feat(docx): open and import bounded Word documents

[seonghobae]

Purpose

Expose the existing DOCX open/import implementation to Inkspan's canonical pull-request evidence path without changing the protected release candidate.

Exact source state at PR creation

• Protected base: main@e8109ec2a17de8bd6594487aa12c8c8a93cb2c03
• Head: agent/docx-open-import-v2@c1b122e46cd35d977dc65dc12444e5935fcaa4af
• Ancestry: head is 17 commits ahead and 0 behind the protected base; merge base is the exact protected base.
• This branch supersedes the earlier agent/docx-open-import predecessor and is the only branch exposed by this PR.

Implemented slice

The branch adds a bounded, framework-neutral DOCX import surface for local Inkspan authoring, including deterministic fixtures and import contracts, stable/redacted import failures, bounded import configuration, atomic handoff, bounded ZIP/package reading, inert XML handling, OPC manifest and relationship validation, Word heading/list normalization, and bounded package metadata assembly.

The intended ownership boundary remains Inkspan-local: standalone use must not require a service, database, network, credential, or model. Package/XML content is parsed as inert document data; it is not transport/auth/tenancy authority and does not grant macros, links, scripts, or external relationships execution authority.

Evidence state

Before this Draft was opened, the exact head had no current pull-request-triggered canonical workflow runs, so CI/security/SAST evidence was absent and non-passing. Opening this Draft is intended to trigger exact-head canonical CI, security, static-analysis, coverage, package, and related applicable gates. No gate is claimed as passing until its exact-head run completes successfully.

Integration / release boundary

Keep this PR Draft and unmerged while release issue #118 freezes main@e8109ec2a17de8bd6594487aa12c8c8a93cb2c03 as the current release candidate. Readiness or merge requires unchanged-head evidence, applicable live policy, zero valid unresolved findings, and the repository's release/integration ordering.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 96d0287d-00ab-4308-a044-ecadb86383f6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}