@cj-tech-master/excelts 3.1.0-canary.20260102041828.82ed571 → 3.1.0

package/dist/esm/utils/unzip/zip-parser.js

@@ -0,0 +1,459 @@
+/**
+ * Pure Uint8Array-based ZIP parser
+ * Works in both Node.js and browser environments
+ * No dependency on Node.js stream module
+ */
+import { decompress, decompressSync } from "../zip/compress.js";
+// ZIP file signatures
+const LOCAL_FILE_HEADER_SIG = 0x04034b50;
+const CENTRAL_DIR_HEADER_SIG = 0x02014b50;
+const END_OF_CENTRAL_DIR_SIG = 0x06054b50;
+const ZIP64_END_OF_CENTRAL_DIR_SIG = 0x06064b50;
+const ZIP64_END_OF_CENTRAL_DIR_LOCATOR_SIG = 0x07064b50;
+// Compression methods
+const COMPRESSION_STORED = 0;
+const COMPRESSION_DEFLATE = 8;
+/**
+ * Parse DOS date/time format to JavaScript Date
+ * Dates in zip file entries are stored as DosDateTime
+ * Spec: https://docs.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-dosdatetimetofiletime
+ */
+function parseDateTime(date, time) {
+    const day = date & 0x1f;
+    const month = (date >> 5) & 0x0f;
+    const year = ((date >> 9) & 0x7f) + 1980;
+    const seconds = time ? (time & 0x1f) * 2 : 0;
+    const minutes = time ? (time >> 5) & 0x3f : 0;
+    const hours = time ? time >> 11 : 0;
+    return new Date(Date.UTC(year, month - 1, day, hours, minutes, seconds));
+}
+/**
+ * Parse ZIP64 extra field
+ */
+function parseZip64ExtraField(extraField, compressedSize, uncompressedSize, localHeaderOffset) {
+    const view = new DataView(extraField.buffer, extraField.byteOffset, extraField.byteLength);
+    let offset = 0;
+    while (offset + 4 <= extraField.length) {
+        const signature = view.getUint16(offset, true);
+        const partSize = view.getUint16(offset + 2, true);
+        if (signature === 0x0001) {
+            // ZIP64 extended information
+            let fieldOffset = offset + 4;
+            if (uncompressedSize === 0xffffffff && fieldOffset + 8 <= offset + 4 + partSize) {
+                uncompressedSize = Number(view.getBigUint64(fieldOffset, true));
+                fieldOffset += 8;
+            }
+            if (compressedSize === 0xffffffff && fieldOffset + 8 <= offset + 4 + partSize) {
+                compressedSize = Number(view.getBigUint64(fieldOffset, true));
+                fieldOffset += 8;
+            }
+            if (localHeaderOffset === 0xffffffff && fieldOffset + 8 <= offset + 4 + partSize) {
+                localHeaderOffset = Number(view.getBigUint64(fieldOffset, true));
+            }
+            break;
+        }
+        offset += 4 + partSize;
+    }
+    return { compressedSize, uncompressedSize, localHeaderOffset };
+}
+/**
+ * DataView helper for reading little-endian values
+ */
+class BinaryReader {
+    constructor(data, offset = 0) {
+        this.data = data;
+        this.view = new DataView(data.buffer, data.byteOffset, data.byteLength);
+        this.offset = offset;
+    }
+    get position() {
+        return this.offset;
+    }
+    set position(value) {
+        this.offset = value;
+    }
+    get remaining() {
+        return this.data.length - this.offset;
+    }
+    readUint8() {
+        const value = this.view.getUint8(this.offset);
+        this.offset += 1;
+        return value;
+    }
+    readUint16() {
+        const value = this.view.getUint16(this.offset, true);
+        this.offset += 2;
+        return value;
+    }
+    readUint32() {
+        const value = this.view.getUint32(this.offset, true);
+        this.offset += 4;
+        return value;
+    }
+    readBigUint64() {
+        const value = this.view.getBigUint64(this.offset, true);
+        this.offset += 8;
+        return value;
+    }
+    readBytes(length) {
+        const bytes = this.data.subarray(this.offset, this.offset + length);
+        this.offset += length;
+        return bytes;
+    }
+    readString(length, utf8 = true) {
+        const bytes = this.readBytes(length);
+        if (utf8) {
+            return new TextDecoder("utf-8").decode(bytes);
+        }
+        // Fallback to ASCII/Latin-1
+        return String.fromCharCode(...bytes);
+    }
+    skip(length) {
+        this.offset += length;
+    }
+    slice(start, end) {
+        return this.data.subarray(start, end);
+    }
+    peekUint32(offset) {
+        return this.view.getUint32(offset, true);
+    }
+}
+/**
+ * Find the End of Central Directory record
+ * Searches backwards from the end of the file
+ */
+function findEndOfCentralDir(data) {
+    // EOCD is at least 22 bytes, search backwards
+    // Comment can be up to 65535 bytes
+    const minOffset = Math.max(0, data.length - 65557);
+    const view = new DataView(data.buffer, data.byteOffset, data.byteLength);
+    for (let i = data.length - 22; i >= minOffset; i--) {
+        if (view.getUint32(i, true) === END_OF_CENTRAL_DIR_SIG) {
+            return i;
+        }
+    }
+    return -1;
+}
+/**
+ * Find ZIP64 End of Central Directory Locator
+ */
+function findZip64EOCDLocator(data, eocdOffset) {
+    // ZIP64 EOCD Locator is 20 bytes and appears right before EOCD
+    const locatorOffset = eocdOffset - 20;
+    if (locatorOffset < 0) {
+        return -1;
+    }
+    const view = new DataView(data.buffer, data.byteOffset, data.byteLength);
+    if (view.getUint32(locatorOffset, true) === ZIP64_END_OF_CENTRAL_DIR_LOCATOR_SIG) {
+        return locatorOffset;
+    }
+    return -1;
+}
+/**
+ * Parse ZIP file entries from Central Directory
+ */
+export function parseZipEntries(data, options = {}) {
+    const { decodeStrings = true } = options;
+    const entries = [];
+    // Find End of Central Directory
+    const eocdOffset = findEndOfCentralDir(data);
+    if (eocdOffset === -1) {
+        throw new Error("Invalid ZIP file: End of Central Directory not found");
+    }
+    const reader = new BinaryReader(data, eocdOffset);
+    // Read EOCD
+    // Offset  Size  Description
+    // 0       4     EOCD signature (0x06054b50)
+    // 4       2     Number of this disk
+    // 6       2     Disk where central directory starts
+    // 8       2     Number of central directory records on this disk
+    // 10      2     Total number of central directory records
+    // 12      4     Size of central directory (bytes)
+    // 16      4     Offset of start of central directory
+    // 20      2     Comment length
+    reader.skip(4); // signature
+    reader.skip(2); // disk number
+    reader.skip(2); // disk where central dir starts
+    reader.skip(2); // entries on this disk
+    let totalEntries = reader.readUint16(); // total entries
+    reader.skip(4); // central directory size (unused)
+    let centralDirOffset = reader.readUint32();
+    // Check for ZIP64
+    const zip64LocatorOffset = findZip64EOCDLocator(data, eocdOffset);
+    if (zip64LocatorOffset !== -1) {
+        const locatorReader = new BinaryReader(data, zip64LocatorOffset);
+        locatorReader.skip(4); // signature
+        locatorReader.skip(4); // disk number with ZIP64 EOCD
+        const zip64EOCDOffset = Number(locatorReader.readBigUint64());
+        // Read ZIP64 EOCD
+        const zip64Reader = new BinaryReader(data, zip64EOCDOffset);
+        const zip64Sig = zip64Reader.readUint32();
+        if (zip64Sig === ZIP64_END_OF_CENTRAL_DIR_SIG) {
+            zip64Reader.skip(8); // size of ZIP64 EOCD
+            zip64Reader.skip(2); // version made by
+            zip64Reader.skip(2); // version needed
+            zip64Reader.skip(4); // disk number
+            zip64Reader.skip(4); // disk with central dir
+            const zip64TotalEntries = Number(zip64Reader.readBigUint64());
+            zip64Reader.skip(8); // central directory size (unused)
+            const zip64CentralDirOffset = Number(zip64Reader.readBigUint64());
+            // Use ZIP64 values if standard values are maxed out
+            if (totalEntries === 0xffff) {
+                totalEntries = zip64TotalEntries;
+            }
+            if (centralDirOffset === 0xffffffff) {
+                centralDirOffset = zip64CentralDirOffset;
+            }
+        }
+    }
+    // Read Central Directory entries
+    const centralReader = new BinaryReader(data, centralDirOffset);
+    for (let i = 0; i < totalEntries; i++) {
+        const sig = centralReader.readUint32();
+        if (sig !== CENTRAL_DIR_HEADER_SIG) {
+            throw new Error(`Invalid Central Directory header signature at entry ${i}`);
+        }
+        // Central Directory File Header format:
+        // Offset  Size  Description
+        // 0       4     Central directory file header signature (0x02014b50)
+        // 4       2     Version made by
+        // 6       2     Version needed to extract
+        // 8       2     General purpose bit flag
+        // 10      2     Compression method
+        // 12      2     File last modification time
+        // 14      2     File last modification date
+        // 16      4     CRC-32
+        // 20      4     Compressed size
+        // 24      4     Uncompressed size
+        // 28      2     File name length
+        // 30      2     Extra field length
+        // 32      2     File comment length
+        // 34      2     Disk number where file starts
+        // 36      2     Internal file attributes
+        // 38      4     External file attributes
+        // 42      4     Relative offset of local file header
+        // 46      n     File name
+        // 46+n    m     Extra field
+        // 46+n+m  k     File comment
+        centralReader.skip(2); // version made by
+        centralReader.skip(2); // version needed
+        const flags = centralReader.readUint16();
+        const compressionMethod = centralReader.readUint16();
+        const lastModTime = centralReader.readUint16();
+        const lastModDate = centralReader.readUint16();
+        const crc32 = centralReader.readUint32();
+        let compressedSize = centralReader.readUint32();
+        let uncompressedSize = centralReader.readUint32();
+        const fileNameLength = centralReader.readUint16();
+        const extraFieldLength = centralReader.readUint16();
+        const commentLength = centralReader.readUint16();
+        centralReader.skip(2); // disk number start
+        centralReader.skip(2); // internal attributes
+        const externalAttributes = centralReader.readUint32();
+        let localHeaderOffset = centralReader.readUint32();
+        // Check for UTF-8 flag (bit 11)
+        const isUtf8 = (flags & 0x800) !== 0;
+        const useUtf8 = decodeStrings && isUtf8;
+        const fileName = centralReader.readString(fileNameLength, useUtf8);
+        const extraField = centralReader.readBytes(extraFieldLength);
+        const comment = centralReader.readString(commentLength, useUtf8);
+        // Parse extra field for ZIP64 values
+        if (extraFieldLength > 0) {
+            const parsed = parseZip64ExtraField(extraField, compressedSize, uncompressedSize, localHeaderOffset);
+            compressedSize = parsed.compressedSize;
+            uncompressedSize = parsed.uncompressedSize;
+            localHeaderOffset = parsed.localHeaderOffset;
+        }
+        const isDirectory = fileName.endsWith("/") || (externalAttributes & 0x10) !== 0;
+        const isEncrypted = (flags & 0x01) !== 0;
+        entries.push({
+            path: fileName,
+            isDirectory,
+            compressedSize,
+            uncompressedSize,
+            compressionMethod,
+            crc32,
+            lastModified: parseDateTime(lastModDate, lastModTime),
+            localHeaderOffset,
+            comment,
+            externalAttributes,
+            isEncrypted
+        });
+    }
+    return entries;
+}
+/**
+ * Extract file data for a specific entry
+ */
+export async function extractEntryData(data, entry) {
+    if (entry.isDirectory) {
+        return new Uint8Array(0);
+    }
+    if (entry.isEncrypted) {
+        throw new Error(`File "${entry.path}" is encrypted and cannot be extracted`);
+    }
+    const reader = new BinaryReader(data, entry.localHeaderOffset);
+    // Read local file header
+    const sig = reader.readUint32();
+    if (sig !== LOCAL_FILE_HEADER_SIG) {
+        throw new Error(`Invalid local file header signature for "${entry.path}"`);
+    }
+    reader.skip(2); // version needed
+    reader.skip(2); // flags
+    reader.skip(2); // compression method
+    reader.skip(2); // last mod time
+    reader.skip(2); // last mod date
+    reader.skip(4); // crc32
+    reader.skip(4); // compressed size
+    reader.skip(4); // uncompressed size
+    const fileNameLength = reader.readUint16();
+    const extraFieldLength = reader.readUint16();
+    reader.skip(fileNameLength);
+    reader.skip(extraFieldLength);
+    // Extract compressed data
+    const compressedData = reader.readBytes(entry.compressedSize);
+    // Decompress if needed
+    if (entry.compressionMethod === COMPRESSION_STORED) {
+        return compressedData;
+    }
+    else if (entry.compressionMethod === COMPRESSION_DEFLATE) {
+        return decompress(compressedData);
+    }
+    else {
+        throw new Error(`Unsupported compression method: ${entry.compressionMethod}`);
+    }
+}
+/**
+ * Extract file data synchronously (Node.js only)
+ */
+export function extractEntryDataSync(data, entry) {
+    if (entry.isDirectory) {
+        return new Uint8Array(0);
+    }
+    if (entry.isEncrypted) {
+        throw new Error(`File "${entry.path}" is encrypted and cannot be extracted`);
+    }
+    const reader = new BinaryReader(data, entry.localHeaderOffset);
+    // Read local file header
+    const sig = reader.readUint32();
+    if (sig !== LOCAL_FILE_HEADER_SIG) {
+        throw new Error(`Invalid local file header signature for "${entry.path}"`);
+    }
+    reader.skip(2); // version needed
+    reader.skip(2); // flags
+    reader.skip(2); // compression method
+    reader.skip(2); // last mod time
+    reader.skip(2); // last mod date
+    reader.skip(4); // crc32
+    reader.skip(4); // compressed size
+    reader.skip(4); // uncompressed size
+    const fileNameLength = reader.readUint16();
+    const extraFieldLength = reader.readUint16();
+    reader.skip(fileNameLength);
+    reader.skip(extraFieldLength);
+    // Extract compressed data
+    const compressedData = reader.readBytes(entry.compressedSize);
+    // Decompress if needed
+    if (entry.compressionMethod === COMPRESSION_STORED) {
+        return compressedData;
+    }
+    else if (entry.compressionMethod === COMPRESSION_DEFLATE) {
+        return decompressSync(compressedData);
+    }
+    else {
+        throw new Error(`Unsupported compression method: ${entry.compressionMethod}`);
+    }
+}
+/**
+ * High-level ZIP parser class
+ */
+export class ZipParser {
+    constructor(data, options = {}) {
+        this.data = data instanceof ArrayBuffer ? new Uint8Array(data) : data;
+        this.entries = parseZipEntries(this.data, options);
+        this.entryMap = new Map(this.entries.map(e => [e.path, e]));
+    }
+    /**
+     * Get all entries in the ZIP file
+     */
+    getEntries() {
+        return this.entries;
+    }
+    /**
+     * Get entry by path
+     */
+    getEntry(path) {
+        return this.entryMap.get(path);
+    }
+    /**
+     * Check if entry exists
+     */
+    hasEntry(path) {
+        return this.entryMap.has(path);
+    }
+    /**
+     * List all file paths
+     */
+    listFiles() {
+        return this.entries.map(e => e.path);
+    }
+    /**
+     * Extract a single file (async)
+     */
+    async extract(path) {
+        const entry = this.entryMap.get(path);
+        if (!entry) {
+            return null;
+        }
+        return extractEntryData(this.data, entry);
+    }
+    /**
+     * Extract a single file (sync, Node.js only)
+     */
+    extractSync(path) {
+        const entry = this.entryMap.get(path);
+        if (!entry) {
+            return null;
+        }
+        return extractEntryDataSync(this.data, entry);
+    }
+    /**
+     * Extract all files (async)
+     */
+    async extractAll() {
+        const result = new Map();
+        for (const entry of this.entries) {
+            const data = await extractEntryData(this.data, entry);
+            result.set(entry.path, data);
+        }
+        return result;
+    }
+    /**
+     * Extract all files (sync, Node.js only)
+     * Returns object with file paths as keys and Uint8Array content as values
+     */
+    extractAllSync() {
+        const result = {};
+        for (const entry of this.entries) {
+            result[entry.path] = extractEntryDataSync(this.data, entry);
+        }
+        return result;
+    }
+    /**
+     * Iterate over entries with async callback
+     */
+    async forEach(callback) {
+        for (const entry of this.entries) {
+            let dataPromise = null;
+            const getData = () => {
+                if (!dataPromise) {
+                    dataPromise = extractEntryData(this.data, entry);
+                }
+                return dataPromise;
+            };
+            const shouldContinue = await callback(entry, getData);
+            if (shouldContinue === false) {
+                break;
+            }
+        }
+    }
+}

package/dist/esm/utils/utils.base.js

@@ -1,29 +1,7 @@
 /**
  * Base utility functions shared between Node.js and Browser
- * All functions use standard Web APIs that work in both environments
- * (Node.js 16+ supports atob/btoa/TextEncoder/TextDecoder globally)
+ * Platform-independent implementations only
  */
-import { isNode } from "@utils/env";
-// =============================================================================
-// Base64 utilities (with native Buffer optimization for Node.js)
-// =============================================================================
-/**
- * Convert base64 string to Uint8Array
- * Uses native Buffer in Node.js for better performance
- */
-export function base64ToUint8Array(base64) {
-    // Node.js: use native Buffer (fast, C++ implementation)
-    if (isNode()) {
-        return Buffer.from(base64, "base64");
-    }
-    // Browser: use atob
-    const binary = atob(base64);
-    const bytes = new Uint8Array(binary.length);
-    for (let i = 0; i < binary.length; i++) {
-        bytes[i] = binary.charCodeAt(i);
-    }
-    return bytes;
-}
 // =============================================================================
 // Basic utilities
 // =============================================================================
@@ -92,78 +70,15 @@ const xmlDecodingMap = {
     apos: "'"
 };
 export function xmlDecode(text) {
-    if (text.indexOf("&") === -1) {
-        return text;
-    }
     return text.replace(/&(#\d+|#x[0-9A-Fa-f]+|\w+);/g, (match, entity) => {
         if (entity[0] === "#") {
             // Numeric character reference
             const code = entity[1] === "x" ? parseInt(entity.slice(2), 16) : parseInt(entity.slice(1));
-            if (Number.isNaN(code)) {
-                return match;
-            }
             return String.fromCodePoint(code);
         }
         return xmlDecodingMap[entity] || match;
     });
 }
-// oxlint-disable-next-line no-control-regex -- Control characters are intentionally matched for XML encoding
-const xmlEncodeRegex = /[<>&'"\x7F\x00-\x08\x0B-\x0C\x0E-\x1F]/;
-/**
- * Encode special characters for XML output
- * Handles XML entities (< > & " ') and removes invalid control characters
- */
-export function xmlEncode(text) {
-    const regexResult = xmlEncodeRegex.exec(text);
-    if (!regexResult) {
-        return text;
-    }
-    const parts = [];
-    let lastIndex = 0;
-    for (let i = regexResult.index; i < text.length; i++) {
-        const charCode = text.charCodeAt(i);
-        let escape = null;
-        switch (charCode) {
-            case 34: // "
-                escape = "&quot;";
-                break;
-            case 38: // &
-                escape = "&amp;";
-                break;
-            case 39: // '
-                escape = "&apos;";
-                break;
-            case 60: // <
-                escape = "&lt;";
-                break;
-            case 62: // >
-                escape = "&gt;";
-                break;
-            case 127:
-                escape = "";
-                break;
-            default: {
-                if (charCode <= 31 && (charCode <= 8 || (charCode >= 11 && charCode !== 13))) {
-                    // Remove invalid control characters
-                    escape = "";
-                    break;
-                }
-                continue;
-            }
-        }
-        if (lastIndex !== i) {
-            parts.push(text.substring(lastIndex, i));
-        }
-        lastIndex = i + 1;
-        if (escape) {
-            parts.push(escape);
-        }
-    }
-    if (lastIndex < text.length) {
-        parts.push(text.substring(lastIndex));
-    }
-    return parts.join("");
-}
 // =============================================================================
 // Parsing utilities
 // =============================================================================
@@ -180,7 +95,7 @@ export function isDateFmt(fmt) {
         return false;
     }
     // must remove all chars inside quotes and []
-    let cleanFmt = fmt.replace(/\[[^\]]*\]/g, "");
+    let cleanFmt = fmt.replace(/\[[^\]]*]/g, "");
     cleanFmt = cleanFmt.replace(/"[^"]*"/g, "");
     // then check for date formatting chars
     return cleanFmt.match(/[ymdhMsb]+/) !== null;
@@ -215,15 +130,6 @@ export function objectFromProps(props, value = null) {
 // Buffer utilities (cross-platform)
 // =============================================================================
 const textDecoder = new TextDecoder("utf-8");
-let latin1Decoder;
-try {
-    // Faster base64 encoding path in browsers: decode bytes into a binary string once.
-    // Some environments may not support this encoding.
-    latin1Decoder = new TextDecoder("latin1");
-}
-catch {
-    latin1Decoder = undefined;
-}
 /**
  * Convert a Buffer, ArrayBuffer, or Uint8Array to a UTF-8 string
  * Works in both Node.js and browser environments
@@ -234,42 +140,3 @@ export function bufferToString(chunk) {
     }
     return textDecoder.decode(chunk);
 }
-/**
- * Convert Uint8Array to base64 string
- * Uses native Buffer in Node.js, optimized chunked conversion in browser
- */
-export function uint8ArrayToBase64(bytes) {
-    if (isNode()) {
-        return Buffer.from(bytes).toString("base64");
-    }
-    // Browser: fastest path when latin1 TextDecoder exists.
-    // Some environments can still throw on `btoa(...)` (e.g. if decoding yields non-Latin1 chars),
-    // so fall back to a guaranteed-binary string conversion.
-    if (latin1Decoder) {
-        try {
-            return btoa(latin1Decoder.decode(bytes));
-        }
-        catch {
-            // fall through
-        }
-    }
-    // Browser: chunked String.fromCharCode.apply to avoid stack overflow and reduce string concatenation
-    const CHUNK_SIZE = 0x8000; // 32KB chunks
-    const chunks = [];
-    for (let i = 0; i < bytes.length; i += CHUNK_SIZE) {
-        chunks.push(String.fromCharCode.apply(null, bytes.subarray(i, i + CHUNK_SIZE)));
-    }
-    return btoa(chunks.join(""));
-}
-/**
- * Convert string to UTF-16LE Uint8Array (used for Excel password hashing)
- */
-export function stringToUtf16Le(str) {
-    const bytes = new Uint8Array(str.length * 2);
-    for (let i = 0; i < str.length; i++) {
-        const code = str.charCodeAt(i);
-        bytes[i * 2] = code & 0xff;
-        bytes[i * 2 + 1] = (code >> 8) & 0xff;
-    }
-    return bytes;
-}

package/dist/esm/utils/utils.browser.js

@@ -3,10 +3,66 @@
  * Re-exports shared utilities and adds browser-specific implementations
  */
 // Re-export all shared utilities
-export { delay, nop, inherits, dateToExcel, excelToDate, toIsoDateString, parsePath, getRelsPath, xmlDecode, xmlEncode, validInt, isDateFmt, parseBoolean, range, toSortedArray, objectFromProps, bufferToString, base64ToUint8Array, uint8ArrayToBase64, stringToUtf16Le } from "@utils/utils.base";
+export { delay, nop, inherits, dateToExcel, excelToDate, toIsoDateString, parsePath, getRelsPath, xmlDecode, validInt, isDateFmt, parseBoolean, range, toSortedArray, objectFromProps, bufferToString } from "./utils.base.js";
+// =============================================================================
+// XML encoding (Browser version with full Unicode support)
+// =============================================================================
+const xmlEncodingMap = {
+    "<": "&lt;",
+    ">": "&gt;",
+    "&": "&amp;",
+    '"': "&quot;",
+    "'": "&apos;"
+};
+export function xmlEncode(text) {
+    // Handles special characters:
+    // 1. XML entities: < > & " '
+    // 2. Control characters (0x00-0x1F except tab, newline, carriage return)
+    // 3. Invalid XML characters: 0xFFFE, 0xFFFF
+    // 4. Characters that need escaping in attributes
+    // First pass: escape XML entities
+    let result = text.replace(/[<>&"']/g, char => xmlEncodingMap[char] || char);
+    // Second pass: handle control characters and invalid XML characters
+    // Valid XML chars: #x9 | #xA | #xD | [#x20-#xD7FF] | [#xE000-#xFFFD] | [#x10000-#x10FFFF]
+    // oxlint-disable-next-line no-control-regex
+    result = result.replace(/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F\uFFFE\uFFFF]/g, char => {
+        const code = char.charCodeAt(0);
+        // For control characters, use numeric character reference
+        return `&#x${code.toString(16).toUpperCase()};`;
+    });
+    // Third pass: handle invalid surrogate pairs
+    result = result.replace(/[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g, () => "\uFFFD" // replacement character
+    );
+    return result;
+}
 // =============================================================================
 // File system utilities (Browser stub - always returns false)
 // =============================================================================
 export function fileExists(_path) {
     return Promise.resolve(false);
 }
+// =============================================================================
+// Legacy export for backward compatibility
+// =============================================================================
+import { nop, inherits, dateToExcel, excelToDate, parsePath, getRelsPath, xmlDecode, validInt, isDateFmt, toIsoDateString, parseBoolean, range, toSortedArray, objectFromProps } from "./utils.base.js";
+/** @deprecated Import functions directly instead of using the utils object */
+export const utils = {
+    nop,
+    inherits,
+    dateToExcel,
+    excelToDate,
+    parsePath,
+    getRelsPath,
+    xmlEncode,
+    xmlDecode,
+    validInt,
+    isDateFmt,
+    fs: {
+        exists: fileExists
+    },
+    toIsoDateString,
+    parseBoolean,
+    range,
+    toSortedArray,
+    objectFromProps
+};