ooxml-core 0.5.0 → 0.7.0

package/README.md

@@ -43,6 +43,7 @@ import { xml, opc } from 'ooxml-core'; // or by namespace (shared building block
 | `color`    | Hex, RGB, HSL and linear colour primitives, OOXML percent and angle parsing.                                                                                                                                                                                                                                                                                                                                       |
 | `geometry` | DrawingML preset shapes, connection sites, clip paths, callouts and boolean shape operations.                                                                                                                                                                                                                                                                                                                      |
 | `diagram`  | SmartArt (DiagramML), format-neutral: data model, layout/colour/quick-style parts, the cached `dsp:drawing` shape tree, relationship resolution and a loader. Used by `docx`; `pptx` re-imports its parsers.                                                                                                                                                                                                       |
+| `digest`   | Synchronous pure-TypeScript SHA-1, SHA-256, SHA-384 and SHA-512, ECMA-376 digest name normalisation (`SHA-512`, `SHA512`, `sha_512`, ...) and the agile password hash Office protection elements store (`hashPassword`, `verifyPasswordHash`). No Web Crypto, so it works on `http://`. Used by `xlsx` sheet and workbook protection.                                                                              |
 | `collab`   | Format-neutral real-time collaboration on Yjs: session and provider lifecycle, awareness/presence, transport-neutral sync (WebSocket, in-memory, any byte channel), update codecs, ordering helpers, asset sync and the product adapter seam. See `docs/collab-area.md`.                                                                                                                                           |
 | `docx`     | WordprocessingML: model, parser, preserving serializer, editing, validation. Also `/docx/embedded`. `/docx/layout` is the DOM-free pagination engine (an approximation of Word, not parity) and `/docx/load` detects and loads DOCX and legacy .doc (ole2 inlined).                                                                                                                                                |
 | `pptx`     | PresentationML: model, parser, serializer, editing, charts, SmartArt, converters, CLI, signatures. Subpaths `/pptx/converter`, `/pptx/cli`, `/pptx/signature-node`.                                                                                                                                                                                                                                                |

package/dist/digest/algorithm-names.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Canonical spellings of the hash algorithm names ECMA-376 lets a password verifier name.
+ *
+ * The `algorithmName` attributes (`sheetProtection`, `workbookProtection`, `p:modifyVerifier`,
+ * `w:writeProtection`, ...) are free-form strings: ECMA-376 gives `"SHA-512"` and `"SHA512"`,
+ * and hyphen-less, lower-case or underscored forms (`"sha1"`, `"sha_512"`, `"ripemd160"`) occur
+ * in the wild. Normalising once means every caller agrees on one spelling.
+ *
+ * Ported from the pptx area's `src/pptx/core/utils/digests/algorithm-names.ts`.
+ */
+/** The hash algorithm names ECMA-376 password verifiers use and this module recognises. */
+export type DigestAlgorithmName = 'SHA-1' | 'SHA-256' | 'SHA-384' | 'SHA-512' | 'MD2' | 'MD4' | 'MD5' | 'RIPEMD-128' | 'RIPEMD-160' | 'WHIRLPOOL';
+/** The algorithms {@link digestSync} computes (the others are recognised but not implemented). */
+export type SupportedDigestName = 'SHA-1' | 'SHA-256' | 'SHA-384' | 'SHA-512';
+/**
+ * Normalises `name` to a {@link DigestAlgorithmName}, or `undefined` when it names an algorithm
+ * this module does not recognise.
+ */
+export declare function normalizeDigestAlgorithmName(name: string): DigestAlgorithmName | undefined;
+//# sourceMappingURL=algorithm-names.d.ts.map

package/dist/digest/algorithm-names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"algorithm-names.d.ts","sourceRoot":"","sources":["../../src/digest/algorithm-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,2FAA2F;AAC3F,MAAM,MAAM,mBAAmB,GAC5B,OAAO,GACP,SAAS,GACT,SAAS,GACT,SAAS,GACT,KAAK,GACL,KAAK,GACL,KAAK,GACL,YAAY,GACZ,YAAY,GACZ,WAAW,CAAC;AAEf,kGAAkG;AAClG,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAgB9E;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAG1F"}

package/dist/digest/base64.d.ts

@@ -0,0 +1,8 @@
+/** Encodes `bytes` as padded base64. */
+export declare function encodeBase64(bytes: Uint8Array): string;
+/**
+ * Decodes base64, ignoring white space and tolerating missing padding. Returns `undefined` for
+ * anything malformed (characters outside the alphabet, misplaced padding, an impossible length).
+ */
+export declare function decodeBase64(text: string): Uint8Array | undefined;
+//# sourceMappingURL=base64.d.ts.map

package/dist/digest/base64.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../../src/digest/base64.ts"],"names":[],"mappings":"AAMA,wCAAwC;AACxC,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAYtD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAoBjE"}

package/dist/digest/digest.d.ts

@@ -0,0 +1,13 @@
+/** A synchronous hash function over bytes. */
+export type DigestFunction = (data: Uint8Array) => Uint8Array;
+/**
+ * The synchronous digest function for `name` (any spelling {@link normalizeDigestAlgorithmName}
+ * accepts), or `undefined` when it is not one this module computes.
+ */
+export declare function digestFunction(name: string): DigestFunction | undefined;
+/**
+ * The digest of `data` under `name` (SHA-1, SHA-256, SHA-384 or SHA-512, in any ECMA-376
+ * spelling), or `undefined` for an algorithm this module does not compute.
+ */
+export declare function digestSync(name: string, data: Uint8Array): Uint8Array | undefined;
+//# sourceMappingURL=digest.d.ts.map

package/dist/digest/digest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digest.d.ts","sourceRoot":"","sources":["../../src/digest/digest.ts"],"names":[],"mappings":"AAKA,8CAA8C;AAC9C,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,UAAU,CAAC;AAS9D;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAGvE;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAEjF"}

package/dist/digest/index.cjs

@@ -0,0 +1,594 @@
+'use strict';
+
+// src/digest/algorithm-names.ts
+var CANONICAL_BY_LOOKUP_KEY = {
+  SHA1: "SHA-1",
+  SHA256: "SHA-256",
+  SHA384: "SHA-384",
+  SHA512: "SHA-512",
+  MD2: "MD2",
+  MD4: "MD4",
+  MD5: "MD5",
+  RIPEMD128: "RIPEMD-128",
+  RIPEMD160: "RIPEMD-160",
+  WHIRLPOOL: "WHIRLPOOL"
+};
+function normalizeDigestAlgorithmName(name) {
+  const key = name.toUpperCase().replace(/[-_\s]/g, "");
+  return Object.hasOwn(CANONICAL_BY_LOOKUP_KEY, key) ? CANONICAL_BY_LOOKUP_KEY[key] : void 0;
+}
+
+// src/digest/base64.ts
+var ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+var VALUES = new Map([...ALPHABET].map((char, index) => [char, index]));
+function encodeBase64(bytes) {
+  let out = "";
+  for (let i = 0; i < bytes.length; i += 3) {
+    const a = bytes[i];
+    const b = bytes[i + 1];
+    const c = bytes[i + 2];
+    const n = a << 16 | (b ?? 0) << 8 | (c ?? 0);
+    out += ALPHABET[n >> 18] + ALPHABET[n >> 12 & 63];
+    out += b === void 0 ? "=" : ALPHABET[n >> 6 & 63];
+    out += c === void 0 ? "=" : ALPHABET[n & 63];
+  }
+  return out;
+}
+function decodeBase64(text) {
+  const compact = text.replace(/\s+/g, "");
+  const body = compact.replace(/={1,2}$/, "");
+  if (body.length % 4 === 1) return void 0;
+  if (compact.length !== body.length && compact.length % 4 !== 0) return void 0;
+  const out = new Uint8Array(Math.floor(body.length * 3 / 4));
+  let bits = 0;
+  let buffer = 0;
+  let index = 0;
+  for (const char of body) {
+    const value = VALUES.get(char);
+    if (value === void 0) return void 0;
+    buffer = (buffer << 6 | value) & 16777215;
+    bits += 6;
+    if (bits >= 8) {
+      bits -= 8;
+      out[index++] = buffer >> bits & 255;
+    }
+  }
+  return out;
+}
+
+// src/digest/sha256.ts
+var K = new Uint32Array([
+  1116352408,
+  1899447441,
+  3049323471,
+  3921009573,
+  961987163,
+  1508970993,
+  2453635748,
+  2870763221,
+  3624381080,
+  310598401,
+  607225278,
+  1426881987,
+  1925078388,
+  2162078206,
+  2614888103,
+  3248222580,
+  3835390401,
+  4022224774,
+  264347078,
+  604807628,
+  770255983,
+  1249150122,
+  1555081692,
+  1996064986,
+  2554220882,
+  2821834349,
+  2952996808,
+  3210313671,
+  3336571891,
+  3584528711,
+  113926993,
+  338241895,
+  666307205,
+  773529912,
+  1294757372,
+  1396182291,
+  1695183700,
+  1986661051,
+  2177026350,
+  2456956037,
+  2730485921,
+  2820302411,
+  3259730800,
+  3345764771,
+  3516065817,
+  3600352804,
+  4094571909,
+  275423344,
+  430227734,
+  506948616,
+  659060556,
+  883997877,
+  958139571,
+  1322822218,
+  1537002063,
+  1747873779,
+  1955562222,
+  2024104815,
+  2227730452,
+  2361852424,
+  2428436474,
+  2756734187,
+  3204031479,
+  3329325298
+]);
+var IV = [
+  1779033703,
+  3144134277,
+  1013904242,
+  2773480762,
+  1359893119,
+  2600822924,
+  528734635,
+  1541459225
+];
+var W = new Uint32Array(64);
+var rotr = (x, n) => x >>> n | x << 32 - n;
+function compress(h, view, offset) {
+  for (let i = 0; i < 16; i++) W[i] = view.getUint32(offset + i * 4);
+  for (let i = 16; i < 64; i++) {
+    const a2 = W[i - 15];
+    const b2 = W[i - 2];
+    const s0 = rotr(a2, 7) ^ rotr(a2, 18) ^ a2 >>> 3;
+    const s1 = rotr(b2, 17) ^ rotr(b2, 19) ^ b2 >>> 10;
+    W[i] = W[i - 16] + s0 + W[i - 7] + s1 >>> 0;
+  }
+  let a = h[0], b = h[1], c = h[2], d = h[3], e = h[4], f = h[5], g = h[6], k = h[7];
+  for (let i = 0; i < 64; i++) {
+    const S1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+    const ch = e & f ^ ~e & g;
+    const t1 = k + S1 + ch + K[i] + W[i] >>> 0;
+    const S0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+    const maj = a & b ^ a & c ^ b & c;
+    const t2 = S0 + maj >>> 0;
+    k = g;
+    g = f;
+    f = e;
+    e = d + t1 >>> 0;
+    d = c;
+    c = b;
+    b = a;
+    a = t1 + t2 >>> 0;
+  }
+  h[0] = h[0] + a >>> 0;
+  h[1] = h[1] + b >>> 0;
+  h[2] = h[2] + c >>> 0;
+  h[3] = h[3] + d >>> 0;
+  h[4] = h[4] + e >>> 0;
+  h[5] = h[5] + f >>> 0;
+  h[6] = h[6] + g >>> 0;
+  h[7] = h[7] + k >>> 0;
+}
+function pad64(data) {
+  const padded = new Uint8Array(Math.ceil((data.length + 9) / 64) * 64);
+  padded.set(data);
+  padded[data.length] = 128;
+  const bits = data.length * 8;
+  const view = new DataView(padded.buffer);
+  view.setUint32(padded.length - 8, Math.floor(bits / 4294967296));
+  view.setUint32(padded.length - 4, bits >>> 0);
+  return view;
+}
+function wordsOut(h) {
+  const out = new Uint8Array(h.length * 4);
+  const view = new DataView(out.buffer);
+  for (let i = 0; i < h.length; i++) view.setUint32(i * 4, h[i]);
+  return out;
+}
+function sha256(data) {
+  const h = new Uint32Array(IV);
+  const view = pad64(data);
+  for (let offset = 0; offset < view.byteLength; offset += 64) compress(h, view, offset);
+  return wordsOut(h);
+}
+
+// src/digest/sha1.ts
+var W2 = new Uint32Array(80);
+var rotl = (x, n) => x << n | x >>> 32 - n;
+function compress2(h, view, offset) {
+  for (let i = 0; i < 16; i++) W2[i] = view.getUint32(offset + i * 4);
+  for (let i = 16; i < 80; i++) W2[i] = rotl(W2[i - 3] ^ W2[i - 8] ^ W2[i - 14] ^ W2[i - 16], 1);
+  let a = h[0], b = h[1], c = h[2], d = h[3], e = h[4];
+  for (let i = 0; i < 80; i++) {
+    let f;
+    let k;
+    if (i < 20) {
+      f = b & c | ~b & d;
+      k = 1518500249;
+    } else if (i < 40) {
+      f = b ^ c ^ d;
+      k = 1859775393;
+    } else if (i < 60) {
+      f = b & c | b & d | c & d;
+      k = 2400959708;
+    } else {
+      f = b ^ c ^ d;
+      k = 3395469782;
+    }
+    const t = rotl(a, 5) + f + e + k + W2[i] >>> 0;
+    e = d;
+    d = c;
+    c = rotl(b, 30) >>> 0;
+    b = a;
+    a = t;
+  }
+  h[0] = h[0] + a >>> 0;
+  h[1] = h[1] + b >>> 0;
+  h[2] = h[2] + c >>> 0;
+  h[3] = h[3] + d >>> 0;
+  h[4] = h[4] + e >>> 0;
+}
+function sha1(data) {
+  const h = new Uint32Array([1732584193, 4023233417, 2562383102, 271733878, 3285377520]);
+  const view = pad64(data);
+  for (let offset = 0; offset < view.byteLength; offset += 64) compress2(h, view, offset);
+  return wordsOut(h);
+}
+
+// src/digest/sha512.ts
+var K2 = new Uint32Array([
+  1116352408,
+  3609767458,
+  1899447441,
+  602891725,
+  3049323471,
+  3964484399,
+  3921009573,
+  2173295548,
+  961987163,
+  4081628472,
+  1508970993,
+  3053834265,
+  2453635748,
+  2937671579,
+  2870763221,
+  3664609560,
+  3624381080,
+  2734883394,
+  310598401,
+  1164996542,
+  607225278,
+  1323610764,
+  1426881987,
+  3590304994,
+  1925078388,
+  4068182383,
+  2162078206,
+  991336113,
+  2614888103,
+  633803317,
+  3248222580,
+  3479774868,
+  3835390401,
+  2666613458,
+  4022224774,
+  944711139,
+  264347078,
+  2341262773,
+  604807628,
+  2007800933,
+  770255983,
+  1495990901,
+  1249150122,
+  1856431235,
+  1555081692,
+  3175218132,
+  1996064986,
+  2198950837,
+  2554220882,
+  3999719339,
+  2821834349,
+  766784016,
+  2952996808,
+  2566594879,
+  3210313671,
+  3203337956,
+  3336571891,
+  1034457026,
+  3584528711,
+  2466948901,
+  113926993,
+  3758326383,
+  338241895,
+  168717936,
+  666307205,
+  1188179964,
+  773529912,
+  1546045734,
+  1294757372,
+  1522805485,
+  1396182291,
+  2643833823,
+  1695183700,
+  2343527390,
+  1986661051,
+  1014477480,
+  2177026350,
+  1206759142,
+  2456956037,
+  344077627,
+  2730485921,
+  1290863460,
+  2820302411,
+  3158454273,
+  3259730800,
+  3505952657,
+  3345764771,
+  106217008,
+  3516065817,
+  3606008344,
+  3600352804,
+  1432725776,
+  4094571909,
+  1467031594,
+  275423344,
+  851169720,
+  430227734,
+  3100823752,
+  506948616,
+  1363258195,
+  659060556,
+  3750685593,
+  883997877,
+  3785050280,
+  958139571,
+  3318307427,
+  1322822218,
+  3812723403,
+  1537002063,
+  2003034995,
+  1747873779,
+  3602036899,
+  1955562222,
+  1575990012,
+  2024104815,
+  1125592928,
+  2227730452,
+  2716904306,
+  2361852424,
+  442776044,
+  2428436474,
+  593698344,
+  2756734187,
+  3733110249,
+  3204031479,
+  2999351573,
+  3329325298,
+  3815920427,
+  3391569614,
+  3928383900,
+  3515267271,
+  566280711,
+  3940187606,
+  3454069534,
+  4118630271,
+  4000239992,
+  116418474,
+  1914138554,
+  174292421,
+  2731055270,
+  289380356,
+  3203993006,
+  460393269,
+  320620315,
+  685471733,
+  587496836,
+  852142971,
+  1086792851,
+  1017036298,
+  365543100,
+  1126000580,
+  2618297676,
+  1288033470,
+  3409855158,
+  1501505948,
+  4234509866,
+  1607167915,
+  987167468,
+  1816402316,
+  1246189591
+]);
+var IV_512 = [
+  1779033703,
+  4089235720,
+  3144134277,
+  2227873595,
+  1013904242,
+  4271175723,
+  2773480762,
+  1595750129,
+  1359893119,
+  2917565137,
+  2600822924,
+  725511199,
+  528734635,
+  4215389547,
+  1541459225,
+  327033209
+];
+var IV_384 = [
+  3418070365,
+  3238371032,
+  1654270250,
+  914150663,
+  2438529370,
+  812702999,
+  355462360,
+  4144912697,
+  1731405415,
+  4290775857,
+  2394180231,
+  1750603025,
+  3675008525,
+  1694076839,
+  1203062813,
+  3204075428
+];
+var W3 = new Uint32Array(160);
+function compress3(h, data, offset) {
+  for (let i = 0; i < 32; i++) {
+    const o = offset + i * 4;
+    W3[i] = (data[o] << 24 | data[o + 1] << 16 | data[o + 2] << 8 | data[o + 3]) >>> 0;
+  }
+  for (let i = 16; i < 80; i++) {
+    const xh = W3[(i - 15) * 2];
+    const xl = W3[(i - 15) * 2 + 1];
+    const s0h = (xh >>> 1 | xl << 31) ^ (xh >>> 8 | xl << 24) ^ xh >>> 7;
+    const s0l = (xl >>> 1 | xh << 31) ^ (xl >>> 8 | xh << 24) ^ (xl >>> 7 | xh << 25);
+    const yh = W3[(i - 2) * 2];
+    const yl = W3[(i - 2) * 2 + 1];
+    const s1h = (yh >>> 19 | yl << 13) ^ (yl >>> 29 | yh << 3) ^ yh >>> 6;
+    const s1l = (yl >>> 19 | yh << 13) ^ (yh >>> 29 | yl << 3) ^ (yl >>> 6 | yh << 26);
+    let lo = (s0l >>> 0) + (s1l >>> 0) + W3[(i - 7) * 2 + 1] + W3[(i - 16) * 2 + 1];
+    const hi = s0h + s1h + W3[(i - 7) * 2] + W3[(i - 16) * 2] + Math.floor(lo / 4294967296);
+    lo >>>= 0;
+    W3[i * 2] = hi >>> 0;
+    W3[i * 2 + 1] = lo;
+  }
+  let ah = h[0], al = h[1], bh = h[2], bl = h[3], ch = h[4], cl = h[5], dh = h[6], dl = h[7];
+  let eh = h[8], el = h[9], fh = h[10], fl = h[11], gh = h[12], gl = h[13], hh = h[14], hl = h[15];
+  for (let i = 0; i < 80; i++) {
+    const S1h = (eh >>> 14 | el << 18) ^ (eh >>> 18 | el << 14) ^ (el >>> 9 | eh << 23);
+    const S1l = (el >>> 14 | eh << 18) ^ (el >>> 18 | eh << 14) ^ (eh >>> 9 | el << 23);
+    const chh = eh & fh ^ ~eh & gh;
+    const chl = el & fl ^ ~el & gl;
+    let t1l = (hl >>> 0) + (S1l >>> 0) + (chl >>> 0) + K2[i * 2 + 1] + W3[i * 2 + 1];
+    const t1h = hh + S1h + chh + K2[i * 2] + W3[i * 2] + Math.floor(t1l / 4294967296);
+    t1l >>>= 0;
+    const S0h = (ah >>> 28 | al << 4) ^ (al >>> 2 | ah << 30) ^ (al >>> 7 | ah << 25);
+    const S0l = (al >>> 28 | ah << 4) ^ (ah >>> 2 | al << 30) ^ (ah >>> 7 | al << 25);
+    const majh = ah & bh ^ ah & ch ^ bh & ch;
+    const majl = al & bl ^ al & cl ^ bl & cl;
+    let t2l = (S0l >>> 0) + (majl >>> 0);
+    const t2h = S0h + majh + Math.floor(t2l / 4294967296);
+    t2l >>>= 0;
+    hh = gh;
+    hl = gl;
+    gh = fh;
+    gl = fl;
+    fh = eh;
+    fl = el;
+    let nl = (dl >>> 0) + t1l;
+    eh = dh + t1h + Math.floor(nl / 4294967296) >>> 0;
+    el = nl >>> 0;
+    dh = ch;
+    dl = cl;
+    ch = bh;
+    cl = bl;
+    bh = ah;
+    bl = al;
+    nl = t1l + t2l;
+    ah = t1h + t2h + Math.floor(nl / 4294967296) >>> 0;
+    al = nl >>> 0;
+  }
+  const add = (i, xh, xl) => {
+    const lo = (h[i + 1] >>> 0) + (xl >>> 0);
+    h[i] = h[i] + xh + Math.floor(lo / 4294967296) >>> 0;
+    h[i + 1] = lo >>> 0;
+  };
+  add(0, ah, al);
+  add(2, bh, bl);
+  add(4, ch, cl);
+  add(6, dh, dl);
+  add(8, eh, el);
+  add(10, fh, fl);
+  add(12, gh, gl);
+  add(14, hh, hl);
+}
+function digest64(data, iv, bytes) {
+  const h = new Uint32Array(iv);
+  const padded = new Uint8Array(Math.ceil((data.length + 17) / 128) * 128);
+  padded.set(data);
+  padded[data.length] = 128;
+  const bits = data.length * 8;
+  const view = new DataView(padded.buffer);
+  view.setUint32(padded.length - 8, Math.floor(bits / 4294967296));
+  view.setUint32(padded.length - 4, bits >>> 0);
+  for (let offset = 0; offset < padded.length; offset += 128) compress3(h, padded, offset);
+  const out = new Uint8Array(bytes);
+  const outView = new DataView(out.buffer);
+  for (let i = 0; i < bytes / 4; i++) outView.setUint32(i * 4, h[i]);
+  return out;
+}
+var sha512 = (data) => digest64(data, IV_512, 64);
+var sha384 = (data) => digest64(data, IV_384, 48);
+
+// src/digest/digest.ts
+var DIGESTS = {
+  "SHA-1": sha1,
+  "SHA-256": sha256,
+  "SHA-384": sha384,
+  "SHA-512": sha512
+};
+function digestFunction(name) {
+  const canonical = normalizeDigestAlgorithmName(name);
+  return canonical && canonical in DIGESTS ? DIGESTS[canonical] : void 0;
+}
+function digestSync(name, data) {
+  return digestFunction(name)?.(data);
+}
+
+// src/digest/password-hash.ts
+var MAX_SPIN_COUNT = 1e7;
+var validSpinCount = (spinCount) => spinCount === void 0 || Number.isInteger(spinCount) && spinCount >= 0 && spinCount <= MAX_SPIN_COUNT;
+function spin(password, salt, spinCount, digest) {
+  const input = new Uint8Array(salt.length + password.length * 2);
+  input.set(salt);
+  for (let i = 0; i < password.length; i++) {
+    const code = password.charCodeAt(i);
+    input[salt.length + i * 2] = code & 255;
+    input[salt.length + i * 2 + 1] = code >> 8;
+  }
+  let value = digest(input);
+  const buffer = new Uint8Array(value.length + 4);
+  const view = new DataView(buffer.buffer);
+  for (let i = 0; i < spinCount; i++) {
+    buffer.set(value);
+    view.setUint32(value.length, i, true);
+    value = digest(buffer);
+  }
+  return value;
+}
+function hashBytes(password, { algorithmName, saltValue, spinCount }) {
+  const digest = digestFunction(algorithmName);
+  const salt = decodeBase64(saltValue);
+  if (!digest || !salt || !validSpinCount(spinCount)) return void 0;
+  return spin(password, salt, spinCount ?? 0, digest);
+}
+function hashPassword(password, options) {
+  const bytes = hashBytes(password, options);
+  return bytes && encodeBase64(bytes);
+}
+function verifyPasswordHash(password, hash) {
+  if (!digestFunction(hash.algorithmName)) return void 0;
+  const expected = decodeBase64(hash.hashValue);
+  const actual = expected && hashBytes(password, hash);
+  if (!expected || !actual || actual.length !== expected.length) return false;
+  let difference = 0;
+  for (let i = 0; i < actual.length; i++) difference |= actual[i] ^ expected[i];
+  return difference === 0;
+}
+
+exports.MAX_SPIN_COUNT = MAX_SPIN_COUNT;
+exports.decodeBase64 = decodeBase64;
+exports.digestFunction = digestFunction;
+exports.digestSync = digestSync;
+exports.encodeBase64 = encodeBase64;
+exports.hashPassword = hashPassword;
+exports.normalizeDigestAlgorithmName = normalizeDigestAlgorithmName;
+exports.sha1 = sha1;
+exports.sha256 = sha256;
+exports.sha384 = sha384;
+exports.sha512 = sha512;
+exports.verifyPasswordHash = verifyPasswordHash;

package/dist/digest/index.d.ts

@@ -0,0 +1,8 @@
+export { normalizeDigestAlgorithmName, type DigestAlgorithmName, type SupportedDigestName, } from './algorithm-names.js';
+export { decodeBase64, encodeBase64 } from './base64.js';
+export { digestFunction, digestSync, type DigestFunction } from './digest.js';
+export { MAX_SPIN_COUNT, hashPassword, verifyPasswordHash, type PasswordHash, } from './password-hash.js';
+export { sha1 } from './sha1.js';
+export { sha256 } from './sha256.js';
+export { sha384, sha512 } from './sha512.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/digest/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/digest/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACN,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EACN,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,KAAK,YAAY,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC"}