@poe-platform/safe-bash 0.1.758 → 0.1.759

package/dist/safe-bash-command-wkhtmltopdf/index.js

@@ -2604,22 +2604,31 @@ function decodeFlate(bytes, parms, maxDecodedBytes = DEFAULT_MAX_DECODED_BYTES)
     inflated = new BoundedFlateStream(bytes, maxDecodedBytes).getBytes();
   } catch (error) {
     if (error instanceof PdfError && error.code === "E_LIMIT") throw error;
+    const wrapped = bytes[0] === 31 && bytes[1] === 139 || bytes.length >= 2 && (bytes[0] & 15) === 8 && bytes[0] >>> 4 <= 7 && (bytes[0] << 8 | bytes[1]) % 31 === 0;
     const decoder2 = new Inflate({
-      raw: !(bytes[0] === 31 && bytes[1] === 139),
+      raw: !wrapped,
       chunkSize: Math.max(1, Math.min(64 * 1024, maxDecodedBytes + 1))
     });
+    const chunks = [];
     let length2 = 0;
     decoder2.onData = (chunk) => {
       length2 += chunk.length;
       if (length2 > maxDecodedBytes) {
         throw new PdfError("E_LIMIT", "FlateDecode output exceeds maximum decoded byte budget");
       }
-      decoder2.chunks.push(chunk);
+      chunks.push(chunk);
     };
-    if (!decoder2.push(bytes, true) || decoder2.err || !decoder2.ended) {
+    const complete = decoder2.push(bytes, true);
+    const truncated = wrapped && decoder2.err === Z_BUF_ERROR && length2 > 0;
+    if ((!complete || decoder2.err || !decoder2.ended) && !truncated) {
       throw new PdfError("E_CAPABILITY", "Invalid FlateDecode compressed stream");
     }
-    inflated = decoder2.result;
+    inflated = new Uint8Array(length2);
+    let offset = 0;
+    for (const chunk of chunks) {
+      inflated.set(chunk, offset);
+      offset += chunk.length;
+    }
   }
   return applyPredictor(inflated, parms);
 }
@@ -10490,7 +10499,7 @@ function resolvePageFonts(doc, resourcesDict) {
     const glyphNames = buildFontEncodingGlyphNamesMap(encNode);
     const widths = /* @__PURE__ */ new Map();
     let defaultWidth = 556;
-    const isTwoByteCid = subtype === "Type0" || Boolean(cmap?.isTwoByte);
+    const isTwoByteCid = subtype === "Type0";
     let fontMatrix;
     let charProcs;
     let fontResources;
@@ -14927,6 +14936,7 @@ var makeTable;
 var crcTable;
 var crc32;
 var messages_default;
+var Z_BUF_ERROR;
 var MAX_MEM_LEVEL;
 var HEAP_SIZE;
 var MIN_MATCH;
@@ -15929,6 +15939,7 @@ var init_dist = __esm({
       "-5": "buffer error",
       "-6": "incompatible version"
     };
+    Z_BUF_ERROR = -5;
     MAX_MEM_LEVEL = 9;
     HEAP_SIZE = 573;
     MIN_MATCH = 3;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poe-platform/safe-bash",
-  "version": "0.1.758",
+  "version": "0.1.759",
   "description": "Extensible virtual shell with pluggable filesystems and streaming commands",
   "type": "module",
   "license": "MIT",
@@ -841,7 +841,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@poe-platform/safe-fs": "0.1.758",
+    "@poe-platform/safe-fs": "0.1.759",
     "pdf-lib": "1.17.1",
     "@noble/hashes": "2.4.0",
     "pako": "3.0.1",

package/third-party/pdf-ast/THIRD_PARTY_NOTICES.md

@@ -179,6 +179,12 @@ Word-spacing classification follows PDF.js `Font.charsToGlyphs`
 receives Tw, regardless of its Unicode label. The internal CMap reader preserves
 that classification without changing the public ToUnicode result shape.
 
+Simple-font character segmentation also follows `Font.charsToGlyphs`: Type1,
+TrueType, and Type3 strings use single-byte codes even when ToUnicode declares
+a wider codespace. `src/fonts/simple-font-codespace.test.ts` checks that behavior
+and the original upstream issue17069 equality fixture, including TJ fragments,
+word spacing, Unicode labels spanning multiple characters, and save/reopen.
+
 
 # SVG labels
 
@@ -223,6 +229,14 @@ additional regressions use the extracted upstream streams listed in
 1996–2003 Glyph & Cog, LLC, Apache-2.0. The upstream Flate implementation is a
 JavaScript port of XPDF's implementation.
 
+`src/cos/pypdf-flate-recovery.test.ts` adapts the printable-byte example from
+pypdf 6.19.0 `tests/test_filters.py::test_decompress`, with truncation results
+checked against `pypdf.filters.decompress`. The bounded pako fallback in
+`src/cos/filters.ts` retains partial zlib/gzip output on incomplete input,
+following pypdf's recovery behavior without its byte-at-a-time decoding loop.
+The original PDF.js issue11549 fixture additionally checks the recovered
+Unicode map against pypdf's decoded bytes. pypdf attribution/license is below.
+
 # PDF standard security handler
 
 `src/vendor/pdfjs-fonts.mjs` also includes `src/core/crypto.js`,