@taloswork/ose-shared 0.1.7 → 0.1.9

package/skills/diagram-design/scripts/self_check.py

@@ -0,0 +1,389 @@
+#!/usr/bin/env python3
+"""Self-check a generated diagram HTML file, with no third-party deps.
+
+Ships inside the skill so an installed agent can verify its own output:
+
+    python3 <skill-dir>/scripts/self_check.py my-diagram.html
+
+Checks the accessible-SVG contract, the single-file safety rules (no remote
+assets beyond the approved Google Fonts stylesheet, no executable attributes,
+no scripts other than the one canonical motion controller), and — when motion
+markup is present — the structural motion contract. This is a distilled
+subset of the repository gates (`lint-skin.py`, `verify-motion.py`), which
+remain the authority for contributions to the repository itself.
+"""
+
+from __future__ import annotations
+
+import argparse
+import re
+import sys
+from collections import Counter
+from html.parser import HTMLParser
+from pathlib import Path
+from urllib.parse import urlparse
+
+SKILL_DIR = Path(__file__).resolve().parent.parent
+MOTION_TEMPLATE = SKILL_DIR / "assets" / "template-motion.html"
+MODES = {"none", "reveal", "step", "loop"}
+ACTIONS = {"play", "pause", "replay", "prev", "next"}
+ASCII_DECIMAL_RE = re.compile(r"^[0-9]+$")
+REFERENCE_ATTRS = {"src", "href", "xlink:href", "poster", "srcset", "action", "formaction"}
+
+
+class DiagramParser(HTMLParser):
+    def __init__(self) -> None:
+        super().__init__(convert_charrefs=True)
+        self.roots: list[dict[str, str]] = []
+        self.items: list[dict[str, str]] = []
+        self.actions: set[str] = set()
+        self.controls = 0
+        self.statuses: list[dict[str, str]] = []
+        self.statuses_in_controls = 0
+        self.scripts: list[dict[str, object]] = []
+        self.styles: list[str] = []
+        self.svgs: list[dict[str, object]] = []
+        self.unsafe: list[str] = []
+        self.references: list[tuple[str, str, str]] = []
+        self._svg_depth = 0
+        self._current_svg: dict[str, object] | None = None
+        self._capture: str | None = None
+        self._current_script: dict[str, object] | None = None
+        self._in_style = False
+        self._element_stack: list[str] = []
+        self._motion_root_depth: int | None = None
+        self._controls_depth: int | None = None
+
+    def handle_starttag(self, tag: str, attrs: list[tuple[str, str | None]]) -> None:
+        tag = tag.casefold()
+        normalized_attrs = [(key.casefold(), value or "") for key, value in attrs]
+        data = {key: value for key, value in normalized_attrs}
+        if tag in {"base", "embed", "object", "iframe"}:
+            self.unsafe.append(f"<{tag}> is not allowed in a diagram file")
+        for key, value in normalized_attrs:
+            if key.startswith("on"):
+                self.unsafe.append(f"executable attribute {key} on <{tag}>")
+            if key == "srcdoc":
+                self.unsafe.append(f"srcdoc attribute on <{tag}>")
+            if key in REFERENCE_ATTRS:
+                self.references.append((tag, data.get("rel", ""), value))
+        if "data-motion-root" in data:
+            self.roots.append(data)
+            if self._motion_root_depth is None:
+                self._motion_root_depth = len(self._element_stack)
+        if self._motion_root_depth is not None:
+            if "data-motion-item" in data:
+                self.items.append(data)
+            if "data-motion-action" in data:
+                self.actions.add(data["data-motion-action"])
+            if "data-motion-controls" in data:
+                self.controls += 1
+                if self._controls_depth is None:
+                    self._controls_depth = len(self._element_stack)
+            if "data-motion-status" in data:
+                self.statuses.append(data)
+                if self._controls_depth is not None:
+                    self.statuses_in_controls += 1
+        if tag == "script":
+            self._current_script = {
+                "attrs": data,
+                "attr_names": [name for name, _value in normalized_attrs],
+                "body": [],
+                "closed": False,
+            }
+            self.scripts.append(self._current_script)
+        if tag == "style":
+            self._in_style = True
+        self._element_stack.append(tag)
+        if tag == "svg" and self._svg_depth == 0:
+            self._svg_depth = 1
+            self._current_svg = {"attrs": data, "first": None, "title": {}, "desc": {}}
+            self.svgs.append(self._current_svg)
+            return
+        if self._svg_depth:
+            self._svg_depth += 1
+            assert self._current_svg is not None
+            if self._svg_depth == 2 and self._current_svg["first"] is None:
+                self._current_svg["first"] = tag
+            if self._svg_depth == 2 and tag in {"title", "desc"}:
+                self._current_svg[tag] = {"attrs": data, "text": ""}
+                self._capture = tag
+
+    def handle_endtag(self, tag: str) -> None:
+        tag = tag.casefold()
+        if tag == "script" and self._current_script is not None:
+            self._current_script["closed"] = True
+            self._current_script = None
+        if tag == "style":
+            self._in_style = False
+        if self._svg_depth:
+            if tag in {"title", "desc"}:
+                self._capture = None
+            self._svg_depth -= 1
+            if self._svg_depth == 0:
+                self._current_svg = None
+        for index in range(len(self._element_stack) - 1, -1, -1):
+            if self._element_stack[index] == tag:
+                del self._element_stack[index:]
+                break
+        if (
+            self._motion_root_depth is not None
+            and len(self._element_stack) <= self._motion_root_depth
+        ):
+            self._motion_root_depth = None
+        if (
+            self._controls_depth is not None
+            and len(self._element_stack) <= self._controls_depth
+        ):
+            self._controls_depth = None
+
+    def handle_data(self, data: str) -> None:
+        if self._current_script is not None:
+            body = self._current_script["body"]
+            assert isinstance(body, list)
+            body.append(data)
+        if self._in_style:
+            self.styles.append(data)
+        if self._capture and self._current_svg:
+            node = self._current_svg[self._capture]
+            assert isinstance(node, dict)
+            node["text"] = str(node.get("text", "")) + data
+
+
+def normalized_controller(body: str) -> str:
+    return body.replace("\r\n", "\n").replace("\r", "\n").strip()
+
+
+def parsed_document(source: str) -> DiagramParser:
+    parser = DiagramParser()
+    parser.feed(source)
+    parser.close()
+    return parser
+
+
+def is_approved_google_fonts_stylesheet(value: str) -> bool:
+    try:
+        parsed = urlparse(value)
+    except ValueError:
+        return False
+    return (
+        parsed.scheme == "https"
+        and parsed.hostname is not None
+        and parsed.hostname.casefold() == "fonts.googleapis.com"
+        and parsed.port is None
+        and parsed.path == "/css2"
+        and not parsed.fragment
+    )
+
+
+def reference_error(tag: str, rel: str, value: str) -> str | None:
+    stripped = value.strip()
+    lowered = stripped.casefold()
+    if not stripped or stripped.startswith("#"):
+        return None
+    if lowered.startswith("javascript:") or lowered.startswith("data:text/html"):
+        return f"executable URL on <{tag}>: {stripped[:80]}"
+    remote = lowered.startswith(("http://", "https://", "//")) or (
+        ":" in stripped.split("/", 1)[0] and not lowered.startswith("data:")
+    )
+    if not remote:
+        if lowered.startswith("data:") and not lowered.startswith("data:image/"):
+            return f"non-image data URL on <{tag}>: {stripped[:80]}"
+        return None
+    if tag == "link" and "stylesheet" in rel.casefold().split():
+        if is_approved_google_fonts_stylesheet(stripped):
+            return None
+        return f"remote stylesheet is not the approved Google Fonts /css2 URL: {stripped[:80]}"
+    return f"remote reference on <{tag}>: {stripped[:80]}"
+
+
+def canonical_controller() -> str:
+    if not MOTION_TEMPLATE.is_file():
+        raise RuntimeError(
+            f"cannot find the canonical controller at {MOTION_TEMPLATE}; "
+            "run self_check.py from its shipped location inside the skill"
+        )
+    parser = parsed_document(MOTION_TEMPLATE.read_text(encoding="utf-8"))
+    if len(parser.scripts) != 1 or not parser.scripts[0]["closed"]:
+        raise RuntimeError("template-motion.html must contain one closed controller")
+    body = parser.scripts[0]["body"]
+    assert isinstance(body, list)
+    return normalized_controller("".join(body))
+
+
+def check_svgs(parser: DiagramParser, errors: list[str]) -> None:
+    checkable = [
+        svg
+        for svg in parser.svgs
+        if isinstance(svg["attrs"], dict)
+        and str(svg["attrs"].get("aria-hidden", "")).casefold() != "true"
+    ]
+    if not checkable:
+        errors.append("diagram file needs at least one accessible (non-aria-hidden) SVG")
+    for number, svg in enumerate(checkable, 1):
+        attrs = svg["attrs"]
+        assert isinstance(attrs, dict)
+        if attrs.get("role") != "img":
+            errors.append(f"svg {number} needs role=img")
+        labelled = attrs.get("aria-labelledby", "").split()
+        title = svg["title"]
+        desc = svg["desc"]
+        assert isinstance(title, dict) and isinstance(desc, dict)
+        title_attrs = title.get("attrs", {})
+        desc_attrs = desc.get("attrs", {})
+        assert isinstance(title_attrs, dict) and isinstance(desc_attrs, dict)
+        if svg["first"] != "title":
+            errors.append(f"svg {number} title must be its first child")
+        if not str(title.get("text", "")).strip() or not str(desc.get("text", "")).strip():
+            errors.append(f"svg {number} needs non-empty title and desc")
+        title_id = title_attrs.get("id", "")
+        desc_id = desc_attrs.get("id", "")
+        if title_id in {"", "title"} or desc_id in {"", "desc"}:
+            errors.append(f"svg {number} title/desc IDs must be diagram-prefixed, never bare")
+        if labelled != [title_id, desc_id]:
+            errors.append(f"svg {number} aria-labelledby must name title then desc")
+
+
+def check_scripts(parser: DiagramParser, errors: list[str]) -> None:
+    if not parser.scripts:
+        return
+    if len(parser.scripts) > 1:
+        errors.append(f"at most one script is allowed; found {len(parser.scripts)}")
+    for number, script in enumerate(parser.scripts, 1):
+        attrs = script["attrs"]
+        attr_names = script["attr_names"]
+        body = script["body"]
+        assert isinstance(attrs, dict) and isinstance(attr_names, list) and isinstance(body, list)
+        if not script["closed"]:
+            errors.append(f"script {number} must have a closing script tag")
+        if attr_names != ["data-diagram-controls"] or attrs.get("data-diagram-controls") != "":
+            errors.append(f"script {number} must carry only the canonical data-diagram-controls attribute")
+            continue
+        try:
+            if normalized_controller("".join(body)) != canonical_controller():
+                errors.append(f"script {number} must exactly match the controller in template-motion.html")
+        except RuntimeError as exc:
+            errors.append(str(exc))
+
+
+def check_motion(parser: DiagramParser, source: str, errors: list[str]) -> None:
+    has_motion_markup = bool(parser.roots or parser.items or parser.scripts)
+    if not has_motion_markup:
+        return
+    if len(parser.roots) != 1:
+        errors.append(f"expected exactly one data-motion-root; found {len(parser.roots)}")
+        return
+    root = parser.roots[0]
+    mode = root.get("data-motion-mode", "")
+    if mode not in MODES:
+        errors.append(f"data-motion-mode must be one of {sorted(MODES)}; got {mode!r}")
+    raw_count = root.get("data-step-count", "")
+    if not ASCII_DECIMAL_RE.fullmatch(raw_count):
+        count = -1
+        errors.append("data-step-count must be an ASCII decimal integer")
+    else:
+        count = int(raw_count)
+    minimum_count = 0 if mode == "none" else 1
+    if count < minimum_count or count > 8:
+        errors.append(f"semantic step count must be {minimum_count}..8; got {count}")
+
+    if len(parser.items) > 12:
+        errors.append(f"motion item budget is 12; found {len(parser.items)}")
+    semantic_steps: list[int] = []
+    for index, item in enumerate(parser.items, 1):
+        raw_step = item.get("data-step", "")
+        if not ASCII_DECIMAL_RE.fullmatch(raw_step):
+            errors.append(f"motion item {index} has a non-ASCII-decimal data-step")
+            continue
+        step = int(raw_step)
+        decorative = "data-motion-decorative" in item
+        if not decorative:
+            semantic_steps.append(step)
+            if not item.get("aria-label", "").strip():
+                errors.append(f"semantic motion item {index} needs a non-color aria-label")
+        elif item.get("aria-hidden") != "true" or item.get("focusable") != "false":
+            errors.append(f"decorative motion item {index} needs aria-hidden=true and focusable=false")
+        inline = item.get("style", "").replace(" ", "").lower()
+        if any(token in inline for token in ("display:none", "visibility:hidden", "opacity:0")):
+            errors.append(f"motion item {index} is hidden in source; the fallback must be visible")
+
+    expected = set(range(1, count + 1)) if count > 0 else set()
+    if set(semantic_steps) != expected:
+        errors.append(f"semantic steps must be contiguous 1..{count}; found {sorted(set(semantic_steps))}")
+    crowded = {step: n for step, n in Counter(semantic_steps).items() if n > 2}
+    if crowded:
+        errors.append(f"no more than two semantic items may share a step; found {crowded}")
+
+    if mode in {"none", "loop"} and parser.scripts:
+        errors.append(f"{mode} mode must be script-free")
+    if mode in {"none", "loop"} and (parser.controls or parser.actions or parser.statuses):
+        errors.append(f"{mode} mode must not expose playback controls or live status")
+    controlled = mode == "step" or (mode == "reveal" and bool(parser.scripts))
+    if controlled:
+        if parser.controls != 1:
+            errors.append(f"controlled mode needs one in-root control group; found {parser.controls}")
+        missing = ACTIONS - parser.actions
+        if missing:
+            errors.append(f"controlled mode is missing actions: {', '.join(sorted(missing))}")
+        if not parser.statuses:
+            errors.append("controlled mode needs data-motion-status")
+        else:
+            status = parser.statuses[0]
+            if (
+                status.get("role") != "status"
+                or status.get("aria-live") != "polite"
+                or status.get("aria-atomic") != "true"
+            ):
+                errors.append("motion status needs role=status, aria-live=polite, aria-atomic=true")
+            if parser.statuses_in_controls:
+                errors.append("motion status must sit outside data-motion-controls")
+        if not parser.scripts:
+            errors.append("controlled mode needs the scoped control script")
+
+    style_source = "".join(parser.styles)
+    if parser.scripts:
+        if re.search(r"prefers-reduced-motion\s*:\s*reduce", style_source, re.IGNORECASE) is None:
+            errors.append("missing reduced-motion CSS fallback (prefers-reduced-motion)")
+        if re.search(r"@media\s+print\b", style_source, re.IGNORECASE) is None:
+            errors.append("missing print CSS fallback (@media print)")
+        if "<noscript" not in source.casefold():
+            errors.append("motion file needs a <noscript> explanation of the complete static frame")
+
+
+def verify(path: Path) -> list[str]:
+    source = path.read_text(encoding="utf-8")
+    parser = parsed_document(source)
+    errors: list[str] = []
+    errors.extend(parser.unsafe)
+    for tag, rel, value in parser.references:
+        finding = reference_error(tag, rel, value)
+        if finding:
+            errors.append(finding)
+    check_svgs(parser, errors)
+    check_scripts(parser, errors)
+    check_motion(parser, source, errors)
+    return errors
+
+
+def main() -> int:
+    argument_parser = argparse.ArgumentParser(description=__doc__)
+    argument_parser.add_argument("files", nargs="+", type=Path)
+    args = argument_parser.parse_args()
+    failed = False
+    for path in args.files:
+        try:
+            errors = verify(path)
+        except (OSError, UnicodeError) as exc:
+            errors = [str(exc)]
+        if errors:
+            failed = True
+            print(f"FAIL {path}")
+            for error in errors:
+                print(f"  - {error}")
+        else:
+            print(f"OK {path}")
+    return 1 if failed else 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

package/skills/document/bin/doc-gen.cjs

@@ -152164,7 +152164,7 @@ function themeCssVars(theme) {
     `--secondary:${c.secondary}`,
     `--text:${c.text}`,
     `--muted:${c.muted}`,
-    `--card-bg:${c.tableHeaderBg}`,
+    `--surface-card:${c.tableHeaderBg}`,
     `--border:${c.tableBorder}`,
     `--slide-bg:${theme.pptx.background}`,
     `--title-color:${theme.pptx.titleColor}`,
@@ -154065,11 +154065,8 @@ img { max-width: 100%; margin: 8pt 0; }
 .cover img.logo { max-height: 60pt; margin-bottom: 24pt; }
 `.trim();
 }
-function foldFullwidthAlnum2(s) {
-  return s.replace(/[０-９Ａ-Ｚａ-ｚ]/g, (c) => String.fromCharCode(c.charCodeAt(0) - 65248)).replace(/　/g, " ");
-}
 function norm(s) {
-  return escapeHtml(foldFullwidthAlnum2(String(s)));
+  return escapeHtml(foldFullwidthAlnum(String(s)));
 }
 function paragraphHtml(text) {
   return `<p>${norm(text).replace(/\r?\n/g, "<br>")}</p>`;
@@ -154254,7 +154251,7 @@ function interpolate(src, data) {
 }
 
 // packages/core/dist/document/html-templates.js
-var CARD = "background:var(--card-bg);border:1px solid var(--border);border-radius:16px";
+var CARD = "background:var(--surface-card);border:1px solid var(--border);border-radius:16px";
 var TEMPLATES = {
   cover: {
     html: `<section class="slide" style="padding:0;display:flex;flex-direction:column;justify-content:center;padding-left:88px">

package/skills/document/bin/html2pptx.cjs

@@ -146935,7 +146935,7 @@ function themeCssVars(theme) {
     `--secondary:${c.secondary}`,
     `--text:${c.text}`,
     `--muted:${c.muted}`,
-    `--card-bg:${c.tableHeaderBg}`,
+    `--surface-card:${c.tableHeaderBg}`,
     `--border:${c.tableBorder}`,
     `--slide-bg:${theme.pptx.background}`,
     `--title-color:${theme.pptx.titleColor}`,
@@ -148261,7 +148261,7 @@ async function latinFontFaceCss(doc) {
   }
   return _latinFontCss;
 }
-async function withHeadlessPage(html, fn) {
+async function withHeadlessPage(html, fn, density = DOCUMENT_CAPTURE_DENSITY) {
   const headless = (process.env.TALOS_HTML2PPTX_HEADLESS ?? "").trim().toLowerCase();
   if (headless === "off" || headless === "none" || headless === "0" || headless === "false") return null;
   let pw;
@@ -148280,7 +148280,7 @@ async function withHeadlessPage(html, fn) {
   try {
     const page = await browser2.newPage({
       viewport: { width: 1280, height: 720 },
-      deviceScaleFactor: DOCUMENT_CAPTURE_DENSITY
+      deviceScaleFactor: density
     });
     await page.setContent(html, { waitUntil: "load" });
     await page.evaluate("document.fonts && document.fonts.ready").catch(() => {
@@ -148290,7 +148290,7 @@ async function withHeadlessPage(html, fn) {
       screenshot: async (clip) => {
         const png = await page.screenshot({ clip });
         const w = png.readUInt32BE(16), h = png.readUInt32BE(20);
-        const want = [clip.width * DOCUMENT_CAPTURE_DENSITY, clip.height * DOCUMENT_CAPTURE_DENSITY];
+        const want = [clip.width * density, clip.height * density];
         if (w !== want[0] || h !== want[1]) throw new Error(`captured ${w}x${h}, expected ${want[0]}x${want[1]}`);
         return png;
       }
@@ -148370,11 +148370,16 @@ async function main() {
   const previewPagesIdx = args.indexOf("--preview-pages");
   const previewPagesArg = previewPagesIdx >= 0 ? args[previewPagesIdx + 1] : void 0;
   const previewIndexes = parsePreviewPages(previewPagesArg);
-  const consumed = /* @__PURE__ */ new Set([themeIdx, themeIdx >= 0 ? themeIdx + 1 : -1, styleIdx, styleIdx >= 0 ? styleIdx + 1 : -1, mediaIdx, mediaIdx >= 0 ? mediaIdx + 1 : -1, bdIdx, bdIdx >= 0 ? bdIdx + 1 : -1, lineIdx, lineIdx >= 0 ? lineIdx + 1 : -1, modeIdx, modeIdx >= 0 ? modeIdx + 1 : -1, notesIdx, notesIdx >= 0 ? notesIdx + 1 : -1, previewIdx, previewIdx >= 0 ? previewIdx + 1 : -1, previewPagesIdx, previewPagesIdx >= 0 ? previewPagesIdx + 1 : -1]);
+  const previewDensityIdx = args.indexOf("--preview-density");
+  const previewDensityArg = previewDensityIdx >= 0 ? args[previewDensityIdx + 1] : void 0;
+  const previewDensity = previewDensityArg === void 0 ? DOCUMENT_CAPTURE_DENSITY : Number(previewDensityArg);
+  const consumed = /* @__PURE__ */ new Set([themeIdx, themeIdx >= 0 ? themeIdx + 1 : -1, styleIdx, styleIdx >= 0 ? styleIdx + 1 : -1, mediaIdx, mediaIdx >= 0 ? mediaIdx + 1 : -1, bdIdx, bdIdx >= 0 ? bdIdx + 1 : -1, lineIdx, lineIdx >= 0 ? lineIdx + 1 : -1, modeIdx, modeIdx >= 0 ? modeIdx + 1 : -1, notesIdx, notesIdx >= 0 ? notesIdx + 1 : -1, previewIdx, previewIdx >= 0 ? previewIdx + 1 : -1, previewPagesIdx, previewPagesIdx >= 0 ? previewPagesIdx + 1 : -1, previewDensityIdx, previewDensityIdx >= 0 ? previewDensityIdx + 1 : -1]);
   const positional = args.filter((a, i) => a !== "--rasterize" && a !== "--editable" && a !== "--theme-v2" && !consumed.has(i));
   const [input, out] = positional;
-  if (!input || !out && !previewDir) die("usage: html2pptx <in.html|in.layout.json> [out.pptx] [--theme <theme.json>] [--style <name|dir>] [--theme-v2] [--media-style <id>] [--backdrop <variant>] [--line <name|none>] [--editable] [--rasterize] [--notes-doc <out.md>] [--preview-dir <dir>] [--preview-pages <all|N,N-M>]", 64);
+  if (!input || !out && !previewDir) die("usage: html2pptx <in.html|in.layout.json> [out.pptx] [--theme <theme.json>] [--style <name|dir>] [--theme-v2] [--media-style <id>] [--backdrop <variant>] [--line <name|none>] [--editable] [--rasterize] [--notes-doc <out.md>] [--preview-dir <dir>] [--preview-pages <all|N,N-M>] [--preview-density <1..4>]", 64);
   if (previewPagesArg && !previewDir) die("--preview-pages requires --preview-dir", 64);
+  if (previewDensityArg !== void 0 && !previewDir) die("--preview-density requires --preview-dir", 64);
+  if (!(previewDensity > 0 && previewDensity <= 4)) die("--preview-density must be a number in (0, 4]", 64);
   if (previewDir && out) die("--preview-dir is preview-only; omit the .pptx output", 64);
   if (previewDir && (rasterize || forceEditable || notesDocPath)) die("--preview-dir cannot be combined with --rasterize, --editable/--mode, or --notes-doc", 64);
   if (themeV2 && !styleArg) die("--theme-v2 requires --style <catalog-id>", 64);
@@ -148528,9 +148533,12 @@ async function main() {
   const html = injectHead(rawInlined, `${fontCss ? `<style>${fontCss}</style>` : ""}${tw ? `<style>${tw}</style>` : ""}<style>${themeCss}${SKELETON_CSS}${skinCss}</style>`);
   if (previewDir) {
     let images;
-    if (hasService) ({ images } = await callService("/shot", html, previewIndexes ? { pages: previewIndexes } : {}).catch((e) => die(e.message, 1)));
+    if (hasService) ({ images } = await callService("/shot", html, {
+      ...previewIndexes ? { pages: previewIndexes } : {},
+      ...previewDensityArg !== void 0 ? { density: previewDensity } : {}
+    }).catch((e) => die(e.message, 1)));
     else {
-      images = await withHeadlessPage(html, (p) => rasterizeHeadless(p, previewIndexes ?? void 0)).catch((e) => die(e.message, 1));
+      images = await withHeadlessPage(html, (p) => rasterizeHeadless(p, previewIndexes ?? void 0), previewDensity).catch((e) => die(e.message, 1));
       if (images == null) die(NO_BROWSER, 69);
     }
     await (0, import_promises.mkdir)(previewDir, { recursive: true });
@@ -148541,7 +148549,7 @@ async function main() {
       await (0, import_promises.writeFile)(path, Buffer.from(images[i], "base64"));
       files.push(path);
     }
-    process.stdout.write(JSON.stringify({ ok: true, engine: hasService ? "preview" : "preview (headless)", slides: images.length, pages: pageNumbers, files }, null, 1) + "\n");
+    process.stdout.write(JSON.stringify({ ok: true, engine: hasService ? "preview" : "preview (headless)", slides: images.length, pages: pageNumbers, density: previewDensity, files }, null, 1) + "\n");
     return;
   }
   if (rasterize) {

package/skills/document/bin/pptx-clone.cjs

@@ -9860,9 +9860,9 @@ function unescXml(s) {
     }
   });
 }
-function visualWidth(text2) {
+function visualWidth(text3) {
   let w = 0;
-  for (const ch of text2) {
+  for (const ch of text3) {
     const cp = ch.codePointAt(0);
     if (ch === " " || ch === "	")
       w += 0.35;
@@ -9891,9 +9891,9 @@ function replaceTextAcrossRuns(xml, find, replacement, opts) {
     const segs = [];
     let flat = "";
     for (const m of para.matchAll(textRe)) {
-      const text2 = unescXml(m[2]);
-      segs.push({ el: m[0], attrs: m[1] ?? "", text: text2, start: flat.length });
-      flat += text2;
+      const text3 = unescXml(m[2]);
+      segs.push({ el: m[0], attrs: m[1] ?? "", text: text3, start: flat.length });
+      flat += text3;
     }
     if (!flat.includes(find))
       return para;
@@ -9936,9 +9936,36 @@ function replaceTextAcrossRuns(xml, find, replacement, opts) {
   return { xml: rewritten, count };
 }
 
-// packages/core/dist/document/pptx-clone.js
+// packages/core/dist/document/pptx-register-slide.js
 var SLIDE_CT = "application/vnd.openxmlformats-officedocument.presentationml.slide+xml";
 var SLIDE_REL_TYPE = "http://schemas.openxmlformats.org/officeDocument/2006/relationships/slide";
+async function text(zip, path) {
+  const f = zip.file(path);
+  if (!f)
+    throw new Error(`not a PowerPoint file (${path} missing)`);
+  return f.async("string");
+}
+async function registerSlidePart(zip, newNum, newXmlPath) {
+  const ctPath = "[Content_Types].xml";
+  const ct = await text(zip, ctPath);
+  if (!ct.includes(`PartName="/${newXmlPath}"`)) {
+    zip.file(ctPath, ct.replace("</Types>", `<Override PartName="/${newXmlPath}" ContentType="${SLIDE_CT}"/></Types>`));
+  }
+  const presRelsPath = "ppt/_rels/presentation.xml.rels";
+  const presRels = await text(zip, presRelsPath);
+  const maxRid = Math.max(0, ...[...presRels.matchAll(/Id="rId(\d+)"/g)].map((m) => Number(m[1])));
+  const newRid = `rId${maxRid + 1}`;
+  zip.file(presRelsPath, presRels.replace("</Relationships>", `<Relationship Id="${newRid}" Type="${SLIDE_REL_TYPE}" Target="slides/slide${newNum}.xml"/></Relationships>`));
+  const presPath = "ppt/presentation.xml";
+  const pres = await text(zip, presPath);
+  const maxSldId = Math.max(255, ...[...pres.matchAll(/<p:sldId id="(\d+)"/g)].map((m) => Number(m[1])));
+  const updated = pres.replace("</p:sldIdLst>", `<p:sldId id="${maxSldId + 1}" r:id="${newRid}"/></p:sldIdLst>`);
+  if (updated === pres)
+    throw new Error("could not locate the slide list in presentation.xml");
+  zip.file(presPath, updated);
+}
+
+// packages/core/dist/document/pptx-clone.js
 var EMU_PER_PT = 12700;
 function capacityWarning(slideXml, token, value) {
   const idx = slideXml.indexOf(token);
@@ -9971,7 +9998,7 @@ function capacityWarning(slideXml, token, value) {
     return void 0;
   return `${token}: replacement is ~${Math.ceil(width)} width-units, slot fits ~${Math.floor(capacity)} (${Math.round(widthPt)}\xD7${Math.round(heightPt)}pt box @ ${fontPt}pt) \u2014 likely overflow. Shorten the wording; do NOT shrink the font to make it fit.`;
 }
-async function text(zip, path) {
+async function text2(zip, path) {
   const f = zip.file(path);
   if (!f)
     throw new Error(`not a PowerPoint file (${path} missing)`);
@@ -9996,7 +10023,7 @@ async function clonePptxSlide(bytes, slideNumber, replacements = {}) {
   const newNum = Math.max(...slideNums) + 1;
   const srcXmlPath = `ppt/slides/slide${slideNumber}.xml`;
   const newXmlPath = `ppt/slides/slide${newNum}.xml`;
-  let slideXml = await text(zip, srcXmlPath);
+  let slideXml = await text2(zip, srcXmlPath);
   const replaced = [];
   const missing = [];
   const warnings = [];
@@ -10024,23 +10051,7 @@ async function clonePptxSlide(bytes, slideNumber, replacements = {}) {
     const rels = removeElement(await srcRels.async("string"), "Relationship", (el) => /Type="[^"]*\/notesSlide"/.test(el)).xml;
     zip.file(`ppt/slides/_rels/slide${newNum}.xml.rels`, rels);
   }
-  const ctPath = "[Content_Types].xml";
-  const ct = await text(zip, ctPath);
-  if (!ct.includes(`PartName="/${newXmlPath}"`)) {
-    zip.file(ctPath, ct.replace("</Types>", `<Override PartName="/${newXmlPath}" ContentType="${SLIDE_CT}"/></Types>`));
-  }
-  const presRelsPath = "ppt/_rels/presentation.xml.rels";
-  const presRels = await text(zip, presRelsPath);
-  const maxRid = Math.max(0, ...[...presRels.matchAll(/Id="rId(\d+)"/g)].map((m) => Number(m[1])));
-  const newRid = `rId${maxRid + 1}`;
-  zip.file(presRelsPath, presRels.replace("</Relationships>", `<Relationship Id="${newRid}" Type="${SLIDE_REL_TYPE}" Target="slides/slide${newNum}.xml"/></Relationships>`));
-  const presPath = "ppt/presentation.xml";
-  const pres = await text(zip, presPath);
-  const maxSldId = Math.max(255, ...[...pres.matchAll(/<p:sldId id="(\d+)"/g)].map((m) => Number(m[1])));
-  const updated = pres.replace("</p:sldIdLst>", `<p:sldId id="${maxSldId + 1}" r:id="${newRid}"/></p:sldIdLst>`);
-  if (updated === pres)
-    throw new Error("could not locate the slide list in presentation.xml");
-  zip.file(presPath, updated);
+  await registerSlidePart(zip, newNum, newXmlPath);
   const out = await zip.generateAsync({ type: "nodebuffer", compression: "DEFLATE" });
   return { bytes: new Uint8Array(out), newSlideNumber: newNum, replaced, missing, warnings };
 }
@@ -10065,7 +10076,7 @@ async function removePptxSlide(bytes, slideNumber) {
   const xmlPath = `ppt/slides/slide${slideNumber}.xml`;
   const relsPath = `ppt/slides/_rels/slide${slideNumber}.xml.rels`;
   const presRelsPath = "ppt/_rels/presentation.xml.rels";
-  const presRels = await text(zip, presRelsPath);
+  const presRels = await text2(zip, presRelsPath);
   const targetRe = new RegExp(`Target="(/ppt/)?slides/slide${slideNumber}\\.xml"`);
   const relMatch = findElement(presRels, "Relationship", (r) => r.includes(SLIDE_REL_TYPE) && targetRe.test(r));
   if (!relMatch)
@@ -10075,19 +10086,19 @@ async function removePptxSlide(bytes, slideNumber) {
     throw new Error(`slide ${slideNumber}'s relationship carries no Id (corrupt deck?)`);
   zip.file(presRelsPath, presRels.replace(relMatch, ""));
   const presPath = "ppt/presentation.xml";
-  const pres = await text(zip, presPath);
+  const pres = await text2(zip, presPath);
   const sld = removeElement(pres, "p:sldId", (el) => el.includes(`r:id="${rId}"`));
   if (!sld.removed)
     throw new Error(`slide ${slideNumber} (${rId}) not found in the slide list (corrupt deck?)`);
   zip.file(presPath, sld.xml);
-  const slideRels = zip.file(relsPath) ? await text(zip, relsPath) : "";
+  const slideRels = zip.file(relsPath) ? await text2(zip, relsPath) : "";
   const notesTarget = /<Relationship\b[^>]*Type="[^"]*\/notesSlide"[^>]*Target="\.\.\/(notesSlides\/notesSlide\d+\.xml)"/.exec(slideRels)?.[1];
   const removedParts = [xmlPath, relsPath];
   if (notesTarget) {
     const otherSlideRels = Object.keys(zip.files).filter((p) => /^ppt\/slides\/_rels\/slide\d+\.xml\.rels$/.test(p) && p !== relsPath);
     let shared = false;
     for (const p of otherSlideRels) {
-      if ((await text(zip, p)).includes(notesTarget)) {
+      if ((await text2(zip, p)).includes(notesTarget)) {
         shared = true;
         break;
       }
@@ -10095,7 +10106,7 @@ async function removePptxSlide(bytes, slideNumber) {
     if (!shared)
       removedParts.push(`ppt/${notesTarget}`, `ppt/notesSlides/_rels/${notesTarget.split("/")[1]}.rels`);
   }
-  let ct = await text(zip, "[Content_Types].xml");
+  let ct = await text2(zip, "[Content_Types].xml");
   for (const part of removedParts) {
     zip.remove(part);
     ct = removeElement(ct, "Override", (el) => el.includes(`PartName="/${part}"`)).xml;

package/skills/document/bin/pptx-embed-fonts.cjs

@@ -9820,10 +9820,14 @@ var import_promises = require("node:fs/promises");
 
 // packages/core/dist/document/pptx-fonts.js
 var import_jszip = __toESM(require_lib3(), 1);
-var FONT_REL_TYPE = "http://schemas.openxmlformats.org/officeDocument/2006/relationships/font";
+
+// packages/core/dist/document/ooxml-util.js
 function escXml(s) {
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+  return s.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&apos;" })[c]);
 }
+
+// packages/core/dist/document/pptx-fonts.js
+var FONT_REL_TYPE = "http://schemas.openxmlformats.org/officeDocument/2006/relationships/font";
 async function text(zip, path) {
   const f = zip.file(path);
   if (!f)