Method safeDockerString

src/utils.ts:56–69

(jobName: string)

    static readonly MAX_FILENAME_LENGTH = 255 - 17; // NAME_MAX (bytes) - wrapper

    static safeDockerString (jobName: string) {
        // INVARIANT: \w without /u is ASCII-only ([A-Za-z0-9_]), so `encoded` is pure ASCII
        // and .length === byte length. NAME_MAX is a byte limit — adding /u would break this.
        // We hash `jobName` (not `encoded`) because base64url encoding isn't injective.
        const encoded = jobName.replace(/[^\w-]+/g, (match) => {
            return base64url.encode(match);
        });
        if (encoded.length <= Utils.MAX_FILENAME_LENGTH) {
            return encoded;
        }
        const hash = createHash("sha256").update(jobName).digest("hex").substring(0, 16);
        const prefix = encoded.substring(0, Utils.MAX_FILENAME_LENGTH - 1 - hash.length);
        return `${prefix}-${hash}`;
    }

    static safeBashString (s: string) {
        return `'${s.replaceAll("'", "'\"'\"'")}'`;