feat(docx): open and import bounded Word documents

README.md

@@ -72,6 +72,7 @@ runtime.
 | Text-position selector | `@contextualwisdomlab/cwl-editor/text-position-selector` | React-free deterministic W3C `TextPositionSelector` projection core |
 | Autosave | `@contextualwisdomlab/cwl-editor/autosave` | Provider-neutral bounded single-flight persistence coordination |
 | Headless Markdown | `@contextualwisdomlab/cwl-editor/markdown` | React-free deterministic Markdown/HTML/email/plain-text conversion |
+| DOCX import | `@contextualwisdomlab/cwl-editor/docx` | Active-PR bounded, framework-neutral WordprocessingML import into inert Inkspan document data |
 | Styles | `@contextualwisdomlab/cwl-editor/styles.css` | Editor layout and theming |
 | Full fonts | `@contextualwisdomlab/cwl-editor/fonts.css` | KR/EN/JP/SC/TC/VI offline font bundle |
 | Latin fonts | `@contextualwisdomlab/cwl-editor/fonts-latin.css` | Smaller Latin/Vietnamese-only bundle |
@@ -217,7 +218,6 @@ policy. See [`docs/selection-lifecycle.md`](docs/selection-lifecycle.md) and
 
 Delayed autosave, AI, template, and review results can be applied under the
 strong revision from which they started:
-
 ```tsx
 const result = await editorRef.current?.restoreDocumentEnvelopeIfMatch(
   expectedRevision.strongEntityTag,

docs/package-distribution.md

@@ -14,6 +14,7 @@ integrations.
 | `@contextualwisdomlab/cwl-editor/autosave` | Framework-independent autosave queue/session APIs for bounded local save ordering and host-owned durable concurrency |
 | `@contextualwisdomlab/cwl-editor/collaboration` | Optional Yjs collaboration surface with host-owned transport and lifecycle |
 | `@contextualwisdomlab/cwl-editor/converter` | Framework-independent base64 and data-URI utilities |
+| `@contextualwisdomlab/cwl-editor/docx` | `implemented_on_active_pr` — framework-independent bounded DOCX/WordprocessingML import into inert Inkspan document data; no transport, credentials, macros, external relationships, or model authority |
 | `@contextualwisdomlab/cwl-editor/envelope-identity` | Framework-independent identity-only envelope routing for bounded schema identity inspection; migration remains host-owned |
 | `@contextualwisdomlab/cwl-editor/revision-evidence` | Framework-independent revision evidence and document-transition evidence for local content equality/lineage claims |
 | `@contextualwisdomlab/cwl-editor/text-position-selector` | `implemented_on_protected_main` — React-free text-position projection core implementing W3C `TextPositionSelector`; interactive capture, revision binding, authorization, persistence, and re-anchoring remain outside this subpath |
@@ -57,12 +58,19 @@ embedded in the npm tarball.
   and collaboration entrypoints. It is declared in Inkspan's package
   dependencies so the consumer's package manager installs and resolves it; it
   is not merely a type-only dependency.
-- The framework-independent autosave, converter, envelope-identity,
+- The framework-independent autosave, converter, DOCX, envelope-identity,
   revision-evidence, text-position-selector, and Markdown entrypoints do not
   require React UI, a mounted editor, naruon, contextual-orchestrator, a
   database, provider credentials, or host transport. Their individual
   package-consumer gates additionally prevent framework dependencies from
   leaking into subpaths whose public contracts exclude them.
+- The DOCX subpath accepts bounded local ZIP/Office Open XML bytes and converts
+  supported WordprocessingML structure into inert Inkspan document data. It
+  validates OPC content types/relationships, rejects active/external authority,
+  and performs no network fetch, macro execution, credential lookup, model call,
+  durable persistence, or host authorization. Unsupported document semantics
+  fail as bounded import errors rather than being executed or silently granted
+  authority.
 - The Markdown subpath exposes `markdownToHtml`, `htmlToMarkdown`,
   `normalizeMarkdown`, `markdownToEmailHtml`, `markdownToPlainText`, and
   `htmlToPlainText` plus their option types. It bundles deterministic conversion
@@ -92,9 +100,9 @@ embedded in the npm tarball.
   import it, and bundlers can retain the separate dependency boundary.
 - Importing any JavaScript entrypoint in Node.js must not require a browser DOM.
   Browser-only work begins when a host mounts the editor or calls APIs that
-  explicitly consume browser objects such as `File` or `Blob`. The Markdown
-  conversion surface remains Node-importable; HTML-to-Markdown uses its bounded
-  non-fetching parser fallback when no browser `document` exists.
+  explicitly consume browser objects such as `File` or `Blob`. The Markdown and
+  DOCX conversion surfaces remain Node-importable; HTML-to-Markdown uses its
+  bounded non-fetching parser fallback when no browser `document` exists.
 - CSS and font entrypoints resolve as files and are not executable JavaScript.
 
 ## Release verification
@@ -108,7 +116,7 @@ production library build. The verification chain:
 3. confirms required licenses, declarations, styles, and font assets ship;
 4. rejects internal source, tests, demos, Office files, coverage output, and
    workflow files from the npm tarball;
-5. imports the root, collaboration, converter, autosave, envelope-identity,
+5. imports the root, collaboration, converter, autosave, DOCX, envelope-identity,
    revision-evidence, text-position-selector, and Markdown surfaces through their
    dedicated packed-consumer checks, including framework-free isolation where
    that is part of the public contract;
@@ -159,4 +167,4 @@ observable consumer behavior.
 - npm `pack`, including dry-run and JSON manifest output:
   <https://docs.npmjs.com/cli/v11/commands/npm-pack>
 - npm package publication and the `files` allowlist:
-  <https://docs.npmjs.com/cli/v11/commands/npm-publish>
+  <https://docs.npmjs.com/cli/v11/commands/npm-publish>

package.json

@@ -65,6 +65,11 @@
       "import": "./dist/cwl-converter.js",
       "require": "./dist/cwl-converter.cjs"
     },
+    "./docx": {
+      "types": "./dist/docx/index.d.ts",
+      "import": "./dist/cwl-docx.js",
+      "require": "./dist/cwl-docx.cjs"
+    },
     "./envelope-identity": {
       "types": "./dist/envelope-identity/index.d.ts",
       "import": "./dist/cwl-envelope-identity.js",
@@ -99,7 +104,7 @@
   ],
   "scripts": {
     "dev": "vite",
-    "build": "tsc --noEmit && vite build && vite build --config vite.collaboration.config.ts && vite build --config vite.converter.config.ts && vite build --config vite.envelope-identity.config.ts && vite build --config vite.revision-evidence.config.ts && vite build --config vite.autosave.config.ts && vite build --config vite.text-position-selector.config.ts && vite build --config vite.markdown.config.ts && node ./scripts/copy-styles.mjs",
+    "build": "tsc --noEmit && vite build && vite build --config vite.collaboration.config.ts && vite build --config vite.converter.config.ts && vite build --config vite.docx.config.ts && vite build --config vite.envelope-identity.config.ts && vite build --config vite.revision-evidence.config.ts && vite build --config vite.autosave.config.ts && vite build --config vite.text-position-selector.config.ts && vite build --config vite.markdown.config.ts && node ./scripts/copy-styles.mjs",
     "build:demo": "vite build --config vite.demo.config.ts",
     "fonts": "node ./scripts/fetch-fonts.mjs",
     "preview": "vite preview",
@@ -108,7 +113,7 @@
     "test:watch": "vitest",
     "coverage": "vitest run --coverage",
     "test:package-config": "node --test ./scripts/revision-evidence-consumer-config.test.mjs ./scripts/release-metadata.test.mjs ./scripts/javascript-runtime-authority.test.mjs",
-    "verify:package": "pnpm run test:package-config && node ./tests/package/verify-package.mjs && node ./tests/package/verify-editor-placeholder-package.mjs && node ./scripts/verify-canonical-envelope-package.mjs && node ./scripts/verify-revision-evidence-package.mjs && node ./scripts/verify-framework-free-revision-evidence-package.mjs && node ./scripts/verify-framework-free-envelope-identity-package.mjs && node ./tests/package/verify-framework-free-autosave-package.mjs && node ./scripts/verify-text-position-selector-package.mjs && node ./scripts/verify-text-position-selector-subpath-package.mjs && node ./scripts/verify-markdown-subpath-package.mjs"
+    "verify:package": "pnpm run test:package-config && node ./tests/package/verify-package.mjs && node ./tests/package/verify-editor-placeholder-package.mjs && node ./scripts/verify-canonical-envelope-package.mjs && node ./scripts/verify-revision-evidence-package.mjs && node ./scripts/verify-framework-free-revision-evidence-package.mjs && node ./scripts/verify-framework-free-envelope-identity-package.mjs && node ./tests/package/verify-framework-free-autosave-package.mjs && node ./scripts/verify-text-position-selector-package.mjs && node ./scripts/verify-text-position-selector-subpath-package.mjs && node ./scripts/verify-markdown-subpath-package.mjs && node ./scripts/verify-docx-subpath-package.mjs"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",