRelationshipResolution as H, IMAGE_RELATIONSHIP_TYPE as I, type IndexResult as J, type NameResult as K, OOXML_NODE_IDENTITY_RULES as L, type OoxmlBodyNode as M, type NameRejection as N, type OoxmlPart as O, type OoxmlBookmarkEndNode as P, type OoxmlBookmarkStartNode as Q, type RelationshipRecord as R, type OoxmlContentControlCalendarNode as S, type OoxmlContentControlCheckboxNode as T, type OoxmlContentControlCheckedNode as U, type OoxmlContentControlCheckedStateNode as V, type OoxmlContentControlComboBoxNode as W, type OoxmlContentControlDataBindingNode as X, type OoxmlContentControlDateFormatNode as Y, type OoxmlContentControlDateNode as Z, type OoxmlContentControlDropDownListNode as _, type OoxmlNode as a, withPart as a$, type OoxmlContentControlListItemNode as a0, type OoxmlContentControlStoreMappedDataAsNode as a1, type OoxmlContentControlTextNode as a2, type OoxmlContentControlUncheckedStateNode as a3, type OoxmlDocumentNode as a4, type OoxmlExternalTarget as a5, type OoxmlGenericExtensionAttribute as a6, type OoxmlHyperlinkNode as a7, type OoxmlInvariantIssueCode as a8, type OoxmlKnownNodeAttribute as a9, type XmlResult as aA, type ZipLimits as aB, type ZipReadResult as aC, type ZipRejection as aD, asciiFold as aE, buildContentTypeIndex as aF, buildRelationshipSet as aG, childElements as aH, detectDuplicateNames as aI, extensionKey as aJ, findElement as aK, isContentRevisionKind as aL, isRangeMarkerKind as aM, isValidMime as aN, normalizePartName as aO, partNameKey as aP, readOnOffChild as aQ, readOoxmlPackage as aR, readOoxmlPart as aS, readXml as aT, readZip as aU, resolveContentType as aV, resolveImageRelationship as aW, resolveInternalTarget as aX, resolveRelationship as aY, textContent as aZ, validateExternalTarget as a_, type OoxmlNamespaceBinding as aa, type OoxmlNodeIdentityRules as ab, type OoxmlPackageResult as ac, type OoxmlParagraphPropertiesNode as ad, type OoxmlPartMetadata as ae, type OoxmlReadRejection as af, type OoxmlReadResult as ag, type OoxmlRunNode as ah, type OoxmlRunPropertiesNode as ai, type OoxmlTabNode as aj, type OoxmlTextElementNode as ak, type OoxmlTextNode as al, type OoxmlWmlValAttribute as am, type OoxmlXmlSpaceAttribute as an, type OverrideRecord as ao, type RelationshipError as ap, type RelationshipSetResult as aq, type ResolveResult as ar, type ResolvedRelationship as as, type TargetMode as at, WML_NAMESPACE_URI as au, XMLNS_NAMESPACE_URI as av, XML_NAMESPACE_URI as aw, type XmlLimits as ax, type XmlNode as ay, type XmlRejection as az, type OoxmlElement as b, writeOoxmlPackage as b0, writeZip as b1, type OoxmlPackage as c, type OoxmlParagraphNode as d, type OoxmlNoteNode as e, type OoxmlContinuationSeparatorNode as f, type OoxmlEndnotesNode as g, type OoxmlFootnotesNode as h, type OoxmlNoteRefNode as i, type OoxmlNoteReferenceNode as j, type OoxmlSeparatorNode as k, type OoxmlNodeId as l, type OoxmlGenericElementNode as m, type OoxmlPackageLimits as n, type OoxmlPackageRejection as o, type OoxmlContentControlNode as p, type OoxmlContentControlContentNode as q, type OoxmlDrawingNode as r, type OoxmlContentControlEndPropertiesNode as s, type OoxmlContentControlPropertiesNode as t, type OoxmlInvariantResult as u, type OoxmlInvariantIssue as v, type OoxmlHardBreakNode as w, type OoxmlFldCharNode as x, type OoxmlFldSimpleNode as y, type OoxmlInstrTextNode as z };

package/dist/output.cjs

@@ -1 +1 @@
-'use strict';var chunkBRBRYJKE_cjs=require('./chunk-BRBRYJKE.cjs');require('./chunk-LEV2X47E.cjs'),require('./chunk-XRDTD4X3.cjs'),require('./chunk-DTR64XCS.cjs'),require('./chunk-WC3LI6FC.cjs');Object.defineProperty(exports,"DEFAULT_FIELD_SHADING",{enumerable:true,get:function(){return chunkBRBRYJKE_cjs.h}});Object.defineProperty(exports,"paintSelectionOverlay",{enumerable:true,get:function(){return chunkBRBRYJKE_cjs.j}});Object.defineProperty(exports,"paintSemanticLayout",{enumerable:true,get:function(){return chunkBRBRYJKE_cjs.i}});
+'use strict';var chunk2RDMWJPF_cjs=require('./chunk-2RDMWJPF.cjs');require('./chunk-TP4EHWEX.cjs'),require('./chunk-XMHWBL3K.cjs'),require('./chunk-IMMAG4QP.cjs');Object.defineProperty(exports,"DEFAULT_FIELD_SHADING",{enumerable:true,get:function(){return chunk2RDMWJPF_cjs.h}});Object.defineProperty(exports,"paintSelectionOverlay",{enumerable:true,get:function(){return chunk2RDMWJPF_cjs.l}});Object.defineProperty(exports,"paintSemanticLayout",{enumerable:true,get:function(){return chunk2RDMWJPF_cjs.j}});

package/dist/output.d.cts

@@ -1,11 +1,12 @@
-import { R as ReviewAuthorInfo } from './semantic-paint-BUt0ePEW.cjs';
-export { D as DEFAULT_FIELD_SHADING, F as FieldShadingMode, P as PaintOptions, a as RevisionAuthorAssignments, b as RevisionAuthorStyle, c as RevisionStyles, p as paintSemanticLayout } from './semantic-paint-BUt0ePEW.cjs';
-import { S as SemanticLayout } from './semantic-records-CuT3Wsd-.cjs';
-import './image-resources-Bkmu1Jei.cjs';
-import './tree-op-types-QujrzgCz.cjs';
-import './ooxml-tree-BU0e3DVi.cjs';
-import './ooxml-package-CR5us6ad.cjs';
-import './revision-projection-WzlQGBJx.cjs';
+import { R as ReviewAuthorInfo } from './semantic-paint-Ur7pAINj.cjs';
+export { D as DEFAULT_FIELD_SHADING, F as FieldShadingMode, P as PaintOptions, a as RevisionAuthorAssignments, b as RevisionAuthorStyle, c as RevisionStyles, p as paintSemanticLayout } from './semantic-paint-Ur7pAINj.cjs';
+import { S as SemanticLayout } from './semantic-records-C3Z76KeN.cjs';
+import './image-resources-DQOiwOuE.cjs';
+import './tree-op-types-B0-sCtw-.cjs';
+import './contracts/types.cjs';
+import './ooxml-package-CdEy9ufK.cjs';
+import './revision-projection-Cc4wz30g.cjs';
+import './omml-equation-BD-LsmWE.cjs';
 
 /** A rectangle in page-content coordinates, on a named page. */
 interface OverlayRect {

package/dist/output.d.ts

@@ -1,11 +1,12 @@
-import { R as ReviewAuthorInfo } from './semantic-paint-DUkGLJ_L.js';
-export { D as DEFAULT_FIELD_SHADING, F as FieldShadingMode, P as PaintOptions, a as RevisionAuthorAssignments, b as RevisionAuthorStyle, c as RevisionStyles, p as paintSemanticLayout } from './semantic-paint-DUkGLJ_L.js';
-import { S as SemanticLayout } from './semantic-records-DoW_xNgJ.js';
-import './image-resources-BWd5u-op.js';
-import './tree-op-types-fZgbrR5F.js';
-import './ooxml-tree-BU0e3DVi.js';
-import './ooxml-package-D_CtywTW.js';
-import './revision-projection-UKqvPa4-.js';
+import { R as ReviewAuthorInfo } from './semantic-paint-CufpIQFw.js';
+export { D as DEFAULT_FIELD_SHADING, F as FieldShadingMode, P as PaintOptions, a as RevisionAuthorAssignments, b as RevisionAuthorStyle, c as RevisionStyles, p as paintSemanticLayout } from './semantic-paint-CufpIQFw.js';
+import { S as SemanticLayout } from './semantic-records-Cc1MJrhM.js';
+import './image-resources-eZqD_-vC.js';
+import './tree-op-types-XMVsJSpe.js';
+import './contracts/types.js';
+import './ooxml-package-CdEy9ufK.js';
+import './revision-projection-CILpvv4M.js';
+import './omml-equation-Dd3mBep-.js';
 
 /** A rectangle in page-content coordinates, on a named page. */
 interface OverlayRect {

package/dist/output.js

@@ -1 +1 @@
-export{h as DEFAULT_FIELD_SHADING,j as paintSelectionOverlay,i as paintSemanticLayout}from'./chunk-UE7KTQLK.js';import'./chunk-QTUZFJ4O.js';import'./chunk-WU7PUTVA.js';import'./chunk-42PRWWVE.js';import'./chunk-GPJXQDHC.js';import'./chunk-32HTRN7R.js';
+export{h as DEFAULT_FIELD_SHADING,l as paintSelectionOverlay,j as paintSemanticLayout}from'./chunk-HHFMXG25.js';import'./chunk-Q66ZJFRE.js';import'./chunk-WU7PUTVA.js';import'./chunk-5VC5HGJA.js';import'./chunk-VUJGPCPU.js';

package/dist/{protocol-CD7slqvl.d.cts → protocol-C7ahrdUx.d.ts}

@@ -1,5 +1,5 @@
-import { H as HeaderFooterVariant } from './hf-references-CgEOSw3i.cjs';
-import { N as NoteKind } from './note-nodes-C6DLxlvj.cjs';
+import { H as HeaderFooterVariant } from './hf-references-z5Y4N1ab.js';
+import { N as NoteKind } from './note-nodes-BNCANoGN.js';
 
 /** Alignment as this protocol publishes it. `Mixed`/`Unknown` are read-only answers. */
 type AutomationAlignment = 'Mixed' | 'Unknown' | 'Left' | 'Centered' | 'Right' | 'Justified';
@@ -203,6 +203,8 @@ type AutomationParagraphRef = {
 interface AutomationSearchOptions {
     readonly matchCase?: boolean;
     readonly matchWholeWord?: boolean;
+    /** Text view to search. `allMarkup` preserves the historical behavior. */
+    readonly projection?: AutomationTextProjection;
     /** Not supported; `true` is refused. Punctuation-insensitive matching is not implemented. */
     readonly ignorePunct?: boolean;
     /** Not supported; `true` is refused. Whitespace-insensitive matching is not implemented. */
@@ -212,6 +214,13 @@ interface AutomationSearchOptions {
     /** Tighten the result cap. Clamped to the engine's own limit; never raised past it. */
     readonly limit?: number;
 }
+/**
+ * Which revision text an automation read exposes.
+ *
+ * `allMarkup` includes pending insertions, deletions, and both sides of replacements. `original`
+ * matches Word's Original review view: deletions remain visible and insertions are hidden.
+ */
+type AutomationTextProjection = 'allMarkup' | 'original';
 /** Where a selection lands. `start`/`end` collapse it to one edge of the span. */
 type AutomationSelectionMode = 'select' | 'start' | 'end';
 /**
@@ -256,11 +265,13 @@ type AutomationOperation =
  | {
     readonly op: 'getText';
     readonly target: AutomationHandle;
+    readonly projection?: AutomationTextProjection;
 }
 /** Text between two endpoints, with a carriage return at every paragraph mark crossed. */
  | {
     readonly op: 'getSpanText';
     readonly span: AutomationSpanRef;
+    readonly projection?: AutomationTextProjection;
 }
 /**
  * A paragraph's own identity as the DOCUMENT writes it (`w14:paraId`).
@@ -312,6 +323,17 @@ type AutomationOperation =
     readonly span: AutomationSpanRef;
     readonly text: string;
 }
+/**
+ * Replace a story's complete block structure with fresh plain paragraphs.
+ *
+ * This is the fresh-document operation. It removes tables, content controls, paragraph-level
+ * section marks, comments, and revisions. A body's final page-level section properties survive.
+ */
+ | {
+    readonly op: 'replaceStoryBlocks';
+    readonly body: AutomationHandle;
+    readonly paragraphs: readonly string[];
+}
 /**
  * Insert a paragraph beside another one. Answers the NEW paragraph's handle.
  *
@@ -464,6 +486,7 @@ type AutomationOperation =
  | {
     readonly op: 'getNoteText';
     readonly note: AutomationHandle;
+    readonly projection?: AutomationTextProjection;
 }
 /** Whether a note is a footnote or an endnote. */
  | {
@@ -887,6 +910,7 @@ type AutomationOperation =
  | {
     readonly op: 'getContentControlText';
     readonly contentControl: AutomationHandle;
+    readonly projection?: AutomationTextProjection;
 }
 /** The paragraphs the control holds, in reading order. Empty for an inline control's own. */
  | {
@@ -1010,7 +1034,7 @@ type AutomationOperationKind = AutomationOperation['op'];
 /** Operations that read. They never open a transaction. */
 declare const AUTOMATION_QUERY_OPERATIONS: readonly ["getDocument", "getBody", "getParagraphs", "getSpanParagraphs", "getText", "getSpanText", "getParagraphId", "search", "getFont", "getParagraphFormat", "getStyle", "getSections", "getPageSetup", "getFurniture", "getNotes", "getNoteBody", "getNoteText", "getNoteKind", "getLists", "getListId", "getListById", "getListParagraphs", "getParagraphList", "getListLevel", "getHyperlink", "getBookmarks", "getBookmarkName", "getBookmarkRange", "getComments", "getCommentReplies", "getCommentId", "getCommentAuthor", "getCommentDate", "getCommentText", "getCommentRange", "getCommentResolved", "getRevisions", "getRevisionType", "getRevisionAuthor", "getRevisionDate", "getRevisionRange", "getContentControls", "getContentControlById", "getContentControlsByTag", "getContentControlsByTitle", "getContentControlTag", "getContentControlTitle", "getContentControlFileId", "getContentControlSubtype", "getContentControlLock", "getContentControlIsBound", "getContentControlPlaceholderShown", "getContentControlTemporary", "getContentControlText", "getContentControlParagraphs", "getContentControlRange"];
 /** Operations that write. Every one of these goes through the single transaction path. */
-declare const AUTOMATION_COMMAND_OPERATIONS: readonly ["insertText", "replaceSpan", "insertParagraph", "splitParagraph", "deleteParagraph", "selectSpan", "selectBookmark", "setFont", "setParagraphFormat", "setStyle", "setPageSetup", "deleteNote", "setListLevel", "insertListParagraph", "setHyperlink", "insertComment", "setCommentResolved", "replyToComment", "deleteComment", "acceptRevision", "rejectRevision", "acceptAllRevisions", "rejectAllRevisions", "setContentControlValue", "setContentControlProperties", "deleteContentControl", "insertContentControlText", "insertContentControl", "insertCustomNode"];
+declare const AUTOMATION_COMMAND_OPERATIONS: readonly ["insertText", "replaceSpan", "replaceStoryBlocks", "insertParagraph", "splitParagraph", "deleteParagraph", "selectSpan", "selectBookmark", "setFont", "setParagraphFormat", "setStyle", "setPageSetup", "deleteNote", "setListLevel", "insertListParagraph", "setHyperlink", "insertComment", "setCommentResolved", "replyToComment", "deleteComment", "acceptRevision", "rejectRevision", "acceptAllRevisions", "rejectAllRevisions", "setContentControlValue", "setContentControlProperties", "deleteContentControl", "insertContentControlText", "insertContentControl", "insertCustomNode"];
 /**
  * Commands that commit as a PACKAGE transaction and therefore share a batch with nothing.
  *
@@ -1331,4 +1355,4 @@ interface AutomationHost {
     dispose(): void;
 }
 
-export { type AutomationCapabilities as A, type AutomationParagraphFormatRead as B, type AutomationParagraphFormatWrite as C, type AutomationParagraphRef as D, type AutomationPoint as E, type AutomationSaveResult as F, type AutomationSearchOptions as G, type AutomationSelectionMode as H, type AutomationSpan as I, type AutomationSpanRef as J, type AutomationUnsubscribe as K, type AutomationValue as L, isAutomationCommand as M, isSolitaryAutomationCommand as N, type AutomationHost as a, AUTOMATION_COMMAND_OPERATIONS as b, AUTOMATION_QUERY_OPERATIONS as c, AUTOMATION_SOLITARY_OPERATIONS as d, type AutomationAlignment as e, type AutomationBatchRequest as f, type AutomationBatchResponse as g, type AutomationChangeEvent as h, type AutomationContentControlLock as i, type AutomationContentControlRangeLocation as j, type AutomationContentControlScope as k, type AutomationContentControlSubtype as l, type AutomationContentControlValue as m, type AutomationError as n, type AutomationErrorCode as o, type AutomationFontRead as p, type AutomationFontWrite as q, type AutomationHandle as r, type AutomationHandleRef as s, type AutomationObjectKind as t, type AutomationOperation as u, type AutomationOperationKind as v, type AutomationOperationResult as w, type AutomationPageOrientation as x, type AutomationPageSetupRead as y, type AutomationPageSetupWrite as z };
+export { type AutomationCapabilities as A, type AutomationParagraphFormatRead as B, type AutomationParagraphFormatWrite as C, type AutomationParagraphRef as D, type AutomationPoint as E, type AutomationSaveResult as F, type AutomationSearchOptions as G, type AutomationSelectionMode as H, type AutomationSpan as I, type AutomationSpanRef as J, type AutomationTextProjection as K, type AutomationUnsubscribe as L, type AutomationValue as M, isAutomationCommand as N, isSolitaryAutomationCommand as O, type AutomationHost as a, AUTOMATION_COMMAND_OPERATIONS as b, AUTOMATION_QUERY_OPERATIONS as c, AUTOMATION_SOLITARY_OPERATIONS as d, type AutomationAlignment as e, type AutomationBatchRequest as f, type AutomationBatchResponse as g, type AutomationChangeEvent as h, type AutomationContentControlLock as i, type AutomationContentControlRangeLocation as j, type AutomationContentControlScope as k, type AutomationContentControlSubtype as l, type AutomationContentControlValue as m, type AutomationError as n, type AutomationErrorCode as o, type AutomationFontRead as p, type AutomationFontWrite as q, type AutomationHandle as r, type AutomationHandleRef as s, type AutomationObjectKind as t, type AutomationOperation as u, type AutomationOperationKind as v, type AutomationOperationResult as w, type AutomationPageOrientation as x, type AutomationPageSetupRead as y, type AutomationPageSetupWrite as z };

package/dist/{protocol-DsbfgBwA.d.ts → protocol-UuZOcOp7.d.cts}

@@ -1,5 +1,5 @@
-import { H as HeaderFooterVariant } from './hf-references-BdjsQNE_.js';
-import { N as NoteKind } from './note-nodes-BPSTVDMr.js';
+import { H as HeaderFooterVariant } from './hf-references-Dvk6De4Q.cjs';
+import { N as NoteKind } from './note-nodes-DL-Au22P.cjs';
 
 /** Alignment as this protocol publishes it. `Mixed`/`Unknown` are read-only answers. */
 type AutomationAlignment = 'Mixed' | 'Unknown' | 'Left' | 'Centered' | 'Right' | 'Justified';
@@ -203,6 +203,8 @@ type AutomationParagraphRef = {
 interface AutomationSearchOptions {
     readonly matchCase?: boolean;
     readonly matchWholeWord?: boolean;
+    /** Text view to search. `allMarkup` preserves the historical behavior. */
+    readonly projection?: AutomationTextProjection;
     /** Not supported; `true` is refused. Punctuation-insensitive matching is not implemented. */
     readonly ignorePunct?: boolean;
     /** Not supported; `true` is refused. Whitespace-insensitive matching is not implemented. */
@@ -212,6 +214,13 @@ interface AutomationSearchOptions {
     /** Tighten the result cap. Clamped to the engine's own limit; never raised past it. */
     readonly limit?: number;
 }
+/**
+ * Which revision text an automation read exposes.
+ *
+ * `allMarkup` includes pending insertions, deletions, and both sides of replacements. `original`
+ * matches Word's Original review view: deletions remain visible and insertions are hidden.
+ */
+type AutomationTextProjection = 'allMarkup' | 'original';
 /** Where a selection lands. `start`/`end` collapse it to one edge of the span. */
 type AutomationSelectionMode = 'select' | 'start' | 'end';
 /**
@@ -256,11 +265,13 @@ type AutomationOperation =
  | {
     readonly op: 'getText';
     readonly target: AutomationHandle;
+    readonly projection?: AutomationTextProjection;
 }
 /** Text between two endpoints, with a carriage return at every paragraph mark crossed. */
  | {
     readonly op: 'getSpanText';
     readonly span: AutomationSpanRef;
+    readonly projection?: AutomationTextProjection;
 }
 /**
  * A paragraph's own identity as the DOCUMENT writes it (`w14:paraId`).
@@ -312,6 +323,17 @@ type AutomationOperation =
     readonly span: AutomationSpanRef;
     readonly text: string;
 }
+/**
+ * Replace a story's complete block structure with fresh plain paragraphs.
+ *
+ * This is the fresh-document operation. It removes tables, content controls, paragraph-level
+ * section marks, comments, and revisions. A body's final page-level section properties survive.
+ */
+ | {
+    readonly op: 'replaceStoryBlocks';
+    readonly body: AutomationHandle;
+    readonly paragraphs: readonly string[];
+}
 /**
  * Insert a paragraph beside another one. Answers the NEW paragraph's handle.
  *
@@ -464,6 +486,7 @@ type AutomationOperation =
  | {
     readonly op: 'getNoteText';
     readonly note: AutomationHandle;
+    readonly projection?: AutomationTextProjection;
 }
 /** Whether a note is a footnote or an endnote. */
  | {
@@ -887,6 +910,7 @@ type AutomationOperation =
  | {
     readonly op: 'getContentControlText';
     readonly contentControl: AutomationHandle;
+    readonly projection?: AutomationTextProjection;
 }
 /** The paragraphs the control holds, in reading order. Empty for an inline control's own. */
  | {
@@ -1010,7 +1034,7 @@ type AutomationOperationKind = AutomationOperation['op'];
 /** Operations that read. They never open a transaction. */
 declare const AUTOMATION_QUERY_OPERATIONS: readonly ["getDocument", "getBody", "getParagraphs", "getSpanParagraphs", "getText", "getSpanText", "getParagraphId", "search", "getFont", "getParagraphFormat", "getStyle", "getSections", "getPageSetup", "getFurniture", "getNotes", "getNoteBody", "getNoteText", "getNoteKind", "getLists", "getListId", "getListById", "getListParagraphs", "getParagraphList", "getListLevel", "getHyperlink", "getBookmarks", "getBookmarkName", "getBookmarkRange", "getComments", "getCommentReplies", "getCommentId", "getCommentAuthor", "getCommentDate", "getCommentText", "getCommentRange", "getCommentResolved", "getRevisions", "getRevisionType", "getRevisionAuthor", "getRevisionDate", "getRevisionRange", "getContentControls", "getContentControlById", "getContentControlsByTag", "getContentControlsByTitle", "getContentControlTag", "getContentControlTitle", "getContentControlFileId", "getContentControlSubtype", "getContentControlLock", "getContentControlIsBound", "getContentControlPlaceholderShown", "getContentControlTemporary", "getContentControlText", "getContentControlParagraphs", "getContentControlRange"];
 /** Operations that write. Every one of these goes through the single transaction path. */
-declare const AUTOMATION_COMMAND_OPERATIONS: readonly ["insertText", "replaceSpan", "insertParagraph", "splitParagraph", "deleteParagraph", "selectSpan", "selectBookmark", "setFont", "setParagraphFormat", "setStyle", "setPageSetup", "deleteNote", "setListLevel", "insertListParagraph", "setHyperlink", "insertComment", "setCommentResolved", "replyToComment", "deleteComment", "acceptRevision", "rejectRevision", "acceptAllRevisions", "rejectAllRevisions", "setContentControlValue", "setContentControlProperties", "deleteContentControl", "insertContentControlText", "insertContentControl", "insertCustomNode"];
+declare const AUTOMATION_COMMAND_OPERATIONS: readonly ["insertText", "replaceSpan", "replaceStoryBlocks", "insertParagraph", "splitParagraph", "deleteParagraph", "selectSpan", "selectBookmark", "setFont", "setParagraphFormat", "setStyle", "setPageSetup", "deleteNote", "setListLevel", "insertListParagraph", "setHyperlink", "insertComment", "setCommentResolved", "replyToComment", "deleteComment", "acceptRevision", "rejectRevision", "acceptAllRevisions", "rejectAllRevisions", "setContentControlValue", "setContentControlProperties", "deleteContentControl", "insertContentControlText", "insertContentControl", "insertCustomNode"];
 /**
  * Commands that commit as a PACKAGE transaction and therefore share a batch with nothing.
  *
@@ -1331,4 +1355,4 @@ interface AutomationHost {
     dispose(): void;
 }
 
-export { type AutomationCapabilities as A, type AutomationParagraphFormatRead as B, type AutomationParagraphFormatWrite as C, type AutomationParagraphRef as D, type AutomationPoint as E, type AutomationSaveResult as F, type AutomationSearchOptions as G, type AutomationSelectionMode as H, type AutomationSpan as I, type AutomationSpanRef as J, type AutomationUnsubscribe as K, type AutomationValue as L, isAutomationCommand as M, isSolitaryAutomationCommand as N, type AutomationHost as a, AUTOMATION_COMMAND_OPERATIONS as b, AUTOMATION_QUERY_OPERATIONS as c, AUTOMATION_SOLITARY_OPERATIONS as d, type AutomationAlignment as e, type AutomationBatchRequest as f, type AutomationBatchResponse as g, type AutomationChangeEvent as h, type AutomationContentControlLock as i, type AutomationContentControlRangeLocation as j, type AutomationContentControlScope as k, type AutomationContentControlSubtype as l, type AutomationContentControlValue as m, type AutomationError as n, type AutomationErrorCode as o, type AutomationFontRead as p, type AutomationFontWrite as q, type AutomationHandle as r, type AutomationHandleRef as s, type AutomationObjectKind as t, type AutomationOperation as u, type AutomationOperationKind as v, type AutomationOperationResult as w, type AutomationPageOrientation as x, type AutomationPageSetupRead as y, type AutomationPageSetupWrite as z };
+export { type AutomationCapabilities as A, type AutomationParagraphFormatRead as B, type AutomationParagraphFormatWrite as C, type AutomationParagraphRef as D, type AutomationPoint as E, type AutomationSaveResult as F, type AutomationSearchOptions as G, type AutomationSelectionMode as H, type AutomationSpan as I, type AutomationSpanRef as J, type AutomationTextProjection as K, type AutomationUnsubscribe as L, type AutomationValue as M, isAutomationCommand as N, isSolitaryAutomationCommand as O, type AutomationHost as a, AUTOMATION_COMMAND_OPERATIONS as b, AUTOMATION_QUERY_OPERATIONS as c, AUTOMATION_SOLITARY_OPERATIONS as d, type AutomationAlignment as e, type AutomationBatchRequest as f, type AutomationBatchResponse as g, type AutomationChangeEvent as h, type AutomationContentControlLock as i, type AutomationContentControlRangeLocation as j, type AutomationContentControlScope as k, type AutomationContentControlSubtype as l, type AutomationContentControlValue as m, type AutomationError as n, type AutomationErrorCode as o, type AutomationFontRead as p, type AutomationFontWrite as q, type AutomationHandle as r, type AutomationHandleRef as s, type AutomationObjectKind as t, type AutomationOperation as u, type AutomationOperationKind as v, type AutomationOperationResult as w, type AutomationPageOrientation as x, type AutomationPageSetupRead as y, type AutomationPageSetupWrite as z };