text-sanctifier 1.3.5 → 1.3.6

package/README.md

@@ -119,6 +119,16 @@ Two options handle spaces and zero-width characters gently, and both run before
 - `normalizeSpaces`: replace look-alike spaces with an ordinary space. These are U+00A0, U+2000–U+200A, U+202F and U+205F: the `nonbreaking_space` category except U+3000, the ordinary space of CJK text. With `purgeInvisibleChars` alone, a non-breaking space between two words is deleted and the words run together; with `normalizeSpaces` as well, they stay apart.
 - `purgeZeroWidthSpaces`: remove the zero width space U+200B, the word joiner U+2060 and U+FEFF, and nothing else. Emoji joiners, ZWNJ, variation selectors and bidi marks are kept.
 
+### Presets as standalone imports
+
+Each preset is also its own export: `sanctifyStrict`, `sanctifyLoose`, `sanctifyKeyboardOnly`, `sanctifyKeyboardOnlyEmoji` and `sanctifyPasted`. They are the same functions as `summonSanctifier.strict` and the rest. Import one directly and a bundler leaves out `summonSanctifier` and the other presets (about 1.1 KB gzipped instead of 1.45 KB).
+
+```js
+import { sanctifyPasted } from 'text-sanctifier';
+
+const output = sanctifyPasted(clipboardText);
+```
+
 ### `summonSanctifier.strict`
 
 Aggressively purges: emojis, control characters, extra spacing, and newlines.
@@ -236,22 +246,25 @@ getNewlineStats('a\r\nb\n'); // { crlf: 1, cr: 0, lf: 1, types: ['CRLF', 'LF'],
 
 The categories cover exactly what `nukeControls` and `purgeInvisibleChars` strip. Every code point with the Unicode property Default_Ignorable_Code_Point (characters renderers must draw as nothing) is in a category, and a test checks this against the running Node's Unicode data.
 
-### `text-sanctifier/hidden`: `findHiddenRuns(text)` and `decodeTagText(text)`
+### `text-sanctifier/hidden`: `findHiddenRuns(text, options?)` and `decodeTagText(text)`
 
 The run finder behind [`check --ai-config`](#ai-configuration-files), for tools that read text on its way to a model. It has no Node APIs, so it works in a browser too, but it is a separate entry point and not part of the `text-sanctifier/browser` bundle.
 
 ```js
 import { findHiddenRuns, decodeTagText } from 'text-sanctifier/hidden';
 
-const { runs, benign } = findHiddenRuns(text);
-// runs:   [{ kind: 'tag', offset, end, count, decoded: 'Ignore the user' }, ...]
+const { runs, benign, counts, total, truncated } = findHiddenRuns(text, { maxRuns: 100, maxDecodedLength: 1000 });
+// runs:   [{ kind: 'tag', offset, end, line, column, count, decoded: 'Ignore the user', decodedTruncated: false }, ...]
 // benign: [[offset, end], ...]  England/Scotland/Wales flags, a lone U+FE0E/U+FE0F after a character
+// counts: { tag, variation_selector, invisible_operator, reserved_tag_plane }, every run listed or not; total is their sum
 ```
 
-- `kind` is `tag` (U+E0000–U+E007F), `variation_selector` (U+FE00–U+FE0F, U+E0100–U+E01EF, U+180B–U+180D, U+180F) or `invisible_operator` (U+2061–U+2064). Consecutive characters of one kind form one run.
-- `offset` and `end` are UTF-16 indexes, `[offset, end)`; `count` is in code points. Only tag runs have `decoded`.
+- `kind` is `tag` (U+E0000–U+E007F), `variation_selector` (U+FE00–U+FE0F, U+E0100–U+E01EF, U+180B–U+180D, U+180F) `invisible_operator` (U+2061–U+2064) or `reserved_tag_plane` (U+E0080–U+E00FF, U+E01F0–U+E0FFF: unassigned, default ignorable, so they render as nothing and can carry data). Consecutive characters of one kind form one run.
+- `offset` and `end` are UTF-16 indexes, `[offset, end)`; `count` is in code points. `line` and `column` are counted exactly as in `inspectTextDetailed` (1-based, columns in UTF-16 units, CRLF is one line break). Only tag runs have `decoded` and `decodedTruncated`.
+- `maxRuns` caps the `runs` list and, separately, the `benign` list; `counts`, `total` and `benignTotal` count everything, and `truncated` is true when either list was cut. `maxDecodedLength` caps each `decoded` string in UTF-16 units and never cuts a `<U+XXXX>` marker. Both default to no cap, and an invalid value (negative, fractional, a string) also means no cap, so set them explicitly for untrusted input. With both set, memory stays flat on any input: on 16 M characters (32 MB) of hidden text the heap grows by under 1 MB, against hundreds of MB with no caps.
 - `decodeTagText` turns U+E0020–U+E007E into the ASCII they shadow and writes any other character as `<U+XXXX>`.
 - Zero-width, bidi and other invisible characters are not runs; use `inspectTextDetailed` for those.
+- `VERSION` is exported here and from the package root: the installed version, as in `package.json`.
 
 ---
 
@@ -301,7 +314,7 @@ skills/review/SKILL.md:2:3  U+FE00  run of 3 variation selectors
 - Consecutive tag characters, variation selectors or invisible operators are reported once, as a run, at the first character. Tag runs are decoded: U+E0020–U+E007E become the ASCII they shadow, and other tags are shown as `<U+XXXX>`.
 - Every other invisible or control character is reported as in a plain `check`.
 - Two legitimate sequences are left out: the flags of England, Scotland and Wales (U+1F3F4, tag letters, U+E007F), and a single U+FE0E or U+FE0F after another character (text or emoji presentation). A plain `check` still reports both.
-- `--json` adds `hiddenRuns` (`{ kind, offset, line, column, codePoint, count, decoded?, decodedTruncated? }`, at most `--max-findings` per file) and `hiddenRunCount` to each file, and `hiddenRunCount` to the summary. `kind` is `tag`, `variation_selector` or `invisible_operator`; `decoded` is cut at 1000 characters. `total` and `counts` leave out the legitimate sequences.
+- `--json` adds `hiddenRuns` (`{ kind, offset, line, column, codePoint, count, decoded?, decodedTruncated? }`, at most `--max-findings` per file) and `hiddenRunCount` to each file, and `hiddenRunCount` to the summary. `kind` is `tag`, `variation_selector`, `invisible_operator` or `reserved_tag_plane`; `decoded` is cut at 1000 characters. `total` and `counts` leave out the legitimate sequences.
 
 ### SARIF output
 
@@ -321,7 +334,7 @@ The repository publishes a [pre-commit](https://pre-commit.com) hook manifest, s
 # .pre-commit-config.yaml
 repos:
   - repo: https://github.com/iWhatty/text-sanctifier
-    rev: v1.3.5  # a release tag
+    rev: v1.3.6  # a release tag
     hooks:
       - id: text-sanctifier            # every staged text file
       - id: text-sanctifier-ai-config  # agent instruction files, with --ai-config

package/bin/text-sanctifier.js

@@ -443,7 +443,7 @@ const plural = (n, word) => `${n} ${word}${n === 1 ? '' : 's'}`;
 // --- check --ai-config ---
 
 const MAX_DECODED = 1000;
-const RUN_NOUNS = { tag: 'tag character', variation_selector: 'variation selector', invisible_operator: 'invisible operator' };
+const RUN_NOUNS = { tag: 'tag character', variation_selector: 'variation selector', invisible_operator: 'invisible operator', reserved_tag_plane: 'reserved plane-14 code point' };
 
 /**
  * inspect() for agent instruction files: drops findings that belong to legitimate

package/dist/text-sanctifier.min.js

@@ -1,6 +1,6 @@
-var d=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F-\u009F\u061C\u200E\u200F\u202A-\u202E\u2066-\u2069]+/g,C=/[\u00A0\u00AD\u034F\u061C\u115F\u1160\u17B4\u17B5\u180B-\u180F\u2000-\u200F\u202A-\u202F\u205F-\u206F\u3000\u3164\uFE00-\uFE0F\uFEFF\uFFA0\uFFF0-\uFFF8\u{1BCA0}-\u{1BCA3}\u{1D173}-\u{1D17A}\u{E0000}-\u{E0FFF}]+/gu;function I(e){return e<8192?R(e):N(e)}function R(e){return e<174?e<32?e<11?e<1?"nul":e<9?"c0_control":null:e<13?"c0_control":e<14?null:"c0_control":e<160?e<127?null:e<128?"c0_control":"c1_control":e<161?"nonbreaking_space":e<173?null:"invisible_format":e<4449?e<1564?e<847?null:e<848?"invisible_format":null:e<1565?"bidi_control":e<4447?null:"hangul_filler":e<6155?e<6068?null:e<6070?"invisible_format":null:e<6159?e<6158?"variation_selector":"invisible_format":e<6160?"variation_selector":null}function N(e){return e<8304?e<8240?e<8208?e<8203?"nonbreaking_space":e<8206?"zero_width":"bidi_control":e<8234?null:e<8239?"bidi_control":"nonbreaking_space":e<8289?e<8287?null:e<8288?"nonbreaking_space":"zero_width":e<8294?"invisible_format":e<8298?"bidi_control":"invisible_format":e<65040?e<12644?e<12288?null:e<12289?"nonbreaking_space":null:e<12645?"hangul_filler":e<65024?null:"variation_selector":e<65440?e<65279?null:e<65280?"bom":null:e<65520?e<65441?"hangul_filler":null:e<65529?"invisible_format":null}function b(e){return e<917504?e<113828?e<113824?null:"invisible_format":e<119155?null:e<119163?"invisible_format":null:e<917760?e<917632?"tag":"invisible_format":e<918e3?"variation_selector":e<921600?"invisible_format":null}function h(e={}){let r=!!e.normalizeSpaces,n=!!e.purgeZeroWidthSpaces,o=!!e.purgeInvisibleChars,u=!!e.purgeEmojis,i=!!e.nukeControls,l=!!e.keyboardOnlyFilter,c=!!e.normalizeNewlines,f=!!e.trimSpacesAroundNewlines,a=!!e.collapseNewLines,g=!!e.preserveParagraphs,s=!!e.collapseSpaces,E=!!e.finalTrim,F=Number.isFinite(e.maxLength)&&e.maxLength>=0?e.maxLength:1/0,x=e.onMaxLength==="truncate"||e.onMaxLength==="noop"||e.onMaxLength==="throw"?e.onMaxLength:"throw";return t=>_(t,o,u,i,l,c,f,a,g,s,E,F,x,r,n)}h.strict=e=>_(e,!0,!0,!0,!1,!0,!0,!0,!1,!0,!0);h.loose=e=>_(e,!1,!1,!1,!1,!0,!0,!0,!0,!0,!0);h.keyboardOnlyEmoji=e=>_(e,!1,!1,!1,!0,!0,!0,!1,!1,!1,!0);h.keyboardOnly=e=>_(e,!0,!0,!0,!0,!0,!0,!0,!1,!0,!0);h.pasted=e=>_(e,!1,!1,!1,!1,!0,!1,!1,!1,!1,!1,1/0,"throw",!0,!0);function _(e,r=!1,n=!1,o=!1,u=!1,i=!1,l=!1,c=!1,f=!1,a=!1,g=!1,s=1/0,E="throw",F=!1,x=!1){if(typeof e!="string")throw new TypeError("sanctifyText expects a string input.");if(E!=="truncate"&&E!=="noop"&&E!=="throw"&&(E="throw"),e.length>s)switch(E){case"truncate":e=e.slice(0,s);break;case"noop":return e;case"throw":default:throw new RangeError(`sanctifyText input length ${e.length} exceeds maxLength ${s}.`)}let t=e;return F&&(t=t.replace(T," ")),x&&(t=t.replace(L,"")),r&&(t=v(t)),n&&(t=z(t)),o&&(t=q(t)),u&&(t=B(t,n)),i&&(t=H(t)),l&&(t=O(t)),c&&(t=Z(t,f)),a&&(t=V(t)),g?t.trim():t}var T=/[\u00A0\u2000-\u200A\u202F\u205F]/g,L=/[\u200B\u2060\uFEFF]/g;function v(e){return e.replace(C,"")}function D(e){if(p.lastIndex=0,!p.test(e))return"";p.lastIndex=0;let r="";for(let n of e.matchAll(p))r+=n[0];return r}var S=/[^\x20-\x7E\r\n]+/gu;function B(e,r=!1){let n=A(e);return r?n.replace(S,""):n.replace(S,o=>D(o))}var G=/[\u2018\u2019\u201A\u201B\u2032\u2035]/g,X=/[\u201C\u201D\u201E\u201F\u2033\u2036\u00AB\u00BB]/g,k=/[\u2012\u2013\u2014\u2015\u2212]/g,U=/\u2026/g,M=/[\u2022\u00B7]/g,P=/[\uFF01-\uFF5E]/g;function A(e){return e.replace(G,"'").replace(X,'"').replace(k,"-").replace(U,"...").replace(M,"*").replace(P,r=>String.fromCharCode(r.charCodeAt(0)-65248))}var p;try{p=new RegExp("(?:\\p{Extended_Pictographic}(?:\\uFE0F|\\uFE0E)?(?:\\u200D(?:\\p{Extended_Pictographic}|\\w)+)*)","gu")}catch{p=/[\u{2700}-\u{27BF}\u{1F300}-\u{1FAFF}\u{1F3FB}-\u{1F3FF}\u200D\uFE0F\u{1F1E6}-\u{1F1FF}]/gu}function z(e){return e.replace(p,"")}var j=/\r\n|\r|\n/g;function H(e,r=`
-`){return e.replace(j,r)}var K=/[ \t]*(\n+)[ \t]*/g;function O(e){return e.replace(K,"$1")}var W=/\n{2,}/g,J=/\n{3,}/g;function Z(e,r){return r?e.replace(J,`
+var y=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F-\u009F\u061C\u200E\u200F\u202A-\u202E\u2066-\u2069]+/g,d=/[\u00A0\u00AD\u034F\u061C\u115F\u1160\u17B4\u17B5\u180B-\u180F\u2000-\u200F\u202A-\u202F\u205F-\u206F\u3000\u3164\uFE00-\uFE0F\uFEFF\uFFA0\uFFF0-\uFFF8\u{1BCA0}-\u{1BCA3}\u{1D173}-\u{1D17A}\u{E0000}-\u{E0FFF}]+/gu;function A(e){return e<8192?D(e):v(e)}function D(e){return e<174?e<32?e<11?e<1?"nul":e<9?"c0_control":null:e<13?"c0_control":e<14?null:"c0_control":e<160?e<127?null:e<128?"c0_control":"c1_control":e<161?"nonbreaking_space":e<173?null:"invisible_format":e<4449?e<1564?e<847?null:e<848?"invisible_format":null:e<1565?"bidi_control":e<4447?null:"hangul_filler":e<6155?e<6068?null:e<6070?"invisible_format":null:e<6159?e<6158?"variation_selector":"invisible_format":e<6160?"variation_selector":null}function v(e){return e<8304?e<8240?e<8208?e<8203?"nonbreaking_space":e<8206?"zero_width":"bidi_control":e<8234?null:e<8239?"bidi_control":"nonbreaking_space":e<8289?e<8287?null:e<8288?"nonbreaking_space":"zero_width":e<8294?"invisible_format":e<8298?"bidi_control":"invisible_format":e<65040?e<12644?e<12288?null:e<12289?"nonbreaking_space":null:e<12645?"hangul_filler":e<65024?null:"variation_selector":e<65440?e<65279?null:e<65280?"bom":null:e<65520?e<65441?"hangul_filler":null:e<65529?"invisible_format":null}function I(e){return e<917504?e<113828?e<113824?null:"invisible_format":e<119155?null:e<119163?"invisible_format":null:e<917760?e<917632?"tag":"invisible_format":e<918e3?"variation_selector":e<921600?"invisible_format":null}var g=/[^\x20-\x7E\r\n]+/gu,B=/[\u2018\u2019\u201A\u201B\u2032\u2035]/g,G=/[\u201C\u201D\u201E\u201F\u2033\u2036\u00AB\u00BB]/g,X=/[\u2012\u2013\u2014\u2015\u2212]/g,k=/\u2026/g,O=/[\u2022\u00B7]/g,P=/[\uFF01-\uFF5E]/g;function S(e){return e.replace(B,"'").replace(G,'"').replace(X,"-").replace(k,"...").replace(O,"*").replace(P,r=>String.fromCharCode(r.charCodeAt(0)-65248))}function M(){try{return new RegExp("(?:\\p{Extended_Pictographic}(?:\\uFE0F|\\uFE0E)?(?:\\u200D(?:\\p{Extended_Pictographic}|\\w)+)*)","gu")}catch{return/[\u{2700}-\u{27BF}\u{1F300}-\u{1FAFF}\u{1F3FB}-\u{1F3FF}\u200D\uFE0F\u{1F1E6}-\u{1F1FF}]/gu}}var x=M();function m(e,r){return e.lastIndex=0,e.test(r)}function U(e){let r=S(e);if(!m(g,r))return!1;for(let n of r)if(!(n===`
+`||n==="\r"||n>=" "&&n<="~")&&!m(x,n))return!0;return!1}function j(e){if(typeof e!="string")throw new TypeError("inspectText expects a string input.");let r=[],n={hasControlChars:!1,hasInvisibleChars:!1,hasMixedNewlines:!1,newlineStyle:null,hasEmojis:!1,hasNonKeyboardChars:!1,summary:r},u=(s,c,f)=>{s&&(n[c]=!0,r.push(f))};u(m(y,e),"hasControlChars","Control characters detected."),u(m(d,e),"hasInvisibleChars","Invisible Unicode characters detected."),u(m(x,e),"hasEmojis","Emojis detected.");let{mixed:o,types:i}=b(e);return n.hasMixedNewlines=o,n.newlineStyle=o?"Mixed":i[0]||null,n.newlineStyle&&r.push(o?"Mixed newline styles detected.":`Consistent newline style: ${n.newlineStyle}`),u(U(e),"hasNonKeyboardChars","Non-keyboard characters detected."),n}var z=100;function C(e,r={}){if(typeof e!="string")throw new TypeError("inspectTextDetailed expects a string input.");let n=r&&r.maxFindings,u=n===1/0||Number.isInteger(n)&&n>=0?n:z,o={bidi_control:0,zero_width:0,nonbreaking_space:0,bom:0,nul:0,c0_control:0,c1_control:0,invisible_format:0,hangul_filler:0,variation_selector:0,tag:0},i=[],s=0,c=1,f=0;for(let a=0,h=e.length;a<h;a++){let l=e.charCodeAt(a);if(l>=32&&l<127)continue;if(l===10){c++,f=a+1;continue}if(l===13){e.charCodeAt(a+1)!==10&&(c++,f=a+1);continue}let E=a,F=l,p;if(l>=55296&&l<=56319){let t=e.charCodeAt(a+1);if(!(t>=56320&&t<=57343))continue;F=65536+(l-55296<<10)+(t-56320),p=I(F),a++}else p=A(l);if(p!==null&&(o[p]++,s++,i.length<u)){let t={offset:E,line:c,column:E-f+1,codePoint:F,category:p};p==="bom"&&(t.atStart=E===0),i.push(t)}}return{findings:i,counts:o,total:s,truncated:s>i.length}}function b(e){if(typeof e!="string")throw new TypeError("getNewlineStats expects a string input.");let r=0,n=0,u=0;for(let s=0,c=e.length;s<c;s++){let f=e.charCodeAt(s);f===13?e.charCodeAt(s+1)===10?(r++,s++):n++:f===10&&u++}let o={crlf:r,cr:n,lf:u},i=[];return o.crlf>0&&i.push("CRLF"),o.cr>0&&i.push("CR"),o.lf>0&&i.push("LF"),{...o,types:i,mixed:i.length>1}}function K(e){return{purgeInvisibleChars:e.hasInvisibleChars,purgeEmojis:e.hasEmojis,nukeControls:e.hasControlChars,keyboardOnlyFilter:e.hasNonKeyboardChars,normalizeNewlines:e.hasMixedNewlines||e.newlineStyle==="CRLF"||e.newlineStyle==="CR"}}function H(e={}){let r=!!e.normalizeSpaces,n=!!e.purgeZeroWidthSpaces,u=!!e.purgeInvisibleChars,o=!!e.purgeEmojis,i=!!e.nukeControls,s=!!e.keyboardOnlyFilter,c=!!e.normalizeNewlines,f=!!e.trimSpacesAroundNewlines,a=!!e.collapseNewLines,h=!!e.preserveParagraphs,l=!!e.collapseSpaces,E=!!e.finalTrim,F=Number.isFinite(e.maxLength)&&e.maxLength>=0?e.maxLength:1/0,p=e.onMaxLength==="truncate"||e.onMaxLength==="noop"||e.onMaxLength==="throw"?e.onMaxLength:"throw";return t=>_(t,u,o,i,s,c,f,a,h,l,E,F,p,r,n)}function R(e){return _(e,!0,!0,!0,!1,!0,!0,!0,!1,!0,!0)}function w(e){return _(e,!1,!1,!1,!1,!0,!0,!0,!0,!0,!0)}function N(e){return _(e,!1,!1,!1,!0,!0,!0,!1,!1,!1,!0)}function T(e){return _(e,!0,!0,!0,!0,!0,!0,!0,!1,!0,!0)}function L(e){return _(e,!1,!1,!1,!1,!0,!1,!1,!1,!1,!1,1/0,"throw",!0,!0)}var W=Object.assign(H,{strict:R,loose:w,keyboardOnlyEmoji:N,keyboardOnly:T,pasted:L});function _(e,r=!1,n=!1,u=!1,o=!1,i=!1,s=!1,c=!1,f=!1,a=!1,h=!1,l=1/0,E="throw",F=!1,p=!1){if(typeof e!="string")throw new TypeError("sanctifyText expects a string input.");if(E!=="truncate"&&E!=="noop"&&E!=="throw"&&(E="throw"),e.length>l)switch(E){case"truncate":e=e.slice(0,l);break;case"noop":return e;case"throw":default:throw new RangeError(`sanctifyText input length ${e.length} exceeds maxLength ${l}.`)}let t=e;return F&&(t=t.replace(J," ")),p&&(t=t.replace(V,"")),r&&(t=Z(t)),n&&(t=q(t)),u&&(t=le(t)),o&&(t=Y(t,n)),i&&(t=ee(t)),s&&(t=ne(t)),c&&(t=oe(t,f)),a&&(t=se(t)),h?t.trim():t}var J=/[\u00A0\u2000-\u200A\u202F\u205F]/g,V=/[\u200B\u2060\uFEFF]/g;function Z(e){return e.replace(d,"")}function $(e){if(x.lastIndex=0,!x.test(e))return"";x.lastIndex=0;let r="";for(let n of e.matchAll(x))r+=n[0];return r}function Y(e,r=!1){let n=S(e);return r?n.replace(g,""):n.replace(g,u=>$(u))}function q(e){return e.replace(x,"")}var Q=/\r\n|\r|\n/g;function ee(e,r=`
+`){return e.replace(Q,r)}var re=/[ \t]*(\n+)[ \t]*/g;function ne(e){return e.replace(re,"$1")}var te=/\n{2,}/g,ie=/\n{3,}/g;function oe(e,r){return r?e.replace(ie,`
 
-`):e.replace(W,`
-`)}var $=/ {2,}/g;function V(e){return e.replace($," ")}function q(e){return e.replace(d,"")}function m(e,r){return e.lastIndex=0,e.test(r)}function Q(e){let r=A(e);if(!m(S,r))return!1;for(let n of r)if(!(n===`
-`||n==="\r"||n>=" "&&n<="~")&&!m(p,n))return!0;return!1}function Y(e){if(typeof e!="string")throw new TypeError("inspectText expects a string input.");let r=[],n={hasControlChars:!1,hasInvisibleChars:!1,hasMixedNewlines:!1,newlineStyle:null,hasEmojis:!1,hasNonKeyboardChars:!1,summary:r},o=(l,c,f)=>{l&&(n[c]=!0,r.push(f))};o(m(d,e),"hasControlChars","Control characters detected."),o(m(C,e),"hasInvisibleChars","Invisible Unicode characters detected."),o(m(p,e),"hasEmojis","Emojis detected.");let{mixed:u,types:i}=w(e);return n.hasMixedNewlines=u,n.newlineStyle=u?"Mixed":i[0]||null,n.newlineStyle&&r.push(u?"Mixed newline styles detected.":`Consistent newline style: ${n.newlineStyle}`),o(Q(e),"hasNonKeyboardChars","Non-keyboard characters detected."),n}var ee=100;function y(e,r={}){if(typeof e!="string")throw new TypeError("inspectTextDetailed expects a string input.");let n=r&&r.maxFindings,o=n===1/0||Number.isInteger(n)&&n>=0?n:ee,u={bidi_control:0,zero_width:0,nonbreaking_space:0,bom:0,nul:0,c0_control:0,c1_control:0,invisible_format:0,hangul_filler:0,variation_selector:0,tag:0},i=[],l=0,c=1,f=0;for(let a=0,g=e.length;a<g;a++){let s=e.charCodeAt(a);if(s>=32&&s<127)continue;if(s===10){c++,f=a+1;continue}if(s===13){e.charCodeAt(a+1)!==10&&(c++,f=a+1);continue}let E=a,F=s,x;if(s>=55296&&s<=56319){let t=e.charCodeAt(a+1);if(!(t>=56320&&t<=57343))continue;F=65536+(s-55296<<10)+(t-56320),x=b(F),a++}else x=I(s);if(x!==null&&(u[x]++,l++,i.length<o)){let t={offset:E,line:c,column:E-f+1,codePoint:F,category:x};x==="bom"&&(t.atStart=E===0),i.push(t)}}return{findings:i,counts:u,total:l,truncated:l>i.length}}function w(e){if(typeof e!="string")throw new TypeError("getNewlineStats expects a string input.");let r=0,n=0,o=0;for(let l=0,c=e.length;l<c;l++){let f=e.charCodeAt(l);f===13?e.charCodeAt(l+1)===10?(r++,l++):n++:f===10&&o++}let u={crlf:r,cr:n,lf:o},i=[];return u.crlf>0&&i.push("CRLF"),u.cr>0&&i.push("CR"),u.lf>0&&i.push("LF"),{...u,types:i,mixed:i.length>1}}function re(e){return{purgeInvisibleChars:e.hasInvisibleChars,purgeEmojis:e.hasEmojis,nukeControls:e.hasControlChars,keyboardOnlyFilter:e.hasNonKeyboardChars,normalizeNewlines:e.hasMixedNewlines||e.newlineStyle==="CRLF"||e.newlineStyle==="CR"}}function ne(e,r={}){if(typeof e!="string")throw new TypeError("revealInvisible expects a string input.");let n=r&&typeof r.format=="function"?r.format:i=>"<U+"+i.toString(16).toUpperCase().padStart(4,"0")+">",o="",u=0;for(let i of y(e,{maxFindings:1/0}).findings)o+=e.slice(u,i.offset)+n(i.codePoint,i.category),u=i.offset+(i.codePoint>65535?2:1);return o+e.slice(u)}export{w as getNewlineStats,re as getRecommendedSanctifierOptions,Y as inspectText,y as inspectTextDetailed,ne as revealInvisible,h as summonSanctifier};
+`):e.replace(te,`
+`)}var ue=/ {2,}/g;function se(e){return e.replace(ue," ")}function le(e){return e.replace(y,"")}function ae(e,r={}){if(typeof e!="string")throw new TypeError("revealInvisible expects a string input.");let n=r&&typeof r.format=="function"?r.format:i=>"<U+"+i.toString(16).toUpperCase().padStart(4,"0")+">",u="",o=0;for(let i of C(e,{maxFindings:1/0}).findings)u+=e.slice(o,i.offset)+n(i.codePoint,i.category),o=i.offset+(i.codePoint>65535?2:1);return u+e.slice(o)}var fe="1.3.6";export{fe as VERSION,b as getNewlineStats,K as getRecommendedSanctifierOptions,j as inspectText,C as inspectTextDetailed,ae as revealInvisible,T as sanctifyKeyboardOnly,N as sanctifyKeyboardOnlyEmoji,w as sanctifyLoose,L as sanctifyPasted,R as sanctifyStrict,W as summonSanctifier};

package/dist/types/hiddenText.d.ts

@@ -7,17 +7,26 @@
  */
 export function decodeTagText(text: string): string;
 /**
- * Finds runs of tag characters, variation selectors and invisible operators.
+ * Finds runs of tag characters, variation selectors, invisible operators and reserved
+ * tag-plane code points (U+E0080–U+E00FF, U+E01F0–U+E0FFF).
  * Consecutive characters of the same kind form one run. Two kinds of sequence are
  * legitimate and listed under `benign` instead of `runs`:
  *  - the subdivision flags of England, Scotland and Wales: U+1F3F4 followed by the
  *    tags for "gbeng", "gbsct" or "gbwls" and U+E007F
  *  - a single U+FE0E or U+FE0F (text or emoji presentation) after another character
+ *
+ * `line` and `column` are counted as in inspectTextDetailed. Every run and benign
+ * span is counted; only the first `maxRuns` of each are listed. With the caps set,
+ * memory stays flat however large the input is. One pass over the string, no copy.
+ * Set both caps for untrusted input: without them, results grow with the input.
+ *
  * @param {string} text
+ * @param {HiddenScanOptions} [options]
  * @returns {HiddenTextScan}
  */
-export function findHiddenRuns(text: string): HiddenTextScan;
-export type HiddenRunKind = "tag" | "variation_selector" | "invisible_operator";
+export function findHiddenRuns(text: string, options?: HiddenScanOptions): HiddenTextScan;
+export { VERSION } from "./version.generated.js";
+export type HiddenRunKind = "tag" | "variation_selector" | "invisible_operator" | "reserved_tag_plane";
 export type HiddenRun = {
     kind: HiddenRunKind;
     /**
@@ -33,18 +42,65 @@ export type HiddenRun = {
      */
     count: number;
     /**
-     * - tag runs only: the ASCII the tags spell (see decodeTagText)
+     * - 1-based line of the first character (as in inspectTextDetailed)
+     */
+    line: number;
+    /**
+     * - 1-based column of the first character, in UTF-16 units
+     */
+    column: number;
+    /**
+     * - tag runs only: the ASCII the tags spell (see decodeTagText),
+     * at most `maxDecodedLength` UTF-16 units
      */
     decoded?: string;
+    /**
+     * - tag runs only: true when `decoded` stops short of the run
+     */
+    decodedTruncated?: boolean;
+};
+export type HiddenRunCounts = {
+    tag: number;
+    variation_selector: number;
+    invisible_operator: number;
+    reserved_tag_plane: number;
 };
 export type HiddenTextScan = {
     /**
-     * - runs that may hide text, in order
+     * - runs that may hide text, in order, at most `maxRuns` long
      */
     runs: HiddenRun[];
     /**
      * - [offset, end) spans of legitimate
-     * sequences (subdivision flags, a single emoji or text presentation selector)
+     * sequences (subdivision flags, a single emoji or text presentation selector), at most `maxRuns` long
      */
     benign: Array<[number, number]>;
+    /**
+     * - every run per kind, listed or not
+     */
+    counts: HiddenRunCounts;
+    /**
+     * - sum of `counts`
+     */
+    total: number;
+    /**
+     * - every benign span, listed or not
+     */
+    benignTotal: number;
+    /**
+     * - true when runs or benign spans were left out of the lists
+     */
+    truncated: boolean;
+};
+export type HiddenScanOptions = {
+    /**
+     * - cap on listed runs, and separately on listed benign spans
+     * (non-negative integer or Infinity). Counts stay exact.
+     */
+    maxRuns?: number;
+    /**
+     * - cap on each run's `decoded` text, in UTF-16 units.
+     * For both, any other value (negative, fractional, NaN, a string) means the default, no cap.
+     */
+    maxDecodedLength?: number;
 };

package/dist/types/index.d.ts

@@ -12,5 +12,11 @@ import { inspectTextDetailed } from './inspectText.js';
 import { getNewlineStats } from './inspectText.js';
 import { getRecommendedSanctifierOptions } from './inspectText.js';
 import { summonSanctifier } from './sanctifyText.js';
+import { sanctifyStrict } from './sanctifyText.js';
+import { sanctifyLoose } from './sanctifyText.js';
+import { sanctifyKeyboardOnlyEmoji } from './sanctifyText.js';
+import { sanctifyKeyboardOnly } from './sanctifyText.js';
+import { sanctifyPasted } from './sanctifyText.js';
 import { revealInvisible } from './reveal.js';
-export { inspectText, inspectTextDetailed, getNewlineStats, getRecommendedSanctifierOptions, summonSanctifier, revealInvisible };
+import { VERSION } from './version.generated.js';
+export { inspectText, inspectTextDetailed, getNewlineStats, getRecommendedSanctifierOptions, summonSanctifier, sanctifyStrict, sanctifyLoose, sanctifyKeyboardOnlyEmoji, sanctifyKeyboardOnly, sanctifyPasted, revealInvisible, VERSION };

package/dist/types/sanctifyText.d.ts

@@ -1,103 +1,51 @@
 /**
- * @typedef {Object} SanctifyOptions
- * @property {boolean} [purgeInvisibleChars]
- * @property {boolean} [purgeEmojis]
- * @property {boolean} [nukeControls]
- * @property {boolean} [keyboardOnlyFilter]
- * @property {boolean} [normalizeNewlines]
- * @property {boolean} [trimSpacesAroundNewlines]
- * @property {boolean} [collapseNewLines]
- * @property {boolean} [preserveParagraphs]
- * @property {boolean} [collapseSpaces]
- * @property {boolean} [finalTrim]
- * @property {number} [maxLength]
- * @property {'throw'|'truncate'|'noop'} [onMaxLength]
- * @property {boolean} [normalizeSpaces] - Replace look-alike spaces with an ordinary space (runs first).
- * @property {boolean} [purgeZeroWidthSpaces] - Remove U+200B, U+2060 and U+FEFF only, keeping joiners and selectors.
+ * Strict sanitizer:
+ * - Purge emojis
+ * - Collapse all newlines
+ * - Collapse spaces
+ * - Nuke control characters
+ * @param {string} text
+ * @returns {string}
  */
+export function sanctifyStrict(text: string): string;
 /**
- * Summons a customized sanctifier function with pre-bound booleans.
- *
- * Accepts full flag names and returns a text-cleaning function.
- *
- * @param {Object} [defaultOptions={}]
- * @param {boolean} [defaultOptions.purgeInvisibleChars]
- * @param {boolean} [defaultOptions.purgeEmojis]
- * @param {boolean} [defaultOptions.nukeControls]
- * @param {boolean} [defaultOptions.keyboardOnlyFilter]
- * @param {boolean} [defaultOptions.normalizeNewlines]
- * @param {boolean} [defaultOptions.trimSpacesAroundNewlines]
- * @param {boolean} [defaultOptions.collapseNewLines]
- * @param {boolean} [defaultOptions.preserveParagraphs]
- * @param {boolean} [defaultOptions.collapseSpaces]
- * @param {boolean} [defaultOptions.finalTrim]
- * @param {number} [defaultOptions.maxLength=Infinity] - Hard input length cap (UTF-16 code units).
- * @param {'throw' | 'truncate' | 'noop'} [defaultOptions.onMaxLength='throw'] - Behavior when input exceeds maxLength.
- * @param {boolean} [defaultOptions.normalizeSpaces]
- * @param {boolean} [defaultOptions.purgeZeroWidthSpaces]
- * @returns {(text: string) => string}
+ * Loose sanitizer:
+ * - Collapse spaces
+ * - Preserve paragraphs
+ * - Normalize newlines
+ * @param {string} text
+ * @returns {string}
  */
-export function summonSanctifier(defaultOptions?: {
-    purgeInvisibleChars?: boolean;
-    purgeEmojis?: boolean;
-    nukeControls?: boolean;
-    keyboardOnlyFilter?: boolean;
-    normalizeNewlines?: boolean;
-    trimSpacesAroundNewlines?: boolean;
-    collapseNewLines?: boolean;
-    preserveParagraphs?: boolean;
-    collapseSpaces?: boolean;
-    finalTrim?: boolean;
-    maxLength?: number;
-    onMaxLength?: "throw" | "truncate" | "noop";
-    normalizeSpaces?: boolean;
-    purgeZeroWidthSpaces?: boolean;
-}): (text: string) => string;
-export namespace summonSanctifier {
-    /**
-     * Strict sanitizer:
-     * - Purge emojis
-     * - Collapse all newlines
-     * - Collapse spaces
-     * - Nuke control characters
-     */
-    /** @param {string} text @returns {string} */
-    function strict(text: string): string;
-    /**
-     * Loose sanitizer:
-     * - Collapse spaces
-     * - Preserve paragraphs
-     * - Normalize newlines
-     */
-    /** @param {string} text @returns {string} */
-    function loose(text: string): string;
-    /**
-     * Keyboard-only (with emojis):
-     * - Keeps emojis and printable ASCII
-     * - Strips non-standard characters
-     * - Normalizes typographic trash
-     */
-    /** @param {string} text @returns {string} */
-    function keyboardOnlyEmoji(text: string): string;
-    /**
-     * Keyboard-only (strict):
-     * - Removes emojis
-     * - Collapses all whitespace
-     * - Restricts to printable ASCII only
-     */
-    /** @param {string} text @returns {string} */
-    function keyboardOnly(text: string): string;
-    /**
-     * Pasted text and model output:
-     * - Look-alike spaces (NBSP, narrow NBSP, typographic spaces) become ordinary spaces,
-     *   so words never run together
-     * - Zero-width spaces, word joiners and BOMs are removed
-     * - Newlines are normalized to `\n`
-     * Keeps emoji joiners, variation selectors, bidi marks, indentation and line breaks.
-     */
-    /** @param {string} text @returns {string} */
-    function pasted(text: string): string;
-}
+export function sanctifyLoose(text: string): string;
+/**
+ * Keyboard-only (with emojis):
+ * - Keeps emojis and printable ASCII
+ * - Strips non-standard characters
+ * - Normalizes typographic trash
+ * @param {string} text
+ * @returns {string}
+ */
+export function sanctifyKeyboardOnlyEmoji(text: string): string;
+/**
+ * Keyboard-only (strict):
+ * - Removes emojis
+ * - Collapses all whitespace
+ * - Restricts to printable ASCII only
+ * @param {string} text
+ * @returns {string}
+ */
+export function sanctifyKeyboardOnly(text: string): string;
+/**
+ * Pasted text and model output:
+ * - Look-alike spaces (NBSP, narrow NBSP, typographic spaces) become ordinary spaces,
+ *   so words never run together
+ * - Zero-width spaces, word joiners and BOMs are removed
+ * - Newlines are normalized to `\n`
+ * Keeps emoji joiners, variation selectors, bidi marks, indentation and line breaks.
+ * @param {string} text
+ * @returns {string}
+ */
+export function sanctifyPasted(text: string): string;
 /**
  * Text Sanctifier
  *
@@ -131,11 +79,45 @@ export namespace summonSanctifier {
  */
 export function sanctifyText(text: string, purgeInvisibleChars?: boolean, purgeEmojis?: boolean, nukeControls?: boolean, keyboardOnlyFilter?: boolean, normalizeNewlines?: boolean, trimSpacesAroundNewlines?: boolean, collapseNewLines?: boolean, preserveParagraphs?: boolean, collapseSpaces?: boolean, finalTrim?: boolean, maxLength?: number, onMaxLength?: "throw" | "truncate" | "noop", normalizeSpaces?: boolean, purgeZeroWidthSpaces?: boolean): string;
 /**
- * Normalizes typographic Unicode punctuation into ASCII equivalents.
- * @param {string} text
- * @returns {string}
+ * Summons a customized sanctifier function with pre-bound booleans.
+ *
+ * Accepts full flag names and returns a text-cleaning function.
+ *
+ * @param {Object} [defaultOptions={}]
+ * @param {boolean} [defaultOptions.purgeInvisibleChars]
+ * @param {boolean} [defaultOptions.purgeEmojis]
+ * @param {boolean} [defaultOptions.nukeControls]
+ * @param {boolean} [defaultOptions.keyboardOnlyFilter]
+ * @param {boolean} [defaultOptions.normalizeNewlines]
+ * @param {boolean} [defaultOptions.trimSpacesAroundNewlines]
+ * @param {boolean} [defaultOptions.collapseNewLines]
+ * @param {boolean} [defaultOptions.preserveParagraphs]
+ * @param {boolean} [defaultOptions.collapseSpaces]
+ * @param {boolean} [defaultOptions.finalTrim]
+ * @param {number} [defaultOptions.maxLength=Infinity] - Hard input length cap (UTF-16 code units).
+ * @param {'throw' | 'truncate' | 'noop'} [defaultOptions.onMaxLength='throw'] - Behavior when input exceeds maxLength.
+ * @param {boolean} [defaultOptions.normalizeSpaces]
+ * @param {boolean} [defaultOptions.purgeZeroWidthSpaces]
+ * @returns {(text: string) => string}
+ *
+ * The presets are attached as properties (`summonSanctifier.strict`, `.loose`,
+ * `.keyboardOnlyEmoji`, `.keyboardOnly`, `.pasted`) and are also standalone exports.
+ * Built in a call marked pure, so a bundle that imports only a preset leaves it out.
+ * @type {typeof createSanctifier & {
+ *   strict: typeof sanctifyStrict,
+ *   loose: typeof sanctifyLoose,
+ *   keyboardOnlyEmoji: typeof sanctifyKeyboardOnlyEmoji,
+ *   keyboardOnly: typeof sanctifyKeyboardOnly,
+ *   pasted: typeof sanctifyPasted,
+ * }}
  */
-export function normalizeTypographicJank(text: string): string;
+export const summonSanctifier: typeof createSanctifier & {
+    strict: typeof sanctifyStrict;
+    loose: typeof sanctifyLoose;
+    keyboardOnlyEmoji: typeof sanctifyKeyboardOnlyEmoji;
+    keyboardOnly: typeof sanctifyKeyboardOnly;
+    pasted: typeof sanctifyPasted;
+};
 /**
  * Look-alike spaces: the `nonbreaking_space` category except U+3000, the ordinary
  * space of CJK text. A test checks this against the category table.
@@ -143,15 +125,6 @@ export function normalizeTypographicJank(text: string): string;
 export const SPACE_LOOKALIKES_REGEX: RegExp;
 /** Zero-width space, word joiner and BOM: invisible and never needed in plain text. */
 export const ZERO_WIDTH_SPACES_REGEX: RegExp;
-/**
- * Matches any character that is NOT:
- * - Printable ASCII (U+0020–U+007E)
- * - Newline characters: \n (LF), \r (CR)
- * This allows for \n, \r, and \r\n line endings.
- */
-export const ASCII_KEYBOARD_SAFE_REGEX: RegExp;
-/** @type {RegExp} */
-export let EMOJI_REGEX: RegExp;
 export type SanctifyOptions = {
     purgeInvisibleChars?: boolean;
     purgeEmojis?: boolean;
@@ -176,4 +149,62 @@ export type SanctifyOptions = {
 };
 import { CONTROL_CHARS_REGEX } from './categories.generated.js';
 import { INVISIBLE_TRASH_REGEX } from './categories.generated.js';
-export { CONTROL_CHARS_REGEX, INVISIBLE_TRASH_REGEX };
+import { ASCII_KEYBOARD_SAFE_REGEX } from './textPatterns.js';
+import { EMOJI_REGEX } from './textPatterns.js';
+import { normalizeTypographicJank } from './textPatterns.js';
+/**
+ * @typedef {Object} SanctifyOptions
+ * @property {boolean} [purgeInvisibleChars]
+ * @property {boolean} [purgeEmojis]
+ * @property {boolean} [nukeControls]
+ * @property {boolean} [keyboardOnlyFilter]
+ * @property {boolean} [normalizeNewlines]
+ * @property {boolean} [trimSpacesAroundNewlines]
+ * @property {boolean} [collapseNewLines]
+ * @property {boolean} [preserveParagraphs]
+ * @property {boolean} [collapseSpaces]
+ * @property {boolean} [finalTrim]
+ * @property {number} [maxLength]
+ * @property {'throw'|'truncate'|'noop'} [onMaxLength]
+ * @property {boolean} [normalizeSpaces] - Replace look-alike spaces with an ordinary space (runs first).
+ * @property {boolean} [purgeZeroWidthSpaces] - Remove U+200B, U+2060 and U+FEFF only, keeping joiners and selectors.
+ */
+/**
+ * Summons a customized sanctifier function with pre-bound booleans.
+ *
+ * Accepts full flag names and returns a text-cleaning function.
+ *
+ * @param {Object} [defaultOptions={}]
+ * @param {boolean} [defaultOptions.purgeInvisibleChars]
+ * @param {boolean} [defaultOptions.purgeEmojis]
+ * @param {boolean} [defaultOptions.nukeControls]
+ * @param {boolean} [defaultOptions.keyboardOnlyFilter]
+ * @param {boolean} [defaultOptions.normalizeNewlines]
+ * @param {boolean} [defaultOptions.trimSpacesAroundNewlines]
+ * @param {boolean} [defaultOptions.collapseNewLines]
+ * @param {boolean} [defaultOptions.preserveParagraphs]
+ * @param {boolean} [defaultOptions.collapseSpaces]
+ * @param {boolean} [defaultOptions.finalTrim]
+ * @param {number} [defaultOptions.maxLength=Infinity] - Hard input length cap (UTF-16 code units).
+ * @param {'throw' | 'truncate' | 'noop'} [defaultOptions.onMaxLength='throw'] - Behavior when input exceeds maxLength.
+ * @param {boolean} [defaultOptions.normalizeSpaces]
+ * @param {boolean} [defaultOptions.purgeZeroWidthSpaces]
+ * @returns {(text: string) => string}
+ */
+declare function createSanctifier(defaultOptions?: {
+    purgeInvisibleChars?: boolean;
+    purgeEmojis?: boolean;
+    nukeControls?: boolean;
+    keyboardOnlyFilter?: boolean;
+    normalizeNewlines?: boolean;
+    trimSpacesAroundNewlines?: boolean;
+    collapseNewLines?: boolean;
+    preserveParagraphs?: boolean;
+    collapseSpaces?: boolean;
+    finalTrim?: boolean;
+    maxLength?: number;
+    onMaxLength?: "throw" | "truncate" | "noop";
+    normalizeSpaces?: boolean;
+    purgeZeroWidthSpaces?: boolean;
+}): (text: string) => string;
+export { CONTROL_CHARS_REGEX, INVISIBLE_TRASH_REGEX, ASCII_KEYBOARD_SAFE_REGEX, EMOJI_REGEX, normalizeTypographicJank };

package/dist/types/textPatterns.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Normalizes typographic Unicode punctuation into ASCII equivalents.
+ * @param {string} text
+ * @returns {string}
+ */
+export function normalizeTypographicJank(text: string): string;
+/**
+ * Matches any character that is NOT:
+ * - Printable ASCII (U+0020–U+007E)
+ * - Newline characters: \n (LF), \r (CR)
+ * This allows for \n, \r, and \r\n line endings.
+ */
+export const ASCII_KEYBOARD_SAFE_REGEX: RegExp;
+/** @type {RegExp} */
+export const EMOJI_REGEX: RegExp;

package/dist/types/version.generated.d.ts

@@ -0,0 +1,2 @@
+/** The installed version of text-sanctifier, as in its package.json. */
+export const VERSION: "1.3.6";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "text-sanctifier",
-  "version": "1.3.5",
+  "version": "1.3.6",
   "type": "module",
   "description": "A brutal text normalizer and invisible trash scrubber for modern web projects.",
   "engines": {
@@ -39,12 +39,12 @@
   "types": "./dist/types/index.d.ts",
   "sideEffects": false,
   "scripts": {
-    "gen": "node scripts/gen-categories.js",
-    "gen:check": "node scripts/gen-categories.js --check",
+    "gen": "node scripts/gen-categories.js && node scripts/gen-version.js",
+    "gen:check": "node scripts/gen-categories.js --check && node scripts/gen-version.js --check",
     "build": "node scripts/build.js",
     "build:types": "tsc -p tsconfig.types.json",
     "test:types": "tsc -p tests/types/tsconfig.json",
-    "test": "node tests/sanctifyText.test.js && node tests/inspectTextDetailed.test.js && node tests/cli.test.js",
+    "test": "node tests/sanctifyText.test.js && node tests/inspectTextDetailed.test.js && node --expose-gc tests/hiddenText.test.js && node tests/cli.test.js",
     "test-min": "node tests/sanctifyText.test.min.js",
     "ci": "npm run gen:check && npm run test && npm run build && npm run size && npm run build:types && npm run test:types && npm run test-min",
     "size": "node scripts/check-size.js"

package/src/hiddenText.js

@@ -1,14 +1,17 @@
 // src/hiddenText.js
 //
 // Finds runs of the characters used to hide instructions in text a model reads:
-// tag characters, variation selectors and invisible operators. Tag runs are decoded
+// tag characters, variation selectors, invisible operators and the reserved code points
+// of the tag plane. Tag runs are decoded
 // to the ASCII they spell. Used by `text-sanctifier check --ai-config`, and exported
 // as `text-sanctifier/hidden`.
 //
 // Plain JavaScript with no Node APIs, so it also runs in a browser. src/index.js does
 // not import this file, so it stays out of the browser bundle and its size budget.
 
-/** @typedef {'tag' | 'variation_selector' | 'invisible_operator'} HiddenRunKind */
+export { VERSION } from './version.generated.js';
+
+/** @typedef {'tag' | 'variation_selector' | 'invisible_operator' | 'reserved_tag_plane'} HiddenRunKind */
 
 /**
  * @typedef {Object} HiddenRun
@@ -16,14 +19,38 @@
  * @property {number} offset - UTF-16 index of the first character
  * @property {number} end - UTF-16 index just past the last character
  * @property {number} count - number of code points in the run
- * @property {string} [decoded] - tag runs only: the ASCII the tags spell (see decodeTagText)
+ * @property {number} line - 1-based line of the first character (as in inspectTextDetailed)
+ * @property {number} column - 1-based column of the first character, in UTF-16 units
+ * @property {string} [decoded] - tag runs only: the ASCII the tags spell (see decodeTagText),
+ *   at most `maxDecodedLength` UTF-16 units
+ * @property {boolean} [decodedTruncated] - tag runs only: true when `decoded` stops short of the run
+ */
+
+/**
+ * @typedef {Object} HiddenRunCounts
+ * @property {number} tag
+ * @property {number} variation_selector
+ * @property {number} invisible_operator
+ * @property {number} reserved_tag_plane
  */
 
 /**
  * @typedef {Object} HiddenTextScan
- * @property {HiddenRun[]} runs - runs that may hide text, in order
+ * @property {HiddenRun[]} runs - runs that may hide text, in order, at most `maxRuns` long
  * @property {Array<[number, number]>} benign - [offset, end) spans of legitimate
- *   sequences (subdivision flags, a single emoji or text presentation selector)
+ *   sequences (subdivision flags, a single emoji or text presentation selector), at most `maxRuns` long
+ * @property {HiddenRunCounts} counts - every run per kind, listed or not
+ * @property {number} total - sum of `counts`
+ * @property {number} benignTotal - every benign span, listed or not
+ * @property {boolean} truncated - true when runs or benign spans were left out of the lists
+ */
+
+/**
+ * @typedef {Object} HiddenScanOptions
+ * @property {number} [maxRuns=Infinity] - cap on listed runs, and separately on listed benign spans
+ *   (non-negative integer or Infinity). Counts stay exact.
+ * @property {number} [maxDecodedLength=Infinity] - cap on each run's `decoded` text, in UTF-16 units.
+ *   For both, any other value (negative, fractional, NaN, a string) means the default, no cap.
  */
 
 const TAG_FIRST = 0xE0000;
@@ -43,6 +70,8 @@ function kindOf(cp) {
     if ((cp >= 0xFE00 && cp <= 0xFE0F) || (cp >= 0xE0100 && cp <= 0xE01EF) ||
         (cp >= 0x180B && cp <= 0x180D) || cp === 0x180F) return 'variation_selector';
     if (cp >= 0x2061 && cp <= 0x2064) return 'invisible_operator';
+    // Unassigned and default ignorable: U+E0080-U+E00FF and U+E01F0-U+E0FFF
+    if (cp >= 0xE0080 && cp <= 0xE0FFF) return 'reserved_tag_plane';
     return null;
 }
 
@@ -57,35 +86,101 @@ const hex = (cp) => 'U+' + cp.toString(16).toUpperCase().padStart(4, '0');
  * @returns {string}
  */
 export function decodeTagText(text) {
+    return decodeRange(text, 0, text.length, Infinity).decoded;
+}
+
+/**
+ * Decodes text[start, end) as decodeTagText does, stopping before the output would
+ * pass `limit` UTF-16 units. A `<U+XXXX>` marker is written whole or not at all.
+ * @param {string} text
+ * @param {number} start
+ * @param {number} end
+ * @param {number} limit
+ * @returns {{ decoded: string, truncated: boolean }}
+ */
+function decodeRange(text, start, end, limit) {
     let out = '';
-    for (const ch of text) {
-        const cp = /** @type {number} */ (ch.codePointAt(0));
-        out += cp >= 0xE0020 && cp <= 0xE007E ? String.fromCharCode(cp - TAG_FIRST) : `<${hex(cp)}>`;
+    let i = start;
+    while (i < end) {
+        const cp = /** @type {number} */ (text.codePointAt(i));
+        const piece = cp >= 0xE0020 && cp <= 0xE007E ? String.fromCharCode(cp - TAG_FIRST) : `<${hex(cp)}>`;
+        if (out.length + piece.length > limit) return { decoded: out, truncated: true };
+        out += piece;
+        i += cp > 0xFFFF ? 2 : 1;
     }
-    return out;
+    return { decoded: out, truncated: false };
 }
 
+// Whitespace as JavaScript's \s defines it, tested at an index of the text itself,
+// so the check allocates nothing.
+const SPACE_AT = /\s/y;
+
 /**
- * Finds runs of tag characters, variation selectors and invisible operators.
+ * @param {string} text
+ * @param {number} index
+ * @returns {boolean}
+ */
+function isSpaceAt(text, index) {
+    SPACE_AT.lastIndex = index;
+    return SPACE_AT.test(text);
+}
+
+/**
+ * A cap option: a non-negative integer or Infinity; anything else means no cap.
+ * @param {unknown} value
+ * @returns {number}
+ */
+function cap(value) {
+    return typeof value === 'number' && (value === Infinity || (Number.isInteger(value) && value >= 0))
+        ? value
+        : Infinity;
+}
+
+/**
+ * Finds runs of tag characters, variation selectors, invisible operators and reserved
+ * tag-plane code points (U+E0080–U+E00FF, U+E01F0–U+E0FFF).
  * Consecutive characters of the same kind form one run. Two kinds of sequence are
  * legitimate and listed under `benign` instead of `runs`:
  *  - the subdivision flags of England, Scotland and Wales: U+1F3F4 followed by the
  *    tags for "gbeng", "gbsct" or "gbwls" and U+E007F
  *  - a single U+FE0E or U+FE0F (text or emoji presentation) after another character
+ *
+ * `line` and `column` are counted as in inspectTextDetailed. Every run and benign
+ * span is counted; only the first `maxRuns` of each are listed. With the caps set,
+ * memory stays flat however large the input is. One pass over the string, no copy.
+ * Set both caps for untrusted input: without them, results grow with the input.
+ *
  * @param {string} text
+ * @param {HiddenScanOptions} [options]
  * @returns {HiddenTextScan}
  */
-export function findHiddenRuns(text) {
+export function findHiddenRuns(text, options = {}) {
+    const maxRuns = cap(options && options.maxRuns);
+    const maxDecodedLength = cap(options && options.maxDecodedLength);
+
     /** @type {HiddenRun[]} */
     const runs = [];
     /** @type {Array<[number, number]>} */
     const benign = [];
+    /** @type {HiddenRunCounts} */
+    const counts = { tag: 0, variation_selector: 0, invisible_operator: 0, reserved_tag_plane: 0 };
+    let total = 0;
+    let benignTotal = 0;
+    let line = 1;
+    let lineStart = 0;
 
     let i = 0;
     while (i < text.length) {
         const cp = /** @type {number} */ (text.codePointAt(i));
         const kind = kindOf(cp);
-        if (kind === null) { i += cp > 0xFFFF ? 2 : 1; continue; }
+        if (kind === null) {
+            if (cp === 0x0A || (cp === 0x0D && text.charCodeAt(i + 1) !== 0x0A)) { // CRLF ends at its LF
+                line++;
+                lineStart = i + 1;
+            }
+            i += cp > 0xFFFF ? 2 : 1;
+            continue;
+        }
 
         const offset = i;
         let count = 0;
@@ -99,22 +194,30 @@ export function findHiddenRuns(text) {
         }
         const end = i;
 
-        if (kind === 'tag') {
-            const body = text.slice(offset, end);
-            const afterFlag = offset >= 2 && text.codePointAt(offset - 2) === BLACK_FLAG;
-            if (afterFlag && last === CANCEL_TAG && SUBDIVISION_FLAGS.has(decodeTagText(body).slice(0, -'<U+E007F>'.length))) {
-                benign.push([offset, end]);
-            } else {
-                runs.push({ kind, offset, end, count, decoded: decodeTagText(body) });
-            }
+        // A subdivision flag is exactly five tag letters and CANCEL TAG after U+1F3F4.
+        const isBenign = kind === 'tag'
+            ? count === 6 && last === CANCEL_TAG && offset >= 2 && text.codePointAt(offset - 2) === BLACK_FLAG &&
+              SUBDIVISION_FLAGS.has(decodeRange(text, offset, end - 2, Infinity).decoded)
+            : kind === 'variation_selector' && count === 1 && (cp === 0xFE0E || cp === 0xFE0F) &&
+              offset > 0 && !isSpaceAt(text, offset - 1);
+        if (isBenign) {
+            benignTotal++;
+            if (benign.length < maxRuns) benign.push([offset, end]);
             continue;
         }
-        if (kind === 'variation_selector' && count === 1 && (cp === 0xFE0E || cp === 0xFE0F) &&
-            offset > 0 && !/\s/.test(text[offset - 1])) {
-            benign.push([offset, end]);
-            continue;
+
+        counts[kind]++;
+        total++;
+        if (runs.length < maxRuns) {
+            /** @type {HiddenRun} */
+            const run = { kind, offset, end, line, column: offset - lineStart + 1, count };
+            if (kind === 'tag') {
+                const { decoded, truncated } = decodeRange(text, offset, end, maxDecodedLength);
+                run.decoded = decoded;
+                run.decodedTruncated = truncated;
+            }
+            runs.push(run);
         }
-        runs.push({ kind, offset, end, count });
     }
-    return { runs, benign };
+    return { runs, benign, counts, total, benignTotal, truncated: total > runs.length || benignTotal > benign.length };
 }

package/src/index.d.ts

@@ -3,8 +3,14 @@ import { inspectTextDetailed } from './inspectText.js';
 import { getNewlineStats } from './inspectText.js';
 import { getRecommendedSanctifierOptions } from './inspectText.js';
 import { summonSanctifier } from './sanctifyText.js';
+import { sanctifyStrict } from './sanctifyText.js';
+import { sanctifyLoose } from './sanctifyText.js';
+import { sanctifyKeyboardOnlyEmoji } from './sanctifyText.js';
+import { sanctifyKeyboardOnly } from './sanctifyText.js';
+import { sanctifyPasted } from './sanctifyText.js';
 import { revealInvisible } from './reveal.js';
-export { inspectText, inspectTextDetailed, getNewlineStats, getRecommendedSanctifierOptions, summonSanctifier, revealInvisible };
+import { VERSION } from './version.generated.js';
+export { inspectText, inspectTextDetailed, getNewlineStats, getRecommendedSanctifierOptions, summonSanctifier, sanctifyStrict, sanctifyLoose, sanctifyKeyboardOnlyEmoji, sanctifyKeyboardOnly, sanctifyPasted, revealInvisible, VERSION };
 export type UnicodeTrashReport = import('./inspectText.js').UnicodeTrashReport;
 export type TrashCategory = import('./inspectText.js').TrashCategory;
 export type TrashFinding = import('./inspectText.js').TrashFinding;

package/src/index.js

@@ -4,12 +4,15 @@
 import { inspectText, inspectTextDetailed, getNewlineStats, getRecommendedSanctifierOptions } from './inspectText.js';
 export { inspectText, inspectTextDetailed, getNewlineStats, getRecommendedSanctifierOptions };
 
-import { summonSanctifier } from './sanctifyText.js';
-export { summonSanctifier };
+import { summonSanctifier, sanctifyStrict, sanctifyLoose, sanctifyKeyboardOnlyEmoji, sanctifyKeyboardOnly, sanctifyPasted } from './sanctifyText.js';
+export { summonSanctifier, sanctifyStrict, sanctifyLoose, sanctifyKeyboardOnlyEmoji, sanctifyKeyboardOnly, sanctifyPasted };
 
 import { revealInvisible } from './reveal.js';
 export { revealInvisible };
 
+import { VERSION } from './version.generated.js';
+export { VERSION };
+
 // Type-only re-exports so TypeScript consumers can name these from the package root.
 /** @typedef {import('./inspectText.js').UnicodeTrashReport} UnicodeTrashReport */
 /** @typedef {import('./inspectText.js').TrashCategory} TrashCategory */

package/src/inspectText.js

@@ -1,13 +1,7 @@
 // ./src/inspectText.js
 
-import {
-    CONTROL_CHARS_REGEX,
-    INVISIBLE_TRASH_REGEX,
-    EMOJI_REGEX,
-    ASCII_KEYBOARD_SAFE_REGEX,
-    normalizeTypographicJank,
-} from './sanctifyText.js';
-import { classifyCodeUnit, classifyAstral } from './categories.generated.js';
+import { CONTROL_CHARS_REGEX, INVISIBLE_TRASH_REGEX, classifyCodeUnit, classifyAstral } from './categories.generated.js';
+import { EMOJI_REGEX, ASCII_KEYBOARD_SAFE_REGEX, normalizeTypographicJank } from './textPatterns.js';
 
 /** @typedef {import('./sanctifyText.js').SanctifyOptions} SanctifyOptions */
 

package/src/sanctifyText.js

@@ -2,6 +2,8 @@
 
 import { CONTROL_CHARS_REGEX, INVISIBLE_TRASH_REGEX } from './categories.generated.js';
 export { CONTROL_CHARS_REGEX, INVISIBLE_TRASH_REGEX };
+import { ASCII_KEYBOARD_SAFE_REGEX, EMOJI_REGEX, normalizeTypographicJank } from './textPatterns.js';
+export { ASCII_KEYBOARD_SAFE_REGEX, EMOJI_REGEX, normalizeTypographicJank };
 
 
 /**
@@ -45,7 +47,7 @@ export { CONTROL_CHARS_REGEX, INVISIBLE_TRASH_REGEX };
  * @param {boolean} [defaultOptions.purgeZeroWidthSpaces]
  * @returns {(text: string) => string}
  */
-export function summonSanctifier(defaultOptions = {}) {
+function createSanctifier(defaultOptions = {}) {
     const normalizeSpaces = !!defaultOptions.normalizeSpaces;
     const purgeZeroWidthSpaces = !!defaultOptions.purgeZeroWidthSpaces;
     const purgeInvisibleChars = !!defaultOptions.purgeInvisibleChars;
@@ -91,7 +93,10 @@ export function summonSanctifier(defaultOptions = {}) {
         );
 }
 
-// --- Added Presets ---
+// --- Presets ---
+//
+// Each preset is its own export, so a bundle that imports one preset leaves out the
+// others. summonSanctifier.strict and the rest are the same functions.
 
 /**
  * Strict sanitizer:
@@ -99,21 +104,24 @@ export function summonSanctifier(defaultOptions = {}) {
  * - Collapse all newlines
  * - Collapse spaces
  * - Nuke control characters
+ * @param {string} text
+ * @returns {string}
  */
-/** @param {string} text @returns {string} */
-summonSanctifier.strict = text => sanctifyText(
-    text,
-    true,   // purgeInvisibleChars
-    true,   // purgeEmojis
-    true,   // nukeControls
-    false,  // keyboardOnlyFilter
-    true,   // normalizeNewlines
-    true,   // trimSpacesAroundNewlines
-    true,   // collapseNewLines
-    false,  // preserveParagraphs
-    true,   // collapseSpaces
-    true    // finalTrim
-);
+export function sanctifyStrict(text) {
+    return sanctifyText(
+        text,
+        true,   // purgeInvisibleChars
+        true,   // purgeEmojis
+        true,   // nukeControls
+        false,  // keyboardOnlyFilter
+        true,   // normalizeNewlines
+        true,   // trimSpacesAroundNewlines
+        true,   // collapseNewLines
+        false,  // preserveParagraphs
+        true,   // collapseSpaces
+        true    // finalTrim
+    );
+}
 
 
 /**
@@ -121,21 +129,24 @@ summonSanctifier.strict = text => sanctifyText(
  * - Collapse spaces
  * - Preserve paragraphs
  * - Normalize newlines
+ * @param {string} text
+ * @returns {string}
  */
-/** @param {string} text @returns {string} */
-summonSanctifier.loose = text => sanctifyText(
-    text,
-    false,  // purgeInvisibleChars
-    false,  // purgeEmojis
-    false,  // nukeControls
-    false,  // keyboardOnlyFilter
-    true,   // normalizeNewlines
-    true,   // trimSpacesAroundNewlines
-    true,   // collapseNewLines
-    true,   // preserveParagraphs
-    true,   // collapseSpaces
-    true    // finalTrim
-);
+export function sanctifyLoose(text) {
+    return sanctifyText(
+        text,
+        false,  // purgeInvisibleChars
+        false,  // purgeEmojis
+        false,  // nukeControls
+        false,  // keyboardOnlyFilter
+        true,   // normalizeNewlines
+        true,   // trimSpacesAroundNewlines
+        true,   // collapseNewLines
+        true,   // preserveParagraphs
+        true,   // collapseSpaces
+        true    // finalTrim
+    );
+}
 
 
 /**
@@ -143,21 +154,24 @@ summonSanctifier.loose = text => sanctifyText(
  * - Keeps emojis and printable ASCII
  * - Strips non-standard characters
  * - Normalizes typographic trash
+ * @param {string} text
+ * @returns {string}
  */
-/** @param {string} text @returns {string} */
-summonSanctifier.keyboardOnlyEmoji = text => sanctifyText(
-    text,
-    false,  // purgeInvisibleChars
-    false,  // purgeEmojis
-    false,  // nukeControls
-    true,   // keyboardOnlyFilter
-    true,   // normalizeNewlines
-    true,   // trimSpacesAroundNewlines
-    false,  // collapseNewLines
-    false,  // preserveParagraphs
-    false,  // collapseSpaces
-    true    // finalTrim
-);
+export function sanctifyKeyboardOnlyEmoji(text) {
+    return sanctifyText(
+        text,
+        false,  // purgeInvisibleChars
+        false,  // purgeEmojis
+        false,  // nukeControls
+        true,   // keyboardOnlyFilter
+        true,   // normalizeNewlines
+        true,   // trimSpacesAroundNewlines
+        false,  // collapseNewLines
+        false,  // preserveParagraphs
+        false,  // collapseSpaces
+        true    // finalTrim
+    );
+}
 
 
 /**
@@ -165,21 +179,24 @@ summonSanctifier.keyboardOnlyEmoji = text => sanctifyText(
  * - Removes emojis
  * - Collapses all whitespace
  * - Restricts to printable ASCII only
+ * @param {string} text
+ * @returns {string}
  */
-/** @param {string} text @returns {string} */
-summonSanctifier.keyboardOnly = text => sanctifyText(
-    text,
-    true,   // purgeInvisibleChars
-    true,   // purgeEmojis
-    true,   // nukeControls
-    true,   // keyboardOnlyFilter
-    true,   // normalizeNewlines
-    true,   // trimSpacesAroundNewlines
-    true,   // collapseNewLines
-    false,  // preserveParagraphs
-    true,   // collapseSpaces
-    true    // finalTrim
-);
+export function sanctifyKeyboardOnly(text) {
+    return sanctifyText(
+        text,
+        true,   // purgeInvisibleChars
+        true,   // purgeEmojis
+        true,   // nukeControls
+        true,   // keyboardOnlyFilter
+        true,   // normalizeNewlines
+        true,   // trimSpacesAroundNewlines
+        true,   // collapseNewLines
+        false,  // preserveParagraphs
+        true,   // collapseSpaces
+        true    // finalTrim
+    );
+}
 
 
 /**
@@ -189,25 +206,70 @@ summonSanctifier.keyboardOnly = text => sanctifyText(
  * - Zero-width spaces, word joiners and BOMs are removed
  * - Newlines are normalized to `\n`
  * Keeps emoji joiners, variation selectors, bidi marks, indentation and line breaks.
+ * @param {string} text
+ * @returns {string}
  */
-/** @param {string} text @returns {string} */
-summonSanctifier.pasted = text => sanctifyText(
-    text,
-    false,  // purgeInvisibleChars
-    false,  // purgeEmojis
-    false,  // nukeControls
-    false,  // keyboardOnlyFilter
-    true,   // normalizeNewlines
-    false,  // trimSpacesAroundNewlines
-    false,  // collapseNewLines
-    false,  // preserveParagraphs
-    false,  // collapseSpaces
-    false,  // finalTrim
-    Infinity, // maxLength
-    'throw',  // onMaxLength
-    true,   // normalizeSpaces
-    true    // purgeZeroWidthSpaces
-);
+export function sanctifyPasted(text) {
+    return sanctifyText(
+        text,
+        false,  // purgeInvisibleChars
+        false,  // purgeEmojis
+        false,  // nukeControls
+        false,  // keyboardOnlyFilter
+        true,   // normalizeNewlines
+        false,  // trimSpacesAroundNewlines
+        false,  // collapseNewLines
+        false,  // preserveParagraphs
+        false,  // collapseSpaces
+        false,  // finalTrim
+        Infinity, // maxLength
+        'throw',  // onMaxLength
+        true,   // normalizeSpaces
+        true    // purgeZeroWidthSpaces
+    );
+}
+
+
+/**
+ * Summons a customized sanctifier function with pre-bound booleans.
+ *
+ * Accepts full flag names and returns a text-cleaning function.
+ *
+ * @param {Object} [defaultOptions={}]
+ * @param {boolean} [defaultOptions.purgeInvisibleChars]
+ * @param {boolean} [defaultOptions.purgeEmojis]
+ * @param {boolean} [defaultOptions.nukeControls]
+ * @param {boolean} [defaultOptions.keyboardOnlyFilter]
+ * @param {boolean} [defaultOptions.normalizeNewlines]
+ * @param {boolean} [defaultOptions.trimSpacesAroundNewlines]
+ * @param {boolean} [defaultOptions.collapseNewLines]
+ * @param {boolean} [defaultOptions.preserveParagraphs]
+ * @param {boolean} [defaultOptions.collapseSpaces]
+ * @param {boolean} [defaultOptions.finalTrim]
+ * @param {number} [defaultOptions.maxLength=Infinity] - Hard input length cap (UTF-16 code units).
+ * @param {'throw' | 'truncate' | 'noop'} [defaultOptions.onMaxLength='throw'] - Behavior when input exceeds maxLength.
+ * @param {boolean} [defaultOptions.normalizeSpaces]
+ * @param {boolean} [defaultOptions.purgeZeroWidthSpaces]
+ * @returns {(text: string) => string}
+ *
+ * The presets are attached as properties (`summonSanctifier.strict`, `.loose`,
+ * `.keyboardOnlyEmoji`, `.keyboardOnly`, `.pasted`) and are also standalone exports.
+ * Built in a call marked pure, so a bundle that imports only a preset leaves it out.
+ * @type {typeof createSanctifier & {
+ *   strict: typeof sanctifyStrict,
+ *   loose: typeof sanctifyLoose,
+ *   keyboardOnlyEmoji: typeof sanctifyKeyboardOnlyEmoji,
+ *   keyboardOnly: typeof sanctifyKeyboardOnly,
+ *   pasted: typeof sanctifyPasted,
+ * }}
+ */
+export const summonSanctifier = /* @__PURE__ */ Object.assign(createSanctifier, {
+    strict: sanctifyStrict,
+    loose: sanctifyLoose,
+    keyboardOnlyEmoji: sanctifyKeyboardOnlyEmoji,
+    keyboardOnly: sanctifyKeyboardOnly,
+    pasted: sanctifyPasted,
+});
 
 
 /**
@@ -374,13 +436,6 @@ function extractEmojiSequences(text) {
     return out;
 }
 
-/**
- * Matches any character that is NOT:
- * - Printable ASCII (U+0020–U+007E)
- * - Newline characters: \n (LF), \r (CR)
- * This allows for \n, \r, and \r\n line endings.
- */
-export const ASCII_KEYBOARD_SAFE_REGEX = /[^\x20-\x7E\r\n]+/gu;
 
 /**
  * Removes all non-keyboard characters, preserving:
@@ -402,64 +457,6 @@ function purgeNonKeyboardChars(text, purgeEmojis = false) {
 }
 
 
-// Smart apostrophes (single quote variations)
-const SMART_SINGLE_QUOTES_REGEX = /[\u2018\u2019\u201A\u201B\u2032\u2035]/g;
-
-// Smart double quotes (including primes and guillemets)
-const SMART_DOUBLE_QUOTES_REGEX = /[\u201C\u201D\u201E\u201F\u2033\u2036\u00AB\u00BB]/g;
-
-// Dash variants: en dash, em dash, horizontal bar, figure dash, minus
-const UNICODE_DASHES_REGEX = /[\u2012\u2013\u2014\u2015\u2212]/g;
-
-// Ellipsis character
-const ELLIPSIS_REGEX = /\u2026/g;
-
-// Bullets and middle dot
-const BULLETS_REGEX = /[\u2022\u00B7]/g;
-
-// Full-width ASCII punctuation: U+FF01 - U+FF5E
-const FULLWIDTH_PUNCTUATION_REGEX = /[\uFF01-\uFF5E]/g;
-
-/**
- * Normalizes typographic Unicode punctuation into ASCII equivalents.
- * @param {string} text
- * @returns {string}
- */
-export function normalizeTypographicJank(text) {
-    return text
-        .replace(SMART_SINGLE_QUOTES_REGEX, "'")
-        .replace(SMART_DOUBLE_QUOTES_REGEX, '"')
-        .replace(UNICODE_DASHES_REGEX, '-')
-        .replace(ELLIPSIS_REGEX, '...')
-        .replace(BULLETS_REGEX, '*')
-        .replace(FULLWIDTH_PUNCTUATION_REGEX, m =>
-            String.fromCharCode(m.charCodeAt(0) - 0xFEE0)
-        );
-}
-
-
-/** @type {RegExp} */
-export let EMOJI_REGEX;
-
-/**
- * Try Unicode property escape regex (preferred).
- * Fallback to basic emoji ranges if unsupported.
- */
-try {
-    EMOJI_REGEX = new RegExp(
-        '(?:\\p{Extended_Pictographic}(?:\\uFE0F|\\uFE0E)?(?:\\u200D(?:\\p{Extended_Pictographic}|\\w)+)*)',
-        'gu'
-    );
-} catch {
-    // Fallback: wide-range emoji component match (flags, tones, symbols)
-    //   * Covers:
-    //   * - Emoji base chars (1F300–1FAFF)
-    //   * - Dingbats (2700–27BF) like ❌, ✅, ☑️
-    //   * - Skin tones (1F3FB–1F3FF)
-    //   * - ZWJ (200D), variation selectors (FE0F)
-    //   * - Regional indicators (1F1E6–1F1FF)
-    EMOJI_REGEX = /[\u{2700}-\u{27BF}\u{1F300}-\u{1FAFF}\u{1F3FB}-\u{1F3FF}\u200D\uFE0F\u{1F1E6}-\u{1F1FF}]/gu;
-}
 
 /**
  * Removes all emoji characters using Unicode property escapes.

package/src/textPatterns.js

@@ -0,0 +1,78 @@
+// src/textPatterns.js
+//
+// Patterns shared by the inspector and the sanitizer. They live apart from
+// sanctifyText.js so that importing an inspector does not pull in the sanitizer
+// engine and its presets (see the size probes in scripts/check-size.js).
+
+
+/**
+ * Matches any character that is NOT:
+ * - Printable ASCII (U+0020–U+007E)
+ * - Newline characters: \n (LF), \r (CR)
+ * This allows for \n, \r, and \r\n line endings.
+ */
+export const ASCII_KEYBOARD_SAFE_REGEX = /[^\x20-\x7E\r\n]+/gu;
+
+
+// Smart apostrophes (single quote variations)
+const SMART_SINGLE_QUOTES_REGEX = /[\u2018\u2019\u201A\u201B\u2032\u2035]/g;
+
+// Smart double quotes (including primes and guillemets)
+const SMART_DOUBLE_QUOTES_REGEX = /[\u201C\u201D\u201E\u201F\u2033\u2036\u00AB\u00BB]/g;
+
+// Dash variants: en dash, em dash, horizontal bar, figure dash, minus
+const UNICODE_DASHES_REGEX = /[\u2012\u2013\u2014\u2015\u2212]/g;
+
+// Ellipsis character
+const ELLIPSIS_REGEX = /\u2026/g;
+
+// Bullets and middle dot
+const BULLETS_REGEX = /[\u2022\u00B7]/g;
+
+// Full-width ASCII punctuation: U+FF01 - U+FF5E
+const FULLWIDTH_PUNCTUATION_REGEX = /[\uFF01-\uFF5E]/g;
+
+/**
+ * Normalizes typographic Unicode punctuation into ASCII equivalents.
+ * @param {string} text
+ * @returns {string}
+ */
+export function normalizeTypographicJank(text) {
+    return text
+        .replace(SMART_SINGLE_QUOTES_REGEX, "'")
+        .replace(SMART_DOUBLE_QUOTES_REGEX, '"')
+        .replace(UNICODE_DASHES_REGEX, '-')
+        .replace(ELLIPSIS_REGEX, '...')
+        .replace(BULLETS_REGEX, '*')
+        .replace(FULLWIDTH_PUNCTUATION_REGEX, m =>
+            String.fromCharCode(m.charCodeAt(0) - 0xFEE0)
+        );
+}
+
+
+/**
+ * Try Unicode property escape regex (preferred).
+ * Fallback to basic emoji ranges if unsupported.
+ * Built in a function marked pure, so bundlers drop it when nothing uses it.
+ * @returns {RegExp}
+ */
+function buildEmojiRegex() {
+    try {
+        return new RegExp(
+            '(?:\\p{Extended_Pictographic}(?:\\uFE0F|\\uFE0E)?(?:\\u200D(?:\\p{Extended_Pictographic}|\\w)+)*)',
+            'gu'
+        );
+    } catch {
+        // Fallback: wide-range emoji component match (flags, tones, symbols)
+        //   * Covers:
+        //   * - Emoji base chars (1F300–1FAFF)
+        //   * - Dingbats (2700–27BF) like ❌, ✅, ☑
+        //   * - Skin tones (1F3FB–1F3FF)
+        //   * - ZWJ (200D), variation selectors (FE0F)
+        //   * - Regional indicators (1F1E6–1F1FF)
+        return /[\u{2700}-\u{27BF}\u{1F300}-\u{1FAFF}\u{1F3FB}-\u{1F3FF}\u200D\uFE0F\u{1F1E6}-\u{1F1FF}]/gu;
+    }
+}
+
+/** @type {RegExp} */
+export const EMOJI_REGEX = /* @__PURE__ */ buildEmojiRegex();

package/src/version.generated.js

@@ -0,0 +1,5 @@
+// src/version.generated.js
+// Generated from package.json by scripts/gen-version.js (`npm run gen`); do not edit.
+
+/** The installed version of text-sanctifier, as in its package.json. */
+export const VERSION = '1.3.6';