@poe-platform/safe-bash 0.1.817 → 0.1.819

package/dist/safe-bash/command-chunks/{command-engine-2QXVRRH3.js → command-engine-B6X6WAMX.js}

@@ -11,7 +11,198 @@ import {
 } from "./chunk-NUGQQDGE.js";
 import "./chunk-65DS4IOB.js";
 
+// packages/safe-bash-command-pptx/src/command-media-extraction-streaming.ts
+import {
+  RetainedMediaSelectionError,
+  stageRetainedMediaSelectionError
+} from "../../safe-bash-presentation-engine/media.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+import {
+  openRetainedMediaExtraction,
+  stageRetainedExtractionOutput
+} from "../../safe-bash-presentation-engine/media-extraction.js";
+import { openPackageArchive } from "../../safe-bash-presentation-engine/retained-package.js";
+async function prepareRetainedMediaExtraction(args, request, options2) {
+  const { streaming, signal } = request, context = { ...options2.context, signal, workingStorage: streaming.workingStorage };
+  const input = await streaming.openInput(
+    args.input,
+    Math.min(context.limits.maxBytes, context.archiveLimits.maxArchiveBytes)
+  ), hash = sha256.create();
+  for await (const bytes of input.stream()) {
+    signal.throwIfAborted();
+    hash.update(bytes);
+  }
+  const fingerprint = Array.from(hash.digest(), (b) => b.toString(16).padStart(2, "0")).join(""), archive = await openPackageArchive(input, context);
+  let diagnostic;
+  let extraction, response, closing;
+  const close = () => closing ??= (async () => {
+    const results = await Promise.allSettled([
+      diagnostic?.close(),
+      response?.close(),
+      extraction?.close(),
+      archive.close()
+    ]);
+    for (const result of results) if (result.status === "rejected") throw result.reason;
+  })();
+  try {
+    extraction = await openRetainedMediaExtraction(
+      archive,
+      fingerprint,
+      {
+        ...args.scope === void 0 ? {} : { scope: args.scope },
+        ...args.slide === void 0 ? {} : { slide: args.slide },
+        ...args.shape === void 0 ? {} : { shape: args.shape },
+        ...args.token === void 0 ? {} : { select: args.token },
+        ...args.deduplicate === void 0 ? {} : { deduplicate: args.deduplicate },
+        maxOutputBytes: options2.maxOutputBytes,
+        maxOutputs: args.limits?.maxOutputs ?? context.archiveLimits.maxMembers
+      },
+      context
+    );
+    if (!request.publishOutputStreams && (!args.allowPartialOutput || !request.publishOutput))
+      throw Object.assign(
+        new Error("Media extraction requires atomic publication or explicit partial output."),
+        { code: "publication-unsupported" }
+      );
+    response = await stageRetainedExtractionOutput(extraction, context, {
+      directory: args.outputDir,
+      json: args.json,
+      maxOutputBytes: options2.maxOutputBytes,
+      allowPartialOutput: args.allowPartialOutput ?? false,
+      operation: "media.extract"
+    });
+    async function* publications(dryRun) {
+      for await (const member of extraction.members()) {
+        signal.throwIfAborted();
+        yield {
+          inputPath: args.input,
+          outputPath: response.path(member.name),
+          bytes: member.bytes(),
+          originalBytes: input,
+          inPlace: false,
+          force: args.force ?? false,
+          dryRun
+        };
+      }
+    }
+    return {
+      close,
+      async publish() {
+        let published = 0, code;
+        try {
+          for await (const item of publications(true)) {
+            if (request.preflightOutputStream) await request.preflightOutputStream(item);
+            else if (request.publishOutput) await request.publishOutput(item);
+          }
+          if (request.publishOutputStreams) await request.publishOutputStreams(publications(false));
+          else
+            for await (const item of publications(false)) {
+              await request.publishOutput(item);
+              published++;
+            }
+        } catch (error) {
+          const raw = error && typeof error === "object" && "code" in error ? error.code : void 0;
+          code = signal.aborted ? "cancelled" : typeof raw === "string" && ["resource-limit", "stale-input", "publication-unsupported"].includes(raw) ? raw : "io-failure";
+        }
+        await response.write(
+          !code || args.json ? streaming.stdout : streaming.stderr,
+          code ? { code, published } : void 0
+        );
+        return {
+          exitCode: !code ? 0 : code === "cancelled" ? 130 : code === "resource-limit" ? 4 : code === "stale-input" ? 1 : 3,
+          stdout: new Uint8Array(),
+          stderr: new Uint8Array()
+        };
+      }
+    };
+  } catch (error) {
+    if (error instanceof RetainedMediaSelectionError) {
+      try {
+        diagnostic = await stageRetainedMediaSelectionError(error, context, {
+          operation: "media.extract",
+          json: args.json,
+          maxOutputBytes: options2.maxOutputBytes
+        });
+        await archive.close();
+        return {
+          close,
+          async publish() {
+            await diagnostic.write(args.json ? streaming.stdout : streaming.stderr);
+            return { exitCode: 1, stdout: new Uint8Array(), stderr: new Uint8Array() };
+          }
+        };
+      } catch (failure) {
+        await close().catch(() => {
+        });
+        throw failure;
+      }
+    }
+    await close().catch(() => {
+    });
+    throw error;
+  }
+}
+
+// packages/safe-bash-command-pptx/src/command-engine.ts
+import { stageRetainedMedia } from "../../safe-bash-presentation-engine/media.js";
+
+// packages/safe-bash-command-pptx/src/command-object-extraction-streaming.ts
+import { openRetainedObjectExtraction, stageRetainedExtractionOutput as stageRetainedExtractionOutput2 } from "../../safe-bash-presentation-engine/opaque-objects.js";
+import { openPackageArchive as openPackageArchive2 } from "../../safe-bash-presentation-engine/retained-package.js";
+import { OfficeError } from "../../safe-bash-presentation-engine/errors.js";
+async function prepareRetainedObjectExtraction(args, request, options2) {
+  const { streaming, signal } = request, context = { ...options2.context, signal, workingStorage: streaming.workingStorage };
+  const input = await streaming.openInput(args.input, Math.min(context.limits.maxBytes, context.archiveLimits.maxArchiveBytes));
+  const archive = await openPackageArchive2(input, context);
+  let extraction, response, closing;
+  const close = () => closing ??= (async () => {
+    const results = await Promise.allSettled([response?.close(), extraction?.close(), archive.close()]);
+    for (const result of results) if (result.status === "rejected") throw result.reason;
+  })();
+  try {
+    extraction = await openRetainedObjectExtraction(archive, { part: args.part }, context);
+    if (extraction.count > (args.limits?.maxOutputs ?? context.archiveLimits.maxMembers)) throw new OfficeError("resource-limit", "Opaque output count exceeds limit.", "validate-intent");
+    if (!args.dryRun && !request.publishOutputStreams && (!args.allowPartialOutput || !request.publishOutput)) throw Object.assign(new Error("Object extraction requires atomic publication or explicit partial output."), { code: "publication-unsupported" });
+    response = await stageRetainedExtractionOutput2(extraction, context, { directory: args.outputDir ?? "", json: args.json, maxOutputBytes: options2.maxOutputBytes, allowPartialOutput: args.allowPartialOutput ?? false, operation: "objects.extract", dryRun: args.dryRun ?? false });
+    async function* publications(dryRun) {
+      if (args.outputDir) for await (const member of extraction.members()) {
+        signal.throwIfAborted();
+        yield { inputPath: args.input, outputPath: response.path(member.name), bytes: member.bytes(), originalBytes: input, inPlace: false, force: args.force ?? false, dryRun };
+      }
+    }
+    return { close, async publish() {
+      let published = 0, code;
+      try {
+        for await (const item of publications(true)) {
+          if (request.preflightOutputStream) await request.preflightOutputStream(item);
+          else if (request.publishOutput) await request.publishOutput(item);
+        }
+        if (!args.dryRun) {
+          if (request.publishOutputStreams) await request.publishOutputStreams(publications(false));
+          else for await (const item of publications(false)) {
+            await request.publishOutput(item);
+            published++;
+          }
+        }
+      } catch (error) {
+        const raw = error && typeof error === "object" && "code" in error ? error.code : void 0;
+        code = signal.aborted ? "cancelled" : typeof raw === "string" && ["resource-limit", "stale-input", "publication-unsupported"].includes(raw) ? raw : "io-failure";
+      }
+      await response.write(!code || args.json ? streaming.stdout : streaming.stderr, code ? { code, published } : void 0);
+      return { exitCode: !code ? 0 : code === "cancelled" ? 130 : code === "resource-limit" ? 4 : code === "stale-input" ? 1 : 3, stdout: new Uint8Array(), stderr: new Uint8Array() };
+    } };
+  } catch (error) {
+    await close().catch(() => {
+    });
+    throw error;
+  }
+}
+
 // packages/safe-bash-command-pptx/src/command-engine.ts
+import { stageRetainedObjects, stageRetainedFonts } from "../../safe-bash-presentation-engine/opaque-objects.js";
+import { stageRetainedTransitions } from "../../safe-bash-presentation-engine/transitions.js";
+import { stageRetainedMemberships } from "../../safe-bash-presentation-engine/memberships.js";
+import { stageRetainedPresentationSettings } from "../../safe-bash-presentation-engine/presentation-settings.js";
 import { stageRetainedTags } from "../../safe-bash-presentation-engine/tags.js";
 import { stageRetainedProperties } from "../../safe-bash-presentation-engine/properties.js";
 import { stageRetainedNotes } from "../../safe-bash-presentation-engine/notes.js";
@@ -19,13 +210,13 @@ import { stageRetainedNotes } from "../../safe-bash-presentation-engine/notes.js
 // packages/safe-bash-command-pptx/src/retained-pack-manifest.ts
 import { PagedStorage } from "@poe-platform/safe-fs/storage";
 import { resourceContext } from "../../safe-bash-presentation-engine/resource-limits.js";
-import { OfficeError as OfficeError2 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError3 } from "../../safe-bash-presentation-engine/errors.js";
 import { asciiKey, partName } from "../../safe-bash-presentation-engine/package-uri.js";
 
 // packages/safe-bash-command-pptx/src/command-package-path.ts
-import { OfficeError } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError2 } from "../../safe-bash-presentation-engine/errors.js";
 function usage(message) {
-  throw new OfficeError("invalid-value", message, "usage");
+  throw new OfficeError2("invalid-value", message, "usage");
 }
 function scopedPackagePath(manifest, path) {
   if (path === "-") return path;
@@ -49,22 +240,22 @@ async function openRetainedPackManifest(source3, settings, options2) {
   const context = resourceContext(settings), signal = context.signal ?? new AbortController().signal;
   const working = { ...settings.workingStorage }, cacheBytes = working.cacheBytes ?? 1024 * 1024;
   if (!working.fs || typeof working.directory !== "string" || !working.directory.startsWith("/") || !Number.isSafeInteger(cacheBytes) || cacheBytes < 16384 || cacheBytes % 16384)
-    throw new OfficeError2("invalid-value", "Explicit manifest storage and a valid cache budget are required.", "usage");
+    throw new OfficeError3("invalid-value", "Explicit manifest storage and a valid cache budget are required.", "usage");
   const manifestPath = options2.manifest, outputPath = options2.output;
   const pages = new PagedStorage({ fs: working.fs, cwd: working.directory, env: {}, signal }, cacheBytes / 16384);
   const index = new PagedStorage({ fs: working.fs, cwd: working.directory, env: {}, signal }, cacheBytes / 16384);
   let closed = false, closing, count = 0, parts = 0;
   const check = () => {
-    if (closed) throw new OfficeError2("invalid-handle", "Manifest is closed.", "admit");
-    if (signal.aborted) throw new OfficeError2("cancelled", "Operation cancelled.", "admit");
+    if (closed) throw new OfficeError3("invalid-handle", "Manifest is closed.", "admit");
+    if (signal.aborted) throw new OfficeError3("cancelled", "Operation cancelled.", "admit");
   };
   const usage14 = () => {
-    throw new OfficeError2("invalid-value", "Manifest requires unique canonical parts, hashes and explicit scoped files.", "usage");
+    throw new OfficeError3("invalid-value", "Manifest requires unique canonical parts, hashes and explicit scoped files.", "usage");
   };
   const limit = () => {
-    throw new OfficeError2("resource-limit", "Manifest exceeds input limits.", "admit");
+    throw new OfficeError3("resource-limit", "Manifest exceeds input limits.", "admit");
   };
-  const failure = (error) => error instanceof OfficeError2 ? error : new OfficeError2(signal.aborted ? "cancelled" : error && typeof error === "object" && "code" in error && error.code === "EFBIG" ? "resource-limit" : "io-failure", "Manifest input or storage failed.", "admit");
+  const failure = (error) => error instanceof OfficeError3 ? error : new OfficeError3(signal.aborted ? "cancelled" : error && typeof error === "object" && "code" in error && error.code === "EFBIG" ? "resource-limit" : "io-failure", "Manifest input or storage failed.", "admit");
   const close = () => {
     closed = true;
     return closing ??= (async () => {
@@ -110,10 +301,10 @@ async function openRetainedPackManifest(source3, settings, options2) {
   }
   async function member(row) {
     const fields3 = { part: await tree.property(row, "part"), sha256: await tree.property(row, "sha256") };
-    const part = await tree.smallText(fields3.part, 65535), sha2565 = await tree.smallText(fields3.sha256, 64);
+    const part = await tree.smallText(fields3.part, 65535), sha2566 = await tree.smallText(fields3.sha256, 64);
     if (part === void 0) return limit();
-    if (sha2565 === void 0) return usage14();
-    return { part, sha256: sha2565 };
+    if (sha2566 === void 0) return usage14();
+    return { part, sha256: sha2566 };
   }
   async function pathAt(row) {
     const file = await tree.property(row, "file"), path = await tree.property(file, "vfsPath");
@@ -139,7 +330,7 @@ async function openRetainedPackManifest(source3, settings, options2) {
           if (tail) yield tail;
           return;
         }
-        if (!(item.value instanceof Uint8Array)) throw new OfficeError2("invalid-type", "Manifest source returned invalid bytes.", "admit");
+        if (!(item.value instanceof Uint8Array)) throw new OfficeError3("invalid-type", "Manifest source returned invalid bytes.", "admit");
         size += item.value.length;
         if (!Number.isSafeInteger(size) || size > Math.min(context.limits.maxBytes, context.xmlLimits.maxBytes)) limit();
         for (let offset = 0; offset < item.value.length; offset += 16384) {
@@ -213,7 +404,7 @@ async function openRetainedPackManifest(source3, settings, options2) {
         try {
           check();
           const row = await names.get(asciiKey(part));
-          if (row === void 0) throw new OfficeError2("missing-binding", "Manifest member is absent.", "admit");
+          if (row === void 0) throw new OfficeError3("missing-binding", "Manifest member is absent.", "admit");
           return await pathAt(row);
         } catch (error) {
           throw failure(error);
@@ -245,8 +436,8 @@ async function openRetainedPackManifest(source3, settings, options2) {
 import { stageRetainedPackage } from "../../safe-bash-presentation-engine/package-tools.js";
 
 // packages/safe-bash-command-pptx/src/command-extract-streaming.ts
-import { openRetainedPackageExtraction, stageRetainedExtractionOutput } from "../../safe-bash-presentation-engine/package-tools.js";
-import { OfficeError as OfficeError3 } from "../../safe-bash-presentation-engine/errors.js";
+import { openRetainedPackageExtraction, stageRetainedExtractionOutput as stageRetainedExtractionOutput3 } from "../../safe-bash-presentation-engine/package-tools.js";
+import { OfficeError as OfficeError4 } from "../../safe-bash-presentation-engine/errors.js";
 async function prepareRetainedExtraction(args, request, options2) {
   const { streaming, signal } = request, context = { ...options2.context, signal, workingStorage: streaming.workingStorage };
   const input = await streaming.openInput(args.input, Math.min(context.limits.maxBytes, context.archiveLimits.maxArchiveBytes));
@@ -260,9 +451,9 @@ async function prepareRetainedExtraction(args, request, options2) {
     let total = 0;
     for await (const member of extraction.members()) total += member.size;
     if (extraction.count > (args.limits?.maxOutputs ?? context.archiveLimits.maxMembers) || !Number.isSafeInteger(total) || total > options2.maxOutputBytes)
-      throw new OfficeError3("resource-limit", "Package extraction exceeds output limits.", "validate-intent");
+      throw new OfficeError4("resource-limit", "Package extraction exceeds output limits.", "validate-intent");
     if (!request.publishOutputStreams && (!args.allowPartialOutput || !request.publishOutput)) throw Object.assign(new Error("Extraction requires a publication capability."), { code: "publication-unsupported" });
-    response = await stageRetainedExtractionOutput(extraction, context, { directory: args.outputDir, json: args.json, maxOutputBytes: options2.maxOutputBytes, allowPartialOutput: args.allowPartialOutput ?? false });
+    response = await stageRetainedExtractionOutput3(extraction, context, { directory: args.outputDir, json: args.json, maxOutputBytes: options2.maxOutputBytes, allowPartialOutput: args.allowPartialOutput ?? false });
     async function* publications(dryRun) {
       for await (const member of extraction.members()) {
         signal.throwIfAborted();
@@ -298,11 +489,11 @@ async function prepareRetainedExtraction(args, request, options2) {
 // packages/safe-bash-command-pptx/src/command-engine.ts
 import { stageRetainedText } from "../../safe-bash-presentation-engine/retained-text.js";
 import { stageRetainedInspection } from "../../safe-bash-presentation-engine/retained-inspection.js";
-import { openPackageArchive } from "../../safe-bash-presentation-engine/retained-package.js";
+import { openPackageArchive as openPackageArchive3 } from "../../safe-bash-presentation-engine/retained-package.js";
 
 // packages/safe-bash-command-pptx/src/capabilities-discovery.ts
 import { parseContentTypes } from "../../safe-bash-presentation-engine/content-types.js";
-import { OfficeError as OfficeError4 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError5 } from "../../safe-bash-presentation-engine/errors.js";
 import { readRelationshipGraph } from "../../safe-bash-presentation-engine/relationships.js";
 import { readPackage } from "../../safe-bash-presentation-engine/package-reader.js";
 import { parseXmlPart } from "../../safe-bash-presentation-engine/xml.js";
@@ -339,7 +530,7 @@ function declaredFeatureCapabilities(features, operations) {
     Object.entries(features).map(([name, feature]) => {
       const paths = feature.operations ?? (feature.operation ? [feature.operation] : featureOperations[name]);
       if (!paths?.length || paths.some((path) => !Object.hasOwn(operations, path))) {
-        throw new OfficeError4(
+        throw new OfficeError5(
           "invalid-value",
           "Capability references an undeclared operation.",
           "usage"
@@ -389,7 +580,7 @@ async function assessCapabilities(input, context) {
       try {
         contentType = types.get(part);
       } catch (error) {
-        if (!(error instanceof OfficeError4) || error.code !== "missing-binding") throw error;
+        if (!(error instanceof OfficeError5) || error.code !== "missing-binding") throw error;
       }
     }
     const type = contentType?.split(";", 1)[0].trim().toLowerCase();
@@ -404,7 +595,7 @@ async function assessCapabilities(input, context) {
       const data = reader.get(part);
       xmlBytes += data.length;
       if (xmlBytes > context.xmlLimits.maxBytes || nodes >= context.xmlLimits.maxNodes)
-        throw new OfficeError4(
+        throw new OfficeError5(
           "resource-limit",
           "Capability XML inspection limit exceeded.",
           "index"
@@ -415,7 +606,7 @@ async function assessCapabilities(input, context) {
       });
       nodes += xml.nodeCount;
       if (nodes > context.xmlLimits.maxNodes)
-        throw new OfficeError4("resource-limit", "Capability XML node limit exceeded.", "index");
+        throw new OfficeError5("resource-limit", "Capability XML node limit exceeded.", "index");
       const pending = [xml.root];
       let visited = 0;
       while (pending.length) {
@@ -3754,7 +3945,7 @@ var discoverySchemas = Object.fromEntries([
 }]));
 
 // packages/safe-bash-command-pptx/src/command-objects-add.ts
-import { OfficeError as OfficeError5 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError6 } from "../../safe-bash-presentation-engine/errors.js";
 import { addOleObject } from "../../safe-bash-presentation-engine/ole-insertion.js";
 var objectsAddUsage = "Usage: pptx objects add INPUT --slide N --file PATH --icon PATH (--program-id TEXT | --program DOCX|PPTX|XLSX) [--icon-content-type TYPE]\n  --left LENGTH --top LENGTH --width LENGTH --height LENGTH --icon-width LENGTH --icon-height LENGTH --name TEXT\n  --output PATH|--in-place|--dry-run [--force] [--json] [--limit NAME=VALUE]\nEmbed explicit inert bytes with an explicit icon. No activation or recursive payload parsing.\n";
 var length = {
@@ -3862,7 +4053,7 @@ var objectsAddSchema = {
   }
 };
 function usage2(message) {
-  throw new OfficeError5("invalid-value", message, "usage");
+  throw new OfficeError6("invalid-value", message, "usage");
 }
 function validateObjectsAddCommand(args, positionals, seen) {
   const allowed = Object.keys(objectsAddSchema.options.properties).map(
@@ -4092,7 +4283,7 @@ var packageToolsSchemas = Object.fromEntries(
 );
 
 // packages/safe-bash-command-pptx/src/command-engine-values.ts
-import { OfficeError as OfficeError6 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError7 } from "../../safe-bash-presentation-engine/errors.js";
 function commandLength(value, minimum = 1) {
   const units = { emu: 1, in: 914400, cm: 36e4, mm: 36e3, pt: 12700 };
   const unit = Object.keys(units).find((candidate) => value.endsWith(candidate));
@@ -4101,7 +4292,7 @@ function commandLength(value, minimum = 1) {
   if (!unit || pieces.length > 2 || !pieces[0] || pieces.some(
     (piece) => !piece || [...piece].some((character) => character < "0" || character > "9")
   ))
-    throw new OfficeError6(
+    throw new OfficeError7(
       "invalid-value",
       "Lengths require a decimal and emu, in, cm, mm or pt unit.",
       "usage"
@@ -4109,13 +4300,13 @@ function commandLength(value, minimum = 1) {
   const raw = Number(digits) * units[unit];
   const result = Math.sign(raw) * Math.round(Math.abs(raw));
   if (!Number.isFinite(raw) || Math.abs(raw) > Number.MAX_SAFE_INTEGER || !Number.isSafeInteger(result) || result < minimum)
-    throw new OfficeError6("invalid-value", "Length is outside the supported range.", "usage");
+    throw new OfficeError7("invalid-value", "Length is outside the supported range.", "usage");
   return result;
 }
 function commandTimestamp(value) {
   const date = new Date(value);
   if (!Number.isFinite(date.getTime()) || !value.endsWith("Z") || date.toISOString() !== value && date.toISOString() !== value.slice(0, -1) + ".000Z")
-    throw new OfficeError6(
+    throw new OfficeError7(
       "invalid-value",
       "Timestamp requires a valid UTC date with seconds and Z suffix.",
       "usage"
@@ -4149,7 +4340,7 @@ function commandJson(value) {
     }
     return JSON.parse(value);
   } catch {
-    throw new OfficeError6(
+    throw new OfficeError7(
       "invalid-value",
       "Structured slides require valid JSON without duplicate keys, at most 32 levels deep.",
       "usage"
@@ -4158,12 +4349,12 @@ function commandJson(value) {
 }
 
 // packages/safe-bash-command-pptx/src/command-package-tools.ts
-import { sha256 } from "@noble/hashes/sha2.js";
-import { OfficeError as OfficeError7 } from "../../safe-bash-presentation-engine/errors.js";
+import { sha256 as sha2562 } from "@noble/hashes/sha2.js";
+import { OfficeError as OfficeError8 } from "../../safe-bash-presentation-engine/errors.js";
 import { asciiKey as asciiKey2, partName as partName2 } from "../../safe-bash-presentation-engine/package-uri.js";
 import { extractPackage, packPackage } from "../../safe-bash-presentation-engine/package-tools.js";
 function usage3(message) {
-  throw new OfficeError7("invalid-value", message, "usage");
+  throw new OfficeError8("invalid-value", message, "usage");
 }
 function canonical(part) {
   try {
@@ -4214,7 +4405,7 @@ async function executePackageCommand(args, request, options2) {
     );
     const files = await extractPackage(bytes2, context, args.parts ? { parts: args.parts } : {});
     if (files.length > (args.limits?.maxOutputs ?? context.archiveLimits.maxMembers) || files.reduce((sum, file) => sum + file.bytes.length, 0) > options2.maxOutputBytes)
-      throw new OfficeError7(
+      throw new OfficeError8(
         "resource-limit",
         "Package extraction exceeds output limits.",
         "validate-intent"
@@ -4246,7 +4437,7 @@ async function executePackageCommand(args, request, options2) {
     };
   }
   if (args.creation?.author !== void 0 || args.creation?.timestamp !== void 0)
-    throw new OfficeError7(
+    throw new OfficeError8(
       "unsupported-edit",
       "Pack metadata overrides are unavailable; source properties are preserved.",
       "validate-intent"
@@ -4256,7 +4447,7 @@ async function executePackageCommand(args, request, options2) {
     Math.min(context.limits.maxBytes, context.xmlLimits.maxBytes)
   );
   if (encoded.length > Math.min(context.limits.maxBytes, context.xmlLimits.maxBytes))
-    throw new OfficeError7("resource-limit", "Manifest exceeds byte limit.", "admit");
+    throw new OfficeError8("resource-limit", "Manifest exceeds byte limit.", "admit");
   let value;
   try {
     value = commandJson(new TextDecoder("utf-8", { fatal: true }).decode(encoded));
@@ -4266,7 +4457,7 @@ async function executePackageCommand(args, request, options2) {
   if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).some((key) => key !== "parts") || !("parts" in value) || !Array.isArray(value.parts) || !value.parts.length)
     usage3("Manifest requires a nonempty parts array.");
   if (value.parts.length > context.archiveLimits.maxMembers)
-    throw new OfficeError7("resource-limit", "Manifest exceeds member limit.", "admit");
+    throw new OfficeError8("resource-limit", "Manifest exceeds member limit.", "admit");
   const parts = value.parts;
   for (const item of parts)
     if (!item || typeof item !== "object" || Object.keys(item).some((key) => !["part", "sha256", "file"].includes(key)) || !canonical(item.part) || typeof item.sha256 !== "string" || item.sha256.length !== 64 || [...item.sha256].some((c) => !"0123456789abcdef".includes(c)) || !item.file || typeof item.file !== "object" || Object.keys(item.file).length !== 1 || typeof item.file.vfsPath !== "string" || !item.file.vfsPath.length)
@@ -4288,7 +4479,7 @@ async function executePackageCommand(args, request, options2) {
     );
     total += bytes2.length;
     if (bytes2.length > context.archiveLimits.maxEntryBytes || total > context.archiveLimits.maxTotalBytes)
-      throw new OfficeError7("resource-limit", "Manifest contents exceed byte limit.", "admit");
+      throw new OfficeError8("resource-limit", "Manifest contents exceed byte limit.", "admit");
     members.push({ part: item.part, sha256: item.sha256, bytes: bytes2 });
   }
   const bytes = await packPackage(
@@ -4297,9 +4488,9 @@ async function executePackageCommand(args, request, options2) {
     args.creation?.kind ? { kind: args.creation.kind } : {}
   );
   if (bytes.length > options2.maxOutputBytes)
-    throw new OfficeError7("resource-limit", "Packed output exceeds byte limit.", "validate-intent");
+    throw new OfficeError8("resource-limit", "Packed output exceeds byte limit.", "validate-intent");
   const dryRun = args.dryRun ?? false;
-  const fingerprint = [...sha256(bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+  const fingerprint = [...sha2562(bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
   if (args.output && args.output !== "-" && !request.publishOutput)
     throw Object.assign(new Error("Output publication unavailable."), {
       code: "publication-unsupported"
@@ -4333,7 +4524,7 @@ async function executePackageCommand(args, request, options2) {
 }
 
 // packages/safe-bash-command-pptx/src/command-diff.ts
-import { OfficeError as OfficeError8 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError9 } from "../../safe-bash-presentation-engine/errors.js";
 import { comparePresentations, stageRetainedDiff } from "../../safe-bash-presentation-engine/diff.js";
 
 // packages/safe-bash-command-pptx/src/diff-schema.ts
@@ -4440,7 +4631,7 @@ async function executeDiffCommand(request, options2) {
   let exitCode = 0;
   let staged;
   const failure = (error) => {
-    const office = error instanceof OfficeError8 ? error : void 0;
+    const office = error instanceof OfficeError9 ? error : void 0;
     const code = request.signal.aborted ? "cancelled" : office?.code ?? (error && typeof error === "object" && "code" in error && error.code === "resource-limit" ? "resource-limit" : "io-failure");
     exitCode = code === "cancelled" ? 130 : 2;
     const message = office?.message ?? (code === "cancelled" ? "Comparison cancelled." : "Comparison input could not be read.");
@@ -4458,7 +4649,7 @@ async function executeDiffCommand(request, options2) {
     };
   };
   const usage14 = (message) => {
-    throw new OfficeError8("invalid-value", message, "usage");
+    throw new OfficeError9("invalid-value", message, "usage");
   };
   try {
     let byteCount = 0;
@@ -4466,7 +4657,7 @@ async function executeDiffCommand(request, options2) {
       if (!(bytes2 instanceof Uint8Array)) usage14("Arguments must be byte arrays.");
       byteCount += bytes2.byteLength;
       if (byteCount > options2.maxArgumentBytes)
-        throw new OfficeError8("resource-limit", "Argument limit exceeded.", "admit");
+        throw new OfficeError9("resource-limit", "Argument limit exceeded.", "admit");
       try {
         return new TextDecoder("utf-8", { fatal: true }).decode(bytes2);
       } catch {
@@ -4544,7 +4735,7 @@ async function executeDiffCommand(request, options2) {
         }
       };
       if (mode === "effective-formatting")
-        throw new OfficeError8(
+        throw new OfficeError9(
           "unsupported-profile",
           "Effective formatting comparison is not supported.",
           "usage"
@@ -4557,7 +4748,7 @@ async function executeDiffCommand(request, options2) {
         try {
           staged = await stageRetainedDiff(left, right, { mode, json, maxOutputBytes }, { ...context, workingStorage: request.streaming.workingStorage });
         } catch (error) {
-          if (error instanceof OfficeError8 && error.code === "resource-limit" && error.phase === "publish") throw new OfficeError8("resource-limit", "Comparison output limit exceeded.", "admit");
+          if (error instanceof OfficeError9 && error.code === "resource-limit" && error.phase === "publish") throw new OfficeError9("resource-limit", "Comparison output limit exceeded.", "admit");
           throw error;
         }
         exitCode = staged.equal ? 0 : 1;
@@ -4609,7 +4800,7 @@ async function executeDiffCommand(request, options2) {
   let bytes = encoder.encode(json ? JSON.stringify(result) + "\n" : human);
   if (bytes.length > maxOutputBytes) {
     result = failure(
-      new OfficeError8("resource-limit", "Comparison output limit exceeded.", "admit")
+      new OfficeError9("resource-limit", "Comparison output limit exceeded.", "admit")
     );
     bytes = encoder.encode(json ? JSON.stringify(result) + "\n" : human);
   }
@@ -4728,8 +4919,8 @@ var templateSchema = {
 };
 
 // packages/safe-bash-command-pptx/src/command-template.ts
-import { sha256 as sha2562 } from "@noble/hashes/sha2.js";
-import { OfficeError as OfficeError9 } from "../../safe-bash-presentation-engine/errors.js";
+import { sha256 as sha2563 } from "@noble/hashes/sha2.js";
+import { OfficeError as OfficeError10 } from "../../safe-bash-presentation-engine/errors.js";
 import {
   applyTemplateBindings,
   validateTemplateBindings
@@ -4743,7 +4934,7 @@ function validateTemplateData(value) {
   else validateTemplateRepeat(value);
 }
 function usage4(message) {
-  throw new OfficeError9("invalid-value", message, "usage");
+  throw new OfficeError10("invalid-value", message, "usage");
 }
 function validateTemplateCommand(args, positionals, seen) {
   if ([...seen].some(
@@ -4807,7 +4998,7 @@ async function executeTemplateCommand(args, request, options2) {
       code: "publication-unsupported"
     });
   const fingerprint = Array.from(
-    sha2562(mutation2.bytes),
+    sha2563(mutation2.bytes),
     (byte) => byte.toString(16).padStart(2, "0")
   ).join("");
   const repeat = Array.isArray(bindings) ? void 0 : bindings;
@@ -5095,11 +5286,11 @@ var commentSchemas = Object.fromEntries(
 );
 
 // packages/safe-bash-command-pptx/src/command-comments.ts
-import { OfficeError as OfficeError10 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError11 } from "../../safe-bash-presentation-engine/errors.js";
 import { mutateComments, readComments, readCommentAuthors } from "../../safe-bash-presentation-engine/comments.js";
 import { SelectionError } from "../../safe-bash-presentation-engine/selectors.js";
 function usage5(message) {
-  throw new OfficeError10("invalid-value", message, "usage");
+  throw new OfficeError11("invalid-value", message, "usage");
 }
 function validateCommentsCommand(args, positionals, seen) {
   const allowed = Object.keys(commentSchemas[args.operation].options.properties).map(
@@ -5601,7 +5792,7 @@ var accessibilitySchemas = Object.fromEntries(
 );
 
 // packages/safe-bash-command-pptx/src/command-accessibility.ts
-import { OfficeError as OfficeError11 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError12 } from "../../safe-bash-presentation-engine/errors.js";
 import {
   readAccessibility,
   mutateAccessibility,
@@ -5609,7 +5800,7 @@ import {
 } from "../../safe-bash-presentation-engine/accessibility.js";
 import { SelectionError as SelectionError2 } from "../../safe-bash-presentation-engine/selectors.js";
 function usage6(message) {
-  throw new OfficeError11("invalid-value", message, "usage");
+  throw new OfficeError12("invalid-value", message, "usage");
 }
 function validateAccessibilityCommand(args, positionals, seen) {
   const allowed = Object.keys(accessibilitySchemas[args.operation].options.properties).map(
@@ -5719,13 +5910,13 @@ async function executeAccessibilityCommand(args, request, options2) {
 }
 
 // packages/safe-bash-command-pptx/src/command-metadata.ts
-import { OfficeError as OfficeError12 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError13 } from "../../safe-bash-presentation-engine/errors.js";
 import { coreDefinition, mutateProperty, readProperties } from "../../safe-bash-presentation-engine/properties.js";
 import { sanitize as sanitizePresentation } from "../../safe-bash-presentation-engine/sanitize.js";
 import { mutateTags, readTags } from "../../safe-bash-presentation-engine/tags.js";
 import { SelectionError as SelectionError3 } from "../../safe-bash-presentation-engine/selectors.js";
 function usage7(message) {
-  throw new OfficeError12("invalid-value", message, "usage");
+  throw new OfficeError13("invalid-value", message, "usage");
 }
 function removalCategories(value) {
   const categories = ["notes", "comments", "properties", "links", "objects"];
@@ -5827,11 +6018,11 @@ ${sanitization.retained.map((entry) => `Retained ${entry.category} ${entry.kind}
 }
 
 // packages/safe-bash-command-pptx/src/command-notes.ts
-import { OfficeError as OfficeError13 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError14 } from "../../safe-bash-presentation-engine/errors.js";
 import { mutateNotes, readNotes, validateNotesOptions } from "../../safe-bash-presentation-engine/notes.js";
 import { readSelectionIndex, SelectionError as SelectionError4 } from "../../safe-bash-presentation-engine/selectors.js";
 function usage8(message) {
-  throw new OfficeError13("invalid-value", message, "usage");
+  throw new OfficeError14("invalid-value", message, "usage");
 }
 function validateNotesCommand(args, positionals, seen) {
   const allowed = Object.keys(noteSchemas[args.operation].options.properties).map(
@@ -6113,12 +6304,12 @@ var linkSchemas = Object.fromEntries(
 // packages/safe-bash-command-pptx/src/command-links.ts
 import { readPackage as readPackage2 } from "../../safe-bash-presentation-engine/package-reader.js";
 import { parseXmlPart as parseXmlPart2 } from "../../safe-bash-presentation-engine/xml.js";
-import { OfficeError as OfficeError14 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError15 } from "../../safe-bash-presentation-engine/errors.js";
 import { listLinks, setLink, removeLink, isOrdinaryLinkUrl } from "../../safe-bash-presentation-engine/links.js";
 import { readShapes } from "../../safe-bash-presentation-engine/shape-operations.js";
 import { SelectionError as SelectionError5 } from "../../safe-bash-presentation-engine/selectors.js";
 function usage9(message) {
-  throw new OfficeError14("invalid-value", message, "usage");
+  throw new OfficeError15("invalid-value", message, "usage");
 }
 function validateLinkCommand(args, positionals, seen) {
   const allowed = Object.keys(linkSchemas[args.operation].options.properties).map(
@@ -6256,7 +6447,7 @@ async function executeLinkCommand(args, request, options2) {
     if (args.operation === "links.add" && selectedLinks.some(
       (link) => link.part === selection.owner && link.shapeId === selection.id && (path ? link.path.length === path.length + 1 && path.every((position, i) => link.path[i] === position) : existingShapeLinks.has(JSON.stringify([link.part, link.shapeId])))
     ))
-      throw new OfficeError14(
+      throw new OfficeError15(
         "unsupported-edit",
         "Selected trigger already contains a link.",
         "validate-intent"
@@ -7283,11 +7474,11 @@ import { readAnimations } from "../../safe-bash-presentation-engine/animations.j
 import { mutateAnimations, mutateAnimationsBatch, validateAnimationOptions as validateAnimationOptions2 } from "../../safe-bash-presentation-engine/animation-editing.js";
 
 // packages/safe-bash-command-pptx/src/animation-batch-command.ts
-import { OfficeError as OfficeError15 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError16 } from "../../safe-bash-presentation-engine/errors.js";
 import { validateAnimationOptions } from "../../safe-bash-presentation-engine/animation-editing.js";
 import { decodeSelectionToken, SelectionError as SelectionError6 } from "../../safe-bash-presentation-engine/selectors.js";
 function invalid(message) {
-  throw new OfficeError15("invalid-value", message, "usage");
+  throw new OfficeError16("invalid-value", message, "usage");
 }
 function record(value, keys) {
   if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).some((key) => !keys.includes(key))) invalid("Invalid animation batch fields.");
@@ -7495,11 +7686,11 @@ var equationSchemas = Object.fromEntries(["list", "get", "add"].map((action) =>
 }));
 
 // packages/safe-bash-command-pptx/src/command-equations.ts
-import { OfficeError as OfficeError16 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError17 } from "../../safe-bash-presentation-engine/errors.js";
 import { readEquations, mutateEquations } from "../../safe-bash-presentation-engine/equations.js";
 import { SelectionError as SelectionError7 } from "../../safe-bash-presentation-engine/selectors.js";
 function usage10(message) {
-  throw new OfficeError16("invalid-value", message, "usage");
+  throw new OfficeError17("invalid-value", message, "usage");
 }
 function validateEquationCommand(args, positionals, seen) {
   const schema = equationSchemas[args.operation];
@@ -7649,12 +7840,12 @@ var opaqueSchemas = Object.fromEntries(["objects.list", "objects.extract", "font
 }));
 
 // packages/safe-bash-command-pptx/src/command-opaque.ts
-import { sha256 as sha2563 } from "@noble/hashes/sha2.js";
-import { OfficeError as OfficeError17 } from "../../safe-bash-presentation-engine/errors.js";
+import { sha256 as sha2564 } from "@noble/hashes/sha2.js";
+import { OfficeError as OfficeError18 } from "../../safe-bash-presentation-engine/errors.js";
 import { extractObject, readFonts, readObjects } from "../../safe-bash-presentation-engine/opaque-objects.js";
 import { partName as partName3 } from "../../safe-bash-presentation-engine/package-uri.js";
 function usage11(message) {
-  throw new OfficeError17("invalid-value", message, "usage");
+  throw new OfficeError18("invalid-value", message, "usage");
 }
 function validateOpaqueCommand(args, positionals, seen) {
   const schema = opaqueSchemas[args.operation];
@@ -7691,7 +7882,7 @@ async function executeOpaqueCommand(args, request, options2) {
   }
   const extracted = await extractObject(bytes, { part: args.part }, context);
   const files = [{ part: extracted.part, name: extracted.name, bytes: extracted.bytes }, ...extracted.dependencies];
-  if (files.length > (args.limits?.maxOutputs ?? context.archiveLimits.maxMembers)) throw new OfficeError17("resource-limit", "Opaque output count exceeds limit.", "validate-intent");
+  if (files.length > (args.limits?.maxOutputs ?? context.archiveLimits.maxMembers)) throw new OfficeError18("resource-limit", "Opaque output count exceeds limit.", "validate-intent");
   const dryRun = args.dryRun ?? false;
   const allowPartialOutput = args.allowPartialOutput ?? false;
   if (!dryRun && !request.publishOutputs && (!allowPartialOutput || !request.publishOutput)) throw Object.assign(new Error("Object extraction requires atomic publication or explicit partial output."), { code: "publication-unsupported" });
@@ -7699,7 +7890,7 @@ async function executeOpaqueCommand(args, request, options2) {
     part: file.part,
     name: file.name,
     path: `${args.outputDir ?? ""}${!args.outputDir || args.outputDir.endsWith("/") ? "" : "/"}${file.name}`,
-    sha256: [...sha2563(file.bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join(""),
+    sha256: [...sha2564(file.bytes)].map((byte) => byte.toString(16).padStart(2, "0")).join(""),
     bytes: file.bytes.length
   }));
   const publications = args.outputDir ? files.map((file, index) => ({ inputPath: args.input, outputPath: opaqueManifest[index].path, bytes: file.bytes, originalBytes: bytes, inPlace: false, force: args.force ?? false, dryRun })) : void 0;
@@ -7723,7 +7914,7 @@ import { readMedia } from "../../safe-bash-presentation-engine/media.js";
 import { extractMedia } from "../../safe-bash-presentation-engine/media-extraction.js";
 
 // packages/safe-bash-command-pptx/src/command-media-editing.ts
-import { OfficeError as OfficeError18 } from "../../safe-bash-presentation-engine/errors.js";
+import { OfficeError as OfficeError19 } from "../../safe-bash-presentation-engine/errors.js";
 import { addMedia, replaceMedia } from "../../safe-bash-presentation-engine/media-editing.js";
 
 // packages/safe-bash-command-pptx/src/media-schema.ts
@@ -7973,7 +8164,7 @@ for (const action of ["add", "replace", "extract"]) {
 
 // packages/safe-bash-command-pptx/src/command-media-editing.ts
 function usage12(message) {
-  throw new OfficeError18("invalid-value", message, "usage");
+  throw new OfficeError19("invalid-value", message, "usage");
 }
 function validateMediaEditingCommand(args, positionals, seen) {
   const allowed = Object.keys(mediaSchemas[args.operation].options.properties).map(
@@ -9067,8 +9258,8 @@ import {
 import { readBackgrounds, mutateBackground } from "../../safe-bash-presentation-engine/backgrounds.js";
 import { replacePresentationText } from "../../safe-bash-presentation-engine/text-replacement.js";
 import { readPresentationText } from "../../safe-bash-presentation-engine/text-reading.js";
-import { OfficeError as OfficeError19 } from "../../safe-bash-presentation-engine/errors.js";
-import { sha256 as sha2564 } from "@noble/hashes/sha2.js";
+import { OfficeError as OfficeError20 } from "../../safe-bash-presentation-engine/errors.js";
+import { sha256 as sha2565 } from "@noble/hashes/sha2.js";
 import { packageUri, partName as partName4 } from "../../safe-bash-presentation-engine/package-uri.js";
 import {
   SelectionError as SelectionError8,
@@ -9269,7 +9460,7 @@ Slides add requires an exact layout name or part URI; position defaults to appen
 Title/body match placeholder types; indexed bindings use --placeholders-json.
 `;
 function usage13(message) {
-  throw new OfficeError19("invalid-value", message, "usage");
+  throw new OfficeError20("invalid-value", message, "usage");
 }
 function paragraphTabLength(length4) {
   if (Object.keys(length4).some((key) => !["value", "unit"].includes(key)) || typeof length4.value !== "number" || !Number.isFinite(length4.value) || length4.value < 0 || typeof length4.unit !== "string")
@@ -9528,7 +9719,7 @@ function parse(raw, maximum, output3) {
     size += bytes.length + 1;
     if (size > maximum) {
       if (invalidUtf8) usage13("Arguments must be UTF-8.");
-      throw new OfficeError19("resource-limit", "Argument limit exceeded.", "usage");
+      throw new OfficeError20("resource-limit", "Argument limit exceeded.", "usage");
     }
     try {
       args.push(decoder.decode(bytes));
@@ -10180,7 +10371,7 @@ function parse(raw, maximum, output3) {
         try {
           parsed = admitFontMetrics(JSON.parse(value));
         } catch (error) {
-          if (error instanceof OfficeError19) throw error;
+          if (error instanceof OfficeError20) throw error;
           usage13("Metrics require a valid JSON metric object.");
         }
       } else if (["bold", "italic", "wrap"].includes(key)) {
@@ -11906,10 +12097,10 @@ async function transferLocations(bytes, budget) {
     (edge) => relationshipNamespaces.some((namespace) => edge.type === `${namespace}/officeDocument`)
   );
   const root = roots.length === 1 ? roots[0].targetPart : void 0;
-  if (!root) throw new OfficeError19("invalid-opc", "Presentation part is missing.", "index");
+  if (!root) throw new OfficeError20("invalid-opc", "Presentation part is missing.", "index");
   const relationshipNamespace = roots[0].type.slice(0, -"/officeDocument".length);
   const xml = budget.xml(reader.get(root));
-  const fingerprint = Array.from(sha2564(bytes), (byte) => byte.toString(16).padStart(2, "0")).join(
+  const fingerprint = Array.from(sha2565(bytes), (byte) => byte.toString(16).padStart(2, "0")).join(
     ""
   );
   const locations = xml.root.children.filter(
@@ -11925,7 +12116,7 @@ async function transferLocations(bytes, budget) {
       (edge) => edge.id === reference && edge.type === `${relationshipNamespace}/slide`
     )?.targetPart;
     if (!id || !owner || !reader.has(owner))
-      throw new OfficeError19("invalid-opc", "Referenced slide is missing.", "index");
+      throw new OfficeError20("invalid-opc", "Referenced slide is missing.", "index");
     return {
       fingerprint,
       scope: "slides",
@@ -12035,7 +12226,7 @@ async function executeRequest(request, options2, owned) {
     output3.operation = args.operation;
     const operation2 = args.operation;
     if (args.operation === "pack" && request.streaming) {
-      if (args.creation?.author !== void 0 || args.creation?.timestamp !== void 0) throw new OfficeError19("unsupported-edit", "Pack metadata overrides are unavailable; source properties are preserved.", "validate-intent");
+      if (args.creation?.author !== void 0 || args.creation?.timestamp !== void 0) throw new OfficeError20("unsupported-edit", "Pack metadata overrides are unavailable; source properties are preserved.", "validate-intent");
       const streaming = request.streaming, context = { ...options2.context, signal: request.signal, workingStorage: streaming.workingStorage };
       const input = await streaming.openInput(args.manifest, Math.min(context.limits.maxBytes, context.xmlLimits.maxBytes));
       const manifest = await openRetainedPackManifest(input.stream(), context, { manifest: args.manifest, ...args.output === void 0 ? {} : { output: args.output } });
@@ -12047,7 +12238,7 @@ async function executeRequest(request, options2, owned) {
         yield* source3.stream();
       }, context, args.creation?.kind ? { kind: args.creation.kind } : {});
       owned.push(packed);
-      if (packed.size > options2.maxOutputBytes) throw new OfficeError19("resource-limit", "Packed output exceeds byte limit.", "validate-intent");
+      if (packed.size > options2.maxOutputBytes) throw new OfficeError20("resource-limit", "Packed output exceeds byte limit.", "validate-intent");
       const dryRun = args.dryRun ?? false;
       result = {
         version: 1,
@@ -12067,6 +12258,14 @@ async function executeRequest(request, options2, owned) {
       } else if (args.output === "-" && !dryRun) stagedOutput = { close: packed.close, async write(sink) {
         for await (const bytes of packed.bytes()) await sink.write(bytes);
       } };
+    } else if (args.operation === "media.extract" && request.streaming && (!request.publishOutputs || request.publishOutputStreams) && (!request.preflightOutput || request.preflightOutputStream)) {
+      retainedExtraction = await prepareRetainedMediaExtraction(args, request, options2);
+      owned.push(retainedExtraction);
+      result = success(operation2, null);
+    } else if (args.operation === "objects.extract" && request.streaming && (!request.publishOutputs || request.publishOutputStreams) && (!request.preflightOutput || request.preflightOutputStream)) {
+      retainedExtraction = await prepareRetainedObjectExtraction(args, request, options2);
+      owned.push(retainedExtraction);
+      result = success(operation2, null);
     } else if (args.operation === "extract" && request.streaming && (!request.publishOutputs || request.publishOutputStreams) && (!request.preflightOutput || request.preflightOutputStream)) {
       retainedExtraction = await prepareRetainedExtraction(args, request, options2);
       owned.push(retainedExtraction);
@@ -12074,7 +12273,7 @@ async function executeRequest(request, options2, owned) {
     } else if (args.operation === "xml.set" && request.streaming) {
       if (args.token) decodeSelectionToken2(args.token);
       const streaming = request.streaming, context = { ...options2.context, signal: request.signal, workingStorage: streaming.workingStorage };
-      if (!context.validationLimits) throw new OfficeError19("invalid-value", "XML operations require explicit validation limits.", "usage");
+      if (!context.validationLimits) throw new OfficeError20("invalid-value", "XML operations require explicit validation limits.", "usage");
       const input = await streaming.openInput(args.input, Math.min(context.limits.maxBytes, context.archiveLimits.maxArchiveBytes));
       const maxReplacementBytes = Math.min(context.validationLimits.maxBytes, context.archiveLimits.maxEntryBytes), file = args.file;
       async function* replacement() {
@@ -12097,6 +12296,65 @@ async function executeRequest(request, options2, owned) {
         publication = { inputPath: args.input, outputPath: destination, bytes: staged.bytes(), originalBytes: input, inPlace: args.inPlace ?? false, force: args.force ?? false, dryRun };
       }
       result = success(operation2, null);
+    } else if ((args.operation === "media.list" || args.operation === "media.get") && request.streaming) {
+      const context = { ...options2.context, signal: request.signal, workingStorage: request.streaming.workingStorage };
+      const input = await request.streaming.openInput(args.input, Math.min(context.limits.maxBytes, context.archiveLimits.maxArchiveBytes));
+      const hash = sha2565.create();
+      for await (const bytes of input.stream()) {
+        request.signal.throwIfAborted();
+        hash.update(bytes);
+      }
+      const fingerprint = Array.from(hash.digest(), (byte) => byte.toString(16).padStart(2, "0")).join("");
+      const archive = await openPackageArchive3(input, context);
+      let failed = false;
+      try {
+        const staged = await stageRetainedMedia(archive, fingerprint, {
+          ...args.scope === void 0 ? {} : { scope: args.scope },
+          ...args.slide === void 0 ? {} : { slide: args.slide },
+          ...args.shape === void 0 ? {} : { shape: args.shape },
+          ...args.token === void 0 ? {} : { select: args.token }
+        }, context, { operation: args.operation, json: args.json, maxOutputBytes: options2.maxOutputBytes });
+        stagedOutput = staged.output;
+        exitCode = staged.ok ? 0 : 1;
+      } catch (error) {
+        failed = true;
+        throw error;
+      } finally {
+        try {
+          await archive.close();
+        } catch (error) {
+          if (!failed) {
+            await stagedOutput?.close().catch(() => {
+            });
+            await Promise.reject(error);
+          }
+        }
+      }
+      owned.push(stagedOutput);
+      result = success(operation2, null);
+    } else if ((args.operation === "objects.list" || args.operation === "fonts.list") && request.streaming) {
+      const context = { ...options2.context, signal: request.signal, workingStorage: request.streaming.workingStorage };
+      const input = await request.streaming.openInput(args.input, Math.min(context.limits.maxBytes, context.archiveLimits.maxArchiveBytes));
+      const archive = await openPackageArchive3(input, context);
+      let failed = false;
+      try {
+        stagedOutput = await (args.operation === "fonts.list" ? stageRetainedFonts : stageRetainedObjects)(archive, context, { json: args.json, maxOutputBytes: options2.maxOutputBytes });
+      } catch (error) {
+        failed = true;
+        throw error;
+      } finally {
+        try {
+          await archive.close();
+        } catch (error) {
+          if (!failed) {
+            await stagedOutput?.close().catch(() => {
+            });
+            await Promise.reject(error);
+          }
+        }
+      }
+      owned.push(stagedOutput);
+      result = success(operation2, null);
     } else if (args.operation === "slides.set" && request.streaming) {
       if (args.token) decodeSelectionToken2(args.token);
       const input = await request.streaming.openInput(args.input, Math.min(options2.context.limits.maxBytes, options2.context.archiveLimits.maxArchiveBytes));
@@ -12114,21 +12372,29 @@ async function executeRequest(request, options2, owned) {
         publication = { inputPath: args.input, outputPath: destination, bytes: staged.bytes(), originalBytes: input, inPlace: args.inPlace ?? false, force: args.force ?? false, dryRun };
       }
       result = success(operation2, null);
-    } else if ((args.operation === "inspect" || args.operation === "text.get" || args.operation === "fields.list" || args.operation === "fields.get" || args.operation === "text.frames.list" || args.operation === "text.frames.get" || args.operation === "notes.list" || args.operation === "notes.get" || args.operation === "properties.list" || args.operation === "properties.get" || args.operation === "tags.list" || args.operation === "tags.get" || args.operation === "xml.get") && request.streaming) {
-      if (args.token && args.operation !== "notes.list" && args.operation !== "notes.get" && args.operation !== "tags.list" && args.operation !== "tags.get") decodeSelectionToken2(args.token);
+    } else if ((args.operation === "inspect" || args.operation === "text.get" || args.operation === "fields.list" || args.operation === "fields.get" || args.operation === "text.frames.list" || args.operation === "text.frames.get" || args.operation === "text.runs.list" || args.operation === "text.runs.get" || args.operation === "text.paragraphs.list" || args.operation === "text.paragraphs.get" || args.operation === "notes.list" || args.operation === "notes.get" || args.operation === "properties.list" || args.operation === "properties.get" || args.operation === "tags.list" || args.operation === "tags.get" || args.operation === "settings.list" || args.operation === "settings.get" || args.operation === "sections.list" || args.operation === "sections.get" || args.operation === "shows.list" || args.operation === "shows.get" || args.operation === "transitions.list" || args.operation === "transitions.get" || args.operation === "xml.get") && request.streaming) {
+      if (args.token && args.operation !== "notes.list" && args.operation !== "notes.get" && args.operation !== "tags.list" && args.operation !== "tags.get" && !["sections.list", "sections.get", "shows.list", "shows.get", "transitions.list", "transitions.get"].includes(args.operation)) decodeSelectionToken2(args.token);
       const input = await request.streaming.openInput(args.input, Math.min(options2.context.limits.maxBytes, options2.context.archiveLimits.maxArchiveBytes));
-      const hash = sha2564.create();
+      const hash = sha2565.create();
       for await (const bytes of input.stream()) {
         request.signal.throwIfAborted();
         hash.update(bytes);
       }
       const fingerprint = Array.from(hash.digest(), (byte) => byte.toString(16).padStart(2, "0")).join("");
       const context = { ...options2.context, signal: request.signal, workingStorage: request.streaming.workingStorage };
-      const archive = await openPackageArchive(input, context);
+      const archive = await openPackageArchive3(input, context);
       let failed = false;
       try {
-        const scope = args.operation === "notes.list" || args.operation === "notes.get" || args.operation === "tags.list" || args.operation === "tags.get" ? void 0 : args.token ? decodeSelectionToken2(args.token).scope : args.scope;
-        stagedOutput = args.operation === "tags.list" || args.operation === "tags.get" ? await stageRetainedTags(archive, fingerprint, {
+        const scope = args.operation === "notes.list" || args.operation === "notes.get" || args.operation === "tags.list" || args.operation === "tags.get" || args.operation === "sections.list" || args.operation === "sections.get" || args.operation === "shows.list" || args.operation === "shows.get" || args.operation === "transitions.list" || args.operation === "transitions.get" ? void 0 : args.token ? decodeSelectionToken2(args.token).scope : args.scope;
+        stagedOutput = args.operation === "transitions.list" || args.operation === "transitions.get" ? await stageRetainedTransitions(archive, fingerprint, args.operation === "transitions.list" && !args.token && args.slide === void 0 ? {} : { selection: args.token ? { token: args.token } : {
+          kind: "slide",
+          scope: "slides",
+          ...args.slide === void 0 ? {} : { position: { coordinateSystem: "one-based", value: args.slide } },
+          ...args.all ? { all: true } : {}
+        } }, context, { operation: args.operation, json: args.json, maxOutputBytes: options2.maxOutputBytes }) : args.operation === "sections.list" || args.operation === "sections.get" || args.operation === "shows.list" || args.operation === "shows.get" ? await stageRetainedMemberships(archive, fingerprint, args.operation.startsWith("sections.") ? "sections" : "shows", {
+          ...args.token === void 0 ? {} : { token: args.token },
+          ...args.slide === void 0 ? {} : { slide: args.slide }
+        }, context, { operation: args.operation, json: args.json, maxOutputBytes: options2.maxOutputBytes }) : args.operation === "settings.list" || args.operation === "settings.get" ? await stageRetainedPresentationSettings(archive, fingerprint, context, { operation: args.operation, json: args.json, maxOutputBytes: options2.maxOutputBytes }) : args.operation === "tags.list" || args.operation === "tags.get" ? await stageRetainedTags(archive, fingerprint, {
           ...args.scope === void 0 ? {} : { scope: args.scope },
           ...args.token ? { selection: { token: args.token } } : args.slide === void 0 ? args.all ? { selection: { all: true } } : {} : { selection: { kind: "slide", position: { coordinateSystem: "one-based", value: args.slide }, ...args.all ? { all: true } : {} } }
         }, context, { operation: args.operation, json: args.json, maxOutputBytes: options2.maxOutputBytes }) : args.operation === "properties.list" || args.operation === "properties.get" ? await stageRetainedProperties(archive, fingerprint, args.metadataName === void 0 ? {} : { name: args.metadataName }, context, { operation: args.operation, json: args.json, maxOutputBytes: options2.maxOutputBytes }) : args.operation === "notes.list" || args.operation === "notes.get" ? await stageRetainedNotes(archive, fingerprint, { selection: {
@@ -12144,6 +12410,7 @@ async function executeRequest(request, options2, owned) {
           ...args.scope === void 0 ? {} : { scope: args.scope },
           ...args.all === void 0 ? {} : { all: args.all }
         }, context, { json: args.json, pretty: args.pretty ?? false, maxOutputBytes: options2.maxOutputBytes }) : args.operation !== "inspect" ? await stageRetainedText(archive, fingerprint, {
+          ...args.operation.startsWith("text.runs.") ? args.runEdit : args.operation.startsWith("text.paragraphs.") ? args.paragraphEdit : {},
           ...scope === void 0 ? {} : { scope },
           ...args.token ? { select: { token: args.token } } : args.slide === void 0 ? {} : { select: { kind: "slide", position: { coordinateSystem: "one-based", value: args.slide } } },
           ...args.shape === void 0 ? {} : { shape: args.shape }
@@ -12157,7 +12424,7 @@ async function executeRequest(request, options2, owned) {
         }, context, { json: args.json, maxOutputBytes: options2.maxOutputBytes });
       } catch (error) {
         failed = true;
-        if (error instanceof OfficeError19 && error.code === "resource-limit" && error.phase === "publish") return outputLimitFailure(operation2, args.json);
+        if (error instanceof OfficeError20 && error.code === "resource-limit" && error.phase === "publish") return outputLimitFailure(operation2, args.json);
         throw error;
       } finally {
         try {
@@ -12177,12 +12444,12 @@ async function executeRequest(request, options2, owned) {
       if (request.streaming) {
         const input = await request.streaming.openInput(args.input, maxBytes);
         const context = { ...options2.context, signal: request.signal, workingStorage: request.streaming.workingStorage };
-        const archive = await openPackageArchive(input, context);
+        const archive = await openPackageArchive3(input, context);
         let validation;
         let failed = false;
         try {
           validation = await openRetainedPresentationValidation(archive, context, limits);
-          if (!validation.valid) throw new OfficeError19("invalid-opc", "Presentation semantic validation failed.", "index");
+          if (!validation.valid) throw new OfficeError20("invalid-opc", "Presentation semantic validation failed.", "index");
           result = success(operation2, { valid: true, schema: validation.schema, rules: validation.rules, issues: [] });
         } catch (error) {
           failed = true;
@@ -12197,7 +12464,7 @@ async function executeRequest(request, options2, owned) {
         const bytes = await request.readInput(args.input, maxBytes);
         const reader = await readPackage3(bytes, { ...options2.context, signal: request.signal });
         const validation = validatePresentation(reader, limits);
-        if (!validation.valid) throw new OfficeError19("invalid-opc", "Presentation semantic validation failed.", "index");
+        if (!validation.valid) throw new OfficeError20("invalid-opc", "Presentation semantic validation failed.", "index");
         result = success(operation2, validation);
       }
       human = "Presentation is semantically valid; XML schema validation not checked.\n";
@@ -12564,7 +12831,7 @@ ${JSON.stringify(result.data, null, 2)}
       const changed = await mutateAnimationsBatch(bytes, resolveAnimationBatch(items, index), context);
       const dryRun = args.dryRun ?? false;
       const destination = args.inPlace ? args.input : args.output;
-      const fingerprint = Array.from(sha2564(changed.bytes), (byte) => byte.toString(16).padStart(2, "0")).join("");
+      const fingerprint = Array.from(sha2565(changed.bytes), (byte) => byte.toString(16).padStart(2, "0")).join("");
       result = { ...success(operation2, {
         results: changed.results.map((entry, i) => ({ ...success(items[i].operation, {
           effects: entry.locations.map((location3) => ({ location: location3, action: items[i].operation.slice(11), feature: "F46" })),
@@ -12604,7 +12871,7 @@ ${JSON.stringify(result.data, null, 2)}
         const locations = changed.locations;
         const dryRun = args.dryRun ?? false;
         const destination = args.inPlace ? args.input : args.output;
-        const fingerprint = Array.from(sha2564(changed.bytes), (byte) => byte.toString(16).padStart(2, "0")).join("");
+        const fingerprint = Array.from(sha2565(changed.bytes), (byte) => byte.toString(16).padStart(2, "0")).join("");
         result = { ...success(operation2, {
           effects: locations.map((location3) => ({ location: location3, action, feature: "F46" })),
           outputs: dryRun || !locations.length ? [] : [{ path: destination, sha256: fingerprint, bytes: changed.bytes.length }],
@@ -12662,7 +12929,7 @@ ${JSON.stringify(result.data, null, 2)}
         const locations = records.filter((record3) => changed.affectedSlides.includes(record3.slide)).map((record3) => record3.location);
         const dryRun = args.dryRun ?? false;
         const destination = args.inPlace ? args.input : args.output;
-        const fingerprint = Array.from(sha2564(changed.bytes), (byte) => byte.toString(16).padStart(2, "0")).join("");
+        const fingerprint = Array.from(sha2565(changed.bytes), (byte) => byte.toString(16).padStart(2, "0")).join("");
         result = { ...success(operation2, {
           effects: locations.map((location3) => ({ location: location3, action, feature: "F44" })),
           outputs: dryRun || !locations.length ? [] : [{ path: destination, sha256: fingerprint, bytes: changed.bytes.length }],
@@ -12806,14 +13073,14 @@ ${JSON.stringify(result.data, null, 2)}
               {
                 path: args.inPlace ? args.input : args.output,
                 sha256: Array.from(
-                  sha2564(changed.bytes),
+                  sha2565(changed.bytes),
                   (byte) => byte.toString(16).padStart(2, "0")
                 ).join(""),
                 bytes: changed.bytes.length
               }
             ],
             fingerprint: dryRun ? null : Array.from(
-              sha2564(changed.bytes),
+              sha2565(changed.bytes),
               (byte) => byte.toString(16).padStart(2, "0")
             ).join("")
           } : args.operation === "text.fit" ? { frames: changed.affected, sizes: "sizes" in changed ? changed.sizes : [], dryRun } : args.operation === "text.frames.set" ? { frames: changed.affected, dryRun } : args.operation === "text.paragraphs.set" ? { paragraphs: changed.affected, dryRun } : args.operation === "text.runs.set" ? { runs: changed.affected, dryRun } : { replacements: changed.affected, dryRun }
@@ -13793,13 +14060,13 @@ ${item.parts.map((part) => `  ${part}
       const inputs = [];
       for (const path of [args.input, ...args.sources ?? []]) {
         if (remaining < 1)
-          throw new OfficeError19("resource-limit", "Combined input limit exceeded.", "admit");
+          throw new OfficeError20("resource-limit", "Combined input limit exceeded.", "admit");
         const bytes = await request.readInput(
           path,
           Math.min(remaining, context.archiveLimits.maxArchiveBytes)
         );
         if (bytes.length > remaining || bytes.length > context.archiveLimits.maxArchiveBytes)
-          throw new OfficeError19("resource-limit", "Combined input limit exceeded.", "admit");
+          throw new OfficeError20("resource-limit", "Combined input limit exceeded.", "admit");
         remaining -= bytes.length;
         inputs.push(await budget.read(bytes));
       }
@@ -13860,7 +14127,7 @@ ${item.parts.map((part) => `  ${part}
         );
         splitManifest2 = decks.map((deck) => ({
           path: `${args.outputDir ?? ""}${args.outputDir?.endsWith("/") || !args.outputDir ? "" : "/"}${deck.name}`,
-          sha256: Array.from(sha2564(deck.bytes), (byte) => byte.toString(16).padStart(2, "0")).join(
+          sha256: Array.from(sha2565(deck.bytes), (byte) => byte.toString(16).padStart(2, "0")).join(
             ""
           ),
           bytes: deck.bytes.length,
@@ -13885,7 +14152,7 @@ ${item.parts.map((part) => `  ${part}
           }));
         result = {
           ...success(operation2, {
-            outputs: dryRun ? [] : splitManifest2.map(({ path, sha256: sha2565, bytes }) => ({ path, sha256: sha2565, bytes })),
+            outputs: dryRun ? [] : splitManifest2.map(({ path, sha256: sha2566, bytes }) => ({ path, sha256: sha2566, bytes })),
             sources: splitManifest2.map(({ sourceSlide, sourceLocation }) => ({
               sourceSlide,
               sourceLocation
@@ -13900,7 +14167,7 @@ ${JSON.stringify(result.data, null, 2)}
       }
     } else if (args.operation === "create") {
       if (args.template)
-        throw new OfficeError19(
+        throw new OfficeError20(
           "unsupported-profile",
           "Template-based creation is unavailable.",
           "validate-intent"
@@ -13952,7 +14219,7 @@ ${JSON.stringify(result.data, null, 2)}
         );
       } catch (error) {
         if (error && typeof error === "object" && "code" in error && error.code === "resource-limit")
-          throw new OfficeError19("resource-limit", "Input limit exceeded.", "admit");
+          throw new OfficeError20("resource-limit", "Input limit exceeded.", "admit");
         throw error;
       }
       const index = await readSelectionIndex2(bytes, { ...options2.context, signal: request.signal });
@@ -14097,7 +14364,7 @@ ${JSON.stringify(result.data, null, 2)}
         const part = metadata2 ?? records[0].part;
         const validationLimits = options2.context.validationLimits;
         if (!validationLimits)
-          throw new OfficeError19(
+          throw new OfficeError20(
             "invalid-value",
             "XML operations require explicit validation limits.",
             "usage"
@@ -14173,10 +14440,10 @@ ${xml.xml}
     await stagedOutput?.close().catch(() => {
     });
     stagedOutput = void 0;
-    if (error instanceof OfficeError19 && error.code === "resource-limit" && error.phase === "publish") return outputLimitFailure(output3.operation, output3.json);
+    if (error instanceof OfficeError20 && error.code === "resource-limit" && error.phase === "publish") return outputLimitFailure(output3.operation, output3.json);
     if (request.signal.aborted)
       return { exitCode: 130, stdout: new Uint8Array(), stderr: new Uint8Array() };
-    const office = error instanceof OfficeError19 ? error : void 0;
+    const office = error instanceof OfficeError20 ? error : void 0;
     const capabilityCode = error && typeof error === "object" && "code" in error ? error.code : void 0;
     const limit = office?.code === "resource-limit" || capabilityCode === "resource-limit";
     const unsupported = capabilityCode === "publication-unsupported";
@@ -14218,7 +14485,7 @@ ${xml.xml}
       affected: allowPartialOutput ? published : 0,
       locations: allowPartialOutput ? opaqueManifest || mediaManifest ? [] : imageManifest ? imageManifest.slice(0, published).flatMap((item) => item.occurrences.map((occurrence) => occurrence.location)) : splitManifest2.slice(0, published).map((item) => item.sourceLocation) : [],
       data: allowPartialOutput && published > 0 ? opaqueManifest ? { ...result.data, outputs: opaqueManifest.slice(0, published), dryRun: false } : mediaManifest ? { outputs: mediaManifest.slice(0, published), dryRun: false } : imageManifest ? { outputs: imageManifest.slice(0, published), dryRun: false } : {
-        outputs: splitManifest2.slice(0, published).map(({ path, sha256: sha2565, bytes }) => ({ path, sha256: sha2565, bytes })),
+        outputs: splitManifest2.slice(0, published).map(({ path, sha256: sha2566, bytes }) => ({ path, sha256: sha2566, bytes })),
         sources: splitManifest2.slice(0, published).map(({ sourceSlide, sourceLocation }) => ({ sourceSlide, sourceLocation }))
       } : null,
       errors: [{ code, message: "Output could not be published.", context: { phase } }]
@@ -14230,7 +14497,7 @@ ${xml.xml}
           (item) => item.occurrences.map((occurrence) => occurrence.location)
         ) : splitManifest2.map((item) => item.sourceLocation),
         data: opaqueManifest ? { ...result.data, outputs: opaqueManifest, dryRun: false } : mediaManifest ? { outputs: mediaManifest, dryRun: false } : imageManifest ? { outputs: imageManifest, dryRun: false } : {
-          outputs: splitManifest2.map(({ path, sha256: sha2565, bytes }) => ({ path, sha256: sha2565, bytes })),
+          outputs: splitManifest2.map(({ path, sha256: sha2566, bytes }) => ({ path, sha256: sha2566, bytes })),
           sources: splitManifest2.map(({ sourceSlide, sourceLocation }) => ({
             sourceSlide,
             sourceLocation
@@ -14279,7 +14546,7 @@ ${JSON.stringify(failure.data)}
     } catch (error) {
       if (request.signal.aborted)
         return { exitCode: 130, stdout: new Uint8Array(), stderr: new Uint8Array() };
-      const office = error instanceof OfficeError19 ? error : void 0;
+      const office = error instanceof OfficeError20 ? error : void 0;
       const rawCode = error && typeof error === "object" && "code" in error ? error.code : void 0;
       const code = typeof rawCode === "string" && [
         "resource-limit",
@@ -14318,7 +14585,7 @@ ${JSON.stringify(failure.data)}
   if (stagedOutput) {
     let failed = false;
     try {
-      await stagedOutput.write(request.streaming.stdout);
+      await stagedOutput.write(exitCode && !json ? request.streaming.stderr : request.streaming.stdout);
     } catch (error) {
       failed = true;
       throw error;
@@ -14329,7 +14596,7 @@ ${JSON.stringify(failure.data)}
         if (!failed) await Promise.reject(error);
       }
     }
-    return { exitCode: 0, stdout: new Uint8Array(), stderr: new Uint8Array() };
+    return { exitCode, stdout: new Uint8Array(), stderr: new Uint8Array() };
   }
   if (operation === "validate" && request.streaming) {
     request.signal.throwIfAborted();