@docx-editor.dev/core 2.9.2 → 2.11.0

package/dist/contracts/editor.d.ts

@@ -1,11 +1,10 @@
 export { ContentControlSummary, DocEdits, DocQueries, DocQueryResults, ParagraphSummary } from './document.js';
-export { C as CommentRecord, c as ReviewCommentItem, d as ReviewCustomItem, a as ReviewItem, e as ReviewPosition, f as ReviewRange, b as ReviewRevisionItem, g as ReviewRevisionKind } from '../review-items-bdGxFWNA.js';
-export { A as AuthoredNoteNumbering, C as CanResult, q as DocumentChange, r as DocumentEditingMode, t as DocumentHandle, D as DocumentSource, l as Editor, b as EditorCommand, u as EditorCommandShape, w as EditorCommands, x as EditorError, y as EditorEvents, E as EditorFontError, z as EditorFontErrorCode, B as EditorHeaderFooterCommands, G as EditorNoteCommands, H as EditorPosition, J as EditorQueries, K as EditorQuery, L as EditorQueryResults, M as EditorScope, N as EditorSelection, a as EditorSnapshot, F as FontConfiguration, m as FontFaceRequest, j as FontSource, k as FontSourceSubstitution, O as FurnitureVariant, P as HeaderFooterSlotArgs, Q as HeaderFooterState, R as HyperlinkInfo, I as ImageContext, c as ImageCropPercent, U as InteractionAffinity, W as InteractionOutcome, X as InteractionOutcomeCode, Y as NoteKind, _ as NotePropertiesSide, $ as NotePropertiesState, a0 as PageSetup, a1 as ResolvedNoteNumbering, a2 as ReviewActivationOptions, a3 as ReviewCommentPlacement, a4 as ReviewCustomPlacement, a5 as ReviewItemPlacement, a6 as ReviewItemPlacementBase, a7 as ReviewItemQuery, a8 as ReviewRevisionPlacement, S as SelectedImageState, a9 as SemanticIdentity, aa as SemanticTarget, T as TableBorderEdgeTarget, n as TableBorderSpec, o as TableBorderStyle, ab as TableBorderTarget, ac as TableCellVerticalAlignment, ad as TableColumnDividerResizeTarget, ae as TableColumnOccurrenceTarget, p as TableContext, af as TableRightEdgeResizeTarget, ag as TableRowOccurrenceTarget, ah as TextMatch, V as ViewScope, ai as ZoomFitTarget, Z as ZoomMode } from '../editor-Cvd7Geoc.js';
-export { S as SemanticPosition, a as SemanticSelection } from '../semantic-interaction-D-RZ9Ust.js';
+export { C as CommentRecord, c as ReviewCommentItem, d as ReviewCustomItem, a as ReviewItem, e as ReviewPosition, f as ReviewRange, b as ReviewRevisionItem, g as ReviewRevisionKind } from '../review-items-CkYyXhXM.js';
+export { A as AuthoredNoteNumbering, C as CanResult, r as DocumentChange, t as DocumentEditingMode, u as DocumentHandle, D as DocumentSource, l as Editor, b as EditorCommand, w as EditorCommandShape, x as EditorCommands, y as EditorError, z as EditorEvents, E as EditorFontError, B as EditorFontErrorCode, G as EditorFormatPainterCommands, H as EditorHeaderFooterCommands, J as EditorNoteCommands, K as EditorPosition, L as EditorQueries, M as EditorQuery, N as EditorQueryResults, O as EditorScope, P as EditorSelection, a as EditorSnapshot, F as FontConfiguration, n as FontFaceRequest, j as FontSource, k as FontSourceSubstitution, Q as FormatPainterLevel, R as FormatPainterMode, m as FormatPainterSurfaceState, U as FurnitureVariant, W as HeaderFooterSlotArgs, X as HeaderFooterState, Y as HyperlinkInfo, I as ImageContext, c as ImageCropPercent, _ as InteractionAffinity, $ as InteractionOutcome, a0 as InteractionOutcomeCode, a1 as NoteKind, a2 as NotePropertiesSide, a3 as NotePropertiesState, a4 as PageSetup, a5 as ResolvedNoteNumbering, a6 as ReviewActivationOptions, a7 as ReviewCommentPlacement, a8 as ReviewCustomPlacement, a9 as ReviewItemPlacement, aa as ReviewItemPlacementBase, ab as ReviewItemQuery, ac as ReviewRevisionPlacement, S as SelectedImageState, ad as SemanticIdentity, ae as SemanticTarget, T as TableBorderEdgeTarget, o as TableBorderSpec, p as TableBorderStyle, af as TableBorderTarget, ag as TableCellVerticalAlignment, ah as TableColumnDividerResizeTarget, ai as TableColumnOccurrenceTarget, q as TableContext, aj as TableRightEdgeResizeTarget, ak as TableRowOccurrenceTarget, al as TextMatch, V as ViewScope, am as ZoomFitTarget, Z as ZoomMode } from '../editor-BogcVHXk.js';
+export { S as SemanticPosition, a as SemanticSelection } from '../semantic-interaction-COyhZ9WH.js';
+export { z as DrawingHorizontalReferenceFrame, D as DrawingKind, w as DrawingLocks, v as DrawingPositionInput, A as DrawingVerticalReferenceFrame, x as ImageResourceState, u as ImageWrapTarget, P as PreservedImageMime, t as RenderableImageMime, R as RevisionAddress, y as SupportedImageMime, V as ValidatedImageBytesHandle, B as VectorImageMime } from '../tree-op-types-DnzAOnc9.js';
 export { Block, ColorValue, ContainerRef, ContentControl, ContentControlFilter, ContentControlType, DocAnchor, DocAnchorRange, DocComment, DocLocation, DocRange, DocTarget, DocumentBody, DocxDocument, DocxDocumentJSON, ExecErrorCode, ExecResult, Extent, FontDefinition, HeaderFooterSet, IndentFormatting, InsertableContentControlType, NumberingRef, PageMargins, Paragraph, ParagraphDisagreements, ParagraphFlags, ParagraphFormatCommand, ParagraphTabStop, Point, Rect, Revision, RevisionType, Run, RunFormatting, Section, SectionProperties, SelectionPin, StyleDefinition, StyleDefinitions, Table, TableCell, TableRow, Theme, ThemeColorScheme, Unsubscribe, Watermark } from './types.js';
-export { f as DrawingHorizontalReferenceFrame, c as DrawingKind, e as DrawingLocks, d as DrawingPositionInput, g as DrawingVerticalReferenceFrame, b as ImageWrapTarget, R as RevisionAddress } from '../tree-op-types-CnRb7AYo.js';
-export { I as ImageResourceState, P as PreservedImageMime, R as RenderableImageMime, S as SupportedImageMime, V as ValidatedImageBytesHandle, a as VectorImageMime } from '../image-resources-BgA9EQxY.js';
-import '../ooxml-package-CdEy9ufK.js';
-import '../semantic-records-DCt-ZwKU.js';
-import '../revision-projection-CILpvv4M.js';
-import '../omml-equation-Dd3mBep-.js';
+import '../failure-BnGjoXf0.js';
+import '../semantic-records-9xhwbJ23.js';
+import '../revision-projection-Ae2CWa8E.js';
+import '../omml-equation-Ciq5rgb7.js';

package/dist/contracts/editor.js

@@ -1 +1 @@
-export{a as EditorFontError}from'../chunk-PSZH2VXP.js';
+export{a as EditorFontError}from'../chunk-GOEBQ26R.js';

package/dist/contracts/interaction.d.cts

@@ -1,11 +1,10 @@
-export { M as EditorScope, U as InteractionAffinity, W as InteractionOutcome, X as InteractionOutcomeCode, a9 as SemanticIdentity, aa as SemanticTarget, V as ViewScope } from '../editor-cAEf1uXW.cjs';
+export { O as EditorScope, _ as InteractionAffinity, $ as InteractionOutcome, a0 as InteractionOutcomeCode, ad as SemanticIdentity, ae as SemanticTarget, V as ViewScope } from '../editor-C8edZgy5.cjs';
 import './document.cjs';
 import './types.cjs';
-import '../review-items-B8tffIXj.cjs';
-import '../ooxml-package-CdEy9ufK.cjs';
-import '../tree-op-types-D1vNJ7XC.cjs';
-import '../semantic-interaction-BfWDD_0V.cjs';
-import '../semantic-records-DadVT_E1.cjs';
-import '../image-resources-BiA-IXgo.cjs';
-import '../revision-projection-Cc4wz30g.cjs';
-import '../omml-equation-BD-LsmWE.cjs';
+import '../review-items-BdeLNRi2.cjs';
+import '../tree-op-types-BPyXNxyL.cjs';
+import '../semantic-interaction-Cs2jErnt.cjs';
+import '../semantic-records-5AOQJmLX.cjs';
+import '../revision-projection-C2S8PSQm.cjs';
+import '../omml-equation-CqQOt_dD.cjs';
+import '../failure-BnGjoXf0.cjs';

package/dist/contracts/interaction.d.ts

@@ -1,11 +1,10 @@
-export { M as EditorScope, U as InteractionAffinity, W as InteractionOutcome, X as InteractionOutcomeCode, a9 as SemanticIdentity, aa as SemanticTarget, V as ViewScope } from '../editor-Cvd7Geoc.js';
+export { O as EditorScope, _ as InteractionAffinity, $ as InteractionOutcome, a0 as InteractionOutcomeCode, ad as SemanticIdentity, ae as SemanticTarget, V as ViewScope } from '../editor-BogcVHXk.js';
 import './document.js';
 import './types.js';
-import '../review-items-bdGxFWNA.js';
-import '../ooxml-package-CdEy9ufK.js';
-import '../tree-op-types-CnRb7AYo.js';
-import '../semantic-interaction-D-RZ9Ust.js';
-import '../semantic-records-DCt-ZwKU.js';
-import '../image-resources-BgA9EQxY.js';
-import '../revision-projection-CILpvv4M.js';
-import '../omml-equation-Dd3mBep-.js';
+import '../review-items-CkYyXhXM.js';
+import '../tree-op-types-DnzAOnc9.js';
+import '../semantic-interaction-COyhZ9WH.js';
+import '../semantic-records-9xhwbJ23.js';
+import '../revision-projection-Ae2CWa8E.js';
+import '../omml-equation-Ciq5rgb7.js';
+import '../failure-BnGjoXf0.js';

package/dist/contracts/modules.cjs

@@ -1 +1 @@
-'use strict';var chunk7VQ7YLW3_cjs=require('../chunk-7VQ7YLW3.cjs');Object.defineProperty(exports,"resolveEditorModules",{enumerable:true,get:function(){return chunk7VQ7YLW3_cjs.a}});
+'use strict';var chunkZKWRCLT2_cjs=require('../chunk-ZKWRCLT2.cjs');Object.defineProperty(exports,"resolveEditorModules",{enumerable:true,get:function(){return chunkZKWRCLT2_cjs.a}});

package/dist/contracts/modules.d.cts

@@ -1,9 +1,14 @@
-import { O as OoxmlPart } from '../ooxml-package-CdEy9ufK.cjs';
-export { R as RevisionAddress } from '../tree-op-types-D1vNJ7XC.cjs';
-import { R as ReviewModelInput, a as ReviewItem, b as ReviewRevisionItem } from '../review-items-B8tffIXj.cjs';
-export { C as CommentRecord, c as ReviewCommentItem, d as ReviewCustomItem, e as ReviewPosition, f as ReviewRange, g as ReviewRevisionKind } from '../review-items-B8tffIXj.cjs';
-import { R as RevisionDisplayMode } from '../revision-projection-Cc4wz30g.cjs';
+import { O as OoxmlPart } from '../tree-op-types-BPyXNxyL.cjs';
+export { R as RevisionAddress } from '../tree-op-types-BPyXNxyL.cjs';
+import { R as ReviewModelInput, a as ReviewItem, b as ReviewRevisionItem } from '../review-items-BdeLNRi2.cjs';
+export { C as CommentRecord, c as ReviewCommentItem, d as ReviewCustomItem, e as ReviewPosition, f as ReviewRange, g as ReviewRevisionKind } from '../review-items-BdeLNRi2.cjs';
+import { CollaborationModuleContribution } from '../collaboration.cjs';
+import { R as RevisionDisplayMode } from '../revision-projection-C2S8PSQm.cjs';
 import './types.cjs';
+import '../tree-package-fragment-BjZ3RWAS.cjs';
+import '../tree-store-DfZi7FqY.cjs';
+import '../collaboration/replication.cjs';
+import '../failure-BnGjoXf0.cjs';
 
 /**
  * `@docx-editor.dev/core/contracts/modules` — the `EditorModule` seam.
@@ -59,6 +64,7 @@ interface ReviewModuleContribution {
      */
     readonly revisionItemsOfParagraph: (part: OoxmlPart, paragraphId: string) => readonly ReviewRevisionItem[];
 }
+
 /**
  * One registered capability module. Registration is construction-time
  * (`createDocxEditor({ modules })`) and immutable for the instance's lifetime.
@@ -70,6 +76,11 @@ interface EditorModule {
     readonly id: string;
     /** Review capability: queue derivation, commands gate, display modes. */
     readonly review?: ReviewModuleContribution;
+    /**
+     * Collaboration replica. Absent, the editor stays single-user: local undo
+     * stays the authority, and `snapshot().collaborationStatus` is `'inactive'`.
+     */
+    readonly collaboration?: CollaborationModuleContribution;
     /**
      * Custom inline node definitions. Reserved: the definition shape lands with
      * the custom-nodes lane; the registry carries them opaquely until then.
@@ -101,11 +112,12 @@ interface EditorModule {
 }
 /**
  * The resolved registry the editor instance holds: at most one review
- * contribution (first registration wins), all custom node definitions in
- * registration order.
+ * contribution and at most one collaboration contribution (first registration
+ * wins for each), all custom node definitions in registration order.
  */
 interface EditorModuleRegistry {
     readonly review: ReviewModuleContribution | null;
+    readonly collaboration: CollaborationModuleContribution | null;
     readonly customNodes: readonly unknown[];
     /** Every claimed payload namespace, deduplicated, in registration order. */
     readonly customNodePayloadNamespaces: readonly string[];
@@ -115,4 +127,4 @@ interface EditorModuleRegistry {
 /** Resolve construction-time modules into the registry the instance dispatches over. */
 declare function resolveEditorModules(modules: readonly EditorModule[] | undefined): EditorModuleRegistry;
 
-export { type CollectReviewItems, type EditorModule, type EditorModuleRegistry, OoxmlPart, ReviewItem, ReviewModelInput, type ReviewModuleContribution, ReviewRevisionItem, RevisionDisplayMode, resolveEditorModules };
+export { CollaborationModuleContribution, type CollectReviewItems, type EditorModule, type EditorModuleRegistry, OoxmlPart, ReviewItem, ReviewModelInput, type ReviewModuleContribution, ReviewRevisionItem, RevisionDisplayMode, resolveEditorModules };

package/dist/contracts/modules.d.ts

@@ -1,9 +1,14 @@
-import { O as OoxmlPart } from '../ooxml-package-CdEy9ufK.js';
-export { R as RevisionAddress } from '../tree-op-types-CnRb7AYo.js';
-import { R as ReviewModelInput, a as ReviewItem, b as ReviewRevisionItem } from '../review-items-bdGxFWNA.js';
-export { C as CommentRecord, c as ReviewCommentItem, d as ReviewCustomItem, e as ReviewPosition, f as ReviewRange, g as ReviewRevisionKind } from '../review-items-bdGxFWNA.js';
-import { R as RevisionDisplayMode } from '../revision-projection-CILpvv4M.js';
+import { O as OoxmlPart } from '../tree-op-types-DnzAOnc9.js';
+export { R as RevisionAddress } from '../tree-op-types-DnzAOnc9.js';
+import { R as ReviewModelInput, a as ReviewItem, b as ReviewRevisionItem } from '../review-items-CkYyXhXM.js';
+export { C as CommentRecord, c as ReviewCommentItem, d as ReviewCustomItem, e as ReviewPosition, f as ReviewRange, g as ReviewRevisionKind } from '../review-items-CkYyXhXM.js';
+import { CollaborationModuleContribution } from '../collaboration.js';
+import { R as RevisionDisplayMode } from '../revision-projection-Ae2CWa8E.js';
 import './types.js';
+import '../tree-package-fragment-CDER0G3B.js';
+import '../tree-store-CNZ3O83s.js';
+import '../collaboration/replication.js';
+import '../failure-BnGjoXf0.js';
 
 /**
  * `@docx-editor.dev/core/contracts/modules` — the `EditorModule` seam.
@@ -59,6 +64,7 @@ interface ReviewModuleContribution {
      */
     readonly revisionItemsOfParagraph: (part: OoxmlPart, paragraphId: string) => readonly ReviewRevisionItem[];
 }
+
 /**
  * One registered capability module. Registration is construction-time
  * (`createDocxEditor({ modules })`) and immutable for the instance's lifetime.
@@ -70,6 +76,11 @@ interface EditorModule {
     readonly id: string;
     /** Review capability: queue derivation, commands gate, display modes. */
     readonly review?: ReviewModuleContribution;
+    /**
+     * Collaboration replica. Absent, the editor stays single-user: local undo
+     * stays the authority, and `snapshot().collaborationStatus` is `'inactive'`.
+     */
+    readonly collaboration?: CollaborationModuleContribution;
     /**
      * Custom inline node definitions. Reserved: the definition shape lands with
      * the custom-nodes lane; the registry carries them opaquely until then.
@@ -101,11 +112,12 @@ interface EditorModule {
 }
 /**
  * The resolved registry the editor instance holds: at most one review
- * contribution (first registration wins), all custom node definitions in
- * registration order.
+ * contribution and at most one collaboration contribution (first registration
+ * wins for each), all custom node definitions in registration order.
  */
 interface EditorModuleRegistry {
     readonly review: ReviewModuleContribution | null;
+    readonly collaboration: CollaborationModuleContribution | null;
     readonly customNodes: readonly unknown[];
     /** Every claimed payload namespace, deduplicated, in registration order. */
     readonly customNodePayloadNamespaces: readonly string[];
@@ -115,4 +127,4 @@ interface EditorModuleRegistry {
 /** Resolve construction-time modules into the registry the instance dispatches over. */
 declare function resolveEditorModules(modules: readonly EditorModule[] | undefined): EditorModuleRegistry;
 
-export { type CollectReviewItems, type EditorModule, type EditorModuleRegistry, OoxmlPart, ReviewItem, ReviewModelInput, type ReviewModuleContribution, ReviewRevisionItem, RevisionDisplayMode, resolveEditorModules };
+export { CollaborationModuleContribution, type CollectReviewItems, type EditorModule, type EditorModuleRegistry, OoxmlPart, ReviewItem, ReviewModelInput, type ReviewModuleContribution, ReviewRevisionItem, RevisionDisplayMode, resolveEditorModules };

package/dist/contracts/modules.js

@@ -1 +1 @@
-export{a as resolveEditorModules}from'../chunk-GQQOL4PV.js';
+export{a as resolveEditorModules}from'../chunk-D5EHDHYV.js';

package/dist/custom-node-writes-CwkYRw3V.d.cts

@@ -0,0 +1,310 @@
+import { b as OoxmlPackage, O as OoxmlPart, a as OoxmlNode, r as TreeOpRejection } from './tree-op-types-BPyXNxyL.cjs';
+import { T as TreeModelChange, a as TreeDocumentStore } from './tree-store-DfZi7FqY.cjs';
+
+/** Which of a family's four faces an embedded font relationship supplies. */
+type FontStyleKey = 'regular' | 'bold' | 'italic' | 'boldItalic';
+/**
+ * One font whose bytes travel inside the package.
+ *
+ * The family name is the DOCUMENT's and is not validated — it is attacker-controlled, so it is
+ * escaped into CSS and never registered globally on `document.fonts`, where it would shadow the
+ * host application's own fonts.
+ */
+interface EmbeddedFont {
+    /** The family as the document names it. Not validated against anything. */
+    readonly family: string;
+    readonly style: FontStyleKey;
+    /** Deobfuscated bytes, ready to be offered to a font validator. */
+    readonly bytes: Uint8Array;
+    /** The part they came from, for diagnostics. */
+    readonly partName: string;
+}
+/**
+ * Undo Word's embedded-font obfuscation (ECMA-376 Part 4 §2.8.1).
+ *
+ * The key is the `w:fontKey` GUID's 16 bytes in REVERSED order — not the per-group
+ * little-endian reading a GUID usually gets. It is XORed over the first 32 bytes of the
+ * part, applied twice. Getting the order wrong produces a font that looks corrupt rather
+ * than obfuscated, which is indistinguishable from a damaged file at the point it fails.
+ *
+ * Pure XOR, so the same operation obfuscates and deobfuscates.
+ */
+declare function deobfuscateFont(bytes: Uint8Array, fontKey: string): Uint8Array | null;
+/** Limits and instrumentation for reading embedded fonts out of a package. */
+interface ReadEmbeddedFontsOptions {
+    /** Refuse a font part larger than this. Defaults to 16 MB. */
+    readonly maxFontBytes?: number;
+    /** Refuse more than this many fonts. Defaults to 64. */
+    readonly maxFonts?: number;
+}
+/**
+ * Every font the package embeds, deobfuscated.
+ *
+ * Silently skips anything malformed rather than rejecting the document: a broken font table
+ * is a reason to fall back to substitution, never a reason to refuse to open the file.
+ */
+declare function readEmbeddedFonts(pkg: OoxmlPackage, fontTable: OoxmlPart | undefined, options?: ReadEmbeddedFontsOptions): EmbeddedFont[];
+
+/** The two list kinds a toolbar offers. */
+type ListKind = 'bullet' | 'ordered';
+interface EnsuredListDefinition {
+    readonly pkg: OoxmlPackage;
+    /** The `w:numId` a paragraph's `w:numPr` should name. */
+    readonly numId: string;
+}
+/**
+ * Find or create a list definition of `kind`, returning the package that holds it.
+ *
+ * An existing abstract definition of the same kind is reused, but every disconnected list
+ * gets a fresh `w:num` instance. Counters belong to `w:num`, so reusing that instance would
+ * continue an earlier list. Returns null only when the part cannot be built at all.
+ */
+declare function ensureListDefinition(pkg: OoxmlPackage, kind: ListKind): EnsuredListDefinition | null;
+/**
+ * Declare `level` in the definition `numId` names, with Word's default format for that
+ * level, or refuse.
+ *
+ * Word never greys Increase Indent out on a list item: demoting past the deepest level a
+ * `w:abstractNum` declares makes Word DEFINE the level, cycling its stock bullets
+ * (Symbol •, Courier `o`, Wingdings ▪) or number formats (decimal, lowerLetter,
+ * lowerRoman) by depth. This is that write. An already-declared level returns the package
+ * unchanged, so callers may ask first and act second without a second lookup.
+ *
+ * A delegating definition (`w:numStyleLink`, 17.9.21) is refused: its levels live on the
+ * linked style's definition, and a `w:lvl` grafted here would be shadowed the moment the
+ * link resolves.
+ */
+declare function ensureNumberingLevel(pkg: OoxmlPackage, numId: string, level: number, kind: ListKind): OoxmlPackage | null;
+
+/** One bookmark's name and the range its marker pair currently encloses. */
+interface BookmarkAnchor {
+    readonly name: string;
+    /** Canonical node id of the paragraph the marker sits in. */
+    readonly paragraphId: string;
+    /** UTF-16 offset within that paragraph, in `paragraphTextOf`'s vocabulary. */
+    readonly offset: number;
+}
+/** Bookmarks by name. A name the document declares twice resolves to the first in order. */
+type BookmarkIndex = ReadonlyMap<string, BookmarkAnchor>;
+/**
+ * Build `name -> position` for every bookmark start in a part, in document order.
+ *
+ * FIRST IN DOCUMENT ORDER WINS on a duplicate name. Word treats a repeated bookmark name as
+ * the same bookmark and jumps to the first, and the alternative — last-wins — makes a jump
+ * target move when an edit far away happens to duplicate a name.
+ *
+ * The offset is measured the way the ops measure: text of the runs before the marker inside
+ * its own paragraph, hyperlink runs included, so the position a jump places the caret at is a
+ * position `setSelection` accepts.
+ */
+declare function buildBookmarkIndex(part: OoxmlPart): BookmarkIndex;
+
+/** What the document asks for. Every field defaults to "the document said nothing". */
+interface DocumentTrackingSettings {
+    /** `w:trackRevisions` — the document asks for edits to be tracked. */
+    readonly trackRevisions: boolean;
+    /**
+     * `w:documentProtection/@w:edit="trackedChanges"` — tracking may not be turned OFF.
+     *
+     * Advisory. Presenting it as enforcement would be a lie about a file anyone can edit.
+     */
+    readonly restrictedToTrackedChanges: boolean;
+    /** `w:doNotTrackMoves` — write a move as a delete and an insert. */
+    readonly doNotTrackMoves: boolean;
+    /** `w:doNotTrackFormatting` — apply formatting without recording a `w:rPrChange`. */
+    readonly doNotTrackFormatting: boolean;
+}
+/** The frozen "nothing is tracked" settings — what a document with no `w:trackChanges` gets. */
+declare const NO_TRACKING_SETTINGS: DocumentTrackingSettings;
+/** Read the tracking settings from a `settings.xml` root, or the defaults when it has none. */
+declare function readTrackingSettings(settingsRoot: OoxmlNode | null | undefined): DocumentTrackingSettings;
+
+/**
+ * The payload half of an insert: which store, which node, and what it holds.
+ *
+ * `data` is opaque here. The lane that owns a schema is the one that declared it, and a store
+ * that parsed payloads would be a second opinion about what a host's node means.
+ */
+interface CustomNodePayloadWrite {
+    /** Namespace of the store's root element — what identifies one store among several. */
+    readonly namespaceUri: string;
+    /** Local name of that root. An NCName; anything else refuses. */
+    readonly rootLocalName: string;
+    /** The node's own id, which the binding's xpath quotes. */
+    readonly nodeId: string;
+    /** The text the control shows. Word paints this from the store, so an empty one is an empty chip. */
+    readonly label: string;
+    /** The payload, serialized. JSON by convention; never parsed here. */
+    readonly data: string;
+}
+/** Where the control goes, what it says, and the payload it carries. */
+interface InsertCustomNodeWrite {
+    readonly paragraphId: string;
+    readonly offset: number;
+    /**
+     * Wrap rather than insert: the text from `offset` to here is removed first.
+     *
+     * The node's label REPLACES the words it covered, because that is what turning a stretch of a
+     * sentence into a citation means. Removed inside the same transaction, so a refused insert
+     * leaves the text where it was.
+     */
+    readonly replaceUntil?: number;
+    /**
+     * Rewrite an existing control: it and the payload it bound go first, in this transaction.
+     *
+     * An UPDATE is remove-and-reinsert, because the tag codec has no in-place rewrite and
+     * pretending it did would put a second write path beside this one. Doing both halves here is
+     * what keeps it one undo step, and what stops an update from leaving a label and a payload
+     * that disagree.
+     */
+    readonly replaceControlId?: string;
+    readonly tag: string;
+    readonly text: string;
+    readonly alias?: string;
+    /** Defaults to none. Callers that want Word's own "cannot type into it" pass `contentLocked`. */
+    readonly lock?: 'sdtLocked' | 'sdtContentLocked' | 'contentLocked';
+    /** Omitted authors an ordinary tagged control with no store — the pre-payload behaviour. */
+    readonly payload?: CustomNodePayloadWrite;
+}
+/**
+ * Why a payload write was refused.
+ *
+ * The tree rejections pass through unchanged, so a locked paragraph refuses a bound insert for
+ * the same named reason it refuses a plain one. The three added here are the payload's own.
+ */
+type CustomNodeWriteRejection = TreeOpRejection
+/** The id, root name or namespace cannot be spelled in an XPath, so no binding could name it. */
+ | 'unaddressable-payload'
+/** The store could not be authored — see `withCustomXmlDataPart` for every way that happens. */
+ | 'store-not-authored'
+/** The payload or the label is past the cap. */
+ | 'payload-too-large';
+type CustomNodeWriteResult = {
+    readonly ok: true;
+    readonly change: TreeModelChange | null;
+    /**
+     * The control this write authored, when it authored one. A rewrite replaces the control
+     * rather than editing it, so the id the caller passed in names nothing afterwards.
+     */
+    readonly nodeId?: string;
+} | {
+    readonly ok: false;
+    readonly reason: CustomNodeWriteRejection;
+    readonly detail?: string;
+};
+/**
+ * The largest payload one node may carry, in UTF-16 code units.
+ *
+ * Same figure as the read side's (`parseCustomNodeData`) and for the same reason: far past any
+ * legitimate chip, far short of anything that hurts. Checked on the WRITE too, so a document
+ * cannot be authored here holding a payload the reader will later refuse to parse.
+ */
+declare const MAX_CUSTOM_NODE_PAYLOAD_LENGTH: number;
+/** The longest label a binding may paint. Word renders it as the control's whole content. */
+declare const MAX_CUSTOM_NODE_LABEL_LENGTH = 4096;
+/**
+ * Insert one custom node, with its payload, as a single transaction.
+ *
+ * Answers the store transaction's own change so the caller can publish it — a payload write is a
+ * package write reaching through a story store, exactly as a comment is, and the coordinator
+ * needs the change to know which paragraphs went dirty.
+ */
+declare function insertCustomNodeWrite(store: TreeDocumentStore, write: InsertCustomNodeWrite, 
+/**
+ * The part the customXml store hangs off, defaulting to the story being written.
+ *
+ * A chip in a header is written against the HEADER store, but Word enumerates the data
+ * store from the main document part — a store authored off a header is one Word never
+ * sees. So the caller passes the main part while the control itself lands in the story.
+ */
+dataOwnerPartName?: string): CustomNodeWriteResult;
+/**
+ * Remove a control and, in the same transaction, the payload it bound.
+ *
+ * The sweep would collect the node eventually — that is what makes deletion in Word survivable —
+ * but "eventually" is the next open, and a document saved in between carries a payload for a
+ * chip that is gone. Doing it here means the ordinary case is exact and the sweep is a backstop.
+ */
+declare function removeCustomNodeWrite(store: TreeDocumentStore, controlNodeId: string): CustomNodeWriteResult;
+/**
+ * What one sweep collected, or why it collected nothing.
+ *
+ * `ok: false` is NOT "the document was already tidy" — that is `ok: true` with an empty
+ * `removed`. It means a store this sweep was asked to tidy refused the rewrite, which a caller
+ * that keeps saving into the same document should know about rather than silently retry forever.
+ */
+type CustomNodeSweepResult = {
+    readonly ok: true;
+    readonly pkg: OoxmlPackage;
+    /** Node ids removed, across every store swept. Empty means there were no orphans. */
+    readonly removed: readonly string[];
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+/**
+ * Drop every payload no control binds, in the stores whose namespaces a host claims.
+ *
+ * ON OPEN, NOT ON SAVE. A chip cut to the clipboard is unbound for as long as it sits there, so a
+ * save mid-cut would destroy the payload the user is about to paste. On open the only unbound
+ * nodes are ones a control genuinely lost — deleted here, or deleted in Word, which is the case
+ * nothing else can collect.
+ *
+ * `namespaces` is the claim, and it is what keeps this off other people's stores: Word's own Cover
+ * Page Properties store rides in most templates, and a sweep that walked every customXml part
+ * would be deleting from it on the strength of a name collision.
+ */
+declare function sweepCustomNodePayloads(pkg: OoxmlPackage, storyPartName: string, namespaces: readonly string[]): CustomNodeSweepResult;
+/** One control's payload, as the store holds it. Both strings are untrusted file input. */
+interface CustomNodePayloadRead {
+    /** The store node's own id. */
+    readonly nodeId: string;
+    /** The text Word paints the control from. */
+    readonly label: string;
+    /** The payload as authored. JSON by convention, unparsed here. */
+    readonly data: string;
+}
+/**
+ * The payload every control in a story binds to, keyed by the CONTROL's canonical node id.
+ *
+ * Keyed by the control rather than by the store node because that is the question a reader
+ * actually has — "what does this chip carry" — and because two stores may each hold a `cx1`.
+ * Resolved here rather than by a capability package: the stores are package parts, and a
+ * derivation that only gets story parts has no way to reach them.
+ *
+ * Every store the story relates to, so a document carrying two definitions' payloads answers
+ * for both without anyone naming a namespace.
+ */
+declare function customNodePayloadsByControl(pkg: OoxmlPackage, storyPartName: string, 
+/**
+ * The part that RELATES the customXml store, when it is not the story's own.
+ *
+ * Two different questions wear one name here: which part holds the CONTROLS, and which part
+ * relates the STORE they bind into. Word only reads a store hung off the main document part,
+ * so {@link writeCustomNode} already takes them separately — this read did not, and answered
+ * with the body's controls whatever story it was asked about. A chip in a header therefore
+ * read as having no payload at all, and an update that meant to keep the existing data
+ * dropped it.
+ */
+dataOwnerPartName?: string): ReadonlyMap<string, CustomNodePayloadRead>;
+/** Every payload one store holds, for a caller resolving a control's `data`. */
+declare function customNodePayloadsOf(pkg: OoxmlPackage, storyPartName: string, namespaceUri: string): ReadonlyMap<string, {
+    readonly label: string;
+    readonly data: string;
+}>;
+/**
+ * What the session answers for a sweep: the ids collected, or the reason none were.
+ *
+ * Narrower than {@link CustomNodeSweepResult}, which also carries the rewritten package — the
+ * session has already installed that, and handing it back would invite a caller to install it
+ * twice.
+ */
+type CustomNodeSweepOutcome = {
+    readonly ok: true;
+    readonly removed: readonly string[];
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+
+export { type BookmarkIndex as B, type CustomNodeWriteResult as C, type DocumentTrackingSettings as D, type EmbeddedFont as E, type FontStyleKey as F, type InsertCustomNodeWrite as I, type ListKind as L, MAX_CUSTOM_NODE_LABEL_LENGTH as M, NO_TRACKING_SETTINGS as N, type ReadEmbeddedFontsOptions as R, type CustomNodeSweepOutcome as a, type BookmarkAnchor as b, type CustomNodePayloadRead as c, type CustomNodePayloadWrite as d, type CustomNodeSweepResult as e, type CustomNodeWriteRejection as f, MAX_CUSTOM_NODE_PAYLOAD_LENGTH as g, buildBookmarkIndex as h, customNodePayloadsByControl as i, customNodePayloadsOf as j, deobfuscateFont as k, ensureListDefinition as l, ensureNumberingLevel as m, insertCustomNodeWrite as n, readTrackingSettings as o, removeCustomNodeWrite as p, readEmbeddedFonts as r, sweepCustomNodePayloads as s };