@poe-platform/safe-bash 0.1.811 → 0.1.813

package/dist/safe-bash/command-chunks/{command-engine-BEWABZ75.js → command-engine-X3OLN7N6.js}

@@ -5,6 +5,57 @@ import {
 } from "./chunk-E6SK3OU2.js";
 import "./chunk-65DS4IOB.js";
 
+// packages/safe-bash-command-pptx/src/command-extract-streaming.ts
+import { openRetainedPackageExtraction, stageRetainedExtractionOutput } from "../../safe-bash-presentation-engine/package-tools.js";
+import { OfficeError } from "../../safe-bash-presentation-engine/errors.js";
+async function prepareRetainedExtraction(args, request, options2) {
+  const { streaming, signal } = request, context = { ...options2.context, signal, workingStorage: streaming.workingStorage };
+  const input = await streaming.openInput(args.input, Math.min(context.limits.maxBytes, context.archiveLimits.maxArchiveBytes));
+  const extraction = await openRetainedPackageExtraction(input, context, args.parts ? { parts: args.parts } : {});
+  let response, closing;
+  const close = () => closing ??= (async () => {
+    const results = await Promise.allSettled([response?.close(), extraction.close()]);
+    for (const result of results) if (result.status === "rejected") throw result.reason;
+  })();
+  try {
+    let total = 0;
+    for await (const member of extraction.members()) total += member.size;
+    if (extraction.count > (args.limits?.maxOutputs ?? context.archiveLimits.maxMembers) || !Number.isSafeInteger(total) || total > options2.maxOutputBytes)
+      throw new OfficeError("resource-limit", "Package extraction exceeds output limits.", "validate-intent");
+    if (!request.publishOutputStreams && (!args.allowPartialOutput || !request.publishOutput)) throw Object.assign(new Error("Extraction requires a publication capability."), { code: "publication-unsupported" });
+    response = await stageRetainedExtractionOutput(extraction, context, { directory: args.outputDir, json: args.json, maxOutputBytes: options2.maxOutputBytes, allowPartialOutput: args.allowPartialOutput ?? false });
+    async function* publications(dryRun) {
+      for await (const member of extraction.members()) {
+        signal.throwIfAborted();
+        yield { inputPath: args.input, outputPath: response.path(member.name), bytes: member.bytes(), originalBytes: input, inPlace: false, force: args.force ?? false, dryRun };
+      }
+    }
+    return { close, async publish() {
+      let published = 0, code;
+      try {
+        for await (const item of publications(true)) {
+          if (request.preflightOutputStream) await request.preflightOutputStream(item);
+          else if (request.publishOutput) await request.publishOutput(item);
+        }
+        if (request.publishOutputStreams) await request.publishOutputStreams(publications(false));
+        else for await (const item of publications(false)) {
+          await request.publishOutput(item);
+          published++;
+        }
+      } catch (error) {
+        const raw = error && typeof error === "object" && "code" in error ? error.code : void 0;
+        code = signal.aborted ? "cancelled" : typeof raw === "string" && ["resource-limit", "stale-input", "publication-unsupported"].includes(raw) ? raw : "io-failure";
+      }
+      await response.write(!code || args.json ? streaming.stdout : streaming.stderr, code ? { code, published } : void 0);
+      return { exitCode: !code ? 0 : code === "cancelled" ? 130 : code === "resource-limit" ? 4 : code === "stale-input" ? 1 : 3, stdout: new Uint8Array(), stderr: new Uint8Array() };
+    } };
+  } catch (error) {
+    await close().catch(() => {
+    });
+    throw error;
+  }
+}
+
 // packages/safe-bash-command-pptx/src/command-engine.ts
 import { stageRetainedText } from "../../safe-bash-presentation-engine/retained-text.js";
 import { stageRetainedInspection } from "../../safe-bash-presentation-engine/retained-inspection.js";
@@ -12,7 +63,7 @@ import { openPackageArchive } from "../../safe-bash-presentation-engine/retained
 
 // packages/safe-bash-command-pptx/src/capabilities-discovery.ts
 import { parseContentTypes } from "../../safe-bash-presentation-engine/content-types.js";
-import { OfficeError } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError2 } from "../../safe-bash-presentation-engine/errors.js";
 import { readRelationshipGraph } from "../../safe-bash-presentation-engine/relationships.js";
 import { readPackage } from "../../safe-bash-presentation-engine/package-reader.js";
 import { parseXmlPart } from "../../safe-bash-presentation-engine/xml.js";
@@ -49,7 +100,7 @@ function declaredFeatureCapabilities(features, operations) {
     Object.entries(features).map(([name, feature]) => {
       const paths = feature.operations ?? (feature.operation ? [feature.operation] : featureOperations[name]);
       if (!paths?.length || paths.some((path) => !Object.hasOwn(operations, path))) {
-        throw new OfficeError(
+        throw new OfficeError2(
           "invalid-value",
           "Capability references an undeclared operation.",
           "usage"
@@ -99,7 +150,7 @@ async function assessCapabilities(input, context) {
       try {
         contentType = types.get(part);
       } catch (error) {
-        if (!(error instanceof OfficeError) || error.code !== "missing-binding") throw error;
+        if (!(error instanceof OfficeError2) || error.code !== "missing-binding") throw error;
       }
     }
     const type = contentType?.split(";", 1)[0].trim().toLowerCase();
@@ -114,7 +165,7 @@ async function assessCapabilities(input, context) {
       const data = reader.get(part);
       xmlBytes += data.length;
       if (xmlBytes > context.xmlLimits.maxBytes || nodes >= context.xmlLimits.maxNodes)
-        throw new OfficeError(
+        throw new OfficeError2(
           "resource-limit",
           "Capability XML inspection limit exceeded.",
           "index"
@@ -125,7 +176,7 @@ async function assessCapabilities(input, context) {
       });
       nodes += xml.nodeCount;
       if (nodes > context.xmlLimits.maxNodes)
-        throw new OfficeError("resource-limit", "Capability XML node limit exceeded.", "index");
+        throw new OfficeError2("resource-limit", "Capability XML node limit exceeded.", "index");
       const pending = [xml.root];
       let visited = 0;
       while (pending.length) {
@@ -3464,7 +3515,7 @@ var discoverySchemas = Object.fromEntries([
 }]));
 
 // packages/safe-bash-command-pptx/src/command-objects-add.ts
-import { OfficeError as OfficeError2 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError3 } from "../../safe-bash-presentation-engine/errors.js";
 import { addOleObject } from "../../safe-bash-presentation-engine/ole-insertion.js";
 var objectsAddUsage = "Usage: pptx objects add INPUT --slide N --file PATH --icon PATH (--program-id TEXT | --program DOCX|PPTX|XLSX) [--icon-content-type TYPE]\n  --left LENGTH --top LENGTH --width LENGTH --height LENGTH --icon-width LENGTH --icon-height LENGTH --name TEXT\n  --output PATH|--in-place|--dry-run [--force] [--json] [--limit NAME=VALUE]\nEmbed explicit inert bytes with an explicit icon. No activation or recursive payload parsing.\n";
 var length = {
@@ -3572,7 +3623,7 @@ var objectsAddSchema = {
   }
 };
 function usage(message) {
-  throw new OfficeError2("invalid-value", message, "usage");
+  throw new OfficeError3("invalid-value", message, "usage");
 }
 function validateObjectsAddCommand(args, positionals, seen) {
   const allowed = Object.keys(objectsAddSchema.options.properties).map(
@@ -3802,7 +3853,7 @@ var packageToolsSchemas = Object.fromEntries(
 );
 
 // packages/safe-bash-command-pptx/src/command-engine-values.ts
-import { OfficeError as OfficeError3 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError4 } from "../../safe-bash-presentation-engine/errors.js";
 function commandLength(value, minimum = 1) {
   const units = { emu: 1, in: 914400, cm: 36e4, mm: 36e3, pt: 12700 };
   const unit = Object.keys(units).find((candidate) => value.endsWith(candidate));
@@ -3811,7 +3862,7 @@ function commandLength(value, minimum = 1) {
   if (!unit || pieces.length > 2 || !pieces[0] || pieces.some(
     (piece) => !piece || [...piece].some((character) => character < "0" || character > "9")
   ))
-    throw new OfficeError3(
+    throw new OfficeError4(
       "invalid-value",
       "Lengths require a decimal and emu, in, cm, mm or pt unit.",
       "usage"
@@ -3819,13 +3870,13 @@ function commandLength(value, minimum = 1) {
   const raw = Number(digits) * units[unit];
   const result = Math.sign(raw) * Math.round(Math.abs(raw));
   if (!Number.isFinite(raw) || Math.abs(raw) > Number.MAX_SAFE_INTEGER || !Number.isSafeInteger(result) || result < minimum)
-    throw new OfficeError3("invalid-value", "Length is outside the supported range.", "usage");
+    throw new OfficeError4("invalid-value", "Length is outside the supported range.", "usage");
   return result;
 }
 function commandTimestamp(value) {
   const date = new Date(value);
   if (!Number.isFinite(date.getTime()) || !value.endsWith("Z") || date.toISOString() !== value && date.toISOString() !== value.slice(0, -1) + ".000Z")
-    throw new OfficeError3(
+    throw new OfficeError4(
       "invalid-value",
       "Timestamp requires a valid UTC date with seconds and Z suffix.",
       "usage"
@@ -3859,7 +3910,7 @@ function commandJson(value) {
     }
     return JSON.parse(value);
   } catch {
-    throw new OfficeError3(
+    throw new OfficeError4(
       "invalid-value",
       "Structured slides require valid JSON without duplicate keys, at most 32 levels deep.",
       "usage"
@@ -3869,11 +3920,11 @@ function commandJson(value) {
 
 // packages/safe-bash-command-pptx/src/command-package-tools.ts
 import { sha256 } from "@noble/hashes/sha2.js";
-import { OfficeError as OfficeError4 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError5 } from "../../safe-bash-presentation-engine/errors.js";
 import { asciiKey, partName } from "../../safe-bash-presentation-engine/package-uri.js";
 import { extractPackage, packPackage } from "../../safe-bash-presentation-engine/package-tools.js";
 function usage2(message) {
-  throw new OfficeError4("invalid-value", message, "usage");
+  throw new OfficeError5("invalid-value", message, "usage");
 }
 function scopedPath(manifest, path) {
   if (path === "-") return path;
@@ -3940,7 +3991,7 @@ async function executePackageCommand(args, request, options2) {
     );
     const files = await extractPackage(bytes2, context, args.parts ? { parts: args.parts } : {});
     if (files.length > (args.limits?.maxOutputs ?? context.archiveLimits.maxMembers) || files.reduce((sum, file) => sum + file.bytes.length, 0) > options2.maxOutputBytes)
-      throw new OfficeError4(
+      throw new OfficeError5(
         "resource-limit",
         "Package extraction exceeds output limits.",
         "validate-intent"
@@ -3972,7 +4023,7 @@ async function executePackageCommand(args, request, options2) {
     };
   }
   if (args.creation?.author !== void 0 || args.creation?.timestamp !== void 0)
-    throw new OfficeError4(
+    throw new OfficeError5(
       "unsupported-edit",
       "Pack metadata overrides are unavailable; source properties are preserved.",
       "validate-intent"
@@ -3982,7 +4033,7 @@ async function executePackageCommand(args, request, options2) {
     Math.min(context.limits.maxBytes, context.xmlLimits.maxBytes)
   );
   if (encoded.length > Math.min(context.limits.maxBytes, context.xmlLimits.maxBytes))
-    throw new OfficeError4("resource-limit", "Manifest exceeds byte limit.", "admit");
+    throw new OfficeError5("resource-limit", "Manifest exceeds byte limit.", "admit");
   let value;
   try {
     value = commandJson(new TextDecoder("utf-8", { fatal: true }).decode(encoded));
@@ -3992,7 +4043,7 @@ async function executePackageCommand(args, request, options2) {
   if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).some((key) => key !== "parts") || !("parts" in value) || !Array.isArray(value.parts) || !value.parts.length)
     usage2("Manifest requires a nonempty parts array.");
   if (value.parts.length > context.archiveLimits.maxMembers)
-    throw new OfficeError4("resource-limit", "Manifest exceeds member limit.", "admit");
+    throw new OfficeError5("resource-limit", "Manifest exceeds member limit.", "admit");
   const parts = value.parts;
   for (const item of parts)
     if (!item || typeof item !== "object" || Object.keys(item).some((key) => !["part", "sha256", "file"].includes(key)) || !canonical(item.part) || typeof item.sha256 !== "string" || item.sha256.length !== 64 || [...item.sha256].some((c) => !"0123456789abcdef".includes(c)) || !item.file || typeof item.file !== "object" || Object.keys(item.file).length !== 1 || typeof item.file.vfsPath !== "string" || !item.file.vfsPath.length)
@@ -4014,7 +4065,7 @@ async function executePackageCommand(args, request, options2) {
     );
     total += bytes2.length;
     if (bytes2.length > context.archiveLimits.maxEntryBytes || total > context.archiveLimits.maxTotalBytes)
-      throw new OfficeError4("resource-limit", "Manifest contents exceed byte limit.", "admit");
+      throw new OfficeError5("resource-limit", "Manifest contents exceed byte limit.", "admit");
     members.push({ part: item.part, sha256: item.sha256, bytes: bytes2 });
   }
   const bytes = await packPackage(
@@ -4023,7 +4074,7 @@ async function executePackageCommand(args, request, options2) {
     args.creation?.kind ? { kind: args.creation.kind } : {}
   );
   if (bytes.length > options2.maxOutputBytes)
-    throw new OfficeError4("resource-limit", "Packed output exceeds byte limit.", "validate-intent");
+    throw new OfficeError5("resource-limit", "Packed output exceeds byte limit.", "validate-intent");
   const dryRun = args.dryRun ?? false;
   const fingerprint = [...sha256(bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
   if (args.output && args.output !== "-" && !request.publishOutput)
@@ -4059,7 +4110,7 @@ async function executePackageCommand(args, request, options2) {
 }
 
 // packages/safe-bash-command-pptx/src/command-diff.ts
-import { OfficeError as OfficeError5 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError6 } from "../../safe-bash-presentation-engine/errors.js";
 import { comparePresentations } from "../../safe-bash-presentation-engine/diff.js";
 
 // packages/safe-bash-command-pptx/src/diff-schema.ts
@@ -4165,7 +4216,7 @@ async function executeDiffCommand(request, options2) {
   let human = "";
   let exitCode = 0;
   const failure = (error) => {
-    const office = error instanceof OfficeError5 ? error : void 0;
+    const office = error instanceof OfficeError6 ? error : void 0;
     const code = request.signal.aborted ? "cancelled" : office?.code ?? (error && typeof error === "object" && "code" in error && error.code === "resource-limit" ? "resource-limit" : "io-failure");
     exitCode = code === "cancelled" ? 130 : 2;
     const message = office?.message ?? (code === "cancelled" ? "Comparison cancelled." : "Comparison input could not be read.");
@@ -4183,7 +4234,7 @@ async function executeDiffCommand(request, options2) {
     };
   };
   const usage13 = (message) => {
-    throw new OfficeError5("invalid-value", message, "usage");
+    throw new OfficeError6("invalid-value", message, "usage");
   };
   try {
     let byteCount = 0;
@@ -4191,7 +4242,7 @@ async function executeDiffCommand(request, options2) {
       if (!(bytes2 instanceof Uint8Array)) usage13("Arguments must be byte arrays.");
       byteCount += bytes2.byteLength;
       if (byteCount > options2.maxArgumentBytes)
-        throw new OfficeError5("resource-limit", "Argument limit exceeded.", "admit");
+        throw new OfficeError6("resource-limit", "Argument limit exceeded.", "admit");
       try {
         return new TextDecoder("utf-8", { fatal: true }).decode(bytes2);
       } catch {
@@ -4269,7 +4320,7 @@ async function executeDiffCommand(request, options2) {
         }
       };
       if (mode === "effective-formatting")
-        throw new OfficeError5(
+        throw new OfficeError6(
           "unsupported-profile",
           "Effective formatting comparison is not supported.",
           "usage"
@@ -4304,7 +4355,7 @@ async function executeDiffCommand(request, options2) {
   let bytes = encoder.encode(json ? JSON.stringify(result) + "\n" : human);
   if (bytes.length > maxOutputBytes) {
     result = failure(
-      new OfficeError5("resource-limit", "Comparison output limit exceeded.", "admit")
+      new OfficeError6("resource-limit", "Comparison output limit exceeded.", "admit")
     );
     bytes = encoder.encode(json ? JSON.stringify(result) + "\n" : human);
   }
@@ -4424,7 +4475,7 @@ var templateSchema = {
 
 // packages/safe-bash-command-pptx/src/command-template.ts
 import { sha256 as sha2562 } from "@noble/hashes/sha2.js";
-import { OfficeError as OfficeError6 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError7 } from "../../safe-bash-presentation-engine/errors.js";
 import {
   applyTemplateBindings,
   validateTemplateBindings
@@ -4438,7 +4489,7 @@ function validateTemplateData(value) {
   else validateTemplateRepeat(value);
 }
 function usage3(message) {
-  throw new OfficeError6("invalid-value", message, "usage");
+  throw new OfficeError7("invalid-value", message, "usage");
 }
 function validateTemplateCommand(args, positionals, seen) {
   if ([...seen].some(
@@ -4790,11 +4841,11 @@ var commentSchemas = Object.fromEntries(
 );
 
 // packages/safe-bash-command-pptx/src/command-comments.ts
-import { OfficeError as OfficeError7 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError8 } from "../../safe-bash-presentation-engine/errors.js";
 import { mutateComments, readComments, readCommentAuthors } from "../../safe-bash-presentation-engine/comments.js";
 import { SelectionError } from "../../safe-bash-presentation-engine/selectors.js";
 function usage4(message) {
-  throw new OfficeError7("invalid-value", message, "usage");
+  throw new OfficeError8("invalid-value", message, "usage");
 }
 function validateCommentsCommand(args, positionals, seen) {
   const allowed = Object.keys(commentSchemas[args.operation].options.properties).map(
@@ -5296,7 +5347,7 @@ var accessibilitySchemas = Object.fromEntries(
 );
 
 // packages/safe-bash-command-pptx/src/command-accessibility.ts
-import { OfficeError as OfficeError8 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError9 } from "../../safe-bash-presentation-engine/errors.js";
 import {
   readAccessibility,
   mutateAccessibility,
@@ -5304,7 +5355,7 @@ import {
 } from "../../safe-bash-presentation-engine/accessibility.js";
 import { SelectionError as SelectionError2 } from "../../safe-bash-presentation-engine/selectors.js";
 function usage5(message) {
-  throw new OfficeError8("invalid-value", message, "usage");
+  throw new OfficeError9("invalid-value", message, "usage");
 }
 function validateAccessibilityCommand(args, positionals, seen) {
   const allowed = Object.keys(accessibilitySchemas[args.operation].options.properties).map(
@@ -5414,13 +5465,13 @@ async function executeAccessibilityCommand(args, request, options2) {
 }
 
 // packages/safe-bash-command-pptx/src/command-metadata.ts
-import { OfficeError as OfficeError9 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError10 } from "../../safe-bash-presentation-engine/errors.js";
 import { coreDefinition, mutateProperty, readProperties } from "../../safe-bash-presentation-engine/properties.js";
 import { sanitize as sanitizePresentation } from "../../safe-bash-presentation-engine/sanitize.js";
 import { mutateTags, readTags } from "../../safe-bash-presentation-engine/tags.js";
 import { SelectionError as SelectionError3 } from "../../safe-bash-presentation-engine/selectors.js";
 function usage6(message) {
-  throw new OfficeError9("invalid-value", message, "usage");
+  throw new OfficeError10("invalid-value", message, "usage");
 }
 function removalCategories(value) {
   const categories = ["notes", "comments", "properties", "links", "objects"];
@@ -5522,11 +5573,11 @@ ${sanitization.retained.map((entry) => `Retained ${entry.category} ${entry.kind}
 }
 
 // packages/safe-bash-command-pptx/src/command-notes.ts
-import { OfficeError as OfficeError10 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError11 } from "../../safe-bash-presentation-engine/errors.js";
 import { mutateNotes, readNotes, validateNotesOptions } from "../../safe-bash-presentation-engine/notes.js";
 import { readSelectionIndex, SelectionError as SelectionError4 } from "../../safe-bash-presentation-engine/selectors.js";
 function usage7(message) {
-  throw new OfficeError10("invalid-value", message, "usage");
+  throw new OfficeError11("invalid-value", message, "usage");
 }
 function validateNotesCommand(args, positionals, seen) {
   const allowed = Object.keys(noteSchemas[args.operation].options.properties).map(
@@ -5808,12 +5859,12 @@ var linkSchemas = Object.fromEntries(
 // packages/safe-bash-command-pptx/src/command-links.ts
 import { readPackage as readPackage2 } from "../../safe-bash-presentation-engine/package-reader.js";
 import { parseXmlPart as parseXmlPart2 } from "../../safe-bash-presentation-engine/xml.js";
-import { OfficeError as OfficeError11 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError12 } from "../../safe-bash-presentation-engine/errors.js";
 import { listLinks, setLink, removeLink, isOrdinaryLinkUrl } from "../../safe-bash-presentation-engine/links.js";
 import { readShapes } from "../../safe-bash-presentation-engine/shape-operations.js";
 import { SelectionError as SelectionError5 } from "../../safe-bash-presentation-engine/selectors.js";
 function usage8(message) {
-  throw new OfficeError11("invalid-value", message, "usage");
+  throw new OfficeError12("invalid-value", message, "usage");
 }
 function validateLinkCommand(args, positionals, seen) {
   const allowed = Object.keys(linkSchemas[args.operation].options.properties).map(
@@ -5951,7 +6002,7 @@ async function executeLinkCommand(args, request, options2) {
     if (args.operation === "links.add" && selectedLinks.some(
       (link) => link.part === selection.owner && link.shapeId === selection.id && (path ? link.path.length === path.length + 1 && path.every((position, i) => link.path[i] === position) : existingShapeLinks.has(JSON.stringify([link.part, link.shapeId])))
     ))
-      throw new OfficeError11(
+      throw new OfficeError12(
         "unsupported-edit",
         "Selected trigger already contains a link.",
         "validate-intent"
@@ -6978,11 +7029,11 @@ import { readAnimations } from "../../safe-bash-presentation-engine/animations.j
 import { mutateAnimations, mutateAnimationsBatch, validateAnimationOptions as validateAnimationOptions2 } from "../../safe-bash-presentation-engine/animation-editing.js";
 
 // packages/safe-bash-command-pptx/src/animation-batch-command.ts
-import { OfficeError as OfficeError12 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError13 } from "../../safe-bash-presentation-engine/errors.js";
 import { validateAnimationOptions } from "../../safe-bash-presentation-engine/animation-editing.js";
 import { decodeSelectionToken, SelectionError as SelectionError6 } from "../../safe-bash-presentation-engine/selectors.js";
 function invalid(message) {
-  throw new OfficeError12("invalid-value", message, "usage");
+  throw new OfficeError13("invalid-value", message, "usage");
 }
 function record(value, keys) {
   if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).some((key) => !keys.includes(key))) invalid("Invalid animation batch fields.");
@@ -7190,11 +7241,11 @@ var equationSchemas = Object.fromEntries(["list", "get", "add"].map((action) =>
 }));
 
 // packages/safe-bash-command-pptx/src/command-equations.ts
-import { OfficeError as OfficeError13 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError14 } from "../../safe-bash-presentation-engine/errors.js";
 import { readEquations, mutateEquations } from "../../safe-bash-presentation-engine/equations.js";
 import { SelectionError as SelectionError7 } from "../../safe-bash-presentation-engine/selectors.js";
 function usage9(message) {
-  throw new OfficeError13("invalid-value", message, "usage");
+  throw new OfficeError14("invalid-value", message, "usage");
 }
 function validateEquationCommand(args, positionals, seen) {
   const schema = equationSchemas[args.operation];
@@ -7345,11 +7396,11 @@ var opaqueSchemas = Object.fromEntries(["objects.list", "objects.extract", "font
 
 // packages/safe-bash-command-pptx/src/command-opaque.ts
 import { sha256 as sha2563 } from "@noble/hashes/sha2.js";
-import { OfficeError as OfficeError14 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError15 } from "../../safe-bash-presentation-engine/errors.js";
 import { extractObject, readFonts, readObjects } from "../../safe-bash-presentation-engine/opaque-objects.js";
 import { partName as partName2 } from "../../safe-bash-presentation-engine/package-uri.js";
 function usage10(message) {
-  throw new OfficeError14("invalid-value", message, "usage");
+  throw new OfficeError15("invalid-value", message, "usage");
 }
 function validateOpaqueCommand(args, positionals, seen) {
   const schema = opaqueSchemas[args.operation];
@@ -7386,7 +7437,7 @@ async function executeOpaqueCommand(args, request, options2) {
   }
   const extracted = await extractObject(bytes, { part: args.part }, context);
   const files = [{ part: extracted.part, name: extracted.name, bytes: extracted.bytes }, ...extracted.dependencies];
-  if (files.length > (args.limits?.maxOutputs ?? context.archiveLimits.maxMembers)) throw new OfficeError14("resource-limit", "Opaque output count exceeds limit.", "validate-intent");
+  if (files.length > (args.limits?.maxOutputs ?? context.archiveLimits.maxMembers)) throw new OfficeError15("resource-limit", "Opaque output count exceeds limit.", "validate-intent");
   const dryRun = args.dryRun ?? false;
   const allowPartialOutput = args.allowPartialOutput ?? false;
   if (!dryRun && !request.publishOutputs && (!allowPartialOutput || !request.publishOutput)) throw Object.assign(new Error("Object extraction requires atomic publication or explicit partial output."), { code: "publication-unsupported" });
@@ -7418,7 +7469,7 @@ import { readMedia } from "../../safe-bash-presentation-engine/media.js";
 import { extractMedia } from "../../safe-bash-presentation-engine/media-extraction.js";
 
 // packages/safe-bash-command-pptx/src/command-media-editing.ts
-import { OfficeError as OfficeError15 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError16 } from "../../safe-bash-presentation-engine/errors.js";
 import { addMedia, replaceMedia } from "../../safe-bash-presentation-engine/media-editing.js";
 
 // packages/safe-bash-command-pptx/src/media-schema.ts
@@ -7668,7 +7719,7 @@ for (const action of ["add", "replace", "extract"]) {
 
 // packages/safe-bash-command-pptx/src/command-media-editing.ts
 function usage11(message) {
-  throw new OfficeError15("invalid-value", message, "usage");
+  throw new OfficeError16("invalid-value", message, "usage");
 }
 function validateMediaEditingCommand(args, positionals, seen) {
   const allowed = Object.keys(mediaSchemas[args.operation].options.properties).map(
@@ -8762,7 +8813,7 @@ import {
 import { readBackgrounds, mutateBackground } from "../../safe-bash-presentation-engine/backgrounds.js";
 import { replacePresentationText } from "../../safe-bash-presentation-engine/text-replacement.js";
 import { readPresentationText } from "../../safe-bash-presentation-engine/text-reading.js";
-import { OfficeError as OfficeError16 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError17 } from "../../safe-bash-presentation-engine/errors.js";
 import { sha256 as sha2564 } from "@noble/hashes/sha2.js";
 import { packageUri, partName as partName3 } from "../../safe-bash-presentation-engine/package-uri.js";
 import {
@@ -8781,7 +8832,8 @@ import {
 import { createPresentation } from "../../safe-bash-presentation-engine/creation.js";
 import {
   addSlide,
-  mutateSlides
+  mutateSlides,
+  stageRetainedSlideSettings
 } from "../../safe-bash-presentation-engine/slides.js";
 import { duplicateSlides } from "../../safe-bash-presentation-engine/slide-copy.js";
 import { importSlides } from "../../safe-bash-presentation-engine/slide-import.js";
@@ -8793,7 +8845,7 @@ import {
   readPresentationSettings,
   mutatePresentationSettings
 } from "../../safe-bash-presentation-engine/presentation-settings.js";
-import { getXmlPart, stageRetainedXmlPart, replaceXmlPart } from "../../safe-bash-presentation-engine/xml-parts.js";
+import { getXmlPart, stageRetainedXmlPart, stageRetainedXmlReplacement, replaceXmlPart } from "../../safe-bash-presentation-engine/xml-parts.js";
 import { validatePresentation, openRetainedPresentationValidation } from "../../safe-bash-presentation-engine/validation.js";
 import { readPackage as readPackage3 } from "../../safe-bash-presentation-engine/package-reader.js";
 import { resourceContext } from "../../safe-bash-presentation-engine/resource-limits.js";
@@ -8963,7 +9015,7 @@ Slides add requires an exact layout name or part URI; position defaults to appen
 Title/body match placeholder types; indexed bindings use --placeholders-json.
 `;
 function usage12(message) {
-  throw new OfficeError16("invalid-value", message, "usage");
+  throw new OfficeError17("invalid-value", message, "usage");
 }
 function paragraphTabLength(length4) {
   if (Object.keys(length4).some((key) => !["value", "unit"].includes(key)) || typeof length4.value !== "number" || !Number.isFinite(length4.value) || length4.value < 0 || typeof length4.unit !== "string")
@@ -9222,7 +9274,7 @@ function parse(raw, maximum, output3) {
     size += bytes.length + 1;
     if (size > maximum) {
       if (invalidUtf8) usage12("Arguments must be UTF-8.");
-      throw new OfficeError16("resource-limit", "Argument limit exceeded.", "usage");
+      throw new OfficeError17("resource-limit", "Argument limit exceeded.", "usage");
     }
     try {
       args.push(decoder.decode(bytes));
@@ -9874,7 +9926,7 @@ function parse(raw, maximum, output3) {
         try {
           parsed = admitFontMetrics(JSON.parse(value));
         } catch (error) {
-          if (error instanceof OfficeError16) throw error;
+          if (error instanceof OfficeError17) throw error;
           usage12("Metrics require a valid JSON metric object.");
         }
       } else if (["bold", "italic", "wrap"].includes(key)) {
@@ -11600,7 +11652,7 @@ async function transferLocations(bytes, budget) {
     (edge) => relationshipNamespaces.some((namespace) => edge.type === `${namespace}/officeDocument`)
   );
   const root = roots.length === 1 ? roots[0].targetPart : void 0;
-  if (!root) throw new OfficeError16("invalid-opc", "Presentation part is missing.", "index");
+  if (!root) throw new OfficeError17("invalid-opc", "Presentation part is missing.", "index");
   const relationshipNamespace = roots[0].type.slice(0, -"/officeDocument".length);
   const xml = budget.xml(reader.get(root));
   const fingerprint = Array.from(sha2564(bytes), (byte) => byte.toString(16).padStart(2, "0")).join(
@@ -11619,7 +11671,7 @@ async function transferLocations(bytes, budget) {
       (edge) => edge.id === reference && edge.type === `${relationshipNamespace}/slide`
     )?.targetPart;
     if (!id || !owner || !reader.has(owner))
-      throw new OfficeError16("invalid-opc", "Referenced slide is missing.", "index");
+      throw new OfficeError17("invalid-opc", "Referenced slide is missing.", "index");
     return {
       fingerprint,
       scope: "slides",
@@ -11683,10 +11735,11 @@ var declaredOperations = {
   "xml.set": xmlSetSchema,
   capabilities: capabilitiesSchema
 };
-async function execute(request, options2) {
+async function executeRequest(request, options2, owned) {
   if (request.args?.[0] instanceof Uint8Array && request.args[0].length === 4 && request.args[0].every((byte, index) => byte === [100, 105, 102, 102][index]))
     return executeDiffCommand(request, options2);
   const output3 = { json: false, operation: "help" };
+  let retainedExtraction;
   let result;
   let exitCode = 0;
   let stagedOutput;
@@ -11727,7 +11780,54 @@ async function execute(request, options2) {
     output3.json = args.json;
     output3.operation = args.operation;
     const operation2 = args.operation;
-    if ((args.operation === "inspect" || args.operation === "text.get" || args.operation === "fields.list" || args.operation === "fields.get" || args.operation === "xml.get") && request.streaming) {
+    if (args.operation === "extract" && request.streaming && (!request.publishOutputs || request.publishOutputStreams) && (!request.preflightOutput || request.preflightOutputStream)) {
+      retainedExtraction = await prepareRetainedExtraction(args, request, options2);
+      owned.push(retainedExtraction);
+      result = success(operation2, null);
+    } else if (args.operation === "xml.set" && request.streaming) {
+      if (args.token) decodeSelectionToken2(args.token);
+      const streaming = request.streaming, context = { ...options2.context, signal: request.signal, workingStorage: streaming.workingStorage };
+      if (!context.validationLimits) throw new OfficeError17("invalid-value", "XML operations require explicit validation limits.", "usage");
+      const input = await streaming.openInput(args.input, Math.min(context.limits.maxBytes, context.archiveLimits.maxArchiveBytes));
+      const maxReplacementBytes = Math.min(context.validationLimits.maxBytes, context.archiveLimits.maxEntryBytes), file = args.file;
+      async function* replacement() {
+        const source3 = await streaming.openInput(file, maxReplacementBytes);
+        yield* source3.stream();
+      }
+      const destination = args.inPlace ? args.input : args.output, dryRun = args.dryRun ?? false;
+      const staged = await stageRetainedXmlReplacement(input, replacement(), {
+        ...args.token === void 0 ? {} : { token: args.token },
+        ...args.slide === void 0 ? {} : { slide: args.slide },
+        ...args.shape === void 0 ? {} : { shape: args.shape },
+        ...args.part === void 0 ? {} : { part: args.part },
+        ...args.scope === void 0 ? {} : { scope: args.scope },
+        ...args.all === void 0 ? {} : { all: args.all }
+      }, context, { json: args.json, dryRun, ...destination === void 0 ? {} : { destination }, maxOutputBytes: options2.maxOutputBytes });
+      owned.push(staged);
+      stagedOutput = staged.output;
+      if (destination && destination !== "-") {
+        if (!request.publishOutput) throw Object.assign(new Error("Output publication capability is unavailable."), { code: "publication-unsupported" });
+        publication = { inputPath: args.input, outputPath: destination, bytes: staged.bytes(), originalBytes: input, inPlace: args.inPlace ?? false, force: args.force ?? false, dryRun };
+      }
+      result = success(operation2, null);
+    } else if (args.operation === "slides.set" && request.streaming) {
+      if (args.token) decodeSelectionToken2(args.token);
+      const input = await request.streaming.openInput(args.input, Math.min(options2.context.limits.maxBytes, options2.context.archiveLimits.maxArchiveBytes));
+      const destination = args.inPlace ? args.input : args.output;
+      const dryRun = args.dryRun ?? false;
+      const staged = await stageRetainedSlideSettings(input, {
+        ...args.mutation,
+        selection: args.selection ?? (args.token ? { token: args.token } : { kind: "slide", ...args.slide === void 0 ? {} : { position: { coordinateSystem: "one-based", value: args.slide } }, ...args.all ? { all: true } : {} }),
+        allowEmpty: args.allowEmpty ?? false
+      }, { ...options2.context, signal: request.signal, workingStorage: request.streaming.workingStorage }, { json: args.json, dryRun, ...destination === void 0 ? {} : { destination }, maxOutputBytes: options2.maxOutputBytes });
+      owned.push(staged);
+      stagedOutput = staged.output;
+      if (destination && destination !== "-") {
+        if (!request.publishOutput) throw Object.assign(new Error("Output publication capability is unavailable."), { code: "publication-unsupported" });
+        publication = { inputPath: args.input, outputPath: destination, bytes: staged.bytes(), originalBytes: input, inPlace: args.inPlace ?? false, force: args.force ?? false, dryRun };
+      }
+      result = success(operation2, null);
+    } else if ((args.operation === "inspect" || args.operation === "text.get" || args.operation === "fields.list" || args.operation === "fields.get" || args.operation === "xml.get") && request.streaming) {
       if (args.token) decodeSelectionToken2(args.token);
       const input = await request.streaming.openInput(args.input, Math.min(options2.context.limits.maxBytes, options2.context.archiveLimits.maxArchiveBytes));
       const hash = sha2564.create();
@@ -11762,7 +11862,7 @@ async function execute(request, options2) {
         }, context, { json: args.json, maxOutputBytes: options2.maxOutputBytes });
       } catch (error) {
         failed = true;
-        if (error instanceof OfficeError16 && error.code === "resource-limit" && error.phase === "publish") return outputLimitFailure(operation2, args.json);
+        if (error instanceof OfficeError17 && error.code === "resource-limit" && error.phase === "publish") return outputLimitFailure(operation2, args.json);
         throw error;
       } finally {
         try {
@@ -11787,7 +11887,7 @@ async function execute(request, options2) {
         let failed = false;
         try {
           validation = await openRetainedPresentationValidation(archive, context, limits);
-          if (!validation.valid) throw new OfficeError16("invalid-opc", "Presentation semantic validation failed.", "index");
+          if (!validation.valid) throw new OfficeError17("invalid-opc", "Presentation semantic validation failed.", "index");
           result = success(operation2, { valid: true, schema: validation.schema, rules: validation.rules, issues: [] });
         } catch (error) {
           failed = true;
@@ -11802,7 +11902,7 @@ async function execute(request, options2) {
         const bytes = await request.readInput(args.input, maxBytes);
         const reader = await readPackage3(bytes, { ...options2.context, signal: request.signal });
         const validation = validatePresentation(reader, limits);
-        if (!validation.valid) throw new OfficeError16("invalid-opc", "Presentation semantic validation failed.", "index");
+        if (!validation.valid) throw new OfficeError17("invalid-opc", "Presentation semantic validation failed.", "index");
         result = success(operation2, validation);
       }
       human = "Presentation is semantically valid; XML schema validation not checked.\n";
@@ -13398,13 +13498,13 @@ ${item.parts.map((part) => `  ${part}
       const inputs = [];
       for (const path of [args.input, ...args.sources ?? []]) {
         if (remaining < 1)
-          throw new OfficeError16("resource-limit", "Combined input limit exceeded.", "admit");
+          throw new OfficeError17("resource-limit", "Combined input limit exceeded.", "admit");
         const bytes = await request.readInput(
           path,
           Math.min(remaining, context.archiveLimits.maxArchiveBytes)
         );
         if (bytes.length > remaining || bytes.length > context.archiveLimits.maxArchiveBytes)
-          throw new OfficeError16("resource-limit", "Combined input limit exceeded.", "admit");
+          throw new OfficeError17("resource-limit", "Combined input limit exceeded.", "admit");
         remaining -= bytes.length;
         inputs.push(await budget.read(bytes));
       }
@@ -13505,7 +13605,7 @@ ${JSON.stringify(result.data, null, 2)}
       }
     } else if (args.operation === "create") {
       if (args.template)
-        throw new OfficeError16(
+        throw new OfficeError17(
           "unsupported-profile",
           "Template-based creation is unavailable.",
           "validate-intent"
@@ -13557,7 +13657,7 @@ ${JSON.stringify(result.data, null, 2)}
         );
       } catch (error) {
         if (error && typeof error === "object" && "code" in error && error.code === "resource-limit")
-          throw new OfficeError16("resource-limit", "Input limit exceeded.", "admit");
+          throw new OfficeError17("resource-limit", "Input limit exceeded.", "admit");
         throw error;
       }
       const index = await readSelectionIndex2(bytes, { ...options2.context, signal: request.signal });
@@ -13702,7 +13802,7 @@ ${JSON.stringify(result.data, null, 2)}
         const part = metadata2 ?? records[0].part;
         const validationLimits = options2.context.validationLimits;
         if (!validationLimits)
-          throw new OfficeError16(
+          throw new OfficeError17(
             "invalid-value",
             "XML operations require explicit validation limits.",
             "usage"
@@ -13778,9 +13878,10 @@ ${xml.xml}
     await stagedOutput?.close().catch(() => {
     });
     stagedOutput = void 0;
+    if (error instanceof OfficeError17 && error.code === "resource-limit" && error.phase === "publish") return outputLimitFailure(output3.operation, output3.json);
     if (request.signal.aborted)
       return { exitCode: 130, stdout: new Uint8Array(), stderr: new Uint8Array() };
-    const office = error instanceof OfficeError16 ? error : void 0;
+    const office = error instanceof OfficeError17 ? error : void 0;
     const capabilityCode = error && typeof error === "object" && "code" in error ? error.code : void 0;
     const limit = office?.code === "resource-limit" || capabilityCode === "resource-limit";
     const unsupported = capabilityCode === "publication-unsupported";
@@ -13806,24 +13907,9 @@ ${xml.xml}
     human = `pptx: ${diagnostic.code}: ${diagnostic.message}
 `;
   }
-  if (stagedOutput) {
-    let failed = false;
-    try {
-      await stagedOutput.write(request.streaming.stdout);
-    } catch (error) {
-      failed = true;
-      throw error;
-    } finally {
-      try {
-        await stagedOutput.close();
-      } catch (error) {
-        if (!failed) await Promise.reject(error);
-      }
-    }
-    return { exitCode: 0, stdout: new Uint8Array(), stderr: new Uint8Array() };
-  }
+  if (retainedExtraction && result.ok) return retainedExtraction.publish();
   const { json, operation } = output3;
-  const encoded = binary ?? new TextEncoder().encode(
+  const encoded = (stagedOutput ? new Uint8Array() : binary) ?? new TextEncoder().encode(
     json ? `${JSON.stringify(result)}
 ` : human ?? `${JSON.stringify(result.data, null, 2)}
 `
@@ -13893,11 +13979,12 @@ ${JSON.stringify(failure.data)}
   if (publication && result.ok) {
     try {
       request.signal.throwIfAborted();
-      await request.publishOutput(publication);
+      if (publication.bytes instanceof Uint8Array) await request.publishOutput(publication);
+      else if (request.streaming) await request.publishOutput(publication);
     } catch (error) {
       if (request.signal.aborted)
         return { exitCode: 130, stdout: new Uint8Array(), stderr: new Uint8Array() };
-      const office = error instanceof OfficeError16 ? error : void 0;
+      const office = error instanceof OfficeError17 ? error : void 0;
       const rawCode = error && typeof error === "object" && "code" in error ? error.code : void 0;
       const code = typeof rawCode === "string" && [
         "resource-limit",
@@ -13933,6 +14020,22 @@ ${JSON.stringify(failure.data)}
       };
     }
   }
+  if (stagedOutput) {
+    let failed = false;
+    try {
+      await stagedOutput.write(request.streaming.stdout);
+    } catch (error) {
+      failed = true;
+      throw error;
+    } finally {
+      try {
+        await stagedOutput.close();
+      } catch (error) {
+        if (!failed) await Promise.reject(error);
+      }
+    }
+    return { exitCode: 0, stdout: new Uint8Array(), stderr: new Uint8Array() };
+  }
   if (operation === "validate" && request.streaming) {
     request.signal.throwIfAborted();
     await (json || result.ok ? request.streaming.stdout : request.streaming.stderr).write(encoded);
@@ -13945,6 +14048,23 @@ ${JSON.stringify(failure.data)}
     stderr: json || result.ok ? new Uint8Array() : encoded
   };
 }
+async function execute(request, options2) {
+  const owned = [];
+  let failed = false;
+  try {
+    const result = await executeRequest(request, options2, owned);
+    failed = result.exitCode !== 0;
+    return result;
+  } catch (error) {
+    failed = true;
+    throw error;
+  } finally {
+    const results = await Promise.allSettled(owned.map((value) => value.close()));
+    if (!failed) {
+      for (const result of results) if (result.status === "rejected") await Promise.reject(result.reason);
+    }
+  }
+}
 function createPptxCommandEngine(settings = {}) {
   const context = resourceContext(settings.context);
   const options2 = {