@intactfile/engines 0.1.0 → 0.3.0

package/dist/license.js

@@ -0,0 +1,167 @@
+/**
+ * SDK/CLI license gate for the IntactFile repair engines.
+ *
+ * The repair engines are the paid product; diagnosis/detection stay free. On
+ * Node (CLI, MCP server, or the SDK imported directly) every repair entry
+ * point is gated behind a short-lived ES256 license minted by the API for
+ * ACTIVE Business subscribers and verified OFFLINE against the embedded PUBLIC
+ * key below — the API is the sole holder of the private key.
+ *
+ * In the BROWSER the gate is a no-op: the free in-browser widget calls these
+ * same functions and must stay free, so the gate only engages in a real Node
+ * runtime. DRM on a local library can't be unbreakable; this is a genuine,
+ * signed entitlement check plus the terms — not obfuscation. It never inspects
+ * file bytes and never phones home during a repair (verification is offline).
+ */
+/** Embedded PUBLIC verification key (P-256). The private key never ships. */
+const PUBLIC_JWK = {
+    kty: "EC",
+    crv: "P-256",
+    x: "W2edR_v1SXRWdNPE6s5KUoCbFlThQ48h325OtSzr71A",
+    y: "4BzLYg5mju7wf6Y_DJ4Df1eWjX6wyUxd9X_5LHgSmC4",
+};
+export class LicenseError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "LicenseError";
+    }
+}
+/* ------------------------------ module state ----------------------------- */
+let currentToken;
+/** Memoized claims for currentToken so repeated repairs don't re-verify. */
+let verified;
+/* ---------------------------- test-only hooks ---------------------------- */
+// Undocumented, prefixed hooks used by the unit tests to drive the gate with
+// an ephemeral keypair and to simulate a browser runtime. Not part of the API.
+let testPublicJwk = null;
+let testForceBrowser = false;
+/** @internal test hook — override the embedded public key (null = restore). */
+export function __setTestPublicKey(jwk) {
+    testPublicJwk = jwk;
+    verified = undefined;
+}
+/** @internal test hook — force the browser (no-op) code path. */
+export function __setForceBrowser(on) {
+    testForceBrowser = on;
+}
+/* ------------------------------ runtime check ---------------------------- */
+/** True only in a real Node runtime (never a browser tab or web worker). */
+function isNodeRuntime() {
+    if (testForceBrowser)
+        return false;
+    return (typeof window === "undefined" &&
+        typeof globalThis.document === "undefined" &&
+        typeof process !== "undefined" &&
+        !!process.versions?.node);
+}
+/* ------------------------------ token decode ----------------------------- */
+/** Decode a base64url segment to bytes (identical in Node and the browser). */
+function b64urlToBytes(s) {
+    const b64 = s.replace(/-/g, "+").replace(/_/g, "/").padEnd(Math.ceil(s.length / 4) * 4, "=");
+    let bin;
+    try {
+        bin = atob(b64);
+    }
+    catch {
+        throw new LicenseError("invalid", "Malformed license token.");
+    }
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+function importVerifyKey(jwk) {
+    return globalThis.crypto.subtle.importKey("jwk", jwk, { name: "ECDSA", namedCurve: "P-256" }, false, ["verify"]);
+}
+/**
+ * Verify a compact ES256 license JWT offline and return its claims, or throw a
+ * LicenseError. Pure (no module state): the unit tests drive it with an
+ * ephemeral keypair via the `publicJwk` option.
+ */
+export async function verifyLicense(token, opts = {}) {
+    const parts = token.split(".");
+    if (parts.length !== 3)
+        throw new LicenseError("invalid", "Malformed license token.");
+    const [h, p, sig] = parts;
+    let claims;
+    try {
+        claims = JSON.parse(new TextDecoder().decode(b64urlToBytes(p)));
+    }
+    catch {
+        throw new LicenseError("invalid", "Malformed license token.");
+    }
+    const key = await importVerifyKey(opts.publicJwk ?? testPublicJwk ?? PUBLIC_JWK);
+    // Re-wrap into plain ArrayBuffer-backed views so the WebCrypto BufferSource
+    // types line up (TextEncoder yields Uint8Array<ArrayBufferLike> under TS 5.7+).
+    const signature = b64urlToBytes(sig);
+    const data = new Uint8Array(new TextEncoder().encode(`${h}.${p}`));
+    let ok = false;
+    try {
+        ok = await globalThis.crypto.subtle.verify({ name: "ECDSA", hash: "SHA-256" }, key, signature, data);
+    }
+    catch {
+        ok = false;
+    }
+    if (!ok)
+        throw new LicenseError("invalid", "License signature is not valid.");
+    const now = opts.now ?? Math.floor(Date.now() / 1000);
+    if (typeof claims.exp !== "number" || claims.exp <= now) {
+        throw new LicenseError("expired", "License has expired — run `intactfile license --refresh`.");
+    }
+    if (claims.tier !== "business") {
+        throw new LicenseError("wrong-tier", "This license is not for the Business plan.");
+    }
+    return claims;
+}
+/* ------------------------------- public API ------------------------------ */
+/** Apply a license token so Node-side repairs can run. No-op-safe to re-call. */
+export function setLicense(token) {
+    currentToken = token.trim();
+    verified = undefined;
+}
+/** Forget any applied license. */
+export function clearLicense() {
+    currentToken = undefined;
+    verified = undefined;
+}
+/** Report whether a valid license is currently applied (verifies offline). */
+export async function getLicenseStatus() {
+    if (!currentToken)
+        return { licensed: false, reason: "missing" };
+    try {
+        const c = await verifyLicense(currentToken);
+        return { licensed: true, tier: c.tier, expiresAt: new Date(c.exp * 1000).toISOString() };
+    }
+    catch (e) {
+        return { licensed: false, reason: e instanceof LicenseError ? e.code : "invalid" };
+    }
+}
+/**
+ * The gate itself. In the browser it returns immediately (free widget). On
+ * Node it requires a valid, unexpired Business license, verified offline.
+ */
+export async function assertLicensed() {
+    if (!isNodeRuntime())
+        return;
+    if (!currentToken) {
+        throw new LicenseError("missing", "An active IntactFile Business license is required to run repairs here. " +
+            "Run `intactfile login`, or call setLicense() with a license token.");
+    }
+    const now = Math.floor(Date.now() / 1000);
+    if (verified && verified.exp > now)
+        return;
+    verified = await verifyLicense(currentToken, { now });
+}
+/**
+ * Wrap a repair entry point so it is licensed on Node and free in the browser.
+ * Preserves the wrapped function's signature.
+ */
+export function gate(fn) {
+    return async (...args) => {
+        await assertLicensed();
+        return fn(...args);
+    };
+}
+//# sourceMappingURL=license.js.map

package/dist/license.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"license.js","sourceRoot":"","sources":["../src/license.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,6EAA6E;AAC7E,MAAM,UAAU,GAAe;IAC7B,GAAG,EAAE,IAAI;IACT,GAAG,EAAE,OAAO;IACZ,CAAC,EAAE,6CAA6C;IAChD,CAAC,EAAE,6CAA6C;CACjD,CAAC;AAIF,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B;IADX,YACW,IAAsB,EAC/B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAkB;QAI/B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAiBD,+EAA+E;AAE/E,IAAI,YAAgC,CAAC;AACrC,4EAA4E;AAC5E,IAAI,QAAmC,CAAC;AAExC,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAE/E,IAAI,aAAa,GAAsB,IAAI,CAAC;AAC5C,IAAI,gBAAgB,GAAG,KAAK,CAAC;AAE7B,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,GAAsB;IACvD,aAAa,GAAG,GAAG,CAAC;IACpB,QAAQ,GAAG,SAAS,CAAC;AACvB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,EAAW;IAC3C,gBAAgB,GAAG,EAAE,CAAC;AACxB,CAAC;AAED,+EAA+E;AAE/E,4EAA4E;AAC5E,SAAS,aAAa;IACpB,IAAI,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,OAAO,MAAM,KAAK,WAAW;QAC7B,OAAQ,UAAqC,CAAC,QAAQ,KAAK,WAAW;QACtE,OAAO,OAAO,KAAK,WAAW;QAC9B,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CACzB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,+EAA+E;AAC/E,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7F,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,GAAe;IACtC,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,GAAG,EACH,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAa,EACb,OAAiD,EAAE;IAEnD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IACtF,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,KAAiC,CAAC;IAEtD,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAkB,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,SAAS,IAAI,aAAa,IAAI,UAAU,CAAC,CAAC;IACjF,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,GAAG,EACH,SAAyB,EACzB,IAAoB,CACrB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,EAAE,GAAG,KAAK,CAAC;IACb,CAAC;IACD,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;IAE9E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACtD,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;QACxD,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,2DAA2D,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,YAAY,CAAC,YAAY,EAAE,4CAA4C,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAE/E,iFAAiF;AACjF,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC5B,QAAQ,GAAG,SAAS,CAAC;AACvB,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,YAAY;IAC1B,YAAY,GAAG,SAAS,CAAC;IACzB,QAAQ,GAAG,SAAS,CAAC;AACvB,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;QAC5C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IAC3F,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,YAAY,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACrF,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO;IAC7B,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,YAAY,CACpB,SAAS,EACT,yEAAyE;YACvE,oEAAoE,CACvE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,GAAG,GAAG;QAAE,OAAO;IAC3C,QAAQ,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,IAAI,CAClB,EAA8B;IAE9B,OAAO,KAAK,EAAE,GAAG,IAAO,EAAc,EAAE;QACtC,MAAM,cAAc,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;AACJ,CAAC"}

package/dist/office-legacy/diagnose.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Read-only CFBF diagnosis: classify container damage without opening the
+ * document with a real Office parser. Pure byte scanning, browser-safe.
+ *
+ * Honesty rule: repairing the container recovers the STREAMS; whether Word/
+ * Excel/PowerPoint fully opens the file depends on the content inside those
+ * streams, which this engine never inspects or repairs (v1 scope).
+ */
+import type { ByteSource } from "../byte-source.js";
+import type { Confidence } from "../types.js";
+export type OfficeDamageClass = "none" | "header-damage" | "fat-damage" | "directory-damage" | "truncated" | "content-damage" | "encrypted" | "not-cfbf" | "unknown";
+export interface OfficeDiagnosis {
+    damageClass: OfficeDamageClass;
+    confidence: Confidence;
+    notes: string[];
+    majorVersion: number | null;
+    sectorSize: number | null;
+    container: "doc" | "xls" | "ppt" | "msg" | "ole" | null;
+    streamsFound: number;
+    prefixBytes: number;
+}
+export declare function diagnoseOfficeBytes(input: Uint8Array): OfficeDiagnosis;
+export declare function diagnoseOffice(src: ByteSource): Promise<OfficeDiagnosis>;
+//# sourceMappingURL=diagnose.d.ts.map

package/dist/office-legacy/diagnose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnose.d.ts","sourceRoot":"","sources":["../../src/office-legacy/diagnose.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAkB9C,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,eAAe,GACf,YAAY,GACZ,kBAAkB,GAClB,WAAW,GACX,gBAAgB,GAChB,WAAW,GACX,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,iBAAiB,CAAC;IAC/B,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAOD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,eAAe,CAiHtE;AAED,wBAAsB,cAAc,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAE9E"}

package/dist/office-legacy/diagnose.js

@@ -0,0 +1,111 @@
+import { readAll } from "../bytes-util.js";
+import { MAXREGSECT, buildFat, classifyContainer, findMagic, hasMagicAt, linearScanEntries, magicScore, parseHeader, readDifat, readDirectory, sectOffset, u16, } from "./format.js";
+const SCAN_WINDOW = 64 * 1024;
+const isEncrypted = (names) => names.some((n) => n === "EncryptedPackage" || n === "EncryptionInfo" || /encrypt/i.test(n));
+export function diagnoseOfficeBytes(input) {
+    const notes = [];
+    const base = {
+        notes,
+        majorVersion: null,
+        sectorSize: null,
+        container: null,
+        streamsFound: 0,
+        prefixBytes: 0,
+    };
+    const done = (damageClass, confidence) => ({
+        damageClass,
+        confidence,
+        ...base,
+    });
+    if (input.length < 512) {
+        notes.push(`file is only ${input.length} bytes: too small to be a compound file`);
+        return done("not-cfbf", "high");
+    }
+    // Locate the header.
+    let work = input;
+    let headerDamaged = false;
+    if (!hasMagicAt(input, 0)) {
+        const score = magicScore(input, 0);
+        const at = findMagic(input, SCAN_WINDOW);
+        if (at > 0) {
+            base.prefixBytes = at;
+            work = input.subarray(at);
+            headerDamaged = true;
+            notes.push(`CFBF magic found at offset ${at} (garbage prefix)`);
+        }
+        else if (score >= 5) {
+            headerDamaged = true;
+            notes.push("CFBF signature is partially damaged but recognizable");
+        }
+        else {
+            notes.push("no CFBF signature (D0 CF 11 E0 …) found");
+            return done("not-cfbf", input.length > SCAN_WINDOW ? "medium" : "high");
+        }
+    }
+    const header = parseHeader(work);
+    if (!header) {
+        notes.push("compound-file header is unreadable");
+        return done("header-damage", "medium");
+    }
+    base.majorVersion = header.major;
+    base.sectorSize = header.sectorSize;
+    // Raw-header field sanity (before normalization): a garbled sector shift /
+    // byte order / mini shift that we can deterministically fix.
+    const rawShift = u16(work, 30);
+    const rawByteOrder = u16(work, 28);
+    const rawMiniShift = u16(work, 32);
+    if (rawByteOrder !== 0xfffe || (rawShift !== 9 && rawShift !== 12) || rawMiniShift !== 6) {
+        headerDamaged = true;
+    }
+    const fatSectors = readDifat(work, header);
+    const fat = fatSectors.length ? buildFat(work, header, fatSectors) : null;
+    // Directory via the chain; fall back to a linear scan.
+    let entries = fat ? readDirectory(work, header, fat) : [];
+    let usedScan = false;
+    const streamEntries = (e) => e.filter((x) => (x.type === 1 || x.type === 2) && x.name);
+    if (!entries.some((e) => e.type === 5) || streamEntries(entries).length === 0) {
+        const scanned = linearScanEntries(work, header);
+        if (streamEntries(scanned).length > streamEntries(entries).length) {
+            entries = scanned;
+            usedScan = true;
+        }
+    }
+    const names = streamEntries(entries).map((e) => e.name);
+    base.streamsFound = names.length;
+    base.container = classifyContainer(names);
+    if (isEncrypted(names)) {
+        notes.push("legacy Office encryption detected (EncryptedPackage/EncryptionInfo): recovery needs the password");
+        return done("encrypted", "high");
+    }
+    // Truncation: a real (non-sentinel) directory or FAT sector points past EOF.
+    const dirOff = sectOffset(header.firstDirSector, header.sectorSize);
+    const dirPastEof = header.firstDirSector <= MAXREGSECT && dirOff + header.sectorSize > work.length;
+    const fatPastEof = fatSectors.some((s) => sectOffset(s, header.sectorSize) + header.sectorSize > work.length);
+    if (dirPastEof || fatPastEof) {
+        notes.push("declared FAT/directory sectors extend past end-of-file: the file was cut short");
+        notes.push("data beyond the cut is physically gone; recovery is partial");
+        return done("truncated", "high");
+    }
+    if (!fat || fatSectors.length === 0) {
+        notes.push("FAT/DIFAT is unreadable: sector chains cannot be followed");
+        return done("fat-damage", "high");
+    }
+    if (usedScan) {
+        notes.push("the directory chain/tree is broken; streams are only reachable by a linear scan");
+        return done("directory-damage", "high");
+    }
+    if (headerDamaged) {
+        notes.push("header fields are damaged but the body is intact: deterministically fixable");
+        return done("header-damage", "high");
+    }
+    if (base.streamsFound === 0) {
+        notes.push("no streams could be located");
+        return done("directory-damage", "medium");
+    }
+    notes.push(`compound file OK: ${base.streamsFound} stream(s), container ${base.container}`);
+    return done("none", "high");
+}
+export async function diagnoseOffice(src) {
+    return diagnoseOfficeBytes(await readAll(src));
+}
+//# sourceMappingURL=diagnose.js.map

package/dist/office-legacy/diagnose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnose.js","sourceRoot":"","sources":["../../src/office-legacy/diagnose.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EACL,UAAU,EACV,QAAQ,EACR,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,WAAW,EACX,SAAS,EACT,aAAa,EACb,UAAU,EACV,GAAG,GAEJ,MAAM,aAAa,CAAC;AAwBrB,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9B,MAAM,WAAW,GAAG,CAAC,KAAe,EAAW,EAAE,CAC/C,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,kBAAkB,IAAI,CAAC,KAAK,gBAAgB,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9F,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAwD;QAChE,KAAK;QACL,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI;QACf,YAAY,EAAE,CAAC;QACf,WAAW,EAAE,CAAC;KACf,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,WAA8B,EAAE,UAAsB,EAAmB,EAAE,CAAC,CAAC;QACzF,WAAW;QACX,UAAU;QACV,GAAG,IAAI;KACR,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,MAAM,yCAAyC,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;YACtB,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1B,aAAa,GAAG,IAAI,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,8BAA8B,EAAE,mBAAmB,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACtB,aAAa,GAAG,IAAI,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;IACjC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAEpC,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/B,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,YAAY,KAAK,MAAM,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,KAAK,EAAE,CAAC,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;QACzF,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE1E,uDAAuD;IACvD,IAAI,OAAO,GAAe,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,aAAa,GAAG,CAAC,CAAa,EAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/G,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;YAClE,OAAO,GAAG,OAAO,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;IACjC,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAE1C,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,kGAAkG,CAAC,CAAC;QAC/G,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,6EAA6E;IAC7E,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,IAAI,UAAU,IAAI,MAAM,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;IACnG,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9G,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;QAC7F,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,YAAY,yBAAyB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAe;IAClD,OAAO,mBAAmB,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/office-legacy/format.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Pure CFBF / OLE2 (Compound File Binary Format) primitives: header parse,
+ * FAT/DIFAT/MiniFAT walk, 128-byte directory entries, sector→offset math, and
+ * a pointer-free linear directory scan for salvage. No wasm, no compression —
+ * CFBF stores stream bytes raw, so this is all integer/offset arithmetic.
+ *
+ * Backs legacy binary Office: .doc/.xls/.ppt (97–2003), plus .msg/.msi. Repair
+ * scope is the CONTAINER + stream salvage — never the document content inside a
+ * stream. Reference: [MS-CFB]. All fields little-endian.
+ */
+export declare const CFBF_MAGIC: Uint8Array<ArrayBuffer>;
+export declare const MAXREGSECT = 4294967290;
+export declare const DIFSECT = 4294967292;
+export declare const FATSECT = 4294967293;
+export declare const ENDOFCHAIN = 4294967294;
+export declare const FREESECT = 4294967295;
+export declare const NOSTREAM = 4294967295;
+export declare const MINI_CUTOFF = 4096;
+export declare const MINI_SECTOR = 64;
+export declare const DIR_ENTRY = 128;
+export declare const u16: (b: Uint8Array, o: number) => number;
+export declare const u32: (b: Uint8Array, o: number) => number;
+/** 64-bit little-endian as a JS number (v3 uses only the low 32 bits). */
+export declare const u64: (b: Uint8Array, o: number) => number;
+export interface CfbfHeader {
+    major: number;
+    sectorSize: number;
+    miniCutoff: number;
+    numFatSectors: number;
+    firstDirSector: number;
+    firstMiniFatSector: number;
+    numMiniFatSectors: number;
+    firstDifatSector: number;
+    numDifatSectors: number;
+}
+export declare function hasMagicAt(b: Uint8Array, off: number): boolean;
+/** How many of the 8 magic bytes match at `off` (partial-magic heuristic). */
+export declare function magicScore(b: Uint8Array, off: number): number;
+/** First offset of an exact CFBF magic within `window`, or -1. */
+export declare function findMagic(b: Uint8Array, window: number): number;
+/** Parse the 512-byte header. Returns null if the sector shift is implausible. */
+export declare function parseHeader(b: Uint8Array): CfbfHeader | null;
+/** SECT number → absolute file offset. Sector 0 begins one sector past the header. */
+export declare const sectOffset: (sect: number, sectorSize: number) => number;
+/** Collect the FAT-sector numbers from the header DIFAT + any chained DIFAT sectors. */
+export declare function readDifat(b: Uint8Array, header: CfbfHeader): number[];
+/** Build the FAT array from its sectors. Out-of-range sectors read as FREESECT. */
+export declare function buildFat(b: Uint8Array, header: CfbfHeader, fatSectors: number[]): Uint32Array;
+/** Follow a FAT/MiniFAT chain from `start`, with cycle + bound guards. */
+export declare function readChain(fat: Uint32Array, start: number, maxLen: number): number[];
+export interface StreamRead {
+    bytes: Uint8Array;
+    complete: boolean;
+    brokenChain: boolean;
+}
+/** Read a normal (FAT-chained) stream of `size` bytes from `start`. */
+export declare function readBigStream(b: Uint8Array, header: CfbfHeader, fat: Uint32Array, start: number, size: number): StreamRead;
+/** Build the MiniFAT array by reading its sector chain from the FAT. */
+export declare function buildMiniFat(b: Uint8Array, header: CfbfHeader, fat: Uint32Array): Uint32Array;
+/** Read a small (MiniFAT-chained) stream from the mini stream. */
+export declare function readMiniStream(miniStream: Uint8Array, miniFat: Uint32Array, start: number, size: number): StreamRead;
+export interface DirEntry {
+    id: number;
+    name: string;
+    type: number;
+    color: number;
+    left: number;
+    right: number;
+    child: number;
+    startSector: number;
+    size: number;
+    /** byte offset of the raw 128-byte record (for the linear scanner). */
+    recordOffset: number;
+}
+/** Parse one 128-byte directory entry at absolute offset `off`. */
+export declare function parseDirEntry(b: Uint8Array, off: number, id: number): DirEntry | null;
+/** Read the directory entries by following the directory-sector chain. */
+export declare function readDirectory(b: Uint8Array, header: CfbfHeader, fat: Uint32Array): DirEntry[];
+/** True when a 128-byte record looks like a real directory entry. */
+export declare function looksLikeEntry(b: Uint8Array, off: number): boolean;
+/**
+ * Pointer-free salvage: scan the whole file at 128-byte alignment for records
+ * that look like directory entries. Recovers streams when the tree/chain is
+ * destroyed (the CFBF analog of the ZIP local-header scan).
+ */
+export declare function linearScanEntries(b: Uint8Array, header: CfbfHeader): DirEntry[];
+/** Detect the Office document type from the recovered stream names. */
+export declare function classifyContainer(names: string[]): "doc" | "xls" | "ppt" | "msg" | "ole";
+//# sourceMappingURL=format.d.ts.map

package/dist/office-legacy/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/office-legacy/format.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,eAAO,MAAM,UAAU,yBAAgE,CAAC;AAExF,eAAO,MAAM,UAAU,aAAa,CAAC;AACrC,eAAO,MAAM,OAAO,aAAa,CAAC;AAClC,eAAO,MAAM,OAAO,aAAa,CAAC;AAClC,eAAO,MAAM,UAAU,aAAa,CAAC;AACrC,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,QAAQ,aAAa,CAAC;AACnC,eAAO,MAAM,WAAW,OAAO,CAAC;AAChC,eAAO,MAAM,WAAW,KAAK,CAAC;AAC9B,eAAO,MAAM,SAAS,MAAM,CAAC;AAE7B,eAAO,MAAM,GAAG,GAAI,GAAG,UAAU,EAAE,GAAG,MAAM,KAAG,MAA0C,CAAC;AAC1F,eAAO,MAAM,GAAG,GAAI,GAAG,UAAU,EAAE,GAAG,MAAM,KAAG,MAC6B,CAAC;AAC7E,0EAA0E;AAC1E,eAAO,MAAM,GAAG,GAAI,GAAG,UAAU,EAAE,GAAG,MAAM,KAAG,MAAmD,CAAC;AAEnG,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAG9D;AAED,8EAA8E;AAC9E,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAI7D;AAED,kEAAkE;AAClE,wBAAgB,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAI/D;AAED,kFAAkF;AAClF,wBAAgB,WAAW,CAAC,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAkB5D;AAED,sFAAsF;AACtF,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,EAAE,YAAY,MAAM,KAAG,MAAiC,CAAC;AAEhG,wFAAwF;AACxF,wBAAgB,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,CAsBrE;AAED,mFAAmF;AACnF,wBAAgB,QAAQ,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,WAAW,CAY7F;AAED,0EAA0E;AAC1E,wBAAgB,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAUnF;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,CAgB1H;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,GAAG,WAAW,CAY7F;AAED,kEAAkE;AAClE,wBAAgB,cAAc,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,CAepH;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;CACtB;AAaD,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAgBrF;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,GAAG,QAAQ,EAAE,CAc7F;AAED,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAUlE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,QAAQ,EAAE,CAgB/E;AAED,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAOxF"}