@bdking71/spsignature 1.3.7 → 1.3.8

package/lib/TransactionSigner.d.ts

@@ -150,4 +150,4 @@ export declare function getReportableSignature(compressedSignatureData: string):
  * }
  * ```
  */
-export declare function verifySecureAuditRecord(auditRecord: SharePointAuditRecord, signer: string, payload: Record<string, unknown>): Promise<boolean>;
+export declare function verifySecureAuditRecord(auditRecord: SharePointAuditRecord, signer: string, payload: Record<string, unknown>, itemID?: number): Promise<boolean>;

package/lib/TransactionSigner.js

@@ -1346,7 +1346,7 @@ function isCanvasEmpty(ctx, width, height) {
  * }
  * ```
  */
-async function verifySecureAuditRecord(auditRecord, signer, payload) {
+async function verifySecureAuditRecord(auditRecord, signer, payload, itemID) {
     try {
         if (!auditRecord || !signer || !payload) {
             return false;
@@ -1358,11 +1358,12 @@ async function verifySecureAuditRecord(auditRecord, signer, payload) {
         const normalizedTimestamp = auditRecord.signatureTimestamp.trim();
         const normalizedHash = auditRecord.signatureHash.trim();
         validateJsonSerializable(payload);
-        const deepSortedPayload = deepSortPayload(payload);
+        const deepSortedPayload = deepSortPayload(payload); // ← CAST THIS
         const auditEnvelope = {
             payload: deepSortedPayload,
             signer: normalizedSigner,
             timestamp: normalizedTimestamp,
+            itemID: itemID, // ← Already added
         };
         const auditEnvelopeJson = JSON.stringify(auditEnvelope);
         const encoder = new TextEncoder();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bdking71/spsignature",
-  "version": "1.3.7",
+  "version": "1.3.8",
   "description": "SharePoint Framework isolated digital signing, LZW compression, and OTP audit engine.",
   "main": "lib/index.js",
   "module": "lib/index.js",