laterite 0.6.0 → 0.6.2

package/dist/index.cjs

@@ -666,6 +666,9 @@ var Ags4File = class _Ags4File {
     (0, import_node_fs.writeFileSync)(path, this.bytes);
     return path;
   }
+  toExcel(xlsxPath, opts = {}) {
+    return xlsxPath === void 0 ? toExcel(this.bytes, void 0, opts) : toExcel(this.bytes, xlsxPath, opts);
+  }
   // --- fluent verbs (validate / fix / diff) --------------------------------
   /** Resolve this handle to the `(source, opts)` the free fns take: the retained
    * read source (so line numbers match the original), or the re-emit for a
@@ -763,16 +766,7 @@ var Ags4File = class _Ags4File {
    * `read(f, { index })` consumes it to skip re-validation. Mirrors
    * `laterite.Ags4File.certify()`. */
   certify(path) {
-    if (this.#report === void 0) {
-      throw new Ags4Error(
-        "call .validate() before .certify() \u2014 certify records a passed validation, it does not run one"
-      );
-    }
-    if (!this.#report.isValid) {
-      throw new Ags4Error(
-        `cannot certify a file with ${this.#report.count} finding(s); fix them and re-validate clean first`
-      );
-    }
+    const report = this.#requireCleanValidation();
     const srcPath = this.#src?.path;
     const out = path ?? (srcPath !== void 0 ? `${srcPath}.idx` : void 0);
     if (out === void 0) {
@@ -793,9 +787,43 @@ var Ags4File = class _Ags4File {
         );
       }
     }
-    const cert = import_native.Sidecar.assemble(
+    (0, import_node_fs.writeFileSync)(out, this.#mintCert(report).toJson());
+    return out;
+  }
+  /** Mint this file's `.ags.idx` certificate and return its **bytes** in memory —
+   * the filesystem-free twin of {@link certify}. Same precondition (a prior clean
+   * `.validate()`; it vouches for a passed validation, does not run one) and same
+   * output: the bytes are exactly what `certify` would write, so they interop with
+   * `read({ index })`, the CLI `--index`, and the browser cert. Ideal for handing
+   * the certificate straight to an upload/object store without a temp file — the
+   * certify analog of `transport.lockBytes`. Mirrors
+   * `laterite.Ags4File.certify_bytes()`. */
+  certifyBytes() {
+    return this.#mintCert(this.#requireCleanValidation()).toJson();
+  }
+  /** Shared precondition for `certify` / `certifyBytes`: a certificate vouches for
+   * a *passed* validation, so one must have run and found nothing. Returns the
+   * validated `Report` (narrowed non-undefined) for the minting step. */
+  #requireCleanValidation() {
+    if (this.#report === void 0) {
+      throw new Ags4Error(
+        "call .validate() before .certify() \u2014 certify records a passed validation, it does not run one"
+      );
+    }
+    if (!this.#report.isValid) {
+      throw new Ags4Error(
+        `cannot certify a file with ${this.#report.count} finding(s); fix them and re-validate clean first`
+      );
+    }
+    return this.#report;
+  }
+  /** Assemble the `Sidecar` certificate over the original source bytes, stamping
+   * the profile the last `.validate()` actually ran. `report` comes from
+   * `#requireCleanValidation`. */
+  #mintCert(report) {
+    return import_native.Sidecar.assemble(
       this.#sourceBytes(),
-      this.#report.dictVersion,
+      report.dictVersion,
       (/* @__PURE__ */ new Date()).toISOString(),
       void 0,
       void 0,
@@ -803,8 +831,6 @@ var Ags4File = class _Ags4File {
       this.#lastCheckFiles,
       this.#lastForced
     );
-    (0, import_node_fs.writeFileSync)(out, cert.toJson());
-    return out;
   }
   // --- optional DuckDB engine (sql / at / connection) ----------------------
   async #getEngine() {
@@ -31689,9 +31715,13 @@ function parseValue2(raw, agsType) {
 var transport_exports = {};
 __export(transport_exports, {
   lock: () => lock,
+  lockBytes: () => lockBytes,
   pack: () => pack,
+  packBytes: () => packBytes,
   unlock: () => unlock,
-  unpack: () => unpack
+  unlockBytes: () => unlockBytes,
+  unpack: () => unpack,
+  unpackBytes: () => unpackBytes
 });
 function pack(src, dest, level) {
   return (0, import_native.transportPack)(src, dest, level);
@@ -31705,6 +31735,18 @@ function lock(src, dest, password, level) {
 function unlock(src, dest, password) {
   return (0, import_native.transportUnlock)(src, dest, password);
 }
+function packBytes(data, level) {
+  return (0, import_native.transportPackBytes)(data, level);
+}
+function unpackBytes(data) {
+  return (0, import_native.transportUnpackBytes)(data);
+}
+function lockBytes(data, password, level) {
+  return (0, import_native.transportLockBytes)(data, password, level);
+}
+function unlockBytes(data, password) {
+  return (0, import_native.transportUnlockBytes)(data, password);
+}
 
 // ts/index.ts
 function read(source, opts = {}) {
@@ -31830,11 +31872,41 @@ function listRules2() {
   return JSON.parse((0, import_native.listRules)()).rules;
 }
 function fix(source, opts = {}) {
+  if (opts.inPlace && opts.out !== void 0) {
+    throw new TypeError("fix(): `inPlace` and `out` are mutually exclusive");
+  }
+  if (opts.only !== void 0 || opts.exclude !== void 0) {
+    const fixable = new Set(listRules2().filter((r2) => r2.fixable).map((r2) => r2.rule));
+    for (const [kw, labels] of [["only", opts.only], ["exclude", opts.exclude]]) {
+      for (const label of labels ?? []) {
+        if (!fixable.has(label)) {
+          throw new TypeError(
+            `fix(): ${kw} names rule "${label}", which is not fixable \u2014 see listRules() (fixable: true)`
+          );
+        }
+      }
+    }
+  }
   const path = typeof source === "string" ? source : void 0;
   const data = typeof source === "string" || source == null ? void 0 : source;
-  const r = (0, import_native.fixFile)(path, opts.text, data, opts.dictVersion, opts.encoding, opts.risky);
+  if (opts.inPlace && path === void 0) {
+    throw makeError("bad_args", 5, "fix(): `inPlace` needs a path source; use `out` or `.save(path)`");
+  }
+  const r = (0, import_native.fixFile)(
+    path,
+    opts.text,
+    data,
+    opts.dictVersion,
+    opts.encoding,
+    opts.risky,
+    opts.only,
+    opts.exclude
+  );
   if (!r.ok) throw makeError(r.errorKind ?? "", r.exitCode, r.error ?? "unknown error");
-  return new FixResult(r.fixed, r.residual, r.applied, r.dictVersion);
+  const result = new FixResult(r.fixed, r.residual, r.applied, r.dictVersion);
+  const dest = opts.inPlace ? path : opts.out;
+  if (dest !== void 0) (0, import_node_fs4.writeFileSync)(dest, result.bytes);
+  return result;
 }
 function diffBytes(x) {
   if (x instanceof Ags4File) return x.bytes;
@@ -31857,11 +31929,28 @@ function diff2(a, b, opts = {}) {
     throw fromNativeError(e);
   }
 }
-function toExcel(agsPath, xlsxPath, opts = {}) {
-  return (0, import_native.ags4ToExcel)(agsPath, xlsxPath, opts.groups);
+function excelStatsOf(r) {
+  return { sheetsWritten: r.sheetsWritten, rowsWritten: r.rowsWritten, warnings: r.warnings };
+}
+function toExcel(source, xlsxPath, opts = {}) {
+  if (typeof source === "string" && xlsxPath !== void 0) {
+    return (0, import_native.ags4ToExcel)(source, xlsxPath, opts.groups);
+  }
+  const agsBytes = typeof source === "string" ? (0, import_node_fs4.readFileSync)(source) : source;
+  const r = (0, import_native.ags4BytesToXlsx)(agsBytes, opts.groups);
+  if (xlsxPath === void 0) return r.bytes;
+  (0, import_node_fs4.writeFileSync)(xlsxPath, r.bytes);
+  return excelStatsOf(r);
 }
-function fromExcel(xlsxPath, agsPath, opts = {}) {
-  return (0, import_native.excelToAgs4)(xlsxPath, agsPath, opts.formatNumericColumns);
+function fromExcel(source, agsPath, opts = {}) {
+  if (typeof source === "string" && agsPath !== void 0) {
+    return (0, import_native.excelToAgs4)(source, agsPath, opts.formatNumericColumns);
+  }
+  const xlsxBytes = typeof source === "string" ? (0, import_node_fs4.readFileSync)(source) : source;
+  const r = (0, import_native.xlsxBytesToAgs4)(xlsxBytes, opts.formatNumericColumns);
+  if (agsPath === void 0) return r.bytes;
+  (0, import_node_fs4.writeFileSync)(agsPath, r.bytes);
+  return excelStatsOf(r);
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { Table } from 'apache-arrow';
-import { Finding, AppliedFix, ValidationReport, Sidecar, Reading, displayHint, PackStats, UnpackStats, ExcelStats } from '#native';
+import { Finding, AppliedFix, ValidationReport, Sidecar, Reading, ExcelStats, displayHint, PackStats, UnpackStats } from '#native';
 export { AppliedFix, ExcelStats, Finding, GroupMeta, Sidecar, version } from '#native';
 
 /** One query result row — JS-native values (`getRowObjectsJS`: Dates, numbers,
@@ -239,6 +239,17 @@ declare class Ags4File {
      * @param path Filesystem path to write the UTF-8 AGS4 to.
      * @returns The same `path`, for chaining. */
     save(path: string): string;
+    /** Write this file's groups to an `.xlsx` workbook — one worksheet per group,
+     * from the spec-correct {@link bytes}. With `xlsxPath` given the workbook is
+     * written there and the conversion stats returned; omit it to get the `.xlsx`
+     * **bytes** back. Mirrors `laterite.Ags4File.to_excel()` and the free
+     * {@link toExcel}. `groups` fixes the worksheet order (default source order). */
+    toExcel(xlsxPath: string, opts?: {
+        groups?: string[];
+    }): ExcelStats;
+    toExcel(xlsxPath?: undefined, opts?: {
+        groups?: string[];
+    }): Buffer;
     /** The last `.validate()` outcome (`undefined` until validated). */
     get report(): Report | undefined;
     /** The `FixResult` on a handle returned by `.fix()` (`undefined` otherwise). */
@@ -273,6 +284,15 @@ declare class Ags4File {
      * `read(f, { index })` consumes it to skip re-validation. Mirrors
      * `laterite.Ags4File.certify()`. */
     certify(path?: string): string;
+    /** Mint this file's `.ags.idx` certificate and return its **bytes** in memory —
+     * the filesystem-free twin of {@link certify}. Same precondition (a prior clean
+     * `.validate()`; it vouches for a passed validation, does not run one) and same
+     * output: the bytes are exactly what `certify` would write, so they interop with
+     * `read({ index })`, the CLI `--index`, and the browser cert. Ideal for handing
+     * the certificate straight to an upload/object store without a temp file — the
+     * certify analog of `transport.lockBytes`. Mirrors
+     * `laterite.Ags4File.certify_bytes()`. */
+    certifyBytes(): Buffer;
     /** Run SQL over the file's groups by their clean names — e.g.
      * `await ags.sql("SELECT * FROM SAMP JOIN LOCA USING (LOCA_ID) WHERE …")`.
      * Any group may be referenced, so this loads them all into the engine.
@@ -4952,15 +4972,61 @@ declare function lock(src: string, dest: string, password: string, level?: numbe
  * @throws If the passphrase is wrong or the input is not a passphrase envelope.
  */
 declare function unlock(src: string, dest: string, password: string): UnpackStats;
+/**
+ * zstd-compress `data` → bytes in memory (zstd only) — no filesystem. The
+ * in-memory form of {@link pack}; the output is a standard zstd frame, so it
+ * opens with {@link unpackBytes}, {@link unpack} (write it out first), or stock
+ * `zstd`.
+ *
+ * @param data - The bytes to compress.
+ * @param level - zstd level 1–22 (default 9).
+ * @returns The compressed bytes.
+ */
+declare function packBytes(data: Uint8Array, level?: number): Buffer;
+/**
+ * zstd-decompress bytes → bytes in memory — the in-memory form of {@link unpack}.
+ *
+ * @param data - The zstd-compressed bytes (e.g. from {@link packBytes}).
+ * @returns The decompressed bytes.
+ */
+declare function unpackBytes(data: Uint8Array): Buffer;
+/**
+ * zstd-compress + age-passphrase-encrypt `data` → bytes in memory — no plaintext
+ * on disk. The in-memory form of {@link lock}, ideal for sealing sensitive data
+ * you hold in memory (e.g. a fixed `Ags4File`'s `.bytes`) without ever writing
+ * the plaintext out. The `.zst.age` envelope matches {@link lock}'s, so the
+ * result opens with {@link unlockBytes}, {@link unlock}, `pyrage`, or the
+ * browser, given the passphrase.
+ *
+ * @param data - The bytes to compress and encrypt.
+ * @param password - The age passphrase. Required — there is no agent-key path.
+ * @param level - zstd level 1–22 (default 9).
+ * @returns The sealed bytes.
+ */
+declare function lockBytes(data: Uint8Array, password: string, level?: number): Buffer;
+/**
+ * age-passphrase-decrypt + zstd-decompress `.zst.age` bytes → bytes in memory —
+ * the in-memory form of {@link unlock}.
+ *
+ * @param data - The sealed bytes (e.g. from {@link lockBytes}).
+ * @param password - The age passphrase the envelope was sealed with.
+ * @returns The original bytes.
+ * @throws If the passphrase is wrong or the input is not a passphrase envelope.
+ */
+declare function unlockBytes(data: Uint8Array, password: string): Buffer;
 
 declare const transport_PackStats: typeof PackStats;
 declare const transport_UnpackStats: typeof UnpackStats;
 declare const transport_lock: typeof lock;
+declare const transport_lockBytes: typeof lockBytes;
 declare const transport_pack: typeof pack;
+declare const transport_packBytes: typeof packBytes;
 declare const transport_unlock: typeof unlock;
+declare const transport_unlockBytes: typeof unlockBytes;
 declare const transport_unpack: typeof unpack;
+declare const transport_unpackBytes: typeof unpackBytes;
 declare namespace transport {
-  export { transport_PackStats as PackStats, transport_UnpackStats as UnpackStats, transport_lock as lock, transport_pack as pack, transport_unlock as unlock, transport_unpack as unpack };
+  export { transport_PackStats as PackStats, transport_UnpackStats as UnpackStats, transport_lock as lock, transport_lockBytes as lockBytes, transport_pack as pack, transport_packBytes as packBytes, transport_unlock as unlock, transport_unlockBytes as unlockBytes, transport_unpack as unpack, transport_unpackBytes as unpackBytes };
 }
 
 interface ReadOptions {
@@ -5110,6 +5176,11 @@ interface RuleMeta {
  *   `observations`).
  */
 declare function listRules(): RuleMeta[];
+/** The AGS Format Rule labels whose fixes {@link fix} can apply — the values for
+ * `only` / `exclude`. Mirrors laterite-py's `FixableRule`; kept in lockstep with
+ * the engine's `fixable_rules()` by a cross-surface drift gate
+ * (`test_typed_choices.py`). Use {@link listRules} (`fixable: true`) at runtime. */
+type FixableRule = "1" | "2a" | "4" | "6" | "7" | "8" | "11a" | "11b";
 interface FixOptions {
     /** Repair in-memory `text` instead of a file path. */
     text?: string;
@@ -5119,6 +5190,18 @@ interface FixOptions {
     encoding?: string;
     /** Also apply the intent-guessing (risky) fixes, not just the safe set. */
     risky?: boolean;
+    /** Apply *only* these rules' fixes (by {@link FixableRule} label); others are
+     * left in place. The risk gate still applies, so a rule whose only fix is risky
+     * needs `risky: true` even when named here. */
+    only?: FixableRule[];
+    /** Skip these rules' fixes. Combines with `only` (`only` narrows the set, then
+     * `exclude` removes from it). */
+    exclude?: FixableRule[];
+    /** Write the repaired bytes back over the source file. Requires a path
+     * `source`; mutually exclusive with `out`. Non-destructive by default. */
+    inPlace?: boolean;
+    /** Write the repaired bytes to this path. Mutually exclusive with `inPlace`. */
+    out?: string;
 }
 /** Mechanically repair AGS4 — the headless twin of the browser's Fix engine.
  * `source` is a file path, raw `Uint8Array`/`Buffer` bytes, or (via `opts.text`)
@@ -5129,15 +5212,19 @@ interface FixOptions {
  * typography). The repaired bytes are re-validated, so `FixResult.findings` is
  * what could NOT be mechanically fixed.
  *
- * Non-destructive: nothing is written here — the repaired bytes come back on the
- * result (`.bytes` / `.text` / `.save(path)`), already UTF-8 with no BOM, so
- * fixing a non-UTF-8 file also normalises its encoding. Mirrors `laterite.fix()`
- * / `lat-check --fix`.
+ * Non-destructive by default — the repaired bytes come back on the result
+ * (`.bytes` / `.text` / `.save(path)`), already UTF-8 with no BOM, so fixing a
+ * non-UTF-8 file also normalises its encoding. Pass `inPlace` to overwrite the
+ * source or `out` to write elsewhere (the two are mutually exclusive). `only` /
+ * `exclude` restrict which rules' fixes are applied. Mirrors `laterite.fix()` /
+ * `lat-check --fix`.
  *
  * @param source - The AGS4 input: a filesystem path (`string`) or raw bytes
  *   (`Uint8Array`/`Buffer`). Omit to repair `opts.text` instead.
- * @param opts - {@link FixOptions} — `text` source, `risky` fixes, `dictVersion`
+ * @param opts - {@link FixOptions} — `text` source, `risky` fixes, `only` /
+ *   `exclude` rule selection, `inPlace` / `out` write-back, `dictVersion`
  *   override, and source `encoding`.
+ * @throws {TypeError} If both `inPlace` and `out` are given.
  * @returns A {@link FixResult} carrying the repaired `bytes` (and `.text` /
  *   `.save`), the `applied` fixes (with `fixesApplied` count), the residual
  *   `findings` left after re-validation, and the resolved `dictVersion`.
@@ -5222,20 +5309,35 @@ type DiffSource = string | Uint8Array | Ags4File;
  */
 declare function diff(a: DiffSource, b: DiffSource, opts?: DiffOptions): RevisionDelta;
 /**
- * Write an AGS4 file's groups to an `.xlsx` — one worksheet per group (the
- * Node analog of Python's `to_excel`). `groups` forces the worksheet order;
- * otherwise AGS4 source order is preserved. Returns the conversion stats.
+ * Convert AGS4 to an `.xlsx` workbook — one worksheet per group (the Node analog
+ * of Python's `to_excel`). `source` is an AGS4 file path or raw `Uint8Array`
+ * bytes; `groups` forces the worksheet order (else AGS4 source order).
+ *
+ * With `xlsxPath` given the workbook is written there and the conversion stats
+ * are returned; omit `xlsxPath` to get the `.xlsx` **bytes** back (the FS-free
+ * form — an uploaded/in-memory AGS4 needn't hit disk). Bytes both ways drive the
+ * same core the browser Excel tools use.
  */
-declare function toExcel(agsPath: string, xlsxPath: string, opts?: {
+declare function toExcel(source: string | Uint8Array, xlsxPath: string, opts?: {
     groups?: string[];
 }): ExcelStats;
+declare function toExcel(source: string | Uint8Array, xlsxPath?: undefined, opts?: {
+    groups?: string[];
+}): Buffer;
 /**
- * Read an `.xlsx` back into an AGS4 file (the Node analog of `from_excel`).
- * `formatNumericColumns` (default true) re-applies AGS4 numeric formatting to
- * numeric-looking columns. Returns the conversion stats.
+ * Convert an AGS4-shaped `.xlsx` workbook to AGS4 (the Node analog of
+ * `from_excel`). `source` is an `.xlsx` file path or raw `Uint8Array` bytes;
+ * `formatNumericColumns` (default true) re-applies AGS4 numeric formatting.
+ *
+ * With `agsPath` given the AGS4 is written there and the conversion stats are
+ * returned; omit `agsPath` to get the AGS4 **bytes** back — so an uploaded `.xlsx`
+ * never has to touch disk.
  */
-declare function fromExcel(xlsxPath: string, agsPath: string, opts?: {
+declare function fromExcel(source: string | Uint8Array, agsPath: string, opts?: {
     formatNumericColumns?: boolean;
 }): ExcelStats;
+declare function fromExcel(source: string | Uint8Array, agsPath?: undefined, opts?: {
+    formatNumericColumns?: boolean;
+}): Buffer;
 
-export { AAVT, ABBR, ACVT, AELO, AFLK, AIVT, ALOS, APSV, ARTW, ASDI, ASNS, AWAD, Ags4Error, Ags4File, AgsGroup, AgsSubset, type AgsValue, BKFL, BadDictError, type BuildFinding, BuildResult, CBRG, CBRP, CBRT, CDIA, CHIS, CHOC, CMPG, CMPT, CONG, CONS, CORE, CPDG, CPDT, CPTG, CPTM, CPTP, CPTT, CPTY, CPTZ, CTRC, CTRD, CTRG, CTRP, CTRS, type CanonicalType, type CellDelta, DCPG, DCPT, DETL, DICT, DISC, DLOG, DMDG, DMDT, DMTG, DMTP, DMTT, DMTZ, DOBS, DPRB, DPRG, DREM, type DiffOptions, type DiffSource, ECTN, ELRG, ERES, ESCG, ESCT, type EmitOptions, FGHG, FGHI, FGHS, FGHT, FILE, FLSH, FRAC, FRST, FileNotFoundError, type Filter, type FixOptions, FixResult, GCHM, GEOL, GRAG, GRAT, type GroupData, type GroupDelta, GroupDescriptor, type GroupRows, HDIA, HDPH, HORN, type Heading, type HeadingStatus, ICBR, IDEN, IFID, IPEN, IPID, IPRG, IPRT, IRDX, IRES, ISAG, ISAT, ISPT, ISTA, ISTG, ISTR, ISTS, ITCH, IVAN, LBSG, LBST, LDEN, LDYN, LFCN, LLIN, LLPL, LNMC, LOCA, LPDN, LPEN, LRES, LSLT, LSTG, LSTT, LSWL, LTCH, LUCT, LVAN, MCVG, MCVT, MOND, MONG, MONS, NotAgs4Error, PIPE, PLTG, PLTT, PMMC, PMMD, PMMG, PMTD, PMTG, PMTL, PMTP, PMTZ, PREM, PROJ, PTIM, PTST, PUMG, PUMT, type QueryOptions, RCAG, RCAT, RCCV, RDEN, RELD, RESC, RESD, RESG, RESP, RESS, RPLT, RSCH, RSHR, RTEN, RUCS, RWCO, type ReadOptions, Report, type RevisionDelta, type Row, type RowDelta, type RuleFinding, type RuleMeta, type RuleObservation, SAMP, SCDG, SCDT, SCPG, SCPP, SCPT, SHBG, SHBT, STND, SUCT, StaleCertError, TNPC, TRAN, TREG, TREM, TRET, TRIG, TRIT, TYPE, UNIT, UnsupportedEditionError, type ValidateOptions, WADD, WETH, WGPG, WGPT, WINS, WSTD, WSTG, agsTypes, buildAgs4, diff, fix, fromExcel, listRules, read, registry, toExcel, transport, validate };
+export { AAVT, ABBR, ACVT, AELO, AFLK, AIVT, ALOS, APSV, ARTW, ASDI, ASNS, AWAD, Ags4Error, Ags4File, AgsGroup, AgsSubset, type AgsValue, BKFL, BadDictError, type BuildFinding, BuildResult, CBRG, CBRP, CBRT, CDIA, CHIS, CHOC, CMPG, CMPT, CONG, CONS, CORE, CPDG, CPDT, CPTG, CPTM, CPTP, CPTT, CPTY, CPTZ, CTRC, CTRD, CTRG, CTRP, CTRS, type CanonicalType, type CellDelta, DCPG, DCPT, DETL, DICT, DISC, DLOG, DMDG, DMDT, DMTG, DMTP, DMTT, DMTZ, DOBS, DPRB, DPRG, DREM, type DiffOptions, type DiffSource, ECTN, ELRG, ERES, ESCG, ESCT, type EmitOptions, FGHG, FGHI, FGHS, FGHT, FILE, FLSH, FRAC, FRST, FileNotFoundError, type Filter, type FixOptions, FixResult, type FixableRule, GCHM, GEOL, GRAG, GRAT, type GroupData, type GroupDelta, GroupDescriptor, type GroupRows, HDIA, HDPH, HORN, type Heading, type HeadingStatus, ICBR, IDEN, IFID, IPEN, IPID, IPRG, IPRT, IRDX, IRES, ISAG, ISAT, ISPT, ISTA, ISTG, ISTR, ISTS, ITCH, IVAN, LBSG, LBST, LDEN, LDYN, LFCN, LLIN, LLPL, LNMC, LOCA, LPDN, LPEN, LRES, LSLT, LSTG, LSTT, LSWL, LTCH, LUCT, LVAN, MCVG, MCVT, MOND, MONG, MONS, NotAgs4Error, PIPE, PLTG, PLTT, PMMC, PMMD, PMMG, PMTD, PMTG, PMTL, PMTP, PMTZ, PREM, PROJ, PTIM, PTST, PUMG, PUMT, type QueryOptions, RCAG, RCAT, RCCV, RDEN, RELD, RESC, RESD, RESG, RESP, RESS, RPLT, RSCH, RSHR, RTEN, RUCS, RWCO, type ReadOptions, Report, type RevisionDelta, type Row, type RowDelta, type RuleFinding, type RuleMeta, type RuleObservation, SAMP, SCDG, SCDT, SCPG, SCPP, SCPT, SHBG, SHBT, STND, SUCT, StaleCertError, TNPC, TRAN, TREG, TREM, TRET, TRIG, TRIT, TYPE, UNIT, UnsupportedEditionError, type ValidateOptions, WADD, WETH, WGPG, WGPT, WINS, WSTD, WSTG, agsTypes, buildAgs4, diff, fix, fromExcel, listRules, read, registry, toExcel, transport, validate };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { Table } from 'apache-arrow';
-import { Finding, AppliedFix, ValidationReport, Sidecar, Reading, displayHint, PackStats, UnpackStats, ExcelStats } from '#native';
+import { Finding, AppliedFix, ValidationReport, Sidecar, Reading, ExcelStats, displayHint, PackStats, UnpackStats } from '#native';
 export { AppliedFix, ExcelStats, Finding, GroupMeta, Sidecar, version } from '#native';
 
 /** One query result row — JS-native values (`getRowObjectsJS`: Dates, numbers,
@@ -239,6 +239,17 @@ declare class Ags4File {
      * @param path Filesystem path to write the UTF-8 AGS4 to.
      * @returns The same `path`, for chaining. */
     save(path: string): string;
+    /** Write this file's groups to an `.xlsx` workbook — one worksheet per group,
+     * from the spec-correct {@link bytes}. With `xlsxPath` given the workbook is
+     * written there and the conversion stats returned; omit it to get the `.xlsx`
+     * **bytes** back. Mirrors `laterite.Ags4File.to_excel()` and the free
+     * {@link toExcel}. `groups` fixes the worksheet order (default source order). */
+    toExcel(xlsxPath: string, opts?: {
+        groups?: string[];
+    }): ExcelStats;
+    toExcel(xlsxPath?: undefined, opts?: {
+        groups?: string[];
+    }): Buffer;
     /** The last `.validate()` outcome (`undefined` until validated). */
     get report(): Report | undefined;
     /** The `FixResult` on a handle returned by `.fix()` (`undefined` otherwise). */
@@ -273,6 +284,15 @@ declare class Ags4File {
      * `read(f, { index })` consumes it to skip re-validation. Mirrors
      * `laterite.Ags4File.certify()`. */
     certify(path?: string): string;
+    /** Mint this file's `.ags.idx` certificate and return its **bytes** in memory —
+     * the filesystem-free twin of {@link certify}. Same precondition (a prior clean
+     * `.validate()`; it vouches for a passed validation, does not run one) and same
+     * output: the bytes are exactly what `certify` would write, so they interop with
+     * `read({ index })`, the CLI `--index`, and the browser cert. Ideal for handing
+     * the certificate straight to an upload/object store without a temp file — the
+     * certify analog of `transport.lockBytes`. Mirrors
+     * `laterite.Ags4File.certify_bytes()`. */
+    certifyBytes(): Buffer;
     /** Run SQL over the file's groups by their clean names — e.g.
      * `await ags.sql("SELECT * FROM SAMP JOIN LOCA USING (LOCA_ID) WHERE …")`.
      * Any group may be referenced, so this loads them all into the engine.
@@ -4952,15 +4972,61 @@ declare function lock(src: string, dest: string, password: string, level?: numbe
  * @throws If the passphrase is wrong or the input is not a passphrase envelope.
  */
 declare function unlock(src: string, dest: string, password: string): UnpackStats;
+/**
+ * zstd-compress `data` → bytes in memory (zstd only) — no filesystem. The
+ * in-memory form of {@link pack}; the output is a standard zstd frame, so it
+ * opens with {@link unpackBytes}, {@link unpack} (write it out first), or stock
+ * `zstd`.
+ *
+ * @param data - The bytes to compress.
+ * @param level - zstd level 1–22 (default 9).
+ * @returns The compressed bytes.
+ */
+declare function packBytes(data: Uint8Array, level?: number): Buffer;
+/**
+ * zstd-decompress bytes → bytes in memory — the in-memory form of {@link unpack}.
+ *
+ * @param data - The zstd-compressed bytes (e.g. from {@link packBytes}).
+ * @returns The decompressed bytes.
+ */
+declare function unpackBytes(data: Uint8Array): Buffer;
+/**
+ * zstd-compress + age-passphrase-encrypt `data` → bytes in memory — no plaintext
+ * on disk. The in-memory form of {@link lock}, ideal for sealing sensitive data
+ * you hold in memory (e.g. a fixed `Ags4File`'s `.bytes`) without ever writing
+ * the plaintext out. The `.zst.age` envelope matches {@link lock}'s, so the
+ * result opens with {@link unlockBytes}, {@link unlock}, `pyrage`, or the
+ * browser, given the passphrase.
+ *
+ * @param data - The bytes to compress and encrypt.
+ * @param password - The age passphrase. Required — there is no agent-key path.
+ * @param level - zstd level 1–22 (default 9).
+ * @returns The sealed bytes.
+ */
+declare function lockBytes(data: Uint8Array, password: string, level?: number): Buffer;
+/**
+ * age-passphrase-decrypt + zstd-decompress `.zst.age` bytes → bytes in memory —
+ * the in-memory form of {@link unlock}.
+ *
+ * @param data - The sealed bytes (e.g. from {@link lockBytes}).
+ * @param password - The age passphrase the envelope was sealed with.
+ * @returns The original bytes.
+ * @throws If the passphrase is wrong or the input is not a passphrase envelope.
+ */
+declare function unlockBytes(data: Uint8Array, password: string): Buffer;
 
 declare const transport_PackStats: typeof PackStats;
 declare const transport_UnpackStats: typeof UnpackStats;
 declare const transport_lock: typeof lock;
+declare const transport_lockBytes: typeof lockBytes;
 declare const transport_pack: typeof pack;
+declare const transport_packBytes: typeof packBytes;
 declare const transport_unlock: typeof unlock;
+declare const transport_unlockBytes: typeof unlockBytes;
 declare const transport_unpack: typeof unpack;
+declare const transport_unpackBytes: typeof unpackBytes;
 declare namespace transport {
-  export { transport_PackStats as PackStats, transport_UnpackStats as UnpackStats, transport_lock as lock, transport_pack as pack, transport_unlock as unlock, transport_unpack as unpack };
+  export { transport_PackStats as PackStats, transport_UnpackStats as UnpackStats, transport_lock as lock, transport_lockBytes as lockBytes, transport_pack as pack, transport_packBytes as packBytes, transport_unlock as unlock, transport_unlockBytes as unlockBytes, transport_unpack as unpack, transport_unpackBytes as unpackBytes };
 }
 
 interface ReadOptions {
@@ -5110,6 +5176,11 @@ interface RuleMeta {
  *   `observations`).
  */
 declare function listRules(): RuleMeta[];
+/** The AGS Format Rule labels whose fixes {@link fix} can apply — the values for
+ * `only` / `exclude`. Mirrors laterite-py's `FixableRule`; kept in lockstep with
+ * the engine's `fixable_rules()` by a cross-surface drift gate
+ * (`test_typed_choices.py`). Use {@link listRules} (`fixable: true`) at runtime. */
+type FixableRule = "1" | "2a" | "4" | "6" | "7" | "8" | "11a" | "11b";
 interface FixOptions {
     /** Repair in-memory `text` instead of a file path. */
     text?: string;
@@ -5119,6 +5190,18 @@ interface FixOptions {
     encoding?: string;
     /** Also apply the intent-guessing (risky) fixes, not just the safe set. */
     risky?: boolean;
+    /** Apply *only* these rules' fixes (by {@link FixableRule} label); others are
+     * left in place. The risk gate still applies, so a rule whose only fix is risky
+     * needs `risky: true` even when named here. */
+    only?: FixableRule[];
+    /** Skip these rules' fixes. Combines with `only` (`only` narrows the set, then
+     * `exclude` removes from it). */
+    exclude?: FixableRule[];
+    /** Write the repaired bytes back over the source file. Requires a path
+     * `source`; mutually exclusive with `out`. Non-destructive by default. */
+    inPlace?: boolean;
+    /** Write the repaired bytes to this path. Mutually exclusive with `inPlace`. */
+    out?: string;
 }
 /** Mechanically repair AGS4 — the headless twin of the browser's Fix engine.
  * `source` is a file path, raw `Uint8Array`/`Buffer` bytes, or (via `opts.text`)
@@ -5129,15 +5212,19 @@ interface FixOptions {
  * typography). The repaired bytes are re-validated, so `FixResult.findings` is
  * what could NOT be mechanically fixed.
  *
- * Non-destructive: nothing is written here — the repaired bytes come back on the
- * result (`.bytes` / `.text` / `.save(path)`), already UTF-8 with no BOM, so
- * fixing a non-UTF-8 file also normalises its encoding. Mirrors `laterite.fix()`
- * / `lat-check --fix`.
+ * Non-destructive by default — the repaired bytes come back on the result
+ * (`.bytes` / `.text` / `.save(path)`), already UTF-8 with no BOM, so fixing a
+ * non-UTF-8 file also normalises its encoding. Pass `inPlace` to overwrite the
+ * source or `out` to write elsewhere (the two are mutually exclusive). `only` /
+ * `exclude` restrict which rules' fixes are applied. Mirrors `laterite.fix()` /
+ * `lat-check --fix`.
  *
  * @param source - The AGS4 input: a filesystem path (`string`) or raw bytes
  *   (`Uint8Array`/`Buffer`). Omit to repair `opts.text` instead.
- * @param opts - {@link FixOptions} — `text` source, `risky` fixes, `dictVersion`
+ * @param opts - {@link FixOptions} — `text` source, `risky` fixes, `only` /
+ *   `exclude` rule selection, `inPlace` / `out` write-back, `dictVersion`
  *   override, and source `encoding`.
+ * @throws {TypeError} If both `inPlace` and `out` are given.
  * @returns A {@link FixResult} carrying the repaired `bytes` (and `.text` /
  *   `.save`), the `applied` fixes (with `fixesApplied` count), the residual
  *   `findings` left after re-validation, and the resolved `dictVersion`.
@@ -5222,20 +5309,35 @@ type DiffSource = string | Uint8Array | Ags4File;
  */
 declare function diff(a: DiffSource, b: DiffSource, opts?: DiffOptions): RevisionDelta;
 /**
- * Write an AGS4 file's groups to an `.xlsx` — one worksheet per group (the
- * Node analog of Python's `to_excel`). `groups` forces the worksheet order;
- * otherwise AGS4 source order is preserved. Returns the conversion stats.
+ * Convert AGS4 to an `.xlsx` workbook — one worksheet per group (the Node analog
+ * of Python's `to_excel`). `source` is an AGS4 file path or raw `Uint8Array`
+ * bytes; `groups` forces the worksheet order (else AGS4 source order).
+ *
+ * With `xlsxPath` given the workbook is written there and the conversion stats
+ * are returned; omit `xlsxPath` to get the `.xlsx` **bytes** back (the FS-free
+ * form — an uploaded/in-memory AGS4 needn't hit disk). Bytes both ways drive the
+ * same core the browser Excel tools use.
  */
-declare function toExcel(agsPath: string, xlsxPath: string, opts?: {
+declare function toExcel(source: string | Uint8Array, xlsxPath: string, opts?: {
     groups?: string[];
 }): ExcelStats;
+declare function toExcel(source: string | Uint8Array, xlsxPath?: undefined, opts?: {
+    groups?: string[];
+}): Buffer;
 /**
- * Read an `.xlsx` back into an AGS4 file (the Node analog of `from_excel`).
- * `formatNumericColumns` (default true) re-applies AGS4 numeric formatting to
- * numeric-looking columns. Returns the conversion stats.
+ * Convert an AGS4-shaped `.xlsx` workbook to AGS4 (the Node analog of
+ * `from_excel`). `source` is an `.xlsx` file path or raw `Uint8Array` bytes;
+ * `formatNumericColumns` (default true) re-applies AGS4 numeric formatting.
+ *
+ * With `agsPath` given the AGS4 is written there and the conversion stats are
+ * returned; omit `agsPath` to get the AGS4 **bytes** back — so an uploaded `.xlsx`
+ * never has to touch disk.
  */
-declare function fromExcel(xlsxPath: string, agsPath: string, opts?: {
+declare function fromExcel(source: string | Uint8Array, agsPath: string, opts?: {
     formatNumericColumns?: boolean;
 }): ExcelStats;
+declare function fromExcel(source: string | Uint8Array, agsPath?: undefined, opts?: {
+    formatNumericColumns?: boolean;
+}): Buffer;
 
-export { AAVT, ABBR, ACVT, AELO, AFLK, AIVT, ALOS, APSV, ARTW, ASDI, ASNS, AWAD, Ags4Error, Ags4File, AgsGroup, AgsSubset, type AgsValue, BKFL, BadDictError, type BuildFinding, BuildResult, CBRG, CBRP, CBRT, CDIA, CHIS, CHOC, CMPG, CMPT, CONG, CONS, CORE, CPDG, CPDT, CPTG, CPTM, CPTP, CPTT, CPTY, CPTZ, CTRC, CTRD, CTRG, CTRP, CTRS, type CanonicalType, type CellDelta, DCPG, DCPT, DETL, DICT, DISC, DLOG, DMDG, DMDT, DMTG, DMTP, DMTT, DMTZ, DOBS, DPRB, DPRG, DREM, type DiffOptions, type DiffSource, ECTN, ELRG, ERES, ESCG, ESCT, type EmitOptions, FGHG, FGHI, FGHS, FGHT, FILE, FLSH, FRAC, FRST, FileNotFoundError, type Filter, type FixOptions, FixResult, GCHM, GEOL, GRAG, GRAT, type GroupData, type GroupDelta, GroupDescriptor, type GroupRows, HDIA, HDPH, HORN, type Heading, type HeadingStatus, ICBR, IDEN, IFID, IPEN, IPID, IPRG, IPRT, IRDX, IRES, ISAG, ISAT, ISPT, ISTA, ISTG, ISTR, ISTS, ITCH, IVAN, LBSG, LBST, LDEN, LDYN, LFCN, LLIN, LLPL, LNMC, LOCA, LPDN, LPEN, LRES, LSLT, LSTG, LSTT, LSWL, LTCH, LUCT, LVAN, MCVG, MCVT, MOND, MONG, MONS, NotAgs4Error, PIPE, PLTG, PLTT, PMMC, PMMD, PMMG, PMTD, PMTG, PMTL, PMTP, PMTZ, PREM, PROJ, PTIM, PTST, PUMG, PUMT, type QueryOptions, RCAG, RCAT, RCCV, RDEN, RELD, RESC, RESD, RESG, RESP, RESS, RPLT, RSCH, RSHR, RTEN, RUCS, RWCO, type ReadOptions, Report, type RevisionDelta, type Row, type RowDelta, type RuleFinding, type RuleMeta, type RuleObservation, SAMP, SCDG, SCDT, SCPG, SCPP, SCPT, SHBG, SHBT, STND, SUCT, StaleCertError, TNPC, TRAN, TREG, TREM, TRET, TRIG, TRIT, TYPE, UNIT, UnsupportedEditionError, type ValidateOptions, WADD, WETH, WGPG, WGPT, WINS, WSTD, WSTG, agsTypes, buildAgs4, diff, fix, fromExcel, listRules, read, registry, toExcel, transport, validate };
+export { AAVT, ABBR, ACVT, AELO, AFLK, AIVT, ALOS, APSV, ARTW, ASDI, ASNS, AWAD, Ags4Error, Ags4File, AgsGroup, AgsSubset, type AgsValue, BKFL, BadDictError, type BuildFinding, BuildResult, CBRG, CBRP, CBRT, CDIA, CHIS, CHOC, CMPG, CMPT, CONG, CONS, CORE, CPDG, CPDT, CPTG, CPTM, CPTP, CPTT, CPTY, CPTZ, CTRC, CTRD, CTRG, CTRP, CTRS, type CanonicalType, type CellDelta, DCPG, DCPT, DETL, DICT, DISC, DLOG, DMDG, DMDT, DMTG, DMTP, DMTT, DMTZ, DOBS, DPRB, DPRG, DREM, type DiffOptions, type DiffSource, ECTN, ELRG, ERES, ESCG, ESCT, type EmitOptions, FGHG, FGHI, FGHS, FGHT, FILE, FLSH, FRAC, FRST, FileNotFoundError, type Filter, type FixOptions, FixResult, type FixableRule, GCHM, GEOL, GRAG, GRAT, type GroupData, type GroupDelta, GroupDescriptor, type GroupRows, HDIA, HDPH, HORN, type Heading, type HeadingStatus, ICBR, IDEN, IFID, IPEN, IPID, IPRG, IPRT, IRDX, IRES, ISAG, ISAT, ISPT, ISTA, ISTG, ISTR, ISTS, ITCH, IVAN, LBSG, LBST, LDEN, LDYN, LFCN, LLIN, LLPL, LNMC, LOCA, LPDN, LPEN, LRES, LSLT, LSTG, LSTT, LSWL, LTCH, LUCT, LVAN, MCVG, MCVT, MOND, MONG, MONS, NotAgs4Error, PIPE, PLTG, PLTT, PMMC, PMMD, PMMG, PMTD, PMTG, PMTL, PMTP, PMTZ, PREM, PROJ, PTIM, PTST, PUMG, PUMT, type QueryOptions, RCAG, RCAT, RCCV, RDEN, RELD, RESC, RESD, RESG, RESP, RESS, RPLT, RSCH, RSHR, RTEN, RUCS, RWCO, type ReadOptions, Report, type RevisionDelta, type Row, type RowDelta, type RuleFinding, type RuleMeta, type RuleObservation, SAMP, SCDG, SCDT, SCPG, SCPP, SCPT, SHBG, SHBT, STND, SUCT, StaleCertError, TNPC, TRAN, TREG, TREM, TRET, TRIG, TRIT, TYPE, UNIT, UnsupportedEditionError, type ValidateOptions, WADD, WETH, WGPG, WGPT, WINS, WSTD, WSTG, agsTypes, buildAgs4, diff, fix, fromExcel, listRules, read, registry, toExcel, transport, validate };

package/dist/index.mjs

@@ -5,7 +5,7 @@ var __export = (target, all) => {
 };
 
 // ts/index.ts
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync as readFileSync2, writeFileSync as writeFileSync4 } from "fs";
 import { tableFromArrays, tableToIPC } from "apache-arrow";
 
 // ts/ags4-file.ts
@@ -235,8 +235,14 @@ import {
   transportUnpack,
   transportLock,
   transportUnlock,
+  transportPackBytes,
+  transportUnpackBytes,
+  transportLockBytes,
+  transportUnlockBytes,
   ags4ToExcel,
-  excelToAgs4
+  excelToAgs4,
+  ags4BytesToXlsx,
+  xlsxBytesToAgs4
 } from "#native";
 
 // ts/report.ts
@@ -470,6 +476,9 @@ var Ags4File = class _Ags4File {
     writeFileSync(path, this.bytes);
     return path;
   }
+  toExcel(xlsxPath, opts = {}) {
+    return xlsxPath === void 0 ? toExcel(this.bytes, void 0, opts) : toExcel(this.bytes, xlsxPath, opts);
+  }
   // --- fluent verbs (validate / fix / diff) --------------------------------
   /** Resolve this handle to the `(source, opts)` the free fns take: the retained
    * read source (so line numbers match the original), or the re-emit for a
@@ -567,16 +576,7 @@ var Ags4File = class _Ags4File {
    * `read(f, { index })` consumes it to skip re-validation. Mirrors
    * `laterite.Ags4File.certify()`. */
   certify(path) {
-    if (this.#report === void 0) {
-      throw new Ags4Error(
-        "call .validate() before .certify() \u2014 certify records a passed validation, it does not run one"
-      );
-    }
-    if (!this.#report.isValid) {
-      throw new Ags4Error(
-        `cannot certify a file with ${this.#report.count} finding(s); fix them and re-validate clean first`
-      );
-    }
+    const report = this.#requireCleanValidation();
     const srcPath = this.#src?.path;
     const out = path ?? (srcPath !== void 0 ? `${srcPath}.idx` : void 0);
     if (out === void 0) {
@@ -597,9 +597,43 @@ var Ags4File = class _Ags4File {
         );
       }
     }
-    const cert = Sidecar.assemble(
+    writeFileSync(out, this.#mintCert(report).toJson());
+    return out;
+  }
+  /** Mint this file's `.ags.idx` certificate and return its **bytes** in memory —
+   * the filesystem-free twin of {@link certify}. Same precondition (a prior clean
+   * `.validate()`; it vouches for a passed validation, does not run one) and same
+   * output: the bytes are exactly what `certify` would write, so they interop with
+   * `read({ index })`, the CLI `--index`, and the browser cert. Ideal for handing
+   * the certificate straight to an upload/object store without a temp file — the
+   * certify analog of `transport.lockBytes`. Mirrors
+   * `laterite.Ags4File.certify_bytes()`. */
+  certifyBytes() {
+    return this.#mintCert(this.#requireCleanValidation()).toJson();
+  }
+  /** Shared precondition for `certify` / `certifyBytes`: a certificate vouches for
+   * a *passed* validation, so one must have run and found nothing. Returns the
+   * validated `Report` (narrowed non-undefined) for the minting step. */
+  #requireCleanValidation() {
+    if (this.#report === void 0) {
+      throw new Ags4Error(
+        "call .validate() before .certify() \u2014 certify records a passed validation, it does not run one"
+      );
+    }
+    if (!this.#report.isValid) {
+      throw new Ags4Error(
+        `cannot certify a file with ${this.#report.count} finding(s); fix them and re-validate clean first`
+      );
+    }
+    return this.#report;
+  }
+  /** Assemble the `Sidecar` certificate over the original source bytes, stamping
+   * the profile the last `.validate()` actually ran. `report` comes from
+   * `#requireCleanValidation`. */
+  #mintCert(report) {
+    return Sidecar.assemble(
       this.#sourceBytes(),
-      this.#report.dictVersion,
+      report.dictVersion,
       (/* @__PURE__ */ new Date()).toISOString(),
       void 0,
       void 0,
@@ -607,8 +641,6 @@ var Ags4File = class _Ags4File {
       this.#lastCheckFiles,
       this.#lastForced
     );
-    writeFileSync(out, cert.toJson());
-    return out;
   }
   // --- optional DuckDB engine (sql / at / connection) ----------------------
   async #getEngine() {
@@ -31493,9 +31525,13 @@ function parseValue2(raw, agsType) {
 var transport_exports = {};
 __export(transport_exports, {
   lock: () => lock,
+  lockBytes: () => lockBytes,
   pack: () => pack,
+  packBytes: () => packBytes,
   unlock: () => unlock,
-  unpack: () => unpack
+  unlockBytes: () => unlockBytes,
+  unpack: () => unpack,
+  unpackBytes: () => unpackBytes
 });
 function pack(src, dest, level) {
   return transportPack(src, dest, level);
@@ -31509,6 +31545,18 @@ function lock(src, dest, password, level) {
 function unlock(src, dest, password) {
   return transportUnlock(src, dest, password);
 }
+function packBytes(data, level) {
+  return transportPackBytes(data, level);
+}
+function unpackBytes(data) {
+  return transportUnpackBytes(data);
+}
+function lockBytes(data, password, level) {
+  return transportLockBytes(data, password, level);
+}
+function unlockBytes(data, password) {
+  return transportUnlockBytes(data, password);
+}
 
 // ts/index.ts
 function read(source, opts = {}) {
@@ -31634,11 +31682,41 @@ function listRules2() {
   return JSON.parse(listRules()).rules;
 }
 function fix(source, opts = {}) {
+  if (opts.inPlace && opts.out !== void 0) {
+    throw new TypeError("fix(): `inPlace` and `out` are mutually exclusive");
+  }
+  if (opts.only !== void 0 || opts.exclude !== void 0) {
+    const fixable = new Set(listRules2().filter((r2) => r2.fixable).map((r2) => r2.rule));
+    for (const [kw, labels] of [["only", opts.only], ["exclude", opts.exclude]]) {
+      for (const label of labels ?? []) {
+        if (!fixable.has(label)) {
+          throw new TypeError(
+            `fix(): ${kw} names rule "${label}", which is not fixable \u2014 see listRules() (fixable: true)`
+          );
+        }
+      }
+    }
+  }
   const path = typeof source === "string" ? source : void 0;
   const data = typeof source === "string" || source == null ? void 0 : source;
-  const r = fixFile(path, opts.text, data, opts.dictVersion, opts.encoding, opts.risky);
+  if (opts.inPlace && path === void 0) {
+    throw makeError("bad_args", 5, "fix(): `inPlace` needs a path source; use `out` or `.save(path)`");
+  }
+  const r = fixFile(
+    path,
+    opts.text,
+    data,
+    opts.dictVersion,
+    opts.encoding,
+    opts.risky,
+    opts.only,
+    opts.exclude
+  );
   if (!r.ok) throw makeError(r.errorKind ?? "", r.exitCode, r.error ?? "unknown error");
-  return new FixResult(r.fixed, r.residual, r.applied, r.dictVersion);
+  const result = new FixResult(r.fixed, r.residual, r.applied, r.dictVersion);
+  const dest = opts.inPlace ? path : opts.out;
+  if (dest !== void 0) writeFileSync4(dest, result.bytes);
+  return result;
 }
 function diffBytes(x) {
   if (x instanceof Ags4File) return x.bytes;
@@ -31661,11 +31739,28 @@ function diff2(a, b, opts = {}) {
     throw fromNativeError(e);
   }
 }
-function toExcel(agsPath, xlsxPath, opts = {}) {
-  return ags4ToExcel(agsPath, xlsxPath, opts.groups);
+function excelStatsOf(r) {
+  return { sheetsWritten: r.sheetsWritten, rowsWritten: r.rowsWritten, warnings: r.warnings };
+}
+function toExcel(source, xlsxPath, opts = {}) {
+  if (typeof source === "string" && xlsxPath !== void 0) {
+    return ags4ToExcel(source, xlsxPath, opts.groups);
+  }
+  const agsBytes = typeof source === "string" ? readFileSync2(source) : source;
+  const r = ags4BytesToXlsx(agsBytes, opts.groups);
+  if (xlsxPath === void 0) return r.bytes;
+  writeFileSync4(xlsxPath, r.bytes);
+  return excelStatsOf(r);
 }
-function fromExcel(xlsxPath, agsPath, opts = {}) {
-  return excelToAgs4(xlsxPath, agsPath, opts.formatNumericColumns);
+function fromExcel(source, agsPath, opts = {}) {
+  if (typeof source === "string" && agsPath !== void 0) {
+    return excelToAgs4(source, agsPath, opts.formatNumericColumns);
+  }
+  const xlsxBytes = typeof source === "string" ? readFileSync2(source) : source;
+  const r = xlsxBytesToAgs4(xlsxBytes, opts.formatNumericColumns);
+  if (agsPath === void 0) return r.bytes;
+  writeFileSync4(agsPath, r.bytes);
+  return excelStatsOf(r);
 }
 export {
   AAVT,

package/index.d.ts

@@ -92,6 +92,13 @@ export declare class Sidecar {
   get fyi(): number
 }
 
+/**
+ * AGS4 bytes → `.xlsx` workbook bytes (one worksheet per group). `orderedKeys`
+ * forces the worksheet order; otherwise AGS4 source order. The bytes twin of
+ * `ags4ToExcel`.
+ */
+export declare function ags4BytesToXlsx(data: Uint8Array, orderedKeys?: Array<string> | undefined | null): ExcelBytesResult
+
 /**
  * Write an AGS4 file's groups to an `.xlsx` — one worksheet per group.
  * `orderedKeys` forces the worksheet order; otherwise AGS4 source order.
@@ -155,6 +162,19 @@ export interface EmitResult {
   fixesApplied: number
 }
 
+/**
+ * An in-memory Excel conversion result: the produced `bytes` (an `.xlsx`
+ * workbook or an `.ags` document) plus the same conversion stats. The bytes
+ * twin of the path functions, so an uploaded workbook / a fixed handle needn't
+ * hit disk — the same FS-free cores the browser surface uses.
+ */
+export interface ExcelBytesResult {
+  bytes: Buffer
+  sheetsWritten: number
+  rowsWritten: number
+  warnings: Array<string>
+}
+
 /** The outcome of an Excel conversion (mirrors `laterite_excel::ExcelStats`). */
 export interface ExcelStats {
   /** Worksheets written (AGS4→XLSX) or read (XLSX→AGS4). */
@@ -182,12 +202,14 @@ export interface Finding {
 
 /**
  * Mechanically repair an AGS4 file (`path`) / `text` / `data`: apply the SAFE
- * fixes (plus the risky set when `includeRisky`), re-validate, and return the
- * fixed bytes + residual findings. Mirrors laterite-py's `fix()` /
- * `lat-check --fix`; the single `fix_document` orchestration is shared. The TS
- * layer wraps this into a `FixResult` (`.bytes` / `.text` / `.save(path)`).
+ * fixes (plus the risky set when `includeRisky`, narrowed by `only` / widened-
+ * back by `exclude`), re-validate, and return the fixed bytes + residual
+ * findings. Mirrors laterite-py's `fix()` / `lat-check --fix`; the single
+ * `fix_document_selective` orchestration is shared. The TS layer wraps this into
+ * a `FixResult` (`.bytes` / `.text` / `.save(path)`) and adds `inPlace` / `out`
+ * write-back on top.
  */
-export declare function fixFile(path?: string | undefined | null, text?: string | undefined | null, data?: Uint8Array | undefined | null, dictVersion?: string | undefined | null, encoding?: string | undefined | null, includeRisky?: boolean | undefined | null): FixReport
+export declare function fixFile(path?: string | undefined | null, text?: string | undefined | null, data?: Uint8Array | undefined | null, dictVersion?: string | undefined | null, encoding?: string | undefined | null, includeRisky?: boolean | undefined | null, only?: Array<string> | undefined | null, exclude?: Array<string> | undefined | null): FixReport
 
 /**
  * The repair report — the Node mirror of laterite-py's `fix_file` dict. `ok` is
@@ -293,18 +315,36 @@ export declare function runCheck(path?: string | undefined | null, text?: string
  */
 export declare function transportLock(src: string, dest: string, password: string, level?: number | undefined | null): PackStats
 
+/**
+ * zstd-compress, then age-encrypt `data` with `password` in memory → bytes —
+ * no plaintext on disk. `level` is 1–22 (default 9).
+ */
+export declare function transportLockBytes(data: Uint8Array, password: string, level?: number | undefined | null): Buffer
+
 /** zstd-compress `src` → `dest`. `level` is 1–22 (default 9, the AGS sweet spot). */
 export declare function transportPack(src: string, dest: string, level?: number | undefined | null): PackStats
 
+/** zstd-compress `data` in memory → bytes. `level` is 1–22 (default 9). */
+export declare function transportPackBytes(data: Uint8Array, level?: number | undefined | null): Buffer
+
 /**
  * age-decrypt with `password`, then zstd-decompress → `dest`. Wrong passphrase
  * / non-passphrase envelopes surface as an error.
  */
 export declare function transportUnlock(src: string, dest: string, password: string): UnpackStats
 
+/**
+ * age-decrypt with `password`, then zstd-decompress `data` in memory → bytes.
+ * Wrong passphrase / non-passphrase envelopes surface as an error.
+ */
+export declare function transportUnlockBytes(data: Uint8Array, password: string): Buffer
+
 /** zstd-decompress `src` → `dest`. */
 export declare function transportUnpack(src: string, dest: string): UnpackStats
 
+/** zstd-decompress `data` in memory → bytes (the twin of `transportPackBytes`). */
+export declare function transportUnpackBytes(data: Uint8Array): Buffer
+
 /** Result of `transportUnpack` / `transportUnlock`: output size, elapsed seconds. */
 export interface UnpackStats {
   bytes: bigint
@@ -342,3 +382,10 @@ export interface ValidationReport {
 
 /** The crate version. */
 export declare function version(): string
+
+/**
+ * `.xlsx` workbook bytes → AGS4 bytes. `formatNumericColumns` (default true)
+ * re-applies AGS4 numeric formatting to numeric-looking columns. The bytes twin
+ * of `excelToAgs4`.
+ */
+export declare function xlsxBytesToAgs4(data: Uint8Array, formatNumericColumns?: boolean | undefined | null): ExcelBytesResult

package/index.js

@@ -77,8 +77,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-android-arm64')
         const bindingPackageVersion = require('@laterite/native-android-arm64/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -93,8 +93,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-android-arm-eabi')
         const bindingPackageVersion = require('@laterite/native-android-arm-eabi/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -114,8 +114,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-win32-x64-gnu')
         const bindingPackageVersion = require('@laterite/native-win32-x64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -130,8 +130,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-win32-x64-msvc')
         const bindingPackageVersion = require('@laterite/native-win32-x64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -147,8 +147,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-win32-ia32-msvc')
         const bindingPackageVersion = require('@laterite/native-win32-ia32-msvc/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -163,8 +163,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-win32-arm64-msvc')
         const bindingPackageVersion = require('@laterite/native-win32-arm64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -182,8 +182,8 @@ function requireNative() {
     try {
       const binding = require('@laterite/native-darwin-universal')
       const bindingPackageVersion = require('@laterite/native-darwin-universal/package.json').version
-      if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-        throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
       }
       return binding
     } catch (e) {
@@ -198,8 +198,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-darwin-x64')
         const bindingPackageVersion = require('@laterite/native-darwin-x64/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -214,8 +214,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-darwin-arm64')
         const bindingPackageVersion = require('@laterite/native-darwin-arm64/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -234,8 +234,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-freebsd-x64')
         const bindingPackageVersion = require('@laterite/native-freebsd-x64/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -250,8 +250,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-freebsd-arm64')
         const bindingPackageVersion = require('@laterite/native-freebsd-arm64/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -271,8 +271,8 @@ function requireNative() {
         try {
           const binding = require('@laterite/native-linux-x64-musl')
           const bindingPackageVersion = require('@laterite/native-linux-x64-musl/package.json').version
-          if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -287,8 +287,8 @@ function requireNative() {
         try {
           const binding = require('@laterite/native-linux-x64-gnu')
           const bindingPackageVersion = require('@laterite/native-linux-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -305,8 +305,8 @@ function requireNative() {
         try {
           const binding = require('@laterite/native-linux-arm64-musl')
           const bindingPackageVersion = require('@laterite/native-linux-arm64-musl/package.json').version
-          if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -321,8 +321,8 @@ function requireNative() {
         try {
           const binding = require('@laterite/native-linux-arm64-gnu')
           const bindingPackageVersion = require('@laterite/native-linux-arm64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -339,8 +339,8 @@ function requireNative() {
         try {
           const binding = require('@laterite/native-linux-arm-musleabihf')
           const bindingPackageVersion = require('@laterite/native-linux-arm-musleabihf/package.json').version
-          if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -355,8 +355,8 @@ function requireNative() {
         try {
           const binding = require('@laterite/native-linux-arm-gnueabihf')
           const bindingPackageVersion = require('@laterite/native-linux-arm-gnueabihf/package.json').version
-          if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -373,8 +373,8 @@ function requireNative() {
         try {
           const binding = require('@laterite/native-linux-loong64-musl')
           const bindingPackageVersion = require('@laterite/native-linux-loong64-musl/package.json').version
-          if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -389,8 +389,8 @@ function requireNative() {
         try {
           const binding = require('@laterite/native-linux-loong64-gnu')
           const bindingPackageVersion = require('@laterite/native-linux-loong64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -407,8 +407,8 @@ function requireNative() {
         try {
           const binding = require('@laterite/native-linux-riscv64-musl')
           const bindingPackageVersion = require('@laterite/native-linux-riscv64-musl/package.json').version
-          if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -423,8 +423,8 @@ function requireNative() {
         try {
           const binding = require('@laterite/native-linux-riscv64-gnu')
           const bindingPackageVersion = require('@laterite/native-linux-riscv64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -440,8 +440,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-linux-ppc64-gnu')
         const bindingPackageVersion = require('@laterite/native-linux-ppc64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -456,8 +456,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-linux-s390x-gnu')
         const bindingPackageVersion = require('@laterite/native-linux-s390x-gnu/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -476,8 +476,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-openharmony-arm64')
         const bindingPackageVersion = require('@laterite/native-openharmony-arm64/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -492,8 +492,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-openharmony-x64')
         const bindingPackageVersion = require('@laterite/native-openharmony-x64/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -508,8 +508,8 @@ function requireNative() {
       try {
         const binding = require('@laterite/native-openharmony-arm')
         const bindingPackageVersion = require('@laterite/native-openharmony-arm/package.json').version
-        if (bindingPackageVersion !== '0.6.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.6.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.6.2' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.6.2 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -589,6 +589,7 @@ if (!nativeBinding) {
 module.exports = nativeBinding
 module.exports.Reading = nativeBinding.Reading
 module.exports.Sidecar = nativeBinding.Sidecar
+module.exports.ags4BytesToXlsx = nativeBinding.ags4BytesToXlsx
 module.exports.ags4ToExcel = nativeBinding.ags4ToExcel
 module.exports.canonicalType = nativeBinding.canonicalType
 module.exports.diff = nativeBinding.diff
@@ -602,7 +603,12 @@ module.exports.parseValue = nativeBinding.parseValue
 module.exports.registryDictionaryJson = nativeBinding.registryDictionaryJson
 module.exports.runCheck = nativeBinding.runCheck
 module.exports.transportLock = nativeBinding.transportLock
+module.exports.transportLockBytes = nativeBinding.transportLockBytes
 module.exports.transportPack = nativeBinding.transportPack
+module.exports.transportPackBytes = nativeBinding.transportPackBytes
 module.exports.transportUnlock = nativeBinding.transportUnlock
+module.exports.transportUnlockBytes = nativeBinding.transportUnlockBytes
 module.exports.transportUnpack = nativeBinding.transportUnpack
+module.exports.transportUnpackBytes = nativeBinding.transportUnpackBytes
 module.exports.version = nativeBinding.version
+module.exports.xlsxBytesToAgs4 = nativeBinding.xlsxBytesToAgs4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "laterite",
-  "version": "0.6.0",
+  "version": "0.6.2",
   "description": "AGS4 geotechnical data for Node.js — read, validate, produce, and query (the Node port of the laterite Python toolkit, Rust-backed).",
   "license": "MIT",
   "author": "niko86",
@@ -73,9 +73,9 @@
     "apache-arrow": "^21.1.0"
   },
   "optionalDependencies": {
-    "@laterite/native-darwin-arm64": "0.6.0",
-    "@laterite/native-linux-x64-gnu": "0.6.0",
-    "@laterite/native-win32-x64-msvc": "0.6.0"
+    "@laterite/native-darwin-arm64": "0.6.2",
+    "@laterite/native-linux-x64-gnu": "0.6.2",
+    "@laterite/native-win32-x64-msvc": "0.6.2"
   },
   "peerDependencies": {
     "@duckdb/node-api": ">=1.5.0"