@mkabatek/pptx-viewer 1.5.4 → 1.5.5

package/node_modules/pptx-viewer-core/dist/signature-inspection-status-BCUpfCQh.d.mts

@@ -1,220 +0,0 @@
-/**
- * Constants for OOXML digital signature processing.
- *
- * OPC URIs, algorithm URIs, digest mappings, and enterprise
- * environment variable names used across both platform-agnostic
- * and Node-only signature modules.
- */
-/** The OOXML relationship type for the digital signature origin part. */
-declare const DIGITAL_SIGNATURE_ORIGIN_REL_TYPE = "http://schemas.openxmlformats.org/package/2006/relationships/digital-signature/origin";
-/** The OOXML relationship type for individual signature parts. */
-declare const DIGITAL_SIGNATURE_REL_TYPE = "http://schemas.openxmlformats.org/package/2006/relationships/digital-signature/signature";
-/** Custom pptx-viewer manifest namespace for extended signature references. */
-declare const PPTX_VIEWER_MANIFEST_NS = "urn:pptx-viewer:ooxml-signature:v1";
-/** W3C XML Digital Signature namespace. */
-declare const XMLDSIG_NS = "http://www.w3.org/2000/09/xmldsig#";
-/** OPC relationship transform algorithm URI. */
-declare const OPC_RELATIONSHIP_TRANSFORM = "http://schemas.openxmlformats.org/package/2006/RelationshipTransform";
-/** Enveloped signature transform algorithm URI. */
-declare const XML_TRANSFORM_ENVELOPED_SIGNATURE = "http://www.w3.org/2000/09/xmldsig#enveloped-signature";
-/** Set of supported XML canonicalization transform algorithm URIs. */
-declare const SUPPORTED_XML_CANON_TRANSFORMS: Set<string>;
-/** Environment variable: path to file containing enterprise trust root PEM certificates. */
-declare const ENTERPRISE_TRUST_ROOTS_FILE_ENV = "PPTX_VIEWER_TRUST_ROOTS_FILE";
-/** Environment variable: inline PEM trust roots. */
-declare const ENTERPRISE_TRUST_ROOTS_PEM_ENV = "PPTX_VIEWER_TRUST_ROOTS_PEM";
-/** Environment variable: require revocation check. */
-declare const ENTERPRISE_REQUIRE_REVOCATION_ENV = "PPTX_VIEWER_REQUIRE_REVOCATION_CHECK";
-/** Environment variable: fail on unknown revocation status. */
-declare const ENTERPRISE_FAIL_ON_REVOCATION_UNKNOWN_ENV = "PPTX_VIEWER_FAIL_ON_REVOCATION_UNKNOWN";
-/** Environment variable: require timestamp authority. */
-declare const ENTERPRISE_REQUIRE_TIMESTAMP_ENV = "PPTX_VIEWER_REQUIRE_TIMESTAMP";
-/**
- * Mapping from XML Digital Signature digest algorithm URIs to hash function names.
- * Used by Node-only code with `node:crypto` (lowercase names).
- */
-declare const DIGEST_ALGORITHM_TO_HASH: Record<string, string>;
-/**
- * Mapping from XML Digital Signature digest algorithm URIs to Web Crypto algorithm names.
- * Used by platform-agnostic code with `crypto.subtle.digest`.
- */
-declare const DIGEST_ALGORITHM_TO_WEB_CRYPTO: Record<string, string>;
-
-/**
- * Rich types for digital signature inspection, signing, and PKI validation.
- *
- * These are platform-agnostic — used by both browser-level detection
- * and Node-only full verification modules.
- */
-type CertificateRevocationStatus = 'good' | 'revoked' | 'unknown' | 'not-checked' | 'error';
-type TimestampAuthorityStatus = 'valid' | 'invalid' | 'not-present' | 'not-checked' | 'error' | 'untrusted';
-interface SignatureReferenceCheck {
-    uri: string;
-    resolvedPartPath?: string;
-    existsInPackage: boolean;
-    digestAlgorithm?: string;
-    digestExpectedBase64?: string;
-    digestActualBase64?: string;
-    digestStatus: 'verified' | 'mismatch' | 'missing-part' | 'unsupported-transform' | 'unsupported-algorithm' | 'insufficient-data';
-    transformAlgorithms: string[];
-}
-interface SignatureCertificateInfo {
-    subject?: string;
-    issuer?: string;
-    serialNumber?: string;
-    validFrom?: string;
-    validTo?: string;
-}
-type SignatureDetailStatus = 'verified' | 'digest-mismatch' | 'reference-missing' | 'signature-invalid' | 'certificate-untrusted' | 'certificate-revoked' | 'timestamp-invalid' | 'timestamp-untrusted' | 'structural-only';
-interface SignatureDetail {
-    path: string;
-    signatureMethod?: string;
-    canonicalizationMethod?: string;
-    signingTime?: string;
-    referenceCount: number;
-    missingPartReferences: string[];
-    unsupportedTransforms: string[];
-    referenceChecks: SignatureReferenceCheck[];
-    certificate?: SignatureCertificateInfo;
-    signatureValueStatus: 'verified' | 'invalid' | 'not-checked';
-    certificateTrustStatus: 'trusted' | 'untrusted' | 'not-checked';
-    certificateTrustError?: string;
-    certificateRevocationStatus: CertificateRevocationStatus;
-    certificateRevocationError?: string;
-    timestampAuthorityStatus: TimestampAuthorityStatus;
-    timestampAuthorityError?: string;
-    certificateFingerprintSha256?: string;
-    status: SignatureDetailStatus;
-}
-type DigitalSignatureVerificationStatus = 'unsigned' | 'verified-trusted' | 'verified-untrusted' | 'certificate-revoked' | 'digest-mismatch' | 'reference-missing' | 'signature-invalid' | 'timestamp-invalid' | 'timestamp-untrusted' | 'present-not-verified' | 'invalid-package' | 'error';
-interface DigitalSignatureReport {
-    supported: boolean;
-    hasSignature: boolean;
-    signatureCount: number;
-    signaturePaths: string[];
-    verificationStatus: DigitalSignatureVerificationStatus;
-    error?: string;
-    details?: SignatureDetail[];
-    hasOriginRelationship?: boolean;
-}
-interface SignOptions {
-    certificatePath: string;
-    certificatePassword?: string;
-}
-interface SignResult {
-    success: boolean;
-    signedData?: Uint8Array;
-    report: DigitalSignatureReport;
-    error?: string;
-}
-interface LoadedSigningMaterial {
-    privateKeyPem: string;
-    certificatePem: string;
-}
-interface ParsedReferenceTransform {
-    algorithm: string;
-    relationshipReferenceIds: string[];
-}
-interface ReferenceTransformResult {
-    data: Uint8Array;
-    unsupportedAlgorithms: string[];
-}
-interface SignatureValidationPolicy {
-    requireRevocationCheck: boolean;
-    failOnRevocationUnknown: boolean;
-    requireTimestamp: boolean;
-}
-interface OfficeSignatureReference {
-    uri: string;
-    digestMethod: string;
-    digestValue: string;
-}
-
-/**
- * Pure regex-based XML extraction utilities for digital signature processing.
- *
- * These functions operate on raw XML strings without requiring a DOM parser,
- * making them platform-agnostic (browser + Node).
- */
-/**
- * Escape special characters in an XML attribute value.
- * Handles `&`, `<`, `>`, `"`, and `'` so the result is safe inside both
- * double- and single-quoted attributes.
- */
-declare function escapeXmlAttr(value: string): string;
-/**
- * Escape special characters in XML text content.
- * Only `&`, `<`, and `>` need escaping outside of attribute values.
- */
-declare function escapeXmlText(value: string): string;
-/** Validate that `value` only contains characters from the standard base64 alphabet. */
-declare function isValidBase64(value: string): boolean;
-/**
- * Extract an attribute value from the first matching XML tag via regex.
- * Namespace prefixes on the tag name are supported via the pattern.
- */
-declare function extractTagAttribute(xml: string, tagName: string, attributeName: string): string | undefined;
-/**
- * Extract the text content of the first matching tag, ignoring namespace prefixes.
- * Whitespace within the content is collapsed.
- */
-declare function extractFirstTagText(xml: string, localName: string): string | undefined;
-/**
- * Extract the text content of all matching tags, ignoring namespace prefixes.
- * Whitespace within each match is collapsed.
- */
-declare function extractAllTagText(xml: string, localName: string): string[];
-
-/**
- * Pure string utilities for resolving digital signature reference URIs
- * to ZIP part paths. Platform-agnostic (no Node dependencies).
- */
-/** Normalize a ZIP part path: convert backslashes to forward slashes and strip leading slashes. */
-declare function normalizePartPath(partPath: string): string;
-/**
- * Resolve a signature reference URI to a ZIP part path.
- * Returns `undefined` for empty URIs, fragment-only URIs (#...), or invalid input.
- */
-declare function resolveReferenceUriToPart(uri: string): string | undefined;
-
-/**
- * Platform-agnostic digest computation using the Web Crypto API.
- *
- * Works in both browser and Node.js (18+) environments via `crypto.subtle`.
- */
-/**
- * Compute a Base64-encoded digest of the given content using Web Crypto.
- *
- * @param content - The binary data to hash.
- * @param digestAlgorithmUri - An XML Digital Signature digest algorithm URI
- *   (e.g. `http://www.w3.org/2001/04/xmlenc#sha256`).
- * @returns The Base64-encoded digest, or `undefined` if the algorithm is unsupported
- *   or `crypto.subtle` is unavailable.
- */
-declare function computeDigestBase64(content: Uint8Array, digestAlgorithmUri: string): Promise<string | undefined>;
-
-/**
- * Pure status-computation logic for digital signature inspection.
- *
- * These functions are platform-agnostic — they accept data and policy
- * as parameters instead of reading from the environment.
- */
-
-/**
- * Compute the overall status for an individual signature detail
- * based on its reference checks, trust, revocation, and timestamp statuses.
- *
- * @param detail - A partial `SignatureDetail` with the fields needed for status computation.
- * @param policy - The validation policy controlling revocation/timestamp strictness.
- * @returns The computed status for this signature detail.
- */
-declare function computeDetailStatus(detail: Pick<SignatureDetail, 'signatureValueStatus' | 'missingPartReferences' | 'referenceChecks' | 'certificateTrustStatus' | 'certificateRevocationStatus' | 'timestampAuthorityStatus'>, policy: SignatureValidationPolicy): SignatureDetailStatus;
-/**
- * Compute the overall verification status from all signature details.
- *
- * @param details - Array of signature details from all signatures in the package.
- * @returns The overall verification status for the report.
- */
-declare function computeVerificationStatus(details: SignatureDetail[]): DigitalSignatureReport['verificationStatus'];
-
-export { extractTagAttribute as A, isValidBase64 as B, type CertificateRevocationStatus as C, DIGEST_ALGORITHM_TO_HASH as D, ENTERPRISE_FAIL_ON_REVOCATION_UNKNOWN_ENV as E, normalizePartPath as F, resolveReferenceUriToPart as G, type LoadedSigningMaterial as L, OPC_RELATIONSHIP_TRANSFORM as O, PPTX_VIEWER_MANIFEST_NS as P, type ReferenceTransformResult as R, SUPPORTED_XML_CANON_TRANSFORMS as S, type TimestampAuthorityStatus as T, XMLDSIG_NS as X, DIGEST_ALGORITHM_TO_WEB_CRYPTO as a, DIGITAL_SIGNATURE_ORIGIN_REL_TYPE as b, DIGITAL_SIGNATURE_REL_TYPE as c, type DigitalSignatureReport as d, type DigitalSignatureVerificationStatus as e, ENTERPRISE_REQUIRE_REVOCATION_ENV as f, ENTERPRISE_REQUIRE_TIMESTAMP_ENV as g, ENTERPRISE_TRUST_ROOTS_FILE_ENV as h, ENTERPRISE_TRUST_ROOTS_PEM_ENV as i, type OfficeSignatureReference as j, type ParsedReferenceTransform as k, type SignOptions as l, type SignResult as m, type SignatureDetail as n, type SignatureDetailStatus as o, type SignatureCertificateInfo as p, type SignatureReferenceCheck as q, type SignatureValidationPolicy as r, XML_TRANSFORM_ENVELOPED_SIGNATURE as s, computeDetailStatus as t, computeDigestBase64 as u, computeVerificationStatus as v, escapeXmlAttr as w, escapeXmlText as x, extractAllTagText as y, extractFirstTagText as z };

package/node_modules/pptx-viewer-core/dist/signature-inspection-status-BCUpfCQh.d.ts

@@ -1,220 +0,0 @@
-/**
- * Constants for OOXML digital signature processing.
- *
- * OPC URIs, algorithm URIs, digest mappings, and enterprise
- * environment variable names used across both platform-agnostic
- * and Node-only signature modules.
- */
-/** The OOXML relationship type for the digital signature origin part. */
-declare const DIGITAL_SIGNATURE_ORIGIN_REL_TYPE = "http://schemas.openxmlformats.org/package/2006/relationships/digital-signature/origin";
-/** The OOXML relationship type for individual signature parts. */
-declare const DIGITAL_SIGNATURE_REL_TYPE = "http://schemas.openxmlformats.org/package/2006/relationships/digital-signature/signature";
-/** Custom pptx-viewer manifest namespace for extended signature references. */
-declare const PPTX_VIEWER_MANIFEST_NS = "urn:pptx-viewer:ooxml-signature:v1";
-/** W3C XML Digital Signature namespace. */
-declare const XMLDSIG_NS = "http://www.w3.org/2000/09/xmldsig#";
-/** OPC relationship transform algorithm URI. */
-declare const OPC_RELATIONSHIP_TRANSFORM = "http://schemas.openxmlformats.org/package/2006/RelationshipTransform";
-/** Enveloped signature transform algorithm URI. */
-declare const XML_TRANSFORM_ENVELOPED_SIGNATURE = "http://www.w3.org/2000/09/xmldsig#enveloped-signature";
-/** Set of supported XML canonicalization transform algorithm URIs. */
-declare const SUPPORTED_XML_CANON_TRANSFORMS: Set<string>;
-/** Environment variable: path to file containing enterprise trust root PEM certificates. */
-declare const ENTERPRISE_TRUST_ROOTS_FILE_ENV = "PPTX_VIEWER_TRUST_ROOTS_FILE";
-/** Environment variable: inline PEM trust roots. */
-declare const ENTERPRISE_TRUST_ROOTS_PEM_ENV = "PPTX_VIEWER_TRUST_ROOTS_PEM";
-/** Environment variable: require revocation check. */
-declare const ENTERPRISE_REQUIRE_REVOCATION_ENV = "PPTX_VIEWER_REQUIRE_REVOCATION_CHECK";
-/** Environment variable: fail on unknown revocation status. */
-declare const ENTERPRISE_FAIL_ON_REVOCATION_UNKNOWN_ENV = "PPTX_VIEWER_FAIL_ON_REVOCATION_UNKNOWN";
-/** Environment variable: require timestamp authority. */
-declare const ENTERPRISE_REQUIRE_TIMESTAMP_ENV = "PPTX_VIEWER_REQUIRE_TIMESTAMP";
-/**
- * Mapping from XML Digital Signature digest algorithm URIs to hash function names.
- * Used by Node-only code with `node:crypto` (lowercase names).
- */
-declare const DIGEST_ALGORITHM_TO_HASH: Record<string, string>;
-/**
- * Mapping from XML Digital Signature digest algorithm URIs to Web Crypto algorithm names.
- * Used by platform-agnostic code with `crypto.subtle.digest`.
- */
-declare const DIGEST_ALGORITHM_TO_WEB_CRYPTO: Record<string, string>;
-
-/**
- * Rich types for digital signature inspection, signing, and PKI validation.
- *
- * These are platform-agnostic — used by both browser-level detection
- * and Node-only full verification modules.
- */
-type CertificateRevocationStatus = 'good' | 'revoked' | 'unknown' | 'not-checked' | 'error';
-type TimestampAuthorityStatus = 'valid' | 'invalid' | 'not-present' | 'not-checked' | 'error' | 'untrusted';
-interface SignatureReferenceCheck {
-    uri: string;
-    resolvedPartPath?: string;
-    existsInPackage: boolean;
-    digestAlgorithm?: string;
-    digestExpectedBase64?: string;
-    digestActualBase64?: string;
-    digestStatus: 'verified' | 'mismatch' | 'missing-part' | 'unsupported-transform' | 'unsupported-algorithm' | 'insufficient-data';
-    transformAlgorithms: string[];
-}
-interface SignatureCertificateInfo {
-    subject?: string;
-    issuer?: string;
-    serialNumber?: string;
-    validFrom?: string;
-    validTo?: string;
-}
-type SignatureDetailStatus = 'verified' | 'digest-mismatch' | 'reference-missing' | 'signature-invalid' | 'certificate-untrusted' | 'certificate-revoked' | 'timestamp-invalid' | 'timestamp-untrusted' | 'structural-only';
-interface SignatureDetail {
-    path: string;
-    signatureMethod?: string;
-    canonicalizationMethod?: string;
-    signingTime?: string;
-    referenceCount: number;
-    missingPartReferences: string[];
-    unsupportedTransforms: string[];
-    referenceChecks: SignatureReferenceCheck[];
-    certificate?: SignatureCertificateInfo;
-    signatureValueStatus: 'verified' | 'invalid' | 'not-checked';
-    certificateTrustStatus: 'trusted' | 'untrusted' | 'not-checked';
-    certificateTrustError?: string;
-    certificateRevocationStatus: CertificateRevocationStatus;
-    certificateRevocationError?: string;
-    timestampAuthorityStatus: TimestampAuthorityStatus;
-    timestampAuthorityError?: string;
-    certificateFingerprintSha256?: string;
-    status: SignatureDetailStatus;
-}
-type DigitalSignatureVerificationStatus = 'unsigned' | 'verified-trusted' | 'verified-untrusted' | 'certificate-revoked' | 'digest-mismatch' | 'reference-missing' | 'signature-invalid' | 'timestamp-invalid' | 'timestamp-untrusted' | 'present-not-verified' | 'invalid-package' | 'error';
-interface DigitalSignatureReport {
-    supported: boolean;
-    hasSignature: boolean;
-    signatureCount: number;
-    signaturePaths: string[];
-    verificationStatus: DigitalSignatureVerificationStatus;
-    error?: string;
-    details?: SignatureDetail[];
-    hasOriginRelationship?: boolean;
-}
-interface SignOptions {
-    certificatePath: string;
-    certificatePassword?: string;
-}
-interface SignResult {
-    success: boolean;
-    signedData?: Uint8Array;
-    report: DigitalSignatureReport;
-    error?: string;
-}
-interface LoadedSigningMaterial {
-    privateKeyPem: string;
-    certificatePem: string;
-}
-interface ParsedReferenceTransform {
-    algorithm: string;
-    relationshipReferenceIds: string[];
-}
-interface ReferenceTransformResult {
-    data: Uint8Array;
-    unsupportedAlgorithms: string[];
-}
-interface SignatureValidationPolicy {
-    requireRevocationCheck: boolean;
-    failOnRevocationUnknown: boolean;
-    requireTimestamp: boolean;
-}
-interface OfficeSignatureReference {
-    uri: string;
-    digestMethod: string;
-    digestValue: string;
-}
-
-/**
- * Pure regex-based XML extraction utilities for digital signature processing.
- *
- * These functions operate on raw XML strings without requiring a DOM parser,
- * making them platform-agnostic (browser + Node).
- */
-/**
- * Escape special characters in an XML attribute value.
- * Handles `&`, `<`, `>`, `"`, and `'` so the result is safe inside both
- * double- and single-quoted attributes.
- */
-declare function escapeXmlAttr(value: string): string;
-/**
- * Escape special characters in XML text content.
- * Only `&`, `<`, and `>` need escaping outside of attribute values.
- */
-declare function escapeXmlText(value: string): string;
-/** Validate that `value` only contains characters from the standard base64 alphabet. */
-declare function isValidBase64(value: string): boolean;
-/**
- * Extract an attribute value from the first matching XML tag via regex.
- * Namespace prefixes on the tag name are supported via the pattern.
- */
-declare function extractTagAttribute(xml: string, tagName: string, attributeName: string): string | undefined;
-/**
- * Extract the text content of the first matching tag, ignoring namespace prefixes.
- * Whitespace within the content is collapsed.
- */
-declare function extractFirstTagText(xml: string, localName: string): string | undefined;
-/**
- * Extract the text content of all matching tags, ignoring namespace prefixes.
- * Whitespace within each match is collapsed.
- */
-declare function extractAllTagText(xml: string, localName: string): string[];
-
-/**
- * Pure string utilities for resolving digital signature reference URIs
- * to ZIP part paths. Platform-agnostic (no Node dependencies).
- */
-/** Normalize a ZIP part path: convert backslashes to forward slashes and strip leading slashes. */
-declare function normalizePartPath(partPath: string): string;
-/**
- * Resolve a signature reference URI to a ZIP part path.
- * Returns `undefined` for empty URIs, fragment-only URIs (#...), or invalid input.
- */
-declare function resolveReferenceUriToPart(uri: string): string | undefined;
-
-/**
- * Platform-agnostic digest computation using the Web Crypto API.
- *
- * Works in both browser and Node.js (18+) environments via `crypto.subtle`.
- */
-/**
- * Compute a Base64-encoded digest of the given content using Web Crypto.
- *
- * @param content - The binary data to hash.
- * @param digestAlgorithmUri - An XML Digital Signature digest algorithm URI
- *   (e.g. `http://www.w3.org/2001/04/xmlenc#sha256`).
- * @returns The Base64-encoded digest, or `undefined` if the algorithm is unsupported
- *   or `crypto.subtle` is unavailable.
- */
-declare function computeDigestBase64(content: Uint8Array, digestAlgorithmUri: string): Promise<string | undefined>;
-
-/**
- * Pure status-computation logic for digital signature inspection.
- *
- * These functions are platform-agnostic — they accept data and policy
- * as parameters instead of reading from the environment.
- */
-
-/**
- * Compute the overall status for an individual signature detail
- * based on its reference checks, trust, revocation, and timestamp statuses.
- *
- * @param detail - A partial `SignatureDetail` with the fields needed for status computation.
- * @param policy - The validation policy controlling revocation/timestamp strictness.
- * @returns The computed status for this signature detail.
- */
-declare function computeDetailStatus(detail: Pick<SignatureDetail, 'signatureValueStatus' | 'missingPartReferences' | 'referenceChecks' | 'certificateTrustStatus' | 'certificateRevocationStatus' | 'timestampAuthorityStatus'>, policy: SignatureValidationPolicy): SignatureDetailStatus;
-/**
- * Compute the overall verification status from all signature details.
- *
- * @param details - Array of signature details from all signatures in the package.
- * @returns The overall verification status for the report.
- */
-declare function computeVerificationStatus(details: SignatureDetail[]): DigitalSignatureReport['verificationStatus'];
-
-export { extractTagAttribute as A, isValidBase64 as B, type CertificateRevocationStatus as C, DIGEST_ALGORITHM_TO_HASH as D, ENTERPRISE_FAIL_ON_REVOCATION_UNKNOWN_ENV as E, normalizePartPath as F, resolveReferenceUriToPart as G, type LoadedSigningMaterial as L, OPC_RELATIONSHIP_TRANSFORM as O, PPTX_VIEWER_MANIFEST_NS as P, type ReferenceTransformResult as R, SUPPORTED_XML_CANON_TRANSFORMS as S, type TimestampAuthorityStatus as T, XMLDSIG_NS as X, DIGEST_ALGORITHM_TO_WEB_CRYPTO as a, DIGITAL_SIGNATURE_ORIGIN_REL_TYPE as b, DIGITAL_SIGNATURE_REL_TYPE as c, type DigitalSignatureReport as d, type DigitalSignatureVerificationStatus as e, ENTERPRISE_REQUIRE_REVOCATION_ENV as f, ENTERPRISE_REQUIRE_TIMESTAMP_ENV as g, ENTERPRISE_TRUST_ROOTS_FILE_ENV as h, ENTERPRISE_TRUST_ROOTS_PEM_ENV as i, type OfficeSignatureReference as j, type ParsedReferenceTransform as k, type SignOptions as l, type SignResult as m, type SignatureDetail as n, type SignatureDetailStatus as o, type SignatureCertificateInfo as p, type SignatureReferenceCheck as q, type SignatureValidationPolicy as r, XML_TRANSFORM_ENVELOPED_SIGNATURE as s, computeDetailStatus as t, computeDigestBase64 as u, computeVerificationStatus as v, escapeXmlAttr as w, escapeXmlText as x, extractAllTagText as y, extractFirstTagText as z };

package/node_modules/pptx-viewer-core/dist/signature-node/index.d.mts

@@ -1,177 +0,0 @@
-import { p as SignatureCertificateInfo, L as LoadedSigningMaterial, C as CertificateRevocationStatus, T as TimestampAuthorityStatus, r as SignatureValidationPolicy, k as ParsedReferenceTransform, R as ReferenceTransformResult, q as SignatureReferenceCheck, l as SignOptions, m as SignResult, d as DigitalSignatureReport } from '../signature-inspection-status-BCUpfCQh.mjs';
-export { D as DIGEST_ALGORITHM_TO_HASH, a as DIGEST_ALGORITHM_TO_WEB_CRYPTO, b as DIGITAL_SIGNATURE_ORIGIN_REL_TYPE, c as DIGITAL_SIGNATURE_REL_TYPE, e as DigitalSignatureVerificationStatus, E as ENTERPRISE_FAIL_ON_REVOCATION_UNKNOWN_ENV, f as ENTERPRISE_REQUIRE_REVOCATION_ENV, g as ENTERPRISE_REQUIRE_TIMESTAMP_ENV, h as ENTERPRISE_TRUST_ROOTS_FILE_ENV, i as ENTERPRISE_TRUST_ROOTS_PEM_ENV, O as OPC_RELATIONSHIP_TRANSFORM, j as OfficeSignatureReference, P as PPTX_VIEWER_MANIFEST_NS, S as SUPPORTED_XML_CANON_TRANSFORMS, n as SignatureDetail, o as SignatureDetailStatus, X as XMLDSIG_NS, s as XML_TRANSFORM_ENVELOPED_SIGNATURE, t as computeDetailStatus, u as computeDigestBase64WebCrypto, v as computeVerificationStatus, w as escapeXmlAttr, x as escapeXmlText, y as extractAllTagText, z as extractFirstTagText, A as extractTagAttribute, B as isValidBase64, F as normalizePartPath, G as resolveReferenceUriToPart } from '../signature-inspection-status-BCUpfCQh.mjs';
-import JSZip from 'jszip';
-
-/**
- * XML canonicalization and DOM navigation utilities for digital signatures.
- *
- * Node-only — depends on `@xmldom/xmldom` and `xml-crypto`.
- */
-/** Get the local name of a DOM node, stripping any namespace prefix. */
-declare function getNodeLocalName(node: Node): string;
-/**
- * Find the first descendant element matching a local name,
- * ignoring namespace prefixes.
- */
-declare function getFirstDescendantElementByLocalName(parent: Document | Element, localName: string): Element | undefined;
-/**
- * Canonicalize a DOM node using the specified canonicalization algorithm.
- * Delegates to xml-crypto's C14N implementation.
- */
-declare function canonicalizeNode(node: Node, algorithm: string): string;
-/**
- * Canonicalize a `<SignedInfo>` XML fragment for signature verification.
- * Uses Exclusive XML Canonicalization (exc-c14n#).
- */
-declare function canonicalizeSignedInfoXml(signedInfoXml: string): string;
-
-/**
- * Certificate handling utilities for digital signature processing.
- *
- * Node-only — depends on `node:crypto`, `node:tls`, `node-forge`, `@xmldom/xmldom`.
- */
-
-/** Extract certificate metadata from a Base64-encoded DER certificate. */
-declare function certificateInfoFromBase64(certBase64: string): SignatureCertificateInfo | undefined;
-/**
- * Validate a certificate chain against system trust roots and optional additional roots.
- */
-declare function validateCertificateChain(certBase64List: string[], additionalRootsPem: string[]): {
-    status: 'trusted' | 'untrusted' | 'not-checked';
-    error?: string;
-};
-/**
- * Cryptographically verify the SignatureValue in an XML signature
- * using the embedded certificate.
- */
-declare function verifySignatureValue(signatureXml: string, certBase64List: string[]): 'verified' | 'invalid' | 'not-checked';
-/**
- * Load a private key and certificate from a PKCS#12 (.pfx/.p12) or PEM buffer.
- */
-declare function loadSigningMaterialFromBuffer(certificateBuffer: Uint8Array, certificatePath: string, certificatePassword?: string): LoadedSigningMaterial;
-/** Convert a PEM certificate to Base64-encoded DER (strip armour + whitespace). */
-declare function pemCertificateToBase64(pem: string): string;
-
-/**
- * PKI validation utilities — certificate revocation (OCSP) and
- * timestamp-authority evaluation for OOXML digital signatures.
- *
- * Node-only — depends on `node:crypto`, `node:http`, `node:https`, and `node-forge`.
- */
-
-/** Wrap a Base64-encoded DER certificate in PEM armour. */
-declare function certPemFromBase64(certBase64: string): string | undefined;
-/** SHA-256 fingerprint of a PEM certificate (lowercase hex, no colons). */
-declare function certFingerprintSha256(certPem: string): string | undefined;
-declare function extractOcspUrls(certPem: string): string[];
-declare function buildOcspRequestDer(leafPem: string, issuerPem: string): Buffer | undefined;
-declare function parseOcspResponseStatus(data: Buffer): CertificateRevocationStatus;
-declare function evaluateCertificateRevocation(leafCertPem: string, issuerCertPem: string | undefined): Promise<{
-    status: CertificateRevocationStatus;
-    error?: string;
-    checkedOcspUrls: string[];
-    checkedCrlUrls: string[];
-}>;
-declare function evaluateTimestampAuthority(signatureXml: string): Promise<{
-    status: TimestampAuthorityStatus;
-    error?: string;
-}>;
-
-/**
- * Environment-based configuration for digital signature validation.
- *
- * Node-only — reads trust roots from the file system and validation
- * policy from environment variables.
- */
-
-/** Extract individual PEM certificates from a text block. */
-declare function extractPemCertificatesFromText(text: string): string[];
-/**
- * Load enterprise trust root certificates from environment-configured sources.
- *
- * Checks `PPTX_VIEWER_TRUST_ROOTS_PEM` for inline PEM data and
- * `PPTX_VIEWER_TRUST_ROOTS_FILE` for file paths (semicolon/comma-separated).
- */
-declare function loadEnterpriseTrustRoots(): Promise<string[]>;
-/**
- * Read the signature validation policy from environment variables.
- */
-declare function getSignatureValidationPolicy(): SignatureValidationPolicy;
-
-/**
- * XML reference transform processing for digital signature verification.
- *
- * Node-only — depends on `@xmldom/xmldom` for DOM parsing and
- * `xml-crypto` (via xml-canonicalization) for C14N transforms.
- */
-
-/**
- * Parse `<ds:Transform>` elements from a `<ds:Reference>` node.
- */
-declare function extractReferenceTransforms(referenceNode: Element): ParsedReferenceTransform[];
-/**
- * Apply a chain of transforms to binary part data.
- * Supports OPC Relationship Transform and XML canonicalization algorithms.
- */
-declare function applyReferenceTransforms(partBytes: Uint8Array, transforms: ParsedReferenceTransform[]): ReferenceTransformResult;
-
-/**
- * Full reference digest verification for digital signatures.
- *
- * Node-only — uses `node:crypto` for synchronous hashing,
- * `jszip` for ZIP access, and `@xmldom/xmldom` for DOM parsing.
- */
-
-/**
- * Compute a Base64-encoded digest using Node.js `crypto` (synchronous).
- */
-declare function computeDigestBase64(content: Uint8Array, digestAlgorithmUri: string): string | undefined;
-/**
- * Verify all `<ds:Reference>` digests in an XML signature.
- */
-declare function buildReferenceChecksFromSignatureXml(zip: JSZip, signatureXml: string): Promise<SignatureReferenceCheck[]>;
-/**
- * Verify references from a PptxViewer manifest extension in the signature XML.
- */
-declare function buildReferenceChecksFromPptxViewerManifest(zip: JSZip, signatureXml: string): Promise<SignatureReferenceCheck[]>;
-
-/**
- * PPTX digital signature creation.
- *
- * Node-only — signs all content in a PPTX package with a certificate
- * and returns the signed data along with a verification report.
- */
-
-/**
- * Sign all content in a PPTX package with a certificate.
- *
- * Removes any existing signatures, creates a new XML-DSig signature
- * covering all non-signature parts, and returns the signed data
- * along with a post-sign verification report.
- */
-declare function signPptxWithCertificate(data: Uint8Array, certificateBuffer: Uint8Array, options: SignOptions): Promise<SignResult>;
-
-/**
- * Full PPTX digital signature inspection (Node-only).
- *
- * Orchestrates all sub-modules to analyze every signature in a PPTX package:
- * reference digest checks, certificate chain validation, OCSP revocation,
- * and timestamp authority evaluation.
- */
-
-/**
- * Inspect all digital signatures in a PPTX package.
- *
- * Performs full cryptographic verification including:
- * - Reference digest checks (standard XML-DSig + PptxViewer manifest)
- * - Signature value verification (RSA-SHA256/384/512)
- * - Certificate chain validation against system + enterprise trust roots
- * - OCSP revocation checking
- * - Timestamp authority evaluation
- *
- * @param data - The raw PPTX file bytes.
- * @returns A comprehensive digital signature report.
- */
-declare function inspectPptxDigitalSignatures(data: Uint8Array): Promise<DigitalSignatureReport>;
-
-export { CertificateRevocationStatus, DigitalSignatureReport, LoadedSigningMaterial, ParsedReferenceTransform, ReferenceTransformResult, SignOptions, SignResult, SignatureCertificateInfo, SignatureReferenceCheck, SignatureValidationPolicy, TimestampAuthorityStatus, applyReferenceTransforms, buildOcspRequestDer, buildReferenceChecksFromPptxViewerManifest, buildReferenceChecksFromSignatureXml, canonicalizeNode, canonicalizeSignedInfoXml, certFingerprintSha256, certPemFromBase64, certificateInfoFromBase64, computeDigestBase64, evaluateCertificateRevocation, evaluateTimestampAuthority, extractOcspUrls, extractPemCertificatesFromText, extractReferenceTransforms, getFirstDescendantElementByLocalName, getNodeLocalName, getSignatureValidationPolicy, inspectPptxDigitalSignatures, loadEnterpriseTrustRoots, loadSigningMaterialFromBuffer, parseOcspResponseStatus, pemCertificateToBase64, signPptxWithCertificate, validateCertificateChain, verifySignatureValue };