@poe-platform/safe-bash 0.1.773 → 0.1.775

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poe-platform/safe-bash",
-  "version": "0.1.773",
+  "version": "0.1.775",
   "description": "Extensible virtual shell with pluggable filesystems and streaming commands",
   "type": "module",
   "license": "MIT",
@@ -841,7 +841,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@poe-platform/safe-fs": "0.1.773",
+    "@poe-platform/safe-fs": "0.1.775",
     "pdf-lib": "1.17.1",
     "@noble/hashes": "2.4.0",
     "pako": "3.0.1",

package/third-party/pdf-ast/THIRD_PARTY_NOTICES.md

@@ -475,3 +475,32 @@ streams follow `PartialEvaluator.readToUnicode` error recovery while retaining
 local resource-limit errors. `dictionary-recovery.test.ts` ports the original
 `issue11549` equality fixture and covers ordinary/compressed dictionaries,
 trailer metadata, strict mode, and explicit limits.
+
+Mesh stream decoding, Coons/tensor patch tessellation, and vertex packing use
+PDF.js `MeshStreamReader`, `MeshShading`, and their helpers from
+`src/core/pattern.js` at the same revision (Mozilla Foundation, Apache-2.0).
+The generator replaces only the constructor's PDF.js resource lookup with a
+local stream/color adapter and uses equivalent ES2022 cache operations.
+The decoding and geometry algorithms are unchanged. The local rasterizer
+paints the resulting RGB triangles. `src/render/mesh-shading.test.ts` ports
+the unchanged upstream equality fixtures `issue4227` and `issue6305-part-1`,
+with independently rendered reference pixels recorded in the tests.
+
+Function-shading BBox coordinates follow PDF.js `FunctionBasedShading` in
+`src/core/pattern.js`, keeping the BBox separate from the function-domain
+Matrix. The local evaluator transforms page pixels back into shading space
+for clipping. `src/render/shading-bbox.test.ts` covers translated, rotated,
+and sheared page transforms and the unchanged upstream equality fixture.
+
+Declared stream lengths follow PDF.js `Parser.makeStream`/`tryShift` in
+`src/core/parser.js`: the next token must be `endstream`, otherwise scan for
+the actual terminator. `src/cos/stream-length.test.ts` covers direct/indirect
+lengths, malformed tokens at the claimed end, delimiter text inside accurate
+streams, and PDF.js's unchanged `xobject-image.pdf` through load/save/render.
+
+Explicit simple-font width tables follow PDF.js `PartialEvaluator.extractWidths`
+in `src/core/evaluator.js`: undeclared codes use `FontDescriptor.MissingWidth`,
+or zero when absent. Standard-font widths apply only without an explicit
+Widths table. `src/fonts/explicit-widths.test.ts` covers Type1, TrueType and
+Type3 widths with and without ToUnicode, plus the unchanged upstream
+`Type3WordSpacing.pdf` fixture.