xls-codec 4.9.0 → 4.11.0

package/dist/index.d.cts

@@ -6,7 +6,7 @@ import { BIFF8_VERSION, BOF_TYPE_CHART, BOF_TYPE_MACRO, BOF_TYPE_WORKBOOK, BOF_T
 import { concatRecords, writeRecord } from "./biff/record-writer.cjs";
 import { i as readRecords, n as BiffRecord, r as HEADER_SIZE, t as BiffFormatError } from "./records-G82UEVq8.cjs";
 import { decodeRkNumber } from "./biff/rk.cjs";
-import { writeRichExtendedString, writeShortXLUnicodeString, writeXLUnicodeString } from "./biff/string-writer.cjs";
+import { writeRichExtendedString, writeShortXLUnicodeString, writeXLUnicodeString, writeXLUnicodeStringNoCch } from "./biff/string-writer.cjs";
 import { readRichExtendedString, readShortXLUnicodeString, readXLUnicodeString, readXLUnicodeStringNoCch } from "./biff/strings.cjs";
 import { a as splitSubstreams, i as recordByteLength, n as Substream, r as groupRecords, t as RecordGroup } from "./substreams-XDNgDvRJ.cjs";
 import { BiffWriteError } from "./biff/write-errors.cjs";
@@ -22,4 +22,4 @@ import { RawCell, RawCellValue, RawColumn, RawPrintSettings, RawRange, RawRow, R
 import { SheetWriteContext, buildWorksheetSubstream } from "./workbook/sheet-writer.cjs";
 import { writeXls, writeXlsContent } from "./write.cjs";
 export * from "excel-number-format";
-export { BIFF8_VERSION, BOF_TYPE_CHART, BOF_TYPE_MACRO, BOF_TYPE_WORKBOOK, BOF_TYPE_WORKSHEET, BiffFormatError, BiffRecord, BiffWriteError, BlockCursor, CellFormat, CellXfPlanEntry, DEFAULT_COLUMN_WIDTH_CHARS, DEFAULT_ROW_HEIGHT_PT, GENERAL_CELL_XF_INDEX, HEADER_SIZE, MAX_RECORD_DATA_SIZE, RECORD_AI, RECORD_ARRAY, RECORD_BLANK, RECORD_BOF, RECORD_BOOLERR, RECORD_BOTTOMMARGIN, RECORD_BOUNDSHEET8, RECORD_CALCCOUNT, RECORD_CALCDELTA, RECORD_CALCITER, RECORD_CALCREFMODE, RECORD_CALCSAVERECALC, RECORD_CF, RECORD_CF12, RECORD_CFEX, RECORD_COLINFO, RECORD_CONDFMT, RECORD_CONDFMT12, RECORD_CONTINUE, RECORD_CONTINUEFRT12, RECORD_DATE1904, RECORD_DEFAULTROWHEIGHT, RECORD_DEFCOLWIDTH, RECORD_DIMENSIONS, RECORD_DV, RECORD_DVAL, RECORD_EOF, RECORD_EXTERNSHEET, RECORD_FILELOCK, RECORD_FILEPASS, RECORD_FONT, RECORD_FORMAT, RECORD_FORMULA, RECORD_HORIZONTALPAGEBREAKS, RECORD_INTERFACEHDR, RECORD_LABEL, RECORD_LABELSST, RECORD_LBL, RECORD_LEFTMARGIN, RECORD_MERGECELLS, RECORD_MSODRAWING, RECORD_MSODRAWINGGROUP, RECORD_MSODRAWINGSELECTION, RECORD_MULBLANK, RECORD_MULRK, RECORD_NOTE, RECORD_NUMBER, RECORD_OBJ, RECORD_PALETTE, RECORD_PRINTGRID, RECORD_PRINTROWCOL, RECORD_RIGHTMARGIN, RECORD_RK, RECORD_ROW, RECORD_RRDHEAD, RECORD_RRDINFO, RECORD_SERIES, RECORD_SERIESTEXT, RECORD_SETUP, RECORD_SHRFMLA, RECORD_SIINDEX, RECORD_SST, RECORD_STRING, RECORD_STYLE, RECORD_SUPBOOK, RECORD_TABLE, RECORD_TOPMARGIN, RECORD_TXO, RECORD_USREXCL, RECORD_VERTICALPAGEBREAKS, RECORD_WSBOOL, RECORD_XF, RawCell, RawCellValue, RawColumn, RawPrintSettings, RawRange, RawRow, RawSheet, RecordBuilder, RecordGroup, SUMMARY_INFORMATION_STREAM, SheetEntry, SheetWriteContext, Substream, WorkbookGlobals, WorkbookGlobalsBuild, WorkbookGlobalsPlan, WorkbookStreams, XlsContentDocument, buildWorkbookGlobals, buildWorksheetSubstream, columnWidthToPoints, concatRecords, decodeRkNumber, errorCodeOf, errorTextOf, formatCodeOf, groupRecords, inchesToPoints, isXlsFile, isoDateTimeToSerial, isoDateToSerial, isoTimeToSerial, layoutMetadataToSummaryInformation, millimetresToPoints, pointsToColumnWidth, pointsToInches, pointsToTwips, readRecords, readRichExtendedString, readSheetRecords, readShortXLUnicodeString, readWorkbookGlobals, readWorkbookStreams, readXLUnicodeString, readXLUnicodeStringNoCch, readXls, readXlsContent, recordByteLength, serialToIsoDate, serialToIsoDateTime, serialToIsoTime, splitSubstreams, twipsToPoints, writeBofData, writeCellXfRecord, writeFontRecord, writeFormatRecord, writePaletteRecord, writeRecord, writeRichExtendedString, writeShortXLUnicodeString, writeStyleRecord, writeStyleXfRecord, writeXLUnicodeString, writeXls, writeXlsContent };
+export { BIFF8_VERSION, BOF_TYPE_CHART, BOF_TYPE_MACRO, BOF_TYPE_WORKBOOK, BOF_TYPE_WORKSHEET, BiffFormatError, BiffRecord, BiffWriteError, BlockCursor, CellFormat, CellXfPlanEntry, DEFAULT_COLUMN_WIDTH_CHARS, DEFAULT_ROW_HEIGHT_PT, GENERAL_CELL_XF_INDEX, HEADER_SIZE, MAX_RECORD_DATA_SIZE, RECORD_AI, RECORD_ARRAY, RECORD_BLANK, RECORD_BOF, RECORD_BOOLERR, RECORD_BOTTOMMARGIN, RECORD_BOUNDSHEET8, RECORD_CALCCOUNT, RECORD_CALCDELTA, RECORD_CALCITER, RECORD_CALCREFMODE, RECORD_CALCSAVERECALC, RECORD_CF, RECORD_CF12, RECORD_CFEX, RECORD_COLINFO, RECORD_CONDFMT, RECORD_CONDFMT12, RECORD_CONTINUE, RECORD_CONTINUEFRT12, RECORD_DATE1904, RECORD_DEFAULTROWHEIGHT, RECORD_DEFCOLWIDTH, RECORD_DIMENSIONS, RECORD_DV, RECORD_DVAL, RECORD_EOF, RECORD_EXTERNSHEET, RECORD_FILELOCK, RECORD_FILEPASS, RECORD_FONT, RECORD_FORMAT, RECORD_FORMULA, RECORD_HORIZONTALPAGEBREAKS, RECORD_INTERFACEHDR, RECORD_LABEL, RECORD_LABELSST, RECORD_LBL, RECORD_LEFTMARGIN, RECORD_MERGECELLS, RECORD_MSODRAWING, RECORD_MSODRAWINGGROUP, RECORD_MSODRAWINGSELECTION, RECORD_MULBLANK, RECORD_MULRK, RECORD_NOTE, RECORD_NUMBER, RECORD_OBJ, RECORD_PALETTE, RECORD_PRINTGRID, RECORD_PRINTROWCOL, RECORD_RIGHTMARGIN, RECORD_RK, RECORD_ROW, RECORD_RRDHEAD, RECORD_RRDINFO, RECORD_SERIES, RECORD_SERIESTEXT, RECORD_SETUP, RECORD_SHRFMLA, RECORD_SIINDEX, RECORD_SST, RECORD_STRING, RECORD_STYLE, RECORD_SUPBOOK, RECORD_TABLE, RECORD_TOPMARGIN, RECORD_TXO, RECORD_USREXCL, RECORD_VERTICALPAGEBREAKS, RECORD_WSBOOL, RECORD_XF, RawCell, RawCellValue, RawColumn, RawPrintSettings, RawRange, RawRow, RawSheet, RecordBuilder, RecordGroup, SUMMARY_INFORMATION_STREAM, SheetEntry, SheetWriteContext, Substream, WorkbookGlobals, WorkbookGlobalsBuild, WorkbookGlobalsPlan, WorkbookStreams, XlsContentDocument, buildWorkbookGlobals, buildWorksheetSubstream, columnWidthToPoints, concatRecords, decodeRkNumber, errorCodeOf, errorTextOf, formatCodeOf, groupRecords, inchesToPoints, isXlsFile, isoDateTimeToSerial, isoDateToSerial, isoTimeToSerial, layoutMetadataToSummaryInformation, millimetresToPoints, pointsToColumnWidth, pointsToInches, pointsToTwips, readRecords, readRichExtendedString, readSheetRecords, readShortXLUnicodeString, readWorkbookGlobals, readWorkbookStreams, readXLUnicodeString, readXLUnicodeStringNoCch, readXls, readXlsContent, recordByteLength, serialToIsoDate, serialToIsoDateTime, serialToIsoTime, splitSubstreams, twipsToPoints, writeBofData, writeCellXfRecord, writeFontRecord, writeFormatRecord, writePaletteRecord, writeRecord, writeRichExtendedString, writeShortXLUnicodeString, writeStyleRecord, writeStyleXfRecord, writeXLUnicodeString, writeXLUnicodeStringNoCch, writeXls, writeXlsContent };

package/dist/index.d.ts

@@ -6,7 +6,7 @@ import { BIFF8_VERSION, BOF_TYPE_CHART, BOF_TYPE_MACRO, BOF_TYPE_WORKBOOK, BOF_T
 import { concatRecords, writeRecord } from "./biff/record-writer.js";
 import { i as readRecords, n as BiffRecord, r as HEADER_SIZE, t as BiffFormatError } from "./records-G82UEVq8.js";
 import { decodeRkNumber } from "./biff/rk.js";
-import { writeRichExtendedString, writeShortXLUnicodeString, writeXLUnicodeString } from "./biff/string-writer.js";
+import { writeRichExtendedString, writeShortXLUnicodeString, writeXLUnicodeString, writeXLUnicodeStringNoCch } from "./biff/string-writer.js";
 import { readRichExtendedString, readShortXLUnicodeString, readXLUnicodeString, readXLUnicodeStringNoCch } from "./biff/strings.js";
 import { a as splitSubstreams, i as recordByteLength, n as Substream, r as groupRecords, t as RecordGroup } from "./substreams-CgTHx5kX.js";
 import { BiffWriteError } from "./biff/write-errors.js";
@@ -22,4 +22,4 @@ import { RawCell, RawCellValue, RawColumn, RawPrintSettings, RawRange, RawRow, R
 import { SheetWriteContext, buildWorksheetSubstream } from "./workbook/sheet-writer.js";
 import { writeXls, writeXlsContent } from "./write.js";
 export * from "excel-number-format";
-export { BIFF8_VERSION, BOF_TYPE_CHART, BOF_TYPE_MACRO, BOF_TYPE_WORKBOOK, BOF_TYPE_WORKSHEET, BiffFormatError, BiffRecord, BiffWriteError, BlockCursor, CellFormat, CellXfPlanEntry, DEFAULT_COLUMN_WIDTH_CHARS, DEFAULT_ROW_HEIGHT_PT, GENERAL_CELL_XF_INDEX, HEADER_SIZE, MAX_RECORD_DATA_SIZE, RECORD_AI, RECORD_ARRAY, RECORD_BLANK, RECORD_BOF, RECORD_BOOLERR, RECORD_BOTTOMMARGIN, RECORD_BOUNDSHEET8, RECORD_CALCCOUNT, RECORD_CALCDELTA, RECORD_CALCITER, RECORD_CALCREFMODE, RECORD_CALCSAVERECALC, RECORD_CF, RECORD_CF12, RECORD_CFEX, RECORD_COLINFO, RECORD_CONDFMT, RECORD_CONDFMT12, RECORD_CONTINUE, RECORD_CONTINUEFRT12, RECORD_DATE1904, RECORD_DEFAULTROWHEIGHT, RECORD_DEFCOLWIDTH, RECORD_DIMENSIONS, RECORD_DV, RECORD_DVAL, RECORD_EOF, RECORD_EXTERNSHEET, RECORD_FILELOCK, RECORD_FILEPASS, RECORD_FONT, RECORD_FORMAT, RECORD_FORMULA, RECORD_HORIZONTALPAGEBREAKS, RECORD_INTERFACEHDR, RECORD_LABEL, RECORD_LABELSST, RECORD_LBL, RECORD_LEFTMARGIN, RECORD_MERGECELLS, RECORD_MSODRAWING, RECORD_MSODRAWINGGROUP, RECORD_MSODRAWINGSELECTION, RECORD_MULBLANK, RECORD_MULRK, RECORD_NOTE, RECORD_NUMBER, RECORD_OBJ, RECORD_PALETTE, RECORD_PRINTGRID, RECORD_PRINTROWCOL, RECORD_RIGHTMARGIN, RECORD_RK, RECORD_ROW, RECORD_RRDHEAD, RECORD_RRDINFO, RECORD_SERIES, RECORD_SERIESTEXT, RECORD_SETUP, RECORD_SHRFMLA, RECORD_SIINDEX, RECORD_SST, RECORD_STRING, RECORD_STYLE, RECORD_SUPBOOK, RECORD_TABLE, RECORD_TOPMARGIN, RECORD_TXO, RECORD_USREXCL, RECORD_VERTICALPAGEBREAKS, RECORD_WSBOOL, RECORD_XF, RawCell, RawCellValue, RawColumn, RawPrintSettings, RawRange, RawRow, RawSheet, RecordBuilder, RecordGroup, SUMMARY_INFORMATION_STREAM, SheetEntry, SheetWriteContext, Substream, WorkbookGlobals, WorkbookGlobalsBuild, WorkbookGlobalsPlan, WorkbookStreams, XlsContentDocument, buildWorkbookGlobals, buildWorksheetSubstream, columnWidthToPoints, concatRecords, decodeRkNumber, errorCodeOf, errorTextOf, formatCodeOf, groupRecords, inchesToPoints, isXlsFile, isoDateTimeToSerial, isoDateToSerial, isoTimeToSerial, layoutMetadataToSummaryInformation, millimetresToPoints, pointsToColumnWidth, pointsToInches, pointsToTwips, readRecords, readRichExtendedString, readSheetRecords, readShortXLUnicodeString, readWorkbookGlobals, readWorkbookStreams, readXLUnicodeString, readXLUnicodeStringNoCch, readXls, readXlsContent, recordByteLength, serialToIsoDate, serialToIsoDateTime, serialToIsoTime, splitSubstreams, twipsToPoints, writeBofData, writeCellXfRecord, writeFontRecord, writeFormatRecord, writePaletteRecord, writeRecord, writeRichExtendedString, writeShortXLUnicodeString, writeStyleRecord, writeStyleXfRecord, writeXLUnicodeString, writeXls, writeXlsContent };
+export { BIFF8_VERSION, BOF_TYPE_CHART, BOF_TYPE_MACRO, BOF_TYPE_WORKBOOK, BOF_TYPE_WORKSHEET, BiffFormatError, BiffRecord, BiffWriteError, BlockCursor, CellFormat, CellXfPlanEntry, DEFAULT_COLUMN_WIDTH_CHARS, DEFAULT_ROW_HEIGHT_PT, GENERAL_CELL_XF_INDEX, HEADER_SIZE, MAX_RECORD_DATA_SIZE, RECORD_AI, RECORD_ARRAY, RECORD_BLANK, RECORD_BOF, RECORD_BOOLERR, RECORD_BOTTOMMARGIN, RECORD_BOUNDSHEET8, RECORD_CALCCOUNT, RECORD_CALCDELTA, RECORD_CALCITER, RECORD_CALCREFMODE, RECORD_CALCSAVERECALC, RECORD_CF, RECORD_CF12, RECORD_CFEX, RECORD_COLINFO, RECORD_CONDFMT, RECORD_CONDFMT12, RECORD_CONTINUE, RECORD_CONTINUEFRT12, RECORD_DATE1904, RECORD_DEFAULTROWHEIGHT, RECORD_DEFCOLWIDTH, RECORD_DIMENSIONS, RECORD_DV, RECORD_DVAL, RECORD_EOF, RECORD_EXTERNSHEET, RECORD_FILELOCK, RECORD_FILEPASS, RECORD_FONT, RECORD_FORMAT, RECORD_FORMULA, RECORD_HORIZONTALPAGEBREAKS, RECORD_INTERFACEHDR, RECORD_LABEL, RECORD_LABELSST, RECORD_LBL, RECORD_LEFTMARGIN, RECORD_MERGECELLS, RECORD_MSODRAWING, RECORD_MSODRAWINGGROUP, RECORD_MSODRAWINGSELECTION, RECORD_MULBLANK, RECORD_MULRK, RECORD_NOTE, RECORD_NUMBER, RECORD_OBJ, RECORD_PALETTE, RECORD_PRINTGRID, RECORD_PRINTROWCOL, RECORD_RIGHTMARGIN, RECORD_RK, RECORD_ROW, RECORD_RRDHEAD, RECORD_RRDINFO, RECORD_SERIES, RECORD_SERIESTEXT, RECORD_SETUP, RECORD_SHRFMLA, RECORD_SIINDEX, RECORD_SST, RECORD_STRING, RECORD_STYLE, RECORD_SUPBOOK, RECORD_TABLE, RECORD_TOPMARGIN, RECORD_TXO, RECORD_USREXCL, RECORD_VERTICALPAGEBREAKS, RECORD_WSBOOL, RECORD_XF, RawCell, RawCellValue, RawColumn, RawPrintSettings, RawRange, RawRow, RawSheet, RecordBuilder, RecordGroup, SUMMARY_INFORMATION_STREAM, SheetEntry, SheetWriteContext, Substream, WorkbookGlobals, WorkbookGlobalsBuild, WorkbookGlobalsPlan, WorkbookStreams, XlsContentDocument, buildWorkbookGlobals, buildWorksheetSubstream, columnWidthToPoints, concatRecords, decodeRkNumber, errorCodeOf, errorTextOf, formatCodeOf, groupRecords, inchesToPoints, isXlsFile, isoDateTimeToSerial, isoDateToSerial, isoTimeToSerial, layoutMetadataToSummaryInformation, millimetresToPoints, pointsToColumnWidth, pointsToInches, pointsToTwips, readRecords, readRichExtendedString, readSheetRecords, readShortXLUnicodeString, readWorkbookGlobals, readWorkbookStreams, readXLUnicodeString, readXLUnicodeStringNoCch, readXls, readXlsContent, recordByteLength, serialToIsoDate, serialToIsoDateTime, serialToIsoTime, splitSubstreams, twipsToPoints, writeBofData, writeCellXfRecord, writeFontRecord, writeFormatRecord, writePaletteRecord, writeRecord, writeRichExtendedString, writeShortXLUnicodeString, writeStyleRecord, writeStyleXfRecord, writeXLUnicodeString, writeXLUnicodeStringNoCch, writeXls, writeXlsContent };

package/dist/index.js

@@ -15,11 +15,11 @@ import { decodeRkNumber } from "./biff/rk.js";
 import { readSheetRecords } from "./workbook/sheet.js";
 import { readXls, readXlsContent } from "./content.js";
 import { writeBofData } from "./biff/bof-writer.js";
-import { writeRichExtendedString, writeShortXLUnicodeString, writeXLUnicodeString } from "./biff/string-writer.js";
+import { writeRichExtendedString, writeShortXLUnicodeString, writeXLUnicodeString, writeXLUnicodeStringNoCch } from "./biff/string-writer.js";
 import { writeCellXfRecord, writeFontRecord, writeFormatRecord, writePaletteRecord, writeStyleRecord, writeStyleXfRecord } from "./biff/xf-writer.js";
 import { layoutMetadataToSummaryInformation } from "./metadata.js";
 import { GENERAL_CELL_XF_INDEX, buildWorkbookGlobals } from "./workbook/globals-writer.js";
 import { buildWorksheetSubstream } from "./workbook/sheet-writer.js";
 import { writeXls, writeXlsContent } from "./write.js";
 export * from "excel-number-format";
-export { BIFF8_VERSION, BOF_TYPE_CHART, BOF_TYPE_MACRO, BOF_TYPE_WORKBOOK, BOF_TYPE_WORKSHEET, BiffFormatError, BiffWriteError, BlockCursor, DEFAULT_COLUMN_WIDTH_CHARS, DEFAULT_ROW_HEIGHT_PT, GENERAL_CELL_XF_INDEX, HEADER_SIZE, MAX_RECORD_DATA_SIZE, RECORD_AI, RECORD_ARRAY, RECORD_BLANK, RECORD_BOF, RECORD_BOOLERR, RECORD_BOTTOMMARGIN, RECORD_BOUNDSHEET8, RECORD_CALCCOUNT, RECORD_CALCDELTA, RECORD_CALCITER, RECORD_CALCREFMODE, RECORD_CALCSAVERECALC, RECORD_CF, RECORD_CF12, RECORD_CFEX, RECORD_COLINFO, RECORD_CONDFMT, RECORD_CONDFMT12, RECORD_CONTINUE, RECORD_CONTINUEFRT12, RECORD_DATE1904, RECORD_DEFAULTROWHEIGHT, RECORD_DEFCOLWIDTH, RECORD_DIMENSIONS, RECORD_DV, RECORD_DVAL, RECORD_EOF, RECORD_EXTERNSHEET, RECORD_FILELOCK, RECORD_FILEPASS, RECORD_FONT, RECORD_FORMAT, RECORD_FORMULA, RECORD_HORIZONTALPAGEBREAKS, RECORD_INTERFACEHDR, RECORD_LABEL, RECORD_LABELSST, RECORD_LBL, RECORD_LEFTMARGIN, RECORD_MERGECELLS, RECORD_MSODRAWING, RECORD_MSODRAWINGGROUP, RECORD_MSODRAWINGSELECTION, RECORD_MULBLANK, RECORD_MULRK, RECORD_NOTE, RECORD_NUMBER, RECORD_OBJ, RECORD_PALETTE, RECORD_PRINTGRID, RECORD_PRINTROWCOL, RECORD_RIGHTMARGIN, RECORD_RK, RECORD_ROW, RECORD_RRDHEAD, RECORD_RRDINFO, RECORD_SERIES, RECORD_SERIESTEXT, RECORD_SETUP, RECORD_SHRFMLA, RECORD_SIINDEX, RECORD_SST, RECORD_STRING, RECORD_STYLE, RECORD_SUPBOOK, RECORD_TABLE, RECORD_TOPMARGIN, RECORD_TXO, RECORD_USREXCL, RECORD_VERTICALPAGEBREAKS, RECORD_WSBOOL, RECORD_XF, RecordBuilder, SUMMARY_INFORMATION_STREAM, buildWorkbookGlobals, buildWorksheetSubstream, columnWidthToPoints, concatRecords, decodeRkNumber, errorCodeOf, errorTextOf, formatCodeOf, groupRecords, inchesToPoints, isXlsFile, isoDateTimeToSerial, isoDateToSerial, isoTimeToSerial, layoutMetadataToSummaryInformation, millimetresToPoints, pointsToColumnWidth, pointsToInches, pointsToTwips, readRecords, readRichExtendedString, readSheetRecords, readShortXLUnicodeString, readWorkbookGlobals, readWorkbookStreams, readXLUnicodeString, readXLUnicodeStringNoCch, readXls, readXlsContent, recordByteLength, serialToIsoDate, serialToIsoDateTime, serialToIsoTime, splitSubstreams, twipsToPoints, writeBofData, writeCellXfRecord, writeFontRecord, writeFormatRecord, writePaletteRecord, writeRecord, writeRichExtendedString, writeShortXLUnicodeString, writeStyleRecord, writeStyleXfRecord, writeXLUnicodeString, writeXls, writeXlsContent };
+export { BIFF8_VERSION, BOF_TYPE_CHART, BOF_TYPE_MACRO, BOF_TYPE_WORKBOOK, BOF_TYPE_WORKSHEET, BiffFormatError, BiffWriteError, BlockCursor, DEFAULT_COLUMN_WIDTH_CHARS, DEFAULT_ROW_HEIGHT_PT, GENERAL_CELL_XF_INDEX, HEADER_SIZE, MAX_RECORD_DATA_SIZE, RECORD_AI, RECORD_ARRAY, RECORD_BLANK, RECORD_BOF, RECORD_BOOLERR, RECORD_BOTTOMMARGIN, RECORD_BOUNDSHEET8, RECORD_CALCCOUNT, RECORD_CALCDELTA, RECORD_CALCITER, RECORD_CALCREFMODE, RECORD_CALCSAVERECALC, RECORD_CF, RECORD_CF12, RECORD_CFEX, RECORD_COLINFO, RECORD_CONDFMT, RECORD_CONDFMT12, RECORD_CONTINUE, RECORD_CONTINUEFRT12, RECORD_DATE1904, RECORD_DEFAULTROWHEIGHT, RECORD_DEFCOLWIDTH, RECORD_DIMENSIONS, RECORD_DV, RECORD_DVAL, RECORD_EOF, RECORD_EXTERNSHEET, RECORD_FILELOCK, RECORD_FILEPASS, RECORD_FONT, RECORD_FORMAT, RECORD_FORMULA, RECORD_HORIZONTALPAGEBREAKS, RECORD_INTERFACEHDR, RECORD_LABEL, RECORD_LABELSST, RECORD_LBL, RECORD_LEFTMARGIN, RECORD_MERGECELLS, RECORD_MSODRAWING, RECORD_MSODRAWINGGROUP, RECORD_MSODRAWINGSELECTION, RECORD_MULBLANK, RECORD_MULRK, RECORD_NOTE, RECORD_NUMBER, RECORD_OBJ, RECORD_PALETTE, RECORD_PRINTGRID, RECORD_PRINTROWCOL, RECORD_RIGHTMARGIN, RECORD_RK, RECORD_ROW, RECORD_RRDHEAD, RECORD_RRDINFO, RECORD_SERIES, RECORD_SERIESTEXT, RECORD_SETUP, RECORD_SHRFMLA, RECORD_SIINDEX, RECORD_SST, RECORD_STRING, RECORD_STYLE, RECORD_SUPBOOK, RECORD_TABLE, RECORD_TOPMARGIN, RECORD_TXO, RECORD_USREXCL, RECORD_VERTICALPAGEBREAKS, RECORD_WSBOOL, RECORD_XF, RecordBuilder, SUMMARY_INFORMATION_STREAM, buildWorkbookGlobals, buildWorksheetSubstream, columnWidthToPoints, concatRecords, decodeRkNumber, errorCodeOf, errorTextOf, formatCodeOf, groupRecords, inchesToPoints, isXlsFile, isoDateTimeToSerial, isoDateToSerial, isoTimeToSerial, layoutMetadataToSummaryInformation, millimetresToPoints, pointsToColumnWidth, pointsToInches, pointsToTwips, readRecords, readRichExtendedString, readSheetRecords, readShortXLUnicodeString, readWorkbookGlobals, readWorkbookStreams, readXLUnicodeString, readXLUnicodeStringNoCch, readXls, readXlsContent, recordByteLength, serialToIsoDate, serialToIsoDateTime, serialToIsoTime, splitSubstreams, twipsToPoints, writeBofData, writeCellXfRecord, writeFontRecord, writeFormatRecord, writePaletteRecord, writeRecord, writeRichExtendedString, writeShortXLUnicodeString, writeStyleRecord, writeStyleXfRecord, writeXLUnicodeString, writeXLUnicodeStringNoCch, writeXls, writeXlsContent };

package/dist/workbook/comment-writer.cjs

@@ -0,0 +1,75 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+require("../biff/record-types.cjs");
+const require_biff_write_errors = require("../biff/write-errors.cjs");
+const require_biff_builder = require("../biff/builder.cjs");
+const require_biff_record_writer = require("../biff/record-writer.cjs");
+const require_biff_string_writer = require("../biff/string-writer.cjs");
+//#region src/workbook/comment-writer.ts
+/** [MS-XLS] 2.5.213 ObjId: the drawing-object type a comment's Obj record names -- workbook/comments.ts's own OBJECT_TYPE_NOTE, restated here since the two modules read/write the identical constant independently rather than sharing an import across the read/write boundary (matching this package's existing convention of one module per direction). */
+const OBJECT_TYPE_NOTE = 25;
+const FTCMO_FT = 21;
+const FTCMO_CB = 18;
+const FTNTS_FT = 13;
+const FTNTS_CB = 22;
+/** FtCmo ([MS-XLS] 2.5.92, 22 bytes): the common properties every Obj record opens with. Every flag bit beyond ot/id is either a UI concern (locked, default size, printed) this writer has no data for, or explicitly reserved -- so grbit and the three trailing "unused" fields are all written zero. */
+function writeFtCmo(objId) {
+	return new require_biff_builder.RecordBuilder().u16(FTCMO_FT).u16(FTCMO_CB).u16(OBJECT_TYPE_NOTE).u16(objId).u16(0).u32(0).u32(0).u32(0).build();
+}
+/** A pseudo-random 16-byte GUID for FtNts's own comment identifier -- [MS-XLS] requires the field to be present and does not require it to be globally unique across files, only present, so a fresh random value per comment (rather than a fixed or zero one) is what a real producer's own GUID allocation looks like without this package needing a GUID-formatting dependency. Worker-isomorphic: globalThis.crypto is available in both Node and a Cloudflare Workers isolate, unlike Node's own node:crypto module. */
+function randomGuidBytes() {
+	const bytes = /* @__PURE__ */ new Uint8Array(16);
+	globalThis.crypto.getRandomValues(bytes);
+	return bytes;
+}
+/** FtNts ([MS-XLS] 2.5.163... 2.5.b0991167, 26 bytes): the note-specific properties following FtCmo in a comment's own Obj record. fSharedNote is always written clear -- this writer has no shared-comment concept to express. */
+function writeFtNts() {
+	return new require_biff_builder.RecordBuilder().u16(FTNTS_FT).u16(FTNTS_CB).bytes(randomGuidBytes()).u16(0).u32(0).build();
+}
+/** Obj ([MS-XLS] 2.4.181) for a Note-type object: FtCmo, then FtNts (present if and only if cmo.ot is 0x19, which this writer's OBJECT_TYPE_NOTE always is), then the mandatory trailing 4-byte reserved field every Obj not naming a list-box/dropdown object (ot 0x12/0x14) carries. */
+function writeObjRecordForNote(objId) {
+	const data = new require_biff_builder.RecordBuilder().bytes(writeFtCmo(objId)).bytes(writeFtNts()).u32(0).build();
+	return require_biff_record_writer.writeRecord(93, data);
+}
+/** TxORuns' own minimal shape for plain, unformatted text ([MS-XLS] 2.5.31cd7d1e/d738ffef/6fb4c0e3): one Run (an all-default FormatRun -- ich 0, ifnt 0 -- plus its own six reserved bytes) followed by the mandatory TxOLastRun sentinel naming cchText again. 16 bytes total, the minimum [MS-XLS]'s own "cbRuns MUST be >= 16 and a multiple of 8" rule allows -- this writer never carries real per-character formatting for a comment's text (workbook/comments.ts's own read side does not model TxORuns either, for the identical reason). */
+function writeMinimalTxoRuns(cchText) {
+	return new require_biff_builder.RecordBuilder().u16(0).u16(0).u16(0).u16(0).u16(cchText).u16(0).u32(0).build();
+}
+/** TxO ([MS-XLS] 2.4.329) plus the one Continue record carrying its text and formatting-run trailer -- see this module's own top comment for why both text and runs can share a single Continue rather than needing one each. cchText is 0 for an empty comment, in which case [MS-XLS] itself requires cbRuns to be 0 too and no Continue record follows at all. */
+function writeTxoRecords(text) {
+	const cchText = text.length;
+	const cbRuns = cchText === 0 ? 0 : 16;
+	const txoData = new require_biff_builder.RecordBuilder().u16(18).u16(0).u16(0).u32(0).u16(cchText).u16(cbRuns).u16(0).u16(0).build();
+	const txo = require_biff_record_writer.writeRecord(438, txoData);
+	if (cchText === 0) return [txo];
+	const continueData = new require_biff_builder.RecordBuilder().bytes(require_biff_string_writer.writeXLUnicodeStringNoCch(text)).bytes(writeMinimalTxoRuns(cchText)).build();
+	return [txo, require_biff_record_writer.writeRecord(60, continueData)];
+}
+/**
+* Note ([MS-XLS] 2.4.179, wrapping a NoteSh structure): the comment's own cell anchor and author, naming the Obj record that carries its text through idObj. fShow/fRwHidden/fColHidden are always written clear -- this writer tracks none of the on-screen display state they carry.
+*
+* A comment with no recorded author writes stAuthor as an empty string, rather than a non-empty placeholder -- [MS-XLS] 2.5.163 itself documents stAuthor's own length as "MUST be greater than or equal to 1", but this reader (workbook/comments.ts's own readNoteAnchor) only ever promotes a NON-empty stAuthor to ContentSheetCellComment.author, meaning a placeholder would round-trip back as a fabricated author nobody wrote. An empty string is the one spelling that round-trips through this reader as "no author", matching every other lossless-round-trip choice this writer makes in favour of what its own reader reads back over strict textual conformance to a field length rule real producers routinely leave unenforced anyway.
+*/
+function writeNoteRecord(cell, objId) {
+	const data = new require_biff_builder.RecordBuilder().u16(cell.row).u16(cell.column).u16(0).u16(objId).bytes(require_biff_string_writer.writeXLUnicodeString(cell.comment?.author ?? "")).u8(0).build();
+	return require_biff_record_writer.writeRecord(28, data);
+}
+const MAX_OBJECT_ID = 65535;
+/**
+* Every Note/Obj/TxO record a sheet's own commented cells need, in the order described above -- for `cells` already filtered to exactly those carrying a `comment` (workbook/sheet-writer.ts's own caller does the filtering, since only it knows the sheet's full cell list).
+*
+* Object ids are assigned sequentially from 1: [MS-XLS] 2.5.92's own FtCmo.id must be unique "among all Obj records within ... Worksheet Substream ABNF", and this writer never emits any other kind of Obj record (no shapes, charts, or form controls yet -- see this package's README), so a per-sheet counter starting at 1 is already unique on its own.
+*/
+function writeSheetComments(commentedCells) {
+	if (commentedCells.length > MAX_OBJECT_ID) throw new require_biff_write_errors.BiffWriteError(`sheet carries ${commentedCells.length} cell comments, more than the ${MAX_OBJECT_ID} distinct object ids [MS-XLS] 2.5.92's own 16-bit FtCmo.id field can hold`);
+	const ordered = [...commentedCells].sort((a, b) => a.row !== b.row ? a.row - b.row : a.column - b.column);
+	const pieces = ordered.map((cell, index) => writeNoteRecord(cell, index + 1));
+	ordered.forEach((cell, index) => {
+		const objId = index + 1;
+		const comment = cell.comment;
+		if (comment === void 0) throw new require_biff_write_errors.BiffWriteError(`internal error: writeSheetComments was called with a cell at row ${cell.row}, column ${cell.column} carrying no comment`);
+		pieces.push(writeObjRecordForNote(objId), ...writeTxoRecords(comment.text));
+	});
+	return pieces;
+}
+//#endregion
+exports.writeSheetComments = writeSheetComments;

package/dist/workbook/comment-writer.d.cts

@@ -0,0 +1,10 @@
+import { ContentSheetCell } from "document-schema.js";
+//#region src/workbook/comment-writer.d.ts
+/**
+ * Every Note/Obj/TxO record a sheet's own commented cells need, in the order described above -- for `cells` already filtered to exactly those carrying a `comment` (workbook/sheet-writer.ts's own caller does the filtering, since only it knows the sheet's full cell list).
+ *
+ * Object ids are assigned sequentially from 1: [MS-XLS] 2.5.92's own FtCmo.id must be unique "among all Obj records within ... Worksheet Substream ABNF", and this writer never emits any other kind of Obj record (no shapes, charts, or form controls yet -- see this package's README), so a per-sheet counter starting at 1 is already unique on its own.
+ */
+declare function writeSheetComments(commentedCells: readonly ContentSheetCell[]): Uint8Array<ArrayBuffer>[];
+//#endregion
+export { writeSheetComments };

package/dist/workbook/comment-writer.d.ts

@@ -0,0 +1,10 @@
+import { ContentSheetCell } from "document-schema.js";
+//#region src/workbook/comment-writer.d.ts
+/**
+ * Every Note/Obj/TxO record a sheet's own commented cells need, in the order described above -- for `cells` already filtered to exactly those carrying a `comment` (workbook/sheet-writer.ts's own caller does the filtering, since only it knows the sheet's full cell list).
+ *
+ * Object ids are assigned sequentially from 1: [MS-XLS] 2.5.92's own FtCmo.id must be unique "among all Obj records within ... Worksheet Substream ABNF", and this writer never emits any other kind of Obj record (no shapes, charts, or form controls yet -- see this package's README), so a per-sheet counter starting at 1 is already unique on its own.
+ */
+declare function writeSheetComments(commentedCells: readonly ContentSheetCell[]): Uint8Array<ArrayBuffer>[];
+//#endregion
+export { writeSheetComments };

package/dist/workbook/comment-writer.js

@@ -0,0 +1,74 @@
+import "../biff/record-types.js";
+import { BiffWriteError } from "../biff/write-errors.js";
+import { RecordBuilder } from "../biff/builder.js";
+import { writeRecord } from "../biff/record-writer.js";
+import { writeXLUnicodeString, writeXLUnicodeStringNoCch } from "../biff/string-writer.js";
+//#region src/workbook/comment-writer.ts
+/** [MS-XLS] 2.5.213 ObjId: the drawing-object type a comment's Obj record names -- workbook/comments.ts's own OBJECT_TYPE_NOTE, restated here since the two modules read/write the identical constant independently rather than sharing an import across the read/write boundary (matching this package's existing convention of one module per direction). */
+const OBJECT_TYPE_NOTE = 25;
+const FTCMO_FT = 21;
+const FTCMO_CB = 18;
+const FTNTS_FT = 13;
+const FTNTS_CB = 22;
+/** FtCmo ([MS-XLS] 2.5.92, 22 bytes): the common properties every Obj record opens with. Every flag bit beyond ot/id is either a UI concern (locked, default size, printed) this writer has no data for, or explicitly reserved -- so grbit and the three trailing "unused" fields are all written zero. */
+function writeFtCmo(objId) {
+	return new RecordBuilder().u16(FTCMO_FT).u16(FTCMO_CB).u16(OBJECT_TYPE_NOTE).u16(objId).u16(0).u32(0).u32(0).u32(0).build();
+}
+/** A pseudo-random 16-byte GUID for FtNts's own comment identifier -- [MS-XLS] requires the field to be present and does not require it to be globally unique across files, only present, so a fresh random value per comment (rather than a fixed or zero one) is what a real producer's own GUID allocation looks like without this package needing a GUID-formatting dependency. Worker-isomorphic: globalThis.crypto is available in both Node and a Cloudflare Workers isolate, unlike Node's own node:crypto module. */
+function randomGuidBytes() {
+	const bytes = /* @__PURE__ */ new Uint8Array(16);
+	globalThis.crypto.getRandomValues(bytes);
+	return bytes;
+}
+/** FtNts ([MS-XLS] 2.5.163... 2.5.b0991167, 26 bytes): the note-specific properties following FtCmo in a comment's own Obj record. fSharedNote is always written clear -- this writer has no shared-comment concept to express. */
+function writeFtNts() {
+	return new RecordBuilder().u16(FTNTS_FT).u16(FTNTS_CB).bytes(randomGuidBytes()).u16(0).u32(0).build();
+}
+/** Obj ([MS-XLS] 2.4.181) for a Note-type object: FtCmo, then FtNts (present if and only if cmo.ot is 0x19, which this writer's OBJECT_TYPE_NOTE always is), then the mandatory trailing 4-byte reserved field every Obj not naming a list-box/dropdown object (ot 0x12/0x14) carries. */
+function writeObjRecordForNote(objId) {
+	const data = new RecordBuilder().bytes(writeFtCmo(objId)).bytes(writeFtNts()).u32(0).build();
+	return writeRecord(93, data);
+}
+/** TxORuns' own minimal shape for plain, unformatted text ([MS-XLS] 2.5.31cd7d1e/d738ffef/6fb4c0e3): one Run (an all-default FormatRun -- ich 0, ifnt 0 -- plus its own six reserved bytes) followed by the mandatory TxOLastRun sentinel naming cchText again. 16 bytes total, the minimum [MS-XLS]'s own "cbRuns MUST be >= 16 and a multiple of 8" rule allows -- this writer never carries real per-character formatting for a comment's text (workbook/comments.ts's own read side does not model TxORuns either, for the identical reason). */
+function writeMinimalTxoRuns(cchText) {
+	return new RecordBuilder().u16(0).u16(0).u16(0).u16(0).u16(cchText).u16(0).u32(0).build();
+}
+/** TxO ([MS-XLS] 2.4.329) plus the one Continue record carrying its text and formatting-run trailer -- see this module's own top comment for why both text and runs can share a single Continue rather than needing one each. cchText is 0 for an empty comment, in which case [MS-XLS] itself requires cbRuns to be 0 too and no Continue record follows at all. */
+function writeTxoRecords(text) {
+	const cchText = text.length;
+	const cbRuns = cchText === 0 ? 0 : 16;
+	const txoData = new RecordBuilder().u16(18).u16(0).u16(0).u32(0).u16(cchText).u16(cbRuns).u16(0).u16(0).build();
+	const txo = writeRecord(438, txoData);
+	if (cchText === 0) return [txo];
+	const continueData = new RecordBuilder().bytes(writeXLUnicodeStringNoCch(text)).bytes(writeMinimalTxoRuns(cchText)).build();
+	return [txo, writeRecord(60, continueData)];
+}
+/**
+* Note ([MS-XLS] 2.4.179, wrapping a NoteSh structure): the comment's own cell anchor and author, naming the Obj record that carries its text through idObj. fShow/fRwHidden/fColHidden are always written clear -- this writer tracks none of the on-screen display state they carry.
+*
+* A comment with no recorded author writes stAuthor as an empty string, rather than a non-empty placeholder -- [MS-XLS] 2.5.163 itself documents stAuthor's own length as "MUST be greater than or equal to 1", but this reader (workbook/comments.ts's own readNoteAnchor) only ever promotes a NON-empty stAuthor to ContentSheetCellComment.author, meaning a placeholder would round-trip back as a fabricated author nobody wrote. An empty string is the one spelling that round-trips through this reader as "no author", matching every other lossless-round-trip choice this writer makes in favour of what its own reader reads back over strict textual conformance to a field length rule real producers routinely leave unenforced anyway.
+*/
+function writeNoteRecord(cell, objId) {
+	const data = new RecordBuilder().u16(cell.row).u16(cell.column).u16(0).u16(objId).bytes(writeXLUnicodeString(cell.comment?.author ?? "")).u8(0).build();
+	return writeRecord(28, data);
+}
+const MAX_OBJECT_ID = 65535;
+/**
+* Every Note/Obj/TxO record a sheet's own commented cells need, in the order described above -- for `cells` already filtered to exactly those carrying a `comment` (workbook/sheet-writer.ts's own caller does the filtering, since only it knows the sheet's full cell list).
+*
+* Object ids are assigned sequentially from 1: [MS-XLS] 2.5.92's own FtCmo.id must be unique "among all Obj records within ... Worksheet Substream ABNF", and this writer never emits any other kind of Obj record (no shapes, charts, or form controls yet -- see this package's README), so a per-sheet counter starting at 1 is already unique on its own.
+*/
+function writeSheetComments(commentedCells) {
+	if (commentedCells.length > MAX_OBJECT_ID) throw new BiffWriteError(`sheet carries ${commentedCells.length} cell comments, more than the ${MAX_OBJECT_ID} distinct object ids [MS-XLS] 2.5.92's own 16-bit FtCmo.id field can hold`);
+	const ordered = [...commentedCells].sort((a, b) => a.row !== b.row ? a.row - b.row : a.column - b.column);
+	const pieces = ordered.map((cell, index) => writeNoteRecord(cell, index + 1));
+	ordered.forEach((cell, index) => {
+		const objId = index + 1;
+		const comment = cell.comment;
+		if (comment === void 0) throw new BiffWriteError(`internal error: writeSheetComments was called with a cell at row ${cell.row}, column ${cell.column} carrying no comment`);
+		pieces.push(writeObjRecordForNote(objId), ...writeTxoRecords(comment.text));
+	});
+	return pieces;
+}
+//#endregion
+export { writeSheetComments };

package/dist/workbook/encryption.cjs

@@ -4,7 +4,8 @@ const require_biff_records = require("../biff/records.cjs");
 const require_biff_cursor = require("../biff/cursor.cjs");
 let archive_codec = require("archive-codec");
 //#region src/workbook/encryption.ts
-/** [MS-XLS] 2.4.117's own wEncryptionType: RC4 encryption, as opposed to 0x0000 (XOR obfuscation, out of scope). */
+/** [MS-XLS] 2.4.117's own wEncryptionType. */
+const ENCRYPTION_TYPE_XOR = 0;
 const ENCRYPTION_TYPE_RC4 = 1;
 /** [MS-OFFCRYPTO] 2.3.6.1's own EncryptionVersionInfo: vMajor/vMinor MUST both be 1 for the "RC4 encryption header" this module reads. vMajor 2/3/4 with vMinor 2 names the RC4 CryptoAPI encryption header instead (2.3.5.1), a different, unimplemented header shape. */
 const RC4_HEADER_VERSION_MAJOR = 1;
@@ -21,29 +22,28 @@ const NEVER_ENCRYPTED_RECORD_TYPES = /* @__PURE__ */ new Set([
 	406,
 	312
 ]);
-/** Reads FilePass's own fields, rejecting the two encryption schemes this module does not implement with a specific message rather than a generic parse failure. */
-function readFilePassRc4Header(filePassRecord) {
+/** Reads FilePass's own fields, dispatching on wEncryptionType, and rejecting RC4 CryptoAPI (the one scheme this module does not implement) with a specific message rather than a generic parse failure. */
+function readFilePassHeader(filePassRecord) {
 	const cursor = new require_biff_cursor.BlockCursor([filePassRecord.data]);
 	const encryptionType = cursor.u16();
-	if (encryptionType !== ENCRYPTION_TYPE_RC4) throw new require_biff_records.BiffFormatError(`workbook uses FilePass wEncryptionType 0x${encryptionType.toString(16).padStart(4, "0")} (XOR obfuscation), which this reader does not decrypt`);
+	if (encryptionType === ENCRYPTION_TYPE_XOR) return {
+		kind: "xor",
+		key: cursor.u16(),
+		verificationBytes: cursor.u16()
+	};
+	if (encryptionType !== ENCRYPTION_TYPE_RC4) throw new require_biff_records.BiffFormatError(`workbook uses FilePass wEncryptionType 0x${encryptionType.toString(16).padStart(4, "0")}, which this reader does not decrypt`);
 	const versionMajor = cursor.u16();
 	const versionMinor = cursor.u16();
 	if (versionMajor !== RC4_HEADER_VERSION_MAJOR || versionMinor !== RC4_HEADER_VERSION_MINOR) throw new require_biff_records.BiffFormatError(`workbook uses RC4 CryptoAPI encryption (EncryptionVersionInfo ${versionMajor}.${versionMinor}), which this reader does not decrypt`);
 	return {
+		kind: "rc4",
 		salt: cursor.take(archive_codec.OFFICE_RC4_VERIFIER_LENGTH),
 		encryptedVerifier: cursor.take(archive_codec.OFFICE_RC4_VERIFIER_LENGTH),
 		encryptedVerifierHash: cursor.take(archive_codec.OFFICE_RC4_VERIFIER_LENGTH)
 	};
 }
-/** [MS-OFFCRYPTO] 2.3.6.4's own password verification: block 0's key decrypts EncryptedVerifier, and MD5 of the result must equal the same block's decryption of EncryptedVerifierHash. Both verifier fields sit in one continuous keystream starting at position 0, not two independently-reset ones -- though decryptOfficeRc4 regenerates its keystream fresh from block start on every call regardless, so decrypting them as two separate 16-byte calls at offsets 0 and 16 is equivalent to one 32-byte call, not merely close to it. */
-function verifyOfficeRc4Password(baseHash, header) {
-	const decryptedVerifier = (0, archive_codec.decryptOfficeRc4)(baseHash, 0, header.encryptedVerifier);
-	const decryptedVerifierHash = (0, archive_codec.decryptOfficeRc4)(baseHash, archive_codec.OFFICE_RC4_VERIFIER_LENGTH, header.encryptedVerifierHash);
-	const computedHash = (0, archive_codec.md5)(decryptedVerifier);
-	if (!(computedHash.length === decryptedVerifierHash.length && computedHash.every((byte, index) => byte === decryptedVerifierHash[index]))) throw new require_biff_records.BiffFormatError("incorrect password for RC4-encrypted workbook");
-}
-/** Decrypts one record's own data in place against the derived base hash, honouring every [MS-XLS] 2.2.10 exclusion: a never-encrypted record's data is returned unchanged, BoundSheet8's own lbPlyPos prefix is preserved while the rest of its data is decrypted, and everything else is decrypted whole. `record.offset` is the record's own header start, so its data begins `HEADER_SIZE` bytes further into the stream -- the position [MS-OFFCRYPTO]'s block-keyed keystream is defined against. */
-function decryptRecord(record, baseHash) {
+/** Decrypts one record's own data against the derived RC4 base hash, honouring every [MS-XLS] 2.2.10 exclusion: a never-encrypted record's data is returned unchanged, BoundSheet8's own lbPlyPos prefix is preserved while the rest of its data is decrypted, and everything else is decrypted whole. `record.offset` is the record's own header start, so its data begins `HEADER_SIZE` bytes further into the stream -- the position [MS-OFFCRYPTO]'s block-keyed keystream is defined against. */
+function decryptRecordRc4(record, baseHash) {
 	if (NEVER_ENCRYPTED_RECORD_TYPES.has(record.type)) return record;
 	const dataOffset = record.offset + 4;
 	if (record.type === 133) {
@@ -62,17 +62,64 @@ function decryptRecord(record, baseHash) {
 		data: (0, archive_codec.decryptOfficeRc4)(baseHash, dataOffset, record.data)
 	};
 }
+/** [MS-XLS] 2.2.10's own XorArrayIndex rule for a record's decrypted span starting `spanOffset` bytes into the Workbook stream: `(streamOffset + recordDataLength) % 16`, where `recordDataLength` is the record's own FULL declared data length -- not the length of `spanOffset`'s own remaining span, which for BoundSheet8 is 4 bytes shorter than the record's own declared size. Confirmed against Apache POI's own `XORDecryptor.invokeCipher` comment ("XorArrayIndex = (FileOffset + Data.Length) % 16") and LibreOffice's `XclImpBiff5Decrypter::OnUpdate`, and directly against a real Excel-generated XOR-obfuscated fixture -- see archive-codec's own crypto/xor-obfuscation.test.ts. */
+function xorArrayIndexFor(spanOffset, recordDataLength) {
+	return (spanOffset + recordDataLength) % archive_codec.XOR_OBFUSCATION_ARRAY_LENGTH;
+}
+/** Decrypts one record's own data against the derived XOR obfuscation array, honouring the same [MS-XLS] 2.2.10 exclusions decryptRecordRc4 does. */
+function decryptRecordXor(record, array) {
+	if (NEVER_ENCRYPTED_RECORD_TYPES.has(record.type)) return record;
+	const dataOffset = record.offset + 4;
+	if (record.type === 133) {
+		const lbPlyPos = record.data.subarray(0, BOUNDSHEET8_LBPLYPOS_SIZE);
+		const spanOffset = dataOffset + BOUNDSHEET8_LBPLYPOS_SIZE;
+		const decryptedRest = (0, archive_codec.decryptXorObfuscationMethod1)(array, record.data.subarray(BOUNDSHEET8_LBPLYPOS_SIZE), xorArrayIndexFor(spanOffset, record.data.length));
+		const data = new Uint8Array(record.data.length);
+		data.set(lbPlyPos, 0);
+		data.set(decryptedRest, BOUNDSHEET8_LBPLYPOS_SIZE);
+		return {
+			...record,
+			data
+		};
+	}
+	return {
+		...record,
+		data: (0, archive_codec.decryptXorObfuscationMethod1)(array, record.data, xorArrayIndexFor(dataOffset, record.data.length))
+	};
+}
+/** [MS-OFFCRYPTO] 2.3.6.4's own password verification: block 0's key decrypts EncryptedVerifier, and MD5 of the result must equal the same block's decryption of EncryptedVerifierHash. Both verifier fields sit in one continuous keystream starting at position 0, not two independently-reset ones -- though decryptOfficeRc4 regenerates its keystream fresh from block start on every call regardless, so decrypting them as two separate 16-byte calls at offsets 0 and 16 is equivalent to one 32-byte call, not merely close to it. */
+function decryptWorkbookRecordsRc4(records, header, password) {
+	const baseHash = (0, archive_codec.deriveOfficeRc4BaseHash)(password, header.salt);
+	const decryptedVerifier = (0, archive_codec.decryptOfficeRc4)(baseHash, 0, header.encryptedVerifier);
+	const decryptedVerifierHash = (0, archive_codec.decryptOfficeRc4)(baseHash, archive_codec.OFFICE_RC4_VERIFIER_LENGTH, header.encryptedVerifierHash);
+	const computedHash = (0, archive_codec.md5)(decryptedVerifier);
+	if (!(computedHash.length === decryptedVerifierHash.length && computedHash.every((byte, index) => byte === decryptedVerifierHash[index]))) throw new require_biff_records.BiffFormatError("incorrect password for RC4-encrypted workbook");
+	return records.map((record) => decryptRecordRc4(record, baseHash));
+}
+/** Verifies the password against both of XORObfuscation's own fields (its `key` and `verificationBytes`, matching Apache POI's own `XORDecryptor.verifyPassword`, which checks both rather than either alone) before decrypting every record. */
+function decryptWorkbookRecordsXor(records, header, password) {
+	let computedKey;
+	let computedVerifier;
+	try {
+		computedKey = (0, archive_codec.createXorObfuscationKey)(password);
+		computedVerifier = (0, archive_codec.createXorObfuscationPasswordVerifier)(password);
+	} catch (error) {
+		if (error instanceof RangeError) throw new require_biff_records.BiffFormatError("incorrect password for XOR-obfuscated workbook");
+		throw error;
+	}
+	if (computedKey !== header.key || computedVerifier !== header.verificationBytes) throw new require_biff_records.BiffFormatError("incorrect password for XOR-obfuscated workbook");
+	const array = (0, archive_codec.createXorObfuscationArray)(password, archive_codec.XOR_OBFUSCATION_ROTATE_DISTANCE_METHOD1);
+	return records.map((record) => decryptRecordXor(record, array));
+}
 /**
-* Decrypts every record of a workbook stream protected by [MS-OFFCRYPTO] 2.3.6.1's RC4 encryption header, given the `FilePass` record already located within `records` and the password to decrypt it with.
+* Decrypts every record of a workbook stream protected by [MS-XLS] 2.4.117's FilePass record, under whichever of the two schemes it names (the [MS-OFFCRYPTO] 2.3.6.1 RC4 encryption header, or 2.3.7's XOR obfuscation), given the `FilePass` record already located within `records` and the password to decrypt it with.
 *
-* Throws `BiffFormatError` for a missing password, an incorrect one, or an encryption scheme this module does not implement (RC4 CryptoAPI, XOR obfuscation) -- there is no partial or best-effort result to return in any of those cases.
+* Throws `BiffFormatError` for a missing password, an incorrect one, or an encryption scheme this module does not implement (RC4 CryptoAPI) -- there is no partial or best-effort result to return in any of those cases.
 */
 function decryptWorkbookRecords(records, filePassRecord, password) {
-	const header = readFilePassRc4Header(filePassRecord);
-	if (password === void 0) throw new require_biff_records.BiffFormatError("workbook is RC4-encrypted (FilePass record); call readXlsContent with a password to decrypt it");
-	const baseHash = (0, archive_codec.deriveOfficeRc4BaseHash)(password, header.salt);
-	verifyOfficeRc4Password(baseHash, header);
-	return records.map((record) => decryptRecord(record, baseHash));
+	const header = readFilePassHeader(filePassRecord);
+	if (password === void 0) throw new require_biff_records.BiffFormatError(`workbook is ${header.kind === "xor" ? "XOR-obfuscated" : "RC4-encrypted"} (FilePass record); call readXlsContent with a password to decrypt it`);
+	return header.kind === "xor" ? decryptWorkbookRecordsXor(records, header, password) : decryptWorkbookRecordsRc4(records, header, password);
 }
 //#endregion
 exports.decryptWorkbookRecords = decryptWorkbookRecords;

package/dist/workbook/encryption.d.cts

@@ -1,9 +1,9 @@
 import { n as BiffRecord } from "../records-G82UEVq8.cjs";
 //#region src/workbook/encryption.d.ts
 /**
- * Decrypts every record of a workbook stream protected by [MS-OFFCRYPTO] 2.3.6.1's RC4 encryption header, given the `FilePass` record already located within `records` and the password to decrypt it with.
+ * Decrypts every record of a workbook stream protected by [MS-XLS] 2.4.117's FilePass record, under whichever of the two schemes it names (the [MS-OFFCRYPTO] 2.3.6.1 RC4 encryption header, or 2.3.7's XOR obfuscation), given the `FilePass` record already located within `records` and the password to decrypt it with.
  *
- * Throws `BiffFormatError` for a missing password, an incorrect one, or an encryption scheme this module does not implement (RC4 CryptoAPI, XOR obfuscation) -- there is no partial or best-effort result to return in any of those cases.
+ * Throws `BiffFormatError` for a missing password, an incorrect one, or an encryption scheme this module does not implement (RC4 CryptoAPI) -- there is no partial or best-effort result to return in any of those cases.
  */
 declare function decryptWorkbookRecords(records: readonly BiffRecord[], filePassRecord: BiffRecord, password: string | undefined): readonly BiffRecord[];
 //#endregion

package/dist/workbook/encryption.d.ts

@@ -1,9 +1,9 @@
 import { n as BiffRecord } from "../records-G82UEVq8.js";
 //#region src/workbook/encryption.d.ts
 /**
- * Decrypts every record of a workbook stream protected by [MS-OFFCRYPTO] 2.3.6.1's RC4 encryption header, given the `FilePass` record already located within `records` and the password to decrypt it with.
+ * Decrypts every record of a workbook stream protected by [MS-XLS] 2.4.117's FilePass record, under whichever of the two schemes it names (the [MS-OFFCRYPTO] 2.3.6.1 RC4 encryption header, or 2.3.7's XOR obfuscation), given the `FilePass` record already located within `records` and the password to decrypt it with.
  *
- * Throws `BiffFormatError` for a missing password, an incorrect one, or an encryption scheme this module does not implement (RC4 CryptoAPI, XOR obfuscation) -- there is no partial or best-effort result to return in any of those cases.
+ * Throws `BiffFormatError` for a missing password, an incorrect one, or an encryption scheme this module does not implement (RC4 CryptoAPI) -- there is no partial or best-effort result to return in any of those cases.
  */
 declare function decryptWorkbookRecords(records: readonly BiffRecord[], filePassRecord: BiffRecord, password: string | undefined): readonly BiffRecord[];
 //#endregion

package/dist/workbook/encryption.js

@@ -1,9 +1,10 @@
 import { RECORD_BOF } from "../biff/record-types.js";
 import { BiffFormatError } from "../biff/records.js";
 import { BlockCursor } from "../biff/cursor.js";
-import { OFFICE_RC4_VERIFIER_LENGTH, decryptOfficeRc4, deriveOfficeRc4BaseHash, md5 } from "archive-codec";
+import { OFFICE_RC4_VERIFIER_LENGTH, XOR_OBFUSCATION_ARRAY_LENGTH, XOR_OBFUSCATION_ROTATE_DISTANCE_METHOD1, createXorObfuscationArray, createXorObfuscationKey, createXorObfuscationPasswordVerifier, decryptOfficeRc4, decryptXorObfuscationMethod1, deriveOfficeRc4BaseHash, md5 } from "archive-codec";
 //#region src/workbook/encryption.ts
-/** [MS-XLS] 2.4.117's own wEncryptionType: RC4 encryption, as opposed to 0x0000 (XOR obfuscation, out of scope). */
+/** [MS-XLS] 2.4.117's own wEncryptionType. */
+const ENCRYPTION_TYPE_XOR = 0;
 const ENCRYPTION_TYPE_RC4 = 1;
 /** [MS-OFFCRYPTO] 2.3.6.1's own EncryptionVersionInfo: vMajor/vMinor MUST both be 1 for the "RC4 encryption header" this module reads. vMajor 2/3/4 with vMinor 2 names the RC4 CryptoAPI encryption header instead (2.3.5.1), a different, unimplemented header shape. */
 const RC4_HEADER_VERSION_MAJOR = 1;
@@ -20,29 +21,28 @@ const NEVER_ENCRYPTED_RECORD_TYPES = /* @__PURE__ */ new Set([
 	406,
 	312
 ]);
-/** Reads FilePass's own fields, rejecting the two encryption schemes this module does not implement with a specific message rather than a generic parse failure. */
-function readFilePassRc4Header(filePassRecord) {
+/** Reads FilePass's own fields, dispatching on wEncryptionType, and rejecting RC4 CryptoAPI (the one scheme this module does not implement) with a specific message rather than a generic parse failure. */
+function readFilePassHeader(filePassRecord) {
 	const cursor = new BlockCursor([filePassRecord.data]);
 	const encryptionType = cursor.u16();
-	if (encryptionType !== ENCRYPTION_TYPE_RC4) throw new BiffFormatError(`workbook uses FilePass wEncryptionType 0x${encryptionType.toString(16).padStart(4, "0")} (XOR obfuscation), which this reader does not decrypt`);
+	if (encryptionType === ENCRYPTION_TYPE_XOR) return {
+		kind: "xor",
+		key: cursor.u16(),
+		verificationBytes: cursor.u16()
+	};
+	if (encryptionType !== ENCRYPTION_TYPE_RC4) throw new BiffFormatError(`workbook uses FilePass wEncryptionType 0x${encryptionType.toString(16).padStart(4, "0")}, which this reader does not decrypt`);
 	const versionMajor = cursor.u16();
 	const versionMinor = cursor.u16();
 	if (versionMajor !== RC4_HEADER_VERSION_MAJOR || versionMinor !== RC4_HEADER_VERSION_MINOR) throw new BiffFormatError(`workbook uses RC4 CryptoAPI encryption (EncryptionVersionInfo ${versionMajor}.${versionMinor}), which this reader does not decrypt`);
 	return {
+		kind: "rc4",
 		salt: cursor.take(OFFICE_RC4_VERIFIER_LENGTH),
 		encryptedVerifier: cursor.take(OFFICE_RC4_VERIFIER_LENGTH),
 		encryptedVerifierHash: cursor.take(OFFICE_RC4_VERIFIER_LENGTH)
 	};
 }
-/** [MS-OFFCRYPTO] 2.3.6.4's own password verification: block 0's key decrypts EncryptedVerifier, and MD5 of the result must equal the same block's decryption of EncryptedVerifierHash. Both verifier fields sit in one continuous keystream starting at position 0, not two independently-reset ones -- though decryptOfficeRc4 regenerates its keystream fresh from block start on every call regardless, so decrypting them as two separate 16-byte calls at offsets 0 and 16 is equivalent to one 32-byte call, not merely close to it. */
-function verifyOfficeRc4Password(baseHash, header) {
-	const decryptedVerifier = decryptOfficeRc4(baseHash, 0, header.encryptedVerifier);
-	const decryptedVerifierHash = decryptOfficeRc4(baseHash, OFFICE_RC4_VERIFIER_LENGTH, header.encryptedVerifierHash);
-	const computedHash = md5(decryptedVerifier);
-	if (!(computedHash.length === decryptedVerifierHash.length && computedHash.every((byte, index) => byte === decryptedVerifierHash[index]))) throw new BiffFormatError("incorrect password for RC4-encrypted workbook");
-}
-/** Decrypts one record's own data in place against the derived base hash, honouring every [MS-XLS] 2.2.10 exclusion: a never-encrypted record's data is returned unchanged, BoundSheet8's own lbPlyPos prefix is preserved while the rest of its data is decrypted, and everything else is decrypted whole. `record.offset` is the record's own header start, so its data begins `HEADER_SIZE` bytes further into the stream -- the position [MS-OFFCRYPTO]'s block-keyed keystream is defined against. */
-function decryptRecord(record, baseHash) {
+/** Decrypts one record's own data against the derived RC4 base hash, honouring every [MS-XLS] 2.2.10 exclusion: a never-encrypted record's data is returned unchanged, BoundSheet8's own lbPlyPos prefix is preserved while the rest of its data is decrypted, and everything else is decrypted whole. `record.offset` is the record's own header start, so its data begins `HEADER_SIZE` bytes further into the stream -- the position [MS-OFFCRYPTO]'s block-keyed keystream is defined against. */
+function decryptRecordRc4(record, baseHash) {
 	if (NEVER_ENCRYPTED_RECORD_TYPES.has(record.type)) return record;
 	const dataOffset = record.offset + 4;
 	if (record.type === 133) {
@@ -61,17 +61,64 @@ function decryptRecord(record, baseHash) {
 		data: decryptOfficeRc4(baseHash, dataOffset, record.data)
 	};
 }
+/** [MS-XLS] 2.2.10's own XorArrayIndex rule for a record's decrypted span starting `spanOffset` bytes into the Workbook stream: `(streamOffset + recordDataLength) % 16`, where `recordDataLength` is the record's own FULL declared data length -- not the length of `spanOffset`'s own remaining span, which for BoundSheet8 is 4 bytes shorter than the record's own declared size. Confirmed against Apache POI's own `XORDecryptor.invokeCipher` comment ("XorArrayIndex = (FileOffset + Data.Length) % 16") and LibreOffice's `XclImpBiff5Decrypter::OnUpdate`, and directly against a real Excel-generated XOR-obfuscated fixture -- see archive-codec's own crypto/xor-obfuscation.test.ts. */
+function xorArrayIndexFor(spanOffset, recordDataLength) {
+	return (spanOffset + recordDataLength) % XOR_OBFUSCATION_ARRAY_LENGTH;
+}
+/** Decrypts one record's own data against the derived XOR obfuscation array, honouring the same [MS-XLS] 2.2.10 exclusions decryptRecordRc4 does. */
+function decryptRecordXor(record, array) {
+	if (NEVER_ENCRYPTED_RECORD_TYPES.has(record.type)) return record;
+	const dataOffset = record.offset + 4;
+	if (record.type === 133) {
+		const lbPlyPos = record.data.subarray(0, BOUNDSHEET8_LBPLYPOS_SIZE);
+		const spanOffset = dataOffset + BOUNDSHEET8_LBPLYPOS_SIZE;
+		const decryptedRest = decryptXorObfuscationMethod1(array, record.data.subarray(BOUNDSHEET8_LBPLYPOS_SIZE), xorArrayIndexFor(spanOffset, record.data.length));
+		const data = new Uint8Array(record.data.length);
+		data.set(lbPlyPos, 0);
+		data.set(decryptedRest, BOUNDSHEET8_LBPLYPOS_SIZE);
+		return {
+			...record,
+			data
+		};
+	}
+	return {
+		...record,
+		data: decryptXorObfuscationMethod1(array, record.data, xorArrayIndexFor(dataOffset, record.data.length))
+	};
+}
+/** [MS-OFFCRYPTO] 2.3.6.4's own password verification: block 0's key decrypts EncryptedVerifier, and MD5 of the result must equal the same block's decryption of EncryptedVerifierHash. Both verifier fields sit in one continuous keystream starting at position 0, not two independently-reset ones -- though decryptOfficeRc4 regenerates its keystream fresh from block start on every call regardless, so decrypting them as two separate 16-byte calls at offsets 0 and 16 is equivalent to one 32-byte call, not merely close to it. */
+function decryptWorkbookRecordsRc4(records, header, password) {
+	const baseHash = deriveOfficeRc4BaseHash(password, header.salt);
+	const decryptedVerifier = decryptOfficeRc4(baseHash, 0, header.encryptedVerifier);
+	const decryptedVerifierHash = decryptOfficeRc4(baseHash, OFFICE_RC4_VERIFIER_LENGTH, header.encryptedVerifierHash);
+	const computedHash = md5(decryptedVerifier);
+	if (!(computedHash.length === decryptedVerifierHash.length && computedHash.every((byte, index) => byte === decryptedVerifierHash[index]))) throw new BiffFormatError("incorrect password for RC4-encrypted workbook");
+	return records.map((record) => decryptRecordRc4(record, baseHash));
+}
+/** Verifies the password against both of XORObfuscation's own fields (its `key` and `verificationBytes`, matching Apache POI's own `XORDecryptor.verifyPassword`, which checks both rather than either alone) before decrypting every record. */
+function decryptWorkbookRecordsXor(records, header, password) {
+	let computedKey;
+	let computedVerifier;
+	try {
+		computedKey = createXorObfuscationKey(password);
+		computedVerifier = createXorObfuscationPasswordVerifier(password);
+	} catch (error) {
+		if (error instanceof RangeError) throw new BiffFormatError("incorrect password for XOR-obfuscated workbook");
+		throw error;
+	}
+	if (computedKey !== header.key || computedVerifier !== header.verificationBytes) throw new BiffFormatError("incorrect password for XOR-obfuscated workbook");
+	const array = createXorObfuscationArray(password, XOR_OBFUSCATION_ROTATE_DISTANCE_METHOD1);
+	return records.map((record) => decryptRecordXor(record, array));
+}
 /**
-* Decrypts every record of a workbook stream protected by [MS-OFFCRYPTO] 2.3.6.1's RC4 encryption header, given the `FilePass` record already located within `records` and the password to decrypt it with.
+* Decrypts every record of a workbook stream protected by [MS-XLS] 2.4.117's FilePass record, under whichever of the two schemes it names (the [MS-OFFCRYPTO] 2.3.6.1 RC4 encryption header, or 2.3.7's XOR obfuscation), given the `FilePass` record already located within `records` and the password to decrypt it with.
 *
-* Throws `BiffFormatError` for a missing password, an incorrect one, or an encryption scheme this module does not implement (RC4 CryptoAPI, XOR obfuscation) -- there is no partial or best-effort result to return in any of those cases.
+* Throws `BiffFormatError` for a missing password, an incorrect one, or an encryption scheme this module does not implement (RC4 CryptoAPI) -- there is no partial or best-effort result to return in any of those cases.
 */
 function decryptWorkbookRecords(records, filePassRecord, password) {
-	const header = readFilePassRc4Header(filePassRecord);
-	if (password === void 0) throw new BiffFormatError("workbook is RC4-encrypted (FilePass record); call readXlsContent with a password to decrypt it");
-	const baseHash = deriveOfficeRc4BaseHash(password, header.salt);
-	verifyOfficeRc4Password(baseHash, header);
-	return records.map((record) => decryptRecord(record, baseHash));
+	const header = readFilePassHeader(filePassRecord);
+	if (password === void 0) throw new BiffFormatError(`workbook is ${header.kind === "xor" ? "XOR-obfuscated" : "RC4-encrypted"} (FilePass record); call readXlsContent with a password to decrypt it`);
+	return header.kind === "xor" ? decryptWorkbookRecordsXor(records, header, password) : decryptWorkbookRecordsRc4(records, header, password);
 }
 //#endregion
 export { decryptWorkbookRecords };