@intactfile/engines 0.1.0

package/dist/jpeg/repair.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Scoped, honest JPEG *salvage* (docs/03 §4: "we repair the file's structure;
+ * data physically overwritten is recoverable by no software"). This is not
+ * pixel reconstruction and never invents data.
+ *
+ * Ladder of strategies, tried until one decodes:
+ *  1. strip a garbage prefix (SOI not at offset 0);
+ *  2. append a missing EOI to a truncated scan and partial-decode the rows
+ *     that survived (libjpeg fills the missing bottom grey — we say so);
+ *  3. decode as-is;
+ *  4. donor transplant — when the header tables (DQT/DHT/SOF) are destroyed
+ *     but the scan survived, splice a healthy same-camera reference's header
+ *     onto the broken scan (what commercial JPEG-Repair does; it still cannot
+ *     invent data, only reunite a valid header with real entropy data).
+ * Guaranteed fallback: if nothing decodes, extract the embedded EXIF thumbnail
+ * as an honest preview ("thumbnail only", never the full image).
+ *
+ * Whatever decodes is re-emitted as a fresh valid baseline JPEG. Outcome is
+ * success only for a clean decode; a partial/truncated salvage is reported as
+ * such.
+ */
+import type { ByteSource } from '../byte-source.js';
+import { type JpegDamageClass, type JpegDiagnosis } from './diagnose.js';
+import { type JpegEncodeOptions } from './mozjpeg-host.js';
+export type JpegRepairOutcome = 'success' | 'partial' | 'failed';
+export interface JpegRepairOptions {
+    /**
+     * A healthy JPEG from the SAME camera/model whose header (DQT/DHT/SOF) can
+     * be transplanted when the broken file's header is destroyed but its scan
+     * data survives. Dimensions and sampling must match for a correct result.
+     */
+    reference?: ByteSource;
+    /** Encoder options for the re-emitted salvage (defaults to baseline q85). */
+    encodeOptions?: JpegEncodeOptions;
+}
+export type JpegRepairStrategy = 'original' | 'strip-prefix' | 'append-eoi' | 'donor-transplant' | 'exif-thumbnail';
+export interface JpegRepairAttempt {
+    strategy: JpegRepairStrategy;
+    decoded: boolean;
+    warnings: string[];
+    error?: string;
+}
+export interface JpegRepairReport {
+    outcome: JpegRepairOutcome;
+    damageClass: JpegDamageClass;
+    /** Winning strategy, or null when nothing worked. */
+    strategy: JpegRepairStrategy | null;
+    /** Human-readable list of what was actually recovered. */
+    salvaged: string[];
+    notes: string[];
+    warnings: string[];
+    bytesIn: number;
+    bytesOut: number;
+    dimensions: {
+        width: number;
+        height: number;
+    } | null;
+    previewSource: 'salvage' | 'exif-thumbnail' | null;
+    usedReference: boolean;
+    attempts: JpegRepairAttempt[];
+}
+export interface JpegRepairResult {
+    /** Re-emitted valid JPEG of the salvaged raster (absent if none decoded). */
+    image?: Uint8Array;
+    /** A preview to show the user — the salvage itself, or the EXIF thumbnail. */
+    preview?: Uint8Array;
+    report: JpegRepairReport;
+}
+/**
+ * Build "donor head (SOI..before SOS) + broken tail (SOS..end)". Returns null
+ * when either side lacks the marker it must contribute.
+ */
+export declare function transplantHeader(reference: Uint8Array, broken: Uint8Array): Uint8Array | null;
+interface Candidate {
+    strategy: JpegRepairStrategy;
+    bytes: Uint8Array;
+}
+/**
+ * The candidate ladder, pure given the bytes, diagnosis and optional donor.
+ * Exposed for unit testing the strategy selection.
+ */
+export declare function buildRepairCandidates(bytes: Uint8Array, diagnosis: JpegDiagnosis, reference?: Uint8Array): Candidate[];
+/**
+ * Salvage a JPEG. Returns the re-emitted image (when anything decoded), a
+ * preview (the salvage or the EXIF thumbnail), and an honest report.
+ */
+export declare function repairJpeg(src: ByteSource, opts?: JpegRepairOptions): Promise<JpegRepairResult>;
+export {};
+//# sourceMappingURL=repair.d.ts.map

package/dist/jpeg/repair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair.d.ts","sourceRoot":"","sources":["../../src/jpeg/repair.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAGvB,OAAO,EAA6C,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtG,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEjE,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,iBAAiB,CAAC;CACnC;AAED,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,cAAc,GACd,YAAY,GACZ,kBAAkB,GAClB,gBAAgB,CAAC;AAErB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,WAAW,EAAE,eAAe,CAAC;IAC7B,qDAAqD;IACrD,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACpC,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrD,aAAa,EAAE,SAAS,GAAG,gBAAgB,GAAG,IAAI,CAAC;IACnD,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAoBD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAiB7F;AAED,UAAU,SAAS;IACjB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,KAAK,EAAE,UAAU,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,UAAU,EACjB,SAAS,EAAE,aAAa,EACxB,SAAS,CAAC,EAAE,UAAU,GACrB,SAAS,EAAE,CAoBb;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAoKzG"}

package/dist/jpeg/repair.js

@@ -0,0 +1,216 @@
+import { LOW_SCAN_ENTROPY, SOI_SCAN_WINDOW, diagnoseJpeg, } from './diagnose.js';
+import { extractExifThumbnail } from './exif.js';
+import { M_EOI, findSoi, scanMarkerPresence, scanMarkers } from './format.js';
+import { decodeJpeg, encodeJpeg } from './mozjpeg-host.js';
+/** True when libjpeg's stderr signals real missing/corrupt data (partial salvage). */
+function warningsIndicatePartial(warnings) {
+    return warnings.some((w) => /premature|corrupt|extraneous|bogus|out of|damaged/i.test(w));
+}
+function endsWithEoi(b) {
+    return b.length >= 2 && b[b.length - 2] === 0xff && b[b.length - 1] === M_EOI;
+}
+function ensureEoi(b) {
+    if (endsWithEoi(b))
+        return b;
+    const out = new Uint8Array(b.length + 2);
+    out.set(b);
+    out[b.length] = 0xff;
+    out[b.length + 1] = M_EOI;
+    return out;
+}
+/**
+ * Build "donor head (SOI..before SOS) + broken tail (SOS..end)". Returns null
+ * when either side lacks the marker it must contribute.
+ */
+export function transplantHeader(reference, broken) {
+    const refSoi = findSoi(reference, SOI_SCAN_WINDOW);
+    if (refSoi === -1)
+        return null;
+    const refScan = scanMarkers(reference, refSoi);
+    if (refScan.sosOffset === -1)
+        return null;
+    const donorHead = reference.subarray(refSoi, refScan.sosOffset);
+    const brSoi = findSoi(broken, SOI_SCAN_WINDOW);
+    const brStart = brSoi === -1 ? 0 : brSoi;
+    const brPres = scanMarkerPresence(broken, brStart + 2);
+    if (brPres.sosOffset === -1)
+        return null;
+    const brokenTail = broken.subarray(brPres.sosOffset);
+    const out = new Uint8Array(donorHead.length + brokenTail.length);
+    out.set(donorHead, 0);
+    out.set(brokenTail, donorHead.length);
+    return ensureEoi(out);
+}
+/**
+ * The candidate ladder, pure given the bytes, diagnosis and optional donor.
+ * Exposed for unit testing the strategy selection.
+ */
+export function buildRepairCandidates(bytes, diagnosis, reference) {
+    const candidates = [];
+    if (diagnosis.soiOffset === null)
+        return candidates;
+    const base = diagnosis.soiOffset > 0 ? bytes.subarray(diagnosis.soiOffset) : bytes;
+    const baseLabel = diagnosis.soiOffset > 0 ? 'strip-prefix' : 'original';
+    // Truncated / missing-EOI: appending EOI is strictly better, try it first.
+    if (diagnosis.hasSos && !endsWithEoi(base)) {
+        candidates.push({ strategy: 'append-eoi', bytes: ensureEoi(base) });
+    }
+    candidates.push({ strategy: baseLabel, bytes: base });
+    // Donor transplant: only meaningful when we have a reference. Put it last so
+    // an unaided decode wins when the header is actually fine.
+    if (reference) {
+        const t = transplantHeader(reference, bytes);
+        if (t)
+            candidates.push({ strategy: 'donor-transplant', bytes: t });
+    }
+    return candidates;
+}
+/**
+ * Salvage a JPEG. Returns the re-emitted image (when anything decoded), a
+ * preview (the salvage or the EXIF thumbnail), and an honest report.
+ */
+export async function repairJpeg(src, opts = {}) {
+    const diagnosis = await diagnoseJpeg(src);
+    const bytes = await src.read(0, src.size);
+    const referenceBytes = opts.reference ? await opts.reference.read(0, opts.reference.size) : undefined;
+    const notes = [...diagnosis.notes];
+    const warnings = [];
+    const salvaged = [];
+    const attempts = [];
+    const finish = (outcome, strategy, result) => ({
+        image: result.image,
+        preview: result.preview,
+        report: {
+            outcome,
+            damageClass: diagnosis.damageClass,
+            strategy,
+            salvaged,
+            notes,
+            warnings,
+            bytesIn: src.size,
+            bytesOut: result.image?.length ?? result.preview?.length ?? 0,
+            dimensions: result.dimensions,
+            previewSource: result.previewSource,
+            usedReference: strategy === 'donor-transplant',
+            attempts,
+        },
+    });
+    // Always try the EXIF thumbnail up front: it is the guaranteed fallback.
+    const exifThumb = await extractExifThumbnail(bytes);
+    if (diagnosis.damageClass === 'not-jpeg') {
+        notes.push('input is not recognizable as a JPEG; nothing to salvage');
+        if (exifThumb) {
+            salvaged.push(`recovered an embedded EXIF thumbnail (${exifThumb.length} bytes)`);
+            return finish('partial', 'exif-thumbnail', {
+                preview: exifThumb,
+                previewSource: 'exif-thumbnail',
+                dimensions: null,
+            });
+        }
+        return finish('failed', null, { previewSource: null, dimensions: null });
+    }
+    // Overwritten scan: libjpeg would happily "decode" a zeroed scan into a flat
+    // image with no warning — presenting that as a repair would be a lie (docs/03
+    // §4). Detect it and refuse to decode; the EXIF thumbnail is the only honest
+    // recovery left. A donor cannot help — the entropy data itself is gone.
+    const scanOverwritten = diagnosis.damageClass === 'marker-corruption' &&
+        diagnosis.scanEntropy !== null &&
+        diagnosis.scanEntropy < LOW_SCAN_ENTROPY;
+    if (scanOverwritten) {
+        notes.push('the scan region is zeroed/overwritten (near-zero entropy); decoding it would produce a meaningless ' +
+            'flat image, so it is not attempted — those pixels are unrecoverable by any tool');
+        if (exifThumb) {
+            salvaged.push(`recovered an embedded EXIF thumbnail (${exifThumb.length} bytes)`);
+            return finish('partial', 'exif-thumbnail', {
+                preview: exifThumb,
+                previewSource: 'exif-thumbnail',
+                dimensions: diagnosis.width && diagnosis.height ? { width: diagnosis.width, height: diagnosis.height } : null,
+            });
+        }
+        return finish('failed', null, {
+            previewSource: null,
+            dimensions: diagnosis.width && diagnosis.height ? { width: diagnosis.width, height: diagnosis.height } : null,
+        });
+    }
+    const candidates = buildRepairCandidates(bytes, diagnosis, referenceBytes);
+    let winner = null;
+    for (const candidate of candidates) {
+        const r = await decodeJpeg(candidate.bytes);
+        if (r.ok) {
+            attempts.push({ strategy: candidate.strategy, decoded: true, warnings: r.warnings });
+            winner = { strategy: candidate.strategy, image: r.image, warnings: r.warnings };
+            break;
+        }
+        attempts.push({ strategy: candidate.strategy, decoded: false, warnings: r.warnings, error: r.error });
+    }
+    if (winner) {
+        const w = winner;
+        let image;
+        try {
+            image = await encodeJpeg(w.image, opts.encodeOptions);
+        }
+        catch (e) {
+            notes.push(`decoded the raster but re-encoding failed: ${e instanceof Error ? e.message : String(e)}`);
+            // Fall through to the EXIF thumbnail / failure path below.
+            if (exifThumb) {
+                salvaged.push(`recovered an embedded EXIF thumbnail (${exifThumb.length} bytes)`);
+                return finish('partial', 'exif-thumbnail', {
+                    preview: exifThumb,
+                    previewSource: 'exif-thumbnail',
+                    dimensions: { width: w.image.width, height: w.image.height },
+                });
+            }
+            return finish('failed', null, { previewSource: null, dimensions: { width: w.image.width, height: w.image.height } });
+        }
+        warnings.push(...w.warnings);
+        const dimensions = { width: w.image.width, height: w.image.height };
+        const partial = warningsIndicatePartial(w.warnings);
+        switch (w.strategy) {
+            case 'strip-prefix':
+                salvaged.push(`stripped ${diagnosis.soiOffset} garbage byte(s) before SOI and re-emitted a valid JPEG`);
+                break;
+            case 'append-eoi':
+                salvaged.push('restored the missing EOI marker and re-emitted a valid JPEG');
+                break;
+            case 'donor-transplant':
+                salvaged.push('transplanted the DQT/DHT/SOF header from the reference photo onto the surviving scan');
+                break;
+            default:
+                salvaged.push('re-emitted a valid baseline JPEG from the decoded raster');
+        }
+        let outcome;
+        if (partial) {
+            outcome = 'partial';
+            notes.push('partial salvage: libjpeg reported missing/corrupt scan data — recovered rows are real, ' +
+                'the remainder is rendered grey because that image data is physically gone');
+        }
+        else {
+            outcome = 'success';
+        }
+        return finish(outcome, w.strategy, {
+            image,
+            preview: image,
+            previewSource: 'salvage',
+            dimensions,
+        });
+    }
+    // Nothing decoded. The EXIF thumbnail is the last honest thing we can offer.
+    if (exifThumb) {
+        notes.push('the main image could not be decoded; only the embedded EXIF thumbnail survived');
+        salvaged.push(`recovered an embedded EXIF thumbnail (${exifThumb.length} bytes)`);
+        return finish('partial', 'exif-thumbnail', {
+            preview: exifThumb,
+            previewSource: 'exif-thumbnail',
+            dimensions: null,
+        });
+    }
+    if (diagnosis.damageClass === 'header-damage' && !referenceBytes) {
+        notes.push('the header (DQT/DHT/SOF) is destroyed and no reference photo was provided; supply a same-camera JPEG to attempt a donor transplant');
+    }
+    if (diagnosis.damageClass === 'marker-corruption' && diagnosis.scanEntropy !== null && diagnosis.scanEntropy < 1.5) {
+        notes.push('the scan region appears zeroed/overwritten; the pixels are not recoverable by any tool');
+    }
+    notes.push('no strategy produced a decodable image');
+    return finish('failed', null, { previewSource: null, dimensions: null });
+}
+//# sourceMappingURL=repair.js.map

package/dist/jpeg/repair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair.js","sourceRoot":"","sources":["../../src/jpeg/repair.ts"],"names":[],"mappings":"AAsBA,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,YAAY,GAGb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,UAAU,EAA6C,MAAM,mBAAmB,CAAC;AAsDtG,sFAAsF;AACtF,SAAS,uBAAuB,CAAC,QAAkB;IACjD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oDAAoD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,WAAW,CAAC,CAAa;IAChC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC;AAChF,CAAC;AAED,SAAS,SAAS,CAAC,CAAa;IAC9B,IAAI,WAAW,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACX,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACrB,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAC1B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAqB,EAAE,MAAkB;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACnD,IAAI,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzC,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAErD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACjE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACtC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAiB,EACjB,SAAwB,EACxB,SAAsB;IAEtB,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IAEpD,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnF,MAAM,SAAS,GAAuB,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC;IAE5F,2EAA2E;IAC3E,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAEtD,6EAA6E;IAC7E,2DAA2D;IAC3D,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAe,EAAE,OAA0B,EAAE;IAC5E,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtG,MAAM,KAAK,GAAa,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,CACb,OAA0B,EAC1B,QAAmC,EACnC,MAAkJ,EAChI,EAAE,CAAC,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE;YACN,OAAO;YACP,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,QAAQ;YACR,QAAQ;YACR,KAAK;YACL,QAAQ;YACR,OAAO,EAAE,GAAG,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;YAC7D,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,aAAa,EAAE,QAAQ,KAAK,kBAAkB;YAC9C,QAAQ;SACT;KACF,CAAC,CAAC;IAEH,yEAAyE;IACzE,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAEpD,IAAI,SAAS,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACtE,IAAI,SAAS,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,yCAAyC,SAAS,CAAC,MAAM,SAAS,CAAC,CAAC;YAClF,OAAO,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE;gBACzC,OAAO,EAAE,SAAS;gBAClB,aAAa,EAAE,gBAAgB;gBAC/B,UAAU,EAAE,IAAI;aACjB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,wEAAwE;IACxE,MAAM,eAAe,GACnB,SAAS,CAAC,WAAW,KAAK,mBAAmB;QAC7C,SAAS,CAAC,WAAW,KAAK,IAAI;QAC9B,SAAS,CAAC,WAAW,GAAG,gBAAgB,CAAC;IAC3C,IAAI,eAAe,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,qGAAqG;YACnG,iFAAiF,CACpF,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,yCAAyC,SAAS,CAAC,MAAM,SAAS,CAAC,CAAC;YAClF,OAAO,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE;gBACzC,OAAO,EAAE,SAAS;gBAClB,aAAa,EAAE,gBAAgB;gBAC/B,UAAU,EAAE,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;aAC9G,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE;YAC5B,aAAa,EAAE,IAAI;YACnB,UAAU,EAAE,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;SAC9G,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAE3E,IAAI,MAAM,GAAqF,IAAI,CAAC;IACpG,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACrF,MAAM,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChF,MAAM;QACR,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACxG,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,GAAG,MAAM,CAAC;QACjB,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvG,2DAA2D;YAC3D,IAAI,SAAS,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CAAC,yCAAyC,SAAS,CAAC,MAAM,SAAS,CAAC,CAAC;gBAClF,OAAO,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE;oBACzC,OAAO,EAAE,SAAS;oBAClB,aAAa,EAAE,gBAAgB;oBAC/B,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE;iBAC7D,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvH,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,UAAU,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACpE,MAAM,OAAO,GAAG,uBAAuB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAEpD,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACnB,KAAK,cAAc;gBACjB,QAAQ,CAAC,IAAI,CAAC,YAAY,SAAS,CAAC,SAAS,yDAAyD,CAAC,CAAC;gBACxG,MAAM;YACR,KAAK,YAAY;gBACf,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;gBAC7E,MAAM;YACR,KAAK,kBAAkB;gBACrB,QAAQ,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;gBACtG,MAAM;YACR;gBACE,QAAQ,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,OAA0B,CAAC;QAC/B,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,GAAG,SAAS,CAAC;YACpB,KAAK,CAAC,IAAI,CACR,yFAAyF;gBACvF,2EAA2E,CAC9E,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;QAED,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;YACjC,KAAK;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,SAAS;YACxB,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;QAC7F,QAAQ,CAAC,IAAI,CAAC,yCAAyC,SAAS,CAAC,MAAM,SAAS,CAAC,CAAC;QAClF,OAAO,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE;YACzC,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,gBAAgB;YAC/B,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,CAAC,WAAW,KAAK,eAAe,IAAI,CAAC,cAAc,EAAE,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,oIAAoI,CAAC,CAAC;IACnJ,CAAC;IACD,IAAI,SAAS,CAAC,WAAW,KAAK,mBAAmB,IAAI,SAAS,CAAC,WAAW,KAAK,IAAI,IAAI,SAAS,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;QACnH,KAAK,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3E,CAAC"}

package/dist/node.d.ts

@@ -0,0 +1,11 @@
+import type { ByteSource } from './byte-source.js';
+/** Node-only ByteSource over an fs file handle. Kept out of the main entry so the browser bundle never touches node:fs. */
+export declare class NodeFileSource implements ByteSource {
+    private readonly handle;
+    readonly size: number;
+    private constructor();
+    static open(path: string): Promise<NodeFileSource>;
+    read(offset: number, length: number): Promise<Uint8Array>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=node.d.ts.map

package/dist/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,2HAA2H;AAC3H,qBAAa,cAAe,YAAW,UAAU;IAE7C,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM;IAFvB,OAAO;WAKM,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAMlD,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IASzD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B"}

package/dist/node.js

@@ -0,0 +1,29 @@
+import { open } from 'node:fs/promises';
+/** Node-only ByteSource over an fs file handle. Kept out of the main entry so the browser bundle never touches node:fs. */
+export class NodeFileSource {
+    handle;
+    size;
+    constructor(handle, size) {
+        this.handle = handle;
+        this.size = size;
+    }
+    static async open(path) {
+        const handle = await open(path, 'r');
+        const stat = await handle.stat();
+        return new NodeFileSource(handle, stat.size);
+    }
+    async read(offset, length) {
+        if (offset < 0 || length < 0)
+            throw new RangeError('negative offset/length');
+        if (offset >= this.size)
+            return new Uint8Array(0);
+        const len = Math.min(length, this.size - offset);
+        const buf = new Uint8Array(len);
+        const { bytesRead } = await this.handle.read(buf, 0, len, offset);
+        return bytesRead === len ? buf : buf.subarray(0, bytesRead);
+    }
+    async close() {
+        await this.handle.close();
+    }
+}
+//# sourceMappingURL=node.js.map

package/dist/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAmB,MAAM,kBAAkB,CAAC;AAGzD,2HAA2H;AAC3H,MAAM,OAAO,cAAc;IAEN;IACR;IAFX,YACmB,MAAkB,EAC1B,IAAY;QADJ,WAAM,GAAN,MAAM,CAAY;QAC1B,SAAI,GAAJ,IAAI,CAAQ;IACpB,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAY;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO,IAAI,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,MAAc;QACvC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC7E,IAAI,MAAM,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAClE,OAAO,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;CACF"}

package/dist/pdf/browser-loader.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Browser-side qpdf loader plumbing. Hand the result of
+ * `createBrowserQpdfLoader()` to `setQpdfLoader()` before calling
+ * `repairPdf()` in a browser.
+ *
+ * Two moving parts, split on purpose:
+ * - The JS host (`@neslinesli93/qpdf-wasm`, dist/qpdf.js) is a CommonJS/UMD
+ *   Emscripten artifact. We pull it in with a dynamic `import()` so bundlers
+ *   put it in its own lazy chunk, loaded only when a repair actually starts.
+ *   Vite handles the CJS entry without a shim (esbuild interop in dev,
+ *   Rollup's commonjs plugin in build), but the two disagree on where the
+ *   callable lands (`module.exports` vs a synthetic `default`, and the build
+ *   also sets `module.exports.default`), so the factory is unwrapped through
+ *   `.default` hops until something callable appears.
+ * - The wasm binary is NOT bundled. It must be served as a same-origin
+ *   static asset (apps/www copies it to /engines/qpdf/qpdf.wasm at build
+ *   time); `locateFile` points Emscripten at `baseUrl` + "qpdf.wasm".
+ *   Same-origin is a product requirement: "your file never leaves your
+ *   device" stays verifiable in the Network tab only if no third-party
+ *   host is involved.
+ */
+import type { QpdfLoader } from './qpdf-host.js';
+/** Where apps/www serves the wasm from (see apps/www/scripts/copy-engine-assets.mjs). */
+export declare const DEFAULT_QPDF_BASE_URL = "/engines/qpdf/";
+/**
+ * Build a loader for `setQpdfLoader()`. `baseUrl` is the same-origin
+ * directory the wasm is served from; trailing slash optional.
+ */
+export declare function createBrowserQpdfLoader(baseUrl?: string): () => Promise<QpdfLoader>;
+//# sourceMappingURL=browser-loader.d.ts.map

package/dist/pdf/browser-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-loader.d.ts","sourceRoot":"","sources":["../../src/pdf/browser-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAe,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE9D,yFAAyF;AACzF,eAAO,MAAM,qBAAqB,mBAAmB,CAAC;AAEtD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,MAA8B,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAa1G"}

package/dist/pdf/browser-loader.js

@@ -0,0 +1,21 @@
+/** Where apps/www serves the wasm from (see apps/www/scripts/copy-engine-assets.mjs). */
+export const DEFAULT_QPDF_BASE_URL = '/engines/qpdf/';
+/**
+ * Build a loader for `setQpdfLoader()`. `baseUrl` is the same-origin
+ * directory the wasm is served from; trailing slash optional.
+ */
+export function createBrowserQpdfLoader(baseUrl = DEFAULT_QPDF_BASE_URL) {
+    const wasmUrl = `${baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`}qpdf.wasm`;
+    return async () => {
+        const mod = await import('@neslinesli93/qpdf-wasm');
+        let factory = mod;
+        for (let hops = 0; hops < 3 && factory !== null && typeof factory !== 'function'; hops++) {
+            factory = factory.default ?? null;
+        }
+        if (typeof factory !== 'function') {
+            throw new Error('qpdf browser loader: @neslinesli93/qpdf-wasm did not resolve to an Emscripten factory');
+        }
+        return { factory: factory, locateWasm: () => wasmUrl };
+    };
+}
+//# sourceMappingURL=browser-loader.js.map

package/dist/pdf/browser-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-loader.js","sourceRoot":"","sources":["../../src/pdf/browser-loader.ts"],"names":[],"mappings":"AAuBA,yFAAyF;AACzF,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAEtD;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,qBAAqB;IAC7E,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,WAAW,CAAC;IAC9E,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,GAAG,GAAY,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC7D,IAAI,OAAO,GAAY,GAAG,CAAC;QAC3B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;YACzF,OAAO,GAAI,OAAiC,CAAC,OAAO,IAAI,IAAI,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;QAC3G,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAsB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IACxE,CAAC,CAAC;AACJ,CAAC"}

package/dist/pdf/diagnose.d.ts

@@ -0,0 +1,23 @@
+import type { ByteSource } from '../byte-source.js';
+import type { Confidence } from '../types.js';
+export type PdfDamageClass = 'none' | 'garbage-prefix' | 'broken-xref' | 'truncated' | 'not-pdf' | 'encrypted' | 'unknown';
+export interface PdfDiagnosis {
+    damageClass: PdfDamageClass;
+    confidence: Confidence;
+    notes: string[];
+    /** Offset of the %PDF- header, or null when absent. */
+    headerOffset: number | null;
+    /** Declared PDF version ("1.7"), when readable. */
+    version: string | null;
+    hasEof: boolean;
+    hasStartxref: boolean;
+    /** null = not evaluated (e.g. startxref missing). */
+    xrefValid: boolean | null;
+    encrypted: boolean;
+}
+/**
+ * Structural PDF diagnosis via light own parsing: header scan, tail scan for
+ * startxref/trailer/%%EOF, and an xref sanity spot-check. Never runs qpdf.
+ */
+export declare function diagnosePdf(src: ByteSource): Promise<PdfDiagnosis>;
+//# sourceMappingURL=diagnose.d.ts.map

package/dist/pdf/diagnose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnose.d.ts","sourceRoot":"","sources":["../../src/pdf/diagnose.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAY9C,MAAM,MAAM,cAAc,GACtB,MAAM,GACN,gBAAgB,GAChB,aAAa,GACb,WAAW,GACX,SAAS,GACT,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,cAAc,CAAC;IAC5B,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,uDAAuD;IACvD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mDAAmD;IACnD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,qDAAqD;IACrD,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,OAAO,CAAC;CACpB;AAID;;;GAGG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAsFxE"}

package/dist/pdf/diagnose.js

@@ -0,0 +1,113 @@
+import { PDF_HEADER_SCAN_WINDOW, PDF_TAIL_SCAN_WINDOW, findPdfHeader, firstInUseXrefEntry, looksLikeXrefStart, parsePdfVersion, scanPdfTail, toLatin1, } from './format.js';
+const MIN_STRUCTURAL_SIZE = 32;
+/**
+ * Structural PDF diagnosis via light own parsing: header scan, tail scan for
+ * startxref/trailer/%%EOF, and an xref sanity spot-check. Never runs qpdf.
+ */
+export async function diagnosePdf(src) {
+    const notes = [];
+    const base = {
+        notes,
+        headerOffset: null,
+        version: null,
+        hasEof: false,
+        hasStartxref: false,
+        xrefValid: null,
+        encrypted: false,
+    };
+    const done = (damageClass, confidence) => ({
+        damageClass,
+        confidence,
+        ...base,
+    });
+    if (src.size === 0) {
+        notes.push('file is empty');
+        return done('not-pdf', 'high');
+    }
+    const head = await src.read(0, Math.min(src.size, PDF_HEADER_SCAN_WINDOW));
+    const headerOffset = findPdfHeader(head);
+    if (headerOffset === -1) {
+        notes.push(`no %PDF- header in the first ${head.length} bytes`);
+        return done('not-pdf', src.size > PDF_HEADER_SCAN_WINDOW ? 'medium' : 'high');
+    }
+    base.headerOffset = headerOffset;
+    base.version = parsePdfVersion(head, headerOffset);
+    if (base.version === null)
+        notes.push('header version unreadable');
+    if (src.size - headerOffset < MIN_STRUCTURAL_SIZE) {
+        notes.push('file too small to contain any PDF structure');
+        return done('unknown', 'low');
+    }
+    const tailBase = Math.max(headerOffset, src.size - PDF_TAIL_SCAN_WINDOW);
+    const tail = await src.read(tailBase, src.size - tailBase);
+    const t = scanPdfTail(tail, tailBase);
+    base.hasEof = t.eofOffset !== -1;
+    base.hasStartxref = t.startxrefOffset !== -1 && t.startxrefTarget !== null;
+    base.encrypted = t.hasEncrypt;
+    // Xref sanity: follow startxref. Offsets are relative to the original file
+    // start, so with a garbage prefix the real position is shifted by it.
+    if (base.hasStartxref) {
+        base.xrefValid = await checkXrefAt(src, headerOffset + t.startxrefTarget, headerOffset, notes);
+        if (!base.xrefValid && headerOffset > 0) {
+            // Some writers would have produced offsets already including the prefix.
+            base.xrefValid = await checkXrefAt(src, t.startxrefTarget, 0, notes);
+        }
+    }
+    if (headerOffset > 0) {
+        notes.push(`%PDF- header at offset ${headerOffset} (garbage prefix)`);
+        if (!base.hasEof)
+            notes.push('tail structures also missing');
+        else if (base.xrefValid === false)
+            notes.push('xref also looks damaged');
+        return done('garbage-prefix', base.hasEof ? 'high' : 'medium');
+    }
+    if (!base.hasEof && !base.hasStartxref && t.trailerOffset === -1) {
+        notes.push('no %%EOF, startxref or trailer: file tail is missing');
+        return done('truncated', 'medium');
+    }
+    if (!base.hasEof) {
+        notes.push('%%EOF marker missing (file cut near the very end)');
+        return done('truncated', 'medium');
+    }
+    if (!base.hasStartxref) {
+        notes.push('%%EOF present but startxref missing or unreadable');
+        return done('broken-xref', 'medium');
+    }
+    if (base.xrefValid === false) {
+        notes.push('startxref does not lead to a readable xref table or xref stream');
+        if (base.encrypted)
+            notes.push('an /Encrypt key is present; contents may also be encrypted');
+        return done('broken-xref', 'high');
+    }
+    if (base.encrypted) {
+        notes.push('document is encrypted (/Encrypt in trailer); repair requires the password unless the user password is empty');
+        return done('encrypted', 'high');
+    }
+    return done('none', 'high');
+}
+async function checkXrefAt(src, target, headerOffset, notes) {
+    if (target < 0 || target >= src.size) {
+        notes.push(`startxref points outside the file (${target})`);
+        return false;
+    }
+    const probe = await src.read(target, Math.min(2048, src.size - target));
+    if (!looksLikeXrefStart(probe))
+        return false;
+    // For classic tables, spot-check that the first in-use entry points at an
+    // object header; a zeroed table parses but points nowhere.
+    const first = firstInUseXrefEntry(probe);
+    if (first) {
+        const at = headerOffset + first.objectOffset;
+        if (at >= src.size) {
+            notes.push('first xref entry points outside the file');
+            return false;
+        }
+        const objProbe = await src.read(at, Math.min(48, src.size - at));
+        if (!/^\s*\d{1,9}\s+\d{1,5}\s+obj\b/.test(toLatin1(objProbe))) {
+            notes.push('first in-use xref entry does not point at an object');
+            return false;
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=diagnose.js.map

package/dist/pdf/diagnose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnose.js","sourceRoot":"","sources":["../../src/pdf/diagnose.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,QAAQ,GACT,MAAM,aAAa,CAAC;AA0BrB,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAe;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAqD;QAC7D,KAAK;QACL,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,KAAK;QACb,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,IAAI;QACf,SAAS,EAAE,KAAK;KACjB,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,WAA2B,EAAE,UAAsB,EAAgB,EAAE,CAAC,CAAC;QACnF,WAAW;QACX,UAAU;QACV,GAAG,IAAI;KACR,CAAC,CAAC;IAEH,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,gCAAgC,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,GAAG,sBAAsB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACjC,IAAI,CAAC,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAEnE,IAAI,GAAG,CAAC,IAAI,GAAG,YAAY,GAAG,mBAAmB,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,GAAG,oBAAoB,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,CAAC;IAC3D,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,eAAe,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC;IAC3E,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC;IAE9B,2EAA2E;IAC3E,sEAAsE;IACtE,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,CAAC,CAAC,eAAgB,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAChG,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACxC,yEAAyE;YACzE,IAAI,CAAC,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,eAAgB,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,0BAA0B,YAAY,mBAAmB,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;aACxD,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,6GAA6G,CAAC,CAAC;QAC1H,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,MAAc,EACd,YAAoB,EACpB,KAAe;IAEf,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,sCAAsC,MAAM,GAAG,CAAC,CAAC;QAC5D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAE7C,0EAA0E;IAC1E,2DAA2D;IAC3D,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,EAAE,GAAG,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QAC7C,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC9D,KAAK,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}