v0.2.0 — Markdown, slides and document validation

Office 0.2.0 expands the standalone document plugin to seven tools.

• Convert a bounded Markdown subset (headings, paragraphs, lists, tables and code text) to DOCX; HTML/media generate warnings and are not executed or fetched.
• Read per-slide PPTX text and validate DOCX/PPTX structure plus expected text, table count or slide count.
• Strengthen XML/package validation, Unicode text limits, relationship-based inspection and document table widths.

Validation includes real generated documents, negative malformed-package fixtures, native DSH tool loading/approval and the three-package synthetic integration workflow. The plugin does not render or visually review documents; create results retain visualReview: "not_rendered". PDF, labels and rendering remain future Office capabilities. Known upstream dependency audit findings and the exposed API boundary are documented in SECURITY.md.

中文：新增Markdown转Word、PPT逐页读取、文档结构与内容校验，并补强Unicode/XML处理和Word表格宽度。无需抓虾后端。

Honor native Full Access for local document creation; other permission combinations retain native approval. Final suite:16tests.

v0.1.0 — Standalone Word and PowerPoint tools

Independent Word/PowerPoint tools for DeepSeek Harness 0.2.1-alpha.4. Runs directly in Node.js, without Crawshrimp backend, Python or LibreOffice.

• Create DOCX documents, extract their plain text, create text-based PPTX decks and inspect bounded OOXML package metadata.
• Native DSH approval/audit, workspace path checks, no overwrite and atomic file writes.
• Seven tests pass with real DOCX/PPTX content and structure readback, direct Cordis loading/unloading and approval/failure checks.

Install the attached prebuilt tarball with dsh plugin --profile ecommerce add -w ./dsh-crawshrimp-office-0.1.0.tgz, or use github:howtimeschange/dsh-crawshrimp-office#v0.1.0.

Generated documents have not been visually rendered or reviewed. This package does not render PDFs or run arbitrary Office/Python code. Upstream dependency audit findings and the restricted tool API's reachability boundaries are documented in SECURITY.md; the audit is not clean.