@eigenpal/cli 0.17.5 → 0.19.0

package/dist/cli.js

@@ -7803,6 +7803,7 @@ var init_ids = __esm(() => {
     FIGURE_CROPS: "builtin/figure-crops",
     TEMPLATE: "builtin/template",
     PDF_EMBEDDER: "builtin/pdf-embedder",
+    CROP_REGIONS: "builtin/crop-regions",
     XLSX_TO_JSON: "builtin/xlsx-to-json",
     JSON_TO_XLSX: "builtin/json-to-xlsx",
     ARCHIVE_LIST: "builtin/archive-list",
@@ -8164,7 +8165,8 @@ var init_parser = __esm(() => {
   ParseUsageSchema = object({
     pageCount: number2(),
     processingTimeMs: number2().optional(),
-    ocrPagesProcessed: number2().int().nonnegative().optional()
+    ocrPagesProcessed: number2().int().nonnegative().optional(),
+    cached: boolean2().optional()
   });
   StructuredDocumentSchema = record(string2(), unknown());
   CoordinateUnitSchema = _enum(["pixel", "inch", "point", "normalized"]);
@@ -8350,7 +8352,8 @@ var init_document_parser = __esm(() => {
     describeFigures: boolean2().optional().describe("Opt-in (default off). After text extraction, detect figure pages with a layout model and caption them with a vision model, appending `<figure>description</figure>` to their text. Skipped for plaintext. The caption vision calls are billed."),
     figureInstructions: string2().optional().describe("Custom instruction for the figure-description pass."),
     languages: array(string2()).optional().describe('OCR language hints (e.g., ["en", "de"])'),
-    outputFormat: ParseOutputFormatSchema.default("markdown").optional().describe(PARSE_OUTPUT_FORMAT_DESCRIPTION)
+    outputFormat: ParseOutputFormatSchema.default("markdown").optional().describe(PARSE_OUTPUT_FORMAT_DESCRIPTION),
+    cache: boolean2().default(false).optional().describe("When true, reuse a prior parse for identical file bytes and parse settings. Skips OCR/vision on cache hit. Stored in tenant blob storage with no automatic expiry (TTL/lifecycle is a follow-up). Default off.")
   }).superRefine(refineNativeParseModeConflicts).superRefine(refineLayoutOutputFormat).prefault({});
 });
 
@@ -53691,6 +53694,7 @@ var init_steps = __esm(() => {
     "transform.merge",
     "transform.template",
     "transform.pdf-embed",
+    "transform.crop-regions",
     "transform.xlsx-to-json",
     "transform.json-to-xlsx",
     "transform.script",
@@ -53839,7 +53843,7 @@ function getStepSchema(stepType) {
 function listStepTypes() {
   return [...STEP_TYPES];
 }
-var OptionalReasoningEffortSchema, AiParseConfigSchema, AiParseOutputSchema, AiFigureCropsConfigSchema, AiFigureCropsFigureSchema, AiFigureCropsOutputSchema, AiExtractConfigSchema, AiExtractOutputSchema, VisionPageRangeSchema, AiVisionConfigSchema, AiVisionOutputSchema, AI_SEARCH_FILES_DEFAULT_MAX_ITERATIONS = 12, AI_SEARCH_FILES_MAX_ITERATIONS = 50, AI_SEARCH_FILES_DEFAULT_MAX_FILES = 50, AI_SEARCH_FILES_MAX_FILES = 200, AI_SEARCH_FILES_MAX_CITATION_EXCERPT_CHARS = 2000, AiSearchFilesConfigSchema, AiSearchFilesCitationSchema, AiSearchFilesOutputSchema, AiSplitConfigSchema, AiSplitSectionSchema, AiSplitOutputSchema, AiSegmentConfigSchema, AiSegmentOutputSchema, AiClassifyConfigSchema, AiClassifyOutputSchema, ClassifyPagesLabelSchema2, AiClassifyPagesConfigSchema, AiClassifyPagesOutputSchema, TransformSetConfigSchema, TransformSetOutputSchema, TransformRemoveConfigSchema, TransformRemoveOutputSchema, TransformCombineConfigSchema, TransformCombineOutputSchema, TransformSplitConfigSchema, TransformSplitOutputSchema, TransformMergeConfigSchema, TransformMergeOutputSchema, TransformTemplateConfigSchema, TransformTemplateOutputSchema, TransformPdfEmbedConfigSchema, TransformPdfEmbedOutputSchema, TransformXlsxToJsonConfigSchema, TransformXlsxToJsonOutputSchema, JsonToXlsxAuthoringRowsSchema, JsonToXlsxSheetConfigSchema, TransformJsonToXlsxConfigSchema, TransformJsonToXlsxOutputSchema, ARCHIVE_LIST_MAX_ENTRIES = 1e4, TransformArchiveListConfigSchema, TransformArchiveListEntrySchema, TransformArchiveListOutputSchema, TransformArchiveExtractConfigSchema, TransformArchiveExtractOutputSchema, TransformScriptConfigSchema, TransformScriptOutputSchema, ParsedDocPageSchema, TransformTextChunkerConfigSchema, TransformTextChunkerOutputSchema, RegexNormalizerSchema, RegexFormatSchema, REGEX_FLAGS, RegexFieldSchema, TransformRegexExtractConfigSchema, TransformRegexExtractOutputSchema, ActionHttpConfigSchema, ActionHttpOutputSchema, ActionInvokeWorkflowConfigSchema, ActionInvokeWorkflowOutputSchema, ActionWebsiteReaderConfigSchema, ActionWebsiteReaderOutputSchema, ACTION_EMAIL_MAX_ATTACHMENTS = 10, ACTION_EMAIL_MAX_ATTACHMENT_BYTES, ACTION_EMAIL_BODY_MAX_BYTES, emailBodyMaxBytes = (value) => new TextEncoder().encode(value).byteLength <= ACTION_EMAIL_BODY_MAX_BYTES, ActionEmailRecipientListSchema, ActionEmailToSchema, ActionEmailOptionalRecipientsSchema, ActionEmailAttachmentSchema, ActionEmailConfigSchema, ActionEmailOutputSchema, ControlIfConfigSchema, ControlIfOutputSchema, ControlSwitchConfigSchema, ControlSwitchOutputSchema, ControlForeachConfigSchema, ControlForeachOutputSchema, ControlParallelMapConfigSchema, ControlParallelMapOutputSchema, ControlParallelConfigSchema, ControlParallelOutputSchema, ControlWaitConfigSchema, ControlWaitOutputSchema, ControlHumanReviewConfigSchema, ControlHumanReviewOutputSchema, ControlFailConfigSchema, ControlFailOutputSchema, STEP_SCHEMAS;
+var OptionalReasoningEffortSchema, AiParseConfigSchema, AiParseOutputSchema, AiFigureCropsConfigSchema, AiFigureCropsFigureSchema, AiFigureCropsOutputSchema, AiExtractConfigSchema, AiExtractOutputSchema, VisionPageRangeSchema, AiVisionConfigSchema, AiVisionOutputSchema, AI_SEARCH_FILES_DEFAULT_MAX_ITERATIONS = 12, AI_SEARCH_FILES_MAX_ITERATIONS = 50, AI_SEARCH_FILES_DEFAULT_MAX_FILES = 50, AI_SEARCH_FILES_MAX_FILES = 200, AI_SEARCH_FILES_MAX_CITATION_EXCERPT_CHARS = 2000, AiSearchFilesConfigSchema, AiSearchFilesCitationSchema, AiSearchFilesOutputSchema, AiSplitConfigSchema, AiSplitSectionSchema, AiSplitOutputSchema, AiSegmentConfigSchema, AiSegmentOutputSchema, AiClassifyConfigSchema, AiClassifyOutputSchema, ClassifyPagesLabelSchema2, AiClassifyPagesConfigSchema, AiClassifyPagesOutputSchema, TransformSetConfigSchema, TransformSetOutputSchema, TransformRemoveConfigSchema, TransformRemoveOutputSchema, TransformCombineConfigSchema, TransformCombineOutputSchema, TransformSplitConfigSchema, TransformSplitOutputSchema, TransformMergeConfigSchema, TransformMergeOutputSchema, TransformTemplateConfigSchema, TransformTemplateOutputSchema, TransformPdfEmbedConfigSchema, TransformPdfEmbedOutputSchema, CropRegionBboxSchema, CropRegionSpecSchema, CropRegionSpecListSchema, CropRegionSpecListResolvedSchema, TransformCropRegionsConfigSchema, TransformCropRegionsCropSchema, TransformCropRegionsOutputSchema, CropRegionsProcessorConfigSchema, TransformXlsxToJsonConfigSchema, TransformXlsxToJsonOutputSchema, JsonToXlsxAuthoringRowsSchema, JsonToXlsxSheetConfigSchema, TransformJsonToXlsxConfigSchema, TransformJsonToXlsxOutputSchema, ARCHIVE_LIST_MAX_ENTRIES = 1e4, TransformArchiveListConfigSchema, TransformArchiveListEntrySchema, TransformArchiveListOutputSchema, TransformArchiveExtractConfigSchema, TransformArchiveExtractOutputSchema, TransformScriptConfigSchema, TransformScriptOutputSchema, ParsedDocPageSchema, TransformTextChunkerConfigSchema, TransformTextChunkerOutputSchema, RegexNormalizerSchema, RegexFormatSchema, REGEX_FLAGS, RegexFieldSchema, TransformRegexExtractConfigSchema, TransformRegexExtractOutputSchema, ActionHttpConfigSchema, ActionHttpOutputSchema, ActionInvokeWorkflowConfigSchema, ActionInvokeWorkflowOutputSchema, ActionWebsiteReaderConfigSchema, ActionWebsiteReaderOutputSchema, ACTION_EMAIL_MAX_ATTACHMENTS = 10, ACTION_EMAIL_MAX_ATTACHMENT_BYTES, ACTION_EMAIL_BODY_MAX_BYTES, emailBodyMaxBytes = (value) => new TextEncoder().encode(value).byteLength <= ACTION_EMAIL_BODY_MAX_BYTES, ActionEmailRecipientListSchema, ActionEmailToSchema, ActionEmailOptionalRecipientsSchema, ActionEmailAttachmentSchema, ActionEmailConfigSchema, ActionEmailOutputSchema, ControlIfConfigSchema, ControlIfOutputSchema, ControlSwitchConfigSchema, ControlSwitchOutputSchema, ControlForeachConfigSchema, ControlForeachOutputSchema, ControlParallelMapConfigSchema, ControlParallelMapOutputSchema, ControlParallelConfigSchema, ControlParallelOutputSchema, ControlWaitConfigSchema, ControlWaitOutputSchema, ControlHumanReviewConfigSchema, ControlHumanReviewOutputSchema, ControlFailConfigSchema, ControlFailOutputSchema, STEP_SCHEMAS;
 var init_step_configs = __esm(() => {
   init_zod();
   init_ai_client();
@@ -53870,7 +53874,8 @@ var init_step_configs = __esm(() => {
     outputFormat: ParseOutputFormatSchema.default("markdown").optional().describe(PARSE_OUTPUT_FORMAT_DESCRIPTION),
     nativeText: boolean2().default(false).optional().describe("Extract native/embedded text from PDFs without OCR/VLM. Faster and uses no credits. Falls back to OCR/VLM if the PDF has no embedded text."),
     describeFigures: boolean2().optional().describe("Opt-in (default off). After text extraction, detect which pages contain figures with an in-worker layout model, then caption those pages with a vision model and append `<figure>description</figure>` to their text — so image-only pages (property photos, signatures, charts) become findable by text-based steps like ai.split. Note: the layout scan runs over all pages, and the caption step and its vision calls are billed. Skipped for plaintext."),
-    figureInstructions: string2().optional().describe('Custom instruction for the figure-description pass, e.g. "Describe each figure; label a handwritten signature as `<figure>signature</figure>` and a stamp as `<figure>stamp</figure>`; for property photos note the room or exterior shown." Applied only when describeFigures runs.')
+    figureInstructions: string2().optional().describe('Custom instruction for the figure-description pass, e.g. "Describe each figure; label a handwritten signature as `<figure>signature</figure>` and a stamp as `<figure>stamp</figure>`; for property photos note the room or exterior shown." Applied only when describeFigures runs.'),
+    cache: boolean2().default(false).optional().describe("When true, reuse a prior parse for identical file bytes and parse settings. Skips OCR/vision on cache hit. Stored in tenant blob storage with no automatic expiry (TTL/lifecycle is a follow-up). Default off.")
   }).superRefine(refineNativeParseModeConflicts).superRefine(refineLayoutOutputFormat);
   AiParseOutputSchema = ParseResultSchema.omit({ rawResponse: true });
   AiFigureCropsConfigSchema = object({
@@ -54220,6 +54225,55 @@ var init_step_configs = __esm(() => {
     wordCount: number2().describe("Number of words embedded"),
     text: string2().describe("Extracted text from the document")
   });
+  CropRegionBboxSchema = tuple([
+    number2().min(0).max(1),
+    number2().min(0).max(1),
+    number2().min(0).max(1),
+    number2().min(0).max(1)
+  ]);
+  CropRegionSpecSchema = object({
+    id: string2().optional().describe("Stable region id used in output and crop filenames (defaults to region-N)"),
+    pageIndex: number2().int().min(0).default(0).optional().describe("0-based page index to crop from (images use page 0)"),
+    bbox: CropRegionBboxSchema.describe("Normalized axis-aligned bbox [x0, y0, x1, y1]")
+  });
+  CropRegionSpecListSchema = array(CropRegionSpecSchema).min(1).describe("Regions to crop from the rendered document");
+  CropRegionSpecListResolvedSchema = array(CropRegionSpecSchema).describe("Regions to crop from the rendered document (may be empty)");
+  TransformCropRegionsConfigSchema = object({
+    input: string2().describe("File input — template expression e.g. {{ input.document }} resolving to a PDF or image"),
+    regions: union([
+      string2().min(1).describe("Template expression resolving to a region array, e.g. {{ steps.list-figures.output.regions }}"),
+      CropRegionSpecListSchema
+    ]).describe("Regions to crop — pageIndex + normalized bbox per entry"),
+    renderScale: number2().min(0.5).max(4).default(1).optional().describe("Scale factor when rasterizing PDF pages before cropping"),
+    imageQuality: number2().int().min(1).max(100).default(85).optional().describe("JPEG quality for cropped outputs"),
+    paddingFrac: number2().min(0).max(0.2).default(0.02).optional().describe("Padding around each bbox as a fraction of the shorter page edge"),
+    minCropPx: number2().int().min(1).default(8).optional().describe("Minimum crop width/height in pixels; smaller crops fall back to the full page"),
+    maxRegions: number2().int().min(1).max(200).default(100).optional().describe("Maximum regions processed per invocation")
+  });
+  TransformCropRegionsCropSchema = object({
+    id: string2().describe("Region id (from input or auto-generated)"),
+    pageIndex: number2().int().min(0).describe("0-based page index the crop was taken from"),
+    bbox: CropRegionBboxSchema.describe("Normalized bbox that was cropped"),
+    width: number2().int().min(1).describe("Crop width in pixels"),
+    height: number2().int().min(1).describe("Crop height in pixels"),
+    fileId: string2().describe("Run output file id for the JPEG crop"),
+    filename: string2().describe("Stored crop filename"),
+    mimeType: literal("image/jpeg").describe("Always image/jpeg"),
+    size: number2().int().min(0).describe("JPEG size in bytes")
+  });
+  TransformCropRegionsOutputSchema = object({
+    regions: array(TransformCropRegionsCropSchema).describe("Successfully cropped regions"),
+    skipped: number2().int().min(0).optional().describe("Regions skipped (invalid bbox or missing page)")
+  });
+  CropRegionsProcessorConfigSchema = TransformCropRegionsConfigSchema.omit({
+    input: true,
+    regions: true
+  }).extend({
+    regions: union([
+      string2().min(1).describe("Template expression resolving to a region array, e.g. {{ steps.list-figures.output.regions }}"),
+      CropRegionSpecListResolvedSchema
+    ]).describe("Regions to crop — may be empty when upstream scripts find no figures")
+  });
   TransformXlsxToJsonConfigSchema = object({
     input: string2().min(1, "Input is required").describe("File input - template expression e.g. {{input.document}} resolving to a scoped $file artifact at runtime")
   }).extend(XlsxToJsonConfigSchema.shape).extend({
@@ -54698,6 +54752,15 @@ var init_step_configs = __esm(() => {
       outputSchema: TransformPdfEmbedOutputSchema,
       configInWith: true
     },
+    "transform.crop-regions": {
+      type: "transform.crop-regions",
+      category: "transform",
+      name: "Crop Regions",
+      description: "Render a PDF or image and crop normalized bounding boxes into JPEG run output artifacts. Pair with transform.script (bbox lists from ai.parse layout) and ai.extract or ai.vision for captions.",
+      configSchema: TransformCropRegionsConfigSchema,
+      outputSchema: TransformCropRegionsOutputSchema,
+      configInWith: true
+    },
     "transform.xlsx-to-json": {
       type: "transform.xlsx-to-json",
       category: "transform",
@@ -206317,7 +206380,7 @@ import { fileURLToPath as fileURLToPath8 } from "url";
 // package.json
 var package_default = {
   name: "@eigenpal/cli",
-  version: "0.17.5",
+  version: "0.19.0",
   description: "Eigenpal CLI — author and run document workflows from your terminal. Agent-ready.",
   keywords: [
     "eigenpal",
@@ -211955,12 +212018,22 @@ function inspectXlsxTemplatePlaceholders(buffer) {
 var import_pizzip2 = __toESM(require_js(), 1);
 
 // ../common/src/office-zip-safety.ts
+import { inflateRawSync } from "node:zlib";
 var MAX_TEMPLATE_INFLATED_BYTES = 100 * 1024 * 1024;
 var MAX_TEMPLATE_ZIP_ENTRIES = 1e4;
-var MAX_TEMPLATE_COMPRESSION_RATIO = 200;
+var MAX_TEMPLATE_COMPRESSION_RATIO = 1100;
+var MAX_TEMPLATE_DEFLATE_EXPANSION_SLACK_BYTES = 1024;
+function maxPlausibleDeflatedSize(inflated) {
+  return inflated * 2 + MAX_TEMPLATE_DEFLATE_EXPANSION_SLACK_BYTES;
+}
+var VERIFY_CHUNK_CAP_BYTES = 256 * 1024;
+var VERIFY_CHUNK_FLOOR_BYTES = 16 * 1024;
 var EOCD_SIGNATURE = 101010256;
 var CENTRAL_SIGNATURE = 33639248;
 var LOCAL_FILE_SIGNATURE = 67324752;
+var METHOD_STORE = 0;
+var METHOD_DEFLATE = 8;
+var FLAG_ENCRYPTED = 1;
 function isOfficeZipContainer(bytes) {
   return bytes.length >= 4 && bytes.readUInt32LE(0) === LOCAL_FILE_SIGNATURE;
 }
@@ -211973,7 +212046,93 @@ function assertSafeZipPath(path) {
     throw new Error("Office ZIP entry path is not safe");
   }
 }
-function inspectSafeOfficeZip(bytes) {
+function locateEntryPayload(bytes, compressed, localOffset) {
+  if (localOffset + 30 > bytes.length || bytes.readUInt32LE(localOffset) !== LOCAL_FILE_SIGNATURE) {
+    throw new Error("Invalid Office ZIP local file header");
+  }
+  const localNameLength = bytes.readUInt16LE(localOffset + 26);
+  const localExtraLength = bytes.readUInt16LE(localOffset + 28);
+  const dataStart = localOffset + 30 + localNameLength + localExtraLength;
+  const dataEnd = dataStart + compressed;
+  if (dataEnd > bytes.length) {
+    throw new Error("Invalid Office ZIP local file header");
+  }
+  return bytes.subarray(dataStart, dataEnd);
+}
+function assertDeclaredSizeIsReal(bytes, entry, localOffset) {
+  const payload = locateEntryPayload(bytes, entry.compressed, localOffset);
+  if (entry.method === METHOD_STORE) {
+    if (entry.compressed !== entry.inflated) {
+      throw new Error("Office ZIP entry size does not match its stored payload");
+    }
+    return;
+  }
+  if (entry.compressed === 0 && entry.inflated === 0)
+    return;
+  try {
+    const inflated = inflateRawSync(payload, {
+      maxOutputLength: Math.max(entry.inflated, 1),
+      chunkSize: verifyChunkSize(entry)
+    });
+    if (inflated.length !== entry.inflated) {
+      throw new Error("Office ZIP entry size does not match its compressed payload");
+    }
+  } catch (error) {
+    if (error instanceof Error && error.message.includes("does not match"))
+      throw error;
+    throw new Error("Office ZIP entry inflates beyond its declared uncompressed size");
+  }
+}
+function verifyChunkSize(entry) {
+  const wanted = Math.min(entry.inflated + 1, VERIFY_CHUNK_CAP_BYTES);
+  return Math.max(wanted, VERIFY_CHUNK_FLOOR_BYTES);
+}
+var ZIP64_EXTRA_HEADER_ID = 1;
+var ZIP32_SENTINEL = 4294967295;
+var ZIP16_SENTINEL = 65535;
+function resolveEntrySizes(bytes, recordOffset, extraStart, extraLength) {
+  let compressed = bytes.readUInt32LE(recordOffset + 20);
+  let inflated = bytes.readUInt32LE(recordOffset + 24);
+  let localOffset = bytes.readUInt32LE(recordOffset + 42);
+  const diskStart = bytes.readUInt16LE(recordOffset + 34);
+  const needsZip64 = compressed === ZIP32_SENTINEL || inflated === ZIP32_SENTINEL || localOffset === ZIP32_SENTINEL || diskStart === ZIP16_SENTINEL;
+  if (!needsZip64)
+    return { compressed, inflated, localOffset };
+  let cursor = extraStart;
+  const extraEnd = extraStart + extraLength;
+  while (cursor + 4 <= extraEnd) {
+    const headerId = bytes.readUInt16LE(cursor);
+    const size = bytes.readUInt16LE(cursor + 2);
+    const body = cursor + 4;
+    if (body + size > extraEnd)
+      break;
+    if (headerId !== ZIP64_EXTRA_HEADER_ID) {
+      cursor = body + size;
+      continue;
+    }
+    let field = body;
+    const takeUInt64 = () => {
+      if (field + 8 > body + size) {
+        throw new Error("Invalid Office ZIP central directory: truncated ZIP64 extra field");
+      }
+      const value = bytes.readBigUInt64LE(field);
+      field += 8;
+      if (value > BigInt(bytes.length)) {
+        throw new Error("Office ZIP exceeds safe archive bounds");
+      }
+      return Number(value);
+    };
+    if (inflated === ZIP32_SENTINEL)
+      inflated = takeUInt64();
+    if (compressed === ZIP32_SENTINEL)
+      compressed = takeUInt64();
+    if (localOffset === ZIP32_SENTINEL)
+      localOffset = takeUInt64();
+    return { compressed, inflated, localOffset };
+  }
+  throw new Error("Invalid Office ZIP central directory: missing ZIP64 extra field");
+}
+function readCentralDirectory(bytes) {
   let eocd = -1;
   for (let offset = bytes.length - 22;offset >= Math.max(0, bytes.length - 65557); offset -= 1) {
     if (bytes.readUInt32LE(offset) === EOCD_SIGNATURE) {
@@ -211989,25 +212148,37 @@ function inspectSafeOfficeZip(bytes) {
   if (entries > MAX_TEMPLATE_ZIP_ENTRIES || centralOffset + centralSize > bytes.length) {
     throw new Error("Office ZIP exceeds safe archive bounds");
   }
-  const inspected = [];
+  const parsed = [];
   let offset = centralOffset;
   let inflatedTotal = 0;
   for (let index = 0;index < entries; index += 1) {
     if (offset + 46 > bytes.length || bytes.readUInt32LE(offset) !== CENTRAL_SIGNATURE) {
       throw new Error("Invalid Office ZIP central directory");
     }
-    const compressed = bytes.readUInt32LE(offset + 20);
-    const inflated = bytes.readUInt32LE(offset + 24);
-    if (compressed === 4294967295 || inflated === 4294967295) {
-      throw new Error("ZIP64 Office templates are not supported");
+    const flags = bytes.readUInt16LE(offset + 8);
+    const method = bytes.readUInt16LE(offset + 10);
+    const filenameLength = bytes.readUInt16LE(offset + 28);
+    const extraLength = bytes.readUInt16LE(offset + 30);
+    const commentLength = bytes.readUInt16LE(offset + 32);
+    const extraStart = offset + 46 + filenameLength;
+    if (extraStart + extraLength > bytes.length) {
+      throw new Error("Invalid Office ZIP central directory");
+    }
+    const sizes = resolveEntrySizes(bytes, offset, extraStart, extraLength);
+    const { compressed, inflated, localOffset } = sizes;
+    if ((flags & FLAG_ENCRYPTED) !== 0) {
+      throw new Error("Encrypted Office templates are not supported");
+    }
+    if (method !== METHOD_STORE && method !== METHOD_DEFLATE) {
+      throw new Error(`Unsupported Office ZIP compression method ${method}`);
     }
     inflatedTotal += inflated;
     if (inflatedTotal > MAX_TEMPLATE_INFLATED_BYTES || inflated > 1024 * 1024 && compressed > 0 && inflated / compressed > MAX_TEMPLATE_COMPRESSION_RATIO) {
       throw new Error("Office ZIP exceeds safe inflated-size bounds");
     }
-    const filenameLength = bytes.readUInt16LE(offset + 28);
-    const extraLength = bytes.readUInt16LE(offset + 30);
-    const commentLength = bytes.readUInt16LE(offset + 32);
+    if (compressed > maxPlausibleDeflatedSize(inflated)) {
+      throw new Error("Office ZIP declares an implausibly small uncompressed size");
+    }
     const nameStart = offset + 46;
     const nameEnd = nameStart + filenameLength;
     if (nameEnd > bytes.length) {
@@ -212015,10 +212186,23 @@ function inspectSafeOfficeZip(bytes) {
     }
     const path = new TextDecoder().decode(bytes.subarray(nameStart, nameEnd));
     assertSafeZipPath(path);
-    inspected.push({ path, compressed, inflated });
+    parsed.push({ entry: { path, compressed, inflated, method }, localOffset });
     offset = nameEnd + extraLength + commentLength;
   }
-  return { entries: inspected };
+  if (offset !== centralOffset + centralSize) {
+    throw new Error("Invalid Office ZIP central directory: declared size does not match entries");
+  }
+  if (offset + 4 <= bytes.length && bytes.readUInt32LE(offset) === CENTRAL_SIGNATURE) {
+    throw new Error("Invalid Office ZIP central directory: more entries than declared");
+  }
+  return parsed;
+}
+function inspectSafeOfficeZip(bytes) {
+  const parsed = readCentralDirectory(bytes);
+  for (const { entry, localOffset } of parsed) {
+    assertDeclaredSizeIsReal(bytes, entry, localOffset);
+  }
+  return { entries: parsed.map(({ entry }) => entry) };
 }
 function assertSafeOfficeZip(bytes) {
   return inspectSafeOfficeZip(bytes);