imprimatur 0.8.0-aarch64-linux-gnu → 0.8.1-aarch64-linux-gnu

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ff2e6c40da9caaccdae6a868e999760b25592bbaf3ae9fc20c42b7c927bc4bdd
-  data.tar.gz: 5700e3769fa8b7b52e8b888d60967428d8cf326dff66a351fc4c50db0a787b45
+  metadata.gz: 8e45880f6944a007234ce99fb196f9421b0c6ff4d852b3a2db4d9920033db620
+  data.tar.gz: 6cb5da186f0be53df0b38e2e8cf637c8c6f3bd4a0f2c8a71129a9b9e738e491f
 SHA512:
-  metadata.gz: 13950df455e35784adad7e89feee880e5fefd5bbd86790283c8794d28520adb50c78eaa2c36afcf035b6d9a5ac912adc7d97ff7b71f1c0535f37b69eed115e0a
-  data.tar.gz: 841c3b93f3866f6a01f174c221bf1a832bc6f6ba9b1da582b8e3723b08c9cc47d2225c213c42ec221e1642ca5d1ad4bd382a14961b87795bb2521f6d219368e0
+  metadata.gz: 4b38abf70340c6fb1c707aca033d30318460199e7f14b2f2af97a61b86ef6e79c59f86dd6df666bac2c9b3c226d43cb7fe379c76c2c515b2e618ccc390a6f224
+  data.tar.gz: cd17aace372ea781e79aef328a0e542e4e8c4c4a0b71fa4fc4d5d19a2bcf319b186beb9cc9bd2f540fae87b4b5a9d850dac9360b4ab165e51cd722a4985f4cf9

data/CHANGELOG.md

@@ -11,6 +11,14 @@
 - Allow a bounded exit grace when macOS cannot inspect an exiting worker;
   persistent monitor failures still terminate and reap a live worker.
 
+## [0.8.1](https://github.com/seuros/imprimatur/compare/v0.8.0...v0.8.1) (2026-10-29)
+
+
+### Bug Fixes
+
+* **pdf:** recover timeout neighbours within the overall deadline ([#16](https://github.com/seuros/imprimatur/issues/16)) ([e86fbbf](https://github.com/seuros/imprimatur/commit/e86fbbfef85f2c645090c43359c0744962e951a1))
+* **pdf:** step timeout recovery so a Ruby wakeup cannot restart it ([75c3894](https://github.com/seuros/imprimatur/commit/75c3894c8a791c5ef4af562dc99de4e745770ad3))
+
 ## [0.8.0](https://github.com/seuros/imprimatur/compare/v0.7.0...v0.8.0) (2026-10-27)
 
 

data/README.md

@@ -384,6 +384,28 @@ after metadata was read preserves completed pages and explicitly marks the
 unreached pages; an expired overall deadline marks them `skipped`. Cancellation
 still raises rather than returning a partial successful call.
 
+For timeout-neighbour recovery, opt in to a shorter worker-attempt budget:
+
+```ruby
+Imprimatur.pdf_pages(bytes, timeout: 300, batch_timeout: 60)
+```
+
+Here `timeout:` is the **overall** deadline, including recovery; `batch_timeout:`
+caps the initial worker and each singleton retry. Completed pages survive a
+batch timeout. Unread later neighbours are tried once before the first missing
+page (which may have stalled the worker). Recovery is best effort, never an
+extension of the overall deadline. Output-limit skips are not retried, and all
+attempts share `max_output_bytes:`. Input, depth, process-memory and per-page
+limits still apply; `max_inflated:` remains per worker/recovery attempt, not a
+cumulative decompression allowance.
+
+With `batch_timeout:` enabled, an explicit finite `timeout:` replaces the
+ordinary 60-second process ceiling for this call; `timeout: nil` retains that
+60-second ceiling. Both budgets must be positive; zero overall time still fails
+immediately. Omitting `batch_timeout:` preserves the existing behaviour. Rust
+callers can use `pages_isolated_recovering` with an explicit attempt duration
+and overall `Limits`/`ProcessLimits`.
+
 This is resource containment, **not a filesystem/network security sandbox**.
 The raw crate `info`, `pages` and `render_page` APIs remain in-process;
 `render_page` cannot interrupt Hayro.

data/lib/imprimatur/pdf_reader.rb

@@ -11,8 +11,9 @@ module Imprimatur
 
     def self.pages(document, first_page: 1, last_page: 0xFFFFFFFF, max_pages: 500,
                    max_page_bytes: 256 * 1024, max_output_bytes: 8 * 1024 * 1024,
-                   memory_bytes: 1024 * 1024 * 1024, max_bytes: nil, **limits)
-      options = [first_page, last_page, max_pages, max_page_bytes, max_output_bytes]
+                   memory_bytes: 1024 * 1024 * 1024, max_bytes: nil, batch_timeout: nil, **limits)
+      options = [first_page, last_page, max_pages, max_page_bytes, max_output_bytes,
+                 batch_timeout && Float(batch_timeout)]
       JSON.parse(Native.pdf_pages(Reader.read(document, max_bytes), Reader.limits(max_bytes:, **limits),
                                   options, RENDER_WORKER, memory_bytes),
                  symbolize_names: true)

data/lib/imprimatur/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Imprimatur
-  VERSION = '0.8.0'
+  VERSION = '0.8.1'
 end

data/lib/imprimatur.rb

@@ -115,6 +115,8 @@ module Imprimatur
     # image count (nil when unknown), truncation flag and failure reason.
     # Takes +first_page:+, +last_page:+, +max_pages:+ (500),
     # +max_page_bytes:+ (256 KiB), +max_output_bytes:+ (8 MiB), and read limits.
+    # Optional +batch_timeout:+ caps each worker attempt; +timeout:+ then bounds
+    # the whole call, including one-pass recovery of timeout-unread neighbours.
     # @return [Hash] +page_count:+, +encrypted:+ and +pages:+
     def pdf_pages(document, ...) = PdfReader.pages(document, ...)
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: imprimatur
 version: !ruby/object:Gem::Version
-  version: 0.8.0
+  version: 0.8.1
 platform: aarch64-linux-gnu
 authors:
 - Abdelkader Boudih