@silurus/ooxml 0.75.3 → 0.75.5

package/dist/types/pptx.d.ts

@@ -1,4 +1,4 @@
-//#region dist/.types-work/mathjax-BO1uUSCW.d.ts
+//#region dist/.types-work/mathjax-Cp9KrvN5.d.ts
 //#region packages/core/src/math/mathjax.d.ts
 interface MathSvg {
     /** standalone `<svg>…</svg>` markup. */
@@ -29,7 +29,7 @@ interface MathRenderer {
     mathMLToSvg(mathml: string): Promise<MathSvg>;
 }
 //#endregion
-//#region dist/.types-work/hyperlink-CHHEOeCL.d.ts
+//#region dist/.types-work/hyperlink-DTGUpBI3.d.ts
 //#region packages/core/src/types/math.d.ts
 type MathStyle = 'roman' | 'italic' | 'bold' | 'boldItalic';
 interface MathRun {
@@ -180,182 +180,654 @@ interface Duotone {
     clr2: string;
 }
 //#endregion
-//#region packages/core/src/types/chart.d.ts
-interface ChartSeries {
-    name: string;
-    /** Hex without '#'. null = fall back to palette. */
-    color: string | null;
-    /** Numeric values; null = missing data point. */
-    values: (number | null)[];
+//#region packages/core/src/types/common.d.ts
+type PathCmd = {
+    cmd: 'moveTo';
+    x: number;
+    y: number;
+} | {
+    cmd: 'lineTo';
+    x: number;
+    y: number;
+} | {
+    cmd: 'cubicBezTo';
+    x1: number;
+    y1: number;
+    x2: number;
+    y2: number;
+    x: number;
+    y: number;
+} | {
+    cmd: 'arcTo';
+    wr: number;
+    hr: number;
+    stAng: number;
+    swAng: number;
+} | {
+    cmd: 'close';
+};
+type Fill = SolidFill | NoFill | GradientFill | PatternFill | ImageFill;
+interface SolidFill {
+    fillType: 'solid';
+    color: string;
+}
+interface NoFill {
+    fillType: 'none';
+}
+interface GradientStop {
+    position: number;
+    color: string;
+}
+interface GradientFill {
+    fillType: 'gradient';
+    stops: GradientStop[];
+    /** degrees: 0 = left→right, 90 = top→bottom */
+    angle: number;
+    /** 'linear' | 'radial' */
+    gradType: string;
+}
+/**
+ * Preset pattern fill — ECMA-376 §20.1.8.40 (CT_PatternFillProperties)
+ * with `preset` drawn from §20.1.10.59 (ST_PresetPatternVal).
+ */
+interface PatternFill {
+    fillType: 'pattern';
+    /** Foreground hex colour — used for the "1" pixels of the preset bitmap. */
+    fg: string;
+    /** Background hex colour — used for the "0" pixels. */
+    bg: string;
+    /** Preset name, e.g. "pct25", "horz", "diagCross", "lgGrid". */
+    preset: string;
+}
+/**
+ * ECMA-376 §20.1.8.30 (CT_RelativeRect) — the destination rectangle a stretched
+ * blip is mapped into, as edge insets relative to the fill region. Values are
+ * fractions (ST_Percentage / 100000); **negative values let the image bleed
+ * past the box (overscan)**. Absent edges default to 0.
+ */
+interface FillRect {
+    l?: number;
+    t?: number;
+    r?: number;
+    b?: number;
+}
+/**
+ * ECMA-376 §20.1.8.58 (CT_TileInfoProperties) — tiled blip-fill placement.
+ * The blip repeats at its native size (scaled by sx/sy) across the fill box.
+ * Mutually exclusive with {@link ImageFill.fillRect} (the `stretch` mode).
+ */
+interface TileInfo {
+    /** Horizontal offset of the first tile, in EMU (`tx`). Default 0. */
+    tx: number;
+    /** Vertical offset of the first tile, in EMU (`ty`). Default 0. */
+    ty: number;
+    /** Horizontal tile scale as a fraction (`sx` / 100000). Default 1.0. */
+    sx: number;
+    /** Vertical tile scale as a fraction (`sy` / 100000). Default 1.0. */
+    sy: number;
+    /** Mirror mode: `'none' | 'x' | 'y' | 'xy'` (`flip`). Default `'none'`. */
+    flip: string;
     /**
-     * Per-data-point colors (pie / doughnut). Hex without '#'. null inside the
-     * array = use palette for that slice. Omit entirely for non-pie series.
+     * Anchor corner the tile grid registers against:
+     * `tl|t|tr|l|ctr|r|bl|b|br` (`algn`). The schema has no default; a host may
+     * apply a compatibility fallback when omitted.
      */
-    dataPointColors?: (string | null)[] | null;
+    algn?: string;
+}
+/**
+ * Image fill — ECMA-376 §20.1.8.14 (CT_BlipFillProperties). The embedded blip
+ * is carried as a zip path + MIME; the renderer fetches the bytes on demand via
+ * {@link RenderOptions.fetchImage} (no base64 inlined at parse time). Both
+ * fill-modes are modelled and mutually exclusive: `stretch` (§20.1.8.56) carries
+ * {@link ImageFill.fillRect}; `tile` (§20.1.8.58) carries {@link ImageFill.tile}.
+ */
+interface ImageFill {
+    fillType: 'image';
     /**
-     * Per-data-point data-label text colors. Used by chartEx (`<cx:dataLabel idx>`)
-     * to override label colour per bar — sample-2's waterfall paints negative
-     * △ values in red while positive values stay black. Null inside the array =
-     * fall back to the chart-level `dataLabelFontColor`.
+     * Embedded zip path of the blip (e.g. "word/media/image1.png"), for the lazy
+     * byte-on-demand pipeline. The renderer fetches the bytes via a path-keyed
+     * loader ({@link RenderOptions.fetchImage}) instead of inlining base64.
      */
-    dataLabelColors?: (string | null)[] | null;
+    imagePath: string;
+    /** MIME type of the blip at {@link ImageFill.imagePath} (e.g. `image/png`). */
+    mimeType: string;
     /**
-     * Series-level data-label text colour (`<c:ser><c:dLbls><c:txPr>…solidFill`,
-     * ECMA-376 §21.2.2.216). Hex without '#'. Stacked-bar charts colour each
-     * segment's label independently (e.g. white on the dark segment, black on
-     * the light one), which a single chart-level `dataLabelFontColor` can't
-     * express. Takes precedence over `dataLabelFontColor`; null = no override.
+     * `<a:stretch><a:fillRect>` insets. Absent → fills the whole box (or the
+     * fill is tiled — see {@link ImageFill.tile}).
      */
-    labelColor?: string | null;
+    fillRect?: FillRect;
     /**
-     * Mixed chart: per-series chart type override. Currently only "line" (XLSX
-     * and PPTX combo charts) is honoured; other values are treated as the
-     * chart's primary type.
+     * `<a:tile>` descriptor. Present only when the blipFill is tiled; mutually
+     * exclusive with {@link ImageFill.fillRect}.
      */
-    seriesType?: string | null;
+    tile?: TileInfo;
+    /** `a:blip > a:alphaModFix@amt` as a fraction (0.0–1.0). Absent = opaque. */
+    alpha?: number;
     /**
-     * Combo chart: this series is plotted against the SECONDARY value axis
-     * (`ChartModel.secondaryValAxis`) — the `<c:valAx>` with `axPos="r"` /
-     * `<c:crosses val="max">`. When false/absent the series uses the primary
-     * (left) value-axis scale. PowerPoint's "Revenue vs. gross margin" combo
-     * (sample-14 slide-8) puts the margin line on a 0–100% secondary axis.
+     * ECMA-376 §20.1.8.23 `<a:duotone>` recolour, resolved to its two endpoint
+     * colours (through the slide theme). Absent ⇒ no duotone. When present the
+     * renderer maps the blip's luminance ramp between the two colours (core
+     * `applyDuotone`) — the same recolour a `<p:pic>` duotone applies, wired onto
+     * the picture-FILL path (§20.1.8.14) by issue #889.
      */
-    useSecondaryAxis?: boolean | null;
+    duotone?: Duotone;
+}
+interface Shadow {
+    color: string;
+    alpha: number;
+    blur: number;
+    dist: number;
+    /** degrees clockwise from East */
+    dir: number;
+}
+/** ECMA-376 §20.1.8.17 (CT_GlowEffect) — coloured halo with blur radius. */
+interface Glow {
+    color: string;
+    alpha: number;
+    /** Blur radius in EMU. */
+    radius: number;
+}
+/** ECMA-376 §20.1.8.31 (CT_SoftEdgesEffect) — feather radius in EMU. */
+interface SoftEdge {
+    radius: number;
+}
+/** ECMA-376 §20.1.8.27 (CT_ReflectionEffect) — mirrored copy below the
+ *  shape with a linear alpha gradient. Carries the spec attributes whose
+ *  defaults the renderer needs to interpret correctly. */
+interface Reflection {
+    blur: number;
+    dist: number;
+    /** Direction in degrees, clockwise from East. */
+    dir: number;
+    /** Start alpha (0–1). Default 1.0. */
+    stA: number;
+    /** Start position along the gradient (0–1). Default 0. */
+    stPos: number;
+    /** End alpha. Default 0. */
+    endA: number;
+    /** End position. Default 1.0. */
+    endPos: number;
+    /** Horizontal scale (1.0 = same width). */
+    sx: number;
+    /** Vertical scale (-1.0 = full mirror). */
+    sy: number;
+}
+interface ArrowEnd {
+    /** OOXML type: "none" | "triangle" | "stealth" | "diamond" | "oval" | "arrow" */
+    type: string;
+    /** Width multiplier: "sm" | "med" | "lg" */
+    w: string;
+    /** Length multiplier: "sm" | "med" | "lg" */
+    len: string;
+}
+interface Stroke {
+    color: string;
+    /** Width in EMU */
+    width: number;
+    /** Authored non-solid DrawingML line paint. Solid lines use `color`. */
+    fill?: Exclude<Fill, {
+        fillType: 'image';
+    } | {
+        fillType: 'none';
+    }>;
+    /** OOXML prstDash value: "dash", "dot", "dashDot", "lgDash", "lgDashDot", etc. */
+    dashStyle?: string;
+    /** Canvas line cap normalized from DrawingML/VML (`flat` → `butt`). */
+    lineCap?: CanvasLineCap;
+    /** Arrow head at the start of the line */
+    headEnd?: ArrowEnd;
+    /** Arrow head at the end of the line */
+    tailEnd?: ArrowEnd;
     /**
-     * Scatter-only X values (as strings). When null the series uses
-     * `ChartModel.categories` as X.
+     * ECMA-376 §20.1.8.42 ST_CompoundLine. "sng" (default) | "dbl" |
+     * "thinThick" | "thickThin" | "tri". Absent means single line.
      */
-    categories?: string[] | null;
+    cmpd?: string;
+}
+interface TextBody$1 {
+    /** Vertical anchor: "t" | "ctr" | "b" */
+    verticalAnchor: string;
+    paragraphs: Paragraph$1[];
+    /** Default pt size from lstStyle (overrides renderer default when present) */
+    defaultFontSize: number | null;
+    /** Inherited bold from layout/master defRPr (null = not set, use false as final default) */
+    defaultBold: boolean | null;
+    /** Inherited italic from layout/master defRPr (null = not set, use false as final default) */
+    defaultItalic: boolean | null;
+    /** Text insets in EMU (defaults: lIns=rIns=91440, tIns=bIns=45720) */
+    lIns: number;
+    rIns: number;
+    tIns: number;
+    bIns: number;
+    /** "square" = wrap, "none" = no wrap */
+    wrap: string;
+    /** Text direction: "horz" | "vert" | "vert270" | "eaVert" etc. */
+    vert: string;
+    /** Auto-fit: "sp" = shape grows to fit text, "norm" = font shrinks, "none" = no fit */
+    autoFit: string;
     /**
-     * Resolved marker visibility for line/scatter series. ECMA-376 §21.2.2.32
-     * `<c:marker><c:symbol>` defaults to "none" for line charts unless the
-     * chart-level `<c:marker val="1"/>` or a per-series symbol opts in. When
-     * undefined/null the renderer uses its own default (visible) so callers
-     * that don't parse markers (e.g. pptx today) keep their existing behavior.
+     * `<a:normAutofit fontScale>` (ECMA-376 §21.1.2.1.3) — PowerPoint's stored,
+     * pre-computed font-shrink ratio for `autoFit === "norm"`, as a fraction
+     * (e.g. 0.625 for `fontScale="62500"`). Null/absent when PowerPoint stored no
+     * scale; the renderer then re-derives one. Applying the stored value matches
+     * PowerPoint exactly instead of guessing from our own text metrics.
      */
-    showMarker?: boolean | null;
-    /**
-     * Excel number-format code for this series' values (ECMA-376 §21.2.2.37,
-     * `<c:val>/<c:numRef>/<c:formatCode>`). Used to format data labels when the
-     * chart-level `<c:dLbls><c:numFmt>` is not set. null = no series-level code.
+    fontScale?: number | null;
+    /** `<a:normAutofit lnSpcReduction>` — stored line-spacing reduction fraction
+     *  (e.g. 0.20 for `lnSpcReduction="20000"`). Null/absent when not stored. */
+    lnSpcReduction?: number | null;
+    /**
+     * `<a:bodyPr numCol>` (ECMA-376 §20.1.10.34) — number of text columns inside
+     * the shape. Defaults to 1; values > 1 cause the renderer to flow paragraphs
+     * across N columns left-to-right, top-to-bottom.
      */
-    valFormatCode?: string | null;
+    numCol?: number;
+    /** `<a:bodyPr spcCol>` — gap between columns in EMU. Default 0. */
+    spcCol?: number;
+}
+type SpaceLine = {
+    type: 'pct';
+    val: number;
+} | {
+    type: 'pts';
+    val: number;
+};
+/**
+ * A paragraph's bullet marker. For `char`, the marker size is EITHER `sizePct`
+ * (a percentage of the run size — ECMA-376 §21.1.2.4.9 `<a:buSzPct>`) OR `sizePts`
+ * (an absolute size in points — §21.1.2.4.10 `<a:buSzPts>`), never both: they are
+ * the one `EG_TextBulletSize` xsd:choice. `sizePts` is optional (absent when no
+ * `<a:buSzPts>` was declared); when present it takes precedence over `sizePct`.
+ */
+type Bullet$1 = {
+    type: 'none';
+} | {
+    type: 'inherit';
+} | {
+    type: 'char';
+    char: string;
+    color: string | null;
+    sizePct: number | null;
+    sizePts?: number;
+    fontFamily: string | null;
+} | {
+    type: 'autoNum';
+    numType: string;
+    startAt: number | null;
+    color: string | null;
+};
+interface TabStop {
+    /** Position in EMU from the LEADING text-inset edge of the text area —
+     *  logical, not physical (ECMA-376 §21.1.2.1): the left edge (after lIns)
+     *  in an LTR paragraph, the right edge (before rIns) in an RTL
+     *  (`<a:pPr rtl="1">`) paragraph. */
+    pos: number;
+    /** Alignment: "l" | "r" | "ctr" | "dec" */
+    algn: string;
+}
+interface Paragraph$1 {
+    /** Alignment: "l" | "ctr" | "r" | "just" */
+    alignment: string;
+    /** Left margin in EMU */
+    marL: number;
+    /** Right margin in EMU */
+    marR: number;
+    /** First-line indent in EMU (negative = hanging indent) */
+    indent: number;
+    spaceBefore: number | null;
+    spaceAfter: number | null;
+    spaceLine: SpaceLine | null;
+    /** List nesting level (0–8) */
+    lvl: number;
+    bullet: Bullet$1;
+    defFontSize: number | null;
+    defColor: string | null;
+    defBold: boolean | null;
+    defItalic: boolean | null;
+    defFontFamily: string | null;
+    /** Tab stops from pPr > tabLst */
+    tabStops: TabStop[];
     /**
-     * `<c:marker><c:symbol val>` (ECMA-376 §21.2.2.32) — point marker shape.
-     * One of "circle"|"square"|"diamond"|"triangle"|"x"|"plus"|"star"|
-     * "dot"|"dash"|"picture"|"none". null = renderer default (circle when
-     * showMarker is true).
+     * `<a:pPr rtl="1">` — right-to-left paragraph (ECMA-376 §21.1.2.2.7).
+     * When true and no explicit `algn`, the parser-side default flips from
+     * "l" to "r"; renderers can also use this flag to flow runs RTL.
      */
-    markerSymbol?: string | null;
+    rtl?: boolean;
+    runs: TextRun[];
+}
+type TextRun = TextRunData | LineBreak | EquationRun;
+/**
+ * An OMML equation embedded in a paragraph (ECMA-376 §22.1). Parsed into the
+ * shared math AST and rendered by `@silurus/ooxml-core`'s math engine.
+ * PowerPoint stores these as `a14:m` inside `mc:AlternateContent`.
+ */
+interface EquationRun {
+    type: 'math';
+    /** Parsed OMML node list. */
+    nodes: MathNode[];
+    /** True for block (`m:oMathPara`) math, false for inline (`m:oMath`). */
+    display: boolean;
+    /** Paragraph default run size in pt, if declared; absent → renderer inherits. */
+    fontSize?: number | null;
+    /** Equation colour (hex, no '#') from the math run's rPr; absent → inherit. */
+    color?: string | null;
+}
+interface TextRunData {
+    type: 'text';
+    text: string;
+    /** null = not set, inherit from paragraph/body defaults */
+    bold: boolean | null;
+    /** null = not set, inherit from paragraph/body defaults */
+    italic: boolean | null;
+    underline: boolean;
     /**
-     * `<c:marker><c:size val>` (ECMA-376 §21.2.2.34) — marker side length in
-     * points. null = renderer default (~5 pt).
+     * Specific underline style when not the default single line. Values come
+     * from ECMA-376 §21.1.2.3.16 (ST_TextUnderlineType): "dbl", "heavy",
+     * "dotted", "dottedHeavy", "dash", "dashHeavy", "dashLong",
+     * "dashLongHeavy", "dotDash", "dotDashHeavy", "dotDotDash",
+     * "dotDotDashHeavy", "wavy", "wavyHeavy", "wavyDbl". Absent means either
+     * no underline (when `underline` is false) or the default single line.
      */
-    markerSize?: number | null;
-    /** `<c:marker><c:spPr><a:solidFill>` resolved hex (no `#`). */
-    markerFill?: string | null;
-    /** `<c:marker><c:spPr><a:ln><a:solidFill>` resolved hex (no `#`). */
-    markerLine?: string | null;
+    underlineStyle?: string;
     /**
-     * Per-data-point overrides (ECMA-376 §21.2.2.39 `<c:dPt>`). Keyed by point
-     * index. Any unset field falls back to the series-level value.
+     * Underline-only colour from rPr > uFill (ECMA-376 §21.1.2.3.20). Absent
+     * means the underline follows the text colour (uFillTx default).
      */
-    dataPointOverrides?: ChartDataPointOverride[] | null;
+    underlineColor?: string;
+    /** True when rPr strike is sngStrike or dblStrike. */
+    strikethrough: boolean;
     /**
-     * Per-data-point custom labels (ECMA-376 §21.2.2.45 `<c:dLbl idx>`).
-     * `text` is the resolved plain string — `<a:fld type="CELLRANGE">`
-     * placeholders are already substituted at parse time. An empty string
-     * means the point's label was deleted with `<c:delete val="1"/>` and
-     * the renderer should skip it.
+     * True only when rPr strike = "dblStrike". Lets the renderer draw two parallel
+     * lines instead of one. ECMA-376 §21.1.2.3.10 (ST_TextStrikeType).
      */
-    dataLabelOverrides?: ChartDataLabelOverride[] | null;
+    strikeDouble?: boolean;
+    /** Font size in points */
+    fontSize: number | null;
+    color: string | null;
+    fontFamily: string | null;
     /**
-     * Series-level `<c:dLbls>` block (showVal / showSerName / position).
-     * Applied to every point lacking its own `<c:dLbl>` override.
+     * East Asian font family from rPr > a:ea (ECMA-376 §21.1.2.3.7),
+     * resolved through the theme. Renderer uses this for CJK glyphs when
+     * present; absent means CJK falls back to fontFamily.
      */
-    seriesDataLabels?: ChartSeriesDataLabels | null;
+    fontFamilyEa?: string;
     /**
-     * `<c:errBars>` per-series error bars (ECMA-376 §21.2.2.20). Up to two
-     * (one per direction). Plus / minus deltas are absolute per-point values
-     * regardless of `errValType`.
+     * Symbol font family from rPr > a:sym (ECMA-376 §21.1.2.3.10), resolved
+     * through the theme. PowerPoint stores symbol-font glyphs as Private-Use
+     * codepoints U+F020–U+F0FF; the renderer uses this font to resolve them.
+     * Absent means no symbol font was declared.
      */
-    errBars?: ChartErrBars[] | null;
+    fontFamilySym?: string;
+    /** Baseline shift in thousandths of a point. Positive = superscript, negative = subscript. */
+    baseline?: number;
     /**
-     * `<c:bubbleSize>` per-point sizes for bubble charts (ECMA-376 §21.2.2.4).
-     * Drives marker radius — renderer treats the values as areas (radius
-     * scales by sqrt) so visual area is proportional to value, matching
-     * Excel. null / empty array = uniform marker size. Ignored for non-bubble
-     * series.
+     * Capitalisation transform — ECMA-376 §21.1.2.3.13 (ST_TextCapsType).
+     * 'all' renders text in upper case; 'small' uses small caps (rendered as
+     * upper case at ~80% size when no smcp font feature is available).
+     * 'none' or omitted leaves the text unchanged.
      */
-    bubbleSizes?: (number | null)[] | null;
+    caps?: 'none' | 'small' | 'all';
     /**
-     * `<c:ser><c:smooth val>` (ECMA-376 §21.2.2.194) — line/area series flag
-     * requesting a smoothed (spline) curve through the points instead of straight
-     * segments. Only consulted for the line and area families (scatter carries its
-     * smoothing in `ChartModel.scatterStyle`). null/undefined/false = straight
-     * polyline (the default; byte-stable for series that never set it).
+     * Inter-character spacing in 100ths of a point — ECMA-376 §21.1.2.3.5
+     * (rPr @spc). Positive values add space, negative values tighten.
      */
-    smooth?: boolean | null;
+    letterSpacing?: number;
+    /** Set for OOXML field runs (e.g. "slidenum"). When set, renderer replaces text with field value. */
+    fieldType?: string;
     /**
-     * `<c:ser><c:trendline>` per-series trendlines (ECMA-376 §21.2.2.211,
-     * `CT_Trendline`). A series can carry several (e.g. a linear fit + a moving
-     * average). null/undefined/empty = no trendline (the default; byte-stable for
-     * series that never declare one).
+     * Hyperlink target resolved from rPr > a:hlinkClick @r:id via the slide's _rels.
+     * For an external link this is the URL; for an internal slide jump it is the
+     * resolved internal part name (e.g. "../slides/slide3.xml"). Undefined for runs
+     * without a hyperlink. ECMA-376 §21.1.2.3.5 (CT_Hyperlink).
      */
-    trendLines?: ChartTrendline[] | null;
+    hyperlink?: string;
     /**
-     * `<c:ser><c:spPr><a:ln><a:noFill/>` (ECMA-376 §21.2.2.198 CT_ShapeProperties
-     * → DrawingML §20.1.2.2.24 CT_LineProperties). true when the series connecting
-     * line is explicitly turned OFF. For a scatter/line series this OVERRIDES the
-     * chart-group `<c:scatterStyle>` (§21.2.2.42) / line default — Excel and
-     * PowerPoint draw markers only (no connecting line) even when the group style
-     * is `lineMarker`. null/undefined = no explicit line-off, so the group default
-     * governs (byte-stable for series that carry a paintable line).
+     * Raw `<a:hlinkClick @action>` string (e.g. "ppaction://hlinksldjump") when
+     * present — its presence marks {@link hyperlink} as an INTERNAL PowerPoint
+     * action (slide jump / first / last …) rather than an external URL. Undefined
+     * when the hlinkClick has no @action. ECMA-376 §21.1.2.3.5. (IX1)
      */
-    lineHidden?: boolean | null;
-}
-/**
- * `<c:ser><c:trendline>` (ECMA-376 §21.2.2.211). A regression/smoothing curve
- * fitted to the series' data points.
- */
-interface ChartTrendline {
+    hyperlinkAction?: string;
     /**
-     * `<c:trendlineType val>` (§21.2.2.213, `ST_TrendlineType` §21.2.3.50):
-     * "linear" | "exp" | "log" | "power" | "poly" | "movingAvg". The renderer
-     * currently draws "linear" (least squares) and "movingAvg"; other types parse
-     * but are not yet plotted (tracked as a follow-up).
+     * Run-level drop shadow on glyphs (`<a:rPr><a:effectLst><a:outerShdw>`),
+     * ECMA-376 §20.1.8.45. Independent of the shape-level shadow on `spPr`.
+     * Absent means no run-level shadow.
      */
-    trendlineType: string;
-    /** `<c:order val>` — polynomial order (`poly`, default 2). */
-    order?: number | null;
-    /** `<c:period val>` — moving-average window (`movingAvg`, default 2). */
-    period?: number | null;
-    /** `<c:forward val>` — units to extend the line past the last point. */
-    forward?: number | null;
-    /** `<c:backward val>` — units to extend the line before the first point. */
-    backward?: number | null;
-    /** `<c:intercept val>` — forced y-intercept (linear/exp). null = free fit. */
-    intercept?: number | null;
-    /** `<c:dispRSqr val="1">` — show the R² value (label; not yet rendered). */
-    dispRSqr?: boolean | null;
-    /** `<c:dispEq val="1">` — show the fit equation (label; not yet rendered). */
-    dispEq?: boolean | null;
-    /** `<c:spPr><a:ln><a:solidFill>` trendline color (hex without '#'). null =
-     *  inherit the series color. */
-    lineColor?: string | null;
-    /** `<c:spPr><a:ln w>` trendline width in EMU. */
-    lineWidthEmu?: number | null;
-}
-interface ChartDataPointOverride {
-    idx: number;
-    /** Resolved fill hex (no `#`). */
-    color?: string;
-    markerSymbol?: string;
-    markerSize?: number;
-    markerFill?: string;
-    markerLine?: string;
+    shadow?: Shadow;
     /**
-     * `<c:dPt><c:explosion val>` (ECMA-376 §21.2.2.61) — the amount this
+     * Run-level glyph outline (`<a:rPr><a:ln w="..">`), ECMA-376 §20.1.2.2.24
+     * (CT_TextOutlineEffect). Renderer strokes each glyph with the given
+     * width / colour in addition to the normal fill. Absent means glyphs are
+     * fill-only.
+     */
+    outline?: TextOutline;
+    /**
+     * Run-level text highlight / marker colour (`<a:rPr><a:highlight>`),
+     * ECMA-376 §21.1.2.3.4. In DrawingML this is a full CT_Color (any
+     * srgbClr / schemeClr / sysClr / prstClr + transforms), unlike
+     * WordprocessingML's fixed 16-name highlight enum — so the parser already
+     * resolves it through the theme/clrMap. The value is a hex string without
+     * `#` (6-char opaque, or 8-char RRGGBBAA when an alpha transform applies);
+     * the renderer paints a background rectangle behind the run's glyphs.
+     * Absent means no highlight.
+     */
+    highlight?: string;
+}
+/** Run-level glyph outline. Width is in OOXML EMU (12700 EMU = 1 pt). */
+interface TextOutline {
+    width: number;
+    /** Hex without '#'. Absent = inherit from text fill colour. */
+    color?: string;
+}
+interface LineBreak {
+    type: 'break';
+}
+interface RenderOptions {
+    width?: number;
+    defaultTextColor?: string | null;
+    dpr?: number;
+    majorFont?: string | null;
+    minorFont?: string | null;
+    /** Theme hyperlink colour (hex 6 chars). Used to colour hyperlink runs without an explicit colour. */
+    hlinkColor?: string | null;
+    /**
+     * Lazily resolve an archive-internal asset (by zip path) to a Blob. The
+     * renderer uses this to fetch posters and other large embedded assets on
+     * demand, keeping the parse output free of inlined base64.
+     */
+    fetchMedia?: (path: string) => Promise<Blob>;
+    /**
+     * Lazily resolve an embedded image (by zip path + MIME) to a Blob. Twin of
+     * {@link RenderOptions.fetchMedia} for pictures and blip fills: the renderer
+     * fetches raster/SVG bytes on demand and decodes them (`createImageBitmap` /
+     * path-keyed `<img>`), so the parse output carries only paths, never base64.
+     */
+    fetchImage?: (path: string, mimeType: string) => Promise<Blob>;
+    /**
+     * When true, renderMedia draws only the poster frame — play/pause badges
+     * and progress bars are left to the caller. Set by the pptx presentSlide
+     * API so its interactive handle can own all control chrome without
+     * the static renderer drawing a duplicate play badge.
+     */
+    skipMediaControls?: boolean;
+}
+//#endregion
+//#region packages/core/src/types/chart.d.ts
+interface ChartSeries {
+    name: string;
+    /** Hex without '#'. null = fall back to palette. */
+    color: string | null;
+    /** Numeric values; null = missing data point. */
+    values: (number | null)[];
+    /**
+     * Per-data-point colors (pie / doughnut). Hex without '#'. null inside the
+     * array = use palette for that slice. Omit entirely for non-pie series.
+     */
+    dataPointColors?: (string | null)[] | null;
+    /**
+     * Per-data-point data-label text colors. Used by chartEx (`<cx:dataLabel idx>`)
+     * to override label colour per bar — sample-2's waterfall paints negative
+     * △ values in red while positive values stay black. Null inside the array =
+     * fall back to the chart-level `dataLabelFontColor`.
+     */
+    dataLabelColors?: (string | null)[] | null;
+    /**
+     * Series-level data-label text colour (`<c:ser><c:dLbls><c:txPr>…solidFill`,
+     * ECMA-376 §21.2.2.216). Hex without '#'. Stacked-bar charts colour each
+     * segment's label independently (e.g. white on the dark segment, black on
+     * the light one), which a single chart-level `dataLabelFontColor` can't
+     * express. Takes precedence over `dataLabelFontColor`; null = no override.
+     */
+    labelColor?: string | null;
+    /**
+     * Mixed chart: per-series chart type override. Currently only "line" (XLSX
+     * and PPTX combo charts) is honoured; other values are treated as the
+     * chart's primary type.
+     */
+    seriesType?: string | null;
+    /**
+     * Combo chart: this series is plotted against the SECONDARY value axis
+     * (`ChartModel.secondaryValAxis`) — the `<c:valAx>` with `axPos="r"` /
+     * `<c:crosses val="max">`. When false/absent the series uses the primary
+     * (left) value-axis scale. PowerPoint's "Revenue vs. gross margin" combo
+     * (sample-14 slide-8) puts the margin line on a 0–100% secondary axis.
+     */
+    useSecondaryAxis?: boolean | null;
+    /**
+     * Scatter-only X values (as strings). When null the series uses
+     * `ChartModel.categories` as X.
+     */
+    categories?: string[] | null;
+    /**
+     * Resolved marker visibility for line/scatter series. ECMA-376 §21.2.2.32
+     * `<c:marker><c:symbol>` defaults to "none" for line charts unless the
+     * chart-level `<c:marker val="1"/>` or a per-series symbol opts in. When
+     * undefined/null the renderer uses its own default (visible) so callers
+     * that don't parse markers (e.g. pptx today) keep their existing behavior.
+     */
+    showMarker?: boolean | null;
+    /**
+     * Excel number-format code for this series' values (ECMA-376 §21.2.2.37,
+     * `<c:val>/<c:numRef>/<c:formatCode>`). Used to format data labels when the
+     * chart-level `<c:dLbls><c:numFmt>` is not set. null = no series-level code.
+     */
+    valFormatCode?: string | null;
+    /**
+     * `<c:marker><c:symbol val>` (ECMA-376 §21.2.2.32) — point marker shape.
+     * One of "circle"|"square"|"diamond"|"triangle"|"x"|"plus"|"star"|
+     * "dot"|"dash"|"picture"|"none". null = renderer default (circle when
+     * showMarker is true).
+     */
+    markerSymbol?: string | null;
+    /**
+     * `<c:marker><c:size val>` (ECMA-376 §21.2.2.34) — marker side length in
+     * points. null = renderer default (~5 pt).
+     */
+    markerSize?: number | null;
+    /** `<c:marker><c:spPr><a:solidFill>` resolved hex (no `#`). */
+    markerFill?: string | null;
+    /** `<c:marker><c:spPr><a:ln><a:solidFill>` resolved hex (no `#`). */
+    markerLine?: string | null;
+    /**
+     * Per-data-point overrides (ECMA-376 §21.2.2.39 `<c:dPt>`). Keyed by point
+     * index. Any unset field falls back to the series-level value.
+     */
+    dataPointOverrides?: ChartDataPointOverride[] | null;
+    /**
+     * Per-data-point custom labels (ECMA-376 §21.2.2.45 `<c:dLbl idx>`).
+     * `text` is the resolved plain string — `<a:fld type="CELLRANGE">`
+     * placeholders are already substituted at parse time. An empty string
+     * means the point's label was deleted with `<c:delete val="1"/>` and
+     * the renderer should skip it.
+     */
+    dataLabelOverrides?: ChartDataLabelOverride[] | null;
+    /**
+     * Series-level `<c:dLbls>` block (showVal / showSerName / position).
+     * Applied to every point lacking its own `<c:dLbl>` override.
+     */
+    seriesDataLabels?: ChartSeriesDataLabels | null;
+    /**
+     * `<c:errBars>` per-series error bars (ECMA-376 §21.2.2.20). Up to two
+     * (one per direction). Plus / minus deltas are absolute per-point values
+     * regardless of `errValType`.
+     */
+    errBars?: ChartErrBars[] | null;
+    /**
+     * `<c:bubbleSize>` per-point sizes for bubble charts (ECMA-376 §21.2.2.4).
+     * Drives marker radius — renderer treats the values as areas (radius
+     * scales by sqrt) so visual area is proportional to value, matching
+     * Excel. null / empty array = uniform marker size. Ignored for non-bubble
+     * series.
+     */
+    bubbleSizes?: (number | null)[] | null;
+    /**
+     * `<c:ser><c:smooth val>` (ECMA-376 §21.2.2.194) — line/area series flag
+     * requesting a smoothed (spline) curve through the points instead of straight
+     * segments. Only consulted for the line and area families (scatter carries its
+     * smoothing in `ChartModel.scatterStyle`). null/undefined/false = straight
+     * polyline (the default; byte-stable for series that never set it).
+     */
+    smooth?: boolean | null;
+    /**
+     * `<c:ser><c:trendline>` per-series trendlines (ECMA-376 §21.2.2.211,
+     * `CT_Trendline`). A series can carry several (e.g. a linear fit + a moving
+     * average). null/undefined/empty = no trendline (the default; byte-stable for
+     * series that never declare one).
+     */
+    trendLines?: ChartTrendline[] | null;
+    /**
+     * `<c:ser><c:spPr><a:ln><a:noFill/>` (ECMA-376 §21.2.2.198 CT_ShapeProperties
+     * → DrawingML §20.1.2.2.24 CT_LineProperties). true when the series connecting
+     * line is explicitly turned OFF. For a scatter/line series this OVERRIDES the
+     * chart-group `<c:scatterStyle>` (§21.2.2.42) / line default — Excel and
+     * PowerPoint draw markers only (no connecting line) even when the group style
+     * is `lineMarker`. null/undefined = no explicit line-off, so the group default
+     * governs (byte-stable for series that carry a paintable line).
+     */
+    lineHidden?: boolean | null;
+}
+/**
+ * `<c:ser><c:trendline>` (ECMA-376 §21.2.2.211). A regression/smoothing curve
+ * fitted to the series' data points.
+ */
+interface ChartTrendline {
+    /**
+     * `<c:trendlineType val>` (§21.2.2.213, `ST_TrendlineType` §21.2.3.50):
+     * "linear" | "exp" | "log" | "power" | "poly" | "movingAvg". The renderer
+     * currently draws "linear" (least squares) and "movingAvg"; other types parse
+     * but are not yet plotted (tracked as a follow-up).
+     */
+    trendlineType: string;
+    /** `<c:order val>` — polynomial order (`poly`, default 2). */
+    order?: number | null;
+    /** `<c:period val>` — moving-average window (`movingAvg`, default 2). */
+    period?: number | null;
+    /** `<c:forward val>` — units to extend the line past the last point. */
+    forward?: number | null;
+    /** `<c:backward val>` — units to extend the line before the first point. */
+    backward?: number | null;
+    /** `<c:intercept val>` — forced y-intercept (linear/exp). null = free fit. */
+    intercept?: number | null;
+    /** `<c:dispRSqr val="1">` — show the R² value (label; not yet rendered). */
+    dispRSqr?: boolean | null;
+    /** `<c:dispEq val="1">` — show the fit equation (label; not yet rendered). */
+    dispEq?: boolean | null;
+    /** `<c:spPr><a:ln><a:solidFill>` trendline color (hex without '#'). null =
+     *  inherit the series color. */
+    lineColor?: string | null;
+    /** `<c:spPr><a:ln w>` trendline width in EMU. */
+    lineWidthEmu?: number | null;
+}
+interface ChartDataPointOverride {
+    idx: number;
+    /** Resolved fill hex (no `#`). */
+    color?: string;
+    markerSymbol?: string;
+    markerSize?: number;
+    markerFill?: string;
+    markerLine?: string;
+    /**
+     * `<c:dPt><c:explosion val>` (ECMA-376 §21.2.2.61) — the amount this
      * pie/doughnut slice is moved out from the center. The schema type is
      * `CT_UnsignedInt` (unbounded `xsd:unsignedInt`); the spec text only says
      * "the amount the data point shall be moved from the center of the pie"
@@ -1107,686 +1579,214 @@ type OoxmlResourceLimit = number | null;
 /** Admission limits for the inflated contents of one OOXML package session. */
 interface OoxmlResourceLimits {
     /**
-     * Maximum permitted inflated size for any one archive entry, including
-     * media. Enforced against both the ZIP declaration and actual output.
-     */
-    maxArchiveEntryBytes?: OoxmlResourceLimit;
-    /** Maximum actual inflated bytes across distinct entries in the session. */
-    maxTotalInflatedBytes?: OoxmlResourceLimit;
-}
-/**
- * Common load-time options shared by the docx / pptx / xlsx
- * `Document.load` / `Presentation.load` / `Workbook.load` factories and their
- * viewer wrappers.
- *
- * This is the single source of truth — each package re-exports this exact type
- * as its `LoadOptions` so application code can pass one options object to any
- * of the three.
- */
-interface LoadOptions$1 {
-    /**
-     * Opt in to loading webfont substitutes from Google Fonts
-     * (`fonts.googleapis.com`). Default `false` — the canvas falls back to
-     * locally available fonts.
-     *
-     * When enabled, end-user IP / User-Agent is sent to Google, which may
-     * have privacy / GDPR implications for your application. To avoid the
-     * third-party request, host the substitutes yourself and reference them
-     * via `@font-face` in your application CSS.
-     */
-    useGoogleFonts?: boolean;
-    /**
-     * Password for an encrypted OOXML file ([MS-OFFCRYPTO] Agile Encryption).
-     *
-     * Password-protected Office documents are CFB (OLE2) containers, not ZIPs.
-     * When this is set and the input is Agile-encrypted, `load()` decrypts it on
-     * the main thread (via WebCrypto) and parses the recovered plaintext ZIP.
-     *
-     * Errors (thrown as {@link import('../errors/ooxml-error').OoxmlError}):
-     *   - no `password` on an encrypted file → code `'encrypted'`
-     *   - wrong `password`                   → code `'invalid-password'`
-     *   - a non-Agile scheme (Standard / Extensible / legacy) → code
-     *     `'unsupported-encryption'`
-     *
-     * Note: Agile Encryption uses a high password-hash spin count (commonly
-     * 100,000), so decryption of a protected file adds roughly a second of
-     * WebCrypto work before parsing begins.
-     *
-     * Security notes:
-     *   - This value is held as an ordinary JS `string` in memory for the
-     *     duration of key derivation. The library does not zero it, and does
-     *     not wrap it in a `SecureString`-equivalent — it becomes eligible for
-     *     garbage collection like any other string once nothing references it,
-     *     but no explicit wipe is performed. It is never logged or included in
-     *     thrown errors.
-     *   - Decryption recovers the plaintext but does not verify the file's HMAC
-     *     data-integrity tag ([MS-OFFCRYPTO] §2.3.4.14), so ciphertext tampering
-     *     is not detected — see "Security & Privacy" in the README.
-     */
-    password?: string;
-    /**
-     * Override the URL the parser worker fetches the WebAssembly module from.
-     *
-     * By default each format resolves the `.wasm` asset that ships next to its
-     * bundle (relative to the module URL), so no configuration is needed. Set
-     * this to serve the parser WASM from a CDN or a self-hosted path instead — a
-     * relative value is resolved against the current document URL. The same
-     * dependency-injection contract across docx / pptx / xlsx.
-     *
-     * The referenced file must be the matching format's `*_parser_bg.wasm`
-     * artifact (the one wasm-bindgen emitted for that parser); pointing it at a
-     * mismatched or missing file makes `load()` reject when the worker
-     * instantiates it.
-     */
-    wasmUrl?: string | URL;
-    /**
-     * @deprecated Use `resourceLimits.maxArchiveEntryBytes`. Scheduled for
-     * removal in a future breaking release.
-     *
-     * Existing positive safe-integer values remain an all-entry inflated-byte
-     * limit. Zero, negative, and NaN values retain their historical fallback
-     * behavior; other invalid positive values reject during `load()`.
-     */
-    maxZipEntryBytes?: number;
-    /**
-     * Inflated archive admission limits for one document session. Omitted fields
-     * use the library defaults. A positive safe integer overrides a default;
-     * `null` disables that configurable limit only. Limits are admission policy,
-     * not guarantees of exact browser-process memory use.
-     */
-    resourceLimits?: OoxmlResourceLimits;
-    /**
-     * Emit one content-free resource-usage card after load succeeds or fails.
-     * Includes observed archive counters and configured limits, but never source
-     * URLs, part names, document text, passwords, or error messages.
-     */
-    debug?: boolean;
-    /**
-     * Receive the initial content-free, machine-readable report that powers the
-     * debug card, without enabling console output. After resource options validate,
-     * the callback runs once when the current load settles, including failed loads
-     * for which no renderer instance is returned. The callback is not awaited;
-     * synchronous exceptions and rejected promises are ignored and never change
-     * load results.
-     *
-     * A browser report covers the underlying document/workbook/presentation
-     * factory. It does not wait for a Viewer's first canvas paint; that paint and
-     * later lazy worksheet, slide, image, or media access may increase counters or
-     * surface a separate render error. Successfully opened packages include the
-     * declared package total and source byte size in the report. On a successful
-     * load, call `getResourceMetrics()` on the returned engine or Viewer for a fresh
-     * snapshot that includes subsequently observed lazy package work.
-     */
-    onResourceMetrics?: (metrics: OoxmlResourceMetrics) => void;
-    /**
-     * Reject the parse request if the parser worker does not answer within this
-     * many milliseconds. Opt-in safety net for a wedged or crashed worker that
-     * would otherwise leave `load()` pending forever. **Default: unlimited** —
-     * parsing a large document with heavy embedded media can legitimately take
-     * tens of seconds, so no timeout is imposed unless you set one. A worker that
-     * throws or fails to load already rejects immediately regardless of this
-     * value; this bound only covers the "silent, never-responds" case.
-     */
-    workerTimeoutMs?: number;
-    /**
-     * Opt-in OMML equation engine (MathJax + STIX Two Math, ~3 MB). Inject it
-     * **once** here and every render of this document / presentation / workbook
-     * uses it — the same dependency-injection contract across all three formats
-     * and their viewers. Import it from the separate `@silurus/ooxml/math` entry
-     * (`import { math } from '@silurus/ooxml/math'`). Omit it and equations are
-     * skipped and the engine tree-shakes away entirely (no network, no bundle
-     * cost).
-     */
-    math?: MathRenderer;
-}
-//#endregion
-//#region packages/core/src/image/pixel-budget.d.ts
-type OoxmlDecodedImageLimitMetric = 'image-pixels' | 'active-decoded-bytes';
-/** Catchable hard-quota crossing for decoded image surfaces. */
-declare class OoxmlDecodedImageLimitError extends RangeError {
-    readonly metric: OoxmlDecodedImageLimitMetric;
-    readonly limit: number;
-    readonly observed: number;
-    readonly code: "ooxml-decoded-image-limit";
-    constructor(metric: OoxmlDecodedImageLimitMetric, limit: number, observed: number);
-}
-declare function isOoxmlDecodedImageLimitError(error: unknown): error is OoxmlDecodedImageLimitError;
-//#endregion
-//#region packages/core/src/interaction/hyperlink.d.ts
-/**
- * Shared hyperlink model + URL sanitisation for docx / pptx / xlsx (IX1).
- *
- * All three formats carry the same two ECMA-376 concepts:
- *   - an **external** hyperlink — an absolute URL resolved from a relationship
- *     part target (`document.xml.rels` for docx §17.16.22, the slide rels for
- *     pptx §21.1.2.3.5, the worksheet rels for xlsx §18.3.1.47), with
- *     `TargetMode="External"`.
- *   - an **internal** hyperlink — a jump within the document itself:
- *     docx `w:anchor` -> a `<w:bookmarkStart w:name>` (§17.16.23), pptx
- *     `action="ppaction://hlinksldjump"` -> a slide, xlsx `location` -> a defined
- *     name or a `Sheet!A1` cell reference.
- *
- * The parsers (Rust, one per format) do the format-specific rels lookup and hand
- * each run / shape / cell a {@link HyperlinkTarget}. Everything downstream — the
- * text-layer overlay, the viewer default click behaviour, and any integrator
- * callback — is format-agnostic and consumes this one shape. Keeping the type +
- * the pure `sanitizeHyperlinkUrl` predicate here (not duplicated per package)
- * follows the cross-package unification principle: a scheme-allowlist bug fixed
- * once is fixed everywhere.
- */
-/**
- * A resolved hyperlink attached to a run, shape, or cell.
- *
- *   - `external` — `url` is the raw target as authored in the file. It is NOT
- *     guaranteed safe; run it through {@link sanitizeHyperlinkUrl} before
- *     navigating. It is kept verbatim here so an integrator can apply its own
- *     policy (e.g. allow `file:` on a trusted intranet viewer).
- *   - `internal` — `ref` is the in-document destination, verbatim from the file:
- *       docx: the bookmark name (`w:anchor`).
- *       pptx: the internal action (e.g. `ppaction://hlinksldjump`), with the
- *             resolved 0-based `slideIndex` when the rels target names a slide.
- *       xlsx: the `location` string (a defined name or `Sheet1!A1`).
- */
-type HyperlinkTarget = {
-    kind: 'external';
-    url: string;
-} | {
-    kind: 'internal';
-    ref: string;
-    slideIndex?: number;
-};
-/**
- * The default action a viewer takes for an **external** hyperlink click when
- * the integrator supplies no `onHyperlinkClick` handler: sanitise the URL and,
- * if allowed, open it in a new tab with `noopener,noreferrer` so the opened page
- * gets no `window.opener` handle back into this document. A blocked scheme is a
- * silent no-op (returns `false`) — the click does nothing rather than navigate
- * somewhere dangerous.
- *
- * Internal targets are intentionally NOT handled here: the in-document jump
- * (page / slide / cell) is format-specific and lives in each viewer.
- *
- * Split out (not inlined in three viewers) so the "open in new tab, drop opener,
- * refuse unsafe schemes" policy is defined once. `win` is injected for tests;
- * defaults to the ambient `window`.
- *
- * @returns `true` if navigation was initiated, `false` if the URL was blocked.
- */
-declare function openExternalHyperlink(url: string, allowed?: readonly string[], win?: Pick<Window, 'open'> | undefined): boolean;
-//#endregion
-//#region dist/.types-work/common-Bgczc_Eb.d.ts
-//#region packages/core/src/types/common.d.ts
-type PathCmd = {
-    cmd: 'moveTo';
-    x: number;
-    y: number;
-} | {
-    cmd: 'lineTo';
-    x: number;
-    y: number;
-} | {
-    cmd: 'cubicBezTo';
-    x1: number;
-    y1: number;
-    x2: number;
-    y2: number;
-    x: number;
-    y: number;
-} | {
-    cmd: 'arcTo';
-    wr: number;
-    hr: number;
-    stAng: number;
-    swAng: number;
-} | {
-    cmd: 'close';
-};
-type Fill = SolidFill | NoFill | GradientFill | PatternFill | ImageFill;
-interface SolidFill {
-    fillType: 'solid';
-    color: string;
-}
-interface NoFill {
-    fillType: 'none';
-}
-interface GradientStop {
-    position: number;
-    color: string;
-}
-interface GradientFill {
-    fillType: 'gradient';
-    stops: GradientStop[];
-    /** degrees: 0 = left→right, 90 = top→bottom */
-    angle: number;
-    /** 'linear' | 'radial' */
-    gradType: string;
-}
-/**
- * Preset pattern fill — ECMA-376 §20.1.8.40 (CT_PatternFillProperties)
- * with `preset` drawn from §20.1.10.59 (ST_PresetPatternVal).
- */
-interface PatternFill {
-    fillType: 'pattern';
-    /** Foreground hex colour — used for the "1" pixels of the preset bitmap. */
-    fg: string;
-    /** Background hex colour — used for the "0" pixels. */
-    bg: string;
-    /** Preset name, e.g. "pct25", "horz", "diagCross", "lgGrid". */
-    preset: string;
-}
-/**
- * ECMA-376 §20.1.8.30 (CT_RelativeRect) — the destination rectangle a stretched
- * blip is mapped into, as edge insets relative to the fill region. Values are
- * fractions (ST_Percentage / 100000); **negative values let the image bleed
- * past the box (overscan)**. Absent edges default to 0.
- */
-interface FillRect {
-    l?: number;
-    t?: number;
-    r?: number;
-    b?: number;
-}
-/**
- * ECMA-376 §20.1.8.58 (CT_TileInfoProperties) — tiled blip-fill placement.
- * The blip repeats at its native size (scaled by sx/sy) across the fill box.
- * Mutually exclusive with {@link ImageFill.fillRect} (the `stretch` mode).
- */
-interface TileInfo {
-    /** Horizontal offset of the first tile, in EMU (`tx`). Default 0. */
-    tx: number;
-    /** Vertical offset of the first tile, in EMU (`ty`). Default 0. */
-    ty: number;
-    /** Horizontal tile scale as a fraction (`sx` / 100000). Default 1.0. */
-    sx: number;
-    /** Vertical tile scale as a fraction (`sy` / 100000). Default 1.0. */
-    sy: number;
-    /** Mirror mode: `'none' | 'x' | 'y' | 'xy'` (`flip`). Default `'none'`. */
-    flip: string;
-    /**
-     * Anchor corner the tile grid registers against:
-     * `tl|t|tr|l|ctr|r|bl|b|br` (`algn`). Default `'tl'`.
-     */
-    algn: string;
-}
-/**
- * Image fill — ECMA-376 §20.1.8.14 (CT_BlipFillProperties). The embedded blip
- * is carried as a zip path + MIME; the renderer fetches the bytes on demand via
- * {@link RenderOptions.fetchImage} (no base64 inlined at parse time). Both
- * fill-modes are modelled and mutually exclusive: `stretch` (§20.1.8.56) carries
- * {@link ImageFill.fillRect}; `tile` (§20.1.8.58) carries {@link ImageFill.tile}.
- */
-interface ImageFill {
-    fillType: 'image';
-    /**
-     * Embedded zip path of the blip (e.g. "word/media/image1.png"), for the lazy
-     * byte-on-demand pipeline. The renderer fetches the bytes via a path-keyed
-     * loader ({@link RenderOptions.fetchImage}) instead of inlining base64.
-     */
-    imagePath: string;
-    /** MIME type of the blip at {@link ImageFill.imagePath} (e.g. `image/png`). */
-    mimeType: string;
-    /**
-     * `<a:stretch><a:fillRect>` insets. Absent → fills the whole box (or the
-     * fill is tiled — see {@link ImageFill.tile}).
-     */
-    fillRect?: FillRect;
-    /**
-     * `<a:tile>` descriptor. Present only when the blipFill is tiled; mutually
-     * exclusive with {@link ImageFill.fillRect}.
-     */
-    tile?: TileInfo;
-    /** `a:blip > a:alphaModFix@amt` as a fraction (0.0–1.0). Absent = opaque. */
-    alpha?: number;
-    /**
-     * ECMA-376 §20.1.8.23 `<a:duotone>` recolour, resolved to its two endpoint
-     * colours (through the slide theme). Absent ⇒ no duotone. When present the
-     * renderer maps the blip's luminance ramp between the two colours (core
-     * `applyDuotone`) — the same recolour a `<p:pic>` duotone applies, wired onto
-     * the picture-FILL path (§20.1.8.14) by issue #889.
-     */
-    duotone?: Duotone;
-}
-interface Shadow {
-    color: string;
-    alpha: number;
-    blur: number;
-    dist: number;
-    /** degrees clockwise from East */
-    dir: number;
-}
-/** ECMA-376 §20.1.8.17 (CT_GlowEffect) — coloured halo with blur radius. */
-interface Glow {
-    color: string;
-    alpha: number;
-    /** Blur radius in EMU. */
-    radius: number;
-}
-/** ECMA-376 §20.1.8.31 (CT_SoftEdgesEffect) — feather radius in EMU. */
-interface SoftEdge {
-    radius: number;
-}
-/** ECMA-376 §20.1.8.27 (CT_ReflectionEffect) — mirrored copy below the
- *  shape with a linear alpha gradient. Carries the spec attributes whose
- *  defaults the renderer needs to interpret correctly. */
-interface Reflection {
-    blur: number;
-    dist: number;
-    /** Direction in degrees, clockwise from East. */
-    dir: number;
-    /** Start alpha (0–1). Default 1.0. */
-    stA: number;
-    /** Start position along the gradient (0–1). Default 0. */
-    stPos: number;
-    /** End alpha. Default 0. */
-    endA: number;
-    /** End position. Default 1.0. */
-    endPos: number;
-    /** Horizontal scale (1.0 = same width). */
-    sx: number;
-    /** Vertical scale (-1.0 = full mirror). */
-    sy: number;
-}
-interface ArrowEnd {
-    /** OOXML type: "none" | "triangle" | "stealth" | "diamond" | "oval" | "arrow" */
-    type: string;
-    /** Width multiplier: "sm" | "med" | "lg" */
-    w: string;
-    /** Length multiplier: "sm" | "med" | "lg" */
-    len: string;
-}
-interface Stroke {
-    color: string;
-    /** Width in EMU */
-    width: number;
-    /** Authored non-solid DrawingML line paint. Solid lines use `color`. */
-    fill?: Exclude<Fill, {
-        fillType: 'image';
-    } | {
-        fillType: 'none';
-    }>;
-    /** OOXML prstDash value: "dash", "dot", "dashDot", "lgDash", "lgDashDot", etc. */
-    dashStyle?: string;
-    /** Canvas line cap normalized from DrawingML/VML (`flat` → `butt`). */
-    lineCap?: CanvasLineCap;
-    /** Arrow head at the start of the line */
-    headEnd?: ArrowEnd;
-    /** Arrow head at the end of the line */
-    tailEnd?: ArrowEnd;
-    /**
-     * ECMA-376 §20.1.8.42 ST_CompoundLine. "sng" (default) | "dbl" |
-     * "thinThick" | "thickThin" | "tri". Absent means single line.
-     */
-    cmpd?: string;
-}
-interface TextBody$1 {
-    /** Vertical anchor: "t" | "ctr" | "b" */
-    verticalAnchor: string;
-    paragraphs: Paragraph$1[];
-    /** Default pt size from lstStyle (overrides renderer default when present) */
-    defaultFontSize: number | null;
-    /** Inherited bold from layout/master defRPr (null = not set, use false as final default) */
-    defaultBold: boolean | null;
-    /** Inherited italic from layout/master defRPr (null = not set, use false as final default) */
-    defaultItalic: boolean | null;
-    /** Text insets in EMU (defaults: lIns=rIns=91440, tIns=bIns=45720) */
-    lIns: number;
-    rIns: number;
-    tIns: number;
-    bIns: number;
-    /** "square" = wrap, "none" = no wrap */
-    wrap: string;
-    /** Text direction: "horz" | "vert" | "vert270" | "eaVert" etc. */
-    vert: string;
-    /** Auto-fit: "sp" = shape grows to fit text, "norm" = font shrinks, "none" = no fit */
-    autoFit: string;
-    /**
-     * `<a:normAutofit fontScale>` (ECMA-376 §21.1.2.1.3) — PowerPoint's stored,
-     * pre-computed font-shrink ratio for `autoFit === "norm"`, as a fraction
-     * (e.g. 0.625 for `fontScale="62500"`). Null/absent when PowerPoint stored no
-     * scale; the renderer then re-derives one. Applying the stored value matches
-     * PowerPoint exactly instead of guessing from our own text metrics.
-     */
-    fontScale?: number | null;
-    /** `<a:normAutofit lnSpcReduction>` — stored line-spacing reduction fraction
-     *  (e.g. 0.20 for `lnSpcReduction="20000"`). Null/absent when not stored. */
-    lnSpcReduction?: number | null;
-    /**
-     * `<a:bodyPr numCol>` (ECMA-376 §20.1.10.34) — number of text columns inside
-     * the shape. Defaults to 1; values > 1 cause the renderer to flow paragraphs
-     * across N columns left-to-right, top-to-bottom.
-     */
-    numCol?: number;
-    /** `<a:bodyPr spcCol>` — gap between columns in EMU. Default 0. */
-    spcCol?: number;
-}
-type SpaceLine = {
-    type: 'pct';
-    val: number;
-} | {
-    type: 'pts';
-    val: number;
-};
-/**
- * A paragraph's bullet marker. For `char`, the marker size is EITHER `sizePct`
- * (a percentage of the run size — ECMA-376 §21.1.2.4.9 `<a:buSzPct>`) OR `sizePts`
- * (an absolute size in points — §21.1.2.4.10 `<a:buSzPts>`), never both: they are
- * the one `EG_TextBulletSize` xsd:choice. `sizePts` is optional (absent when no
- * `<a:buSzPts>` was declared); when present it takes precedence over `sizePct`.
- */
-type Bullet$1 = {
-    type: 'none';
-} | {
-    type: 'inherit';
-} | {
-    type: 'char';
-    char: string;
-    color: string | null;
-    sizePct: number | null;
-    sizePts?: number;
-    fontFamily: string | null;
-} | {
-    type: 'autoNum';
-    numType: string;
-    startAt: number | null;
-    color: string | null;
-};
-interface TabStop {
-    /** Position in EMU from the LEADING text-inset edge of the text area —
-     *  logical, not physical (ECMA-376 §21.1.2.1): the left edge (after lIns)
-     *  in an LTR paragraph, the right edge (before rIns) in an RTL
-     *  (`<a:pPr rtl="1">`) paragraph. */
-    pos: number;
-    /** Alignment: "l" | "r" | "ctr" | "dec" */
-    algn: string;
-}
-interface Paragraph$1 {
-    /** Alignment: "l" | "ctr" | "r" | "just" */
-    alignment: string;
-    /** Left margin in EMU */
-    marL: number;
-    /** Right margin in EMU */
-    marR: number;
-    /** First-line indent in EMU (negative = hanging indent) */
-    indent: number;
-    spaceBefore: number | null;
-    spaceAfter: number | null;
-    spaceLine: SpaceLine | null;
-    /** List nesting level (0–8) */
-    lvl: number;
-    bullet: Bullet$1;
-    defFontSize: number | null;
-    defColor: string | null;
-    defBold: boolean | null;
-    defItalic: boolean | null;
-    defFontFamily: string | null;
-    /** Tab stops from pPr > tabLst */
-    tabStops: TabStop[];
-    /**
-     * `<a:pPr rtl="1">` — right-to-left paragraph (ECMA-376 §21.1.2.2.7).
-     * When true and no explicit `algn`, the parser-side default flips from
-     * "l" to "r"; renderers can also use this flag to flow runs RTL.
-     */
-    rtl?: boolean;
-    runs: TextRun[];
-}
-type TextRun = TextRunData | LineBreak | EquationRun;
-/**
- * An OMML equation embedded in a paragraph (ECMA-376 §22.1). Parsed into the
- * shared math AST and rendered by `@silurus/ooxml-core`'s math engine.
- * PowerPoint stores these as `a14:m` inside `mc:AlternateContent`.
- */
-interface EquationRun {
-    type: 'math';
-    /** Parsed OMML node list. */
-    nodes: MathNode[];
-    /** True for block (`m:oMathPara`) math, false for inline (`m:oMath`). */
-    display: boolean;
-    /** Paragraph default run size in pt, if declared; absent → renderer inherits. */
-    fontSize?: number | null;
-    /** Equation colour (hex, no '#') from the math run's rPr; absent → inherit. */
-    color?: string | null;
-}
-interface TextRunData {
-    type: 'text';
-    text: string;
-    /** null = not set, inherit from paragraph/body defaults */
-    bold: boolean | null;
-    /** null = not set, inherit from paragraph/body defaults */
-    italic: boolean | null;
-    underline: boolean;
-    /**
-     * Specific underline style when not the default single line. Values come
-     * from ECMA-376 §21.1.2.3.16 (ST_TextUnderlineType): "dbl", "heavy",
-     * "dotted", "dottedHeavy", "dash", "dashHeavy", "dashLong",
-     * "dashLongHeavy", "dotDash", "dotDashHeavy", "dotDotDash",
-     * "dotDotDashHeavy", "wavy", "wavyHeavy", "wavyDbl". Absent means either
-     * no underline (when `underline` is false) or the default single line.
-     */
-    underlineStyle?: string;
-    /**
-     * Underline-only colour from rPr > uFill (ECMA-376 §21.1.2.3.20). Absent
-     * means the underline follows the text colour (uFillTx default).
-     */
-    underlineColor?: string;
-    /** True when rPr strike is sngStrike or dblStrike. */
-    strikethrough: boolean;
-    /**
-     * True only when rPr strike = "dblStrike". Lets the renderer draw two parallel
-     * lines instead of one. ECMA-376 §21.1.2.3.10 (ST_TextStrikeType).
-     */
-    strikeDouble?: boolean;
-    /** Font size in points */
-    fontSize: number | null;
-    color: string | null;
-    fontFamily: string | null;
-    /**
-     * East Asian font family from rPr > a:ea (ECMA-376 §21.1.2.3.7),
-     * resolved through the theme. Renderer uses this for CJK glyphs when
-     * present; absent means CJK falls back to fontFamily.
-     */
-    fontFamilyEa?: string;
-    /**
-     * Symbol font family from rPr > a:sym (ECMA-376 §21.1.2.3.10), resolved
-     * through the theme. PowerPoint stores symbol-font glyphs as Private-Use
-     * codepoints U+F020–U+F0FF; the renderer uses this font to resolve them.
-     * Absent means no symbol font was declared.
-     */
-    fontFamilySym?: string;
-    /** Baseline shift in thousandths of a point. Positive = superscript, negative = subscript. */
-    baseline?: number;
-    /**
-     * Capitalisation transform — ECMA-376 §21.1.2.3.13 (ST_TextCapsType).
-     * 'all' renders text in upper case; 'small' uses small caps (rendered as
-     * upper case at ~80% size when no smcp font feature is available).
-     * 'none' or omitted leaves the text unchanged.
+     * Maximum permitted inflated size for any one archive entry, including
+     * media. Enforced against both the ZIP declaration and actual output.
      */
-    caps?: 'none' | 'small' | 'all';
+    maxArchiveEntryBytes?: OoxmlResourceLimit;
+    /** Maximum actual inflated bytes across distinct entries in the session. */
+    maxTotalInflatedBytes?: OoxmlResourceLimit;
+}
+/**
+ * Common load-time options shared by the docx / pptx / xlsx
+ * `Document.load` / `Presentation.load` / `Workbook.load` factories and their
+ * viewer wrappers.
+ *
+ * This is the single source of truth — each package re-exports this exact type
+ * as its `LoadOptions` so application code can pass one options object to any
+ * of the three.
+ */
+interface LoadOptions$1 {
     /**
-     * Inter-character spacing in 100ths of a point — ECMA-376 §21.1.2.3.5
-     * (rPr @spc). Positive values add space, negative values tighten.
+     * Opt in to loading webfont substitutes from Google Fonts
+     * (`fonts.googleapis.com`). Default `false` — the canvas falls back to
+     * locally available fonts.
+     *
+     * When enabled, end-user IP / User-Agent is sent to Google, which may
+     * have privacy / GDPR implications for your application. To avoid the
+     * third-party request, host the substitutes yourself and reference them
+     * via `@font-face` in your application CSS.
      */
-    letterSpacing?: number;
-    /** Set for OOXML field runs (e.g. "slidenum"). When set, renderer replaces text with field value. */
-    fieldType?: string;
+    useGoogleFonts?: boolean;
     /**
-     * Hyperlink target resolved from rPr > a:hlinkClick @r:id via the slide's _rels.
-     * For an external link this is the URL; for an internal slide jump it is the
-     * resolved internal part name (e.g. "../slides/slide3.xml"). Undefined for runs
-     * without a hyperlink. ECMA-376 §21.1.2.3.5 (CT_Hyperlink).
+     * Password for an encrypted OOXML file ([MS-OFFCRYPTO] Agile Encryption).
+     *
+     * Password-protected Office documents are CFB (OLE2) containers, not ZIPs.
+     * When this is set and the input is Agile-encrypted, `load()` decrypts it on
+     * the main thread (via WebCrypto) and parses the recovered plaintext ZIP.
+     *
+     * Errors (thrown as {@link import('../errors/ooxml-error').OoxmlError}):
+     *   - no `password` on an encrypted file → code `'encrypted'`
+     *   - wrong `password`                   → code `'invalid-password'`
+     *   - a non-Agile scheme (Standard / Extensible / legacy) → code
+     *     `'unsupported-encryption'`
+     *
+     * Note: Agile Encryption uses a high password-hash spin count (commonly
+     * 100,000), so decryption of a protected file adds roughly a second of
+     * WebCrypto work before parsing begins.
+     *
+     * Security notes:
+     *   - This value is held as an ordinary JS `string` in memory for the
+     *     duration of key derivation. The library does not zero it, and does
+     *     not wrap it in a `SecureString`-equivalent — it becomes eligible for
+     *     garbage collection like any other string once nothing references it,
+     *     but no explicit wipe is performed. It is never logged or included in
+     *     thrown errors.
+     *   - Decryption recovers the plaintext but does not verify the file's HMAC
+     *     data-integrity tag ([MS-OFFCRYPTO] §2.3.4.14), so ciphertext tampering
+     *     is not detected — see "Security & Privacy" in the README.
      */
-    hyperlink?: string;
+    password?: string;
     /**
-     * Raw `<a:hlinkClick @action>` string (e.g. "ppaction://hlinksldjump") when
-     * present — its presence marks {@link hyperlink} as an INTERNAL PowerPoint
-     * action (slide jump / first / last …) rather than an external URL. Undefined
-     * when the hlinkClick has no @action. ECMA-376 §21.1.2.3.5. (IX1)
+     * Override the URL the parser worker fetches the WebAssembly module from.
+     *
+     * By default each format resolves the `.wasm` asset that ships next to its
+     * bundle (relative to the module URL), so no configuration is needed. Set
+     * this to serve the parser WASM from a CDN or a self-hosted path instead — a
+     * relative value is resolved against the current document URL. The same
+     * dependency-injection contract across docx / pptx / xlsx.
+     *
+     * The referenced file must be the matching format's `*_parser_bg.wasm`
+     * artifact (the one wasm-bindgen emitted for that parser); pointing it at a
+     * mismatched or missing file makes `load()` reject when the worker
+     * instantiates it.
      */
-    hyperlinkAction?: string;
+    wasmUrl?: string | URL;
     /**
-     * Run-level drop shadow on glyphs (`<a:rPr><a:effectLst><a:outerShdw>`),
-     * ECMA-376 §20.1.8.45. Independent of the shape-level shadow on `spPr`.
-     * Absent means no run-level shadow.
+     * @deprecated Use `resourceLimits.maxArchiveEntryBytes`. Scheduled for
+     * removal in a future breaking release.
+     *
+     * Existing positive safe-integer values remain an all-entry inflated-byte
+     * limit. Zero, negative, and NaN values retain their historical fallback
+     * behavior; other invalid positive values reject during `load()`.
      */
-    shadow?: Shadow;
+    maxZipEntryBytes?: number;
     /**
-     * Run-level glyph outline (`<a:rPr><a:ln w="..">`), ECMA-376 §20.1.2.2.24
-     * (CT_TextOutlineEffect). Renderer strokes each glyph with the given
-     * width / colour in addition to the normal fill. Absent means glyphs are
-     * fill-only.
+     * Inflated archive admission limits for one document session. Omitted fields
+     * use the library defaults. A positive safe integer overrides a default;
+     * `null` disables that configurable limit only. Limits are admission policy,
+     * not guarantees of exact browser-process memory use.
      */
-    outline?: TextOutline;
+    resourceLimits?: OoxmlResourceLimits;
     /**
-     * Run-level text highlight / marker colour (`<a:rPr><a:highlight>`),
-     * ECMA-376 §21.1.2.3.4. In DrawingML this is a full CT_Color (any
-     * srgbClr / schemeClr / sysClr / prstClr + transforms), unlike
-     * WordprocessingML's fixed 16-name highlight enum — so the parser already
-     * resolves it through the theme/clrMap. The value is a hex string without
-     * `#` (6-char opaque, or 8-char RRGGBBAA when an alpha transform applies);
-     * the renderer paints a background rectangle behind the run's glyphs.
-     * Absent means no highlight.
+     * Emit one content-free resource-usage card after load succeeds or fails.
+     * Includes observed archive counters and configured limits, but never source
+     * URLs, part names, document text, passwords, or error messages.
      */
-    highlight?: string;
-}
-/** Run-level glyph outline. Width is in OOXML EMU (12700 EMU = 1 pt). */
-interface TextOutline {
-    width: number;
-    /** Hex without '#'. Absent = inherit from text fill colour. */
-    color?: string;
-}
-interface LineBreak {
-    type: 'break';
-}
-interface RenderOptions {
-    width?: number;
-    defaultTextColor?: string | null;
-    dpr?: number;
-    majorFont?: string | null;
-    minorFont?: string | null;
-    /** Theme hyperlink colour (hex 6 chars). Used to colour hyperlink runs without an explicit colour. */
-    hlinkColor?: string | null;
+    debug?: boolean;
     /**
-     * Lazily resolve an archive-internal asset (by zip path) to a Blob. The
-     * renderer uses this to fetch posters and other large embedded assets on
-     * demand, keeping the parse output free of inlined base64.
+     * Receive the initial content-free, machine-readable report that powers the
+     * debug card, without enabling console output. After resource options validate,
+     * the callback runs once when the current load settles, including failed loads
+     * for which no renderer instance is returned. The callback is not awaited;
+     * synchronous exceptions and rejected promises are ignored and never change
+     * load results.
+     *
+     * A browser report covers the underlying document/workbook/presentation
+     * factory. It does not wait for a Viewer's first canvas paint; that paint and
+     * later lazy worksheet, slide, image, or media access may increase counters or
+     * surface a separate render error. Successfully opened packages include the
+     * declared package total and source byte size in the report. On a successful
+     * load, call `getResourceMetrics()` on the returned engine or Viewer for a fresh
+     * snapshot that includes subsequently observed lazy package work.
      */
-    fetchMedia?: (path: string) => Promise<Blob>;
+    onResourceMetrics?: (metrics: OoxmlResourceMetrics) => void;
     /**
-     * Lazily resolve an embedded image (by zip path + MIME) to a Blob. Twin of
-     * {@link RenderOptions.fetchMedia} for pictures and blip fills: the renderer
-     * fetches raster/SVG bytes on demand and decodes them (`createImageBitmap` /
-     * path-keyed `<img>`), so the parse output carries only paths, never base64.
+     * Reject the parse request if the parser worker does not answer within this
+     * many milliseconds. Opt-in safety net for a wedged or crashed worker that
+     * would otherwise leave `load()` pending forever. **Default: unlimited** —
+     * parsing a large document with heavy embedded media can legitimately take
+     * tens of seconds, so no timeout is imposed unless you set one. A worker that
+     * throws or fails to load already rejects immediately regardless of this
+     * value; this bound only covers the "silent, never-responds" case.
      */
-    fetchImage?: (path: string, mimeType: string) => Promise<Blob>;
+    workerTimeoutMs?: number;
     /**
-     * When true, renderMedia draws only the poster frame — play/pause badges
-     * and progress bars are left to the caller. Set by the pptx presentSlide
-     * API so its interactive handle can own all control chrome without
-     * the static renderer drawing a duplicate play badge.
+     * Opt-in OMML equation engine (MathJax + STIX Two Math, ~3 MB). Inject it
+     * **once** here and every render of this document / presentation / workbook
+     * uses it — the same dependency-injection contract across all three formats
+     * and their viewers. Import it from the separate `@silurus/ooxml/math` entry
+     * (`import { math } from '@silurus/ooxml/math'`). Omit it and equations are
+     * skipped and the engine tree-shakes away entirely (no network, no bundle
+     * cost).
      */
-    skipMediaControls?: boolean;
+    math?: MathRenderer;
+}
+//#endregion
+//#region packages/core/src/image/pixel-budget.d.ts
+type OoxmlDecodedImageLimitMetric = 'image-pixels' | 'active-decoded-bytes';
+/** Catchable hard-quota crossing for decoded image surfaces. */
+declare class OoxmlDecodedImageLimitError extends RangeError {
+    readonly metric: OoxmlDecodedImageLimitMetric;
+    readonly limit: number;
+    readonly observed: number;
+    readonly code: "ooxml-decoded-image-limit";
+    constructor(metric: OoxmlDecodedImageLimitMetric, limit: number, observed: number);
 }
+declare function isOoxmlDecodedImageLimitError(error: unknown): error is OoxmlDecodedImageLimitError;
+//#endregion
+//#region packages/core/src/interaction/hyperlink.d.ts
+/**
+ * Shared hyperlink model + URL sanitisation for docx / pptx / xlsx (IX1).
+ *
+ * All three formats carry the same two ECMA-376 concepts:
+ *   - an **external** hyperlink — an absolute URL resolved from a relationship
+ *     part target (`document.xml.rels` for docx §17.16.22, the slide rels for
+ *     pptx §21.1.2.3.5, the worksheet rels for xlsx §18.3.1.47), with
+ *     `TargetMode="External"`.
+ *   - an **internal** hyperlink — a jump within the document itself:
+ *     docx `w:anchor` -> a `<w:bookmarkStart w:name>` (§17.16.23), pptx
+ *     `action="ppaction://hlinksldjump"` -> a slide, xlsx `location` -> a defined
+ *     name or a `Sheet!A1` cell reference.
+ *
+ * The parsers (Rust, one per format) do the format-specific rels lookup and hand
+ * each run / shape / cell a {@link HyperlinkTarget}. Everything downstream — the
+ * text-layer overlay, the viewer default click behaviour, and any integrator
+ * callback — is format-agnostic and consumes this one shape. Keeping the type +
+ * the pure `sanitizeHyperlinkUrl` predicate here (not duplicated per package)
+ * follows the cross-package unification principle: a scheme-allowlist bug fixed
+ * once is fixed everywhere.
+ */
+/**
+ * A resolved hyperlink attached to a run, shape, or cell.
+ *
+ *   - `external` — `url` is the raw target as authored in the file. It is NOT
+ *     guaranteed safe; run it through {@link sanitizeHyperlinkUrl} before
+ *     navigating. It is kept verbatim here so an integrator can apply its own
+ *     policy (e.g. allow `file:` on a trusted intranet viewer).
+ *   - `internal` — `ref` is the in-document destination, verbatim from the file:
+ *       docx: the bookmark name (`w:anchor`).
+ *       pptx: the internal action (e.g. `ppaction://hlinksldjump`), with the
+ *             resolved 0-based `slideIndex` when the rels target names a slide.
+ *       xlsx: the `location` string (a defined name or `Sheet1!A1`).
+ */
+type HyperlinkTarget = {
+    kind: 'external';
+    url: string;
+} | {
+    kind: 'internal';
+    ref: string;
+    slideIndex?: number;
+};
+/**
+ * The default action a viewer takes for an **external** hyperlink click when
+ * the integrator supplies no `onHyperlinkClick` handler: sanitise the URL and,
+ * if allowed, open it in a new tab with `noopener,noreferrer` so the opened page
+ * gets no `window.opener` handle back into this document. A blocked scheme is a
+ * silent no-op (returns `false`) — the click does nothing rather than navigate
+ * somewhere dangerous.
+ *
+ * Internal targets are intentionally NOT handled here: the in-document jump
+ * (page / slide / cell) is format-specific and lives in each viewer.
+ *
+ * Split out (not inlined in three viewers) so the "open in new tab, drop opener,
+ * refuse unsafe schemes" policy is defined once. `win` is injected for tests;
+ * defaults to the ambient `window`.
+ *
+ * @returns `true` if navigation was initiated, `false` if the URL was blocked.
+ */
+declare function openExternalHyperlink(url: string, allowed?: readonly string[], win?: Pick<Window, 'open'> | undefined): boolean;
 //#endregion
-//#region dist/.types-work/find-highlight-gMP3FAnW.d.ts
+//#region dist/.types-work/find-highlight-CnpZn3yb.d.ts
 //#region packages/core/src/autoResize.d.ts
 interface AutoResizeOptions {
     /**
@@ -1973,7 +1973,7 @@ interface FindHighlightColors {
     active?: string;
 }
 //#endregion
-//#region dist/.types-work/pptx-B9ExAlcU.d.ts
+//#region dist/.types-work/pptx-BVpCWU0A.d.ts
 //#region packages/pptx/src/types.d.ts
 /**
  * Picture bullet — ECMA-376 §21.1.2.4.2 `<a:buBlip><a:blip r:embed>`. The