Add reference-based Word and PowerPoint transformations

[Paul Lizer (paullizer)]

Summary

• Users can create new Word/PowerPoint content using a populated reference or actual DOCX/DOTX/PPTX/POTX template, or refresh selected content without overwriting the original.
• Adds native inspection and two distinct Reason tools to the existing Gather / Reason / Render lifecycle. Deterministic rendering preserves package structure and delivers useful drafts with committed applied, unchanged, skipped, and unresolved reports.
• Supports subsequent transformations of generated files in the same conversation and model-free delivery recovery. Source authorization, screening, exact reference/image bindings, unsafe-package checks, and resource ceilings remain enforced.
• Provides an adapter-based foundation for future formats without implementing form filling, spreadsheet editing, or JSON/XML instance editing. Complex Office objects remain preserved rather than refreshed; expanded content may need manual layout review.

Linked issue

N/A - no associated issue.

Release Notes & Latest Features

• New Feature
• Bug Fix
• UI Enhancement
• Breaking Change
• Internal only

Is this visible to end users?

• Yes
• No

Is this admin-facing (Admin Settings, governance, deployment, config)?

• Yes
• No

Should this become a Latest Feature card?

• Yes
• No
• Already added

Screenshot needed for the card?

• Yes
• No
• Attached

Release notes were left unchanged pending user approval; feature documentation and the user/admin guides are updated. No new enable setting or template-management subsystem is introduced.

Version bump

• application/single_app/config.py VERSION third segment bumped, or not needed because this is docs-only
• deployers/version.txt bumped, or not needed because deployers/ was not changed

Application version: 0.261.320 -> 0.261.321. Deployers unchanged.

Testing / validation

Validation used an isolated Python environment with compatible existing dependencies, leaving shared packages unchanged. Commands below use that environment and the application's flat-import PYTHONPATH where needed.

• python -m pytest -q .\functional_tests\test_document_transform_core.py .\functional_tests\test_document_transform_docx.py .\functional_tests\test_document_transform_pptx.py .\functional_tests\test_document_transform_sources.py .\functional_tests\test_document_transform_rendering.py .\functional_tests\test_orchestration_document_transform.py .\functional_tests\test_document_merge_docx.py .\functional_tests\test_document_merge_pptx.py .\functional_tests\test_orchestration_document_merge_capability.py .\functional_tests\test_orchestration_render_resume.py .\functional_tests\test_orchestration_reason_render_pipeline.py .\functional_tests\test_generated_file_structured_renderers.py .\functional_tests\test_xsd_schema_profile.py .\functional_tests\test_xsd_ingestion_generation_integration.py --tb=short --disable-warnings - 795 passed.
• python -m pytest -q .\functional_tests\test_document_transform_harness.py .\functional_tests\test_orchestration_harness_execution.py .\functional_tests\test_orchestration_plan_revision_planner.py .\functional_tests\test_orchestration_export_catalog_admission.py .\functional_tests\test_orchestration_dependency_runtime.py .\functional_tests\test_orchestration_registry_contract.py --tb=short --disable-warnings - 822 passed, 2 existing xfails, 3 subtests passed. Includes actual chat reports, recovery, and next-round generated-file edits.
• python -m pytest -q .\functional_tests\test_content_screening_pipeline.py .\functional_tests\test_orchestration_output_lifecycle.py .\functional_tests\test_orchestration_output_metadata_reads.py .\functional_tests\test_orchestration_deliverables.py .\functional_tests\test_generated_file_office_bridge.py --tb=short --disable-warnings - 491 passed.
• python -O -m pytest -q .\functional_tests\test_document_transform_core.py .\functional_tests\test_document_transform_harness.py .\functional_tests\test_orchestration_document_transform.py --tb=short --disable-warnings - 97 passed.
• python .\functional_tests\route_tests\test_route_blueprint_policy_inventory.py, python .\functional_tests\route_tests\test_route_unauthenticated_policy_contract.py, and python .\functional_tests\route_tests\test_route_policy_test_coverage.py - 15/15, 10/10, and 3/3 checks passed.
• python .\scripts\build_docs_inventory.py, python .\functional_tests\test_docs_app_surface_coverage.py, and python .\functional_tests\test_docs_site_quality.py - inventory regenerated; 7/7 coverage and 6/6 quality checks passed.
• Changed Python files compiled successfully; git -c core.whitespace=blank-at-eol,blank-at-eof,space-before-tab,cr-at-eol diff --check passed.

Known validation limitations: the existing plan-revision route suite fails during fixture setup because its config stub lacks cosmos_settings_container; this was reproduced with HEAD product modules. Four broader retained-source service expectations also failed against the baseline and were not used to change the current container-owned artifact access policy. Raster visual QA was not performed because no Office/LibreOffice converter was available; native outputs were reopened and checked for content, style, and package integrity. Live Azure deployment validation was not performed.

Documentation

• Release notes updated, or not needed
• Feature documentation updated, or not needed
• Fix documentation updated, or not needed

Added framework and source-reference documentation; updated orchestration user/admin guidance, export documentation, and generated surface inventory. No separate fix documentation is needed for this feature.

Security checklist

• New Flask routes include @swagger_route(security=get_auth_security())
• Settings sent to non-admin frontends use sanitize_settings_for_user()
• Browser JavaScript is served from local SimpleChat static assets only; no CDN-hosted JS
• No secrets, keys, connection strings, or local-only artifacts are included

No new routes or raw settings projections were added. Native reference reads retain existing object authorization and screening; public outcome reports omit private source handles and digests.