@intactfile/engines 0.1.0

package/dist/pdf/format.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Low-level PDF byte helpers shared by diagnosis and repair. Pure functions,
+ * no dependency on qpdf.
+ */
+/** How far into the file we look for the %PDF- header (spec says 1024; we are tolerant). */
+export declare const PDF_HEADER_SCAN_WINDOW: number;
+/** How much of the tail we scan for startxref / trailer / %%EOF. */
+export declare const PDF_TAIL_SCAN_WINDOW: number;
+/**
+ * Lossless byte-per-char decode so offsets in the string equal byte offsets.
+ * Deliberately not TextDecoder('latin1'): per WHATWG that is windows-1252,
+ * which remaps 0x80-0x9F and breaks binary round-trips.
+ */
+export declare function toLatin1(bytes: Uint8Array): string;
+export declare function fromLatin1(text: string): Uint8Array;
+export declare function indexOfBytes(haystack: Uint8Array, needle: string, from?: number): number;
+export declare function lastIndexOfBytes(haystack: Uint8Array, needle: string): number;
+/** Position of '%PDF-' within the window, or -1. */
+export declare function findPdfHeader(window: Uint8Array): number;
+/** "1.7" from a window positioned at the %PDF- header, or null. */
+export declare function parsePdfVersion(window: Uint8Array, headerOffset: number): string | null;
+export interface PdfTailInfo {
+    /** Absolute offset of the last %%EOF marker, or -1. */
+    eofOffset: number;
+    /** Absolute offset of the last `startxref` keyword, or -1. */
+    startxrefOffset: number;
+    /** The number following `startxref` (an offset into the file), or null. */
+    startxrefTarget: number | null;
+    /** Absolute offset of the last `trailer` keyword, or -1. */
+    trailerOffset: number;
+    /** A `/Encrypt` key appears in the tail (trailer or xref stream dict). */
+    hasEncrypt: boolean;
+}
+/** Scan a tail window (last bytes of the file) for the closing PDF structures. */
+export declare function scanPdfTail(tail: Uint8Array, tailBase: number): PdfTailInfo;
+/** True when the bytes at an xref target look like a classic xref table or an xref stream object. */
+export declare function looksLikeXrefStart(probe: Uint8Array): boolean;
+/** Parse "OFFSET 00000 n" of the first in-use entry of a classic xref table, or null. */
+export declare function firstInUseXrefEntry(probe: Uint8Array): {
+    objectOffset: number;
+} | null;
+export interface ScannedPdfObject {
+    num: number;
+    gen: number;
+    /** Byte offset of the object number token. */
+    offset: number;
+    /** Offset just past the matching `endobj`, when present. */
+    end: number | undefined;
+}
+/**
+ * Forward scan for `N G obj ... endobj` object frames. Used by diagnosis
+ * spot-checks and by the xref rebuild pre-pass. Objects hidden inside object
+ * streams are invisible to this scan (documented limitation).
+ */
+export declare function scanIndirectObjects(bytes: Uint8Array): ScannedPdfObject[];
+/** Extract the `/Root N G R` reference from a trailer-ish region of text. */
+export declare function findRootRef(text: string): {
+    num: number;
+    gen: number;
+} | null;
+//# sourceMappingURL=format.d.ts.map

package/dist/pdf/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/pdf/format.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,4FAA4F;AAC5F,eAAO,MAAM,sBAAsB,QAAY,CAAC;AAChD,oEAAoE;AACpE,eAAO,MAAM,oBAAoB,QAAY,CAAC;AAE9C;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAOlD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAInD;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,SAAI,GAAG,MAAM,CAQnF;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAQ7E;AAED,oDAAoD;AACpD,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAExD;AAED,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGvF;AAED,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,eAAe,EAAE,MAAM,CAAC;IACxB,2EAA2E;IAC3E,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,4DAA4D;IAC5D,aAAa,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,kFAAkF;AAClF,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,CAiB3E;AAED,qGAAqG;AACrG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAQ7D;AAED,yFAAyF;AACzF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAatF;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,gBAAgB,EAAE,CAmBzE;AAgBD,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAG7E"}

package/dist/pdf/format.js

@@ -0,0 +1,150 @@
+/**
+ * Low-level PDF byte helpers shared by diagnosis and repair. Pure functions,
+ * no dependency on qpdf.
+ */
+/** How far into the file we look for the %PDF- header (spec says 1024; we are tolerant). */
+export const PDF_HEADER_SCAN_WINDOW = 64 * 1024;
+/** How much of the tail we scan for startxref / trailer / %%EOF. */
+export const PDF_TAIL_SCAN_WINDOW = 32 * 1024;
+/**
+ * Lossless byte-per-char decode so offsets in the string equal byte offsets.
+ * Deliberately not TextDecoder('latin1'): per WHATWG that is windows-1252,
+ * which remaps 0x80-0x9F and breaks binary round-trips.
+ */
+export function toLatin1(bytes) {
+    let out = '';
+    const CHUNK = 0x8000;
+    for (let i = 0; i < bytes.length; i += CHUNK) {
+        out += String.fromCharCode(...bytes.subarray(i, i + CHUNK));
+    }
+    return out;
+}
+export function fromLatin1(text) {
+    const out = new Uint8Array(text.length);
+    for (let i = 0; i < text.length; i++)
+        out[i] = text.charCodeAt(i) & 0xff;
+    return out;
+}
+export function indexOfBytes(haystack, needle, from = 0) {
+    outer: for (let i = from; i + needle.length <= haystack.length; i++) {
+        for (let j = 0; j < needle.length; j++) {
+            if (haystack[i + j] !== needle.charCodeAt(j))
+                continue outer;
+        }
+        return i;
+    }
+    return -1;
+}
+export function lastIndexOfBytes(haystack, needle) {
+    outer: for (let i = haystack.length - needle.length; i >= 0; i--) {
+        for (let j = 0; j < needle.length; j++) {
+            if (haystack[i + j] !== needle.charCodeAt(j))
+                continue outer;
+        }
+        return i;
+    }
+    return -1;
+}
+/** Position of '%PDF-' within the window, or -1. */
+export function findPdfHeader(window) {
+    return indexOfBytes(window, '%PDF-');
+}
+/** "1.7" from a window positioned at the %PDF- header, or null. */
+export function parsePdfVersion(window, headerOffset) {
+    const m = /^%PDF-(\d+\.\d+)/.exec(toLatin1(window.subarray(headerOffset, headerOffset + 16)));
+    return m ? m[1] : null;
+}
+/** Scan a tail window (last bytes of the file) for the closing PDF structures. */
+export function scanPdfTail(tail, tailBase) {
+    const text = toLatin1(tail);
+    const eof = text.lastIndexOf('%%EOF');
+    const sx = text.lastIndexOf('startxref');
+    let target = null;
+    if (sx !== -1) {
+        const m = /^startxref[ \t]*(?:\r\n|\r|\n)[ \t]*(\d{1,15})/.exec(text.slice(sx, sx + 64));
+        if (m)
+            target = Number(m[1]);
+    }
+    const trailer = text.lastIndexOf('trailer');
+    return {
+        eofOffset: eof === -1 ? -1 : tailBase + eof,
+        startxrefOffset: sx === -1 ? -1 : tailBase + sx,
+        startxrefTarget: target,
+        trailerOffset: trailer === -1 ? -1 : tailBase + trailer,
+        hasEncrypt: /\/Encrypt[^a-zA-Z]/.test(text),
+    };
+}
+/** True when the bytes at an xref target look like a classic xref table or an xref stream object. */
+export function looksLikeXrefStart(probe) {
+    const text = toLatin1(probe).replace(/^[\s\0]*/, '');
+    if (text.startsWith('xref')) {
+        // Classic table: "xref" then "start count" then 20-byte entries.
+        return /^xref\s+\d+\s+\d+\s/.test(text);
+    }
+    // Cross-reference stream: "N G obj".
+    return /^\d{1,9}\s+\d{1,5}\s+obj\b/.test(text);
+}
+/** Parse "OFFSET 00000 n" of the first in-use entry of a classic xref table, or null. */
+export function firstInUseXrefEntry(probe) {
+    const text = toLatin1(probe);
+    const m = /^xref\s+\d+\s+\d+\s*(?:\r\n|\r|\n)/.exec(text);
+    if (!m)
+        return null;
+    const entryRe = /(\d{10})\s(\d{5})\s([fn])/g;
+    entryRe.lastIndex = m[0].length;
+    let e;
+    while ((e = entryRe.exec(text)) !== null) {
+        if (e[3] === 'n')
+            return { objectOffset: Number(e[1]) };
+        // Only walk a handful of entries; this is a spot check.
+        if (entryRe.lastIndex > m[0].length + 20 * 32)
+            break;
+    }
+    return null;
+}
+/**
+ * Forward scan for `N G obj ... endobj` object frames. Used by diagnosis
+ * spot-checks and by the xref rebuild pre-pass. Objects hidden inside object
+ * streams are invisible to this scan (documented limitation).
+ */
+export function scanIndirectObjects(bytes) {
+    const text = toLatin1(bytes);
+    const re = /(?:^|[\r\n \t>])(\d{1,9})[ \t]+(\d{1,5})[ \t]+obj\b/g;
+    const objects = [];
+    let m;
+    while ((m = re.exec(text)) !== null) {
+        const lead = /^\d/.test(m[0]) ? 0 : 1;
+        const offset = m.index + lead;
+        objects.push({ num: Number(m[1]), gen: Number(m[2]), offset, end: undefined });
+        // If the object carries a stream, jump past `endstream` so binary stream
+        // bytes cannot fake object headers.
+        const bodyStart = re.lastIndex;
+        const endobj = findObjectEnd(text, bodyStart);
+        if (endobj !== undefined) {
+            objects[objects.length - 1].end = endobj;
+            re.lastIndex = endobj;
+        }
+    }
+    return objects;
+}
+function findObjectEnd(text, bodyStart) {
+    const streamAt = text.indexOf('stream', bodyStart);
+    const endobjAt = text.indexOf('endobj', bodyStart);
+    if (endobjAt === -1)
+        return undefined;
+    if (streamAt !== -1 && streamAt < endobjAt && text.slice(streamAt - 3, streamAt) !== 'end') {
+        // Stream body: skip to endstream, then require endobj after it.
+        const endstream = text.indexOf('endstream', streamAt);
+        if (endstream === -1)
+            return undefined;
+        const after = text.indexOf('endobj', endstream);
+        return after === -1 ? undefined : after + 'endobj'.length;
+    }
+    return endobjAt + 'endobj'.length;
+}
+/** Extract the `/Root N G R` reference from a trailer-ish region of text. */
+export function findRootRef(text) {
+    const m = /\/Root[\s\0]+(\d{1,9})[\s\0]+(\d{1,5})[\s\0]+R\b/.exec(text);
+    return m ? { num: Number(m[1]), gen: Number(m[2]) } : null;
+}
+//# sourceMappingURL=format.js.map

package/dist/pdf/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/pdf/format.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,4FAA4F;AAC5F,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,oEAAoE;AACpE,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAiB;IACxC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,MAAM,KAAK,GAAG,MAAM,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;QAC7C,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACzE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAoB,EAAE,MAAc,EAAE,IAAI,GAAG,CAAC;IACzE,KAAK,EAAE,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,SAAS,KAAK,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAoB,EAAE,MAAc;IACnE,KAAK,EAAE,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACjE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,IAAI,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,SAAS,KAAK,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,aAAa,CAAC,MAAkB;IAC9C,OAAO,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,MAAkB,EAAE,YAAoB;IACtE,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9F,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1B,CAAC;AAeD,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,QAAgB;IAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC;YAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC5C,OAAO;QACL,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG;QAC3C,eAAe,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,EAAE;QAC/C,eAAe,EAAE,MAAM;QACvB,aAAa,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,OAAO;QACvD,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,iEAAiE;QACjE,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IACD,qCAAqC;IACrC,OAAO,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,OAAO,GAAG,4BAA4B,CAAC;IAC7C,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,wDAAwD;QACxD,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE;YAAE,MAAM;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,sDAAsD,CAAC;IAClE,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/E,yEAAyE;QACzE,oCAAoC;QACpC,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC;QAC/B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,GAAG,MAAM,CAAC;YAC1C,EAAE,CAAC,SAAS,GAAG,MAAM,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,SAAiB;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAC;QAC3F,gEAAgE;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,SAAS,KAAK,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAChD,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC5D,CAAC;IACD,OAAO,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;AACpC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,CAAC,GAAG,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC"}

package/dist/pdf/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * PDF engine subpath export (`@intactfile/engines/pdf`). Kept out of the root
+ * export so browser bundles that never repair PDFs never see the qpdf wasm
+ * dependency; even here, the wasm is only loaded on the first repairPdf call.
+ */
+export { diagnosePdf } from './diagnose.js';
+export type { PdfDiagnosis, PdfDamageClass } from './diagnose.js';
+export { repairPdf, qpdfArgLadder, buildRepairCandidates } from './repair.js';
+export type { PdfRepairReport, PdfRepairAttempt, PdfRepairOutcome, PdfVerification, RepairCandidate, } from './repair.js';
+export { rebuildXrefSkeleton } from './rebuild.js';
+export type { XrefRebuildResult } from './rebuild.js';
+export { runQpdf, setQpdfLoader, resetQpdfHost } from './qpdf-host.js';
+export type { QpdfRunResult, QpdfRunSpec, QpdfLoader, QpdfFactory } from './qpdf-host.js';
+export { createBrowserQpdfLoader, DEFAULT_QPDF_BASE_URL } from './browser-loader.js';
+export { findPdfHeader, scanPdfTail, scanIndirectObjects, toLatin1, fromLatin1, } from './format.js';
+export type { PdfTailInfo, ScannedPdfObject } from './format.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/pdf/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/pdf/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC9E,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACvE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC1F,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EACL,aAAa,EACb,WAAW,EACX,mBAAmB,EACnB,QAAQ,EACR,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/pdf/index.js

@@ -0,0 +1,12 @@
+/**
+ * PDF engine subpath export (`@intactfile/engines/pdf`). Kept out of the root
+ * export so browser bundles that never repair PDFs never see the qpdf wasm
+ * dependency; even here, the wasm is only loaded on the first repairPdf call.
+ */
+export { diagnosePdf } from './diagnose.js';
+export { repairPdf, qpdfArgLadder, buildRepairCandidates } from './repair.js';
+export { rebuildXrefSkeleton } from './rebuild.js';
+export { runQpdf, setQpdfLoader, resetQpdfHost } from './qpdf-host.js';
+export { createBrowserQpdfLoader, DEFAULT_QPDF_BASE_URL } from './browser-loader.js';
+export { findPdfHeader, scanPdfTail, scanIndirectObjects, toLatin1, fromLatin1, } from './format.js';
+//# sourceMappingURL=index.js.map

package/dist/pdf/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/pdf/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAQ9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEvE,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACrF,OAAO,EACL,aAAa,EACb,WAAW,EACX,mBAAmB,EACnB,QAAQ,EACR,UAAU,GACX,MAAM,aAAa,CAAC"}

package/dist/pdf/qpdf-host.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Isolated host for the qpdf wasm build (@neslinesli93/qpdf-wasm, qpdf 12.2.0,
+ * ~1.3 MB wasm). All Emscripten plumbing lives here; nothing else in the
+ * package touches the dependency, and the module is only loaded on first use.
+ *
+ * Loading is injectable: in Node the default loader resolves the CJS factory
+ * and the .wasm file from node_modules; a browser host calls setQpdfLoader()
+ * with its own factory/wasm URL (e.g. served from R2) before using repairPdf.
+ *
+ * Known build quirks this host works around or documents:
+ * - INCOMING_MODULE_JS_API is restricted: print/printErr hooks are ignored.
+ *   stdout/stderr are captured via `preRun` + `FS.init` character callbacks.
+ * - The build's `quit_` sets `process.exitCode` in Node; we save/restore it
+ *   around every callMain.
+ * - libqpdf was compiled without exception catching (only the CLI translation
+ *   unit gets it), so qpdf's own damaged-file recovery (`reconstruct_xref`)
+ *   is dead-stripped from the wasm: any structural error is fatal (exit 2)
+ *   instead of triggering reconstruction. The TS pre-pass in rebuild.ts
+ *   compensates. A future in-house Emscripten build (see docs/14-tech-bom.md)
+ *   restores native recovery.
+ */
+export interface QpdfRunResult {
+    exitCode: number;
+    stdout: string[];
+    stderr: string[];
+    /** Contents of requested output paths that qpdf actually produced. */
+    outputs: Map<string, Uint8Array>;
+}
+export interface QpdfRunSpec {
+    /** Files written into the wasm FS before the run (absolute paths like /in.pdf). */
+    inputs: Record<string, Uint8Array>;
+    /** CLI arguments, excluding argv[0]. */
+    args: string[];
+    /** Output paths to read back after the run (missing ones are skipped). */
+    readBack?: string[];
+}
+interface EmscriptenFs {
+    init(input: (() => number | null) | null, output: ((charCode: number | null) => void) | null, error: ((charCode: number | null) => void) | null): void;
+    writeFile(path: string, data: Uint8Array): void;
+    readFile(path: string): Uint8Array;
+    unlink(path: string): void;
+}
+interface QpdfInstance {
+    callMain(args: string[]): number;
+    FS: EmscriptenFs;
+}
+export type QpdfFactory = (config: Record<string, unknown>) => Promise<QpdfInstance>;
+export interface QpdfLoader {
+    factory: QpdfFactory;
+    /** Absolute path or URL of qpdf.wasm handed to Emscripten's locateFile. */
+    locateWasm: () => string;
+}
+/** Inject how the qpdf factory and wasm binary are obtained (browser hosts). */
+export declare function setQpdfLoader(load: () => Promise<QpdfLoader>): void;
+/** Drop the cached loader (tests). */
+export declare function resetQpdfHost(): void;
+/**
+ * Run the qpdf CLI once inside the wasm sandbox. Every run gets a fresh
+ * instance: reusing one across many callMain invocations eventually corrupts
+ * the runtime of this build (indirect-call signature mismatch after repeated
+ * error exits), and a fresh MEMFS guarantees no state bleeds between files.
+ * Runs are serialized to bound memory use.
+ */
+export declare function runQpdf(spec: QpdfRunSpec): Promise<QpdfRunResult>;
+export {};
+//# sourceMappingURL=qpdf-host.d.ts.map

package/dist/pdf/qpdf-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qpdf-host.d.ts","sourceRoot":"","sources":["../../src/pdf/qpdf-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,sEAAsE;IACtE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,WAAW;IAC1B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnC,wCAAwC;IACxC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,UAAU,YAAY;IACpB,IAAI,CACF,KAAK,EAAE,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,EACnC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,GAAG,IAAI,EAClD,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,GAAG,IAAI,GAChD,IAAI,CAAC;IACR,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC;IACnC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,UAAU,YAAY;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACjC,EAAE,EAAE,YAAY,CAAC;CAClB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;AAErF,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,WAAW,CAAC;IACrB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,MAAM,CAAC;CAC1B;AAKD,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAGnE;AAED,sCAAsC;AACtC,wBAAgB,aAAa,IAAI,IAAI,CAEpC;AA4ED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAKjE"}

package/dist/pdf/qpdf-host.js

@@ -0,0 +1,149 @@
+/**
+ * Isolated host for the qpdf wasm build (@neslinesli93/qpdf-wasm, qpdf 12.2.0,
+ * ~1.3 MB wasm). All Emscripten plumbing lives here; nothing else in the
+ * package touches the dependency, and the module is only loaded on first use.
+ *
+ * Loading is injectable: in Node the default loader resolves the CJS factory
+ * and the .wasm file from node_modules; a browser host calls setQpdfLoader()
+ * with its own factory/wasm URL (e.g. served from R2) before using repairPdf.
+ *
+ * Known build quirks this host works around or documents:
+ * - INCOMING_MODULE_JS_API is restricted: print/printErr hooks are ignored.
+ *   stdout/stderr are captured via `preRun` + `FS.init` character callbacks.
+ * - The build's `quit_` sets `process.exitCode` in Node; we save/restore it
+ *   around every callMain.
+ * - libqpdf was compiled without exception catching (only the CLI translation
+ *   unit gets it), so qpdf's own damaged-file recovery (`reconstruct_xref`)
+ *   is dead-stripped from the wasm: any structural error is fatal (exit 2)
+ *   instead of triggering reconstruction. The TS pre-pass in rebuild.ts
+ *   compensates. A future in-house Emscripten build (see docs/14-tech-bom.md)
+ *   restores native recovery.
+ */
+let loaderOverride = null;
+let loaderPromise = null;
+/** Inject how the qpdf factory and wasm binary are obtained (browser hosts). */
+export function setQpdfLoader(load) {
+    loaderOverride = load;
+    loaderPromise = null;
+}
+/** Drop the cached loader (tests). */
+export function resetQpdfHost() {
+    loaderPromise = null;
+}
+async function defaultNodeLoader() {
+    const isNode = typeof process !== 'undefined' && !!process.versions?.node;
+    if (!isNode) {
+        throw new Error('qpdf host: no loader configured. In the browser, call setQpdfLoader() with the qpdf-wasm factory and a wasm URL before repairing PDFs.');
+    }
+    const { createRequire } = await import('node:module');
+    const require = createRequire(import.meta.url);
+    const factory = require('@neslinesli93/qpdf-wasm');
+    const wasmPath = require.resolve('@neslinesli93/qpdf-wasm/dist/qpdf.wasm');
+    return { factory, locateWasm: () => wasmPath };
+}
+let runChain = Promise.resolve();
+function makeLineSink(push) {
+    let buf = [];
+    const flushBuf = () => {
+        if (buf.length > 0) {
+            push()(String.fromCharCode(...buf));
+            buf = [];
+        }
+    };
+    const fn = (c) => {
+        if (c === null || c === 10)
+            flushBuf();
+        else
+            buf.push(c & 0xff);
+    };
+    fn.flush = flushBuf;
+    return fn;
+}
+async function createInstance() {
+    loaderPromise ??= (loaderOverride ?? defaultNodeLoader)().catch((e) => {
+        loaderPromise = null;
+        throw e;
+    });
+    const { factory, locateWasm } = await loaderPromise;
+    let onOut = () => { };
+    let onErr = () => { };
+    const outSink = makeLineSink(() => onOut);
+    const errSink = makeLineSink(() => onErr);
+    // The Emscripten factory mutates and resolves with the config object itself,
+    // so `config.FS` is available by the time preRun callbacks execute.
+    const config = {
+        locateFile: () => locateWasm(),
+        preRun: [
+            () => {
+                config.FS?.init(() => null, outSink, errSink);
+            },
+        ],
+    };
+    const qpdf = (await factory(config));
+    return {
+        qpdf,
+        setSinks(out, err) {
+            onOut = out;
+            onErr = err;
+        },
+        flush() {
+            outSink.flush();
+            errSink.flush();
+        },
+    };
+}
+/**
+ * Run the qpdf CLI once inside the wasm sandbox. Every run gets a fresh
+ * instance: reusing one across many callMain invocations eventually corrupts
+ * the runtime of this build (indirect-call signature mismatch after repeated
+ * error exits), and a fresh MEMFS guarantees no state bleeds between files.
+ * Runs are serialized to bound memory use.
+ */
+export function runQpdf(spec) {
+    const run = runChain.then(() => runQpdfExclusive(spec));
+    // Keep the chain alive even when a run rejects.
+    runChain = run.catch(() => undefined);
+    return run;
+}
+async function runQpdfExclusive(spec) {
+    const host = await createInstance();
+    const stdout = [];
+    const stderr = [];
+    host.setSinks((l) => stdout.push(l), (l) => stderr.push(l));
+    const paths = new Set([...Object.keys(spec.inputs), ...(spec.readBack ?? [])]);
+    for (const [path, data] of Object.entries(spec.inputs)) {
+        host.qpdf.FS.writeFile(path, data);
+    }
+    const isNode = typeof process !== 'undefined' && !!process.versions?.node;
+    const savedExitCode = isNode ? process.exitCode : undefined;
+    let exitCode;
+    try {
+        // Copy: Emscripten's callMain mutates the array (unshifts argv[0]).
+        exitCode = host.qpdf.callMain([...spec.args]);
+    }
+    finally {
+        if (isNode)
+            process.exitCode = savedExitCode;
+        host.flush();
+        host.setSinks(() => { }, () => { });
+    }
+    const outputs = new Map();
+    for (const path of spec.readBack ?? []) {
+        try {
+            outputs.set(path, host.qpdf.FS.readFile(path));
+        }
+        catch {
+            // qpdf did not produce this output; reflected by its absence.
+        }
+    }
+    for (const path of paths) {
+        try {
+            host.qpdf.FS.unlink(path);
+        }
+        catch {
+            // Already absent.
+        }
+    }
+    return { exitCode, stdout, stderr, outputs };
+}
+//# sourceMappingURL=qpdf-host.js.map

package/dist/pdf/qpdf-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"qpdf-host.js","sourceRoot":"","sources":["../../src/pdf/qpdf-host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AA2CH,IAAI,cAAc,GAAuC,IAAI,CAAC;AAC9D,IAAI,aAAa,GAA+B,IAAI,CAAC;AAErD,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,IAA+B;IAC3D,cAAc,GAAG,IAAI,CAAC;IACtB,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,aAAa;IAC3B,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,MAAM,MAAM,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;IAC1E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,wIAAwI,CACzI,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,yBAAyB,CAAgB,CAAC;IAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,wCAAwC,CAAW,CAAC;IACrF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;AACjD,CAAC;AAQD,IAAI,QAAQ,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;AAEnD,SAAS,YAAY,CAAC,IAAkC;IACtD,IAAI,GAAG,GAAa,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,IAAI,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACpC,GAAG,GAAG,EAAE,CAAC;QACX,CAAC;IACH,CAAC,CAAC;IACF,MAAM,EAAE,GAAG,CAAC,CAAgB,EAAQ,EAAE;QACpC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,QAAQ,EAAE,CAAC;;YAClC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC;IACD,EAAuC,CAAC,KAAK,GAAG,QAAQ,CAAC;IAC1D,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,cAAc;IAC3B,aAAa,KAAK,CAAC,cAAc,IAAI,iBAAiB,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;QAC7E,aAAa,GAAG,IAAI,CAAC;QACrB,MAAM,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;IACH,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,aAAa,CAAC;IAEpD,IAAI,KAAK,GAA2B,GAAG,EAAE,GAAE,CAAC,CAAC;IAC7C,IAAI,KAAK,GAA2B,GAAG,EAAE,GAAE,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAE1C,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,MAAM,GAA4B;QACtC,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;QAC9B,MAAM,EAAE;YACN,GAAG,EAAE;gBACF,MAAgC,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3E,CAAC;SACF;KACF,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAiB,CAAC;IACrD,OAAO;QACL,IAAI;QACJ,QAAQ,CAAC,GAAG,EAAE,GAAG;YACf,KAAK,GAAG,GAAG,CAAC;YACZ,KAAK,GAAG,GAAG,CAAC;QACd,CAAC;QACD,KAAK;YACF,OAA4C,CAAC,KAAK,EAAE,CAAC;YACrD,OAA4C,CAAC,KAAK,EAAE,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,IAAiB;IACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,gDAAgD;IAChD,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAiB;IAC/C,MAAM,IAAI,GAAG,MAAM,cAAc,EAAE,CAAC;IAEpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,QAAQ,CACX,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EACrB,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CACtB,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;IAC1E,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,oEAAoE;QACpE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,MAAM;YAAE,OAAO,CAAC,QAAQ,GAAG,aAAa,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,CACX,GAAG,EAAE,GAAE,CAAC,EACR,GAAG,EAAE,GAAE,CAAC,CACT,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;QAChE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC"}

package/dist/pdf/rebuild.d.ts

@@ -0,0 +1,32 @@
+export interface XrefRebuildResult {
+    bytes: Uint8Array;
+    /** Complete `N G obj ... endobj` frames found and indexed. */
+    objectsIndexed: number;
+    /** Objects whose `endobj` never arrives (cut off by truncation); dropped. */
+    objectsDropped: number;
+    /** Object numbers missing from 1..maxObjectNumber (holes usually mean lost data). */
+    missingNumbers: number[];
+    /** Where the /Root reference came from. */
+    rootSource: 'trailer' | 'catalog-scan';
+    notes: string[];
+}
+/**
+ * Pre-pass for files whose xref/trailer is unusable: index every complete
+ * `N G obj ... endobj` frame with a forward scan and append a fresh classic
+ * xref table + trailer + startxref + %%EOF. The result is fed to qpdf, which
+ * re-parses, validates and rewrites every object properly.
+ *
+ * This mirrors what `qpdf` itself does natively when it reconstructs a
+ * damaged file; the community wasm builds ship with that recovery path
+ * compiled out (see qpdf-host.ts), so we rebuild the skeleton ourselves.
+ *
+ * Limitations (honest): objects packed inside object streams are invisible to
+ * the scan (their frames live compressed inside another object), and content
+ * physically truncated away is gone — callers must not report full success
+ * for truncated inputs.
+ *
+ * Returns null when there is nothing to rebuild from (no complete objects or
+ * no locatable document catalog).
+ */
+export declare function rebuildXrefSkeleton(bytes: Uint8Array): XrefRebuildResult | null;
+//# sourceMappingURL=rebuild.d.ts.map

package/dist/pdf/rebuild.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rebuild.d.ts","sourceRoot":"","sources":["../../src/pdf/rebuild.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,CAAC;IAClB,8DAA8D;IAC9D,cAAc,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,cAAc,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,2CAA2C;IAC3C,UAAU,EAAE,SAAS,GAAG,cAAc,CAAC;IACvC,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,iBAAiB,GAAG,IAAI,CAoE/E"}

package/dist/pdf/rebuild.js

@@ -0,0 +1,90 @@
+import { findRootRef, fromLatin1, scanIndirectObjects, toLatin1 } from './format.js';
+/**
+ * Pre-pass for files whose xref/trailer is unusable: index every complete
+ * `N G obj ... endobj` frame with a forward scan and append a fresh classic
+ * xref table + trailer + startxref + %%EOF. The result is fed to qpdf, which
+ * re-parses, validates and rewrites every object properly.
+ *
+ * This mirrors what `qpdf` itself does natively when it reconstructs a
+ * damaged file; the community wasm builds ship with that recovery path
+ * compiled out (see qpdf-host.ts), so we rebuild the skeleton ourselves.
+ *
+ * Limitations (honest): objects packed inside object streams are invisible to
+ * the scan (their frames live compressed inside another object), and content
+ * physically truncated away is gone — callers must not report full success
+ * for truncated inputs.
+ *
+ * Returns null when there is nothing to rebuild from (no complete objects or
+ * no locatable document catalog).
+ */
+export function rebuildXrefSkeleton(bytes) {
+    const notes = [];
+    const objects = scanIndirectObjects(bytes);
+    const complete = objects.filter((o) => o.end !== undefined);
+    const dropped = objects.length - complete.length;
+    if (dropped > 0)
+        notes.push(`${dropped} incomplete object frame(s) dropped (missing endobj)`);
+    if (complete.length === 0)
+        return null;
+    // Last definition of an object number wins (incremental updates).
+    const byNum = new Map();
+    const text = toLatin1(bytes);
+    for (const o of complete) {
+        byNum.set(o.num, { gen: o.gen, offset: o.offset, body: text.slice(o.offset, o.end) });
+    }
+    // Prefer the /Root from a surviving trailer; fall back to scanning for the
+    // document catalog.
+    let root = null;
+    let rootSource = 'trailer';
+    const trailerAt = text.lastIndexOf('trailer');
+    if (trailerAt !== -1) {
+        root = findRootRef(text.slice(trailerAt, trailerAt + 4096));
+    }
+    if (!root || !byNum.has(root.num)) {
+        root = null;
+        rootSource = 'catalog-scan';
+        for (const [num, o] of byNum) {
+            if (/\/Type[\s\0]*\/Catalog\b/.test(o.body)) {
+                root = { num, gen: o.gen };
+                break;
+            }
+        }
+        if (root)
+            notes.push(`/Root not found in a trailer; using object ${root.num} ${root.gen} (/Type /Catalog)`);
+    }
+    if (!root) {
+        notes.push('no document catalog found; cannot rebuild');
+        return null;
+    }
+    const maxNum = Math.max(...byNum.keys());
+    const missingNumbers = [];
+    for (let i = 1; i <= maxNum; i++)
+        if (!byNum.has(i))
+            missingNumbers.push(i);
+    if (missingNumbers.length > 0) {
+        notes.push(`object number(s) ${missingNumbers.join(', ')} missing; references to them are lost`);
+    }
+    let out = text;
+    if (!out.endsWith('\n') && !out.endsWith('\r'))
+        out += '\n';
+    const xrefOffset = out.length;
+    let xref = `xref\n0 ${maxNum + 1}\n0000000000 65535 f \n`;
+    for (let i = 1; i <= maxNum; i++) {
+        const o = byNum.get(i);
+        xref += o
+            ? `${String(o.offset).padStart(10, '0')} ${String(o.gen).padStart(5, '0')} n \n`
+            : '0000000000 65535 f \n';
+    }
+    out +=
+        xref +
+            `trailer\n<< /Size ${maxNum + 1} /Root ${root.num} ${root.gen} R >>\nstartxref\n${xrefOffset}\n%%EOF\n`;
+    return {
+        bytes: fromLatin1(out),
+        objectsIndexed: byNum.size,
+        objectsDropped: dropped,
+        missingNumbers,
+        rootSource,
+        notes,
+    };
+}
+//# sourceMappingURL=rebuild.js.map

package/dist/pdf/rebuild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rebuild.js","sourceRoot":"","sources":["../../src/pdf/rebuild.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAerF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACnD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IACjD,IAAI,OAAO,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,sDAAsD,CAAC,CAAC;IAC9F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,kEAAkE;IAClE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyD,CAAC;IAC/E,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,2EAA2E;IAC3E,oBAAoB;IACpB,IAAI,IAAI,GAAwC,IAAI,CAAC;IACrD,IAAI,UAAU,GAAoC,SAAS,CAAC;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC;QACZ,UAAU,GAAG,cAAc,CAAC;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;YAC7B,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5C,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;gBAC3B,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,8CAA8C,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,mBAAmB,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,oBAAoB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACnG,CAAC;IAED,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,GAAG,IAAI,IAAI,CAAC;IAC5D,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;IAC9B,IAAI,IAAI,GAAG,WAAW,MAAM,GAAG,CAAC,yBAAyB,CAAC;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC;YACP,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO;YAChF,CAAC,CAAC,uBAAuB,CAAC;IAC9B,CAAC;IACD,GAAG;QACD,IAAI;YACJ,qBAAqB,MAAM,GAAG,CAAC,UAAU,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,qBAAqB,UAAU,WAAW,CAAC;IAE1G,OAAO;QACL,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC;QACtB,cAAc,EAAE,KAAK,CAAC,IAAI;QAC1B,cAAc,EAAE,OAAO;QACvB,cAAc;QACd,UAAU;QACV,KAAK;KACN,CAAC;AACJ,CAAC"}