@cosyte/dicom 0.0.8 → 0.0.11

package/dist/index.mjs

@@ -9,7 +9,7 @@ var __export = (target, all) => {
 };
 
 // src/version.ts
-var VERSION = "0.0.8";
+var VERSION = "0.0.11";
 
 // src/dictionary/index.ts
 var dictionary_exports = {};
@@ -11701,15 +11701,24 @@ var BE_VR_STRIDE = Object.freeze({
   UT: 0,
   SQ: 0
 });
+var KNOWN_VRS = Object.freeze(
+  new Set(Object.keys(BE_VR_STRIDE))
+);
+function isRecognizedVr(vr) {
+  return KNOWN_VRS.has(vr);
+}
 
 // src/parser/warnings.ts
 var WARNING_CODES = {
   // === Phase 2 actively emits (D-08 active list - alphabetical-within-prefix per CONTEXT specifics §) ===
+  DICOM_DUPLICATE_FILE_META_ELEMENT: "DICOM_DUPLICATE_FILE_META_ELEMENT",
+  DICOM_DUPLICATE_TAG_IN_DATA_SET: "DICOM_DUPLICATE_TAG_IN_DATA_SET",
   DICOM_EMPTY_ITEM_IN_SEQUENCE: "DICOM_EMPTY_ITEM_IN_SEQUENCE",
   DICOM_FILE_META_GROUP_LENGTH_MISMATCH: "DICOM_FILE_META_GROUP_LENGTH_MISMATCH",
   DICOM_FILE_META_GROUP_LENGTH_MISSING: "DICOM_FILE_META_GROUP_LENGTH_MISSING",
   DICOM_GROUP_LENGTH_IN_DATASET: "DICOM_GROUP_LENGTH_IN_DATASET",
   DICOM_IMPLICIT_VR_FOR_PRIVATE_TAG_WITHOUT_VR: "DICOM_IMPLICIT_VR_FOR_PRIVATE_TAG_WITHOUT_VR",
+  DICOM_ITEM_CROSSES_SEQUENCE_END: "DICOM_ITEM_CROSSES_SEQUENCE_END",
   DICOM_MISSING_PREAMBLE: "DICOM_MISSING_PREAMBLE",
   DICOM_NONZERO_RESERVED_BYTES: "DICOM_NONZERO_RESERVED_BYTES",
   DICOM_ODD_LENGTH_VALUE_PADDED: "DICOM_ODD_LENGTH_VALUE_PADDED",
@@ -11735,6 +11744,10 @@ var WARNING_CODES = {
   // reserved by Phase 7 - not emitted in Phase 2
   DICOM_DEIDENT_EMBEDDED_ATTRIBUTE_REMOVED: "DICOM_DEIDENT_EMBEDDED_ATTRIBUTE_REMOVED",
   // emitted by deidentify(), never by the parser
+  DICOM_DEIDENT_METHOD_NOT_ADDED: "DICOM_DEIDENT_METHOD_NOT_ADDED",
+  // emitted by deidentify(), never by the parser
+  DICOM_DEIDENT_METHOD_PRIOR_RETAINED: "DICOM_DEIDENT_METHOD_PRIOR_RETAINED",
+  // emitted by deidentify(), never by the parser
   DICOM_DEIDENT_SEQUENCE_NOT_AUDITABLE: "DICOM_DEIDENT_SEQUENCE_NOT_AUDITABLE",
   // emitted by deidentify(), never by the parser
   DICOM_DEIDENT_UNDEFINED_VR_NOT_AUDITABLE: "DICOM_DEIDENT_UNDEFINED_VR_NOT_AUDITABLE",
@@ -11751,10 +11764,44 @@ var WARNING_MESSAGES = Object.freeze({
   DICOM_VR_MISMATCH: "Element ({tag}) on-wire VR is {vr2}; dictionary lists {vr}. Trusting on-wire VR.",
   DICOM_PRIVATE_TAG_NO_CREATOR: "Private element ({tag}) has no Private Creator registered for its block; treating as VR=UN.",
   DICOM_GROUP_LENGTH_IN_DATASET: "Retired Group Length element ({tag}) encountered in dataset; preserved as-is.",
-  DICOM_NONZERO_RESERVED_BYTES: "Element ({tag}) has non-zero reserved bytes between VR and length (first byte {n}, second byte {n2}); ignoring.",
+  // The tag is deliberately absent, and this is the only *parser* message where
+  // that is true. See `nonzeroReservedBytes`. Kept terse for the same reason the
+  // de-identify messages are: it is emitted once per element, and element count
+  // is attacker-chosen.
+  DICOM_NONZERO_RESERVED_BYTES: "Non-zero reserved bytes between VR and length (first byte {n}, second byte {n2}); ignoring. Tag withheld; the byte offset identifies the element.",
   DICOM_SQ_NOT_DESCENDED: "Element ({tag}) resolved to VR=SQ from the dictionary but its defined-length value is not a valid item stream; kept as opaque bytes and NOT descended, so nothing nested inside it is visible to navigation, and deidentify() cannot audit it. See DICOM_DEIDENT_SEQUENCE_NOT_AUDITABLE.",
   DICOM_UN_PARSED_AS_SQ: "Element ({tag}) has VR=UN with undefined length; descended as Implicit VR LE sequence per CP-246.",
   DICOM_EMPTY_ITEM_IN_SEQUENCE: "Sequence ({tag}) contains an empty item (length=0); tolerated.",
+  // Neither the tag nor the replaced element's value is here, and the tag's
+  // absence is specific to this code rather than caution. See
+  // `duplicateTagInDataSet`. Short by measurement rather than by intention: one
+  // is raised per collision and the collision count is chosen by the input, so a
+  // 400-character draft was measured at 50 M characters over a 1 MiB file and
+  // cut. The reasoning lives in the factory's JSDoc, not in the string.
+  DICOM_DUPLICATE_TAG_IN_DATA_SET: "A Data Element carrying a tag this Data Set already holds replaced the earlier one at this byte offset; that element's value is not in the parsed object. PS3.5 7.1 and 7.5.1. Tag withheld.",
+  // The tag is deliberately absent for the same reason as the code above, and
+  // the surviving copy is named because the File Meta group resolves a repeat
+  // the OPPOSITE way round to a Data Set: first copy wins here, last read wins
+  // there. Short for the same measured reason - one is raised per repeat and the
+  // repeat count is chosen by the input.
+  // 🛑 NO SPEC CITATION HERE, AND ITS ABSENCE IS DELIBERATE. A draft ended this
+  // string "PS3.5 7.1.", which asserts that section's "at most once in a Data
+  // Set" governs the File Meta group - the applicability this slice states it
+  // cannot establish, because PS3.10 governs that group and is not vendored
+  // here. Under `{ strict: true }` this string is also the thrown message, so an
+  // unqualified citation there is the claim, not a footnote. Do not put it back.
+  DICOM_DUPLICATE_FILE_META_ELEMENT: "A File Meta Data Element repeats a (0002,xxxx) tag the group already carries; the copy at this byte offset is not in the parsed File Meta, and the FIRST copy of that tag is the one projected. Tag withheld.",
+  // No value and no length: the prior value is the file's own text. The tag is a
+  // constant of this code rather than composed from input, as in the two
+  // (0002,0000) messages above.
+  DICOM_DEIDENT_METHOD_NOT_ADDED: "The De-identification Method this run recorded could not be added beside the value (0012,0063) already carried without exceeding the largest Value Length that VR can encode, so the earlier value was replaced (PS3.15 E.1.1). The replaced text is not in the output.",
+  // No value and no length, for the same reason as the code above: the retained
+  // text is the file's own. The tag is a constant of this code.
+  DICOM_DEIDENT_METHOD_PRIOR_RETAINED: "A De-identification Method (0012,0063) value the source file already carried was kept beside the one this run recorded, as PS3.15 E.1.1 requires. That attribute is not in Table E.1-1, so no rule in this run inspected, audited or redacted those bytes: if the sender wrote identifying text there it is in the de-identified output, under (0012,0062) = YES. The text is withheld from this message.",
+  // The Item's own declared length is deliberately absent. See
+  // `itemCrossesSequenceEnd`; `{n2}` stays because the emit site's
+  // `endLimit < buffer.length` conjunct bounds it by the buffer.
+  DICOM_ITEM_CROSSES_SEQUENCE_END: "Item ({tag}) declares a length reaching past its enclosing sequence's declared end, so it reads the enclosing Data Set's bytes; {n2} bytes remained inside the sequence. The file's two length fields disagree (PS3.5 7.5.1 and 7.5.2 govern them); the item's is used. The declared length is withheld; the byte offset locates the item.",
   DICOM_PIXEL_DATA_LENGTH_MISMATCH: "(7FE0,0010) PixelData declared length {n} does not match computed {n2} bytes.",
   DICOM_IMPLICIT_VR_FOR_PRIVATE_TAG_WITHOUT_VR: "Private element ({tag}) under Implicit VR LE has no VR override; falling back to UN.",
   DICOM_PRIVATE_CREATOR_UNKNOWN: "Private element ({tag}) has a Private Creator the active profile's private dictionary does not name; falling back to UN. The creator string is not reproduced here - read the (gggg,00EE) element if you need it.",
@@ -11786,7 +11833,6 @@ var WARNING_MESSAGES = Object.freeze({
   DICOM_UNSUPPORTED_CHARSET: "(0008,0005) Specific Character Set value {n} names a defined term this build does not support; decoding text as UTF-8 best-effort. The term is not reproduced here - read the element if you need it.",
   DICOM_CHARSET_AMBIGUOUS_SEPARATOR: "(0008,0005) Specific Character Set value {n} is ambiguous under the active code extensions; decoding text as UTF-8 best-effort."
 });
-var KNOWN_VRS = new Set(Object.keys(BE_VR_STRIDE));
 var TAG_SHAPE = /^[0-9A-F]{8}$/u;
 function renderTag(tag) {
   return tag !== void 0 && TAG_SHAPE.test(tag) ? tag : WITHHELD;
@@ -11828,9 +11874,8 @@ function privateTagNoCreator(position, tag) {
 function groupLengthInDataset(position, tag) {
   return build(WARNING_CODES.DICOM_GROUP_LENGTH_IN_DATASET, position, { tag });
 }
-function nonzeroReservedBytes(position, tag, first, second) {
+function nonzeroReservedBytes(position, first, second) {
   return build(WARNING_CODES.DICOM_NONZERO_RESERVED_BYTES, position, {
-    tag,
     n: first,
     n2: second
   });
@@ -11841,9 +11886,21 @@ function unParsedAsSQ(position, tag) {
 function sqNotDescended(position, tag) {
   return build(WARNING_CODES.DICOM_SQ_NOT_DESCENDED, position, { tag });
 }
+function itemCrossesSequenceEnd(position, tag, availableLength) {
+  return build(WARNING_CODES.DICOM_ITEM_CROSSES_SEQUENCE_END, position, {
+    tag,
+    n2: availableLength
+  });
+}
 function emptyItemInSequence(position, tag) {
   return build(WARNING_CODES.DICOM_EMPTY_ITEM_IN_SEQUENCE, position, { tag });
 }
+function duplicateTagInDataSet(position) {
+  return build(WARNING_CODES.DICOM_DUPLICATE_TAG_IN_DATA_SET, position);
+}
+function duplicateFileMetaElement(position) {
+  return build(WARNING_CODES.DICOM_DUPLICATE_FILE_META_ELEMENT, position);
+}
 function implicitVRForPrivateTagWithoutVR(position, tag) {
   return build(WARNING_CODES.DICOM_IMPLICIT_VR_FOR_PRIVATE_TAG_WITHOUT_VR, position, { tag });
 }
@@ -11853,6 +11910,12 @@ function privateCreatorUnknown(position, tag) {
 function burnedInAnnotationNotRemoved(position) {
   return build(WARNING_CODES.DICOM_BURNED_IN_ANNOTATION_NOT_REMOVED, position);
 }
+function deidentMethodNotAdded(position) {
+  return build(WARNING_CODES.DICOM_DEIDENT_METHOD_NOT_ADDED, position);
+}
+function deidentMethodPriorRetained(position) {
+  return build(WARNING_CODES.DICOM_DEIDENT_METHOD_PRIOR_RETAINED, position);
+}
 function embeddedAttributeRemoved(position, tag, vr, count) {
   return build(WARNING_CODES.DICOM_DEIDENT_EMBEDDED_ATTRIBUTE_REMOVED, position, {
     tag,
@@ -12034,12 +12097,12 @@ function readExplicitElementHeader(cursor, _ctx, emit) {
   const vr = vrSlice.toString("ascii");
   let length;
   let headerLength;
-  if (LONG_FORM_VRS.has(vr)) {
+  if (LONG_FORM_VRS.has(vr) || !isRecognizedVr(vr)) {
     const reserved0 = cursor.buffer[cursor.position];
     const reserved1 = cursor.buffer[cursor.position + 1];
     cursor.position += 2;
     if ((reserved0 ?? 0) !== 0 || (reserved1 ?? 0) !== 0) {
-      emit(nonzeroReservedBytes({ byteOffset: headerStart }, tag, reserved0 ?? 0, reserved1 ?? 0));
+      emit(nonzeroReservedBytes({ byteOffset: headerStart }, reserved0 ?? 0, reserved1 ?? 0));
     }
     length = cursor.readUInt32();
     headerLength = 12;
@@ -12147,6 +12210,16 @@ function parseFileMeta(buffer, datasetStart, ctx, emit) {
       fmElements.push(next);
     }
   }
+  const seenModeledTags = /* @__PURE__ */ new Set();
+  if (declaredFmLength !== void 0) seenModeledTags.add("00020000");
+  for (const e of fmElements) {
+    if (!MODELED_FM_TAGS.has(e.tag)) continue;
+    if (seenModeledTags.has(e.tag)) {
+      emit(duplicateFileMetaElement({ byteOffset: e.byteOffset, fileMeta: true }));
+      continue;
+    }
+    seenModeledTags.add(e.tag);
+  }
   const tsElement = fmElements.find((e) => e.tag === "00020010");
   if (tsElement === void 0 || tsElement.vr !== "UI") {
     throw new DicomParseError(
@@ -12177,7 +12250,7 @@ function readExplicitLeElement(cursor) {
   const vr = cursor.slice(2).toString("ascii");
   let length;
   let headerLength;
-  if (LONG_FORM_VRS.has(vr)) {
+  if (LONG_FORM_VRS.has(vr) || !isRecognizedVr(vr)) {
     cursor.slice(2);
     length = cursor.readUInt32();
     headerLength = 12;
@@ -12193,7 +12266,7 @@ function readExplicitLeElement(cursor) {
   if (bytesConsumed !== headerLength + length) {
     throw new RangeError("File Meta element accounting mismatch");
   }
-  return { tag, vr, value, bytesConsumed };
+  return { tag, vr, value, bytesConsumed, byteOffset: headerStart };
 }
 function trimUI(buf) {
   let end = buf.length;
@@ -12633,6 +12706,14 @@ var Element = class {
   }
 };
 
+// src/parser/data-set-map.ts
+function defineElement(elements, element, emit) {
+  if (elements.has(element.tag)) {
+    emit(duplicateTagInDataSet({ byteOffset: element.byteOffset }));
+  }
+  elements.set(element.tag, element);
+}
+
 // src/dataset/item.ts
 var Item = class extends Dataset {
   index;
@@ -12754,6 +12835,15 @@ function parseSequence(buffer, valueStart, ctx, emit, opts) {
         items.push(new Item({ warnings: [], elements: inner.elements, index: itemIndex }));
         cursor.position = inner.endOffset;
       } else {
+        if (opts.explicitLength !== void 0 && endLimit < buffer.length && cursor.position + itemLength > endLimit) {
+          emit(
+            itemCrossesSequenceEnd(
+              { byteOffset: itemHeaderStart },
+              itemTag,
+              Math.max(0, endLimit - cursor.position)
+            )
+          );
+        }
         if (cursor.position + itemLength > buffer.length) {
           throw new DicomParseError(
             FATAL_CODES.INVALID_FILE_META,
@@ -12889,8 +12979,8 @@ function parseImplicitLE(buffer, datasetStart, ctx, emit, opts = {}) {
         cursor.position = seq.endOffset;
         const rawBytes = ctx.copyValues ? copyValueBytes(buffer.subarray(valueRawStart, cursor.position)) : buffer.subarray(valueRawStart, cursor.position);
         const privateCreator2 = safeModelCreator(resolvePrivateCreator(tag, ctx), ctx);
-        elements.set(
-          tag,
+        defineElement(
+          elements,
           new Element({
             tag,
             vr,
@@ -12901,7 +12991,8 @@ function parseImplicitLE(buffer, datasetStart, ctx, emit, opts = {}) {
             littleEndian: true,
             items: seq.items,
             ...privateCreator2 !== void 0 ? { privateCreator: privateCreator2 } : {}
-          })
+          }),
+          emit
         );
         continue;
       }
@@ -12920,8 +13011,8 @@ function parseImplicitLE(buffer, datasetStart, ctx, emit, opts = {}) {
           cursor.position = cp246.endOffset;
           const rawBytes = ctx.copyValues ? copyValueBytes(buffer.subarray(valueRawStart, cursor.position)) : buffer.subarray(valueRawStart, cursor.position);
           const privateCreator2 = safeModelCreator(resolvePrivateCreator(tag, ctx), ctx);
-          elements.set(
-            tag,
+          defineElement(
+            elements,
             new Element({
               tag,
               vr: "SQ",
@@ -12934,7 +13025,8 @@ function parseImplicitLE(buffer, datasetStart, ctx, emit, opts = {}) {
               littleEndian: true,
               items: cp246.items,
               ...privateCreator2 !== void 0 ? { privateCreator: privateCreator2 } : {}
-            })
+            }),
+            emit
           );
           continue;
         }
@@ -12970,8 +13062,8 @@ function parseImplicitLE(buffer, datasetStart, ctx, emit, opts = {}) {
       );
       if (seq.success) {
         const privateCreator2 = safeModelCreator(resolvePrivateCreator(tag, ctx), ctx);
-        elements.set(
-          tag,
+        defineElement(
+          elements,
           new Element({
             tag,
             vr,
@@ -12982,7 +13074,8 @@ function parseImplicitLE(buffer, datasetStart, ctx, emit, opts = {}) {
             littleEndian: true,
             items: seq.items,
             ...privateCreator2 !== void 0 ? { privateCreator: privateCreator2 } : {}
-          })
+          }),
+          emit
         );
         continue;
       }
@@ -12995,8 +13088,8 @@ function parseImplicitLE(buffer, datasetStart, ctx, emit, opts = {}) {
     }
     applySpecificCharacterSet(tag, valueSlice, ctx, emit, position);
     const privateCreator = safeModelCreator(resolvePrivateCreator(tag, ctx), ctx);
-    elements.set(
-      tag,
+    defineElement(
+      elements,
       new Element({
         tag,
         vr,
@@ -13008,7 +13101,8 @@ function parseImplicitLE(buffer, datasetStart, ctx, emit, opts = {}) {
         littleEndian: true,
         ...ctx.currentCharset !== void 0 ? { specificCharacterSet: ctx.currentCharset } : {},
         ...privateCreator !== void 0 ? { privateCreator } : {}
-      })
+      }),
+      emit
     );
   }
   return { elements, endOffset: cursor.position };
@@ -13115,8 +13209,8 @@ function _parseExplicit(buffer, datasetStart, ctx, emit, mode, opts = {}) {
       cursor.position = seqResult.endOffset;
       const rawBytes = ctx.copyValues ? copyValueBytes(buffer.subarray(headerStart, cursor.position)) : buffer.subarray(headerStart, cursor.position);
       const privateCreator2 = safeModelCreator(resolvePrivateCreator(tag, ctx), ctx);
-      elements.set(
-        tag,
+      defineElement(
+        elements,
         new Element({
           tag,
           vr: "SQ",
@@ -13127,7 +13221,8 @@ function _parseExplicit(buffer, datasetStart, ctx, emit, mode, opts = {}) {
           littleEndian: mode.littleEndian,
           items: seqResult.items,
           ...privateCreator2 !== void 0 ? { privateCreator: privateCreator2 } : {}
-        })
+        }),
+        emit
       );
       continue;
     }
@@ -13142,8 +13237,8 @@ function _parseExplicit(buffer, datasetStart, ctx, emit, mode, opts = {}) {
       const result = parseSequence(buffer, valueStart2, ctx, emit, seqOpts);
       cursor.position = result.endOffset;
       const rawBytes = ctx.copyValues ? copyValueBytes(buffer.subarray(headerStart, cursor.position)) : buffer.subarray(headerStart, cursor.position);
-      elements.set(
-        tag,
+      defineElement(
+        elements,
         new Element({
           tag,
           vr: "OB",
@@ -13154,7 +13249,8 @@ function _parseExplicit(buffer, datasetStart, ctx, emit, mode, opts = {}) {
           byteOffset: headerStart,
           littleEndian: mode.littleEndian,
           items: result.items
-        })
+        }),
+        emit
       );
       continue;
     }
@@ -13173,8 +13269,8 @@ function _parseExplicit(buffer, datasetStart, ctx, emit, mode, opts = {}) {
         cursor.position = cp246.endOffset;
         const rawBytes = ctx.copyValues ? copyValueBytes(buffer.subarray(headerStart, cursor.position)) : buffer.subarray(headerStart, cursor.position);
         const privateCreator3 = safeModelCreator(resolvePrivateCreator(tag, ctx), ctx);
-        elements.set(
-          tag,
+        defineElement(
+          elements,
           new Element({
             tag,
             vr: "SQ",
@@ -13187,15 +13283,16 @@ function _parseExplicit(buffer, datasetStart, ctx, emit, mode, opts = {}) {
             littleEndian: mode.littleEndian,
             items: cp246.items,
             ...privateCreator3 !== void 0 ? { privateCreator: privateCreator3 } : {}
-          })
+          }),
+          emit
         );
         continue;
       }
       const privateCreator2 = safeModelCreator(resolvePrivateCreator(tag, ctx), ctx);
       const fallbackEnd = buffer.length;
       const fallbackBytes = ctx.copyValues ? copyValueBytes(buffer.subarray(headerStart, fallbackEnd)) : buffer.subarray(headerStart, fallbackEnd);
-      elements.set(
-        tag,
+      defineElement(
+        elements,
         new Element({
           tag,
           vr: "UN",
@@ -13205,7 +13302,8 @@ function _parseExplicit(buffer, datasetStart, ctx, emit, mode, opts = {}) {
           byteOffset: headerStart,
           littleEndian: mode.littleEndian,
           ...privateCreator2 !== void 0 ? { privateCreator: privateCreator2 } : {}
-        })
+        }),
+        emit
       );
       cursor.position = fallbackEnd;
       continue;
@@ -13240,8 +13338,8 @@ function _parseExplicit(buffer, datasetStart, ctx, emit, mode, opts = {}) {
     applySpecificCharacterSet(tag, valueSlice, ctx, emit, position);
     const privateCreator = safeModelCreator(resolvePrivateCreator(tag, ctx), ctx);
     const finalVr = vr;
-    elements.set(
-      tag,
+    defineElement(
+      elements,
       new Element({
         tag,
         vr: finalVr,
@@ -13253,7 +13351,8 @@ function _parseExplicit(buffer, datasetStart, ctx, emit, mode, opts = {}) {
         littleEndian: mode.littleEndian,
         ...ctx.currentCharset !== void 0 ? { specificCharacterSet: ctx.currentCharset } : {},
         ...privateCreator !== void 0 ? { privateCreator } : {}
-      })
+      }),
+      emit
     );
   }
   return { elements, endOffset: cursor.position };
@@ -13451,7 +13550,7 @@ function encodeDatasetElement(el, encoding) {
   }
   const littleEndian = encoding === "explicitLE";
   const vrBuf = Buffer.from(el.vr, "ascii");
-  if (LONG_FORM_VRS.has(el.vr)) {
+  if (LONG_FORM_VRS.has(el.vr) || !isRecognizedVr(el.vr)) {
     return Buffer.concat([
       uint16(group, littleEndian),
       uint16(element, littleEndian),
@@ -13502,7 +13601,7 @@ function encodeMetaElement(tag, vr, rawValue) {
   const elementBuf = Buffer.alloc(2);
   elementBuf.writeUInt16LE(element, 0);
   const vrBuf = Buffer.from(vr, "ascii");
-  if (LONG_FORM_VRS.has(vr)) {
+  if (LONG_FORM_VRS.has(vr) || !isRecognizedVr(vr)) {
     const lengthBuf2 = Buffer.alloc(4);
     lengthBuf2.writeUInt32LE(value.length, 0);
     return Buffer.concat([
@@ -14697,7 +14796,6 @@ function uidValueMultiplicity(rawBytes) {
 }
 
 // src/deident/embedded.ts
-var KNOWN_VRS2 = new Set(Object.keys(BE_VR_STRIDE));
 var UNDEFINED_LENGTH4 = 4294967295;
 var FFFE_GROUP = 65534;
 var SCANNABLE_CARRIER_VRS = /* @__PURE__ */ new Set([
@@ -14758,7 +14856,7 @@ function decodeAt(value, off, encoding) {
     return next2 > value.length ? void 0 : { next: next2, tag };
   }
   const vr = value.toString("latin1", off + 4, off + 6);
-  if (!KNOWN_VRS2.has(vr)) return void 0;
+  if (!KNOWN_VRS.has(vr)) return void 0;
   if (LONG_FORM_VRS.has(vr)) {
     if (off + 12 > value.length) return void 0;
     if (value[off + 6] !== 0 || value[off + 7] !== 0) return void 0;
@@ -14895,7 +14993,6 @@ var BODY_ENCODING2 = {
 };
 var MAX_UNAUDITABLE_SEQUENCE_FINDINGS = 64;
 var MAX_UNDEFINED_VR_FINDINGS = 64;
-var KNOWN_VRS3 = new Set(Object.keys(BE_VR_STRIDE));
 function validateRetain(retain) {
   const valid = new Set(DEIDENTIFY_OPTIONS);
   const active = /* @__PURE__ */ new Set();
@@ -15016,7 +15113,7 @@ function actsOnTag(tag, ctx) {
   return resolveAction(effectiveCode(action, ctx.active)) !== "K";
 }
 function hasUndefinedVr(el) {
-  return !KNOWN_VRS3.has(el.vr);
+  return !KNOWN_VRS.has(el.vr);
 }
 function keepOrEmpty(el, ctx, contextPath, out) {
   if (hasUndefinedVr(el)) {
@@ -15080,6 +15177,26 @@ function creatorFor(tag, creators) {
   const { group, element } = splitTag(tag);
   return creators.get(`${String(group)}:${String(element >> 8 & 255)}`);
 }
+var UNDEFINED_LENGTH5 = 4294967295;
+var EXPLICIT_SQ_HEADER_BYTES = 12;
+function itemStreamOverrunsSequence(el, encoding) {
+  if (el.vr !== "SQ" || el.length === UNDEFINED_LENGTH5) return false;
+  const headerBytes = encoding === "implicit" ? 0 : EXPLICIT_SQ_HEADER_BYTES;
+  return el.rawBytes.length - headerBytes > el.length;
+}
+function settledBound(source, encoding) {
+  let index = source.length;
+  let byteOffset;
+  for (const [at, el] of source.entries()) {
+    if (!itemStreamOverrunsSequence(el, encoding) && !isUnauditableSequence(el)) continue;
+    if (index === source.length) index = at + 1;
+    if (byteOffset === void 0 || el.byteOffset < byteOffset) byteOffset = el.byteOffset;
+  }
+  return { index, byteOffset };
+}
+function isSettled(el, at, bound) {
+  return at < bound.index && (bound.byteOffset === void 0 || el.byteOffset <= bound.byteOffset);
+}
 function keepsPrivate(el, ctx, creators) {
   if (!ctx.active.has("RetainSafePrivate") || ctx.profile === void 0) return false;
   if (isPrivateCreatorElement(el.tag)) {
@@ -15089,7 +15206,7 @@ function keepsPrivate(el, ctx, creators) {
   if (creator === void 0) return false;
   return resolvePrivateTag(ctx.profile, el.tag, creator) !== void 0;
 }
-function processElements(source, ctx, contextPath) {
+function processElements(source, ctx, contextPath, reservationsUsable) {
   const out = {
     elements: /* @__PURE__ */ new Map(),
     attributes: [],
@@ -15099,10 +15216,12 @@ function processElements(source, ctx, contextPath) {
     undefinedVrElements: [],
     warnings: []
   };
-  const creators = creatorsInScope(source);
-  for (const el of source) {
+  const bound = settledBound(source, ctx.encoding);
+  const creators = creatorsInScope(source.filter((el, at) => isSettled(el, at, bound)));
+  for (const [at, el] of source.entries()) {
     if (isPrivateTag(el.tag)) {
-      if (keepsPrivate(el, ctx, creators)) keepOrEmpty(el, ctx, contextPath, out);
+      if (reservationsUsable && isSettled(el, at, bound) && keepsPrivate(el, ctx, creators))
+        keepOrEmpty(el, ctx, contextPath, out);
       else out.removedPrivateTags.push(el.tag);
       continue;
     }
@@ -15110,7 +15229,8 @@ function processElements(source, ctx, contextPath) {
     if (action === void 0) {
       if (el.vr === "SQ") {
         if (isUnauditableSequence(el)) emptyUnauditableSequence(el, ctx, contextPath, out);
-        else out.elements.set(el.tag, descendSequence(el, ctx, contextPath, out));
+        else
+          out.elements.set(el.tag, descendSequence(el, ctx, contextPath, out, reservationsUsable));
       } else {
         keepOrEmpty(el, ctx, contextPath, out);
       }
@@ -15118,7 +15238,7 @@ function processElements(source, ctx, contextPath) {
     }
     const resolved = resolveAction(effectiveCode(action, ctx.active));
     if (el.vr === "SQ") {
-      applySequenceAction(el, resolved, action, ctx, contextPath, out);
+      applySequenceAction(el, resolved, action, ctx, contextPath, out, reservationsUsable);
       continue;
     }
     let applied;
@@ -15159,11 +15279,12 @@ function processElements(source, ctx, contextPath) {
   }
   return out;
 }
-function descendSequence(el, ctx, contextPath, out) {
+function descendSequence(el, ctx, contextPath, out, reservationsUsable) {
+  const childReservationsUsable = reservationsUsable && !itemStreamOverrunsSequence(el, ctx.encoding);
   const newItems = [];
   (el.items ?? []).forEach((item, index) => {
     const childPath = [...contextPath, `${el.tag}[${String(index)}]`];
-    const inner = processElements(item.elements(), ctx, childPath);
+    const inner = processElements(item.elements(), ctx, childPath, childReservationsUsable);
     out.attributes.push(...inner.attributes);
     out.removedPrivateTags.push(...inner.removedPrivateTags);
     out.embeddedAttributes.push(...inner.embeddedAttributes);
@@ -15174,7 +15295,7 @@ function descendSequence(el, ctx, contextPath, out) {
   });
   return rebuildSequence(el, newItems, ctx.encoding);
 }
-function applySequenceAction(el, resolved, action, ctx, contextPath, out) {
+function applySequenceAction(el, resolved, action, ctx, contextPath, out, reservationsUsable) {
   let applied;
   switch (resolved) {
     case "X":
@@ -15190,7 +15311,7 @@ function applySequenceAction(el, resolved, action, ctx, contextPath, out) {
         emptyUnauditableSequence(el, ctx, contextPath, out);
         applied = "emptied";
       } else {
-        out.elements.set(el.tag, descendSequence(el, ctx, contextPath, out));
+        out.elements.set(el.tag, descendSequence(el, ctx, contextPath, out, reservationsUsable));
         applied = "cleaned";
       }
       break;
@@ -15200,7 +15321,7 @@ function applySequenceAction(el, resolved, action, ctx, contextPath, out) {
         emptyUnauditableSequence(el, ctx, contextPath, out);
         applied = "emptied";
       } else {
-        out.elements.set(el.tag, descendSequence(el, ctx, contextPath, out));
+        out.elements.set(el.tag, descendSequence(el, ctx, contextPath, out, reservationsUsable));
         applied = "kept";
       }
       break;
@@ -15232,6 +15353,47 @@ function defaultMethod(active) {
   const base = "Cosyte @cosyte/dicom: PS3.15 Basic Application Level Confidentiality Profile";
   return active.size === 0 ? base : `${base} + ${[...active].join(", ")}`;
 }
+var VALUE_DELIMITER = 92;
+var MAX_SHORT_FORM_VALUE_BYTES = 65534;
+function addDeidentificationMethod(existing, method) {
+  const added = trimTrailingPad(Buffer.from(method, "latin1"));
+  if (existing === void 0 || existing.vr !== "LO") {
+    return { value: added, replacedPrior: false, retainedPrior: false };
+  }
+  const kept = Buffer.from(trimTrailingPad(existing.rawBytes));
+  if (kept.length === 0) return { value: added, replacedPrior: false, retainedPrior: false };
+  const keptValues = splitValues(kept).map(trimTrailingPad);
+  const missing = added.length === 0 ? [] : splitValues(added).filter((v) => !keptValues.some((k) => k.equals(trimTrailingPad(v))));
+  const parts = [kept];
+  for (const value2 of missing) {
+    parts.push(Buffer.from([VALUE_DELIMITER]), value2);
+  }
+  const value = trimTrailingPad(Buffer.concat(parts));
+  if (value.length > MAX_SHORT_FORM_VALUE_BYTES) {
+    return { value: added, replacedPrior: true, retainedPrior: false };
+  }
+  return { value, replacedPrior: false, retainedPrior: true };
+}
+function trimTrailingPad(value) {
+  let end = value.length;
+  while (end > 0) {
+    const last = value[end - 1];
+    if (last === 32 || last === 0) end--;
+    else break;
+  }
+  return value.subarray(0, end);
+}
+function splitValues(value) {
+  const out = [];
+  let start = 0;
+  for (let i = 0; i <= value.length; i++) {
+    if (i === value.length || value[i] === VALUE_DELIMITER) {
+      out.push(value.subarray(start, i));
+      start = i + 1;
+    }
+  }
+  return out;
+}
 function hasUncleanedBurnedIn(ds) {
   if (!ds.has(TAG_PIXEL_DATA)) return false;
   const flag = ds.get(TAG_BURNED_IN_ANNOTATION);
@@ -15251,7 +15413,7 @@ function deidentify(ds, options = {}) {
     encoding,
     budget: { unauditableSequences: 0, undefinedVrElements: 0 }
   };
-  const processed = processElements(ds.elements(), ctx, []);
+  const processed = processElements(ds.elements(), ctx, [], true);
   const {
     elements,
     attributes,
@@ -15265,11 +15427,23 @@ function deidentify(ds, options = {}) {
     insertedScalar(TAG_PATIENT_IDENTITY_REMOVED, "CS", Buffer.from("YES", "latin1"), littleEndian)
   );
   const method = options.deidentificationMethod ?? defaultMethod(active);
+  const priorMethod = elements.get(TAG_DEIDENTIFICATION_METHOD);
+  const deidentMethod = addDeidentificationMethod(priorMethod, method);
   elements.set(
     TAG_DEIDENTIFICATION_METHOD,
-    insertedScalar(TAG_DEIDENTIFICATION_METHOD, "LO", Buffer.from(method, "latin1"), littleEndian)
+    insertedScalar(TAG_DEIDENTIFICATION_METHOD, "LO", deidentMethod.value, littleEndian)
   );
   const warnings = [...processed.warnings];
+  if (deidentMethod.replacedPrior) {
+    warnings.push(
+      deidentMethodNotAdded({ byteOffset: priorMethod?.byteOffset ?? 0, fileMeta: false })
+    );
+  }
+  if (deidentMethod.retainedPrior) {
+    warnings.push(
+      deidentMethodPriorRetained({ byteOffset: priorMethod?.byteOffset ?? 0, fileMeta: false })
+    );
+  }
   if (hasUncleanedBurnedIn(ds)) {
     const offset = ds.get(TAG_PIXEL_DATA)?.byteOffset ?? 0;
     warnings.push(burnedInAnnotationNotRemoved({ byteOffset: offset, fileMeta: false }));