@cj-tech-master/excelts 9.5.4 → 9.5.5

package/dist/browser/modules/word/encryption.js

@@ -1,274 +0,0 @@
-/**
- * DOCX Agile Encryption (MS-OFFCRYPTO)
- *
- * Implements ECMA-376 Agile Encryption (used by Office 2010+) for encrypted
- * DOCX files. Encrypted DOCX files use the CFB (Compound File Binary) format
- * to wrap the ZIP content.
- *
- * This module provides:
- * - Password-based encryption/decryption of DOCX content
- * - EncryptionInfo XML generation/parsing
- *
- * Note: A full implementation requires a CFB container reader/writer for the
- * outer compound document format. For now, we expose primitives that can be
- * combined with an external CFB library if needed.
- *
- * References:
- *   - MS-OFFCRYPTO: Office Document Cryptography Structure
- *   - ECMA-376 Part 3: Markup Compatibility and Extensibility
- */
-import { base64ToBytes } from "./internal-utils.js";
-/** Detect whether a buffer is an encrypted Office document (CFB format). */
-export function isEncryptedDocx(buffer) {
-    // CFB signature: D0CF11E0A1B11AE1
-    if (buffer.length < 8) {
-        return false;
-    }
-    return (buffer[0] === 0xd0 &&
-        buffer[1] === 0xcf &&
-        buffer[2] === 0x11 &&
-        buffer[3] === 0xe0 &&
-        buffer[4] === 0xa1 &&
-        buffer[5] === 0xb1 &&
-        buffer[6] === 0x1a &&
-        buffer[7] === 0xe1);
-}
-/**
- * Derive an encryption key from a password using the agile encryption KDF.
- *
- * Per MS-OFFCRYPTO 2.3.4.11:
- *   H_0 = H(salt + password)
- *   H_i = H(iterator + H_{i-1})  for i = 0..spinCount-1
- *   H_final = H(H_{spinCount} + blockKey)
- *   Key = first keySize bytes of H_final
- */
-export async function deriveEncryptionKey(password, info, blockKey) {
-    const pwdBytes = stringToUtf16LE(password);
-    const hash = mapHashName(info.hashAlgorithm);
-    // H_0 = H(salt + password)
-    let h = await sha(hash, concat(info.keySalt, pwdBytes));
-    // Iterate: H_i = H(iterator (4 bytes LE) + H_{i-1})
-    for (let i = 0; i < info.spinCount; i++) {
-        const iter = new Uint8Array(4);
-        new DataView(iter.buffer).setUint32(0, i, true);
-        h = await sha(hash, concat(iter, h));
-    }
-    // Final: H_final = H(H + blockKey)
-    const final = await sha(hash, concat(h, blockKey));
-    // Truncate to keySize
-    const keyBytes = info.keyBits / 8;
-    return final.slice(0, keyBytes);
-}
-/** Block keys as defined in MS-OFFCRYPTO 2.3.4.13. */
-export const AGILE_BLOCK_KEYS = {
-    /** For encrypting verifier hash input. */
-    verifierHashInput: new Uint8Array([0xfe, 0xa7, 0xd2, 0x76, 0x3b, 0x4b, 0x9e, 0x79]),
-    /** For encrypting verifier hash value. */
-    verifierHashValue: new Uint8Array([0xd7, 0xaa, 0x0f, 0x6d, 0x30, 0x61, 0x34, 0x4e]),
-    /** For encrypting the main key. */
-    encryptedKey: new Uint8Array([0x14, 0x6e, 0x0b, 0xe7, 0xab, 0xac, 0xd0, 0xd6]),
-    /** For data integrity HMAC key. */
-    dataIntegrityKey: new Uint8Array([0x5f, 0xb2, 0xad, 0x01, 0x0c, 0xb9, 0xe1, 0xf6]),
-    /** For data integrity HMAC value. */
-    dataIntegrityValue: new Uint8Array([0xa0, 0x67, 0x7f, 0x02, 0xb2, 0x2c, 0x84, 0x33])
-};
-/**
- * Verify a password against the encryption info.
- *
- * @returns True if password is correct.
- */
-export async function verifyPassword(password, info) {
-    try {
-        // Derive verifier hash input key
-        const verifierInputKey = await deriveEncryptionKey(password, info, AGILE_BLOCK_KEYS.verifierHashInput);
-        // Decrypt the verifier hash input
-        const verifierInput = await aesCbcDecrypt(info.encryptedVerifierHashInput, verifierInputKey, info.keySalt);
-        // Hash the verifier input
-        const hashAlg = mapHashName(info.hashAlgorithm);
-        const computedHash = await sha(hashAlg, verifierInput);
-        // Derive verifier hash value key
-        const verifierValueKey = await deriveEncryptionKey(password, info, AGILE_BLOCK_KEYS.verifierHashValue);
-        // Decrypt the verifier hash value
-        const expectedHash = await aesCbcDecrypt(info.encryptedVerifierHashValue, verifierValueKey, info.keySalt);
-        // Compare (truncate to hashSize in case of padding)
-        return bytesEqual(computedHash.slice(0, info.hashSize), expectedHash.slice(0, info.hashSize));
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Decrypt the package data using the password.
- *
- * @param encryptedPackage - The EncryptedPackage stream from CFB.
- * @param info - Agile encryption parameters.
- * @param password - The user password.
- * @returns The decrypted (unencrypted) package bytes.
- */
-export async function decryptPackage(encryptedPackage, info, password) {
-    // Derive key encryption key
-    const keyEncryptionKey = await deriveEncryptionKey(password, info, AGILE_BLOCK_KEYS.encryptedKey);
-    // Decrypt the actual package key
-    const packageKey = await aesCbcDecrypt(info.encryptedKeyValue, keyEncryptionKey, info.keySalt);
-    // First 8 bytes are the total decrypted size (uint64 LE)
-    const totalSizeView = new DataView(encryptedPackage.buffer, encryptedPackage.byteOffset, 8);
-    const totalSize = Number(totalSizeView.getBigUint64(0, true));
-    // Decrypt in 4096-byte segments
-    const segmentSize = 4096;
-    const encData = encryptedPackage.slice(8);
-    const segments = [];
-    const segCount = Math.ceil(encData.length / segmentSize);
-    for (let i = 0; i < segCount; i++) {
-        const segStart = i * segmentSize;
-        const segEnd = Math.min(segStart + segmentSize, encData.length);
-        const segData = encData.slice(segStart, segEnd);
-        // Segment IV is hash(salt + segment_index_LE)
-        const idxBytes = new Uint8Array(4);
-        new DataView(idxBytes.buffer).setUint32(0, i, true);
-        const segIv = (await sha(mapHashName(info.hashAlgorithm), concat(info.keySalt, idxBytes))).slice(0, info.blockSize);
-        const decSeg = await aesCbcDecrypt(segData, packageKey, segIv);
-        segments.push(decSeg);
-    }
-    // Concatenate and truncate to total size
-    const result = new Uint8Array(totalSize);
-    let offset = 0;
-    for (const seg of segments) {
-        const copyLen = Math.min(seg.length, totalSize - offset);
-        result.set(seg.slice(0, copyLen), offset);
-        offset += copyLen;
-        if (offset >= totalSize) {
-            break;
-        }
-    }
-    return result;
-}
-// =============================================================================
-// Internal Crypto Helpers (use Web Crypto API)
-// =============================================================================
-function mapHashName(name) {
-    const map = {
-        SHA1: "SHA-1",
-        SHA256: "SHA-256",
-        SHA384: "SHA-384",
-        SHA512: "SHA-512"
-    };
-    return map[name] ?? "SHA-512";
-}
-async function sha(algorithm, data) {
-    const buf = await crypto.subtle.digest(algorithm, toBuffer(data));
-    return new Uint8Array(buf);
-}
-async function aesCbcDecrypt(data, key, iv) {
-    const cryptoKey = await crypto.subtle.importKey("raw", toBuffer(key), { name: "AES-CBC", length: key.length * 8 }, false, ["decrypt"]);
-    // Ensure IV is 16 bytes (pad with zeros if needed, truncate if longer)
-    const iv16 = new Uint8Array(16);
-    iv16.set(iv.slice(0, 16));
-    // NOTE: AES-CBC in Web Crypto expects PKCS#7 padding. Agile encryption
-    // uses zero-padding for the last block.
-    try {
-        const result = await crypto.subtle.decrypt({ name: "AES-CBC", iv: toBuffer(iv16) }, cryptoKey, toBuffer(data));
-        return new Uint8Array(result);
-    }
-    catch {
-        return manualAesCbcDecrypt(data, key, iv16);
-    }
-}
-async function manualAesCbcDecrypt(data, key, iv) {
-    const blockSize = 16;
-    if (data.length % blockSize !== 0) {
-        throw new Error("Data length must be a multiple of block size");
-    }
-    const cryptoKey = await crypto.subtle.importKey("raw", toBuffer(key), { name: "AES-CBC", length: key.length * 8 }, false, ["decrypt"]);
-    const result = new Uint8Array(data.length);
-    let prev = iv;
-    for (let i = 0; i < data.length; i += blockSize) {
-        const block = data.slice(i, i + blockSize);
-        const tempCipher = concat(block, new Uint8Array(blockSize));
-        try {
-            const dec = await crypto.subtle.decrypt({ name: "AES-CBC", iv: toBuffer(new Uint8Array(16)) }, cryptoKey, toBuffer(tempCipher));
-            const decBlock = new Uint8Array(dec).slice(0, blockSize);
-            // XOR with previous block
-            for (let j = 0; j < blockSize; j++) {
-                result[i + j] = decBlock[j] ^ prev[j];
-            }
-            prev = block;
-        }
-        catch (e) {
-            throw new Error("AES decryption failed: " + e.message);
-        }
-    }
-    return result;
-}
-/** Convert Uint8Array to a fresh ArrayBuffer (for strict crypto.subtle typing). */
-function toBuffer(arr) {
-    const buf = new ArrayBuffer(arr.length);
-    new Uint8Array(buf).set(arr);
-    return buf;
-}
-function concat(a, b) {
-    const result = new Uint8Array(a.length + b.length);
-    result.set(a, 0);
-    result.set(b, a.length);
-    return result;
-}
-function stringToUtf16LE(s) {
-    const buf = new Uint8Array(s.length * 2);
-    for (let i = 0; i < s.length; i++) {
-        const code = s.charCodeAt(i);
-        buf[i * 2] = code & 0xff;
-        buf[i * 2 + 1] = (code >> 8) & 0xff;
-    }
-    return buf;
-}
-function bytesEqual(a, b) {
-    if (a.length !== b.length) {
-        return false;
-    }
-    let diff = 0;
-    for (let i = 0; i < a.length; i++) {
-        diff |= a[i] ^ b[i];
-    }
-    return diff === 0;
-}
-// =============================================================================
-// EncryptionInfo XML Parser
-// =============================================================================
-/**
- * Parse an EncryptionInfo XML stream from a CFB-wrapped encrypted DOCX.
- *
- * This is the UTF-8 XML part after the 8-byte version/flags header.
- *
- * @param xmlStr - The EncryptionInfo XML content.
- * @returns Parsed agile encryption info.
- */
-export function parseEncryptionInfoXml(xmlStr) {
-    // Simple regex-based extraction for the key <keyEncryptors><keyEncryptor>... element
-    const keyDataMatch = /<keyData\s([^/]*?)\/>/.exec(xmlStr);
-    const pwdEncryptorMatch = /<p:encryptedKey\s([^/]*?)\/>/.exec(xmlStr);
-    if (!keyDataMatch || !pwdEncryptorMatch) {
-        throw new Error("Invalid EncryptionInfo XML - missing keyData or encryptedKey");
-    }
-    const pwdData = parseAttrs(pwdEncryptorMatch[1]);
-    return {
-        cipherAlgorithm: "AES",
-        cipherChaining: "ChainingModeCBC",
-        keyBits: parseInt(pwdData.keyBits ?? "256"),
-        hashAlgorithm: (pwdData.hashAlgorithm ?? "SHA512"),
-        hashSize: parseInt(pwdData.hashSize ?? "64"),
-        spinCount: parseInt(pwdData.spinCount ?? "100000"),
-        keySalt: base64ToBytes(pwdData.saltValue ?? ""),
-        encryptedVerifierHashInput: base64ToBytes(pwdData.encryptedVerifierHashInput ?? ""),
-        encryptedVerifierHashValue: base64ToBytes(pwdData.encryptedVerifierHashValue ?? ""),
-        encryptedKeyValue: base64ToBytes(pwdData.encryptedKeyValue ?? ""),
-        blockSize: parseInt(pwdData.blockSize ?? "16")
-    };
-}
-function parseAttrs(str) {
-    const attrs = {};
-    const re = /(\w+)="([^"]*)"/g;
-    let match;
-    while ((match = re.exec(str)) !== null) {
-        attrs[match[1]] = match[2];
-    }
-    return attrs;
-}

package/dist/browser/modules/word/internal-utils.d.ts

@@ -1,23 +0,0 @@
-/**
- * DOCX Module - Internal utilities (shared helpers)
- */
-/**
- * Encode a byte array to base64. Uses native Node `Buffer` if available;
- * otherwise falls back to chunked `btoa()` for browser environments.
- *
- * The chunked approach avoids the O(n²) string concatenation cost that naïve
- * `String.fromCharCode(...data)` implementations exhibit on large buffers.
- */
-export declare function bytesToBase64(data: Uint8Array): string;
-/**
- * Decode a base64 string to a byte array. Uses native Node `Buffer` if available.
- */
-export declare function base64ToBytes(s: string): Uint8Array;
-/**
- * Build an XML attributes object from an array of [name, value] entries,
- * omitting entries whose value is `undefined` or `false`. Numeric and boolean
- * values are stringified: `number → String(n)`, `boolean → "1"`.
- *
- * Reduces repetitive `if (x !== undefined) attrs["w:x"] = String(x)` patterns.
- */
-export declare function buildAttrs(entries: ReadonlyArray<[string, string | number | boolean | undefined | null]>): Record<string, string>;

package/dist/browser/modules/word/internal-utils.js

@@ -1,54 +0,0 @@
-/**
- * DOCX Module - Internal utilities (shared helpers)
- */
-/**
- * Encode a byte array to base64. Uses native Node `Buffer` if available;
- * otherwise falls back to chunked `btoa()` for browser environments.
- *
- * The chunked approach avoids the O(n²) string concatenation cost that naïve
- * `String.fromCharCode(...data)` implementations exhibit on large buffers.
- */
-export function bytesToBase64(data) {
-    if (typeof Buffer !== "undefined") {
-        return Buffer.from(data).toString("base64");
-    }
-    const CHUNK = 0x8000;
-    const parts = [];
-    for (let i = 0; i < data.length; i += CHUNK) {
-        const slice = data.subarray(i, i + CHUNK);
-        // `apply` on Uint8Array works in all modern JS engines
-        parts.push(String.fromCharCode.apply(null, slice));
-    }
-    return btoa(parts.join(""));
-}
-/**
- * Decode a base64 string to a byte array. Uses native Node `Buffer` if available.
- */
-export function base64ToBytes(s) {
-    if (typeof Buffer !== "undefined") {
-        return new Uint8Array(Buffer.from(s, "base64"));
-    }
-    const binary = atob(s);
-    const bytes = new Uint8Array(binary.length);
-    for (let i = 0; i < binary.length; i++) {
-        bytes[i] = binary.charCodeAt(i);
-    }
-    return bytes;
-}
-/**
- * Build an XML attributes object from an array of [name, value] entries,
- * omitting entries whose value is `undefined` or `false`. Numeric and boolean
- * values are stringified: `number → String(n)`, `boolean → "1"`.
- *
- * Reduces repetitive `if (x !== undefined) attrs["w:x"] = String(x)` patterns.
- */
-export function buildAttrs(entries) {
-    const out = {};
-    for (const [k, v] of entries) {
-        if (v === undefined || v === null || v === false) {
-            continue;
-        }
-        out[k] = typeof v === "boolean" ? "1" : String(v);
-    }
-    return out;
-}

package/dist/browser/modules/word/namespaces.d.ts

@@ -1,159 +0,0 @@
-/**
- * DOCX Module — Sub-namespace objects
- *
- * Groups flat builder helpers into logical namespaces for better
- * IDE discoverability. These are re-exports aggregated into objects;
- * since they reference the same underlying functions, tree-shaking
- * still applies at the individual function level for consumers who
- * import the flat named exports instead.
- *
- * @example
- * ```ts
- * import { Run, Paragraph, Table, Math, Field } from "excelts/word";
- *
- * const doc = Document.create();
- * Document.addParagraphElement(doc, Paragraph.create([
- *   Run.bold("Hello"),
- *   Run.text(" world")
- * ]));
- * ```
- */
-import { text, bold, italic, pageBreak, lineBreak, columnBreak, tab, positionalTab, ruby, carriageReturn, noBreakHyphen, softHyphen, symbol, field, pageNumberField, totalPagesField, sectionPagesField, sectionField, dateField, sequenceField, timeField, authorField, titleField, subjectField, keywordsField, fileNameField, fileSizeField, styleRefField, refField, pageRefField, noteRefField, hyperlinkField, quoteField, tocField, tcField, indexEntryField, indexField, ifField, includeTextField, includePictureField, formTextField, formCheckboxField, formDropdownField, paragraph, textParagraph, heading, hyperlink, bookmarkStart, bookmarkEnd, commentRangeStart, commentRangeEnd, commentReference, insertedRun, deletedRun, movedFromRun, movedToRun, moveFromRangeStart, moveFromRangeEnd, moveToRangeStart, moveToRangeEnd, checkBox, mathBlock, mathRun, mathFraction, mathSqrt, mathRoot, mathSum, mathIntegral, mathProduct, mathSuperScript, mathSubScript, mathSubSuperScript, mathPreSubSuperScript, mathPhantom, mathGroupChar, mathBorderBox, mathDelimiter, mathNary, mathFunction, mathLimit, mathMatrix, mathAccent, mathBar, mathBox, mathEquationArray, floatingImage, drawingShape, chart, structuredDocumentTag, border, gridBorders, cell, row, table, simpleTable, searchText, replaceText, mailMerge, paragraphCount, countWords, getHeadings, findBookmark, findComment, listImages, listTables, listHyperlinks, tableCount, extractText } from "./document.js";
-/** Namespace for creating text runs (inline content). */
-export declare const Run: {
-    text: typeof text;
-    bold: typeof bold;
-    italic: typeof italic;
-    pageBreak: typeof pageBreak;
-    lineBreak: typeof lineBreak;
-    columnBreak: typeof columnBreak;
-    tab: typeof tab;
-    positionalTab: typeof positionalTab;
-    ruby: typeof ruby;
-    carriageReturn: typeof carriageReturn;
-    noBreakHyphen: typeof noBreakHyphen;
-    softHyphen: typeof softHyphen;
-    symbol: typeof symbol;
-};
-/** Namespace for creating field codes. */
-export declare const Field: {
-    create: typeof field;
-    pageNumber: typeof pageNumberField;
-    totalPages: typeof totalPagesField;
-    sectionPages: typeof sectionPagesField;
-    section: typeof sectionField;
-    date: typeof dateField;
-    sequence: typeof sequenceField;
-    time: typeof timeField;
-    author: typeof authorField;
-    title: typeof titleField;
-    subject: typeof subjectField;
-    keywords: typeof keywordsField;
-    fileName: typeof fileNameField;
-    fileSize: typeof fileSizeField;
-    styleRef: typeof styleRefField;
-    ref: typeof refField;
-    pageRef: typeof pageRefField;
-    noteRef: typeof noteRefField;
-    hyperlink: typeof hyperlinkField;
-    quote: typeof quoteField;
-    toc: typeof tocField;
-    tc: typeof tcField;
-    indexEntry: typeof indexEntryField;
-    index: typeof indexField;
-    condition: typeof ifField;
-    includeText: typeof includeTextField;
-    includePicture: typeof includePictureField;
-    formText: typeof formTextField;
-    formCheckbox: typeof formCheckboxField;
-    formDropdown: typeof formDropdownField;
-};
-/** Namespace for creating paragraphs. */
-export declare const Paragraph: {
-    create: typeof paragraph;
-    text: typeof textParagraph;
-    heading: typeof heading;
-    hyperlink: typeof hyperlink;
-    bookmarkStart: typeof bookmarkStart;
-    bookmarkEnd: typeof bookmarkEnd;
-};
-/** Namespace for comment-related markers. */
-export declare const Comment: {
-    rangeStart: typeof commentRangeStart;
-    rangeEnd: typeof commentRangeEnd;
-    reference: typeof commentReference;
-};
-/** Namespace for track-changes (revision) markers. */
-export declare const TrackChanges: {
-    insertedRun: typeof insertedRun;
-    deletedRun: typeof deletedRun;
-    movedFromRun: typeof movedFromRun;
-    movedToRun: typeof movedToRun;
-    moveFromRangeStart: typeof moveFromRangeStart;
-    moveFromRangeEnd: typeof moveFromRangeEnd;
-    moveToRangeStart: typeof moveToRangeStart;
-    moveToRangeEnd: typeof moveToRangeEnd;
-};
-/** Namespace for OMML (Office Math) content. */
-export declare const Math: {
-    block: typeof mathBlock;
-    run: typeof mathRun;
-    fraction: typeof mathFraction;
-    sqrt: typeof mathSqrt;
-    root: typeof mathRoot;
-    sum: typeof mathSum;
-    integral: typeof mathIntegral;
-    product: typeof mathProduct;
-    superScript: typeof mathSuperScript;
-    subScript: typeof mathSubScript;
-    subSuperScript: typeof mathSubSuperScript;
-    preSubSuperScript: typeof mathPreSubSuperScript;
-    phantom: typeof mathPhantom;
-    groupChar: typeof mathGroupChar;
-    borderBox: typeof mathBorderBox;
-    delimiter: typeof mathDelimiter;
-    nary: typeof mathNary;
-    func: typeof mathFunction;
-    limit: typeof mathLimit;
-    matrix: typeof mathMatrix;
-    accent: typeof mathAccent;
-    bar: typeof mathBar;
-    box: typeof mathBox;
-    equationArray: typeof mathEquationArray;
-};
-/** Namespace for creating tables. */
-export declare const Table: {
-    create: typeof table;
-    simple: typeof simpleTable;
-    row: typeof row;
-    cell: typeof cell;
-    border: typeof border;
-    gridBorders: typeof gridBorders;
-};
-/** Namespace for drawings (images, shapes, charts). */
-export declare const Drawing: {
-    floatingImage: typeof floatingImage;
-    shape: typeof drawingShape;
-    chart: typeof chart;
-};
-/** Namespace for structured document tags (content controls). */
-export declare const Sdt: {
-    create: typeof structuredDocumentTag;
-    checkBox: typeof checkBox;
-};
-/** Namespace for querying/searching document content. */
-export declare const Query: {
-    search: typeof searchText;
-    replace: typeof replaceText;
-    mailMerge: typeof mailMerge;
-    paragraphCount: typeof paragraphCount;
-    countWords: typeof countWords;
-    getHeadings: typeof getHeadings;
-    findBookmark: typeof findBookmark;
-    findComment: typeof findComment;
-    listImages: typeof listImages;
-    listTables: typeof listTables;
-    listHyperlinks: typeof listHyperlinks;
-    tableCount: typeof tableCount;
-    extractText: typeof extractText;
-};