@e-sig/core 0.6.0 → 0.7.0

package/dist/vendor/placeholder-plain/createBufferRootWithAcroform.js

@@ -0,0 +1,15 @@
+// Vendored from @signpdf/placeholder-plain@3.3.0 (MIT). See LICENSE-signpdf.md.
+// Faithful TypeScript port — logic and byte-emitting paths are unchanged.
+import getIndexFromRef from "./getIndexFromRef.js";
+const createBufferRootWithAcroform = (pdf, info, form) => {
+    const rootIndex = getIndexFromRef(info.xref, info.rootRef);
+    return Buffer.concat([
+        Buffer.from(`${rootIndex} 0 obj\n`),
+        Buffer.from("<<\n"),
+        Buffer.from(`${info.root}\n`),
+        Buffer.from(`/AcroForm ${form}`),
+        Buffer.from("\n>>\nendobj\n"),
+    ]);
+};
+export default createBufferRootWithAcroform;
+//# sourceMappingURL=createBufferRootWithAcroform.js.map

package/dist/vendor/placeholder-plain/createBufferRootWithAcroform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createBufferRootWithAcroform.js","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/createBufferRootWithAcroform.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,0EAA0E;AAC1E,OAAO,eAAe,MAAM,sBAAsB,CAAC;AAGnD,MAAM,4BAA4B,GAAG,CACnC,GAAW,EACX,IAAuB,EACvB,IAA4B,EACpB,EAAE;IACV,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,UAAU,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,4BAA4B,CAAC"}

package/dist/vendor/placeholder-plain/createBufferTrailer.d.ts

@@ -0,0 +1,4 @@
+import type { ReadPdfReturnType } from "./readPdf.js";
+declare const createBufferTrailer: (pdf: Buffer, info: ReadPdfReturnType, addedReferences: Map<number, number>) => Buffer;
+export default createBufferTrailer;
+//# sourceMappingURL=createBufferTrailer.d.ts.map

package/dist/vendor/placeholder-plain/createBufferTrailer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"createBufferTrailer.d.ts","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/createBufferTrailer.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD,QAAA,MAAM,mBAAmB,GACvB,KAAK,MAAM,EACX,MAAM,iBAAiB,EACvB,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,KACnC,MAwBF,CAAC;AAEF,eAAe,mBAAmB,CAAC"}

package/dist/vendor/placeholder-plain/createBufferTrailer.js

@@ -0,0 +1,26 @@
+const createBufferTrailer = (pdf, info, addedReferences) => {
+    const sparseRows = [];
+    sparseRows[0] = "0000000000 65535 f "; // info.xref.tableRows[0];
+    addedReferences.forEach((offset, index) => {
+        const paddedOffset = `0000000000${offset}`.slice(-10);
+        sparseRows[index + 1] = `${index} 1\n${paddedOffset} 00000 n `;
+    });
+    const rows = sparseRows.filter((row) => row !== undefined);
+    return Buffer.concat([
+        Buffer.from("xref\n"),
+        Buffer.from(`${info.xref.startingIndex} 1\n`),
+        Buffer.from(rows.join("\n")),
+        Buffer.from("\ntrailer\n"),
+        Buffer.from("<<\n"),
+        Buffer.from(`/Size ${info.xref.maxIndex + 1}\n`),
+        Buffer.from(`/Root ${info.rootRef}\n`),
+        Buffer.from(info.infoRef ? `/Info ${info.infoRef}\n` : ""),
+        Buffer.from(`/Prev ${info.xRefPosition}\n`),
+        Buffer.from(">>\n"),
+        Buffer.from("startxref\n"),
+        Buffer.from(`${pdf.length}\n`),
+        Buffer.from("%%EOF"),
+    ]);
+};
+export default createBufferTrailer;
+//# sourceMappingURL=createBufferTrailer.js.map

package/dist/vendor/placeholder-plain/createBufferTrailer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createBufferTrailer.js","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/createBufferTrailer.ts"],"names":[],"mappings":"AAMA,MAAM,mBAAmB,GAAG,CAC1B,GAAW,EACX,IAAuB,EACvB,eAAoC,EAC5B,EAAE;IACV,MAAM,UAAU,GAA8B,EAAE,CAAC;IACjD,UAAU,CAAC,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,0BAA0B;IAEjE,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACxC,MAAM,YAAY,GAAG,aAAa,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACtD,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,GAAG,KAAK,OAAO,YAAY,WAAW,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,IAAI,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;KACrB,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,mBAAmB,CAAC"}

package/dist/vendor/placeholder-plain/findObject.d.ts

@@ -0,0 +1,4 @@
+import type { ReadRefTableReturnType } from "./readRefTable.js";
+declare const findObject: (pdf: Buffer, refTable: ReadRefTableReturnType, ref: string) => Buffer;
+export default findObject;
+//# sourceMappingURL=findObject.d.ts.map

package/dist/vendor/placeholder-plain/findObject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findObject.d.ts","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/findObject.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAEhE,QAAA,MAAM,UAAU,GAAI,KAAK,MAAM,EAAE,UAAU,sBAAsB,EAAE,KAAK,MAAM,KAAG,MAUhF,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/vendor/placeholder-plain/findObject.js

@@ -0,0 +1,18 @@
+// Vendored from @signpdf/placeholder-plain@3.3.0 (MIT). See LICENSE-signpdf.md.
+// Faithful TypeScript port — logic and byte-emitting paths are unchanged.
+// (Upstream passed 'utf8' as the second argument to indexOf/lastIndexOf; Node
+// treats a string byteOffset as the encoding, i.e. identical to the defaults
+// used here.)
+import getIndexFromRef from "./getIndexFromRef.js";
+const findObject = (pdf, refTable, ref) => {
+    const index = getIndexFromRef(refTable, ref);
+    const offset = refTable.offsets.get(index);
+    let slice = pdf.slice(offset);
+    slice = slice.slice(0, slice.indexOf("endobj"));
+    // FIXME: What if it is a stream?
+    slice = slice.slice(slice.indexOf("<<") + 2);
+    slice = slice.slice(0, slice.lastIndexOf(">>"));
+    return slice;
+};
+export default findObject;
+//# sourceMappingURL=findObject.js.map

package/dist/vendor/placeholder-plain/findObject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findObject.js","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/findObject.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,cAAc;AACd,OAAO,eAAe,MAAM,sBAAsB,CAAC;AAGnD,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,QAAgC,EAAE,GAAW,EAAU,EAAE;IACxF,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAW,CAAC;IACrD,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEhD,iCAAiC;IACjC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/vendor/placeholder-plain/getIndexFromRef.d.ts

@@ -0,0 +1,4 @@
+import type { ReadRefTableReturnType } from "./readRefTable.js";
+declare const getIndexFromRef: (refTable: ReadRefTableReturnType, ref: string) => number;
+export default getIndexFromRef;
+//# sourceMappingURL=getIndexFromRef.d.ts.map

package/dist/vendor/placeholder-plain/getIndexFromRef.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIndexFromRef.d.ts","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/getIndexFromRef.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAEhE,QAAA,MAAM,eAAe,GAAI,UAAU,sBAAsB,EAAE,KAAK,MAAM,KAAG,MAOxE,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/vendor/placeholder-plain/getIndexFromRef.js

@@ -0,0 +1,13 @@
+// Vendored from @signpdf/placeholder-plain@3.3.0 (MIT). See LICENSE-signpdf.md.
+// Faithful TypeScript port — logic and byte-emitting paths are unchanged.
+import { SignPdfError } from "@signpdf/utils";
+const getIndexFromRef = (refTable, ref) => {
+    const [indexString] = ref.split(" ");
+    const index = parseInt(indexString);
+    if (!refTable.offsets.has(index)) {
+        throw new SignPdfError(`Failed to locate object "${ref}".`, SignPdfError.TYPE_PARSE);
+    }
+    return index;
+};
+export default getIndexFromRef;
+//# sourceMappingURL=getIndexFromRef.js.map

package/dist/vendor/placeholder-plain/getIndexFromRef.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIndexFromRef.js","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/getIndexFromRef.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,0EAA0E;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,MAAM,eAAe,GAAG,CAAC,QAAgC,EAAE,GAAW,EAAU,EAAE;IAChF,MAAM,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,YAAY,CAAC,4BAA4B,GAAG,IAAI,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/vendor/placeholder-plain/getPageRef.d.ts

@@ -0,0 +1,6 @@
+import type { ReadPdfReturnType } from "./readPdf.js";
+/**
+ * Finds the reference to a page.
+ */
+export default function getPageRef(pdfBuffer: Buffer, info: ReadPdfReturnType): string;
+//# sourceMappingURL=getPageRef.d.ts.map

package/dist/vendor/placeholder-plain/getPageRef.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getPageRef.d.ts","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/getPageRef.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD;;GAEG;AACH,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,MAAM,CASrF"}

package/dist/vendor/placeholder-plain/getPageRef.js

@@ -0,0 +1,18 @@
+// Vendored from @signpdf/placeholder-plain@3.3.0 (MIT). See LICENSE-signpdf.md.
+// Faithful TypeScript port — logic and byte-emitting paths are unchanged.
+import getPagesDictionaryRef from "./getPagesDictionaryRef.js";
+import findObject from "./findObject.js";
+/**
+ * Finds the reference to a page.
+ */
+export default function getPageRef(pdfBuffer, info) {
+    const pagesRef = getPagesDictionaryRef(info);
+    const pagesDictionary = findObject(pdfBuffer, info.xref, pagesRef);
+    const kidsPosition = pagesDictionary.indexOf("/Kids");
+    const kidsStart = pagesDictionary.indexOf("[", kidsPosition) + 1;
+    const kidsEnd = pagesDictionary.indexOf("]", kidsPosition);
+    const pages = pagesDictionary.slice(kidsStart, kidsEnd).toString();
+    const split = pages.trim().split(" ", 3);
+    return `${split[0]} ${split[1]} ${split[2]}`;
+}
+//# sourceMappingURL=getPageRef.js.map

package/dist/vendor/placeholder-plain/getPageRef.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getPageRef.js","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/getPageRef.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,0EAA0E;AAC1E,OAAO,qBAAqB,MAAM,4BAA4B,CAAC;AAC/D,OAAO,UAAU,MAAM,iBAAiB,CAAC;AAGzC;;GAEG;AACH,MAAM,CAAC,OAAO,UAAU,UAAU,CAAC,SAAiB,EAAE,IAAuB;IAC3E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,eAAe,GAAG,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACzC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC"}

package/dist/vendor/placeholder-plain/getPagesDictionaryRef.d.ts

@@ -0,0 +1,3 @@
+import type { ReadPdfReturnType } from "./readPdf.js";
+export default function getPagesDictionaryRef(info: ReadPdfReturnType): string;
+//# sourceMappingURL=getPagesDictionaryRef.d.ts.map

package/dist/vendor/placeholder-plain/getPagesDictionaryRef.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getPagesDictionaryRef.d.ts","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/getPagesDictionaryRef.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAU7E"}

package/dist/vendor/placeholder-plain/getPagesDictionaryRef.js

@@ -0,0 +1,12 @@
+// Vendored from @signpdf/placeholder-plain@3.3.0 (MIT). See LICENSE-signpdf.md.
+// Faithful TypeScript port — logic and byte-emitting paths are unchanged.
+import { SignPdfError } from "@signpdf/utils";
+export default function getPagesDictionaryRef(info) {
+    const pagesRefRegex = /\/Pages\s+(\d+\s+\d+\s+R)/g;
+    const match = pagesRefRegex.exec(info.root);
+    if (match === null) {
+        throw new SignPdfError("Failed to find the pages descriptor. This is probably a problem in node-signpdf.", SignPdfError.TYPE_PARSE);
+    }
+    return match[1];
+}
+//# sourceMappingURL=getPagesDictionaryRef.js.map

package/dist/vendor/placeholder-plain/getPagesDictionaryRef.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getPagesDictionaryRef.js","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/getPagesDictionaryRef.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,0EAA0E;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,MAAM,CAAC,OAAO,UAAU,qBAAqB,CAAC,IAAuB;IACnE,MAAM,aAAa,GAAG,4BAA4B,CAAC;IACnD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,YAAY,CACpB,kFAAkF,EAClF,YAAY,CAAC,UAAU,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/vendor/placeholder-plain/index.d.ts

@@ -0,0 +1,2 @@
+export { plainAddPlaceholder, type PlainAddPlaceholderInput } from "./plainAddPlaceholder.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/vendor/placeholder-plain/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,KAAK,wBAAwB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/vendor/placeholder-plain/index.js

@@ -0,0 +1,4 @@
+// Vendored from @signpdf/placeholder-plain@3.3.0 (MIT). See LICENSE-signpdf.md.
+// Public surface mirrors the upstream package entry point.
+export { plainAddPlaceholder } from "./plainAddPlaceholder.js";
+//# sourceMappingURL=index.js.map

package/dist/vendor/placeholder-plain/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2DAA2D;AAC3D,OAAO,EAAE,mBAAmB,EAAiC,MAAM,0BAA0B,CAAC"}

package/dist/vendor/placeholder-plain/pdfObject.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Escape a PDF name body per ISO 32000-1 §7.3.5: every byte outside the
+ * regular-character range (0x21..0x7E minus the delimiters) is written as
+ * `#` followed by two uppercase hex digits. Regular names pass through
+ * unchanged, so this is a no-op for well-formed input.
+ */
+export declare const escapePdfName: (name: string) => string;
+/** Converts JavaScript types into their corresponding PDF types. */
+export declare const convert: (object: unknown) => string;
+export declare const PDFObject: {
+    convert: (object: unknown) => string;
+};
+//# sourceMappingURL=pdfObject.d.ts.map

package/dist/vendor/placeholder-plain/pdfObject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdfObject.d.ts","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/pdfObject.ts"],"names":[],"mappings":"AAsDA;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,KAAG,MAU5C,CAAC;AAKF,oEAAoE;AACpE,eAAO,MAAM,OAAO,GAAI,QAAQ,OAAO,KAAG,MA2EzC,CAAC;AAEF,eAAO,MAAM,SAAS;sBA7EU,OAAO,KAAG,MAAM;CA6EZ,CAAC"}

package/dist/vendor/placeholder-plain/pdfObject.js

@@ -0,0 +1,142 @@
+// Hardened replacement for `PDFObject.convert` from @signpdf/utils@3.x
+// (itself derived from pdfkit's PDFObject by Devon Govett, MIT — see
+// LICENSE-signpdf.md). This is the ONE file in this directory that
+// DELIBERATELY DIVERGES from upstream. Two changes, both security fixes:
+//
+//  1. Upstream's dictionary branch does:
+//         if (val.toString().indexOf('<<') !== -1) checkedValue = val;
+//     i.e. any value whose string form contains "<<" is spliced into the
+//     dictionary RAW — no conversion, no escaping, not even PDF-string
+//     parens. A caller-supplied `reason` / `name` / `location` /
+//     `contactInfo` containing "<<" therefore injects arbitrary keys into
+//     the signature dictionary. That branch exists upstream only so pdfkit
+//     can pass pre-rendered dictionary strings; nothing this package emits
+//     relies on it (Prop_Build is a real object and recurses correctly), so
+//     it is removed outright.
+//
+//  2. Upstream renders a JS string as a PDF name with `/${object}` and no
+//     escaping, so a name value can carry delimiters and whitespace and end
+//     the token early — the /SubFilter injection vector. Names are now
+//     escaped per ISO 32000-1 §7.3.5 (#xx for every non-regular byte).
+//
+// Both changes are byte-identical for every legitimate input this package
+// produces: the names it emits (Sig, Adobe.PPKLite, ETSI.CAdES.detached,
+// Widget, Annot, the "**********" ByteRange placeholder, and every
+// dictionary key) consist solely of regular characters, and no legitimate
+// value's string form contains "<<". Covered by test/sig-dict-injection.test.ts
+// ::"is byte-identical to upstream for legitimate input".
+//
+// Reported by Uuaid-Lead 2026-08-11 (found while adversarially testing an
+// independent verifier against the published @e-sig/core signPdf).
+import { PDFAbstractReference } from "@signpdf/utils";
+const pad = (str, length) => (Array(length + 1).join("0") + str).slice(-length);
+const escapableRe = /[\n\r\t\b\f()\\]/g;
+const escapable = {
+    "\n": "\\n",
+    "\r": "\\r",
+    "\t": "\\t",
+    "\b": "\\b",
+    "\f": "\\f",
+    "\\": "\\\\",
+    "(": "\\(",
+    ")": "\\)",
+};
+/**
+ * PDF name delimiters (ISO 32000-1 §7.2.2) plus '#', which introduces an
+ * escape and so must itself be escaped.
+ */
+const NAME_DELIMITERS = new Set("()<>[]{}/%#".split("").map((c) => c.charCodeAt(0)));
+/**
+ * Escape a PDF name body per ISO 32000-1 §7.3.5: every byte outside the
+ * regular-character range (0x21..0x7E minus the delimiters) is written as
+ * `#` followed by two uppercase hex digits. Regular names pass through
+ * unchanged, so this is a no-op for well-formed input.
+ */
+export const escapePdfName = (name) => {
+    let out = "";
+    for (const byte of Buffer.from(name, "utf8")) {
+        if (byte >= 0x21 && byte <= 0x7e && !NAME_DELIMITERS.has(byte)) {
+            out += String.fromCharCode(byte);
+        }
+        else {
+            out += `#${byte.toString(16).padStart(2, "0").toUpperCase()}`;
+        }
+    }
+    return out;
+};
+// Convert little endian UTF-16 to big endian
+const swapBytes = (buff) => buff.swap16();
+/** Converts JavaScript types into their corresponding PDF types. */
+export const convert = (object) => {
+    // String literals are converted to the PDF name type
+    if (typeof object === "string") {
+        return `/${escapePdfName(object)}`;
+    }
+    // String objects are converted to PDF strings (UTF-16)
+    if (object instanceof String) {
+        let string = String(object);
+        // Detect if this is a unicode string
+        let isUnicode = false;
+        for (let i = 0, end = string.length; i < end; i += 1) {
+            if (string.charCodeAt(i) > 0x7f) {
+                isUnicode = true;
+                break;
+            }
+        }
+        // If so, encode it as big endian UTF-16
+        const stringBuffer = isUnicode
+            ? swapBytes(Buffer.from(`\ufeff${string}`, "utf16le"))
+            : Buffer.from(string, "ascii");
+        string = stringBuffer.toString("binary");
+        // Escape characters as required by the spec
+        string = string.replace(escapableRe, (c) => escapable[c]);
+        return `(${string})`;
+    }
+    // Buffers are converted to PDF hex strings
+    if (Buffer.isBuffer(object)) {
+        return `<${object.toString("hex")}>`;
+    }
+    if (object instanceof PDFAbstractReference) {
+        // String(): @signpdf/utils types the abstract base's toString() as void
+        // (it throws); the concrete PDFKitReferenceMock returns "<index> 0 R".
+        return String(object);
+    }
+    if (object instanceof Date) {
+        const string = `D:${pad(object.getUTCFullYear(), 4)}${pad(object.getUTCMonth() + 1, 2)}` +
+            `${pad(object.getUTCDate(), 2)}${pad(object.getUTCHours(), 2)}` +
+            `${pad(object.getUTCMinutes(), 2)}${pad(object.getUTCSeconds(), 2)}Z`;
+        return `(${string})`;
+    }
+    if (Array.isArray(object)) {
+        const items = object.map((e) => convert(e)).join(" ");
+        return `[${items}]`;
+    }
+    if ({}.toString.call(object) === "[object Object]") {
+        const out = ["<<"];
+        let streamData;
+        Object.entries(object).forEach(([key, val]) => {
+            if (key === "stream") {
+                streamData = `${key}\n${val}\nendstream`;
+            }
+            else {
+                // NOTE: no raw-splice branch here — see the header. Every value is
+                // converted, and every key is escaped as a name.
+                out.push(`/${escapePdfName(key)} ${convert(val)}`);
+            }
+        });
+        out.push(">>");
+        if (streamData) {
+            out.push(streamData);
+        }
+        return out.join("\n");
+    }
+    if (typeof object === "number") {
+        if (object > -1e21 && object < 1e21) {
+            return String(Math.round(object * 1e6) / 1e6);
+        }
+        throw new Error(`unsupported number: ${object}`);
+    }
+    return `${object}`;
+};
+export const PDFObject = { convert };
+//# sourceMappingURL=pdfObject.js.map

package/dist/vendor/placeholder-plain/pdfObject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdfObject.js","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/pdfObject.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,qEAAqE;AACrE,mEAAmE;AACnE,yEAAyE;AACzE,EAAE;AACF,yCAAyC;AACzC,uEAAuE;AACvE,yEAAyE;AACzE,uEAAuE;AACvE,iEAAiE;AACjE,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,4EAA4E;AAC5E,8BAA8B;AAC9B,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,uEAAuE;AACvE,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,mEAAmE;AACnE,0EAA0E;AAC1E,gFAAgF;AAChF,0DAA0D;AAC1D,EAAE;AACF,0EAA0E;AAC1E,mEAAmE;AAEnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,MAAM,GAAG,GAAG,CAAC,GAAoB,EAAE,MAAc,EAAU,EAAE,CAC3D,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,SAAS,GAA2B;IACxC,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;CACX,CAAC;AAEF;;;GAGG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAErF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,IAAY,EAAU,EAAE;IACpD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7C,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,6CAA6C;AAC7C,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;AAE1D,oEAAoE;AACpE,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAAe,EAAU,EAAE;IACjD,qDAAqD;IACrD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;IACrC,CAAC;IAED,uDAAuD;IACvD,IAAI,MAAM,YAAY,MAAM,EAAE,CAAC;QAC7B,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,qCAAqC;QACrC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;gBAChC,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM;YACR,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,MAAM,YAAY,GAAG,SAAS;YAC5B,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;YACtD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEzC,4CAA4C;QAC5C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,MAAM,GAAG,CAAC;IACvB,CAAC;IAED,2CAA2C;IAC3C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,YAAY,oBAAoB,EAAE,CAAC;QAC3C,wEAAwE;QACxE,uEAAuE;QACvE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,MAAM,YAAY,IAAI,EAAE,CAAC;QAC3B,MAAM,MAAM,GACV,KAAK,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE;YACzE,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE;YAC/D,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC;QACxE,OAAO,IAAI,MAAM,GAAG,CAAC;IACvB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtD,OAAO,IAAI,KAAK,GAAG,CAAC;IACtB,CAAC;IACD,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,iBAAiB,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,UAA8B,CAAC;QAEnC,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE;YACvE,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACrB,UAAU,GAAG,GAAG,GAAG,KAAK,GAAG,aAAa,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,mEAAmE;gBACnE,iDAAiD;gBACjD,GAAG,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,UAAU,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,IAAI,MAAM,GAAG,CAAC,IAAI,IAAI,MAAM,GAAG,IAAI,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,MAAM,EAAE,CAAC;AACrB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,CAAC"}

package/dist/vendor/placeholder-plain/pdfkitAddPlaceholder.d.ts

@@ -0,0 +1,49 @@
+import { PDFKitReferenceMock } from "@signpdf/utils";
+/**
+ * The minimal PDFDocument-shaped surface that plainAddPlaceholder feeds in.
+ * (Upstream typed this as `object PDFDocument`.)
+ */
+export interface PdfKitMock {
+    ref(input: Record<string, unknown>, knownIndex?: number): PDFKitReferenceMock;
+    page: {
+        dictionary: PDFKitReferenceMock & {
+            data: {
+                Annots: unknown[];
+            };
+        };
+    };
+    _root: {
+        data: {
+            AcroForm?: unknown;
+        };
+    };
+}
+export interface PdfkitAddPlaceholderInput {
+    pdf: PdfKitMock;
+    pdfBuffer: Buffer;
+    reason: string;
+    contactInfo: string;
+    name: string;
+    location: string;
+    signingTime?: Date;
+    signatureLength?: number;
+    byteRangePlaceholder?: string;
+    /** One of SUBFILTER_* from @signpdf/utils */
+    subFilter?: string;
+    /** [x1, y1, x2, y2] widget rectangle */
+    widgetRect?: number[];
+    /** Name of the application generating the signature */
+    appName?: string;
+}
+export interface PdfkitAddPlaceholderReturnType {
+    signature: PDFKitReferenceMock;
+    form: PDFKitReferenceMock;
+    widget: PDFKitReferenceMock;
+}
+/**
+ * Adds the objects that are needed for Adobe.PPKLite to read the signature.
+ * Also includes a placeholder for the actual signature.
+ * Returns an Object with all the added PDFReferences.
+ */
+export declare const pdfkitAddPlaceholder: ({ pdf, pdfBuffer, reason, contactInfo, name, location, signingTime, signatureLength, byteRangePlaceholder, subFilter, widgetRect, appName, }: PdfkitAddPlaceholderInput) => PdfkitAddPlaceholderReturnType;
+//# sourceMappingURL=pdfkitAddPlaceholder.d.ts.map

package/dist/vendor/placeholder-plain/pdfkitAddPlaceholder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdfkitAddPlaceholder.d.ts","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/pdfkitAddPlaceholder.ts"],"names":[],"mappings":"AAKA,OAAO,EAML,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AAExB;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAAC;IAC9E,IAAI,EAAE;QACJ,UAAU,EAAE,mBAAmB,GAAG;YAAE,IAAI,EAAE;gBAAE,MAAM,EAAE,OAAO,EAAE,CAAA;aAAE,CAAA;SAAE,CAAC;KACnE,CAAC;IACF,KAAK,EAAE;QACL,IAAI,EAAE;YAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KAC9B,CAAC;CACH;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,UAAU,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,mBAAmB,CAAC;IAC/B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,GAAI,8IAalC,yBAAyB,KAAG,8BA4G9B,CAAC"}

package/dist/vendor/placeholder-plain/pdfkitAddPlaceholder.js

@@ -0,0 +1,115 @@
+// Vendored from @signpdf/placeholder-pdfkit010@3.3.0 (MIT). See LICENSE-signpdf.md.
+// Faithful TypeScript port — logic and byte-emitting paths are unchanged.
+// This is the only module @signpdf/placeholder-plain used from
+// @signpdf/placeholder-pdfkit010; vendoring it severs the
+// pdfkit@0.10.0 (peer) -> crypto-js@3.3.0 dependency chain.
+import { DEFAULT_BYTE_RANGE_PLACEHOLDER, DEFAULT_SIGNATURE_LENGTH, SUBFILTER_ADOBE_PKCS7_DETACHED, ANNOTATION_FLAGS, SIG_FLAGS, PDFKitReferenceMock, } from "@signpdf/utils";
+/**
+ * Adds the objects that are needed for Adobe.PPKLite to read the signature.
+ * Also includes a placeholder for the actual signature.
+ * Returns an Object with all the added PDFReferences.
+ */
+export const pdfkitAddPlaceholder = ({ pdf, pdfBuffer, reason, contactInfo, name, location, signingTime = undefined, signatureLength = DEFAULT_SIGNATURE_LENGTH, byteRangePlaceholder = DEFAULT_BYTE_RANGE_PLACEHOLDER, subFilter = SUBFILTER_ADOBE_PKCS7_DETACHED, widgetRect = [0, 0, 0, 0], appName = undefined, }) => {
+    /* eslint-disable no-underscore-dangle,no-param-reassign */
+    // Generate the signature placeholder
+    const signature = pdf.ref({
+        Type: "Sig",
+        Filter: "Adobe.PPKLite",
+        SubFilter: subFilter,
+        ByteRange: [0, byteRangePlaceholder, byteRangePlaceholder, byteRangePlaceholder],
+        Contents: Buffer.from(String.fromCharCode(0).repeat(signatureLength)),
+        Reason: new String(reason), // eslint-disable-line no-new-wrappers
+        M: signingTime ?? new Date(),
+        ContactInfo: new String(contactInfo), // eslint-disable-line no-new-wrappers
+        Name: new String(name), // eslint-disable-line no-new-wrappers
+        Location: new String(location), // eslint-disable-line no-new-wrappers
+        Prop_Build: {
+            Filter: {
+                Name: "Adobe.PPKLite",
+            },
+            ...(appName
+                ? {
+                    App: {
+                        Name: appName,
+                    },
+                }
+                : {}),
+        },
+    });
+    // Check if pdf already contains acroform field
+    const isAcroFormExists = typeof pdf._root.data.AcroForm !== "undefined";
+    let fieldIds = [];
+    let acroFormId;
+    if (isAcroFormExists) {
+        /* FIXME: We're working with a PDFDocument.
+         * Needing to work with strings here doesn't make sense.
+         * It only exists to support plainAddPlaceholder the reference to /AcroForm
+         * would be external to PDFKit at this point.
+         */
+        const acroFormPosition = pdfBuffer.lastIndexOf("/Type /AcroForm");
+        let acroFormStart = acroFormPosition;
+        // 10 is the distance between "/Type /AcroForm" and AcroFrom ID
+        const charsUntilIdEnd = 10;
+        const acroFormIdEnd = acroFormPosition - charsUntilIdEnd;
+        // Let's find AcroForm ID by trying to find the "\n" before the ID
+        // 12 is a enough space to find the "\n"
+        // (generally it's 2 or 3, but I'm giving a big space though)
+        const maxAcroFormIdLength = 12;
+        let index = charsUntilIdEnd + 1;
+        for (index; index < charsUntilIdEnd + maxAcroFormIdLength; index += 1) {
+            const acroFormIdString = pdfBuffer.slice(acroFormPosition - index, acroFormIdEnd).toString();
+            if (acroFormIdString[0] === "\n") {
+                break;
+            }
+            acroFormStart = acroFormPosition - index;
+        }
+        const pdfSlice = pdfBuffer.slice(acroFormStart);
+        const acroForm = pdfSlice.slice(0, pdfSlice.indexOf("endobj")).toString();
+        acroFormId = parseInt(pdf._root.data.AcroForm.toString());
+        const acroFormFields = acroForm.slice(acroForm.indexOf("/Fields [") + 9, acroForm.indexOf("]"));
+        fieldIds = acroFormFields
+            .split(" ")
+            .filter(Boolean)
+            .filter((element, i) => i % 3 === 0)
+            .map((fieldId) => new PDFKitReferenceMock(fieldId));
+    }
+    const signatureName = "Signature";
+    // Generate signature annotation widget
+    const widget = pdf.ref({
+        Type: "Annot",
+        Subtype: "Widget",
+        FT: "Sig",
+        Rect: widgetRect,
+        V: signature,
+        T: new String(signatureName + (fieldIds.length + 1)), // eslint-disable-line no-new-wrappers
+        F: ANNOTATION_FLAGS.PRINT,
+        P: pdf.page.dictionary, // eslint-disable-line no-underscore-dangle
+    });
+    pdf.page.dictionary.data.Annots = [widget];
+    // Include the widget in a page
+    let form;
+    if (!isAcroFormExists) {
+        // Create a form (with the widget) and link in the _root
+        form = pdf.ref({
+            Type: "AcroForm",
+            SigFlags: SIG_FLAGS.SIGNATURES_EXIST | SIG_FLAGS.APPEND_ONLY,
+            Fields: [...fieldIds, widget],
+        });
+    }
+    else {
+        // Use existing acroform and extend the fields with newly created widgets
+        form = pdf.ref({
+            Type: "AcroForm",
+            SigFlags: SIG_FLAGS.SIGNATURES_EXIST | SIG_FLAGS.APPEND_ONLY,
+            Fields: [...fieldIds, widget],
+        }, acroFormId);
+    }
+    pdf._root.data.AcroForm = form;
+    return {
+        signature,
+        form,
+        widget,
+    };
+    /* eslint-enable no-underscore-dangle,no-param-reassign */
+};
+//# sourceMappingURL=pdfkitAddPlaceholder.js.map

package/dist/vendor/placeholder-plain/pdfkitAddPlaceholder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdfkitAddPlaceholder.js","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/pdfkitAddPlaceholder.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,0EAA0E;AAC1E,+DAA+D;AAC/D,0DAA0D;AAC1D,4DAA4D;AAC5D,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,8BAA8B,EAC9B,gBAAgB,EAChB,SAAS,EACT,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAwCxB;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,EACnC,GAAG,EACH,SAAS,EACT,MAAM,EACN,WAAW,EACX,IAAI,EACJ,QAAQ,EACR,WAAW,GAAG,SAAS,EACvB,eAAe,GAAG,wBAAwB,EAC1C,oBAAoB,GAAG,8BAA8B,EACrD,SAAS,GAAG,8BAA8B,EAC1C,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EACzB,OAAO,GAAG,SAAS,GACO,EAAkC,EAAE;IAC9D,2DAA2D;IAC3D,qCAAqC;IACrC,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC;QACxB,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,eAAe;QACvB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,CAAC,CAAC,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,oBAAoB,CAAC;QAChF,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACrE,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,sCAAsC;QAClE,CAAC,EAAE,WAAW,IAAI,IAAI,IAAI,EAAE;QAC5B,WAAW,EAAE,IAAI,MAAM,CAAC,WAAW,CAAC,EAAE,sCAAsC;QAC5E,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,sCAAsC;QAC9D,QAAQ,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,sCAAsC;QACtE,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,eAAe;aACtB;YACD,GAAG,CAAC,OAAO;gBACT,CAAC,CAAC;oBACE,GAAG,EAAE;wBACH,IAAI,EAAE,OAAO;qBACd;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CAAC;IAEH,+CAA+C;IAC/C,MAAM,gBAAgB,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,WAAW,CAAC;IACxE,IAAI,QAAQ,GAA0B,EAAE,CAAC;IACzC,IAAI,UAA8B,CAAC;IACnC,IAAI,gBAAgB,EAAE,CAAC;QACrB;;;;WAIG;QAEH,MAAM,gBAAgB,GAAG,SAAS,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;QAClE,IAAI,aAAa,GAAG,gBAAgB,CAAC;QACrC,+DAA+D;QAC/D,MAAM,eAAe,GAAG,EAAE,CAAC;QAC3B,MAAM,aAAa,GAAG,gBAAgB,GAAG,eAAe,CAAC;QACzD,kEAAkE;QAClE,wCAAwC;QACxC,6DAA6D;QAC7D,MAAM,mBAAmB,GAAG,EAAE,CAAC;QAC/B,IAAI,KAAK,GAAG,eAAe,GAAG,CAAC,CAAC;QAChC,KAAK,KAAK,EAAE,KAAK,GAAG,eAAe,GAAG,mBAAmB,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACtE,MAAM,gBAAgB,GAAG,SAAS,CAAC,KAAK,CAAC,gBAAgB,GAAG,KAAK,EAAE,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC7F,IAAI,gBAAgB,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjC,MAAM;YACR,CAAC;YACD,aAAa,GAAG,gBAAgB,GAAG,KAAK,CAAC;QAC3C,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1E,UAAU,GAAG,QAAQ,CAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAmC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtF,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAChG,QAAQ,GAAG,cAAc;aACtB,KAAK,CAAC,GAAG,CAAC;aACV,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;aACnC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,aAAa,GAAG,WAAW,CAAC;IAElC,uCAAuC;IACvC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC;QACrB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,QAAQ;QACjB,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,UAAU;QAChB,CAAC,EAAE,SAAS;QACZ,CAAC,EAAE,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,sCAAsC;QAC5F,CAAC,EAAE,gBAAgB,CAAC,KAAK;QACzB,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,2CAA2C;KACpE,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,+BAA+B;IAC/B,IAAI,IAAyB,CAAC;IAC9B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,wDAAwD;QACxD,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC;YACb,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,SAAS,CAAC,gBAAgB,GAAG,SAAS,CAAC,WAAW;YAC5D,MAAM,EAAE,CAAC,GAAG,QAAQ,EAAE,MAAM,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,yEAAyE;QACzE,IAAI,GAAG,GAAG,CAAC,GAAG,CACZ;YACE,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,SAAS,CAAC,gBAAgB,GAAG,SAAS,CAAC,WAAW;YAC5D,MAAM,EAAE,CAAC,GAAG,QAAQ,EAAE,MAAM,CAAC;SAC9B,EACD,UAAU,CACX,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC/B,OAAO;QACL,SAAS;QACT,IAAI;QACJ,MAAM;KACP,CAAC;IACF,0DAA0D;AAC5D,CAAC,CAAC"}

package/dist/vendor/placeholder-plain/plainAddPlaceholder.d.ts

@@ -0,0 +1,41 @@
+export interface PlainAddPlaceholderInput {
+    pdfBuffer: Buffer;
+    reason: string;
+    contactInfo: string;
+    name: string;
+    location: string;
+    signingTime?: Date;
+    signatureLength?: number;
+    /** One of SUBFILTER_* from @signpdf/utils */
+    subFilter?: string;
+    /**
+     * [x1, y1, x2, y2] widget rectangle.
+     *
+     * ATTRIBUTION INTEROP: the UUAID provenance verifier's PDF attribution-scope
+     * whitelist (IAASO-0004) requires the invisible `[0 0 0 0]` /Rect and denies
+     * any other value. `signPdf` never passes this, so today every document we
+     * emit is in scope — but a visible-signature feature would drop attribution
+     * on day one. Coordinate with the UUAID lane before wiring it up.
+     */
+    widgetRect?: number[];
+    /**
+     * Name of the application generating the signature (emitted as
+     * `/Prop_Build /App <</Name ...>>`).
+     *
+     * ATTRIBUTION INTEROP: `App` is not in that verifier's allowed nested
+     * Prop_Build key set, so setting this denies attribution. Same rule as
+     * `widgetRect` — `signPdf` never passes it; coordinate before it does.
+     */
+    appName?: string;
+}
+/**
+ * Adds a signature placeholder to a PDF Buffer.
+ *
+ * This contrasts with the default pdfkit-based implementation.
+ * Parsing is done using simple string operations.
+ * Adding is done with `Buffer.concat`.
+ * This allows node-signpdf to be used on any PDF and
+ * not only on a freshly created through PDFKit one.
+ */
+export declare const plainAddPlaceholder: ({ pdfBuffer, reason, contactInfo, name, location, signingTime, signatureLength, subFilter, widgetRect, appName, }: PlainAddPlaceholderInput) => Buffer;
+//# sourceMappingURL=plainAddPlaceholder.d.ts.map

package/dist/vendor/placeholder-plain/plainAddPlaceholder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plainAddPlaceholder.d.ts","sourceRoot":"","sources":["../../../src/vendor/placeholder-plain/plainAddPlaceholder.ts"],"names":[],"mappings":"AA8BA,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,GAAI,mHAWjC,wBAAwB,KAAG,MA8D7B,CAAC"}