@embedpdf/engine-core 3.0.0-next.15 → 3.0.0-next.16

package/dist/{builders-Cgdp_YCn.cjs → builders-DgTAj_tP.cjs}

@@ -43,6 +43,7 @@ const caps = { doc: {
 	},
 	metadata: { modify: () => "doc.metadata.modify" },
 	attachments: { modify: () => "doc.attachments.modify" },
+	outline: { modify: () => "doc.outline.modify" },
 	redact: () => "doc.redact",
 	sign: Object.assign(() => "doc.sign", { certify: () => "doc.sign.certify" })
 } };
@@ -146,7 +147,10 @@ function materializePdfPermissions(b) {
 		out.add("doc.metadata.modify");
 		out.add("doc.attachments.modify");
 	}
-	if (b.bit4 || b.bit11) out.add("doc.pages.assemble");
+	if (b.bit4 || b.bit11) {
+		out.add("doc.pages.assemble");
+		out.add("doc.outline.modify");
+	}
 	if (b.bit6) out.add("doc.annotate.modify");
 	if (b.bit4 || b.bit6 || b.bit9) {
 		out.add("doc.forms.fill");
@@ -181,4 +185,4 @@ Object.defineProperty(exports, "pdfPermissions", {
 	}
 });
 
-//# sourceMappingURL=builders-Cgdp_YCn.cjs.map
+//# sourceMappingURL=builders-DgTAj_tP.cjs.map

package/dist/builders-DgTAj_tP.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"builders-DgTAj_tP.cjs","names":[],"sources":["../src/auth/scope/builders.ts"],"sourcesContent":["import type { DocCapability, PdfBits } from './types';\n\n/**\n * Typed capability constants for customer-side JWT minting.\n *\n * The shape mirrors the dotted capability name so it reads naturally:\n *   caps.doc.text.copy()                  // \"doc.text.copy\"\n *   caps.doc.download()                   // \"doc.download\"\n *   caps.doc.download.flattened()         // \"doc.download.flattened\"\n *   caps.doc.print.high()                 // \"doc.print.high\"\n *\n * Each leaf is a function returning the literal string (as `const`) so\n * TypeScript catches typos at the call site. Wrappers like `download`\n * and `print` are `Object.assign`'d to be callable and carry child\n * properties for the refinement capabilities.\n */\nexport const caps = {\n  doc: {\n    open: () => 'doc.open' as const,\n    render: () => 'doc.render' as const,\n    text: {\n      select: () => 'doc.text.select' as const,\n      copy: () => 'doc.text.copy' as const,\n      search: () => 'doc.text.search' as const,\n    },\n    content: {\n      copy: () => 'doc.content.copy' as const,\n    },\n    download: Object.assign(() => 'doc.download' as const, {\n      flattened: () => 'doc.download.flattened' as const,\n    }),\n    print: Object.assign(() => 'doc.print' as const, {\n      high: () => 'doc.print.high' as const,\n    }),\n    pages: {\n      modify: () => 'doc.pages.modify' as const,\n      assemble: () => 'doc.pages.assemble' as const,\n    },\n    forms: {\n      read: () => 'doc.forms.read' as const,\n      fill: () => 'doc.forms.fill' as const,\n      modify: () => 'doc.forms.modify' as const,\n      import: () => 'doc.forms.import' as const,\n      script: () => 'doc.forms.script' as const,\n      submit: () => 'doc.forms.submit' as const,\n    },\n    annotate: {\n      read: () => 'doc.annotate.read' as const,\n      modify: () => 'doc.annotate.modify' as const,\n      import: () => 'doc.annotate.import' as const,\n    },\n    metadata: {\n      modify: () => 'doc.metadata.modify' as const,\n    },\n    attachments: {\n      modify: () => 'doc.attachments.modify' as const,\n    },\n    outline: {\n      modify: () => 'doc.outline.modify' as const,\n    },\n    redact: () => 'doc.redact' as const,\n    sign: Object.assign(() => 'doc.sign' as const, {\n      certify: () => 'doc.sign.certify' as const,\n    }),\n  },\n} as const;\n\n/**\n * Builder factory for collab scope filters. Each entity:action pair\n * gets a sub-object with the four filter constructors.\n *\n *   collab.annotations.create.self()           → \"annotations:create:self\"\n *   collab.annotations.create.group(\"legal\")   → \"annotations:create:group=legal\"\n *   collab.annotations.update.group(\"4\")       → \"annotations:update:group=4\"\n *   collab.annotations.delete.createdBy(\"u-7\") → \"annotations:delete:createdBy=u-7\"\n *   collab.annotations.setGroup.group(\"legal\") → \"annotations:set-group:group=legal\"\n *   collab.annotations.all.all()               → \"annotations:*:all\"  (action wildcard)\n *   collab.fields.fill.group(\"buyer\")          → \"fields:fill:group=buyer\"\n *   collab.fields.sign.group(\"buyer\")          → \"fields:sign:group=buyer\"\n *   collab.fields.all.group(\"seller\")          → \"fields:*:group=seller\"\n *\n * On create, the filter is evaluated against the caller's own identity\n * (no impersonation), so `:self` and `:all` trivially pass; `:group=X`\n * is the meaningful filter — it constrains creation to callers whose\n * default group is X.\n */\nexport const collab = {\n  annotations: {\n    create: makeFilterBuilder('annotations', 'create'),\n    update: makeFilterBuilder('annotations', 'update'),\n    delete: makeFilterBuilder('annotations', 'delete'),\n    setGroup: makeGroupFilterBuilder('annotations', 'set-group'),\n    /** Action wildcard — matches create, update, delete, and set-group with the given filter. */\n    all: makeFilterBuilder('annotations', '*'),\n  },\n  /** Form fields, by group: a field records no creator, so only `:all` and `:group=X`. */\n  fields: {\n    fill: makeGroupFilterBuilder('fields', 'fill'),\n    sign: makeGroupFilterBuilder('fields', 'sign'),\n    setGroup: makeGroupFilterBuilder('fields', 'set-group'),\n    /** Action wildcard — matches fill, sign, and set-group with the given filter. */\n    all: makeGroupFilterBuilder('fields', '*'),\n  },\n} as const;\n\ninterface FilterBuilder {\n  all(): string;\n  self(): string;\n  createdBy(userId: string): string;\n  group(groupId: string): string;\n}\n\nfunction makeFilterBuilder(entity: string, action: string): FilterBuilder {\n  return {\n    all: () => `${entity}:${action}:all`,\n    self: () => `${entity}:${action}:self`,\n    createdBy: (userId: string) => `${entity}:${action}:createdBy=${userId}`,\n    group: (groupId: string) => `${entity}:${action}:group=${groupId}`,\n  };\n}\n\n/**\n * The scopes that take only `:all` and `:group=X`: `set-group`, an\n * assignment authority rather than a per-record filter (assign-to-any vs\n * assign-to-X), and every field scope, since a field records no creator.\n * The builder exposes exactly those two — a typo at JWT mint time is caught\n * by the compiler instead of producing a JWT that fails at verify.\n */\ninterface GroupFilterBuilder {\n  all(): string;\n  group(groupId: string): string;\n}\n\nfunction makeGroupFilterBuilder(entity: string, action: string): GroupFilterBuilder {\n  return {\n    all: () => `${entity}:${action}:all`,\n    group: (groupId: string) => `${entity}:${action}:group=${groupId}`,\n  };\n}\n\n/**\n * Builder for the `pdf.permissions` virtual scope. Returns the literal\n * string; provided as a helper for parity with caps/collab in JWT\n * construction code.\n */\nexport const pdfPermissions = (): 'pdf.permissions' => 'pdf.permissions';\n\n/**\n * Materialise `pdf.permissions` into the concrete capability list it\n * would expand to under the given PDF bit configuration.\n *\n * Useful when the customer wants to start from PDF defaults and then\n * subtract specific capabilities — easier to build the JWT scope array\n * by filtering an explicit list than by composing virtual + denials.\n *\n *   const defaults = materializePdfPermissions(pdfBits);\n *   const scope = [\n *     ...defaults.filter(s => s !== 'doc.text.copy'),\n *     'doc.download',\n *   ];\n *\n * This is the one reading of the bits: the scope resolver and the\n * permission advisory both use it. It follows what Acrobat allows on a\n * file with these bits, which is broader than ISO 32000 in two places:\n * bit 4 (\"changing the document\") also allows filling in and signing, and\n * bit 5 (\"copying text and graphics\") governs taking the text out, not\n * finding or selecting it: Acrobat finds and selects text in a file that\n * forbids copying. A search's snippets reproduce the text, so they need\n * `doc.text.copy`.\n */\nexport function materializePdfPermissions(b: PdfBits): DocCapability[] {\n  const out = new Set<DocCapability>();\n\n  // Always — pdf.permissions means \"give me a working session\"\n  out.add('doc.open');\n  out.add('doc.render');\n  // Reading existing annotations and form values is unconditional —\n  // PDF bit 6 governs writes, not visibility.\n  out.add('doc.annotate.read');\n  out.add('doc.forms.read');\n  // Finding and selecting text are too: bit 5 governs taking it out.\n  out.add('doc.text.search');\n  out.add('doc.text.select');\n\n  if (b.bit5) {\n    out.add('doc.text.copy');\n    out.add('doc.content.copy');\n  }\n  if (b.bit3) out.add('doc.print');\n  if (b.bit12 && b.bit3) out.add('doc.print.high');\n  if (b.bit4) {\n    out.add('doc.pages.modify');\n    out.add('doc.redact');\n    out.add('doc.metadata.modify');\n    out.add('doc.attachments.modify');\n  }\n  // Bit 11 assembles pages, and creates outline items, even when bit 4 is\n  // clear; bit 4 includes it.\n  if (b.bit4 || b.bit11) {\n    out.add('doc.pages.assemble');\n    out.add('doc.outline.modify');\n  }\n  if (b.bit6) out.add('doc.annotate.modify');\n  // Signing a signature field is filling it in. Acrobat (and PDFium's form\n  // filler) let any of the three bits fill in.\n  if (b.bit4 || b.bit6 || b.bit9) {\n    out.add('doc.forms.fill');\n    out.add('doc.sign');\n  }\n  // Changing existing fields takes both: Acrobat keeps them in fill mode\n  // under bit 4 alone, and offers no form tools under bit 6 or 9 alone.\n  if (b.bit6 && b.bit4) out.add('doc.forms.modify');\n\n  return [...out];\n}\n"],"mappings":";;;;;;;;;;;;;;;AAgBA,MAAa,OAAO,EAClB,KAAK;CACH,YAAY;CACZ,cAAc;CACd,MAAM;EACJ,cAAc;EACd,YAAY;EACZ,cAAc;CAChB;CACA,SAAS,EACP,YAAY,mBACd;CACA,UAAU,OAAO,aAAa,gBAAyB,EACrD,iBAAiB,yBACnB,CAAC;CACD,OAAO,OAAO,aAAa,aAAsB,EAC/C,YAAY,iBACd,CAAC;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;CAClB;CACA,OAAO;EACL,YAAY;EACZ,YAAY;EACZ,cAAc;EACd,cAAc;EACd,cAAc;EACd,cAAc;CAChB;CACA,UAAU;EACR,YAAY;EACZ,cAAc;EACd,cAAc;CAChB;CACA,UAAU,EACR,cAAc,sBAChB;CACA,aAAa,EACX,cAAc,yBAChB;CACA,SAAS,EACP,cAAc,qBAChB;CACA,cAAc;CACd,MAAM,OAAO,aAAa,YAAqB,EAC7C,eAAe,mBACjB,CAAC;AACH,EACF;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,SAAS;CACpB,aAAa;EACX,QAAQ,kBAAkB,eAAe,QAAQ;EACjD,QAAQ,kBAAkB,eAAe,QAAQ;EACjD,QAAQ,kBAAkB,eAAe,QAAQ;EACjD,UAAU,uBAAuB,eAAe,WAAW;;EAE3D,KAAK,kBAAkB,eAAe,GAAG;CAC3C;;CAEA,QAAQ;EACN,MAAM,uBAAuB,UAAU,MAAM;EAC7C,MAAM,uBAAuB,UAAU,MAAM;EAC7C,UAAU,uBAAuB,UAAU,WAAW;;EAEtD,KAAK,uBAAuB,UAAU,GAAG;CAC3C;AACF;AASA,SAAS,kBAAkB,QAAgB,QAA+B;CACxE,OAAO;EACL,WAAW,GAAG,OAAO,GAAG,OAAO;EAC/B,YAAY,GAAG,OAAO,GAAG,OAAO;EAChC,YAAY,WAAmB,GAAG,OAAO,GAAG,OAAO,aAAa;EAChE,QAAQ,YAAoB,GAAG,OAAO,GAAG,OAAO,SAAS;CAC3D;AACF;AAcA,SAAS,uBAAuB,QAAgB,QAAoC;CAClF,OAAO;EACL,WAAW,GAAG,OAAO,GAAG,OAAO;EAC/B,QAAQ,YAAoB,GAAG,OAAO,GAAG,OAAO,SAAS;CAC3D;AACF;;;;;;AAOA,MAAa,uBAA0C;;;;;;;;;;;;;;;;;;;;;;;;AAyBvD,SAAgB,0BAA0B,GAA6B;CACrE,MAAM,sBAAM,IAAI,IAAmB;CAGnC,IAAI,IAAI,UAAU;CAClB,IAAI,IAAI,YAAY;CAGpB,IAAI,IAAI,mBAAmB;CAC3B,IAAI,IAAI,gBAAgB;CAExB,IAAI,IAAI,iBAAiB;CACzB,IAAI,IAAI,iBAAiB;CAEzB,IAAI,EAAE,MAAM;EACV,IAAI,IAAI,eAAe;EACvB,IAAI,IAAI,kBAAkB;CAC5B;CACA,IAAI,EAAE,MAAM,IAAI,IAAI,WAAW;CAC/B,IAAI,EAAE,SAAS,EAAE,MAAM,IAAI,IAAI,gBAAgB;CAC/C,IAAI,EAAE,MAAM;EACV,IAAI,IAAI,kBAAkB;EAC1B,IAAI,IAAI,YAAY;EACpB,IAAI,IAAI,qBAAqB;EAC7B,IAAI,IAAI,wBAAwB;CAClC;CAGA,IAAI,EAAE,QAAQ,EAAE,OAAO;EACrB,IAAI,IAAI,oBAAoB;EAC5B,IAAI,IAAI,oBAAoB;CAC9B;CACA,IAAI,EAAE,MAAM,IAAI,IAAI,qBAAqB;CAGzC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM;EAC9B,IAAI,IAAI,gBAAgB;EACxB,IAAI,IAAI,UAAU;CACpB;CAGA,IAAI,EAAE,QAAQ,EAAE,MAAM,IAAI,IAAI,kBAAkB;CAEhD,OAAO,CAAC,GAAG,GAAG;AAChB"}

package/dist/{calibrate-DJBXnhLE.cjs → calibrate-DJbi1wuK.cjs}

@@ -1,13 +1,70 @@
 const require_resolveAnnotationDraft = require("./resolveAnnotationDraft-7Ke4nV7F.cjs");
 const require_format = require("./format-Bp3QFSH1.cjs");
 const require_charmap = require("./charmap-aYlefQP9.cjs");
+//#region src/dto/PdfLinkTarget.ts
+/**
+* The action tree the engine writes for a target a write can make: one URI,
+* GoTo or Named action, as a read of it returns it. Links and outline items
+* both write their targets this way.
+*/
+function actionTreeOf(target) {
+	return {
+		root: target.kind === "uri" ? {
+			type: "uri",
+			subtype: "URI",
+			uri: target.uri,
+			isMap: false,
+			next: []
+		} : target.kind === "goto" ? {
+			type: "goto",
+			subtype: "GoTo",
+			destination: target.destination,
+			next: []
+		} : {
+			type: "named",
+			subtype: "Named",
+			name: target.name,
+			next: []
+		},
+		incomplete: false,
+		warningFlags: 0,
+		warnings: []
+	};
+}
+//#endregion
+//#region src/geometry/printSize.ts
+/**
+* The paper a print picture is sized for, in points: the larger of A4
+* (595 × 842) and Letter (612 × 792) on each side.
+*/
+const PRINT_PAPER = {
+	long: 842,
+	short: 612
+};
+/**
+* The scale (pixels per point) of a print picture of a page `size` points
+* big at `dpi` dots per inch of paper. A page that fits on the paper is
+* drawn at its own size at that DPI; a bigger one gets no more pixels than
+* it needs shrunk to fit, since the printer would throw the rest away. An
+* A0 drawing printed on office paper needs no more; printed at its own
+* size, it needs vectors (the print copy). Portrait or landscape doesn't
+* matter.
+*/
+function printScale(size, dpi) {
+	const long = Math.max(size.width, size.height);
+	const short = Math.min(size.width, size.height);
+	const fit = Math.min(1, PRINT_PAPER.long / long, PRINT_PAPER.short / short);
+	return dpi / 72 * fit;
+}
+//#endregion
 //#region src/geometry/renderSize.ts
 /**
 * The pixel size of a render: an area of `width` × `height` points, turned
 * by `rotation` (width and height swap on a quarter turn) and sized by
-* `viewport`. The local worker allocates exactly this; the cloud client
-* reports it without rendering. `InvalidArg` for a viewport that isn't
-* positive.
+* `viewport`. A `dpi` viewport sizes a print picture for its paper
+* ({@link printScale}). The local worker allocates exactly this; the cloud
+* client reports it without rendering. `InvalidArg` for a viewport that
+* isn't positive.
 */
 function renderSize(area, rotation, viewport) {
 	const swap = rotation === 90 || rotation === 270;
@@ -21,7 +78,7 @@ function renderSize(area, rotation, viewport) {
 			height: Math.max(1, Math.round(width * baseHeight / baseWidth))
 		};
 	}
-	const scale = viewport.scale ?? 1;
+	const scale = viewport.kind === "dpi" ? printScale(area, viewport.dpi) : viewport.scale ?? 1;
 	if (!Number.isFinite(scale) || scale <= 0) throw new require_format.EngineError(require_format.EngineErrorCode.InvalidArg, "render viewport scale must be positive");
 	return {
 		width: Math.max(1, Math.round(baseWidth * scale)),
@@ -327,6 +384,19 @@ function reasonMessage(reason) {
 	}
 }
 //#endregion
+//#region src/identity/OutlineItemRef.ts
+/** Build the address for an outline item from its object number. */
+function toOutlineItemRef(objectNumber) {
+	return {
+		kind: "objectNumber",
+		objectNumber
+	};
+}
+/** Structural equality for two outline item addresses. */
+function outlineItemRefsEqual(a, b) {
+	return a.kind === b.kind && a.objectNumber === b.objectNumber;
+}
+//#endregion
 //#region src/resource/BinarySource.ts
 function isBlob$1(value) {
 	return typeof Blob !== "undefined" && value instanceof Blob;
@@ -690,6 +760,13 @@ const AnnotationTransfer = bundleCodec({
 });
 //#endregion
 //#region src/dto/Attachment.ts
+/**
+* How much of a file the local engine decodes: a download of a larger file,
+* from either home, is refused with `PayloadTooLarge`, before a small stream
+* that inflates to gigabytes takes the tab down. A file's declared size
+* can't be trusted. The cloud engine has its server's limit.
+*/
+const ATTACHMENT_LIMITS = { decodedBytes: 256 * 1024 * 1024 };
 /** The ref of an attachment whose name-tree key you already hold. */
 function toAttachmentRef(key) {
 	return {
@@ -817,26 +894,6 @@ function followingReads(current, resolved) {
 	};
 	return { actions: Object.keys(actions).length > 0 ? actions : null };
 }
-/** The action tree the engine writes for a link target: one URI or GoTo action. */
-function actionTreeOf(target) {
-	return {
-		root: target.kind === "uri" ? {
-			type: "uri",
-			subtype: "URI",
-			uri: target.uri,
-			isMap: false,
-			next: []
-		} : {
-			type: "goto",
-			subtype: "GoTo",
-			destination: target.destination,
-			next: []
-		},
-		incomplete: false,
-		warningFlags: 0,
-		warnings: []
-	};
-}
 //#endregion
 //#region src/annotation/defaults.ts
 const RED = "#ff0000";
@@ -2411,6 +2468,12 @@ Object.defineProperty(exports, "ANNOTATION_RESOURCE_ROLE_NAMES", {
 		return ANNOTATION_RESOURCE_ROLE_NAMES;
 	}
 });
+Object.defineProperty(exports, "ATTACHMENT_LIMITS", {
+	enumerable: true,
+	get: function() {
+		return ATTACHMENT_LIMITS;
+	}
+});
 Object.defineProperty(exports, "AbortError", {
 	enumerable: true,
 	get: function() {
@@ -2435,12 +2498,24 @@ Object.defineProperty(exports, "METRES", {
 		return METRES;
 	}
 });
+Object.defineProperty(exports, "PRINT_PAPER", {
+	enumerable: true,
+	get: function() {
+		return PRINT_PAPER;
+	}
+});
 Object.defineProperty(exports, "SEARCH_FOLD_VERSION", {
 	enumerable: true,
 	get: function() {
 		return SEARCH_FOLD_VERSION;
 	}
 });
+Object.defineProperty(exports, "actionTreeOf", {
+	enumerable: true,
+	get: function() {
+		return actionTreeOf;
+	}
+});
 Object.defineProperty(exports, "annotationDefaultsOf", {
 	enumerable: true,
 	get: function() {
@@ -2633,6 +2708,12 @@ Object.defineProperty(exports, "measureFromRatio", {
 		return measureFromRatio;
 	}
 });
+Object.defineProperty(exports, "outlineItemRefsEqual", {
+	enumerable: true,
+	get: function() {
+		return outlineItemRefsEqual;
+	}
+});
 Object.defineProperty(exports, "pageAnnotationDraftOf", {
 	enumerable: true,
 	get: function() {
@@ -2813,6 +2894,12 @@ Object.defineProperty(exports, "pdfRectOf", {
 		return pdfRectOf;
 	}
 });
+Object.defineProperty(exports, "printScale", {
+	enumerable: true,
+	get: function() {
+		return printScale;
+	}
+});
 Object.defineProperty(exports, "renderAreaTransform", {
 	enumerable: true,
 	get: function() {
@@ -2909,6 +2996,12 @@ Object.defineProperty(exports, "toOriginalRange", {
 		return toOriginalRange;
 	}
 });
+Object.defineProperty(exports, "toOutlineItemRef", {
+	enumerable: true,
+	get: function() {
+		return toOutlineItemRef;
+	}
+});
 Object.defineProperty(exports, "withFileFromResource", {
 	enumerable: true,
 	get: function() {
@@ -2916,4 +3009,4 @@ Object.defineProperty(exports, "withFileFromResource", {
 	}
 });
 
-//# sourceMappingURL=calibrate-DJBXnhLE.cjs.map
+//# sourceMappingURL=calibrate-DJbi1wuK.cjs.map