@openpresentation/opf-pptx 0.25.0 → 0.26.0

package/DEPENDENCY-NOTES.md

@@ -26,9 +26,9 @@ The candidate's complete npm audit reports no known vulnerabilities in the insta
 
 ## Repeatable patch comparison
 
-After `npm ci`, run `npm test` and `npm run test:packed`. The packed check installs the actual tarball into a fresh temporary consumer, audits its complete graph, checks shipped upstream hashes/license and exercises editable table export/reimport. It does not use consumer overrides.
+After `pnpm install` at the repository root, run `pnpm test` and `pnpm run test:packed` in this package. The packed check packs this package and its workspace siblings with `pnpm pack`, installs the actual tarballs into a fresh temporary consumer, audits its complete graph, checks shipped upstream hashes/license and exercises editable table export/reimport. The only consumer overrides point the lockstep sibling ranges (`^<version>`, not on the registry while the version is tested) at those tarballs.
 
-Run `npm run test:browser` for real browser WebP pixel preservation and rich, conditional and merged/styled table import/preview/export/reimport checks. Local Windows runs use installed Microsoft Edge; other environments first run `npx playwright install --with-deps chromium`. CI and release jobs run the Chromium checks on their built candidate. These assertions cover the named fixtures, not arbitrary Office files.
+Run `pnpm run test:browser` for real browser WebP pixel preservation and rich, conditional and merged/styled table import/preview/export/reimport checks. Local Windows runs use installed Microsoft Edge; other environments first run `npx playwright install --with-deps chromium`. CI and release jobs run the Chromium checks on their built candidate. These assertions cover the named fixtures, not arbitrary Office files.
 
 For a comparison against the preceding release, create a separate empty directory, run `npm init -y` there, then `npm install --ignore-scripts --no-audit --no-fund @openpresentation/opf-pptx@0.5.0`. From this repository run `npm run test:compare-published -- <absolute-consumer-directory> <report.json>`. The script verifies the reference version and registry lockfile integrity, then compares every installed core example's PPTX bytes. The older reference deliberately contains the dependency being removed; it is only a comparison input. Explicit replacement images and fallback fonts make the comparison reproducible. Matching bytes do not establish original-asset fidelity or native viewer equivalence.
 

package/README.md

@@ -48,7 +48,7 @@ Version 0.8.0 also measures `design.contentBox` cards through core's padded inte
 Version 0.8.0 requires core 0.10.0 and uses renderer 0.8.0 for coordinated preview/font measurement. Quotes and code export their accepted internal lines and styles without another fitting pass. [Controlled Windows PowerPoint quote evidence](docs/evidence/shared-quote-integration/comparison.json) records glyph containment, separation, save/reopen and text reimport against its exact source/font hashes. Native quote import restores the quote payload from an unchanged export (see [Quote provenance](#quote-provenance-ff-57)); it does not restore the original typography or readability policy, and an edited or damaged quote imports as editable text blocks. Native chart geometry and general scalar-text wrapping also remain different from preview; editability and valid reimport do not establish raster equivalence.
 
 - Package: `@openpresentation/opf-pptx`
-- Repository: `OpenPresentation/opf-pptx`
+- Repository: `OpenPresentation/opf` (`packages/pptx`)
 - License: MIT
 - Compatibility target: `@openpresentation/opf`
 - Renderer relationship: may use `@openpresentation/opf-render` for chart rasterization, the PNG fallback of SVG pictures and visual verification
@@ -308,22 +308,18 @@ The package runtime must stay local and deterministic:
 ## Development
 
 ```sh
-npm ci
-npm run build
-npm run typecheck
-npm test
-npm run validate
+pnpm install   # once, at the repository root
+pnpm --filter @openpresentation/opf-pptx build
+pnpm --filter @openpresentation/opf-pptx typecheck
+pnpm --filter @openpresentation/opf-pptx test
+pnpm --filter @openpresentation/opf-pptx validate
 ```
 
 LibreOffice is not a runtime dependency. When it is installed in CI or a local verification environment, generated `.pptx` files can be smoke-opened there as an optional export check.
 
 ## Release Lane
 
-Public npm package publication is handled by `.github/workflows/release.yml` through npm Trusted Publishing (GitHub Actions OIDC) with npm provenance; no npm token is stored. The owner authorized agents to prepare and publish npm releases whenever a release is required (2026-09-29). This authorization does not waive any gate.
-
-1. Open a release-prep PR containing only the version bump, `CHANGELOG.md` (assembled from `changes/` with `node scripts/changelog-fragments.mjs assemble --version X.Y.Z`), dependency ranges, lockfile and current-instruction docs. Publish in dependency order (core, then renderer, then PPTX, then editor): refresh this repo's lockfile only after the required `@openpresentation/opf` and `@openpresentation/opf-render` versions are on the registry (`npm install --package-lock-only`), then run `npm run test:packed` against them.
-2. Merge after CI is green, then publish by pushing the git tag `opf-pptx-v<version>` (or `@openpresentation/opf-pptx@v<version>`) at the merge commit. The workflow verifies that the tag matches `package.json`, that the push-to-`main` run of `ci.yml` on exactly the tagged commit succeeded (`scripts/ci-evidence.mjs`; it fails closed and re-runs no test, RR-100), and the artifact itself (audit, the packed install, `npm pack --dry-run`) before `npm publish --access public --provenance`. A tag pushed while CI still runs fails at the evidence step; re-run the failed job once CI is green. A manual `workflow_dispatch` runs the same job without the tag check and is a fallback only.
-3. Verify with `npm view @openpresentation/opf-pptx@<version> version gitHead dist.attestations` and, from the core repo, `node scripts/test-pptx-publication.mjs <version> <release-commit> <this-checkout>`. Never republish an existing version.
+Packages publish from the OpenPresentation/opf monorepo through npm Trusted Publishing (GitHub Actions OIDC) with npm provenance; no npm token is stored. All six packages share one version and publish together, in dependency order, through the root release workflow described in [`docs/release-process.md`](../../docs/release-process.md) (the unified workflow lands with MR-40; until then the root process applies). Never republish an existing version. Verify a release with `npm view @openpresentation/opf-pptx@<version> version gitHead dist.attestations`.
 
 ## Shared dynamic composition
 
@@ -395,7 +391,7 @@ Set `imageFormat: "preserve"` to embed WebP unchanged when the receiving applica
 
 Node conversion lazily loads the pinned open-source Sharp dependency and requires Node 22 or later. Normal package installation must include platform optional dependencies for its native binaries. Browser bundles select a separate browser decoder using local Blob/image/canvas APIs; Sharp and Node code are excluded. Neither path uploads images or fetches asset URLs. Source-preserving export and ordinary PNG/JPEG/GIF operations do not load Sharp.
 
-`npm test` includes the Node pixel-reference cases and verifies browser bundling. To run the browser pixel checks, run `npm run build:browser-check`, serve this repository locally, and open `/artifacts/webp-fallback/browser/index.html`. The page reports 13 checks covering embedded PNG pixels, alpha, EXIF, the first animation frame, fit/crop, resolver calls and DOM canvas fallback. These are browser export checks, separate from the recorded Keynote viewing evidence.
+`pnpm test` includes the Node pixel-reference cases and verifies browser bundling. To run the browser pixel checks, run `pnpm run build:browser-check`, serve this repository locally, and open `/artifacts/webp-fallback/browser/index.html`. The page reports 13 checks covering embedded PNG pixels, alpha, EXIF, the first animation frame, fit/crop, resolver calls and DOM canvas fallback. These are browser export checks, separate from the recorded Keynote viewing evidence.
 
 
 ## Native background fills
@@ -495,7 +491,7 @@ Conditional borders keep the whole-table outer frame separate from interior hori
 
 Export consumes the same core geometry as SVG. It writes native merged cells and corrects PptxGenJS's padding-unit heuristic and missing dotted/transparent-border options in generated XML. Rich runs retain their own resolved opacity, including opaque overrides within a translucent cell. Tests inspect actual native XML and repeated conversions; native PowerPoint raster parity is not established.
 
-Version 0.5.0 requires core 0.7.0 and renderer 0.5.0 for coordinated previews. `npm run test:styled-table` runs export/import regressions. For local browser verification, set `OPF_CORE_ROOT` to the core repository and `OPF_RENDER_ROOT` to the coordinated renderer worktree when running `npm run build:browser-check`. Serve the repository and open `/artifacts/native-styled-table-import/browser/index.html`. Omit those variables to exercise installed package dependencies.
+Version 0.5.0 requires core 0.7.0 and renderer 0.5.0 for coordinated previews. `pnpm run test:styled-table` runs export/import regressions. For local browser verification, set `OPF_CORE_ROOT` to the core repository and `OPF_RENDER_ROOT` to the coordinated renderer worktree when running `npm run build:browser-check`. Serve the repository and open `/artifacts/native-styled-table-import/browser/index.html`. Omit those variables to exercise installed package dependencies.
 
 Version 0.8.0 exports editable native lines with explicit four-space tab stops. Boundary tags contain no original source words, so native edits and deletions remain authoritative. XML-unrepresentable scalar controls reject with an actionable path rather than silently losing characters. Twenty wide/portrait measured/estimated export cases, current-text mutation controls and damaged-tag fallbacks pass; native Office acceptance remains separate. The coordinated core browser workflow also verifies editing, undo and exact reimport.
 

package/dist/index.d.ts

@@ -2,7 +2,8 @@ import type { Catalog, Finding, Fonts, LayoutDiagnostic, UnresolvedReferenceDiag
 export declare const packageName = "@openpresentation/opf-pptx";
 
 export declare const releaseLane: Readonly<{
-  githubRepository: "OpenPresentation/opf-pptx";
+  githubRepository: "OpenPresentation/opf";
+  directory: "packages/pptx";
   npmPackage: "@openpresentation/opf-pptx";
   compatibilityPackage: "@openpresentation/opf";
   rendererPackage: "@openpresentation/opf-render";

package/dist/index.js

@@ -80,7 +80,8 @@ export {DEFAULT_SIGNAL_LIMITS, SIGNALS_VERSION, isMonospaceFamily} from './impor
 export const packageName = "@openpresentation/opf-pptx";
 
 export const releaseLane = Object.freeze({
-  githubRepository: "OpenPresentation/opf-pptx",
+  githubRepository: "OpenPresentation/opf",
+  directory: "packages/pptx",
   npmPackage: "@openpresentation/opf-pptx",
   compatibilityPackage: "@openpresentation/opf",
   rendererPackage: "@openpresentation/opf-render"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openpresentation/opf-pptx",
-  "version": "0.25.0",
+  "version": "0.26.0",
   "description": "Pure local OPF to PPTX export and PPTX to OPF import tooling.",
   "license": "MIT",
   "type": "module",
@@ -10,12 +10,13 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/OpenPresentation/opf-pptx.git"
+    "url": "git+https://github.com/OpenPresentation/opf.git",
+    "directory": "packages/pptx"
   },
   "bugs": {
-    "url": "https://github.com/OpenPresentation/opf-pptx/issues"
+    "url": "https://github.com/OpenPresentation/opf/issues"
   },
-  "homepage": "https://github.com/OpenPresentation/opf-pptx#readme",
+  "homepage": "https://github.com/OpenPresentation/opf/tree/main/packages/pptx#readme",
   "publishConfig": {
     "access": "public"
   },
@@ -35,46 +36,18 @@
   },
   "types": "./dist/index.d.ts",
   "sideEffects": false,
-  "scripts": {
-    "build": "node scripts/build.mjs",
-    "typecheck": "node scripts/check-syntax.mjs src test scripts",
-    "test": "npm run build && node scripts/run-tests.mjs && npm run build:browser-check && npm run check:runners && npm run check:changes",
-    "test:contract": "npm run build && node scripts/run-tests.mjs --suite contract && npm run build:browser-check",
-    "check:runners": "node --test scripts/run-tests.test.mjs",
-    "check:changes": "node --test scripts/changelog-fragments.test.mjs && node scripts/changelog-fragments.mjs check",
-    "validate": "node scripts/validate-package.mjs",
-    "test:packed": "node test/packed-install.mjs && node test/provenance-interop.mjs",
-    "test:compare-published": "node test/compare-published.mjs",
-    "test:published-import": "node test/provenance-interop.mjs",
-    "test:browser": "npm run build:browser-check && node test/browser-check.mjs && node test/packed-bundle-browser.mjs",
-    "prepack": "npm run build",
-    "build:browser-check": "node scripts/build-browser-check.mjs",
-    "test:styled-table": "node test/styled-table.mjs && node test/styled-table-import.mjs",
-    "test:code": "node test/shared-code.mjs && node test/code-provenance.mjs",
-    "test:metric": "node test/shared-metric.mjs && node test/metric-provenance.mjs",
-    "test:font-variants": "node test/font-variants.mjs",
-    "test:timeline": "node test/shared-timeline.mjs",
-    "test:furniture": "node test/shared-furniture.mjs && node test/furniture-provenance.mjs && node test/slide-variables.mjs && node test/furniture-fields.mjs && node test/furniture-wrapped-date.mjs && node test/socials-furniture.mjs && node test/native-furniture.mjs",
-    "test:native-picture-edit-controls": "node test/compare-native-picture-edit-controls.mjs",
-    "test:native-font-embed-controls": "node test/native-font-embed-controls.mjs",
-    "test:native-mixed-edit-controls": "node test/native-mixed-edit-controls.mjs",
-    "test:native-font-inventory-controls": "node test/native-font-inventory-controls.mjs",
-    "test:zip-date": "node test/zip-date.mjs",
-    "test:native-text": "node test/native-text-whitespace.mjs",
-    "test:determinism": "node test/determinism.mjs"
-  },
   "dependencies": {
     "@node-projects/jszip": "4.3.0",
-    "@openpresentation/gallery": "^5.0.0",
-    "@openpresentation/opf": "^0.25.0",
     "@rgrove/parse-xml": "4.2.3",
     "fast-xml-parser": "^5.8.0",
     "fflate": "^0.8.3",
     "pako": "3.0.2",
-    "sharp": "0.35.5"
+    "sharp": "0.35.5",
+    "@openpresentation/gallery": "^0.26.0",
+    "@openpresentation/opf": "^0.26.0"
   },
   "peerDependencies": {
-    "@openpresentation/opf-render": "^0.25.0"
+    "@openpresentation/opf-render": "^0.26.0"
   },
   "peerDependenciesMeta": {
     "@openpresentation/opf-render": {
@@ -98,15 +71,43 @@
     "@expo-google-fonts/roboto": "0.4.3",
     "@expo-google-fonts/roboto-mono": "0.4.2",
     "@expo-google-fonts/tinos": "0.4.2",
-    "@openpresentation/opf-render": "0.25.0",
     "@resvg/resvg-js": "2.6.2",
     "esbuild": "0.28.2",
-    "playwright": "1.64.0"
+    "playwright": "1.64.0",
+    "@openpresentation/opf-render": "0.26.0"
   },
   "imports": {
     "#image-fallback": {
       "browser": "./dist/image-fallback-browser.js",
       "default": "./dist/image-fallback-node.js"
     }
-  }
+  },
+  "scripts": {
+    "build:deps": "pnpm --filter \"@openpresentation/opf-pptx^...\" --fail-if-no-match run build",
+    "build": "node scripts/build.mjs",
+    "typecheck": "node scripts/check-syntax.mjs src test scripts",
+    "test": "pnpm run build:deps && pnpm run build && node ../../scripts/run-tests.mjs && pnpm run build:browser-check && pnpm run check:scripts",
+    "test:contract": "pnpm run build:deps && pnpm run build && node ../../scripts/run-tests.mjs --suite contract && pnpm run build:browser-check",
+    "check:scripts": "node --test scripts/check-syntax.test.mjs scripts/browser-suites.test.mjs scripts/pnpm-lock.test.mjs",
+    "validate": "node scripts/validate-package.mjs",
+    "test:packed": "pnpm run build:deps && node test/packed-install.mjs && node test/provenance-interop.mjs",
+    "test:compare-published": "node test/compare-published.mjs",
+    "test:published-import": "node test/provenance-interop.mjs",
+    "test:browser": "pnpm run build:deps && pnpm run build:browser-check && node test/browser-check.mjs && node test/packed-bundle-browser.mjs",
+    "build:browser-check": "node scripts/build-browser-check.mjs",
+    "test:styled-table": "node test/styled-table.mjs && node test/styled-table-import.mjs",
+    "test:code": "node test/shared-code.mjs && node test/code-provenance.mjs",
+    "test:metric": "node test/shared-metric.mjs && node test/metric-provenance.mjs",
+    "test:font-variants": "node test/font-variants.mjs",
+    "test:timeline": "node test/shared-timeline.mjs",
+    "test:furniture": "node test/shared-furniture.mjs && node test/furniture-provenance.mjs && node test/slide-variables.mjs && node test/furniture-fields.mjs && node test/furniture-wrapped-date.mjs && node test/socials-furniture.mjs && node test/native-furniture.mjs",
+    "test:native-picture-edit-controls": "node test/compare-native-picture-edit-controls.mjs",
+    "test:native-font-embed-controls": "node test/native-font-embed-controls.mjs",
+    "test:native-mixed-edit-controls": "node test/native-mixed-edit-controls.mjs",
+    "test:native-font-inventory-controls": "node test/native-font-inventory-controls.mjs",
+    "test:zip-date": "node test/zip-date.mjs",
+    "test:native-text": "node test/native-text-whitespace.mjs",
+    "test:determinism": "node test/determinism.mjs"
+  },
+  "gitHead": "ae4ddd76e40b5778c1fdc255e4e3b24334748d7e"
 }