@poe-platform/safe-bash 0.1.711 → 0.1.713

package/dist/safe-bash-command-exiftool/png.js

@@ -1,308 +0,0 @@
-import { Resources } from "./resources.js";
-import { exiftoolRegistry } from "./registry.js";
-import { isNumericShift } from "./shifts.js";
-const signature = new Uint8Array([137, 80, 78, 71, 13, 10, 26, 10]);
-const bitDepths = Object.freeze({
-    0: [1, 2, 4, 8, 16], 2: [8, 16], 3: [1, 2, 4, 8], 4: [8, 16], 6: [8, 16],
-});
-function checksum(bytes) {
-    let crc = 0xffffffff;
-    for (const byte of bytes) {
-        crc ^= byte;
-        for (let bit = 0; bit < 8; bit++)
-            crc = (crc >>> 1) ^ ((crc & 1) ? 0xedb88320 : 0);
-    }
-    return (crc ^ 0xffffffff) >>> 0;
-}
-/** Qualified fixed-width timestamp policy; no host clock or timezone conversion. */
-function encodePngTime(value, resources) {
-    resources.admit("work", value.length * 2 + 32);
-    const invalid = () => { throw new Error("PNG timestamp syntax/range not yet supported"); };
-    const decimal = (start, end) => {
-        let number = 0;
-        for (let index = start; index < end; index++) {
-            const digit = value.charCodeAt(index) - 48;
-            if (!(digit >= 0 && digit <= 9))
-                invalid();
-            number = number * 10 + digit;
-        }
-        return number;
-    };
-    if (value.length < 19 || ![":", "-"].includes(value[4]) || value[7] !== value[4] ||
-        ![" ", "T"].includes(value[10]) || value[13] !== ":" || value[16] !== ":")
-        invalid();
-    const year = decimal(0, 4), month = decimal(5, 7), day = decimal(8, 10);
-    const hour = decimal(11, 13), minute = decimal(14, 16), second = decimal(17, 19);
-    if (!year || month < 1 || month > 12 || day < 1 || day > 31 || hour > 23 || minute > 59 || second > 59)
-        invalid();
-    let index = 19;
-    if (value[index] === ".") {
-        const start = ++index;
-        while (index < value.length && value.charCodeAt(index) >= 48 && value.charCodeAt(index) <= 57)
-            index++;
-        if (start === index)
-            invalid();
-    }
-    if (value[index] === "Z")
-        index++;
-    else if (value[index] === "+" || value[index] === "-") {
-        if (value.length - index !== 6 || value[index + 3] !== ":" || decimal(index + 1, index + 3) > 23 || decimal(index + 4, index + 6) > 59)
-            invalid();
-        index += 6;
-    }
-    if (index !== value.length)
-        invalid();
-    // Native tIME ValueConvInv stores local fields, discarding fractions/offset.
-    resources.admit("retained", 26);
-    return new Uint8Array([year >>> 8, year & 255, month, day, hour, minute, second]);
-}
-/** Chunk constructor has its own explicit extent bound for SDK callers. */
-export function pngChunk(type, data, maxBytes = 16_777_216) {
-    if (!Number.isSafeInteger(maxBytes) || maxBytes < 0 || data.length + 12 > maxBytes)
-        throw new RangeError("PNG output budget exceeded");
-    if (type.length !== 4 || [...type].some(character => !((character >= "A" && character <= "Z") || (character >= "a" && character <= "z"))))
-        throw new TypeError("Invalid PNG chunk type");
-    const bytes = new Uint8Array(data.length + 12);
-    const view = new DataView(bytes.buffer);
-    view.setUint32(0, data.length);
-    for (let index = 0; index < 4; index++)
-        bytes[index + 4] = type.charCodeAt(index);
-    bytes.set(data, 8);
-    view.setUint32(bytes.length - 4, checksum(bytes.subarray(4, bytes.length - 4)));
-    return bytes;
-}
-function parse(input, resources) {
-    resources.admit("input", input.length);
-    resources.admit("retained", input.length);
-    resources.admit("work", input.length * 10);
-    const bytes = new Uint8Array(input);
-    if (bytes.length < 8 || signature.some((byte, index) => bytes[index] !== byte))
-        throw new Error("Not a PNG file");
-    const view = new DataView(bytes.buffer);
-    const chunks = [];
-    const tags = [];
-    const instances = new Map();
-    let offset = 8;
-    let ended = false;
-    let imageData = false;
-    while (offset < bytes.length) {
-        resources.signal.throwIfAborted();
-        resources.admit("retained", 128);
-        if (ended)
-            throw new Error("PNG trailing data not yet supported");
-        if (bytes.length - offset < 12)
-            throw new Error("PNG truncated chunk");
-        const size = view.getUint32(offset);
-        if (size > bytes.length - offset - 12)
-            throw new Error("PNG truncated chunk data");
-        const end = offset + size + 12;
-        const type = String.fromCharCode(...bytes.subarray(offset + 4, offset + 8));
-        if (checksum(bytes.subarray(offset + 4, end - 4)) !== view.getUint32(end - 4))
-            throw new Error("PNG CRC mismatch");
-        const data = bytes.subarray(offset + 8, end - 4);
-        if (offset === 8 && type !== "IHDR")
-            throw new Error("PNG missing initial IHDR");
-        if (type === "IHDR") {
-            if (offset !== 8 || size !== 13)
-                throw new Error("Invalid PNG IHDR");
-            const header = new DataView(data.buffer, data.byteOffset, data.byteLength);
-            if (!header.getUint32(0) || !header.getUint32(4) || header.getUint32(0) > 0x7fffffff || header.getUint32(4) > 0x7fffffff)
-                throw new Error("Invalid PNG dimensions");
-            if (!bitDepths[data[9]]?.includes(data[8]) || data[10] !== 0 || data[11] !== 0 || data[12] > 1)
-                throw new Error("Invalid PNG IHDR encoding fields");
-        }
-        if (type === "IDAT")
-            imageData = true;
-        if (type === "IEND" && !imageData)
-            throw new Error("PNG missing IDAT");
-        let tag;
-        let rawName, name = "", value = "";
-        let raw;
-        let start = 0;
-        if (type === "zTXt" || type === "eXIf")
-            throw new Error("PNG " + type + " metadata not yet supported");
-        if (type === "tEXt" || type === "iTXt") {
-            const separator = data.indexOf(0);
-            if (separator < 1 || separator > 79)
-                throw new Error("Invalid PNG text keyword");
-            resources.admit("decoded", data.length * 2);
-            resources.admit("work", data.length * 8);
-            const keyword = Array.from(data.subarray(0, separator), byte => String.fromCharCode(byte)).join("");
-            start = separator + 1;
-            if (type === "iTXt") {
-                if (start + 2 > data.length)
-                    throw new Error("PNG truncated iTXt header");
-                if (data[start] !== 0)
-                    throw new Error("PNG compressed iTXt not yet supported");
-                if (data[start + 1] !== 0)
-                    throw new Error("Invalid PNG iTXt compression method");
-                const languageEnd = data.indexOf(0, start + 2);
-                const translatedEnd = languageEnd < 0 ? -1 : data.indexOf(0, languageEnd + 1);
-                if (translatedEnd < 0)
-                    throw new Error("PNG truncated iTXt language fields");
-                // Language-qualified and structured metadata require namespace-aware controls.
-                if (languageEnd !== start + 2 || translatedEnd !== languageEnd + 1 || keyword === "XML:com.adobe.xmp")
-                    throw new Error("PNG qualified/XMP iTXt not yet supported");
-                start = translatedEnd + 1;
-            }
-            raw = data.subarray(start);
-            // Includes transient per-byte strings/array slots in the Latin-1 decoder,
-            // owned raw bytes and interpreted UTF-16 strings, in addition to the input.
-            resources.admit("retained", raw.length + data.length * 40 + 128);
-            value = type === "tEXt" ? Array.from(raw, byte => String.fromCharCode(byte)).join("") : new TextDecoder("utf-8", { ignoreBOM: true }).decode(raw);
-            name = exiftoolRegistry.tags.find(name => name.toLowerCase() === keyword.toLowerCase()) ?? keyword;
-            rawName = keyword;
-        }
-        if (type === "tIME") {
-            if (size !== 7)
-                throw new Error("Invalid PNG tIME length");
-            resources.admit("decoded", 50);
-            resources.admit("retained", 256);
-            resources.admit("work", 128);
-            rawName = "tIME";
-            name = "ModifyDate";
-            raw = data;
-            const fields = [(data[0] << 8) | data[1], ...data.subarray(2)];
-            const parts = fields.map((field, index) => String(field).padStart(index === 0 ? 4 : 2, "0"));
-            value = parts.slice(0, 3).join(":") + " " + parts.slice(3).join(":");
-        }
-        if (rawName !== undefined && raw !== undefined) {
-            const instance = instances.get(name) ?? 0;
-            instances.set(name, instance + 1);
-            tag = Object.freeze({ name, rawName, chunkType: type, index: chunks.length, value, raw: new Uint8Array(raw), instance, offset: offset + 8 + start, group: "PNG" });
-            tags.push(tag);
-        }
-        chunks.push({ type, bytes: bytes.subarray(offset, end), ...(tag ? { tag } : {}) });
-        if (type === "IEND") {
-            if (size)
-                throw new Error("Invalid PNG IEND");
-            ended = true;
-        }
-        offset = end;
-    }
-    if (!ended)
-        throw new Error("PNG truncated: missing IEND");
-    return { chunks, tags };
-}
-export function inspectPng(input, options) {
-    const resources = options instanceof Resources ? options : new Resources(options);
-    return Object.freeze({ tags: Object.freeze(parse(input, resources).tags) });
-}
-/** Selected scalar writes only. Unknown metadata and every other chunk stay exact. */
-export function editPng(input, assignments, options) {
-    const resources = options instanceof Resources ? options : new Resources(options);
-    const { chunks } = parse(input, resources);
-    resources.admit("retained", assignments.length * 128);
-    resources.admit("work", assignments.length * (chunks.length + 1));
-    const all = assignments.length === 1 && assignments[0].name.toLowerCase() === "all" && assignments[0].operation === "set" && assignments[0].value === "";
-    if (all && chunks.some(chunk => !["IHDR", "PLTE", "IDAT", "IEND", "tEXt", "iTXt", "tIME"].includes(chunk.type)))
-        throw new Error("PNG all deletion with unqualified chunks is not yet supported");
-    const operations = new Map();
-    for (const assignment of assignments) {
-        resources.admit("decoded", (assignment.name.length + assignment.value.length) * 2);
-        resources.admit("work", assignment.name.length * 5 + assignment.value.length * 3);
-        resources.admit("work", (chunks.length + assignments.length) * (assignment.value.length + assignment.name.length + 1));
-        resources.admit("retained", assignment.name.length * 10 + assignment.value.length * 6);
-        if (all)
-            continue;
-        const name = exiftoolRegistry.tags.find(name => name.toLowerCase() === assignment.name.toLowerCase());
-        if (!name)
-            throw new Error("Tag write not yet supported: " + assignment.name);
-        if (name === "ModifyDate" && assignment.operation !== "set")
-            throw new Error("Temporal shifts are not yet supported for ModifyDate");
-        if (assignment.operation === "add") {
-            const group = exiftoolRegistry.scalarShiftErrorGroups[name];
-            if (group && !isNumericShift(assignment.value))
-                throw new Error("Shift value for " + group + ":" + name + " is not a number");
-            throw new Error("Scalar numeric shifts are not yet supported for " + name);
-        }
-        if (assignment.operation !== "set" && assignment.operation !== "remove")
-            throw new Error("Invalid tag operation");
-        const prior = assignment.operation === "set" ? [] : operations.get(name) ?? [];
-        prior.push(assignment);
-        operations.set(name, prior);
-    }
-    const output = [signature];
-    let outputSize = 8;
-    resources.admit("output", 8);
-    const append = (bytes) => { resources.admit("output", bytes.length); outputSize += bytes.length; output.push(bytes); };
-    let inserted = false;
-    for (const chunk of chunks) {
-        if (all && chunk.tag)
-            continue;
-        const ops = chunk.tag && exiftoolRegistry.writeChunks[chunk.tag.name]?.includes(chunk.type) ? operations.get(chunk.tag.name) : undefined;
-        if (ops?.some(op => op.operation === "set" || op.value === chunk.tag.value))
-            continue;
-        if (chunk.type === "IDAT" && !inserted) {
-            inserted = true;
-            for (const [name, ops] of operations) {
-                const set = ops.find(op => op.operation === "set");
-                if (!set?.value || ops.some(op => op.operation === "remove" && op.value === set.value))
-                    continue;
-                if (name === "ModifyDate") {
-                    const data = encodePngTime(set.value, resources);
-                    resources.admit("work", 128);
-                    resources.admit("retained", 19);
-                    resources.admit("output", 19);
-                    outputSize += 19;
-                    output.push(pngChunk("tIME", data, 19));
-                    continue;
-                }
-                // Default native UTF-8 policy uses iTXt for every non-ASCII value,
-                // including characters that could also be represented in Latin-1.
-                resources.admit("work", set.value.length * 2);
-                let valueBytes = 0;
-                let international = false;
-                for (let index = 0; index < set.value.length; index++) {
-                    const code = set.value.charCodeAt(index);
-                    international ||= code > 127;
-                    if (code >= 0xd800 && code <= 0xdbff) {
-                        const next = set.value.charCodeAt(++index);
-                        if (!(next >= 0xdc00 && next <= 0xdfff))
-                            throw new Error("Unpaired surrogate in PNG text write");
-                        valueBytes += 4;
-                    }
-                    else {
-                        if (code >= 0xdc00 && code <= 0xdfff)
-                            throw new Error("Unpaired surrogate in PNG text write");
-                        valueBytes += code < 128 ? 1 : code < 2048 ? 2 : 3;
-                    }
-                }
-                const prefix = name + (international ? "\0\0\0\0\0" : "\0");
-                const dataSize = prefix.length + valueBytes;
-                const size = dataSize + 12;
-                resources.admit("work", dataSize * 12);
-                resources.admit("retained", prefix.length * 2 + valueBytes + dataSize + size);
-                resources.admit("output", size);
-                const data = new Uint8Array(dataSize);
-                for (let index = 0; index < prefix.length; index++)
-                    data[index] = prefix.charCodeAt(index);
-                data.set(new TextEncoder().encode(set.value), prefix.length);
-                outputSize += size;
-                output.push(pngChunk(international ? "iTXt" : "tEXt", data, size));
-                // Native PNG scalar writes replace each existing text instance rather
-                // than collapsing duplicates. A missing tag creates one new instance.
-                let instances = 0;
-                for (const existing of chunks) {
-                    resources.signal.throwIfAborted();
-                    resources.admit("work", 1);
-                    if (existing.tag?.name === name && exiftoolRegistry.writeChunks[name]?.includes(existing.type))
-                        instances++;
-                }
-                for (let instance = 1; instance < instances; instance++)
-                    append(output[output.length - 1]);
-            }
-        }
-        append(chunk.bytes);
-    }
-    resources.admit("retained", outputSize);
-    resources.admit("work", outputSize);
-    const result = new Uint8Array(outputSize);
-    let position = 0;
-    for (const bytes of output) {
-        result.set(bytes, position);
-        position += bytes.length;
-    }
-    resources.signal.throwIfAborted();
-    return result;
-}

package/dist/safe-bash-command-exiftool/publication.js

@@ -1,80 +0,0 @@
-import { FsError } from "../safe-bash-contracts/errors.js";
-export class Publication {
-    #context;
-    #pending = new Set();
-    #stages = [];
-    #closed = false;
-    #closing;
-    #serial = 0;
-    constructor(context) { this.#context = context; }
-    async track(operation) {
-        if (this.#closed)
-            throw new Error("ExifTool invocation closed");
-        this.#context.signal.throwIfAborted();
-        const pending = Promise.resolve().then(operation);
-        this.#pending.add(pending);
-        try {
-            return await pending;
-        }
-        finally {
-            this.#pending.delete(pending);
-        }
-    }
-    close() {
-        if (this.#closing)
-            return this.#closing;
-        this.#closed = true;
-        this.#closing = (async () => {
-            await Promise.allSettled([...this.#pending]);
-            const failures = [];
-            // Cleanup must still run after invocation cancellation, on its own signal.
-            const signal = new AbortController().signal;
-            for (const staging of this.#stages.splice(0).reverse()) {
-                try {
-                    await this.#context.fs.removeStagedFile(staging, { signal });
-                }
-                catch (error) {
-                    failures.push(error);
-                }
-            }
-            if (failures.length)
-                throw new AggregateError(failures, "ExifTool staging cleanup failed");
-        })();
-        return this.#closing;
-    }
-    async publish(path, bytes, expected, inPlace) {
-        const { fs, signal } = this.#context;
-        const slash = path.lastIndexOf("/");
-        const directory = path.slice(0, slash) || "/";
-        const parent = await this.track(() => fs.stat(directory, { signal }));
-        const capabilities = fs.capabilitiesFor ? await this.track(() => fs.capabilitiesFor(path, { signal })) : fs.capabilities;
-        if (inPlace) {
-            if (!expected || !fs.writeFileConditional || !capabilities.atomicFileMutation)
-                throw new Error("VFS atomic in-place publication not supported");
-            await this.track(() => fs.writeFileConditional(path, bytes, { expected, parent, signal }));
-            return;
-        }
-        if (expected && expected.nlink !== 1)
-            throw new Error("VFS hardlink replacement is not yet supported");
-        if (!fs.createStagedFile || !fs.publishStagedFile || !fs.removeStagedFile || !capabilities.atomicFileStaging)
-            throw new Error("VFS atomic replacement publication not supported");
-        let stage;
-        for (let attempt = 0; attempt < 32; attempt++) {
-            try {
-                stage = await this.track(async () => {
-                    const owned = await fs.createStagedFile(directory + (directory === "/" ? "" : "/") + ".exiftool-" + ++this.#serial, "output", { type: "file", data: bytes }, { parent, signal, mode: expected ? expected.mode & 0o7777 : 0o666 });
-                    this.#stages.push(owned);
-                    return owned;
-                });
-                break;
-            }
-            catch (error) {
-                if (!(error instanceof FsError) || error.code !== "EEXIST")
-                    throw error;
-            }
-        }
-        if (!stage)
-            throw new Error("ExifTool staging collision limit exceeded");
-        await this.track(() => fs.publishStagedFile(stage, path, { destination: expected, parent, signal }));
-    }
-}

package/dist/safe-bash-command-exiftool/registry.js

@@ -1,14 +0,0 @@
-/** Independently admitted format/tag subset; this is not the full upstream catalog. */
-const textChunks = Object.freeze(["tEXt", "iTXt"]);
-const writeChunks = Object.freeze({
-    Title: textChunks, Author: textChunks, Description: textChunks,
-    Comment: textChunks, Copyright: textChunks, ModifyDate: Object.freeze(["tIME"]),
-});
-export const exiftoolRegistry = Object.freeze({
-    version: 2,
-    source: Object.freeze({ version: "13.59", commit: "2200871d9cef988051d2a99d67df3bda6cbb30a8", archiveSha256: "e1e2ad6c6fbf568afee5993ef8b2b91ab013d21698c9304e079e633ad82776f5" }),
-    formats: Object.freeze({ PNG: Object.freeze({ reader: "uncompressed-text-time", writer: "selected-text-time" }) }),
-    tags: Object.freeze(Object.keys(writeChunks)),
-    writeChunks,
-    scalarShiftErrorGroups: Object.freeze({ Title: "XMP-xmp" }),
-});

package/dist/safe-bash-command-exiftool/resources.js

@@ -1,29 +0,0 @@
-export const exiftoolLimits = Object.freeze({
-    maxInputBytes: 16_777_216, maxDecodedBytes: 8_388_608,
-    maxRetainedBytes: 33_554_432, maxOutputBytes: 16_777_216, maxWork: 268_435_456,
-});
-export class ResourceLimitError extends RangeError {
-}
-/** Cumulative admission for a single operation. No recursive parser is admitted. */
-export class Resources {
-    limits;
-    signal;
-    usage = { input: 0, decoded: 0, retained: 0, output: 0, work: 0 };
-    constructor(options) {
-        this.signal = options.signal;
-        this.signal.throwIfAborted();
-        this.limits = Object.freeze({ ...exiftoolLimits, ...options });
-        for (const key of Object.keys(exiftoolLimits)) {
-            if (!Number.isSafeInteger(this.limits[key]) || this.limits[key] < 0)
-                throw new RangeError("Invalid resource limit: " + key);
-        }
-    }
-    admit(kind, amount) {
-        this.signal.throwIfAborted();
-        const limits = { input: "maxInputBytes", decoded: "maxDecodedBytes", retained: "maxRetainedBytes", output: "maxOutputBytes", work: "maxWork" };
-        const total = this.usage[kind] + amount;
-        if (!Number.isSafeInteger(amount) || amount < 0 || !Number.isSafeInteger(total) || total > this.limits[limits[kind]])
-            throw new ResourceLimitError("ExifTool " + kind + " budget exceeded");
-        this.usage[kind] = total;
-    }
-}

package/dist/safe-bash-command-exiftool/scalar.js

@@ -1,103 +0,0 @@
-const jsonEscapes = Object.freeze({ 9: "\\t", 10: "\\n", 13: "\\r", 34: '\\"', 92: "\\\\" });
-function admit(value, options) {
-    options.signal?.throwIfAborted();
-    const limits = [options.maxDecodedBytes ?? 2_097_152, options.maxOutputBytes ?? 6_291_458, options.maxWork ?? 4_194_304, options.maxRetainedBytes ?? 14_680_068];
-    if (limits.some(limit => !Number.isSafeInteger(limit) || limit < 0))
-        throw new RangeError("Invalid scalar limit");
-    if (value.length * 2 > limits[0])
-        throw new RangeError("Scalar decoded bytes exceeded");
-    if (value.length * 4 > limits[2])
-        throw new RangeError("Scalar work exceeded");
-    if (4 + value.length * 14 > limits[3])
-        throw new RangeError("Scalar retained bytes exceeded");
-}
-function numericSpelling(value) {
-    // The pinned CLI end anchor also matches immediately before a final LF.
-    const length = value.endsWith("\n") ? value.length - 1 : value.length;
-    let index = value[0] === "-" ? 1 : 0;
-    const start = index;
-    const digit = () => index < length && value.charCodeAt(index) >= 48 && value.charCodeAt(index) <= 57;
-    while (digit())
-        index++;
-    const integers = index - start;
-    if (!integers || integers > 15 || (integers > 1 && value[start] === "0"))
-        return false;
-    if (value[index] === ".") {
-        const fraction = ++index;
-        while (digit())
-            index++;
-        if (index === fraction || index - fraction > 16)
-            return false;
-    }
-    if (value[index] === "e" || value[index] === "E") {
-        index++;
-        if (value[index] === "+" || value[index] === "-")
-            index++;
-        const exponent = index;
-        while (digit())
-            index++;
-        if (index === exponent || index - exponent > 3)
-            return false;
-    }
-    return index === length;
-}
-/** ExifTool 13.59 scalar JSON policy. Never converts lexical numbers to Number. */
-export function encodeJsonScalar(value, options = {}) {
-    admit(value, options);
-    const limit = options.maxOutputBytes ?? 6_291_458;
-    if (!options.quoteScalars) {
-        const lower = value.toLowerCase();
-        const boolean = lower.endsWith("\n") ? lower.slice(0, -1) : lower;
-        const token = boolean === "true" || boolean === "false" ? lower : numericSpelling(value) ? value : undefined;
-        if (token !== undefined) {
-            if (token.length > limit)
-                throw new RangeError("Scalar output bytes exceeded");
-            return token;
-        }
-    }
-    // Reserve the maximum encoded extent before building strings. This deliberately
-    // conservative bound also accounts for UTF-8 and surrogate repair.
-    if (2 + value.length * 6 > limit)
-        throw new RangeError("Scalar output bytes exceeded");
-    let output = '"';
-    for (let index = 0; index < value.length; index++) {
-        const code = value.charCodeAt(index);
-        if (code === 0)
-            continue;
-        const escape = jsonEscapes[code];
-        if (escape)
-            output += escape;
-        else if (code < 32 || code === 127)
-            output += "\\u" + code.toString(16).toUpperCase().padStart(4, "0");
-        else if (code >= 0xd800 && code <= 0xdbff) {
-            const next = value.charCodeAt(index + 1);
-            if (next >= 0xdc00 && next <= 0xdfff)
-                output += value[index] + value[++index];
-            else
-                output += "\uFFFD";
-        }
-        else if (code >= 0xdc00 && code <= 0xdfff)
-            output += "\uFFFD";
-        else
-            output += value[index];
-    }
-    options.signal?.throwIfAborted();
-    return output + '"';
-}
-/** Plain text display only; do not use to reconstruct stored metadata. */
-export function printable(value, options = {}) {
-    admit(value, options);
-    if (value.length * 3 > (options.maxOutputBytes ?? 6_291_458))
-        throw new RangeError("Scalar output bytes exceeded");
-    let end = value.length;
-    // NUL disappears; other controls become dots and therefore survive trimming.
-    while (end && (value.charCodeAt(end - 1) === 0 || value[end - 1] === " "))
-        end--;
-    let output = "";
-    for (let index = 0; index < end; index++) {
-        const code = value.charCodeAt(index);
-        if (code)
-            output += code < 32 || code === 127 ? "." : value[index];
-    }
-    return output;
-}

package/dist/safe-bash-command-exiftool/sdk.js

@@ -1,113 +0,0 @@
-import { createCommandArguments } from "../safe-bash-contracts/command.js";
-import { parseArguments } from "./arguments.js";
-import { exiftoolRegistry } from "./registry.js";
-import { Resources } from "./resources.js";
-/** Build bounded, branded argv for direct CommandDefinition SDK invocation.
- * Operands are always literal; option values never acquire flag authority.
- * Argument construction is a separate bounded operation from command execution.
- */
-export function createExiftoolArguments(options, engine) {
-    const resources = new Resources(engine);
-    const supported = ["files", "tags", "assignments", "format", "style", "duplicates", "missing", "numeric", "quoteScalars", "groupFamily", "overwrite", "destination"];
-    resources.admit("retained", 256);
-    for (const key in options) {
-        if (!Object.hasOwn(options, key))
-            continue;
-        resources.admit("work", key.length * 2 + supported.length);
-        resources.admit("retained", key.length * 2 + 32);
-        if (!supported.includes(key))
-            throw new TypeError("Unsupported ExifTool SDK option: " + key);
-    }
-    const count = options.files.length + (options.tags?.length ?? 0) + (options.assignments?.length ?? 0);
-    if (!Number.isSafeInteger(count) || count > 4096)
-        throw new RangeError("ExifTool argument count exceeded");
-    resources.admit("retained", 256);
-    const args = [];
-    const append = (...parts) => {
-        if (args.length >= 4096)
-            throw new RangeError("ExifTool argument count exceeded");
-        let length = 0;
-        for (const part of parts) {
-            if (typeof part !== "string")
-                throw new TypeError("ExifTool option values must be strings");
-            length += part.length;
-        }
-        resources.admit("decoded", length * 2);
-        resources.admit("retained", length * 8 + 128);
-        resources.admit("work", length * 4 + 32);
-        args.push(parts.join(""));
-    };
-    const tagName = (name, assignment) => {
-        if (typeof name !== "string")
-            throw new TypeError("ExifTool tag names must be strings");
-        resources.admit("work", name.length * 4 + 32);
-        resources.admit("retained", name.length * 4 + 64);
-        const selector = !assignment && name.endsWith("#") ? name.slice(0, -1) : name;
-        if (!exiftoolRegistry.tags.some(tag => tag.toLowerCase() === selector.toLowerCase()) && selector !== "MissingTag" && !(assignment && selector === "all")) {
-            throw new Error("ExifTool option/tag not yet supported: " + name);
-        }
-    };
-    if (options.format !== undefined && options.format !== "text") {
-        const flag = { json: "-j", csv: "-csv", binary: "-b" }[options.format];
-        if (!flag)
-            throw new TypeError("Unsupported ExifTool output format");
-        append(flag);
-    }
-    if (options.style !== undefined) {
-        const flag = { short: "-s", compact: "-S", values: "-s3" }[options.style];
-        if (!flag)
-            throw new TypeError("Unsupported ExifTool output style");
-        append(flag);
-    }
-    if (options.duplicates)
-        append("-a");
-    if (options.missing)
-        append("-f");
-    if (options.numeric)
-        append("-n");
-    if (options.quoteScalars) {
-        append("-api");
-        append("StructFormat=JSONQ");
-    }
-    if (options.groupFamily !== undefined) {
-        if (options.groupFamily !== 4)
-            throw new TypeError("Unsupported ExifTool group family");
-        append("-G4");
-    }
-    if (options.overwrite !== undefined && options.overwrite !== "backup") {
-        const flag = { replace: "-overwrite_original", "in-place": "-overwrite_original_in_place" }[options.overwrite];
-        if (!flag)
-            throw new TypeError("Unsupported ExifTool overwrite policy");
-        append(flag);
-    }
-    if (options.destination !== undefined) {
-        append("-o");
-        append(options.destination);
-    }
-    for (const tag of options.tags ?? []) {
-        tagName(tag, false);
-        append("-", tag);
-    }
-    for (const assignment of options.assignments ?? []) {
-        tagName(assignment.name, true);
-        const suffix = { set: "=", remove: "-=", add: "+=" }[assignment.operation];
-        if (!suffix)
-            throw new TypeError("Unsupported ExifTool assignment operation");
-        append("-", assignment.name, suffix, assignment.value);
-    }
-    append("--");
-    for (const file of options.files)
-        append(file);
-    // Keep unsupported combination and stdin policy identical to CLI admission.
-    resources.admit("retained", args.length * 128);
-    resources.admit("work", resources.usage.decoded * 4 + args.length * 64);
-    parseArguments(args, resources.limits);
-    return createCommandArguments(args, {
-        assertOpen() { engine.signal.throwIfAborted(); },
-        reserve(bytes, slots) {
-            resources.admit("retained", bytes + slots * 16);
-            // Admission counts cumulative allocations, rather than live heap usage.
-            return { commit() { }, release() { } };
-        },
-    });
-}