clear-excel 1.0.3 → 1.0.4

package/CHANGELOG.md

@@ -3,6 +3,33 @@
 All notable changes to this project are documented in this file. The project
 follows [Semantic Versioning](https://semver.org/).
 
+## [1.0.4] - 2026-10-09
+
+### Fixed
+
+- Preserve existing output files when exclusive creation fails and remove only
+  partial files created by the current write.
+- Reject source-file aliases through symbolic links and hard links, and preserve
+  existing output permissions during atomic overwrite.
+- Preserve worksheet text, CDATA, XML comments, and unrelated elements during
+  namespace-aware drawing and comment cleanup.
+- Resolve sheet relationship IDs by namespace URI and reject missing or invalid
+  relationships before pruning styles.
+- Decode UTF-8 and UTF-16 XML consistently and update encoding declarations when
+  writing UTF-8 output.
+- Enforce the actual aggregate uncompressed size of all retained ZIP parts,
+  including binary VBA projects with forged ZIP size metadata.
+
+### Changed
+
+- Replace Vite with one NodeNext TypeScript build for modular ESM output and
+  declarations, eliminating the duplicate bundled `cfb` dependency.
+- Clean build artifacts before compilation, embed sources in JavaScript maps,
+  and stop publishing declaration maps that reference unavailable source files.
+- Move the transitive `uuid` override to pnpm workspace configuration.
+- Verify the installed package with real `.xls`, `.xlsx`, and `.xlsm` workbooks
+  through both APIs, including retained values, formulas, merges, and macros.
+
 ## [1.0.0] - 2026-08-19
 
 ### Changed
@@ -21,5 +48,6 @@ follows [Semantic Versioning](https://semver.org/).
 - Initial release with buffer and file APIs for sanitizing `.xls`, `.xlsx`,
   and `.xlsm` workbooks.
 
+[1.0.4]: https://www.npmjs.com/package/clear-excel/v/1.0.4
 [1.0.0]: https://www.npmjs.com/package/clear-excel/v/1.0.0
 [0.1.0]: https://www.npmjs.com/package/clear-excel/v/0.1.0

package/README.md

@@ -98,6 +98,11 @@ await sanitizeExcelFile("report.xlsx", "report.cleaned.xlsx", {
 });
 ```
 
+Paths that refer to the source through symbolic links or hard links are also
+rejected. New outputs are created exclusively; a failed open leaves an existing
+file intact. Overwrites use an atomic replacement and preserve the existing
+output's file permissions.
+
 ## Options
 
 Both sanitizing functions accept these options:
@@ -116,7 +121,7 @@ The exported `DEFAULT_LIMITS` object contains the defaults:
 | -------------------------- | ---------------------------: |
 | `maxEntryCount`            |               10,000 entries |
 | `maxUncompressedBytes`     |                      512 MiB |
-| `maxXmlBytes`              | 512 MiB aggregate XML output |
+| `maxXmlBytes`              |  512 MiB aggregate XML reads |
 | `maxWorksheetXmlBytes`     |        256 MiB per worksheet |
 | `maxStylesXmlBytes`        |                       64 MiB |
 | `maxMetadataXmlBytes`      |     16 MiB per metadata part |
@@ -164,7 +169,7 @@ try {
 | `ERR_INVALID_XLSX`          | The ZIP/OOXML package is malformed or unsupported.  |
 | `ERR_LIMIT_EXCEEDED`        | A configured ZIP or XML limit was exceeded.         |
 | `ERR_WORKSHEET_COUNT`       | Exactly one worksheet was required.                 |
-| `ERR_SAME_PATH`             | Input and output resolve to the same path.          |
+| `ERR_SAME_PATH`             | Input and output refer to the same file.            |
 | `ERR_OUTPUT_EXISTS`         | Output exists and `overwrite` is false.             |
 | `ERR_FILE_READ`             | The input could not be read.                        |
 | `ERR_FILE_WRITE`            | The sanitized output could not be written.          |
@@ -178,7 +183,16 @@ Before loading an OOXML archive, `clear-excel` validates the ZIP central
 directory, rejects ZIP64 and multi-disk archives, rejects unsafe entry paths,
 and checks declared entry counts and expansion sizes. Required XML parts are
 inflated lazily with both per-part and aggregate runtime budgets, including
-protection when ZIP size metadata has been forged.
+protection when ZIP size metadata has been forged. Before generating the output,
+all retained archive parts are streamed through one actual-byte
+`maxUncompressedBytes` budget, including binary VBA projects and other retained
+content.
+
+Processed OOXML XML parts support UTF-8, UTF-16LE, and UTF-16BE. Rewritten parts
+use UTF-8 with a matching XML declaration. XML cleanup resolves namespace URIs
+independently of prefix names and preserves text, CDATA, XML comments, and
+unrelated elements. Missing or invalid worksheet relationships are rejected
+before style records can be removed.
 
 For `.xls`, the library validates CFB entry and byte limits, parses the BIFF
 record stream without evaluating formulas, removes drawing-layer records, and
@@ -200,9 +214,15 @@ pnpm run check
 ```
 
 `pnpm run check` verifies Oxfmt formatting, runs type-aware Oxlint and strict
-TypeScript checks, executes the tests, builds the ESM bundle and declarations,
-inspects `pnpm pack --dry-run`, and installs a temporary tarball to smoke-test
-both runtime imports and a TypeScript consumer.
+TypeScript checks, executes the tests, builds the ESM modules and declarations,
+inspects `pnpm pack --dry-run`, and installs a temporary tarball to verify both
+APIs with `.xls`, `.xlsx`, and `.xlsm` workbooks and a NodeNext TypeScript
+consumer.
+
+The build cleans `dist` and runs `tsc` once in NodeNext mode. It emits separate
+ESM modules, TypeScript declarations, and JavaScript source maps with embedded
+sources. Runtime dependencies are installed normally; the package does not
+bundle a second copy of them.
 
 Useful development commands:
 

package/dist/api/sanitize-excel-file.d.ts

@@ -2,4 +2,3 @@ import { isExcelFilename, isXlsxFilename } from "../formats.js";
 import type { SanitizeExcelFileOptions } from "../types.js";
 export { isExcelFilename, isXlsxFilename };
 export declare function sanitizeExcelFile(inputPath: string, outputPath: string, options?: SanitizeExcelFileOptions): Promise<void>;
-//# sourceMappingURL=sanitize-excel-file.d.ts.map

package/dist/api/sanitize-excel-file.js

@@ -0,0 +1,176 @@
+import { randomUUID } from "node:crypto";
+import { open, readFile, realpath, rename, stat, unlink } from "node:fs/promises";
+import { basename, dirname, join, resolve } from "node:path";
+import { hasCompoundFileSignature } from "../biff/workbook.js";
+import { createError } from "../errors.js";
+import { excelFileFormat, isExcelFilename, isXlsxFilename } from "../formats.js";
+import { normalizeOptions } from "../options.js";
+import { sanitizeExcel } from "./sanitize-excel.js";
+export { isExcelFilename, isXlsxFilename };
+export async function sanitizeExcelFile(inputPath, outputPath, options) {
+    const format = validateFilePaths(inputPath, outputPath);
+    const normalized = normalizeOptions(options, true);
+    const absoluteInputPath = resolve(inputPath);
+    const absoluteOutputPath = resolve(outputPath);
+    if (absoluteInputPath === absoluteOutputPath) {
+        throw createError("ERR_SAME_PATH", {
+            details: { inputPath: absoluteInputPath, outputPath: absoluteOutputPath },
+        });
+    }
+    const input = await readInputFile(absoluteInputPath);
+    await validateDistinctFiles(absoluteInputPath, absoluteOutputPath);
+    validateInputFormat(input, format);
+    const sanitized = await sanitizeExcel(input, {
+        requireSingleWorksheet: normalized.requireSingleWorksheet,
+        limits: normalized.limits,
+    });
+    if (normalized.overwrite) {
+        await replaceFileAtomically(absoluteOutputPath, sanitized);
+    }
+    else {
+        await writeNewFile(absoluteOutputPath, sanitized);
+    }
+}
+function validateFilePaths(inputPath, outputPath) {
+    if (typeof inputPath !== "string" ||
+        inputPath.length === 0 ||
+        typeof outputPath !== "string" ||
+        outputPath.length === 0) {
+        throw createError("ERR_INVALID_ARGUMENT", {
+            message: "inputPath and outputPath must be non-empty strings",
+        });
+    }
+    const inputFormat = excelFileFormat(inputPath);
+    const outputFormat = excelFileFormat(outputPath);
+    if (!inputFormat || !outputFormat || inputFormat !== outputFormat) {
+        throw createError("ERR_UNSUPPORTED_EXTENSION", {
+            details: { inputPath, outputPath, inputFormat, outputFormat },
+        });
+    }
+    return inputFormat;
+}
+function validateInputFormat(input, format) {
+    const isXls = hasCompoundFileSignature(input);
+    if ((format === "xls") !== isXls) {
+        throw createError(format === "xls" ? "ERR_INVALID_XLS" : "ERR_INVALID_XLSX", {
+            details: { format },
+        });
+    }
+}
+async function readInputFile(inputPath) {
+    try {
+        return await readFile(inputPath);
+    }
+    catch (error) {
+        throw createError("ERR_FILE_READ", {
+            cause: error,
+            details: { inputPath },
+        });
+    }
+}
+async function writeNewFile(outputPath, contents) {
+    try {
+        await writeExclusiveFile(outputPath, contents);
+    }
+    catch (error) {
+        if (hasErrorCode(error, "EEXIST")) {
+            throw createError("ERR_OUTPUT_EXISTS", {
+                cause: error,
+                details: { outputPath },
+            });
+        }
+        throw createError("ERR_FILE_WRITE", {
+            cause: error,
+            details: { outputPath },
+        });
+    }
+}
+async function replaceFileAtomically(outputPath, contents) {
+    const temporaryPath = `${outputPath}.${process.pid}.${randomUUID()}.tmp`;
+    let temporaryCreated = false;
+    try {
+        const existingOutput = await stat(outputPath).catch((error) => {
+            if (hasErrorCode(error, "ENOENT")) {
+                return undefined;
+            }
+            throw error;
+        });
+        const outputMode = existingOutput ? existingOutput.mode & 0o777 : undefined;
+        await writeExclusiveFile(temporaryPath, contents, outputMode);
+        temporaryCreated = true;
+        await rename(temporaryPath, outputPath);
+    }
+    catch (error) {
+        if (temporaryCreated) {
+            await removeIfPresent(temporaryPath);
+        }
+        throw createError("ERR_FILE_WRITE", {
+            cause: error,
+            details: { outputPath },
+        });
+    }
+}
+async function writeExclusiveFile(path, contents, mode) {
+    // A failed open does not establish ownership, so it must never trigger unlink.
+    const handle = await open(path, "wx", mode);
+    try {
+        await handle.writeFile(contents);
+        if (mode !== undefined) {
+            await handle.chmod(mode);
+        }
+        await handle.close();
+    }
+    catch (error) {
+        await handle.close().catch(() => undefined);
+        await removeIfPresent(path);
+        throw error;
+    }
+}
+async function validateDistinctFiles(inputPath, outputPath) {
+    let inputRealPath;
+    let inputStat;
+    try {
+        inputRealPath = await realpath(inputPath);
+        inputStat = await stat(inputPath);
+    }
+    catch (error) {
+        throw createError("ERR_FILE_READ", { cause: error, details: { inputPath } });
+    }
+    let sameFile;
+    try {
+        const outputStat = await stat(outputPath).catch((error) => {
+            if (hasErrorCode(error, "ENOENT")) {
+                return undefined;
+            }
+            throw error;
+        });
+        const outputRealPath = outputStat
+            ? await realpath(outputPath)
+            : await realpath(dirname(outputPath))
+                .then((parent) => join(parent, basename(outputPath)))
+                .catch((error) => {
+                if (hasErrorCode(error, "ENOENT")) {
+                    return outputPath;
+                }
+                throw error;
+            });
+        sameFile =
+            inputRealPath === outputRealPath ||
+                (outputStat !== undefined &&
+                    inputStat.dev === outputStat.dev &&
+                    inputStat.ino === outputStat.ino);
+    }
+    catch (error) {
+        throw createError("ERR_FILE_WRITE", { cause: error, details: { outputPath } });
+    }
+    if (sameFile) {
+        throw createError("ERR_SAME_PATH", { details: { inputPath, outputPath } });
+    }
+}
+function hasErrorCode(error, expectedCode) {
+    return (typeof error === "object" && error !== null && "code" in error && error.code === expectedCode);
+}
+async function removeIfPresent(path) {
+    await unlink(path).catch(() => undefined);
+}
+//# sourceMappingURL=sanitize-excel-file.js.map

package/dist/api/sanitize-excel-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-excel-file.js","sourceRoot":"","sources":["../../src/api/sanitize-excel-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,UAAkB,EAClB,OAAkC;IAElC,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,iBAAiB,KAAK,kBAAkB,EAAE,CAAC;QAC7C,MAAM,WAAW,CAAC,eAAe,EAAE;YACjC,OAAO,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,UAAU,EAAE,kBAAkB,EAAE;SAC1E,CAAC,CAAC;IACL,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACrD,MAAM,qBAAqB,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;IACnE,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE;QAC3C,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;QACzD,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC,CAAC;IAEH,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,qBAAqB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,UAAkB;IAC9D,IACE,OAAO,SAAS,KAAK,QAAQ;QAC7B,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,OAAO,UAAU,KAAK,QAAQ;QAC9B,UAAU,CAAC,MAAM,KAAK,CAAC,EACvB,CAAC;QACD,MAAM,WAAW,CAAC,sBAAsB,EAAE;YACxC,OAAO,EAAE,oDAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;QAClE,MAAM,WAAW,CAAC,2BAA2B,EAAE;YAC7C,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,MAAuB;IACjE,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,WAAW,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,EAAE;YAC3E,OAAO,EAAE,EAAE,MAAM,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,eAAe,EAAE;YACjC,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,EAAE,SAAS,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,UAAkB,EAAE,QAAgB;IAC9D,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,WAAW,CAAC,mBAAmB,EAAE;gBACrC,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,EAAE,UAAU,EAAE;aACxB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,WAAW,CAAC,gBAAgB,EAAE;YAClC,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,EAAE,UAAU,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,QAAgB;IACvE,MAAM,aAAa,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACzE,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACrE,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,MAAM,kBAAkB,CAAC,aAAa,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC9D,gBAAgB,GAAG,IAAI,CAAC;QACxB,MAAM,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,eAAe,CAAC,aAAa,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,WAAW,CAAC,gBAAgB,EAAE;YAClC,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,EAAE,UAAU,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAgB,EAAE,IAAa;IAC7E,+EAA+E;IAC/E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,UAAkB;IACxE,IAAI,aAAqB,CAAC;IAC1B,IAAI,SAA2C,CAAC;IAChD,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1C,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACjE,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAClC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,UAAU;YAC/B,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,CAAC;YAC5B,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;iBAChC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;iBACpD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACxB,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAClC,OAAO,UAAU,CAAC;gBACpB,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;QACT,QAAQ;YACN,aAAa,KAAK,cAAc;gBAChC,CAAC,UAAU,KAAK,SAAS;oBACvB,SAAS,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG;oBAChC,SAAS,CAAC,GAAG,KAAK,UAAU,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,WAAW,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,YAAoB;IACxD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAC9F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAC5C,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { open, readFile, realpath, rename, stat, unlink } from \"node:fs/promises\";\nimport { basename, dirname, join, resolve } from \"node:path\";\n\nimport { hasCompoundFileSignature } from \"../biff/workbook.js\";\nimport { createError } from \"../errors.js\";\nimport { excelFileFormat, isExcelFilename, isXlsxFilename } from \"../formats.js\";\nimport type { ExcelFileFormat } from \"../formats.js\";\nimport { normalizeOptions } from \"../options.js\";\nimport type { SanitizeExcelFileOptions } from \"../types.js\";\nimport { sanitizeExcel } from \"./sanitize-excel.js\";\n\nexport { isExcelFilename, isXlsxFilename };\n\nexport async function sanitizeExcelFile(\n  inputPath: string,\n  outputPath: string,\n  options?: SanitizeExcelFileOptions,\n): Promise<void> {\n  const format = validateFilePaths(inputPath, outputPath);\n  const normalized = normalizeOptions(options, true);\n  const absoluteInputPath = resolve(inputPath);\n  const absoluteOutputPath = resolve(outputPath);\n  if (absoluteInputPath === absoluteOutputPath) {\n    throw createError(\"ERR_SAME_PATH\", {\n      details: { inputPath: absoluteInputPath, outputPath: absoluteOutputPath },\n    });\n  }\n\n  const input = await readInputFile(absoluteInputPath);\n  await validateDistinctFiles(absoluteInputPath, absoluteOutputPath);\n  validateInputFormat(input, format);\n  const sanitized = await sanitizeExcel(input, {\n    requireSingleWorksheet: normalized.requireSingleWorksheet,\n    limits: normalized.limits,\n  });\n\n  if (normalized.overwrite) {\n    await replaceFileAtomically(absoluteOutputPath, sanitized);\n  } else {\n    await writeNewFile(absoluteOutputPath, sanitized);\n  }\n}\n\nfunction validateFilePaths(inputPath: string, outputPath: string): ExcelFileFormat {\n  if (\n    typeof inputPath !== \"string\" ||\n    inputPath.length === 0 ||\n    typeof outputPath !== \"string\" ||\n    outputPath.length === 0\n  ) {\n    throw createError(\"ERR_INVALID_ARGUMENT\", {\n      message: \"inputPath and outputPath must be non-empty strings\",\n    });\n  }\n  const inputFormat = excelFileFormat(inputPath);\n  const outputFormat = excelFileFormat(outputPath);\n  if (!inputFormat || !outputFormat || inputFormat !== outputFormat) {\n    throw createError(\"ERR_UNSUPPORTED_EXTENSION\", {\n      details: { inputPath, outputPath, inputFormat, outputFormat },\n    });\n  }\n  return inputFormat;\n}\n\nfunction validateInputFormat(input: Buffer, format: ExcelFileFormat): void {\n  const isXls = hasCompoundFileSignature(input);\n  if ((format === \"xls\") !== isXls) {\n    throw createError(format === \"xls\" ? \"ERR_INVALID_XLS\" : \"ERR_INVALID_XLSX\", {\n      details: { format },\n    });\n  }\n}\n\nasync function readInputFile(inputPath: string): Promise<Buffer> {\n  try {\n    return await readFile(inputPath);\n  } catch (error) {\n    throw createError(\"ERR_FILE_READ\", {\n      cause: error,\n      details: { inputPath },\n    });\n  }\n}\n\nasync function writeNewFile(outputPath: string, contents: Buffer): Promise<void> {\n  try {\n    await writeExclusiveFile(outputPath, contents);\n  } catch (error) {\n    if (hasErrorCode(error, \"EEXIST\")) {\n      throw createError(\"ERR_OUTPUT_EXISTS\", {\n        cause: error,\n        details: { outputPath },\n      });\n    }\n    throw createError(\"ERR_FILE_WRITE\", {\n      cause: error,\n      details: { outputPath },\n    });\n  }\n}\n\nasync function replaceFileAtomically(outputPath: string, contents: Buffer): Promise<void> {\n  const temporaryPath = `${outputPath}.${process.pid}.${randomUUID()}.tmp`;\n  let temporaryCreated = false;\n  try {\n    const existingOutput = await stat(outputPath).catch((error: unknown) => {\n      if (hasErrorCode(error, \"ENOENT\")) {\n        return undefined;\n      }\n      throw error;\n    });\n    const outputMode = existingOutput ? existingOutput.mode & 0o777 : undefined;\n    await writeExclusiveFile(temporaryPath, contents, outputMode);\n    temporaryCreated = true;\n    await rename(temporaryPath, outputPath);\n  } catch (error) {\n    if (temporaryCreated) {\n      await removeIfPresent(temporaryPath);\n    }\n    throw createError(\"ERR_FILE_WRITE\", {\n      cause: error,\n      details: { outputPath },\n    });\n  }\n}\n\nasync function writeExclusiveFile(path: string, contents: Buffer, mode?: number): Promise<void> {\n  // A failed open does not establish ownership, so it must never trigger unlink.\n  const handle = await open(path, \"wx\", mode);\n  try {\n    await handle.writeFile(contents);\n    if (mode !== undefined) {\n      await handle.chmod(mode);\n    }\n    await handle.close();\n  } catch (error) {\n    await handle.close().catch(() => undefined);\n    await removeIfPresent(path);\n    throw error;\n  }\n}\n\nasync function validateDistinctFiles(inputPath: string, outputPath: string): Promise<void> {\n  let inputRealPath: string;\n  let inputStat: Awaited<ReturnType<typeof stat>>;\n  try {\n    inputRealPath = await realpath(inputPath);\n    inputStat = await stat(inputPath);\n  } catch (error) {\n    throw createError(\"ERR_FILE_READ\", { cause: error, details: { inputPath } });\n  }\n\n  let sameFile: boolean;\n  try {\n    const outputStat = await stat(outputPath).catch((error: unknown) => {\n      if (hasErrorCode(error, \"ENOENT\")) {\n        return undefined;\n      }\n      throw error;\n    });\n    const outputRealPath = outputStat\n      ? await realpath(outputPath)\n      : await realpath(dirname(outputPath))\n          .then((parent) => join(parent, basename(outputPath)))\n          .catch((error: unknown) => {\n            if (hasErrorCode(error, \"ENOENT\")) {\n              return outputPath;\n            }\n            throw error;\n          });\n    sameFile =\n      inputRealPath === outputRealPath ||\n      (outputStat !== undefined &&\n        inputStat.dev === outputStat.dev &&\n        inputStat.ino === outputStat.ino);\n  } catch (error) {\n    throw createError(\"ERR_FILE_WRITE\", { cause: error, details: { outputPath } });\n  }\n\n  if (sameFile) {\n    throw createError(\"ERR_SAME_PATH\", { details: { inputPath, outputPath } });\n  }\n}\n\nfunction hasErrorCode(error: unknown, expectedCode: string): boolean {\n  return (\n    typeof error === \"object\" && error !== null && \"code\" in error && error.code === expectedCode\n  );\n}\n\nasync function removeIfPresent(path: string): Promise<void> {\n  await unlink(path).catch(() => undefined);\n}\n"]}

package/dist/api/sanitize-excel.d.ts

@@ -1,3 +1,2 @@
 import type { SanitizeExcelOptions } from "../types.js";
 export declare function sanitizeExcel(buffer: Buffer, options?: SanitizeExcelOptions): Promise<Buffer>;
-//# sourceMappingURL=sanitize-excel.d.ts.map

package/dist/api/sanitize-excel.js

@@ -0,0 +1,25 @@
+import { hasCompoundFileSignature, sanitizeBiffWorkbook } from "../biff/workbook.js";
+import { ExcelSanitizationError, createError } from "../errors.js";
+import { sanitizeOoxmlWorkbook } from "../ooxml/workbook.js";
+import { normalizeOptions } from "../options.js";
+export async function sanitizeExcel(buffer, options) {
+    if (!Buffer.isBuffer(buffer)) {
+        throw createError("ERR_INVALID_ARGUMENT", {
+            message: "buffer must be a Node.js Buffer",
+        });
+    }
+    const normalized = normalizeOptions(options);
+    const isBiff = hasCompoundFileSignature(buffer);
+    try {
+        return isBiff
+            ? await sanitizeBiffWorkbook(buffer, normalized)
+            : await sanitizeOoxmlWorkbook(buffer, normalized);
+    }
+    catch (error) {
+        if (error instanceof ExcelSanitizationError) {
+            throw error;
+        }
+        throw createError(isBiff ? "ERR_INVALID_XLS" : "ERR_INVALID_XLSX", { cause: error });
+    }
+}
+//# sourceMappingURL=sanitize-excel.js.map

package/dist/api/sanitize-excel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-excel.js","sourceRoot":"","sources":["../../src/api/sanitize-excel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGjD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,OAA8B;IAE9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,WAAW,CAAC,sBAAsB,EAAE;YACxC,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,MAAM;YACX,CAAC,CAAC,MAAM,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC;YAChD,CAAC,CAAC,MAAM,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC","sourcesContent":["import { hasCompoundFileSignature, sanitizeBiffWorkbook } from \"../biff/workbook.js\";\nimport { ExcelSanitizationError, createError } from \"../errors.js\";\nimport { sanitizeOoxmlWorkbook } from \"../ooxml/workbook.js\";\nimport { normalizeOptions } from \"../options.js\";\nimport type { SanitizeExcelOptions } from \"../types.js\";\n\nexport async function sanitizeExcel(\n  buffer: Buffer,\n  options?: SanitizeExcelOptions,\n): Promise<Buffer> {\n  if (!Buffer.isBuffer(buffer)) {\n    throw createError(\"ERR_INVALID_ARGUMENT\", {\n      message: \"buffer must be a Node.js Buffer\",\n    });\n  }\n\n  const normalized = normalizeOptions(options);\n  const isBiff = hasCompoundFileSignature(buffer);\n  try {\n    return isBiff\n      ? await sanitizeBiffWorkbook(buffer, normalized)\n      : await sanitizeOoxmlWorkbook(buffer, normalized);\n  } catch (error) {\n    if (error instanceof ExcelSanitizationError) {\n      throw error;\n    }\n    throw createError(isBiff ? \"ERR_INVALID_XLS\" : \"ERR_INVALID_XLSX\", { cause: error });\n  }\n}\n"]}

package/dist/biff/workbook.d.ts

@@ -1,4 +1,3 @@
 import type { NormalizedSanitizeOptions } from "../types.js";
 export declare function hasCompoundFileSignature(buffer: Buffer): boolean;
 export declare function sanitizeBiffWorkbook(buffer: Buffer, options: NormalizedSanitizeOptions): Promise<Buffer>;
-//# sourceMappingURL=workbook.d.ts.map

package/dist/biff/workbook.js

@@ -0,0 +1,169 @@
+import * as CFB from "cfb";
+import { createError, limitExceeded } from "../errors.js";
+const COMPOUND_FILE_SIGNATURE = Buffer.from([0xd0, 0xcf, 0x11, 0xe0, 0xa1, 0xb1, 0x1a, 0xe1]);
+const RECORD_HEADER_BYTES = 4;
+const CFB_STORAGE_ENTRY = 1;
+const CFB_STREAM_ENTRY = 2;
+const RECORD_CONTINUE = 0x003c;
+const RECORD_BOUNDSHEET = 0x0085;
+const RECORD_BOF_IDS = new Set([0x0009, 0x0209, 0x0409, 0x0809]);
+// INDEX, DBCELL, and ExtSST cache absolute stream offsets. They are optional
+// acceleration records and must be discarded after other records move.
+const OFFSET_CACHE_RECORD_IDS = new Set([0x00d7, 0x00ff, 0x020b]);
+// Drawing-layer records cover OfficeArt drawings, images, notes/comments,
+// controls, embedded OLE objects, and header/footer or background pictures.
+const DRAWING_RECORD_IDS = new Set([
+    0x001c, // Note
+    0x005d, // Obj
+    0x007f, // ImData
+    0x00e9, // BkHim
+    0x00eb, // MsoDrawingGroup
+    0x00ec, // MsoDrawing
+    0x00ed, // MsoDrawingSelection
+    0x01b6, // TxO
+    0x0866, // HFPicture
+]);
+export function hasCompoundFileSignature(buffer) {
+    return (buffer.length >= COMPOUND_FILE_SIGNATURE.length &&
+        buffer.subarray(0, COMPOUND_FILE_SIGNATURE.length).equals(COMPOUND_FILE_SIGNATURE));
+}
+export async function sanitizeBiffWorkbook(buffer, options) {
+    enforceInputSize(buffer, options);
+    const cfb = CFB.read(buffer, { type: "buffer" });
+    enforceContainerLimits(cfb, options);
+    const workbookEntry = CFB.find(cfb, "Workbook") ?? CFB.find(cfb, "Book");
+    if (!workbookEntry || workbookEntry.type !== CFB_STREAM_ENTRY) {
+        throw new Error("Compound file has no BIFF Workbook stream");
+    }
+    const workbookStream = Buffer.from(workbookEntry.content);
+    const records = parseBiffRecords(workbookStream);
+    rejectEncryptedWorkbook(records);
+    enforceWorksheetCount(records, options.requireSingleWorksheet);
+    const sanitizedStream = rebuildWorkbookStream(records);
+    workbookEntry.content = sanitizedStream;
+    workbookEntry.size = sanitizedStream.length;
+    removeEmbeddedObjectEntries(cfb);
+    return Buffer.from(CFB.write(cfb, { type: "buffer", fileType: "cfb" }));
+}
+function enforceInputSize(buffer, options) {
+    const configured = options.limits.maxUncompressedBytes;
+    if (buffer.length > configured) {
+        throw limitExceeded("maxUncompressedBytes", configured, buffer.length);
+    }
+}
+function enforceContainerLimits(cfb, options) {
+    const entries = cfb.FileIndex.filter((entry) => entry.type === CFB_STORAGE_ENTRY || entry.type === CFB_STREAM_ENTRY);
+    if (entries.length > options.limits.maxEntryCount) {
+        throw limitExceeded("maxEntryCount", options.limits.maxEntryCount, entries.length);
+    }
+    const totalBytes = entries.reduce((total, entry) => (entry.type === CFB_STREAM_ENTRY ? total + entry.content.length : total), 0);
+    if (totalBytes > options.limits.maxUncompressedBytes) {
+        throw limitExceeded("maxUncompressedBytes", options.limits.maxUncompressedBytes, totalBytes);
+    }
+}
+function parseBiffRecords(stream) {
+    const records = [];
+    let offset = 0;
+    let removeContinuation = false;
+    while (offset < stream.length) {
+        if (offset + RECORD_HEADER_BYTES > stream.length) {
+            throw new Error("Truncated BIFF record header");
+        }
+        const id = stream.readUInt16LE(offset);
+        const length = stream.readUInt16LE(offset + 2);
+        const nextOffset = offset + RECORD_HEADER_BYTES + length;
+        if (nextOffset > stream.length) {
+            throw new Error("Truncated BIFF record payload");
+        }
+        const remove = id === RECORD_CONTINUE
+            ? removeContinuation
+            : DRAWING_RECORD_IDS.has(id) || OFFSET_CACHE_RECORD_IDS.has(id);
+        records.push({
+            id,
+            originalOffset: offset,
+            payload: stream.subarray(offset + RECORD_HEADER_BYTES, nextOffset),
+            remove,
+        });
+        if (id !== RECORD_CONTINUE) {
+            removeContinuation = remove;
+        }
+        offset = nextOffset;
+    }
+    if (records.length === 0 || !RECORD_BOF_IDS.has(records[0]?.id ?? -1)) {
+        throw new Error("Workbook stream does not start with a BIFF BOF record");
+    }
+    return records;
+}
+function rejectEncryptedWorkbook(records) {
+    if (records.some((record) => record.id === 0x002f)) {
+        throw createError("ERR_INVALID_XLS", {
+            message: "Encrypted XLS workbooks are not supported",
+        });
+    }
+}
+function enforceWorksheetCount(records, required) {
+    const count = records.filter((record) => record.id === RECORD_BOUNDSHEET).length;
+    if (count === 0) {
+        throw new Error("Workbook contains no sheets");
+    }
+    if (required && count !== 1) {
+        throw createError("ERR_WORKSHEET_COUNT", {
+            details: { expected: 1, actual: count },
+        });
+    }
+}
+function rebuildWorkbookStream(records) {
+    const newOffsets = new Map();
+    let outputLength = 0;
+    for (const record of records) {
+        if (record.remove) {
+            continue;
+        }
+        newOffsets.set(record.originalOffset, outputLength);
+        outputLength += RECORD_HEADER_BYTES + record.payload.length;
+    }
+    const output = Buffer.allocUnsafe(outputLength);
+    let outputOffset = 0;
+    for (const record of records) {
+        if (record.remove) {
+            continue;
+        }
+        const payload = patchBoundSheetOffset(record, newOffsets);
+        output.writeUInt16LE(record.id, outputOffset);
+        output.writeUInt16LE(payload.length, outputOffset + 2);
+        payload.copy(output, outputOffset + RECORD_HEADER_BYTES);
+        outputOffset += RECORD_HEADER_BYTES + payload.length;
+    }
+    return output;
+}
+function patchBoundSheetOffset(record, newOffsets) {
+    if (record.id !== RECORD_BOUNDSHEET) {
+        return record.payload;
+    }
+    if (record.payload.length < 4) {
+        throw new Error("Invalid BoundSheet record");
+    }
+    const originalSheetOffset = record.payload.readUInt32LE(0);
+    const newSheetOffset = newOffsets.get(originalSheetOffset);
+    if (newSheetOffset === undefined) {
+        throw new Error("BoundSheet record points outside the Workbook stream");
+    }
+    const payload = Buffer.from(record.payload);
+    payload.writeUInt32LE(newSheetOffset, 0);
+    return payload;
+}
+function removeEmbeddedObjectEntries(cfb) {
+    const paths = cfb.FullPaths.filter((path) => path
+        .split("/")
+        .filter(Boolean)
+        .some((segment) => segment.toLowerCase() === "objectpool" ||
+        segment.toLowerCase() === "ctls" ||
+        /^mbd[0-9a-f]{8}$/i.test(segment)));
+    for (let index = paths.length - 1; index >= 0; index -= 1) {
+        CFB.utils.cfb_del(cfb, paths[index] ?? "");
+    }
+    if (paths.length > 0) {
+        CFB.utils.cfb_gc(cfb);
+    }
+}
+//# sourceMappingURL=workbook.js.map

package/dist/biff/workbook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workbook.js","sourceRoot":"","sources":["../../src/biff/workbook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG1D,MAAM,uBAAuB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAC9F,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEjE,6EAA6E;AAC7E,uEAAuE;AACvE,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAElE,0EAA0E;AAC1E,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,kBAAkB;IAC1B,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,sBAAsB;IAC9B,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,YAAY;CACrB,CAAC,CAAC;AASH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,OAAO,CACL,MAAM,CAAC,MAAM,IAAI,uBAAuB,CAAC,MAAM;QAC/C,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC,CACnF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,OAAkC;IAElC,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjD,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAErC,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzE,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACjD,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAE/D,MAAM,eAAe,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACvD,aAAa,CAAC,OAAO,GAAG,eAAe,CAAC;IACxC,aAAa,CAAC,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC;IAC5C,2BAA2B,CAAC,GAAG,CAAC,CAAC;IAEjC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,OAAkC;IAC1E,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QAC/B,MAAM,aAAa,CAAC,sBAAsB,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAsB,EAAE,OAAkC;IACxF,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAClC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAC/E,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAClD,MAAM,aAAa,CAAC,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAC/B,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAC1F,CAAC,CACF,CAAC;IACF,IAAI,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACrD,MAAM,aAAa,CAAC,sBAAsB,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAE/B,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,MAAM,GAAG,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,MAAM,GAAG,mBAAmB,GAAG,MAAM,CAAC;QACzD,IAAI,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GACV,EAAE,KAAK,eAAe;YACpB,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,IAAI,CAAC;YACX,EAAE;YACF,cAAc,EAAE,MAAM;YACtB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,UAAU,CAAC;YAClE,MAAM;SACP,CAAC,CAAC;QACH,IAAI,EAAE,KAAK,eAAe,EAAE,CAAC;YAC3B,kBAAkB,GAAG,MAAM,CAAC;QAC9B,CAAC;QACD,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,uBAAuB,CAAC,OAA8B;IAC7D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;QACnD,MAAM,WAAW,CAAC,iBAAiB,EAAE;YACnC,OAAO,EAAE,2CAA2C;SACrD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAA8B,EAAE,QAAiB;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,iBAAiB,CAAC,CAAC,MAAM,CAAC;IACjF,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,QAAQ,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,WAAW,CAAC,qBAAqB,EAAE;YACvC,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAA8B;IAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QACpD,YAAY,IAAI,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC1D,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAC9C,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,GAAG,mBAAmB,CAAC,CAAC;QACzD,YAAY,IAAI,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IACvD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAkB,EAClB,UAAuC;IAEvC,IAAI,MAAM,CAAC,EAAE,KAAK,iBAAiB,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC3D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAsB;IACzD,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAC1C,IAAI;SACD,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CACH,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,WAAW,EAAE,KAAK,YAAY;QACtC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM;QAChC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CACpC,CACJ,CAAC;IAEF,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import * as CFB from \"cfb\";\n\nimport { createError, limitExceeded } from \"../errors.js\";\nimport type { NormalizedSanitizeOptions } from \"../types.js\";\n\nconst COMPOUND_FILE_SIGNATURE = Buffer.from([0xd0, 0xcf, 0x11, 0xe0, 0xa1, 0xb1, 0x1a, 0xe1]);\nconst RECORD_HEADER_BYTES = 4;\nconst CFB_STORAGE_ENTRY = 1;\nconst CFB_STREAM_ENTRY = 2;\nconst RECORD_CONTINUE = 0x003c;\nconst RECORD_BOUNDSHEET = 0x0085;\nconst RECORD_BOF_IDS = new Set([0x0009, 0x0209, 0x0409, 0x0809]);\n\n// INDEX, DBCELL, and ExtSST cache absolute stream offsets. They are optional\n// acceleration records and must be discarded after other records move.\nconst OFFSET_CACHE_RECORD_IDS = new Set([0x00d7, 0x00ff, 0x020b]);\n\n// Drawing-layer records cover OfficeArt drawings, images, notes/comments,\n// controls, embedded OLE objects, and header/footer or background pictures.\nconst DRAWING_RECORD_IDS = new Set([\n  0x001c, // Note\n  0x005d, // Obj\n  0x007f, // ImData\n  0x00e9, // BkHim\n  0x00eb, // MsoDrawingGroup\n  0x00ec, // MsoDrawing\n  0x00ed, // MsoDrawingSelection\n  0x01b6, // TxO\n  0x0866, // HFPicture\n]);\n\ninterface BiffRecord {\n  id: number;\n  originalOffset: number;\n  payload: Buffer;\n  remove: boolean;\n}\n\nexport function hasCompoundFileSignature(buffer: Buffer): boolean {\n  return (\n    buffer.length >= COMPOUND_FILE_SIGNATURE.length &&\n    buffer.subarray(0, COMPOUND_FILE_SIGNATURE.length).equals(COMPOUND_FILE_SIGNATURE)\n  );\n}\n\nexport async function sanitizeBiffWorkbook(\n  buffer: Buffer,\n  options: NormalizedSanitizeOptions,\n): Promise<Buffer> {\n  enforceInputSize(buffer, options);\n  const cfb = CFB.read(buffer, { type: \"buffer\" });\n  enforceContainerLimits(cfb, options);\n\n  const workbookEntry = CFB.find(cfb, \"Workbook\") ?? CFB.find(cfb, \"Book\");\n  if (!workbookEntry || workbookEntry.type !== CFB_STREAM_ENTRY) {\n    throw new Error(\"Compound file has no BIFF Workbook stream\");\n  }\n\n  const workbookStream = Buffer.from(workbookEntry.content);\n  const records = parseBiffRecords(workbookStream);\n  rejectEncryptedWorkbook(records);\n  enforceWorksheetCount(records, options.requireSingleWorksheet);\n\n  const sanitizedStream = rebuildWorkbookStream(records);\n  workbookEntry.content = sanitizedStream;\n  workbookEntry.size = sanitizedStream.length;\n  removeEmbeddedObjectEntries(cfb);\n\n  return Buffer.from(CFB.write(cfb, { type: \"buffer\", fileType: \"cfb\" }));\n}\n\nfunction enforceInputSize(buffer: Buffer, options: NormalizedSanitizeOptions): void {\n  const configured = options.limits.maxUncompressedBytes;\n  if (buffer.length > configured) {\n    throw limitExceeded(\"maxUncompressedBytes\", configured, buffer.length);\n  }\n}\n\nfunction enforceContainerLimits(cfb: CFB.CFB$Container, options: NormalizedSanitizeOptions): void {\n  const entries = cfb.FileIndex.filter(\n    (entry) => entry.type === CFB_STORAGE_ENTRY || entry.type === CFB_STREAM_ENTRY,\n  );\n  if (entries.length > options.limits.maxEntryCount) {\n    throw limitExceeded(\"maxEntryCount\", options.limits.maxEntryCount, entries.length);\n  }\n\n  const totalBytes = entries.reduce(\n    (total, entry) => (entry.type === CFB_STREAM_ENTRY ? total + entry.content.length : total),\n    0,\n  );\n  if (totalBytes > options.limits.maxUncompressedBytes) {\n    throw limitExceeded(\"maxUncompressedBytes\", options.limits.maxUncompressedBytes, totalBytes);\n  }\n}\n\nfunction parseBiffRecords(stream: Buffer): BiffRecord[] {\n  const records: BiffRecord[] = [];\n  let offset = 0;\n  let removeContinuation = false;\n\n  while (offset < stream.length) {\n    if (offset + RECORD_HEADER_BYTES > stream.length) {\n      throw new Error(\"Truncated BIFF record header\");\n    }\n\n    const id = stream.readUInt16LE(offset);\n    const length = stream.readUInt16LE(offset + 2);\n    const nextOffset = offset + RECORD_HEADER_BYTES + length;\n    if (nextOffset > stream.length) {\n      throw new Error(\"Truncated BIFF record payload\");\n    }\n\n    const remove: boolean =\n      id === RECORD_CONTINUE\n        ? removeContinuation\n        : DRAWING_RECORD_IDS.has(id) || OFFSET_CACHE_RECORD_IDS.has(id);\n    records.push({\n      id,\n      originalOffset: offset,\n      payload: stream.subarray(offset + RECORD_HEADER_BYTES, nextOffset),\n      remove,\n    });\n    if (id !== RECORD_CONTINUE) {\n      removeContinuation = remove;\n    }\n    offset = nextOffset;\n  }\n\n  if (records.length === 0 || !RECORD_BOF_IDS.has(records[0]?.id ?? -1)) {\n    throw new Error(\"Workbook stream does not start with a BIFF BOF record\");\n  }\n  return records;\n}\n\nfunction rejectEncryptedWorkbook(records: readonly BiffRecord[]): void {\n  if (records.some((record) => record.id === 0x002f)) {\n    throw createError(\"ERR_INVALID_XLS\", {\n      message: \"Encrypted XLS workbooks are not supported\",\n    });\n  }\n}\n\nfunction enforceWorksheetCount(records: readonly BiffRecord[], required: boolean): void {\n  const count = records.filter((record) => record.id === RECORD_BOUNDSHEET).length;\n  if (count === 0) {\n    throw new Error(\"Workbook contains no sheets\");\n  }\n  if (required && count !== 1) {\n    throw createError(\"ERR_WORKSHEET_COUNT\", {\n      details: { expected: 1, actual: count },\n    });\n  }\n}\n\nfunction rebuildWorkbookStream(records: readonly BiffRecord[]): Buffer {\n  const newOffsets = new Map<number, number>();\n  let outputLength = 0;\n  for (const record of records) {\n    if (record.remove) {\n      continue;\n    }\n    newOffsets.set(record.originalOffset, outputLength);\n    outputLength += RECORD_HEADER_BYTES + record.payload.length;\n  }\n\n  const output = Buffer.allocUnsafe(outputLength);\n  let outputOffset = 0;\n  for (const record of records) {\n    if (record.remove) {\n      continue;\n    }\n\n    const payload = patchBoundSheetOffset(record, newOffsets);\n    output.writeUInt16LE(record.id, outputOffset);\n    output.writeUInt16LE(payload.length, outputOffset + 2);\n    payload.copy(output, outputOffset + RECORD_HEADER_BYTES);\n    outputOffset += RECORD_HEADER_BYTES + payload.length;\n  }\n  return output;\n}\n\nfunction patchBoundSheetOffset(\n  record: BiffRecord,\n  newOffsets: ReadonlyMap<number, number>,\n): Buffer {\n  if (record.id !== RECORD_BOUNDSHEET) {\n    return record.payload;\n  }\n  if (record.payload.length < 4) {\n    throw new Error(\"Invalid BoundSheet record\");\n  }\n\n  const originalSheetOffset = record.payload.readUInt32LE(0);\n  const newSheetOffset = newOffsets.get(originalSheetOffset);\n  if (newSheetOffset === undefined) {\n    throw new Error(\"BoundSheet record points outside the Workbook stream\");\n  }\n\n  const payload = Buffer.from(record.payload);\n  payload.writeUInt32LE(newSheetOffset, 0);\n  return payload;\n}\n\nfunction removeEmbeddedObjectEntries(cfb: CFB.CFB$Container): void {\n  const paths = cfb.FullPaths.filter((path) =>\n    path\n      .split(\"/\")\n      .filter(Boolean)\n      .some(\n        (segment) =>\n          segment.toLowerCase() === \"objectpool\" ||\n          segment.toLowerCase() === \"ctls\" ||\n          /^mbd[0-9a-f]{8}$/i.test(segment),\n      ),\n  );\n\n  for (let index = paths.length - 1; index >= 0; index -= 1) {\n    CFB.utils.cfb_del(cfb, paths[index] ?? \"\");\n  }\n  if (paths.length > 0) {\n    CFB.utils.cfb_gc(cfb);\n  }\n}\n"]}

package/dist/constants.d.ts

@@ -3,4 +3,3 @@ export declare const DEFAULT_LIMITS: Readonly<ExcelSanitizationLimits>;
 export declare const SANITIZE_OPTION_NAMES: ReadonlySet<string>;
 export declare const FILE_OPTION_NAMES: ReadonlySet<string>;
 export declare const LIMIT_NAMES: ReadonlySet<string>;
-//# sourceMappingURL=constants.d.ts.map

package/dist/constants.js

@@ -0,0 +1,28 @@
+export const DEFAULT_LIMITS = Object.freeze({
+    maxEntryCount: 10_000,
+    maxUncompressedBytes: 512 * 1024 * 1024,
+    maxXmlBytes: 512 * 1024 * 1024,
+    maxWorksheetXmlBytes: 256 * 1024 * 1024,
+    maxStylesXmlBytes: 64 * 1024 * 1024,
+    maxMetadataXmlBytes: 16 * 1024 * 1024,
+    maxRelationshipsXmlBytes: 8 * 1024 * 1024,
+});
+export const SANITIZE_OPTION_NAMES = new Set([
+    "requireSingleWorksheet",
+    "limits",
+]);
+export const FILE_OPTION_NAMES = new Set([
+    "requireSingleWorksheet",
+    "limits",
+    "overwrite",
+]);
+export const LIMIT_NAMES = new Set([
+    "maxEntryCount",
+    "maxUncompressedBytes",
+    "maxXmlBytes",
+    "maxWorksheetXmlBytes",
+    "maxStylesXmlBytes",
+    "maxMetadataXmlBytes",
+    "maxRelationshipsXmlBytes",
+]);
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAsC,MAAM,CAAC,MAAM,CAAC;IAC7E,aAAa,EAAE,MAAM;IACrB,oBAAoB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IACvC,WAAW,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IAC9B,oBAAoB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IACvC,iBAAiB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IACnC,mBAAmB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IACrC,wBAAwB,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;CAC1C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IAChE,wBAAwB;IACxB,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IAC5D,wBAAwB;IACxB,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC;IACtD,eAAe;IACf,sBAAsB;IACtB,aAAa;IACb,sBAAsB;IACtB,mBAAmB;IACnB,qBAAqB;IACrB,0BAA0B;CAC3B,CAAC,CAAC","sourcesContent":["import type { ExcelSanitizationLimits } from \"./types.js\";\n\nexport const DEFAULT_LIMITS: Readonly<ExcelSanitizationLimits> = Object.freeze({\n  maxEntryCount: 10_000,\n  maxUncompressedBytes: 512 * 1024 * 1024,\n  maxXmlBytes: 512 * 1024 * 1024,\n  maxWorksheetXmlBytes: 256 * 1024 * 1024,\n  maxStylesXmlBytes: 64 * 1024 * 1024,\n  maxMetadataXmlBytes: 16 * 1024 * 1024,\n  maxRelationshipsXmlBytes: 8 * 1024 * 1024,\n});\n\nexport const SANITIZE_OPTION_NAMES: ReadonlySet<string> = new Set([\n  \"requireSingleWorksheet\",\n  \"limits\",\n]);\n\nexport const FILE_OPTION_NAMES: ReadonlySet<string> = new Set([\n  \"requireSingleWorksheet\",\n  \"limits\",\n  \"overwrite\",\n]);\n\nexport const LIMIT_NAMES: ReadonlySet<string> = new Set([\n  \"maxEntryCount\",\n  \"maxUncompressedBytes\",\n  \"maxXmlBytes\",\n  \"maxWorksheetXmlBytes\",\n  \"maxStylesXmlBytes\",\n  \"maxMetadataXmlBytes\",\n  \"maxRelationshipsXmlBytes\",\n]);\n"]}

package/dist/errors.d.ts

@@ -17,4 +17,3 @@ export declare class ExcelSanitizationError extends Error {
 export declare function createError(code: ExcelSanitizationErrorCode, options?: CreateErrorOptions): ExcelSanitizationError;
 export declare function limitExceeded(limit: SafetyLimitName, configured: number, actual: number, partName?: string): ExcelSanitizationError;
 export {};
-//# sourceMappingURL=errors.d.ts.map

package/dist/errors.js

@@ -0,0 +1,38 @@
+const ERROR_MESSAGES = Object.freeze({
+    ERR_INVALID_ARGUMENT: "Invalid argument",
+    ERR_UNSUPPORTED_EXTENSION: "Supported extensions are .xls, .xlsx, and .xlsm; input and output formats must match",
+    ERR_INVALID_XLS: "Invalid or unsupported XLS workbook",
+    ERR_INVALID_XLSX: "Invalid or unsupported OOXML workbook",
+    ERR_LIMIT_EXCEEDED: "Excel workbook exceeds a configured safety limit",
+    ERR_WORKSHEET_COUNT: "The workbook must contain exactly one worksheet",
+    ERR_SAME_PATH: "Input and output paths must be different",
+    ERR_OUTPUT_EXISTS: "The output file already exists",
+    ERR_FILE_READ: "Unable to read the input Excel file",
+    ERR_FILE_WRITE: "Unable to write the sanitized Excel file",
+});
+export class ExcelSanitizationError extends Error {
+    name = "ExcelSanitizationError";
+    code;
+    details;
+    constructor(code, message, options = {}) {
+        super(message, options.cause === undefined ? undefined : { cause: options.cause });
+        this.code = code;
+        if (options.details !== undefined) {
+            this.details = Object.freeze({ ...options.details });
+        }
+    }
+}
+export function createError(code, options = {}) {
+    return new ExcelSanitizationError(code, options.message ?? ERROR_MESSAGES[code], options);
+}
+export function limitExceeded(limit, configured, actual, partName) {
+    return createError("ERR_LIMIT_EXCEEDED", {
+        details: {
+            limit,
+            configured,
+            actual,
+            ...(partName === undefined ? {} : { partName }),
+        },
+    });
+}
+//# sourceMappingURL=errors.js.map