@silurus/ooxml 0.35.0 → 0.37.0

package/dist/pptx.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`./autoResize-C6N7p_Or.cjs`),t=require(`./pptx-CLc84h6v.cjs`);exports.PptxPresentation=t.r,exports.PptxViewer=t.n,exports.autoResize=e.t,exports.renderSlide=t.i;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`./autoResize-C6N7p_Or.cjs`),t=require(`./pptx-gWByFXpk.cjs`);exports.PptxPresentation=t.r,exports.PptxViewer=t.n,exports.autoResize=e.t,exports.renderSlide=t.i;

package/dist/pptx.mjs

@@ -1,3 +1,3 @@
 import { t as e } from "./autoResize-D-Yz7Izt.js";
-import { i as t, n, r } from "./pptx-DdpPwDWz.js";
+import { i as t, n, r } from "./pptx-CzgfHii0.js";
 export { r as PptxPresentation, n as PptxViewer, e as autoResize, t as renderSlide };

package/dist/types/docx.d.ts

@@ -336,9 +336,16 @@ declare interface LineSpacing {
     explicit?: boolean;
 }
 
-/** Options for {@link DocxDocument.load}. Re-exports the shared
+/** Options for {@link DocxDocument.load}. Extends the shared
  *  `LoadOptions` shape from `@silurus/ooxml-core`. */
-export declare type LoadOptions = LoadOptions_2;
+export declare interface LoadOptions extends LoadOptions_2 {
+    /**
+     * Override the per-entry ZIP decompression cap (bytes) used by the
+     * zip-bomb guard in the Rust parser. Defaults to 512 MiB. Zero / negative
+     * values fall back to the default.
+     */
+    maxZipEntryBytes?: number;
+}
 
 /**
  * Common load-time options shared by the docx / pptx / xlsx viewer

package/dist/types/index.d.ts

@@ -957,6 +957,15 @@ declare interface ImageAnchor {
     toColOff: number;
     toRow: number;
     toRowOff: number;
+    /** `twoCellAnchor@editAs` (ECMA-376 §20.5.2.33). `"oneCell"` instructs the
+     *  renderer to use `nativeExtCx`/`nativeExtCy` as the size and ignore the
+     *  `to` anchor (Excel's "Move but don't size with cells"). Absent ⇒ default
+     *  `"twoCell"`. */
+    editAs?: string;
+    /** `<xdr:pic><xdr:spPr><a:xfrm><a:ext cx cy>` in EMU — the picture's saved
+     *  size. Authoritative when `editAs === "oneCell"`. 0 = unavailable. */
+    nativeExtCx: number;
+    nativeExtCy: number;
     /** Data URL (data:image/png;base64,...) */
     dataUrl: string;
 }
@@ -1028,9 +1037,18 @@ declare interface LineSpacing {
     explicit?: boolean;
 }
 
-/** Options for {@link PptxPresentation.load}. Re-exports the shared
+/** Options for {@link PptxPresentation.load}. Extends the shared
  *  `LoadOptions` shape from `@silurus/ooxml-core`. */
-declare type LoadOptions = LoadOptions_2;
+declare interface LoadOptions extends LoadOptions_2 {
+    /**
+     * Override the per-entry ZIP decompression cap (bytes). Defaults to
+     * 512 MiB — matches `MAX_ZIP_ENTRY_BYTES` in the Rust parser. Raising
+     * this past 4 GiB requires a 64-bit WASM build; lowering it makes the
+     * loader reject otherwise-legitimate large media decks. Zero or
+     * negative values fall back to the default.
+     */
+    maxZipEntryBytes?: number;
+}
 
 /**
  * Common load-time options shared by the docx / pptx / xlsx viewer
@@ -1054,13 +1072,28 @@ declare interface LoadOptions_2 {
     useGoogleFonts?: boolean;
 }
 
-/** Options for {@link XlsxWorkbook.load}. Re-exports the shared
+/** Options for {@link XlsxWorkbook.load}. Extends the shared
  *  `LoadOptions` shape from `@silurus/ooxml-core`. */
-declare type LoadOptions_3 = LoadOptions_2;
+declare interface LoadOptions_3 extends LoadOptions_2 {
+    /**
+     * Override the per-entry ZIP decompression cap (bytes) used by the
+     * zip-bomb guard in the Rust parser. Defaults to 512 MiB. Applies to both
+     * the initial workbook parse and per-sheet parse. Zero / negative values
+     * fall back to the default.
+     */
+    maxZipEntryBytes?: number;
+}
 
-/** Options for {@link DocxDocument.load}. Re-exports the shared
+/** Options for {@link DocxDocument.load}. Extends the shared
  *  `LoadOptions` shape from `@silurus/ooxml-core`. */
-declare type LoadOptions_4 = LoadOptions_2;
+declare interface LoadOptions_4 extends LoadOptions_2 {
+    /**
+     * Override the per-entry ZIP decompression cap (bytes) used by the
+     * zip-bomb guard in the Rust parser. Defaults to 512 MiB. Zero / negative
+     * values fall back to the default.
+     */
+    maxZipEntryBytes?: number;
+}
 
 declare interface ManualLayout {
     xMode: string;
@@ -1440,6 +1473,13 @@ declare interface PptxViewerOptions extends RenderOptions {
      * default — see {@link PptxPresentation.load} for privacy implications.
      */
     useGoogleFonts?: boolean;
+    /**
+     * Override the per-entry ZIP decompression cap (bytes) used by the zip-bomb
+     * guard in the Rust parser. Defaults to 512 MiB. Raise this to load decks
+     * with very large embedded media, or lower it to tighten the budget for
+     * untrusted input. Zero / negative values fall back to the default.
+     */
+    maxZipEntryBytes?: number;
     /**
      * Enable interactive audio/video playback. When true, slides are rendered
      * via {@link PptxPresentation.presentSlide} so media elements become
@@ -1695,6 +1735,15 @@ declare interface ShapeAnchor {
     toColOff: number;
     toRow: number;
     toRowOff: number;
+    /** `twoCellAnchor@editAs` (ECMA-376 §20.5.2.33). With `"oneCell"` the
+     *  renderer uses `nativeExtCx`/`nativeExtCy` as the on-sheet size, since
+     *  Excel preserves the group's saved EMU extent regardless of cell
+     *  resizing ("Move but don't size with cells"). Absent ⇒ default `"twoCell"`. */
+    editAs?: string;
+    /** Saved EMU extent of the top-level grpSp (or the stand-alone sp/pic).
+     *  Authoritative when `editAs === "oneCell"`. 0 = unavailable. */
+    nativeExtCx: number;
+    nativeExtCy: number;
     shapes: ShapeInfo[];
 }
 
@@ -2518,6 +2567,12 @@ declare interface XlsxViewerOptions {
      * privacy implications.
      */
     useGoogleFonts?: boolean;
+    /**
+     * Override the per-entry ZIP decompression cap (bytes) used by the
+     * zip-bomb guard in the Rust parser. Defaults to 512 MiB. Zero / negative
+     * values fall back to the default.
+     */
+    maxZipEntryBytes?: number;
 }
 
 declare class XlsxWorkbook {
@@ -2527,6 +2582,7 @@ declare class XlsxWorkbook {
     /** Cache of loaded images keyed by their data URL. Shared across sheets. */
     private imageCache;
     private rawData;
+    private maxZipEntryBytes;
     constructor();
     load(source: string | ArrayBuffer, opts?: LoadOptions_3): Promise<void>;
     get sheetNames(): string[];

package/dist/types/pptx.d.ts

@@ -301,9 +301,18 @@ export declare interface LineBreak {
     type: 'break';
 }
 
-/** Options for {@link PptxPresentation.load}. Re-exports the shared
+/** Options for {@link PptxPresentation.load}. Extends the shared
  *  `LoadOptions` shape from `@silurus/ooxml-core`. */
-export declare type LoadOptions = LoadOptions_2;
+export declare interface LoadOptions extends LoadOptions_2 {
+    /**
+     * Override the per-entry ZIP decompression cap (bytes). Defaults to
+     * 512 MiB — matches `MAX_ZIP_ENTRY_BYTES` in the Rust parser. Raising
+     * this past 4 GiB requires a 64-bit WASM build; lowering it makes the
+     * loader reject otherwise-legitimate large media decks. Zero or
+     * negative values fall back to the default.
+     */
+    maxZipEntryBytes?: number;
+}
 
 /**
  * Common load-time options shared by the docx / pptx / xlsx viewer
@@ -554,6 +563,13 @@ export declare interface PptxViewerOptions extends RenderOptions {
      * default — see {@link PptxPresentation.load} for privacy implications.
      */
     useGoogleFonts?: boolean;
+    /**
+     * Override the per-entry ZIP decompression cap (bytes) used by the zip-bomb
+     * guard in the Rust parser. Defaults to 512 MiB. Raise this to load decks
+     * with very large embedded media, or lower it to tighten the budget for
+     * untrusted input. Zero / negative values fall back to the default.
+     */
+    maxZipEntryBytes?: number;
     /**
      * Enable interactive audio/video playback. When true, slides are rendered
      * via {@link PptxPresentation.presentSlide} so media elements become

package/dist/types/xlsx.d.ts

@@ -401,6 +401,15 @@ declare interface ImageAnchor {
     toColOff: number;
     toRow: number;
     toRowOff: number;
+    /** `twoCellAnchor@editAs` (ECMA-376 §20.5.2.33). `"oneCell"` instructs the
+     *  renderer to use `nativeExtCx`/`nativeExtCy` as the size and ignore the
+     *  `to` anchor (Excel's "Move but don't size with cells"). Absent ⇒ default
+     *  `"twoCell"`. */
+    editAs?: string;
+    /** `<xdr:pic><xdr:spPr><a:xfrm><a:ext cx cy>` in EMU — the picture's saved
+     *  size. Authoritative when `editAs === "oneCell"`. 0 = unavailable. */
+    nativeExtCx: number;
+    nativeExtCy: number;
     /** Data URL (data:image/png;base64,...) */
     dataUrl: string;
 }
@@ -414,9 +423,17 @@ declare interface LegendManualLayout {
     h: number;
 }
 
-/** Options for {@link XlsxWorkbook.load}. Re-exports the shared
+/** Options for {@link XlsxWorkbook.load}. Extends the shared
  *  `LoadOptions` shape from `@silurus/ooxml-core`. */
-declare type LoadOptions = LoadOptions_2;
+declare interface LoadOptions extends LoadOptions_2 {
+    /**
+     * Override the per-entry ZIP decompression cap (bytes) used by the
+     * zip-bomb guard in the Rust parser. Defaults to 512 MiB. Applies to both
+     * the initial workbook parse and per-sheet parse. Zero / negative values
+     * fall back to the default.
+     */
+    maxZipEntryBytes?: number;
+}
 
 /**
  * Common load-time options shared by the docx / pptx / xlsx viewer
@@ -597,6 +614,15 @@ declare interface ShapeAnchor {
     toColOff: number;
     toRow: number;
     toRowOff: number;
+    /** `twoCellAnchor@editAs` (ECMA-376 §20.5.2.33). With `"oneCell"` the
+     *  renderer uses `nativeExtCx`/`nativeExtCy` as the on-sheet size, since
+     *  Excel preserves the group's saved EMU extent regardless of cell
+     *  resizing ("Move but don't size with cells"). Absent ⇒ default `"twoCell"`. */
+    editAs?: string;
+    /** Saved EMU extent of the top-level grpSp (or the stand-alone sp/pic).
+     *  Authoritative when `editAs === "oneCell"`. 0 = unavailable. */
+    nativeExtCx: number;
+    nativeExtCy: number;
     shapes: ShapeInfo[];
 }
 
@@ -972,6 +998,12 @@ export declare interface XlsxViewerOptions {
      * privacy implications.
      */
     useGoogleFonts?: boolean;
+    /**
+     * Override the per-entry ZIP decompression cap (bytes) used by the
+     * zip-bomb guard in the Rust parser. Defaults to 512 MiB. Zero / negative
+     * values fall back to the default.
+     */
+    maxZipEntryBytes?: number;
 }
 
 export declare class XlsxWorkbook {
@@ -981,6 +1013,7 @@ export declare class XlsxWorkbook {
     /** Cache of loaded images keyed by their data URL. Shared across sheets. */
     private imageCache;
     private rawData;
+    private maxZipEntryBytes;
     constructor();
     load(source: string | ArrayBuffer, opts?: LoadOptions): Promise<void>;
     get sheetNames(): string[];