pptx-viewer-core 1.2.5 → 1.2.6

package/dist/index.mjs

@@ -42073,7 +42073,7 @@ var PptxHandlerRuntime57 = class extends PptxHandlerRuntime56 {
     for (const [, target] of layoutRels.entries()) {
       if (target.includes("slideMaster")) {
         const layoutDir = layoutPath.substring(0, layoutPath.lastIndexOf("/") + 1);
-        const masterPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(layoutDir, target) : `ppt/${target.replace("../", "")}`;
+        const masterPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(layoutDir, target) : `ppt/${target.replace(/\.\.\//g, "")}`;
         try {
           const masterXmlStr = await this.zip.file(masterPath)?.async("string");
           if (masterXmlStr) {
@@ -42097,7 +42097,7 @@ var PptxHandlerRuntime57 = class extends PptxHandlerRuntime56 {
     for (const [, target] of slideRels.entries()) {
       if (target.includes("slideLayout")) {
         const slideDir = slidePath.substring(0, slidePath.lastIndexOf("/") + 1);
-        const layoutPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(slideDir, target) : `ppt/${target.replace("../", "")}`;
+        const layoutPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(slideDir, target) : `ppt/${target.replace(/\.\.\//g, "")}`;
         try {
           const layoutXmlStr = await this.zip.file(layoutPath)?.async("string");
           if (layoutXmlStr) {
@@ -42125,7 +42125,7 @@ var PptxHandlerRuntime57 = class extends PptxHandlerRuntime56 {
     for (const [, target] of slideRels.entries()) {
       if (target.includes("slideLayout")) {
         const slideDir = slidePath.substring(0, slidePath.lastIndexOf("/") + 1);
-        const layoutPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(slideDir, target) : `ppt/${target.replace("../", "")}`;
+        const layoutPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(slideDir, target) : `ppt/${target.replace(/\.\.\//g, "")}`;
         try {
           const layoutXmlStr = await this.zip.file(layoutPath)?.async("string");
           if (layoutXmlStr) {
@@ -42154,7 +42154,7 @@ var PptxHandlerRuntime57 = class extends PptxHandlerRuntime56 {
     for (const [, target] of layoutRels.entries()) {
       if (target.includes("slideMaster")) {
         const layoutDir = layoutPath.substring(0, layoutPath.lastIndexOf("/") + 1);
-        const masterPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(layoutDir, target) : `ppt/${target.replace("../", "")}`;
+        const masterPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(layoutDir, target) : `ppt/${target.replace(/\.\.\//g, "")}`;
         try {
           const masterXmlStr = await this.zip.file(masterPath)?.async("string");
           if (masterXmlStr) {
@@ -42183,7 +42183,7 @@ var PptxHandlerRuntime58 = class extends PptxHandlerRuntime57 {
     for (const [, target] of slideRels.entries()) {
       if (target.includes("slideLayout")) {
         const slideDir = slidePath.substring(0, slidePath.lastIndexOf("/") + 1);
-        const layoutPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(slideDir, target) : `ppt/${target.replace("../", "")}`;
+        const layoutPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(slideDir, target) : `ppt/${target.replace(/\.\.\//g, "")}`;
         try {
           const layoutXmlStr = await this.zip.file(layoutPath)?.async("string");
           if (layoutXmlStr) {
@@ -42212,7 +42212,7 @@ var PptxHandlerRuntime58 = class extends PptxHandlerRuntime57 {
     for (const [, target] of layoutRels.entries()) {
       if (target.includes("slideMaster")) {
         const layoutDir = layoutPath.substring(0, layoutPath.lastIndexOf("/") + 1);
-        const masterPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(layoutDir, target) : `ppt/${target.replace("../", "")}`;
+        const masterPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(layoutDir, target) : `ppt/${target.replace(/\.\.\//g, "")}`;
         try {
           const masterXmlStr = await this.zip.file(masterPath)?.async("string");
           if (masterXmlStr) {
@@ -42237,7 +42237,7 @@ var PptxHandlerRuntime58 = class extends PptxHandlerRuntime57 {
     for (const [, target] of slideRels.entries()) {
       if (target.includes("slideLayout")) {
         const slideDir = slidePath.substring(0, slidePath.lastIndexOf("/") + 1);
-        return target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(slideDir, target) : `ppt/${target.replace("../", "")}`;
+        return target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(slideDir, target) : `ppt/${target.replace(/\.\.\//g, "")}`;
       }
     }
     return void 0;
@@ -42253,7 +42253,7 @@ var PptxHandlerRuntime58 = class extends PptxHandlerRuntime57 {
     for (const [, target] of layoutRels.entries()) {
       if (target.includes("slideMaster")) {
         const layoutDir = layoutPath.substring(0, layoutPath.lastIndexOf("/") + 1);
-        return target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(layoutDir, target) : `ppt/${target.replace("../", "")}`;
+        return target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(layoutDir, target) : `ppt/${target.replace(/\.\.\//g, "")}`;
       }
     }
     return void 0;
@@ -42897,7 +42897,7 @@ var PptxHandlerRuntime61 = class extends PptxHandlerRuntime60 {
     for (const [, target] of layoutRels.entries()) {
       if (target.includes("slideMaster")) {
         const layoutDir = layoutPath.substring(0, layoutPath.lastIndexOf("/") + 1);
-        masterPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(layoutDir, target) : `ppt/${target.replace("../", "")}`;
+        masterPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(layoutDir, target) : `ppt/${target.replace(/\.\.\//g, "")}`;
         break;
       }
     }
@@ -43031,7 +43031,7 @@ var PptxHandlerRuntime62 = class extends PptxHandlerRuntime61 {
     for (const [, target] of slideRels.entries()) {
       if (target.includes("slideLayout")) {
         const slideDir = slidePath.substring(0, slidePath.lastIndexOf("/") + 1);
-        layoutPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(slideDir, target) : `ppt/${target.replace("../", "")}`;
+        layoutPath = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(slideDir, target) : `ppt/${target.replace(/\.\.\//g, "")}`;
         break;
       }
     }
@@ -46783,7 +46783,7 @@ var PptxHandlerRuntime78 = class extends PptxHandlerRuntime77 {
           }
           return stack.join("/");
         }
-        return `ppt/${target.replace("../", "")}`;
+        return `ppt/${target.replace(/\.\.\//g, "")}`;
       }
     }
     return void 0;
@@ -47343,7 +47343,7 @@ var PptxHandlerRuntime80 = class extends PptxHandlerRuntime79 {
     for (const [, target] of layoutRels.entries()) {
       if (target.includes("slideMaster")) {
         const layoutDir = layoutPath.substring(0, layoutPath.lastIndexOf("/") + 1);
-        return target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(layoutDir, target) : `ppt/${target.replace("../", "")}`;
+        return target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(layoutDir, target) : `ppt/${target.replace(/\.\.\//g, "")}`;
       }
     }
     return void 0;
@@ -47412,7 +47412,7 @@ var PptxHandlerRuntime80 = class extends PptxHandlerRuntime79 {
     for (const [, target] of masterRels.entries()) {
       if (target.includes("slideLayout")) {
         const masterDir = masterPath.substring(0, masterPath.lastIndexOf("/") + 1);
-        const resolved = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(masterDir, target) : `ppt/${target.replace("../", "")}`;
+        const resolved = target.startsWith("/") ? target.substring(1) : target.startsWith("..") ? this.resolvePath(masterDir, target) : `ppt/${target.replace(/\.\.\//g, "")}`;
         masterLayoutPaths.add(resolved);
       }
     }
@@ -56299,7 +56299,7 @@ function getShapeClipPathFromPreset(shapeType, width, height, adjustments) {
   if (!result || result.svgPath === "") {
     return void 0;
   }
-  const escaped = result.svgPath.replace(/'/g, "\\'");
+  const escaped = result.svgPath.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
   return `path('${escaped}')`;
 }
 function getRoundRectRadiusPx(element) {
@@ -58230,7 +58230,7 @@ function moveSlidesToSection(data, slideIndices, targetSectionId) {
 }
 
 // src/core/builders/sdk/template-engine-helpers.ts
-var PLACEHOLDER_RE = /\{\{([^}]+)\}\}/g;
+var PLACEHOLDER_RE = /\{\{([^{}]+)\}\}/g;
 var EACH_OPEN_RE = /^\s*#each\s+([\w.]+)\s*$/;
 var EACH_CLOSE_RE = /^\s*\/each\s*$/;
 var IF_OPEN_RE = /^\s*#if\s+(!?[\w.]+)\s*$/;
@@ -58294,7 +58294,7 @@ function processInlineConditionals(text, data) {
   let safety = 0;
   const MAX_ITERATIONS = 100;
   while (safety++ < MAX_ITERATIONS) {
-    const ifOpenPattern = /\{\{\s*#if\s+([^}]+)\s*\}\}((?:(?!\{\{\s*#if\s)(?!\{\{\s*\/if\s*\}\}).)*?)\{\{\s*\/if\s*\}\}/s;
+    const ifOpenPattern = /\{\{\s*#if\s+(!?[\w.]+)\s*\}\}((?:(?!\{\{\s*#if\s)(?!\{\{\s*\/if\s*\}\}).)*?)\{\{\s*\/if\s*\}\}/s;
     const match = ifOpenPattern.exec(result);
     if (!match) {
       break;
@@ -58306,6 +58306,8 @@ function processInlineConditionals(text, data) {
   }
   return result;
 }
+
+// src/core/builders/sdk/template-engine-segments.ts
 function replaceTokensAcrossSegments(segments, data) {
   if (segments.length === 0) {
     return;
@@ -58326,7 +58328,7 @@ function replaceTokensAcrossSegments(segments, data) {
   const fullText = textParts.join("");
   const afterConditionals = processInlineConditionals(fullText, data);
   if (afterConditionals !== fullText) {
-    redistributeText(segments, segmentMap, fullText, afterConditionals);
+    redistributeText(segments, fullText, afterConditionals);
     replaceTokensAcrossSegments(segments, data);
     return;
   }
@@ -58384,7 +58386,7 @@ function replaceTokensAcrossSegments(segments, data) {
     }
   }
 }
-function redistributeText(segments, _segmentMap, _originalFull, newFull, _data) {
+function redistributeText(segments, _originalFull, newFull) {
   let placed = false;
   for (const seg of segments) {
     if (seg.isParagraphBreak) {
@@ -58626,15 +58628,81 @@ async function mailMerge(handler, data, records) {
 }
 
 // src/core/builders/sdk/text-operations.ts
-function toGlobalRegex(search) {
+function toSearchRegex(search) {
   if (typeof search === "string") {
     const escaped = search.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
     return new RegExp(escaped, "g");
   }
-  if (search.global) {
-    return search;
+  return search;
+}
+function execAll(regex, text) {
+  const results = [];
+  if (regex.global || regex.sticky) {
+    regex.lastIndex = 0;
+    let match;
+    while ((match = regex.exec(text)) !== null) {
+      results.push(match);
+      if (match[0].length === 0) {
+        regex.lastIndex += 1;
+      }
+    }
+    return results;
+  }
+  let offset = 0;
+  let remaining = text;
+  while (remaining.length > 0) {
+    const match = regex.exec(remaining);
+    if (!match) {
+      break;
+    }
+    const adjusted = [...match];
+    adjusted.index = offset + match.index;
+    adjusted.input = text;
+    adjusted.groups = match.groups;
+    results.push(adjusted);
+    const advance = match.index + (match[0].length || 1);
+    offset += advance;
+    remaining = remaining.slice(advance);
   }
-  return new RegExp(search.source, `${search.flags}g`);
+  return results;
+}
+function expandReplacement(replacement, match, fullText) {
+  return replacement.replace(
+    /\$(\$|&|`|'|<([^>]+)>|\d{1,2})/g,
+    (whole, token, groupName) => {
+      if (token === "$") {
+        return "$";
+      }
+      if (token === "&") {
+        return match[0];
+      }
+      if (token === "`") {
+        return fullText.slice(0, match.index);
+      }
+      if (token === "'") {
+        return fullText.slice(match.index + match[0].length);
+      }
+      if (groupName !== void 0) {
+        return match.groups?.[groupName] ?? "";
+      }
+      const groupIndex = Number(token);
+      return groupIndex >= 1 && groupIndex < match.length ? match[groupIndex] ?? "" : whole;
+    }
+  );
+}
+function applyReplacements(text, matches, replacement) {
+  if (matches.length === 0) {
+    return text;
+  }
+  let result = "";
+  let cursor = 0;
+  for (const match of matches) {
+    result += text.slice(cursor, match.index);
+    result += expandReplacement(replacement, match, text);
+    cursor = match.index + match[0].length;
+  }
+  result += text.slice(cursor);
+  return result;
 }
 function collectElements(elements) {
   const result = [];
@@ -58650,7 +58718,7 @@ function findText(slides, search) {
   if (typeof search === "string" && search === "") {
     return [];
   }
-  const regex = toGlobalRegex(search);
+  const regex = toSearchRegex(search);
   const results = [];
   slides.forEach((slide, slideIndex) => {
     const allElements = collectElements(slide.elements ?? []);
@@ -58661,9 +58729,7 @@ function findText(slides, search) {
       const segments = element.textSegments ?? [];
       segments.forEach((seg, segIndex) => {
         const text = seg.text ?? "";
-        regex.lastIndex = 0;
-        let match;
-        while ((match = regex.exec(text)) !== null) {
+        for (const match of execAll(regex, text)) {
           results.push({
             slideIndex,
             elementId: element.id,
@@ -58671,9 +58737,6 @@ function findText(slides, search) {
             text: match[0],
             matchIndex: match.index
           });
-          if (match[0].length === 0) {
-            regex.lastIndex += 1;
-          }
         }
       });
     }
@@ -58684,7 +58747,7 @@ function replaceTextInSlide(slide, search, replacement) {
   if (typeof search === "string" && search === "") {
     return 0;
   }
-  const regex = toGlobalRegex(search);
+  const regex = toSearchRegex(search);
   let totalReplacements = 0;
   function processElements2(elements) {
     for (const element of elements) {
@@ -58696,23 +58759,12 @@ function replaceTextInSlide(slide, search, replacement) {
       }
       const segments = element.textSegments ?? [];
       let elementTextChanged = false;
-      for (let segIdx = 0; segIdx < segments.length; segIdx++) {
-        const seg = segments[segIdx];
+      for (const seg of segments) {
         const originalText = seg.text ?? "";
-        regex.lastIndex = 0;
-        let matchCount = 0;
-        let m;
-        const countRegex = toGlobalRegex(search);
-        while ((m = countRegex.exec(originalText)) !== null) {
-          matchCount++;
-          if (m[0].length === 0) {
-            countRegex.lastIndex += 1;
-          }
-        }
-        if (matchCount > 0) {
-          const newText = originalText.replace(toGlobalRegex(search), replacement);
-          seg.text = newText;
-          totalReplacements += matchCount;
+        const matches = execAll(regex, originalText);
+        if (matches.length > 0) {
+          seg.text = applyReplacements(originalText, matches, replacement);
+          totalReplacements += matches.length;
           elementTextChanged = true;
         }
       }
@@ -62676,7 +62728,7 @@ ${htmlRows.join("\n")}
     return parts.join("").trim();
   }
   escapeMarkdownTableCell(text) {
-    return text.replace(/\|/g, "\\|").replace(/\n+/g, " ").trim();
+    return text.replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\n+/g, " ").trim();
   }
 };
 

package/dist/signature-node/index.d.mts

@@ -1,4 +1,4 @@
-import { p as SignatureCertificateInfo, L as LoadedSigningMaterial, C as CertificateRevocationStatus, T as TimestampAuthorityStatus, r as SignatureValidationPolicy, k as ParsedReferenceTransform, R as ReferenceTransformResult, q as SignatureReferenceCheck, l as SignOptions, m as SignResult, d as DigitalSignatureReport } from '../signature-inspection-status-BCUpfCQh.mjs';
+import { p as SignatureCertificateInfo, L as LoadedSigningMaterial, T as TimestampAuthorityStatus, C as CertificateRevocationStatus, r as SignatureValidationPolicy, k as ParsedReferenceTransform, R as ReferenceTransformResult, q as SignatureReferenceCheck, l as SignOptions, m as SignResult, d as DigitalSignatureReport } from '../signature-inspection-status-BCUpfCQh.mjs';
 export { D as DIGEST_ALGORITHM_TO_HASH, a as DIGEST_ALGORITHM_TO_WEB_CRYPTO, b as DIGITAL_SIGNATURE_ORIGIN_REL_TYPE, c as DIGITAL_SIGNATURE_REL_TYPE, e as DigitalSignatureVerificationStatus, E as ENTERPRISE_FAIL_ON_REVOCATION_UNKNOWN_ENV, f as ENTERPRISE_REQUIRE_REVOCATION_ENV, g as ENTERPRISE_REQUIRE_TIMESTAMP_ENV, h as ENTERPRISE_TRUST_ROOTS_FILE_ENV, i as ENTERPRISE_TRUST_ROOTS_PEM_ENV, O as OPC_RELATIONSHIP_TRANSFORM, j as OfficeSignatureReference, P as PPTX_VIEWER_MANIFEST_NS, S as SUPPORTED_XML_CANON_TRANSFORMS, n as SignatureDetail, o as SignatureDetailStatus, X as XMLDSIG_NS, s as XML_TRANSFORM_ENVELOPED_SIGNATURE, t as computeDetailStatus, u as computeDigestBase64WebCrypto, v as computeVerificationStatus, w as escapeXmlAttr, x as escapeXmlText, y as extractAllTagText, z as extractFirstTagText, A as extractTagAttribute, B as isValidBase64, F as normalizePartPath, G as resolveReferenceUriToPart } from '../signature-inspection-status-BCUpfCQh.mjs';
 import JSZip from 'jszip';
 
@@ -88,16 +88,30 @@ declare function loadSigningMaterialFromBuffer(certificateBuffer: Uint8Array, ce
 declare function pemCertificateToBase64(pem: string): string;
 
 /**
- * PKI validation utilities — certificate revocation (OCSP) and
+ * PKI validation utilities — PEM/fingerprint certificate helpers and
  * timestamp-authority evaluation for OOXML digital signatures.
  *
- * Node-only — depends on `node:crypto`, `node:http`, `node:https`, and `node-forge`.
+ * OCSP revocation checking lives in `./ocsp.ts`.
+ *
+ * Node-only — depends on `node:crypto` and `node-forge`.
  */
 
 /** Wrap a Base64-encoded DER certificate in PEM armour. */
 declare function certPemFromBase64(certBase64: string): string | undefined;
 /** SHA-256 fingerprint of a PEM certificate (lowercase hex, no colons). */
 declare function certFingerprintSha256(certPem: string): string | undefined;
+declare function evaluateTimestampAuthority(signatureXml: string): Promise<{
+    status: TimestampAuthorityStatus;
+    error?: string;
+}>;
+
+/**
+ * OCSP (Online Certificate Status Protocol) revocation checking for OOXML
+ * digital signature certificates.
+ *
+ * Node-only — depends on `node:crypto`, `node:http`, `node:https`, and `node-forge`.
+ */
+
 declare function extractOcspUrls(certPem: string): string[];
 declare function buildOcspRequestDer(leafPem: string, issuerPem: string): Buffer | undefined;
 declare function parseOcspResponseStatus(data: Buffer): CertificateRevocationStatus;
@@ -107,10 +121,6 @@ declare function evaluateCertificateRevocation(leafCertPem: string, issuerCertPe
     checkedOcspUrls: string[];
     checkedCrlUrls: string[];
 }>;
-declare function evaluateTimestampAuthority(signatureXml: string): Promise<{
-    status: TimestampAuthorityStatus;
-    error?: string;
-}>;
 
 /**
  * Environment-based configuration for digital signature validation.

package/dist/signature-node/index.d.ts

@@ -1,4 +1,4 @@
-import { p as SignatureCertificateInfo, L as LoadedSigningMaterial, C as CertificateRevocationStatus, T as TimestampAuthorityStatus, r as SignatureValidationPolicy, k as ParsedReferenceTransform, R as ReferenceTransformResult, q as SignatureReferenceCheck, l as SignOptions, m as SignResult, d as DigitalSignatureReport } from '../signature-inspection-status-BCUpfCQh.js';
+import { p as SignatureCertificateInfo, L as LoadedSigningMaterial, T as TimestampAuthorityStatus, C as CertificateRevocationStatus, r as SignatureValidationPolicy, k as ParsedReferenceTransform, R as ReferenceTransformResult, q as SignatureReferenceCheck, l as SignOptions, m as SignResult, d as DigitalSignatureReport } from '../signature-inspection-status-BCUpfCQh.js';
 export { D as DIGEST_ALGORITHM_TO_HASH, a as DIGEST_ALGORITHM_TO_WEB_CRYPTO, b as DIGITAL_SIGNATURE_ORIGIN_REL_TYPE, c as DIGITAL_SIGNATURE_REL_TYPE, e as DigitalSignatureVerificationStatus, E as ENTERPRISE_FAIL_ON_REVOCATION_UNKNOWN_ENV, f as ENTERPRISE_REQUIRE_REVOCATION_ENV, g as ENTERPRISE_REQUIRE_TIMESTAMP_ENV, h as ENTERPRISE_TRUST_ROOTS_FILE_ENV, i as ENTERPRISE_TRUST_ROOTS_PEM_ENV, O as OPC_RELATIONSHIP_TRANSFORM, j as OfficeSignatureReference, P as PPTX_VIEWER_MANIFEST_NS, S as SUPPORTED_XML_CANON_TRANSFORMS, n as SignatureDetail, o as SignatureDetailStatus, X as XMLDSIG_NS, s as XML_TRANSFORM_ENVELOPED_SIGNATURE, t as computeDetailStatus, u as computeDigestBase64WebCrypto, v as computeVerificationStatus, w as escapeXmlAttr, x as escapeXmlText, y as extractAllTagText, z as extractFirstTagText, A as extractTagAttribute, B as isValidBase64, F as normalizePartPath, G as resolveReferenceUriToPart } from '../signature-inspection-status-BCUpfCQh.js';
 import JSZip from 'jszip';
 
@@ -88,16 +88,30 @@ declare function loadSigningMaterialFromBuffer(certificateBuffer: Uint8Array, ce
 declare function pemCertificateToBase64(pem: string): string;
 
 /**
- * PKI validation utilities — certificate revocation (OCSP) and
+ * PKI validation utilities — PEM/fingerprint certificate helpers and
  * timestamp-authority evaluation for OOXML digital signatures.
  *
- * Node-only — depends on `node:crypto`, `node:http`, `node:https`, and `node-forge`.
+ * OCSP revocation checking lives in `./ocsp.ts`.
+ *
+ * Node-only — depends on `node:crypto` and `node-forge`.
  */
 
 /** Wrap a Base64-encoded DER certificate in PEM armour. */
 declare function certPemFromBase64(certBase64: string): string | undefined;
 /** SHA-256 fingerprint of a PEM certificate (lowercase hex, no colons). */
 declare function certFingerprintSha256(certPem: string): string | undefined;
+declare function evaluateTimestampAuthority(signatureXml: string): Promise<{
+    status: TimestampAuthorityStatus;
+    error?: string;
+}>;
+
+/**
+ * OCSP (Online Certificate Status Protocol) revocation checking for OOXML
+ * digital signature certificates.
+ *
+ * Node-only — depends on `node:crypto`, `node:http`, `node:https`, and `node-forge`.
+ */
+
 declare function extractOcspUrls(certPem: string): string[];
 declare function buildOcspRequestDer(leafPem: string, issuerPem: string): Buffer | undefined;
 declare function parseOcspResponseStatus(data: Buffer): CertificateRevocationStatus;
@@ -107,10 +121,6 @@ declare function evaluateCertificateRevocation(leafCertPem: string, issuerCertPe
     checkedOcspUrls: string[];
     checkedCrlUrls: string[];
 }>;
-declare function evaluateTimestampAuthority(signatureXml: string): Promise<{
-    status: TimestampAuthorityStatus;
-    error?: string;
-}>;
 
 /**
  * Environment-based configuration for digital signature validation.