@penpair/reflection-check 0.3.7 → 0.4.1

package/README.md

@@ -40,8 +40,9 @@ Evidence formats are detected from bytes, not filenames: PNG and static lossless
 WebP (`VP8L`, including a matching `VP8X` canvas) are accepted. Lossy or animated
 WebP and malformed/truncated containers are rejected. The adapter inspects image
 metadata and hashes; the project provider owns actual decoding and pixel comparison.
-Existing PNG baseline approvals retain their exact bytes and hashes. Penpot's core
-export/approval workflow remains PNG; no approved reference is silently converted.
+Existing PNG baseline approvals retain their exact bytes and hashes. New core
+baseline/approval images default to lossless WebP; public Penpot PNG exports remain
+PNG. Existing approved references are never silently converted.
 
 The browser starter saves `.webp` evidence by default. Supply `encodeLosslessWebp`
 from the project's pinned codec, for example Sharp with `lossless: true` and

package/dist/image-evidence.js

@@ -1,98 +1,13 @@
 import { createHash } from "node:crypto";
-import { readFile, stat } from "node:fs/promises";
-import { resolveProjectInput } from "@penpair/core";
+import { readImageEvidence as readCoreImageEvidence } from "@penpair/core";
 export function hashImageBytes(bytes) {
     return createHash("sha256").update(bytes).digest("hex");
 }
-function losslessWebpSize(bytes) {
-    const malformed = () => new Error("Malformed static lossless WebP evidence");
-    if (bytes.readUInt32LE(4) + 8 !== bytes.length) {
-        throw malformed();
-    }
-    let imageSize;
-    let canvasSize;
-    let offset = 12;
-    while (offset < bytes.length) {
-        if (offset + 8 > bytes.length) {
-            throw malformed();
-        }
-        const chunk = bytes.subarray(offset, offset + 4).toString("latin1");
-        const size = bytes.readUInt32LE(offset + 4);
-        const payload = offset + 8;
-        const end = payload + size;
-        const paddedEnd = end + (size % 2);
-        if (paddedEnd > bytes.length || (size % 2 !== 0 && bytes[end] !== 0)) {
-            throw malformed();
-        }
-        if (chunk === "VP8 " || chunk === "ANIM" || chunk === "ANMF" || chunk === "ALPH") {
-            throw new Error("Provider evidence must reference PNG or static lossless WebP bytes");
-        }
-        if (chunk === "VP8X") {
-            if (offset !== 12 ||
-                canvasSize ||
-                size !== 10 ||
-                (bytes[payload] & 0xc3) !== 0 ||
-                bytes.readUIntLE(payload + 1, 3) !== 0) {
-                throw malformed();
-            }
-            canvasSize = {
-                width: bytes.readUIntLE(payload + 4, 3) + 1,
-                height: bytes.readUIntLE(payload + 7, 3) + 1,
-            };
-        }
-        else if (chunk === "VP8L") {
-            if (imageSize || size <= 5 || bytes[payload] !== 0x2f) {
-                throw malformed();
-            }
-            const dimensions = bytes.readUInt32LE(payload + 1);
-            if (dimensions >>> 29 !== 0) {
-                throw malformed();
-            }
-            imageSize = {
-                width: (dimensions & 0x3fff) + 1,
-                height: ((dimensions >>> 14) & 0x3fff) + 1,
-            };
-        }
-        else if (offset === 12) {
-            throw malformed();
-        }
-        offset = paddedEnd;
-    }
-    if (!imageSize ||
-        (canvasSize && (canvasSize.width !== imageSize.width || canvasSize.height !== imageSize.height))) {
-        throw malformed();
-    }
-    return imageSize;
-}
 export async function readImageEvidence(root, file) {
-    const input = await resolveProjectInput(root, file);
-    if ((await stat(input)).size > 64 * 1024 * 1024) {
-        throw new Error("Image exceeds 64 MiB");
-    }
-    const bytes = await readFile(input);
-    if (bytes.length > 64 * 1024 * 1024) {
-        throw new Error("Image exceeds 64 MiB");
-    }
-    if (bytes.length >= 24 &&
-        bytes.subarray(0, 8).toString("hex") === "89504e470d0a1a0a" &&
-        bytes.subarray(12, 16).toString("latin1") === "IHDR") {
-        const width = bytes.readUInt32BE(16);
-        const height = bytes.readUInt32BE(20);
-        if (width > 0 && height > 0) {
-            return {
-                bytes,
-                width,
-                height,
-            };
-        }
-    }
-    else if (bytes.length >= 12 &&
-        bytes.subarray(0, 4).toString("latin1") === "RIFF" &&
-        bytes.subarray(8, 12).toString("latin1") === "WEBP") {
-        return {
-            bytes,
-            ...losslessWebpSize(bytes),
-        };
-    }
-    throw new Error("Provider evidence must reference PNG or static lossless WebP bytes");
+    const { bytes, width, height } = await readCoreImageEvidence(root, file);
+    return {
+        bytes,
+        width,
+        height,
+    };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@penpair/reflection-check",
-  "version": "0.3.7",
+  "version": "0.4.1",
   "description": "Explicit design case planning and verified implementation evidence for penpair baselines.",
   "license": "MIT",
   "repository": {
@@ -41,7 +41,7 @@
   },
   "dependencies": {
     "jiti": "^2.4.2",
-    "@penpair/core": "0.3.7"
+    "@penpair/core": "0.4.1"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",