svg-toolbox 1.1.11 → 1.2.0

package/es/utils/__tests__/path-validation.test.js

@@ -0,0 +1,64 @@
+import { validateFilePath, validateReadPath, validateWritePath } from '../path-validation';
+import path from 'path';
+import fs from 'fs';
+import os from 'os';
+describe('Path Validation', () => {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'svg-toolbox-test-'));
+    afterAll(() => {
+        fs.rmSync(tempDir, { recursive: true, force: true });
+    });
+    describe('validateFilePath', () => {
+        it('should normalize valid paths', () => {
+            const result = validateFilePath('./test.svg');
+            expect(path.isAbsolute(result)).toBe(true);
+        });
+        it('should reject paths with .. traversal', () => {
+            expect(() => validateFilePath('../etc/passwd')).toThrow('Path traversal detected');
+            expect(() => validateFilePath('../../secret')).toThrow('Path traversal detected');
+        });
+        it('should reject empty paths', () => {
+            expect(() => validateFilePath('')).toThrow('File path must be a non-empty string');
+            expect(() => validateFilePath(null)).toThrow('File path must be a non-empty string');
+        });
+        it('should restrict paths to base directory when provided', () => {
+            const baseDir = tempDir;
+            const validPath = path.join(baseDir, 'test.svg');
+            expect(() => validateFilePath(validPath, baseDir)).not.toThrow();
+            expect(() => validateFilePath('/etc/passwd', baseDir)).toThrow('Path is outside the allowed directory');
+        });
+    });
+    describe('validateReadPath', () => {
+        it('should validate file extensions', () => {
+            expect(() => validateReadPath('test.svg', ['.svg'])).not.toThrow();
+            expect(() => validateReadPath('test.png', ['.svg'])).toThrow('File extension .png is not allowed');
+        });
+        it('should accept multiple allowed extensions', () => {
+            expect(() => validateReadPath('test.svg', ['.svg', '.png'])).not.toThrow();
+            expect(() => validateReadPath('test.png', ['.svg', '.png'])).not.toThrow();
+        });
+        it('should be case-insensitive for extensions', () => {
+            expect(() => validateReadPath('test.SVG', ['.svg'])).not.toThrow();
+        });
+    });
+    describe('validateWritePath', () => {
+        it('should validate file extensions', () => {
+            const writePath = path.join(tempDir, 'test.png');
+            expect(() => validateWritePath(writePath, ['.png'])).not.toThrow();
+            expect(() => validateWritePath(writePath, ['.svg'])).toThrow('File extension .png is not allowed');
+        });
+        it('should create directory if it does not exist', () => {
+            const newDir = path.join(tempDir, 'new-dir');
+            const writePath = path.join(newDir, 'test.png');
+            expect(fs.existsSync(newDir)).toBe(false);
+            validateWritePath(writePath, ['.png']);
+            expect(fs.existsSync(newDir)).toBe(true);
+        });
+        it('should restrict writes to base directory when provided', () => {
+            const baseDir = tempDir;
+            const validPath = path.join(baseDir, 'test.png');
+            expect(() => validateWritePath(validPath, ['.png'], baseDir)).not.toThrow();
+            expect(() => validateWritePath('/tmp/test.png', ['.png'], baseDir)).toThrow('Path is outside the allowed directory');
+        });
+    });
+});
+//# sourceMappingURL=path-validation.test.js.map

package/es/utils/__tests__/path-validation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-validation.test.js","sourceRoot":"","sources":["../../../src/utils/__tests__/path-validation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC3F,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAE5E,QAAQ,CAAC,GAAG,EAAE;QACZ,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;YACnF,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;YACnC,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;YACnF,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAW,CAAC,CAAC,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;QAC9F,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,OAAO,GAAG,OAAO,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACjD,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAEjE,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;QAC1G,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACnE,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACrG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC3E,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC7E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACjD,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACnE,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;QACrG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAEhD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1C,iBAAiB,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACvC,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,MAAM,OAAO,GAAG,OAAO,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YACjD,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAE5E,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,eAAe,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,uCAAuC,CAAC,CAAC;QACvH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/es/utils/__tests__/validation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/es/utils/__tests__/validation.test.js

@@ -0,0 +1,42 @@
+import { isValidSvgString, isValidSvgElement } from '../validation';
+import { createSVGElement } from '../../core/element';
+describe('Validation', () => {
+    describe('isValidSvgString', () => {
+        it('should return true for valid SVG string', () => {
+            const svgString = '<svg><circle cx="50" cy="50" r="40" /></svg>';
+            expect(isValidSvgString(svgString)).toBe(true);
+        });
+        it('should return false for non-string input', () => {
+            expect(isValidSvgString(null)).toBe(false);
+            expect(isValidSvgString(123)).toBe(false);
+            expect(isValidSvgString({})).toBe(false);
+        });
+        it('should return false for invalid SVG string', () => {
+            expect(isValidSvgString('<div></div>')).toBe(false);
+            expect(isValidSvgString('not svg')).toBe(false);
+            expect(isValidSvgString('')).toBe(false);
+        });
+        it('should handle malformed XML', () => {
+            expect(isValidSvgString('<svg><unclosed></svg>')).toBe(false);
+        });
+    });
+    describe('isValidSvgElement', () => {
+        it('should return true for valid SVG element', () => {
+            const svgString = '<svg><circle /></svg>';
+            const element = createSVGElement(svgString);
+            expect(isValidSvgElement(element)).toBe(true);
+        });
+        it('should return false for non-element input', () => {
+            expect(isValidSvgElement(null)).toBe(false);
+            expect(isValidSvgElement('string')).toBe(false);
+            expect(isValidSvgElement({})).toBe(false);
+        });
+        it('should return false for non-SVG element', () => {
+            const { JSDOM } = require('jsdom');
+            const dom = new JSDOM(`<!DOCTYPE html><html><body><div></div></body></html>`);
+            const div = dom.window.document.querySelector('div');
+            expect(isValidSvgElement(div)).toBe(false);
+        });
+    });
+});
+//# sourceMappingURL=validation.test.js.map

package/es/utils/__tests__/validation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.test.js","sourceRoot":"","sources":["../../../src/utils/__tests__/validation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,SAAS,GAAG,8CAA8C,CAAC;YACjE,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,SAAS,GAAG,uBAAuB,CAAC;YAC1C,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC9E,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAErD,MAAM,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/es/utils/dom.d.ts

@@ -0,0 +1,23 @@
+/**
+ * DOM utility functions for SVG manipulation
+ */
+export declare const document: Document;
+export declare const DOMParser: {
+    new (): DOMParser;
+    prototype: DOMParser;
+}, XMLSerializer: {
+    new (): XMLSerializer;
+    prototype: XMLSerializer;
+};
+/**
+ * Creates a new DOM parser instance
+ */
+export declare function createDOMParser(): DOMParser;
+/**
+ * Creates a new XML serializer instance
+ */
+export declare function createXMLSerializer(): XMLSerializer;
+/**
+ * Gets the SVG namespace URI
+ */
+export declare const SVG_NAMESPACE = "http://www.w3.org/2000/svg";

package/es/utils/dom.js

@@ -0,0 +1,25 @@
+/**
+ * DOM utility functions for SVG manipulation
+ */
+import { JSDOM } from 'jsdom';
+// Create a singleton virtual DOM environment
+const dom = new JSDOM(`<!DOCTYPE html><html><body></body></html>`);
+export const { document } = dom.window;
+export const { DOMParser, XMLSerializer } = dom.window;
+/**
+ * Creates a new DOM parser instance
+ */
+export function createDOMParser() {
+    return new dom.window.DOMParser();
+}
+/**
+ * Creates a new XML serializer instance
+ */
+export function createXMLSerializer() {
+    return new dom.window.XMLSerializer();
+}
+/**
+ * Gets the SVG namespace URI
+ */
+export const SVG_NAMESPACE = 'http://www.w3.org/2000/svg';
+//# sourceMappingURL=dom.js.map

package/es/utils/dom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dom.js","sourceRoot":"","sources":["../../src/utils/dom.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAE9B,6CAA6C;AAC7C,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;AACvC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;AAEvD;;GAEG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,4BAA4B,CAAC"}

package/es/utils/path-validation.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Path validation utilities to prevent path traversal attacks
+ */
+/**
+ * Validates and normalizes a file path to prevent directory traversal attacks
+ *
+ * @param filePath - The file path to validate
+ * @param baseDirectory - Optional base directory to restrict paths to
+ * @returns Normalized absolute path
+ * @throws Error if path is invalid or contains traversal sequences
+ */
+export declare function validateFilePath(filePath: string, baseDirectory?: string): string;
+/**
+ * Validates that a file path is safe for reading
+ *
+ * @param filePath - The file path to validate
+ * @param allowedExtensions - Optional array of allowed file extensions (e.g., ['.svg', '.png'])
+ * @returns Normalized absolute path
+ */
+export declare function validateReadPath(filePath: string, allowedExtensions?: string[]): string;
+/**
+ * Validates that a file path is safe for writing
+ *
+ * @param filePath - The file path to validate
+ * @param allowedExtensions - Optional array of allowed file extensions
+ * @param baseDirectory - Optional base directory to restrict writes to
+ * @returns Normalized absolute path
+ */
+export declare function validateWritePath(filePath: string, allowedExtensions?: string[], baseDirectory?: string): string;

package/es/utils/path-validation.js

@@ -0,0 +1,101 @@
+/**
+ * Path validation utilities to prevent path traversal attacks
+ */
+import path from 'path';
+import fs from 'fs';
+/**
+ * Maximum allowed path length to prevent buffer overflow attacks
+ */
+const MAX_PATH_LENGTH = 4096;
+/**
+ * Validates and normalizes a file path to prevent directory traversal attacks
+ *
+ * @param filePath - The file path to validate
+ * @param baseDirectory - Optional base directory to restrict paths to
+ * @returns Normalized absolute path
+ * @throws Error if path is invalid or contains traversal sequences
+ */
+export function validateFilePath(filePath, baseDirectory) {
+    if (!filePath || typeof filePath !== 'string') {
+        throw new Error('File path must be a non-empty string');
+    }
+    // Check path length to prevent buffer overflow attacks
+    if (filePath.length > MAX_PATH_LENGTH) {
+        throw new Error(`Path length exceeds maximum allowed length of ${MAX_PATH_LENGTH} characters`);
+    }
+    // Check for null bytes which can be used in path traversal attacks
+    if (filePath.includes('\0')) {
+        throw new Error('Path contains null bytes which are not allowed');
+    }
+    // Check for path traversal sequences BEFORE normalization
+    // This catches attempts like ../, ..\, etc.
+    if (filePath.includes('..')) {
+        throw new Error('Path traversal detected: paths containing ".." are not allowed');
+    }
+    // Resolve to absolute path first, then normalize
+    // This ensures that . sequences are resolved
+    const absolutePath = path.isAbsolute(filePath)
+        ? path.resolve(filePath)
+        : path.resolve(process.cwd(), filePath);
+    // Normalize the resolved path
+    const normalizedPath = path.normalize(absolutePath);
+    // Additional safety check: ensure the normalized path doesn't contain .. after resolution
+    if (normalizedPath.includes('..')) {
+        throw new Error('Path traversal detected: paths containing ".." are not allowed');
+    }
+    // If base directory is provided, ensure the path is within it
+    if (baseDirectory) {
+        const baseDir = path.isAbsolute(baseDirectory)
+            ? path.resolve(path.normalize(baseDirectory))
+            : path.resolve(process.cwd(), baseDirectory);
+        const resolvedPath = path.resolve(normalizedPath);
+        // Use path.relative to check if path is within base directory
+        const relativePath = path.relative(baseDir, resolvedPath);
+        // If relative path starts with .. or is absolute, it's outside the base directory
+        if (relativePath.startsWith('..') || path.isAbsolute(relativePath)) {
+            throw new Error('Path is outside the allowed directory');
+        }
+    }
+    return normalizedPath;
+}
+/**
+ * Validates that a file path is safe for reading
+ *
+ * @param filePath - The file path to validate
+ * @param allowedExtensions - Optional array of allowed file extensions (e.g., ['.svg', '.png'])
+ * @returns Normalized absolute path
+ */
+export function validateReadPath(filePath, allowedExtensions) {
+    const validatedPath = validateFilePath(filePath);
+    if (allowedExtensions && allowedExtensions.length > 0) {
+        const ext = path.extname(validatedPath).toLowerCase();
+        if (!allowedExtensions.includes(ext)) {
+            throw new Error(`File extension ${ext} is not allowed. Allowed extensions: ${allowedExtensions.join(', ')}`);
+        }
+    }
+    return validatedPath;
+}
+/**
+ * Validates that a file path is safe for writing
+ *
+ * @param filePath - The file path to validate
+ * @param allowedExtensions - Optional array of allowed file extensions
+ * @param baseDirectory - Optional base directory to restrict writes to
+ * @returns Normalized absolute path
+ */
+export function validateWritePath(filePath, allowedExtensions, baseDirectory) {
+    const validatedPath = validateFilePath(filePath, baseDirectory);
+    if (allowedExtensions && allowedExtensions.length > 0) {
+        const ext = path.extname(validatedPath).toLowerCase();
+        if (!allowedExtensions.includes(ext)) {
+            throw new Error(`File extension ${ext} is not allowed. Allowed extensions: ${allowedExtensions.join(', ')}`);
+        }
+    }
+    // Ensure the directory exists
+    const dir = path.dirname(validatedPath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    return validatedPath;
+}
+//# sourceMappingURL=path-validation.js.map

package/es/utils/path-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-validation.js","sourceRoot":"","sources":["../../src/utils/path-validation.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB;;GAEG;AACH,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,aAAsB;IAEtB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,uDAAuD;IACvD,IAAI,QAAQ,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,iDAAiD,eAAe,aAAa,CAAC,CAAC;IACjG,CAAC;IAED,mEAAmE;IACnE,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,0DAA0D;IAC1D,4CAA4C;IAC5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,iDAAiD;IACjD,6CAA6C;IAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;IAE1C,8BAA8B;IAC9B,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAEpD,0FAA0F;IAC1F,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,8DAA8D;IAC9D,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YAC7C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,CAAC,CAAC;QAE/C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAElD,8DAA8D;QAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAE1D,kFAAkF;QAClF,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,iBAA4B;IAE5B,MAAM,aAAa,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAEjD,IAAI,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,wCAAwC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,iBAA4B,EAC5B,aAAsB;IAEtB,MAAM,aAAa,GAAG,gBAAgB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAEhE,IAAI,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QACtD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,wCAAwC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/es/utils/validation.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Validation utilities for SVG content
+ */
+/**
+ * Validates whether the provided content is a valid SVG string
+ */
+export declare function isValidSvgString(content: unknown): content is string;
+/**
+ * Validates whether the provided content is a valid SVG element
+ */
+export declare function isValidSvgElement(content: unknown): content is Element;

package/es/utils/validation.js

@@ -0,0 +1,30 @@
+/**
+ * Validation utilities for SVG content
+ */
+import { JSDOM } from 'jsdom';
+/**
+ * Validates whether the provided content is a valid SVG string
+ */
+export function isValidSvgString(content) {
+    if (typeof content !== 'string') {
+        return false;
+    }
+    try {
+        const dom = new JSDOM(content);
+        const rootNode = new dom.window.DOMParser().parseFromString(content, 'image/svg+xml').documentElement;
+        return rootNode.nodeName.toLowerCase() === 'svg';
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Validates whether the provided content is a valid SVG element
+ */
+export function isValidSvgElement(content) {
+    return (content !== null &&
+        typeof content === 'object' &&
+        'tagName' in content &&
+        content.tagName?.toLowerCase() === 'svg');
+}
+//# sourceMappingURL=validation.js.map

package/es/utils/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/utils/validation.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAE9B;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,eAAe,CAAC;QACtG,OAAO,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,OAAO,CACL,OAAO,KAAK,IAAI;QAChB,OAAO,OAAO,KAAK,QAAQ;QAC3B,SAAS,IAAI,OAAO;QACnB,OAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,KAAK,CACtD,CAAC;AACJ,CAAC"}

package/lib/analyze/__tests__/colors.test.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/analyze/__tests__/colors.test.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var colors_1 = require("../colors");
+var element_1 = require("../../core/element");
+describe('Color Analysis', function () {
+    describe('extractColors', function () {
+        it('should extract fill colors', function () {
+            var svgContent = '<svg><circle fill="red" /><rect fill="blue" /></svg>';
+            var colors = (0, colors_1.extractColors)(svgContent);
+            expect(colors.length).toBeGreaterThan(0);
+            expect(colors.some(function (c) { return c.fill === 'red'; })).toBe(true);
+            expect(colors.some(function (c) { return c.fill === 'blue'; })).toBe(true);
+        });
+        it('should extract stroke colors', function () {
+            var svgContent = '<svg><path stroke="green" stroke-width="2" /></svg>';
+            var colors = (0, colors_1.extractColors)(svgContent);
+            expect(colors.some(function (c) { return c.stroke === 'green'; })).toBe(true);
+        });
+        it('should extract opacity values', function () {
+            var svgContent = '<svg><circle fill="red" opacity="0.5" /></svg>';
+            var colors = (0, colors_1.extractColors)(svgContent);
+            var redColor = colors.find(function (c) { return c.fill === 'red'; });
+            expect(redColor === null || redColor === void 0 ? void 0 : redColor.opacity).toBe(0.5);
+        });
+        it('should ignore transparent and none values', function () {
+            var svgContent = '<svg><circle fill="none" stroke="transparent" /><rect fill="red" /></svg>';
+            var colors = (0, colors_1.extractColors)(svgContent);
+            expect(colors.some(function (c) { return c.fill === 'none'; })).toBe(false);
+            expect(colors.some(function (c) { return c.stroke === 'transparent'; })).toBe(false);
+            expect(colors.some(function (c) { return c.fill === 'red'; })).toBe(true);
+        });
+        it('should work with SVG element input', function () {
+            var svgContent = '<svg><circle fill="purple" /></svg>';
+            var element = (0, element_1.createSVGElement)(svgContent);
+            var colors = (0, colors_1.extractColors)(element);
+            expect(colors.some(function (c) { return c.fill === 'purple'; })).toBe(true);
+        });
+        it('should handle nested elements', function () {
+            var svgContent = '<svg><g><circle fill="red" /><rect fill="blue" /></g></svg>';
+            var colors = (0, colors_1.extractColors)(svgContent);
+            expect(colors.some(function (c) { return c.fill === 'red'; })).toBe(true);
+            expect(colors.some(function (c) { return c.fill === 'blue'; })).toBe(true);
+        });
+    });
+});
+//# sourceMappingURL=colors.test.js.map

package/lib/analyze/__tests__/colors.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"colors.test.js","sourceRoot":"","sources":["../../../src/analyze/__tests__/colors.test.ts"],"names":[],"mappings":";;AAAA,oCAA0C;AAC1C,8CAAsD;AAEtD,QAAQ,CAAC,gBAAgB,EAAE;IACzB,QAAQ,CAAC,eAAe,EAAE;QACxB,EAAE,CAAC,4BAA4B,EAAE;YAC/B,IAAM,UAAU,GAAG,sDAAsD,CAAC;YAC1E,IAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,UAAU,CAAC,CAAC;YAEzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,IAAI,KAAK,KAAK,EAAhB,CAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,IAAI,KAAK,MAAM,EAAjB,CAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8BAA8B,EAAE;YACjC,IAAM,UAAU,GAAG,qDAAqD,CAAC;YACzE,IAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,UAAU,CAAC,CAAC;YAEzC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,MAAM,KAAK,OAAO,EAApB,CAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE;YAClC,IAAM,UAAU,GAAG,gDAAgD,CAAC;YACpE,IAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,UAAU,CAAC,CAAC;YAEzC,IAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,IAAI,KAAK,KAAK,EAAhB,CAAgB,CAAC,CAAC;YACpD,MAAM,CAAC,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE;YAC9C,IAAM,UAAU,GAAG,2EAA2E,CAAC;YAC/F,IAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,UAAU,CAAC,CAAC;YAEzC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,IAAI,KAAK,MAAM,EAAjB,CAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,MAAM,KAAK,aAAa,EAA1B,CAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,IAAI,KAAK,KAAK,EAAhB,CAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE;YACvC,IAAM,UAAU,GAAG,qCAAqC,CAAC;YACzD,IAAM,OAAO,GAAG,IAAA,0BAAgB,EAAC,UAAU,CAAC,CAAC;YAC7C,IAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,OAAO,CAAC,CAAC;YAEtC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAnB,CAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+BAA+B,EAAE;YAClC,IAAM,UAAU,GAAG,6DAA6D,CAAC;YACjF,IAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,UAAU,CAAC,CAAC;YAEzC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,IAAI,KAAK,KAAK,EAAhB,CAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAA,CAAC,IAAI,OAAA,CAAC,CAAC,IAAI,KAAK,MAAM,EAAjB,CAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/lib/analyze/__tests__/paths.test.d.ts

@@ -0,0 +1 @@
+export {};

package/lib/analyze/__tests__/paths.test.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var paths_1 = require("../paths");
+var element_1 = require("../../core/element");
+describe('Path Analysis', function () {
+    describe('parsePathData', function () {
+        it('should parse simple path commands', function () {
+            var pathData = 'M 10,20 L 30,40 Z';
+            var commands = (0, paths_1.parsePathData)(pathData);
+            expect(commands.length).toBe(3);
+            expect(commands[0].type).toBe('M');
+            expect(commands[0].params).toEqual([10, 20]);
+            expect(commands[1].type).toBe('L');
+            expect(commands[2].type).toBe('Z');
+        });
+        it('should handle lowercase commands', function () {
+            var pathData = 'm 10,20 l 30,40 z';
+            var commands = (0, paths_1.parsePathData)(pathData);
+            expect(commands.length).toBe(3);
+            expect(commands[0].type).toBe('m');
+        });
+        it('should handle multiple parameters', function () {
+            var pathData = 'M 10,20 L 30,40 50,60';
+            var commands = (0, paths_1.parsePathData)(pathData);
+            expect(commands[1].params.length).toBe(4);
+        });
+        it('should handle cubic bezier commands', function () {
+            var pathData = 'M 10,20 C 20,30 40,50 60,70';
+            var commands = (0, paths_1.parsePathData)(pathData);
+            expect(commands.length).toBe(2);
+            expect(commands[1].type).toBe('C');
+            expect(commands[1].params.length).toBe(6);
+        });
+    });
+    describe('analyzePaths', function () {
+        it('should analyze all paths in SVG', function () {
+            var svgContent = '<svg><path id="path1" d="M 10,20 L 30,40" /><path id="path2" d="M 50,60 L 70,80" /></svg>';
+            var analysis = (0, paths_1.analyzePaths)(svgContent);
+            expect(analysis.size).toBe(2);
+            expect(analysis.has('path1')).toBe(true);
+            expect(analysis.has('path2')).toBe(true);
+        });
+        it('should use index as id if path has no id', function () {
+            var svgContent = '<svg><path d="M 10,20" /><path d="M 30,40" /></svg>';
+            var analysis = (0, paths_1.analyzePaths)(svgContent);
+            expect(analysis.has('path-0')).toBe(true);
+            expect(analysis.has('path-1')).toBe(true);
+        });
+        it('should work with SVG element input', function () {
+            var svgContent = '<svg><path d="M 10,20 L 30,40" /></svg>';
+            var element = (0, element_1.createSVGElement)(svgContent);
+            var analysis = (0, paths_1.analyzePaths)(element);
+            expect(analysis.size).toBe(1);
+        });
+    });
+    describe('getPathStatistics', function () {
+        it('should return correct statistics', function () {
+            var svgContent = '<svg><path d="M 10,20 L 30,40 Z" /><path d="M 50,60 L 70,80" /></svg>';
+            var stats = (0, paths_1.getPathStatistics)(svgContent);
+            expect(stats.totalPaths).toBe(2);
+            expect(stats.totalCommands).toBeGreaterThan(0);
+            expect(stats.commandTypes['M']).toBeGreaterThan(0);
+            expect(stats.commandTypes['L']).toBeGreaterThan(0);
+        });
+        it('should count command types correctly', function () {
+            var svgContent = '<svg><path d="M 10,20 M 30,40 L 50,60 L 70,80" /></svg>';
+            var stats = (0, paths_1.getPathStatistics)(svgContent);
+            expect(stats.commandTypes['M']).toBe(2);
+            expect(stats.commandTypes['L']).toBe(2);
+        });
+    });
+});
+//# sourceMappingURL=paths.test.js.map

package/lib/analyze/__tests__/paths.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.test.js","sourceRoot":"","sources":["../../../src/analyze/__tests__/paths.test.ts"],"names":[],"mappings":";;AAAA,kCAA0E;AAC1E,8CAAsD;AAEtD,QAAQ,CAAC,eAAe,EAAE;IACxB,QAAQ,CAAC,eAAe,EAAE;QACxB,EAAE,CAAC,mCAAmC,EAAE;YACtC,IAAM,QAAQ,GAAG,mBAAmB,CAAC;YACrC,IAAM,QAAQ,GAAG,IAAA,qBAAa,EAAC,QAAQ,CAAC,CAAC;YAEzC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE;YACrC,IAAM,QAAQ,GAAG,mBAAmB,CAAC;YACrC,IAAM,QAAQ,GAAG,IAAA,qBAAa,EAAC,QAAQ,CAAC,CAAC;YAEzC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE;YACtC,IAAM,QAAQ,GAAG,uBAAuB,CAAC;YACzC,IAAM,QAAQ,GAAG,IAAA,qBAAa,EAAC,QAAQ,CAAC,CAAC;YAEzC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE;YACxC,IAAM,QAAQ,GAAG,6BAA6B,CAAC;YAC/C,IAAM,QAAQ,GAAG,IAAA,qBAAa,EAAC,QAAQ,CAAC,CAAC;YAEzC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE;QACvB,EAAE,CAAC,iCAAiC,EAAE;YACpC,IAAM,UAAU,GAAG,2FAA2F,CAAC;YAC/G,IAAM,QAAQ,GAAG,IAAA,oBAAY,EAAC,UAAU,CAAC,CAAC;YAE1C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE;YAC7C,IAAM,UAAU,GAAG,qDAAqD,CAAC;YACzE,IAAM,QAAQ,GAAG,IAAA,oBAAY,EAAC,UAAU,CAAC,CAAC;YAE1C,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE;YACvC,IAAM,UAAU,GAAG,yCAAyC,CAAC;YAC7D,IAAM,OAAO,GAAG,IAAA,0BAAgB,EAAC,UAAU,CAAC,CAAC;YAC7C,IAAM,QAAQ,GAAG,IAAA,oBAAY,EAAC,OAAO,CAAC,CAAC;YAEvC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE;QAC5B,EAAE,CAAC,kCAAkC,EAAE;YACrC,IAAM,UAAU,GAAG,uEAAuE,CAAC;YAC3F,IAAM,KAAK,GAAG,IAAA,yBAAiB,EAAC,UAAU,CAAC,CAAC;YAE5C,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sCAAsC,EAAE;YACzC,IAAM,UAAU,GAAG,yDAAyD,CAAC;YAC7E,IAAM,KAAK,GAAG,IAAA,yBAAiB,EAAC,UAAU,CAAC,CAAC;YAE5C,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/lib/analyze/colors.d.ts

@@ -0,0 +1,8 @@
+/**
+ * SVG color analysis utilities
+ */
+import { SVGColor } from '../types';
+/**
+ * Extracts all colors used in an SVG
+ */
+export declare function extractColors(svgContent: Element | string): SVGColor[];

package/lib/analyze/colors.js

@@ -0,0 +1,58 @@
+"use strict";
+/**
+ * SVG color analysis utilities
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractColors = extractColors;
+var jsdom_1 = require("jsdom");
+var element_1 = require("../core/element");
+var validation_1 = require("../utils/validation");
+/**
+ * Extracts all colors used in an SVG
+ */
+function extractColors(svgContent) {
+    var svgString = (0, validation_1.isValidSvgString)(svgContent)
+        ? svgContent
+        : (0, element_1.serializeSVG)(svgContent);
+    var dom = new jsdom_1.JSDOM(svgString, {
+        contentType: 'image/svg+xml'
+    });
+    var document = dom.window.document;
+    var svgElement = document.querySelector('svg');
+    if (!svgElement) {
+        throw new Error('No SVG element found in the provided content.');
+    }
+    var colors = [];
+    var colorSet = new Set();
+    function extractFromElement(element) {
+        var fill = element.getAttribute('fill');
+        var stroke = element.getAttribute('stroke');
+        var opacity = element.getAttribute('opacity');
+        if (fill && fill !== 'none' && fill !== 'transparent') {
+            var colorKey = "".concat(fill, "-").concat(opacity || '1');
+            if (!colorSet.has(colorKey)) {
+                colorSet.add(colorKey);
+                colors.push({
+                    fill: fill,
+                    opacity: opacity ? parseFloat(opacity) : undefined
+                });
+            }
+        }
+        if (stroke && stroke !== 'none' && stroke !== 'transparent') {
+            var colorKey = "stroke-".concat(stroke, "-").concat(opacity || '1');
+            if (!colorSet.has(colorKey)) {
+                colorSet.add(colorKey);
+                colors.push({
+                    stroke: stroke,
+                    opacity: opacity ? parseFloat(opacity) : undefined
+                });
+            }
+        }
+        Array.from(element.children).forEach(function (child) {
+            extractFromElement(child);
+        });
+    }
+    extractFromElement(svgElement);
+    return colors;
+}
+//# sourceMappingURL=colors.js.map

package/lib/analyze/colors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"colors.js","sourceRoot":"","sources":["../../src/analyze/colors.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAUH,sCAsDC;AA9DD,+BAA8B;AAC9B,2CAA+C;AAC/C,kDAA0E;AAG1E;;GAEG;AACH,SAAgB,aAAa,CAAC,UAA4B;IACxD,IAAM,SAAS,GAAG,IAAA,6BAAgB,EAAC,UAAU,CAAC;QAC5C,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,IAAA,sBAAY,EAAC,UAAU,CAAC,CAAC;IAE7B,IAAM,GAAG,GAAG,IAAI,aAAK,CAAC,SAAS,EAAE;QAC/B,WAAW,EAAE,eAAe;KAC7B,CAAC,CAAC;IAEH,IAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;IACrC,IAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAEjD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,IAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,SAAS,kBAAkB,CAAC,OAAgB;QAC1C,IAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAEhD,IAAI,IAAI,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YACtD,IAAM,QAAQ,GAAG,UAAG,IAAI,cAAI,OAAO,IAAI,GAAG,CAAE,CAAC;YAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,MAAA;oBACJ,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;iBACnD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC5D,IAAM,QAAQ,GAAG,iBAAU,MAAM,cAAI,OAAO,IAAI,GAAG,CAAE,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC;oBACV,MAAM,QAAA;oBACN,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;iBACnD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,UAAA,KAAK;YACxC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAE/B,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/lib/analyze/paths.d.ts

@@ -0,0 +1,20 @@
+/**
+ * SVG path analysis utilities
+ */
+import { PathCommand } from '../types';
+/**
+ * Parses the 'd' attribute of a path element into command objects
+ */
+export declare function parsePathData(pathData: string): PathCommand[];
+/**
+ * Analyzes all paths in an SVG and returns their command structures
+ */
+export declare function analyzePaths(svgContent: Element | string): Map<string, PathCommand[]>;
+/**
+ * Gets statistics about paths in an SVG
+ */
+export declare function getPathStatistics(svgContent: Element | string): {
+    totalPaths: number;
+    totalCommands: number;
+    commandTypes: Record<string, number>;
+};