@ixo/openhands-sdk 0.0.0-stage → 0.1.0

package/dist/esm/geo/box.js

@@ -0,0 +1,85 @@
+/**
+ * Where on earth an ask is about.
+ *
+ * A box with named sides, because the two APIs that answer questions about
+ * boxes disagree about how to write one — and they disagree in the worst
+ * possible way, by both taking four bare numbers in a comma-separated string:
+ *
+ *   OpenStreetMap's changesets API  →  min_lon, min_lat, max_lon, max_lat
+ *   Overpass                        →  south,   west,    north,    east
+ *
+ * Longitude first in one, latitude first in the other. A box written for the
+ * wrong one is not an error, it is a *different place* — usually in the sea
+ * off West Africa, where (0,0)-ish mistakes go — and the answer comes back
+ * cheerfully empty. So no part of this codebase writes those strings by hand;
+ * both spellings come from here, and a test asserts they describe the same
+ * box, which is the only way to be sure they never drift apart.
+ */
+const EARTH_RADIUS_M = 6_371_008.8;
+const toRadians = (degrees) => (degrees * Math.PI) / 180;
+/** Whether a box is one at all — the guard every entry point uses. */
+export function isBox(box) {
+    if (!box || typeof box !== "object")
+        return false;
+    const { west, south, east, north } = box;
+    const numbers = [west, south, east, north];
+    if (!numbers.every((value) => typeof value === "number" && Number.isFinite(value)))
+        return false;
+    if (south < -90 || north > 90 || south >= north)
+        return false;
+    /* A box that wraps the antimeridian is legal on earth and illegal in both
+       APIs' query strings. Refusing it here beats a silently empty answer. */
+    if (west < -180 || east > 180 || west >= east)
+        return false;
+    return true;
+}
+export const isPoint = (point) => Boolean(point) &&
+    typeof point === "object" &&
+    typeof point.lat === "number" &&
+    typeof point.lon === "number" &&
+    Number.isFinite(point.lat) &&
+    Number.isFinite(point.lon) &&
+    Math.abs(point.lat) <= 90 &&
+    Math.abs(point.lon) <= 180;
+/** `min_lon,min_lat,max_lon,max_lat` — the OSM changesets API's order. */
+export const osmBboxParam = (box) => `${box.west},${box.south},${box.east},${box.north}`;
+/** `south,west,north,east` — Overpass's order, and not the one above. */
+export const overpassBbox = (box) => `${box.south},${box.west},${box.north},${box.east}`;
+/**
+ * A box around a point, sized in metres.
+ *
+ * Longitude degrees shrink towards the poles, so the east–west half-width is
+ * divided by cos(latitude); without that a "500 m" box in Reykjavík is half
+ * the width it claims. Clamped near the poles, where the correction runs away
+ * and the whole idea of a rectangle stops being useful.
+ */
+export function boxAround(centre, metres) {
+    const latitudeSpan = (metres / EARTH_RADIUS_M) * (180 / Math.PI);
+    const shrink = Math.max(Math.cos(toRadians(centre.lat)), 0.01);
+    const longitudeSpan = latitudeSpan / shrink;
+    return {
+        west: Math.max(centre.lon - longitudeSpan, -180),
+        south: Math.max(centre.lat - latitudeSpan, -90),
+        east: Math.min(centre.lon + longitudeSpan, 180),
+        north: Math.min(centre.lat + latitudeSpan, 90)
+    };
+}
+/** Great-circle distance in metres — what `within-radius` actually measures. */
+export function haversineMetres(from, to) {
+    const dLat = toRadians(to.lat - from.lat);
+    const dLon = toRadians(to.lon - from.lon);
+    const a = Math.sin(dLat / 2) ** 2 + Math.cos(toRadians(from.lat)) * Math.cos(toRadians(to.lat)) * Math.sin(dLon / 2) ** 2;
+    return 2 * EARTH_RADIUS_M * Math.asin(Math.min(1, Math.sqrt(a)));
+}
+export const containsPoint = (box, point) => point.lat >= box.south && point.lat <= box.north && point.lon >= box.west && point.lon <= box.east;
+/** Whether two boxes share any ground — how a changeset's own bounds are judged. */
+export const boxesOverlap = (a, b) => a.west <= b.east && b.west <= a.east && a.south <= b.north && b.south <= a.north;
+/** Metres per side for a cell, by the widget's precision. Coarse on purpose. */
+const PRECISION_METRES = { "1": 100_000, "2": 20_000, "3": 5_000, "4": 1_000, "5": 250, "6": 60, "7": 15 };
+export function boxForGridCell(cell, fallbackMetres = 1_000) {
+    if (typeof cell?.latitude !== "number" || typeof cell?.longitude !== "number")
+        return null;
+    const metres = PRECISION_METRES[String(cell.gridPrecision ?? "")] ?? fallbackMetres;
+    return boxAround({ lat: cell.latitude, lon: cell.longitude }, metres / 2);
+}
+//# sourceMappingURL=box.js.map

package/dist/esm/geo/box.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"box.js","sourceRoot":"","sources":["../../../src/geo/box.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAeH,MAAM,cAAc,GAAG,WAAW,CAAC;AACnC,MAAM,SAAS,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;AAEzE,sEAAsE;AACtE,MAAM,UAAU,KAAK,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,GAAsB,CAAC;IAC5D,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjG,IAAI,KAAM,GAAG,CAAC,EAAE,IAAI,KAAM,GAAG,EAAE,IAAI,KAAM,IAAI,KAAM;QAAE,OAAO,KAAK,CAAC;IAClE;8EAC0E;IAC1E,IAAI,IAAK,GAAG,CAAC,GAAG,IAAI,IAAK,GAAG,GAAG,IAAI,IAAK,IAAI,IAAK;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAAc,EAAqB,EAAE,CAC3D,OAAO,CAAC,KAAK,CAAC;IACd,OAAO,KAAK,KAAK,QAAQ;IACzB,OAAQ,KAAkB,CAAC,GAAG,KAAK,QAAQ;IAC3C,OAAQ,KAAkB,CAAC,GAAG,KAAK,QAAQ;IAC3C,MAAM,CAAC,QAAQ,CAAE,KAAkB,CAAC,GAAG,CAAC;IACxC,MAAM,CAAC,QAAQ,CAAE,KAAkB,CAAC,GAAG,CAAC;IACxC,IAAI,CAAC,GAAG,CAAE,KAAkB,CAAC,GAAG,CAAC,IAAI,EAAE;IACvC,IAAI,CAAC,GAAG,CAAE,KAAkB,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;AAE3C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;AAEzG,yEAAyE;AACzE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;AAEzG;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,MAAgB,EAAE,MAAc;IACxD,MAAM,YAAY,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,YAAY,GAAG,MAAM,CAAC;IAE5C,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,aAAa,EAAE,CAAC,GAAG,CAAC;QAChD,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,YAAY,EAAE,CAAC,EAAE,CAAC;QAC/C,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,aAAa,EAAE,GAAG,CAAC;QAC/C,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,YAAY,EAAE,EAAE,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,IAAc,EAAE,EAAY;IAC1D,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1H,OAAO,CAAC,GAAG,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,KAAe,EAAW,EAAE,CACrE,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC;AAErG,oFAAoF;AACpF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAE,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC;AAgBhJ,gFAAgF;AAChF,MAAM,gBAAgB,GAA2B,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AAEnI,MAAM,UAAU,cAAc,CAAC,IAAkB,EAAE,cAAc,GAAG,KAAK;IACvE,IAAI,OAAO,IAAI,EAAE,QAAQ,KAAK,QAAQ,IAAI,OAAO,IAAI,EAAE,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3F,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,cAAc,CAAC;IACpF,OAAO,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;AAC5E,CAAC"}

package/dist/esm/geo/exif.d.ts

@@ -0,0 +1,20 @@
+import type { GeoPoint } from "./box.ts";
+/**
+ * What a photograph says about itself: where, and when.
+ *
+ * One walk yields both, because the before/after gate needs both of two files
+ * and parsing each twice would double the work for no gain. `gpsFromJpeg`
+ * stays as it was — every existing caller wants only the point.
+ *
+ * Both are **client-assisted evidence**: EXIF is trivially editable, and every
+ * gate that reads it says so where a person can read it.
+ */
+export interface PhotoFacts {
+    point: GeoPoint | null;
+    /** Local time as the camera wrote it, no zone. Comparable to its own pair. */
+    takenAt: string | null;
+}
+/** The coordinates a JPEG carries, or null — which is the ordinary answer. */
+export declare const gpsFromJpeg: (bytes: Uint8Array) => GeoPoint | null;
+export declare function factsFromJpeg(bytes: Uint8Array): PhotoFacts;
+//# sourceMappingURL=exif.d.ts.map

package/dist/esm/geo/exif.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exif.d.ts","sourceRoot":"","sources":["../../../src/geo/exif.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AA4IzC;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,8EAA8E;AAC9E,eAAO,MAAM,WAAW,GAAI,OAAO,UAAU,KAAG,QAAQ,GAAG,IAAkC,CAAC;AAE9F,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAyE3D"}

package/dist/esm/geo/exif.js

@@ -0,0 +1,215 @@
+/**
+ * Where a photograph says it was taken.
+ *
+ * Hand-rolled rather than a dependency, for the same reason the Matrix client
+ * here is five REST calls instead of a library: this reads two tags out of one
+ * container, it runs inside a Cloudflare Worker whose deployability is already
+ * proven, and an EXIF library brings orientation, thumbnails, XMP, IPTC and a
+ * decoder for every camera maker's private notes to answer a question about
+ * six numbers.
+ *
+ * The format, briefly. A JPEG is segments beginning `FF D8`; the one marked
+ * `FF E1` and starting `Exif\0\0` holds a TIFF block, which has its own byte
+ * order (`II` little-endian or `MM` big-endian — cameras genuinely use both),
+ * a table of tags, and a pointer at tag `0x8825` to a second table holding the
+ * GPS tags. Latitude and longitude are each three rationals — degrees,
+ * minutes, seconds — with a separate tag saying N/S and E/W, and **the sign
+ * lives only in that letter**: a photograph taken in Chile carries a positive
+ * latitude and an `S`, and reading the number without the letter puts it in
+ * Canada.
+ *
+ * Everything is bounds-checked and every failure is `null`, because this is
+ * handed bytes from strangers. It is also **client-assisted evidence**: EXIF
+ * is trivially editable, and the gate that reads it says so.
+ */
+const GPS_IFD_POINTER = 0x8825;
+const EXIF_IFD_POINTER = 0x8769;
+/** When the shutter fired. `DateTimeOriginal` in the Exif sub-IFD... */
+const TAG_DATE_ORIGINAL = 0x9003;
+/** ...and `DateTime` in IFD0, which is the file's own modification stamp and
+    the weaker of the two — used only when the first is absent. */
+const TAG_DATE_MODIFIED = 0x0132;
+const TAG_LAT_REF = 0x0001;
+const TAG_LAT = 0x0002;
+const TAG_LON_REF = 0x0003;
+const TAG_LON = 0x0004;
+/** Bytes per TIFF type code, indexed by the code itself. 0 = one we skip. */
+const TYPE_SIZE = [0, 1, 1, 2, 4, 8, 1, 1, 2, 4, 8, 4, 8];
+const u16 = (r, at) => r.view.getUint16(at, r.little);
+const u32 = (r, at) => r.view.getUint32(at, r.little);
+/** Three rationals — degrees, minutes, seconds — as one decimal degree. */
+function degrees(r, at, count) {
+    if (count < 3)
+        return null;
+    let total = 0;
+    for (let part = 0; part < 3; part += 1) {
+        const offset = at + part * 8;
+        if (offset + 8 > r.view.byteLength)
+            return null;
+        const denominator = u32(r, offset + 4);
+        if (denominator === 0)
+            return null;
+        total += u32(r, offset) / denominator / 60 ** part;
+    }
+    return total;
+}
+/** The one-letter reference, which carries the sign. */
+function letter(r, entry) {
+    const count = u32(r, entry + 4);
+    /* A value of four bytes or fewer is stored in the entry itself; anything
+       larger is a pointer. A single letter is always inline. */
+    const at = count <= 4 ? entry + 8 : r.base + u32(r, entry + 8);
+    return at < r.view.byteLength ? String.fromCharCode(r.view.getUint8(at)).toUpperCase() : "";
+}
+/**
+ * An ASCII value, for the date tags.
+ *
+ * EXIF dates are `YYYY:MM:DD HH:MM:SS` in **local time with no zone** — the
+ * standard simply has nowhere to put one. Two photographs from the same phone
+ * an hour apart are therefore comparable to each other, which is exactly and
+ * only what the before/after gate asks of them. Treating one as an instant on
+ * a world clock would be inventing a timezone.
+ */
+function ascii(r, entry) {
+    const count = u32(r, entry + 4);
+    if (count === 0 || count > 64)
+        return "";
+    const at = count <= 4 ? entry + 8 : r.base + u32(r, entry + 8);
+    if (at + count > r.view.byteLength)
+        return "";
+    let out = "";
+    for (let index = 0; index < count; index += 1) {
+        const code = r.view.getUint8(at + index);
+        if (code === 0)
+            break;
+        out += String.fromCharCode(code);
+    }
+    return out.trim();
+}
+/** `2026:09:20 09:35:12` → `2026-09-20T09:35:12`. Empty for anything else. */
+function exifDate(raw) {
+    const match = /^(\d{4}):(\d{2}):(\d{2})[ T](\d{2}):(\d{2}):(\d{2})$/.exec(raw);
+    if (!match)
+        return null;
+    const [, year, month, day, hour, minute, second] = match;
+    const iso = `${year}-${month}-${day}T${hour}:${minute}:${second}`;
+    return Number.isFinite(Date.parse(iso)) ? iso : null;
+}
+function readGpsIfd(r, at) {
+    if (at + 2 > r.view.byteLength)
+        return null;
+    const entries = u16(r, at);
+    if (entries > 200)
+        return null;
+    let lat = null;
+    let lon = null;
+    let latRef = "N";
+    let lonRef = "E";
+    for (let index = 0; index < entries; index += 1) {
+        const entry = at + 2 + index * 12;
+        if (entry + 12 > r.view.byteLength)
+            return null;
+        const tag = u16(r, entry);
+        const type = u16(r, entry + 2);
+        const count = u32(r, entry + 4);
+        const size = (TYPE_SIZE[type] ?? 0) * count;
+        const valueAt = size <= 4 ? entry + 8 : r.base + u32(r, entry + 8);
+        if (tag === TAG_LAT)
+            lat = degrees(r, valueAt, count);
+        else if (tag === TAG_LON)
+            lon = degrees(r, valueAt, count);
+        else if (tag === TAG_LAT_REF)
+            latRef = letter(r, entry);
+        else if (tag === TAG_LON_REF)
+            lonRef = letter(r, entry);
+    }
+    if (lat === null || lon === null)
+        return null;
+    /* The sign lives in the letter, and only there. */
+    const point = { lat: latRef === "S" ? -lat : lat, lon: lonRef === "W" ? -lon : lon };
+    return Math.abs(point.lat) <= 90 && Math.abs(point.lon) <= 180 ? point : null;
+}
+/** The coordinates a JPEG carries, or null — which is the ordinary answer. */
+export const gpsFromJpeg = (bytes) => factsFromJpeg(bytes).point;
+export function factsFromJpeg(bytes) {
+    const none = { point: null, takenAt: null };
+    try {
+        if (bytes.length < 12 || bytes[0] !== 0xff || bytes[1] !== 0xd8)
+            return none;
+        const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+        /* Walk the segment chain rather than scanning for a magic string: a byte
+           sequence spelling "Exif" can appear inside image data. */
+        let at = 2;
+        while (at + 4 <= bytes.length) {
+            if (bytes[at] !== 0xff)
+                return none;
+            const marker = bytes[at + 1];
+            /* Start of scan — the compressed image begins and metadata is behind us. */
+            if (marker === 0xda)
+                return none;
+            const length = view.getUint16(at + 2, false);
+            if (length < 2)
+                return none;
+            if (marker === 0xe1 && at + 10 <= bytes.length) {
+                const isExif = bytes[at + 4] === 0x45 && bytes[at + 5] === 0x78 && bytes[at + 6] === 0x69 && bytes[at + 7] === 0x66;
+                if (isExif) {
+                    const base = at + 10;
+                    if (base + 8 > bytes.length)
+                        return none;
+                    const order = view.getUint16(base, false);
+                    if (order !== 0x4949 && order !== 0x4d4d)
+                        return none;
+                    const r = { view, base, little: order === 0x4949 };
+                    const first = u32(r, base + 4);
+                    const ifd0 = base + first;
+                    if (ifd0 + 2 > bytes.length)
+                        return none;
+                    const count = u16(r, ifd0);
+                    if (count > 200)
+                        return none;
+                    const found = { point: null, takenAt: null };
+                    let exifIfd = 0;
+                    for (let index = 0; index < count; index += 1) {
+                        const entry = ifd0 + 2 + index * 12;
+                        if (entry + 12 > bytes.length)
+                            return found;
+                        const tag = u16(r, entry);
+                        if (tag === GPS_IFD_POINTER)
+                            found.point = readGpsIfd(r, base + u32(r, entry + 8));
+                        else if (tag === EXIF_IFD_POINTER)
+                            exifIfd = base + u32(r, entry + 8);
+                        /* The weaker stamp, kept only until the real one turns up. */
+                        else if (tag === TAG_DATE_MODIFIED)
+                            found.takenAt = exifDate(ascii(r, entry));
+                    }
+                    /* `DateTimeOriginal` lives in the Exif sub-IFD and is the shutter
+                       time — it wins over IFD0's file stamp, which an edit can move. */
+                    if (exifIfd && exifIfd + 2 <= bytes.length) {
+                        const subCount = u16(r, exifIfd);
+                        if (subCount <= 200) {
+                            for (let index = 0; index < subCount; index += 1) {
+                                const entry = exifIfd + 2 + index * 12;
+                                if (entry + 12 > bytes.length)
+                                    break;
+                                if (u16(r, entry) === TAG_DATE_ORIGINAL) {
+                                    const original = exifDate(ascii(r, entry));
+                                    if (original)
+                                        found.takenAt = original;
+                                    break;
+                                }
+                            }
+                        }
+                    }
+                    return found;
+                }
+            }
+            at += 2 + length;
+        }
+        return none;
+    }
+    catch {
+        /* Bytes from a stranger. Absence is an answer; a crash is not. */
+        return none;
+    }
+}
+//# sourceMappingURL=exif.js.map

package/dist/esm/geo/exif.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exif.js","sourceRoot":"","sources":["../../../src/geo/exif.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,wEAAwE;AACxE,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC;kEACkE;AAClE,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,OAAO,GAAG,MAAM,CAAC;AACvB,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,OAAO,GAAG,MAAM,CAAC;AAEvB,6EAA6E;AAC7E,MAAM,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAS1D,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAU,EAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AAC9E,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAU,EAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,2EAA2E;AAC3E,SAAS,OAAO,CAAC,CAAS,EAAE,EAAU,EAAE,KAAa;IACnD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC;QAC7B,IAAI,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,WAAW,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,KAAK,IAAI,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,WAAW,GAAG,EAAE,IAAI,IAAI,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wDAAwD;AACxD,SAAS,MAAM,CAAC,CAAS,EAAE,KAAa;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAChC;gEAC4D;IAC5D,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC/D,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,KAAK,CAAC,CAAS,EAAE,KAAa;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,EAAE,CAAC;IACzC,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAC9C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM;QACtB,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,8EAA8E;AAC9E,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,KAAK,GAAG,sDAAsD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IACzD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,IAAI,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;IAClE,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CAAC,CAAS,EAAE,EAAU;IACvC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3B,IAAI,OAAO,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAE/B,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,IAAI,MAAM,GAAG,GAAG,CAAC;IAEjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAClC,IAAI,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAEhD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAEnE,IAAI,GAAG,KAAK,OAAO;YAAE,GAAG,GAAG,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;aACjD,IAAI,GAAG,KAAK,OAAO;YAAE,GAAG,GAAG,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;aACtD,IAAI,GAAG,KAAK,WAAW;YAAE,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;aACnD,IAAI,GAAG,KAAK,WAAW;YAAE,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE9C,mDAAmD;IACnD,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACrF,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAChF,CAAC;AAkBD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAiB,EAAmB,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;AAE9F,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,MAAM,IAAI,GAAe,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAE5E;oEAC4D;QAC5D,IAAI,EAAE,GAAG,CAAC,CAAC;QACX,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACpC,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,GAAG,CAAC,CAAE,CAAC;YAC9B,4EAA4E;YAC5E,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAI,MAAM,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YAE5B,IAAI,MAAM,KAAK,IAAI,IAAI,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;gBACpH,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC;oBACrB,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;wBAAE,OAAO,IAAI,CAAC;oBACzC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAC1C,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM;wBAAE,OAAO,IAAI,CAAC;oBAEtD,MAAM,CAAC,GAAW,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,KAAK,MAAM,EAAE,CAAC;oBAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;oBAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,KAAK,CAAC;oBAC1B,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;wBAAE,OAAO,IAAI,CAAC;oBAEzC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;oBAC3B,IAAI,KAAK,GAAG,GAAG;wBAAE,OAAO,IAAI,CAAC;oBAE7B,MAAM,KAAK,GAAe,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;oBACzD,IAAI,OAAO,GAAG,CAAC,CAAC;oBAEhB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;wBAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;wBACpC,IAAI,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM;4BAAE,OAAO,KAAK,CAAC;wBAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;wBAC1B,IAAI,GAAG,KAAK,eAAe;4BAAE,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;6BAC9E,IAAI,GAAG,KAAK,gBAAgB;4BAAE,OAAO,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;wBACtE,8DAA8D;6BACzD,IAAI,GAAG,KAAK,iBAAiB;4BAAE,KAAK,CAAC,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;oBAChF,CAAC;oBAED;wFACoE;oBACpE,IAAI,OAAO,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;wBAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;wBACjC,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;4BACpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gCACjD,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gCACvC,IAAI,KAAK,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM;oCAAE,MAAM;gCACrC,IAAI,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,iBAAiB,EAAE,CAAC;oCACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;oCAC3C,IAAI,QAAQ;wCAAE,KAAK,CAAC,OAAO,GAAG,QAAQ,CAAC;oCACvC,MAAM;gCACR,CAAC;4BACH,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/esm/geo/exifcarry.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Moving a photograph's own metadata onto a smaller copy of itself.
+ *
+ * The problem this solves is concrete and was found in a village: the upload
+ * ceiling is a few megabytes, phone photographs are routinely 2–5 MB, and
+ * a canvas resize — the obvious fix — **throws away the EXIF the whole check
+ * reads**. So a worker either cannot upload, or uploads something nobody can
+ * verify. Neither is a product.
+ *
+ * The answer is to keep the camera's own APP1 segment byte for byte and put it
+ * back on the resized image. What that claims is exactly what it should: this
+ * is the same photograph, at fewer pixels, and its metadata is the camera's
+ * unmodified. Nothing is invented — the alternative is a stripped file, which
+ * is strictly less true.
+ *
+ * It is worth being plain that EXIF is editable by anyone who wants to, which
+ * is why every gate that reads it calls itself client-assisted. Carrying it
+ * across a resize does not make it weaker; it keeps it exactly as weak as it
+ * already was.
+ */
+/** The `FF E1 … Exif\0\0 …` segment, exactly as the camera wrote it. */
+export declare function exifSegment(bytes: Uint8Array): Uint8Array | null;
+/**
+ * Put a segment back, immediately after the start-of-image marker.
+ *
+ * Any APP1 the encoder wrote itself is dropped first: two Exif segments is an
+ * ambiguity readers resolve differently, including ours, which takes the first
+ * it meets. One photograph, one answer about where it was taken.
+ */
+export declare function withExifSegment(jpeg: Uint8Array, segment: Uint8Array): Uint8Array;
+//# sourceMappingURL=exifcarry.d.ts.map

package/dist/esm/geo/exifcarry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exifcarry.d.ts","sourceRoot":"","sources":["../../../src/geo/exifcarry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,wEAAwE;AACxE,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAiBhE;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,GAAG,UAAU,CAqBjF"}

package/dist/esm/geo/exifcarry.js

@@ -0,0 +1,77 @@
+/**
+ * Moving a photograph's own metadata onto a smaller copy of itself.
+ *
+ * The problem this solves is concrete and was found in a village: the upload
+ * ceiling is a few megabytes, phone photographs are routinely 2–5 MB, and
+ * a canvas resize — the obvious fix — **throws away the EXIF the whole check
+ * reads**. So a worker either cannot upload, or uploads something nobody can
+ * verify. Neither is a product.
+ *
+ * The answer is to keep the camera's own APP1 segment byte for byte and put it
+ * back on the resized image. What that claims is exactly what it should: this
+ * is the same photograph, at fewer pixels, and its metadata is the camera's
+ * unmodified. Nothing is invented — the alternative is a stripped file, which
+ * is strictly less true.
+ *
+ * It is worth being plain that EXIF is editable by anyone who wants to, which
+ * is why every gate that reads it calls itself client-assisted. Carrying it
+ * across a resize does not make it weaker; it keeps it exactly as weak as it
+ * already was.
+ */
+/** The `FF E1 … Exif\0\0 …` segment, exactly as the camera wrote it. */
+export function exifSegment(bytes) {
+    if (bytes.length < 4 || bytes[0] !== 0xff || bytes[1] !== 0xd8)
+        return null;
+    let at = 2;
+    while (at + 4 <= bytes.length) {
+        if (bytes[at] !== 0xff)
+            return null;
+        const marker = bytes[at + 1];
+        /* Start of scan: the pixels begin and the metadata is behind us. */
+        if (marker === 0xda)
+            return null;
+        const length = (bytes[at + 2] << 8) | bytes[at + 3];
+        if (length < 2)
+            return null;
+        if (marker === 0xe1 && at + 10 <= bytes.length) {
+            const isExif = bytes[at + 4] === 0x45 && bytes[at + 5] === 0x78 && bytes[at + 6] === 0x69 && bytes[at + 7] === 0x66;
+            if (isExif)
+                return bytes.slice(at, at + 2 + length);
+        }
+        at += 2 + length;
+    }
+    return null;
+}
+/**
+ * Put a segment back, immediately after the start-of-image marker.
+ *
+ * Any APP1 the encoder wrote itself is dropped first: two Exif segments is an
+ * ambiguity readers resolve differently, including ours, which takes the first
+ * it meets. One photograph, one answer about where it was taken.
+ */
+export function withExifSegment(jpeg, segment) {
+    if (jpeg.length < 2 || jpeg[0] !== 0xff || jpeg[1] !== 0xd8)
+        return jpeg;
+    const kept = [];
+    let at = 2;
+    while (at + 4 <= jpeg.length) {
+        if (jpeg[at] !== 0xff)
+            break;
+        const marker = jpeg[at + 1];
+        if (marker === 0xda)
+            break;
+        const length = (jpeg[at + 2] << 8) | jpeg[at + 3];
+        if (length < 2)
+            break;
+        if (marker !== 0xe1)
+            kept.push(...Array.from(jpeg.slice(at, at + 2 + length)));
+        at += 2 + length;
+    }
+    const out = new Uint8Array(2 + segment.length + kept.length + (jpeg.length - at));
+    out.set([0xff, 0xd8], 0);
+    out.set(segment, 2);
+    out.set(Uint8Array.from(kept), 2 + segment.length);
+    out.set(jpeg.slice(at), 2 + segment.length + kept.length);
+    return out;
+}
+//# sourceMappingURL=exifcarry.js.map

package/dist/esm/geo/exifcarry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exifcarry.js","sourceRoot":"","sources":["../../../src/geo/exifcarry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,wEAAwE;AACxE,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5E,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,GAAG,CAAC,CAAE,CAAC;QAC9B,oEAAoE;QACpE,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,GAAG,CAAC,CAAE,CAAC;QACtD,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,MAAM,KAAK,IAAI,IAAI,EAAE,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;YACpH,IAAI,MAAM;gBAAE,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QACtD,CAAC;QACD,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAgB,EAAE,OAAmB;IACnE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEzE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI;YAAE,MAAM;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM;QAC3B,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAE,CAAC;QACpD,IAAI,MAAM,GAAG,CAAC;YAAE,MAAM;QACtB,IAAI,MAAM,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/E,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;IAClF,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpB,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/esm/geo/exifnote.d.ts

@@ -0,0 +1,86 @@
+/**
+ * The app's own note of when and where, written into the photograph.
+ *
+ * A live capture through `<input capture>` on iOS hands the page a JPEG with
+ * an APP1 stub — orientation and nothing else — while a photo-roll pick
+ * carries the camera's full EXIF (Michael's iPhone 16 Pro, iOS 26.6.2,
+ * 2026-09-19). The page knows the moment and the place anyway: `nowAndHere`
+ * asks the browser as the shutter closes and the envelope carries the
+ * answer. But the oracle's stock before/after gate reads the photographs,
+ * not the envelope, so a live-capture cleanup was refused before any judge
+ * saw it.
+ *
+ * This writes that same note where the gate looks: a minimal, valid
+ * `Exif\0\0` TIFF block with `DateTimeOriginal` (+ its offset), a GPS IFD
+ * when the place is known, and `Software = "openhands-app"` so a reviewer
+ * can tell the app's note from a camera's. It **never overwrites a camera's
+ * own values**: a photograph that already says when and where is left
+ * untouched; one that says only one of the two keeps that value and gains
+ * the other. The orientation tag a stub carries is kept, so the picture
+ * still stands the right way up.
+ *
+ * As with everything EXIF, this is client-assisted evidence and says so:
+ * the note is the phone's testimony about itself, exactly as it was in the
+ * envelope — no more true, no less, only now where the check reads it.
+ *
+ * Little-endian TIFF, offsets relative to the TIFF header, values of four
+ * bytes or fewer inline, the rest in a data area after the IFDs — the shape
+ * `exif.ts` (and the oracle's port of it) reads.
+ */
+export interface ExifNote {
+    /** The moment, as an ISO instant. A value with no zone is read as UTC. */
+    at: string;
+    lat?: number;
+    lon?: number;
+}
+export interface NoteOptions {
+    /** The local offset to write the time in, minutes east of UTC. Default: this runtime's offset at that instant. */
+    offsetMinutes?: number;
+    /** What `Software` says. */
+    software?: string;
+}
+export interface Noted {
+    bytes: Uint8Array;
+    /** Whether anything was written. False is not a failure: a camera's own EXIF is the better note. */
+    noted: boolean;
+    why: "camera-exif" | "not-jpeg" | "nothing-to-note" | null;
+}
+export declare const NOTE_SOFTWARE = "openhands-app";
+/** Degrees as the three positive rationals EXIF wants; the sign is the caller's letter. */
+export declare function dms(value: number): [number, number, number][];
+/** An ISO instant, or a zone-less stamp read as UTC. Null when it is neither. */
+export declare function instantOf(at: string): number | null;
+/** `YYYY:MM:DD HH:MM:SS` in the given offset, and the offset as EXIF writes it. */
+export declare function exifClock(instantMs: number, offsetMinutes: number): {
+    stamp: string;
+    offset: string;
+};
+/** The orientation a JPEG's existing APP1 carries, if any. */
+export declare function orientationOf(jpeg: Uint8Array): number | null;
+/** A complete `FF E1` APP1 segment holding the note. Exported for the tests; `noteJpeg` is the door. */
+export declare function noteSegment(parts: {
+    stamp?: string;
+    offset?: string;
+    point?: {
+        lat: number;
+        lon: number;
+    } | null;
+    orientation?: number | null;
+    software?: string;
+}): Uint8Array;
+/**
+ * The note, written into a JPEG that lacks it.
+ *
+ * Untouched when the photograph already says when *and* where — a camera's
+ * word beats the page's. Otherwise the camera's value is kept for whichever
+ * of the two it did give, the note fills the other, and the orientation is
+ * carried over.
+ */
+export declare function noteJpeg(jpeg: Uint8Array, note: ExifNote, options?: NoteOptions): Noted;
+/** The same, for a browser's `File`. A file that needed no note is returned as it was. */
+export declare function noteFile(file: File, note: ExifNote, options?: NoteOptions): Promise<{
+    file: File;
+    noted: boolean;
+    why: Noted["why"];
+}>;
+//# sourceMappingURL=exifnote.d.ts.map

package/dist/esm/geo/exifnote.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exifnote.d.ts","sourceRoot":"","sources":["../../../src/geo/exifnote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,MAAM,WAAW,QAAQ;IACvB,0EAA0E;IAC1E,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,kHAAkH;IAClH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,UAAU,CAAC;IAClB,oGAAoG;IACpG,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,aAAa,GAAG,UAAU,GAAG,iBAAiB,GAAG,IAAI,CAAC;CAC5D;AAED,eAAO,MAAM,aAAa,kBAAkB,CAAC;AA6C7C,2FAA2F;AAC3F,wBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAY7D;AAED,iFAAiF;AACjF,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMnD;AAID,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAMrG;AAED,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAwB7D;AAgCD,wGAAwG;AACxG,wBAAgB,WAAW,CAAC,KAAK,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,UAAU,CAoC/K;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,GAAE,WAAgB,GAAG,KAAK,CA4B3F;AAED,0FAA0F;AAC1F,wBAAsB,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;CAAE,CAAC,CAMhJ"}