@poe-platform/safe-bash 0.1.787 → 0.1.789

package/dist/safe-bash-command-pdftk/index.d.ts

@@ -1,7 +1,11 @@
 import { type CommandDefinition } from "../safe-bash-contracts/command.js";
 import type { VirtualShellPlugin } from "../safe-bash-contracts/plugin.js";
 import { PdfDocument } from "../pdf-ast/index.js";
+export interface PdftkLimits {
+    readonly maxInputBytes: number;
+}
 export interface PdftkCommandOptions {
+    readonly limits?: Partial<PdftkLimits>;
     readonly replace?: boolean;
 }
 export interface PdftkCliResult {
@@ -20,9 +24,9 @@ export interface ExpandedPageSelection {
     readonly rotation?: RotationSpec | undefined;
 }
 export declare function parsePdftkRangeToken(token: string, handles: ReadonlyMap<string, PdfDocument>, defaultHandle: string): ExpandedPageSelection[];
-export declare function runPdftkCli(argv: readonly string[], files: Map<string, Uint8Array>): Promise<PdftkCliResult>;
-export declare function runPdftkCliSync(argv: readonly string[], files: Map<string, Uint8Array>): PdftkCliResult;
-export declare function createPdftkCommand(_options?: PdftkCommandOptions): CommandDefinition;
+export declare function runPdftkCli(argv: readonly string[], files: Map<string, Uint8Array>, signal?: AbortSignal): Promise<PdftkCliResult>;
+export declare function runPdftkCliSync(argv: readonly string[], files: Map<string, Uint8Array>, signal?: AbortSignal): PdftkCliResult;
+export declare function createPdftkCommand(options?: PdftkCommandOptions): CommandDefinition;
 export declare const pdftkCommand: CommandDefinition;
 export declare function pdftkPlugin(options?: PdftkCommandsOptions): VirtualShellPlugin;
 export declare const pdftkCommands: typeof pdftkPlugin;

package/dist/safe-bash-command-pdftk/index.js

@@ -4,6 +4,8 @@ import {
 
 // packages/safe-bash-command-pdftk/dist/index.js
 init_buffer();
+import { yieldTurn, drainCooperativeSteps as drainSteps } from "../safe-bash-contracts/yield.js";
+import { InputByteBudget } from "../safe-bash-contracts/io.js";
 import { writeFileOutput } from "../safe-bash-contracts/filesystem-output-budget.js";
 import {
   commandRuntimeIdentity,
@@ -45660,10 +45662,8 @@ function normalizeQuarterTurn(degrees) {
   if (mod === 90 || mod === 180 || mod === 270) return mod;
   return 0;
 }
-async function runPdftkCli(argv, files) {
-  return runPdftkCliSync(argv, files);
-}
-function runPdftkCliSync(argv, files) {
+function* runPdftkCliSteps(argv, files, signal) {
+  let cooperativeWork = 63;
   if (argv.length === 0 || argv.includes("--help") || argv.includes("-h")) {
     return {
       exitCode: 0,
@@ -45677,13 +45677,20 @@ function runPdftkCliSync(argv, files) {
   const inputPasswords = /* @__PURE__ */ new Map();
   let defaultInputPassword = "";
   for (let p = 0; p < argv.length; p++) {
+    if (++cooperativeWork % 64 === 0)
+      yield;
     if (argv[p]?.toLowerCase() === "input_pw") {
       for (let q = p + 1; q < argv.length; q++) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         const tok = argv[q];
-        if (PDFTK_OPERATIONS.has(tok.toLowerCase())) break;
+        if (PDFTK_OPERATIONS.has(tok.toLowerCase()))
+          break;
         const eq = tok.indexOf("=");
-        if (eq > 0) inputPasswords.set(tok.slice(0, eq), tok.slice(eq + 1));
-        else defaultInputPassword = tok;
+        if (eq > 0)
+          inputPasswords.set(tok.slice(0, eq), tok.slice(eq + 1));
+        else
+          defaultInputPassword = tok;
       }
     }
   }
@@ -45692,8 +45699,11 @@ function runPdftkCliSync(argv, files) {
   let idx = 0;
   let autoHandleCharCode = 65;
   while (idx < argv.length) {
+    if (++cooperativeWork % 64 === 0)
+      yield;
     const token = argv[idx];
-    if (PDFTK_OPERATIONS.has(token.toLowerCase()) || token.toLowerCase() === "input_pw") break;
+    if (PDFTK_OPERATIONS.has(token.toLowerCase()) || token.toLowerCase() === "input_pw")
+      break;
     idx++;
     let handleName = "";
     let filePath = token;
@@ -45718,15 +45728,20 @@ function runPdftkCliSync(argv, files) {
 ` };
     }
     handles.set(handleName, doc);
-    if (!handles.has("")) handles.set("", doc);
+    if (!handles.has(""))
+      handles.set("", doc);
     orderedDocs.push({ handle: handleName, doc });
   }
   if (orderedDocs.length === 0) {
     return { exitCode: 1, stdout: "", stderr: "Error: No input PDF files specified.\n" };
   }
   while (idx < argv.length && argv[idx]?.toLowerCase() === "input_pw") {
+    if (++cooperativeWork % 64 === 0)
+      yield;
     idx++;
     while (idx < argv.length && !PDFTK_OPERATIONS.has(argv[idx].toLowerCase())) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       idx++;
     }
   }
@@ -45763,6 +45778,8 @@ function runPdftkCliSync(argv, files) {
     "allfeatures"
   ]);
   while (idx < argv.length) {
+    if (++cooperativeWork % 64 === 0)
+      yield;
     const tok = argv[idx++];
     const lower = tok.toLowerCase();
     if (lower === "output") {
@@ -45777,6 +45794,8 @@ function runPdftkCliSync(argv, files) {
       ownerPassword = argv[idx++];
     } else if (lower === "allow") {
       while (idx < argv.length && ALLOW_KEYWORDS.has(argv[idx].toLowerCase())) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         allowPermissions.add(argv[idx++].toLowerCase());
       }
     } else if (lower === "keep_first_id") {
@@ -45825,6 +45844,7 @@ function runPdftkCliSync(argv, files) {
   if (operation === "burst") {
     const pattern = outputTarget ?? "pg_%04d.pdf";
     for (let p = 1; p <= primaryDoc.pageCount; p++) {
+      yield;
       const singleDoc = PdfDocument.create();
       copyPrimaryMetadata(primaryDoc, singleDoc);
       singleDoc.copyPagesFrom(primaryDoc, [p - 1]);
@@ -45833,7 +45853,10 @@ function runPdftkCliSync(argv, files) {
       }
       if (uncompressStreams || compressStreams) {
         for (const obj of singleDoc.cos.objects.values()) {
-          if (obj.value.kind !== "stream") continue;
+          if (++cooperativeWork % 64 === 0)
+            yield;
+          if (obj.value.kind !== "stream")
+            continue;
           const raw = singleDoc.cos.decodeStream(obj.value);
           dictDelete(obj.value.dict, "Filter");
           dictDelete(obj.value.dict, "DecodeParms");
@@ -45879,6 +45902,8 @@ function runPdftkCliSync(argv, files) {
     const filesToAttach = [];
     let toPageSpec;
     for (let k = 0; k < opArgs.length; k++) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       if (opArgs[k]?.toLowerCase() === "to_page") {
         toPageSpec = opArgs[++k];
         continue;
@@ -45895,6 +45920,8 @@ function runPdftkCliSync(argv, files) {
     }
     const fieldValues = parseFormDataBytes(dataBytes);
     for (const [k, v] of fieldValues.entries()) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       setDocumentFormField(resultDoc.cos, k, v);
     }
     if (shouldFlatten) {
@@ -45908,7 +45935,10 @@ function runPdftkCliSync(argv, files) {
     const selections = [];
     if (opArgs.length === 0) {
       for (const item of orderedDocs) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         for (let p = 1; p <= item.doc.pageCount; p++) {
+          yield;
           selections.push({ handle: item.handle, pageNumber: p });
         }
       }
@@ -45916,12 +45946,19 @@ function runPdftkCliSync(argv, files) {
       const groups = opArgs.map((arg) => parsePdftkRangeToken(arg, handles, primaryHandle));
       const maxLen = Math.max(0, ...groups.map((g) => g.length));
       for (let k = 0; k < maxLen; k++) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         for (const g of groups) {
-          if (k < g.length) selections.push(g[k]);
+          if (++cooperativeWork % 64 === 0)
+            yield;
+          if (k < g.length)
+            selections.push(g[k]);
         }
       }
     } else {
       for (const arg of opArgs) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         selections.push(...parsePdftkRangeToken(arg, handles, primaryHandle));
       }
     }
@@ -45941,6 +45978,8 @@ function runPdftkCliSync(argv, files) {
     };
     const remappedBookmarks = [];
     for (let sIdx = 0; sIdx < selections.length; sIdx++) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       const sel = selections[sIdx];
       const srcDoc = handles.get(sel.handle) ?? primaryDoc;
       const [copied] = resultDoc.copyPagesFrom(srcDoc, [sel.pageNumber - 1]);
@@ -45950,6 +45989,8 @@ function runPdftkCliSync(argv, files) {
         copied.setRotation(normalizeQuarterTurn(rawRot));
       }
       for (const bm of getDocBookmarks(srcDoc)) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         if (bm.pageNumber === sel.pageNumber) {
           remappedBookmarks.push({
             title: bm.title,
@@ -45962,11 +46003,15 @@ function runPdftkCliSync(argv, files) {
     setDocumentBookmarks(resultDoc, remappedBookmarks);
     const usedDocs = /* @__PURE__ */ new Set();
     for (const sel of selections) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       const d = handles.get(sel.handle) ?? primaryDoc;
       usedDocs.add(d);
     }
     const unpackedMap = /* @__PURE__ */ new Map();
     for (const d of usedDocs) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       unpackFilesFromDocument(d, ".", unpackedMap);
     }
     if (unpackedMap.size > 0) {
@@ -45978,11 +46023,17 @@ function runPdftkCliSync(argv, files) {
   } else if (operation === "rotate") {
     const rotByPage = /* @__PURE__ */ new Map();
     for (const arg of opArgs) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       for (const sel of parsePdftkRangeToken(arg, handles, primaryHandle)) {
-        if (sel.rotation) rotByPage.set(sel.pageNumber, sel.rotation);
+        if (++cooperativeWork % 64 === 0)
+          yield;
+        if (sel.rotation)
+          rotByPage.set(sel.pageNumber, sel.rotation);
       }
     }
     for (let p = 1; p <= resultDoc.pageCount; p++) {
+      yield;
       const spec = rotByPage.get(p);
       if (spec) {
         const page = resultDoc.getPage(p - 1);
@@ -45998,12 +46049,7 @@ function runPdftkCliSync(argv, files) {
 ` };
     }
     const overlayDoc = PdfDocument.load(overlayBytes);
-    applyOverlayToDocument(
-      resultDoc,
-      overlayDoc,
-      operation.includes("background") ? "background" : "stamp",
-      operation.startsWith("multi")
-    );
+    applyOverlayToDocument(resultDoc, overlayDoc, operation.includes("background") ? "background" : "stamp", operation.startsWith("multi"));
     if (shouldFlatten) {
       flattenDocumentFormFields(resultDoc.cos);
     }
@@ -46015,15 +46061,19 @@ function runPdftkCliSync(argv, files) {
   if (dropXfa) {
     const root = resultDoc.cos.resolveDict(resultDoc.cos.rootRef);
     const acroForm = root ? resultDoc.cos.resolveDict(dictGet(root, "AcroForm")) : void 0;
-    if (acroForm) dictDelete(acroForm, "XFA");
+    if (acroForm)
+      dictDelete(acroForm, "XFA");
   }
   if (dropXmp) {
     const root = resultDoc.cos.resolveDict(resultDoc.cos.rootRef);
-    if (root) dictDelete(root, "Metadata");
+    if (root)
+      dictDelete(root, "Metadata");
   }
   if (replacementFont && operation === "fill_form") {
     const cleanFontName = replacementFont.startsWith("/") ? replacementFont.slice(1) : replacementFont;
     for (const obj of resultDoc.cos.objects.values()) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       if (obj.value.kind === "dict") {
         const stNode = dictGet(obj.value, "Subtype");
         const bfNode = dictGet(obj.value, "BaseFont");
@@ -46064,7 +46114,10 @@ function runPdftkCliSync(argv, files) {
   }
   if (uncompressStreams || compressStreams) {
     for (const obj of resultDoc.cos.objects.values()) {
-      if (obj.value.kind !== "stream") continue;
+      if (++cooperativeWork % 64 === 0)
+        yield;
+      if (obj.value.kind !== "stream")
+        continue;
       const raw = resultDoc.cos.decodeStream(obj.value);
       dictDelete(obj.value.dict, "Filter");
       dictDelete(obj.value.dict, "DecodeParms");
@@ -46079,34 +46132,44 @@ function runPdftkCliSync(argv, files) {
   }
   const hasAllow = allowPermissions.size > 0;
   const allAllowed = allowPermissions.has("allfeatures");
-  const savedBytes = resultDoc.save(
-    userPassword || ownerPassword ? {
-      encrypt: {
-        userPassword: userPassword ?? "",
-        ownerPassword: ownerPassword ?? userPassword ?? "owner",
-        revision: 6,
-        ...hasAllow ? {
-          permissions: {
-            print: allAllowed || allowPermissions.has("printing") || allowPermissions.has("degradedprinting"),
-            modify: allAllowed || allowPermissions.has("modifycontents"),
-            copy: allAllowed || allowPermissions.has("copycontents"),
-            addNotes: allAllowed || allowPermissions.has("modifyannotations"),
-            fillForms: allAllowed || allowPermissions.has("fillin") || allowPermissions.has("modifyannotations"),
-            extractAccessibility: allAllowed || allowPermissions.has("screenreaders"),
-            assemble: allAllowed || allowPermissions.has("assembly") || allowPermissions.has("modifycontents"),
-            printHighRes: allAllowed || allowPermissions.has("printing")
-          }
-        } : {}
-      }
-    } : {}
-  );
+  const savedBytes = resultDoc.save(userPassword || ownerPassword ? {
+    encrypt: {
+      userPassword: userPassword ?? "",
+      ownerPassword: ownerPassword ?? userPassword ?? "owner",
+      revision: 6,
+      ...hasAllow ? {
+        permissions: {
+          print: allAllowed || allowPermissions.has("printing") || allowPermissions.has("degradedprinting"),
+          modify: allAllowed || allowPermissions.has("modifycontents"),
+          copy: allAllowed || allowPermissions.has("copycontents"),
+          addNotes: allAllowed || allowPermissions.has("modifyannotations"),
+          fillForms: allAllowed || allowPermissions.has("fillin") || allowPermissions.has("modifyannotations"),
+          extractAccessibility: allAllowed || allowPermissions.has("screenreaders"),
+          assemble: allAllowed || allowPermissions.has("assembly") || allowPermissions.has("modifycontents"),
+          printHighRes: allAllowed || allowPermissions.has("printing")
+        }
+      } : {}
+    }
+  } : {});
   if (!outputTarget || outputTarget === "-") {
     return { exitCode: 0, stdout: "", stderr: "", stdoutBytes: savedBytes };
   }
   files.set(outputTarget, savedBytes);
   return { exitCode: 0, stdout: "", stderr: "" };
 }
+async function runPdftkCli(argv, files, signal) {
+  return drainSteps(runPdftkCliSteps(argv, files, signal), signal);
+}
+function runPdftkCliSync(argv, files, signal) {
+  const steps = runPdftkCliSteps(argv, files, signal);
+  let next = steps.next();
+  while (!next.done) {
+    next = steps.next();
+  }
+  return next.value;
+}
 async function executePdftk(context) {
+  let cooperativeWork = 63;
   const invocation = createOutputOperation(context, { write: async () => {
   } });
   try {
@@ -46125,6 +46188,7 @@ async function executePdftk(context) {
       const chunks = [];
       let total = 0;
       for await (const chunk of readBytes(context.stdin, invocation.signal)) {
+        if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
         chunks.push(chunk);
         total += chunk.byteLength;
         chargeBytes(chunk.byteLength);
@@ -46132,12 +46196,14 @@ async function executePdftk(context) {
       const buf = new Uint8Array(total);
       let off = 0;
       for (const c of chunks) {
+        if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
         buf.set(c, off);
         off += c.byteLength;
       }
       vfsFiles.set("-", buf);
     }
     for (const token of argv) {
+      if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
       if (token.startsWith("-") && token !== "-") continue;
       const eqIdx = token.indexOf("=");
       const filePath = eqIdx > 0 ? token.slice(eqIdx + 1) : token;
@@ -46149,8 +46215,9 @@ async function executePdftk(context) {
       } catch {
       }
     }
+    context.inputBudget?.check(0);
     const existingSnap = new Map(vfsFiles);
-    const res = await runPdftkCli(argv, vfsFiles);
+    const res = await runPdftkCli(argv, vfsFiles, invocation.signal);
     if (res.stderr) {
       await writeBytes(context.stderr, new TextEncoder().encode(res.stderr), invocation.signal);
     }
@@ -46165,6 +46232,7 @@ async function executePdftk(context) {
       await writeBytes(stdout.output, outBytes, invocation.signal);
     }
     for (const [key, val] of vfsFiles.entries()) {
+      if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
       if (key !== "-" && existingSnap.get(key) !== val) {
         chargeBytes(val.byteLength);
         const abs = resolveVfsPath(key);
@@ -46181,13 +46249,14 @@ async function executePdftk(context) {
     await invocation.close();
   }
 }
-function createPdftkCommand(_options = {}) {
+function createPdftkCommand(options = {}) {
+  const maxInputBytes = InputByteBudget.limit(options.limits?.maxInputBytes);
   return Object.freeze({
     name: "pdftk",
     runtimeIdentity: commandRuntimeIdentity,
     description: "Manipulate PDF documents, fill/flatten AcroForms, and assemble pages via @poe-code/pdf-ast",
     execute(context) {
-      return executePdftk(context);
+      return new InputByteBudget(maxInputBytes).run(context, executePdftk);
     }
   });
 }

package/dist/safe-bash-command-pdftoppm/index.d.ts

@@ -1,6 +1,10 @@
 import { type CommandDefinition } from "../safe-bash-contracts/command.js";
 import type { VirtualShellPlugin } from "../safe-bash-contracts/plugin.js";
+export interface PdftoppmLimits {
+    readonly maxInputBytes: number;
+}
 export interface PdftoppmCommandOptions {
+    readonly limits?: Partial<PdftoppmLimits>;
     readonly replace?: boolean;
 }
 export interface PdftoppmCliResult {
@@ -9,21 +13,25 @@ export interface PdftoppmCliResult {
     readonly stderr: string;
     readonly stdoutBytes?: Uint8Array | undefined;
 }
-export declare function runPdftoppmCliSync(argv: readonly string[], files: Map<string, Uint8Array>, options?: {
-    readonly onAllocateBytes?: (bytes: number) => void;
-}): PdftoppmCliResult;
 export declare function runPdftoppmCli(argv: readonly string[], files: Map<string, Uint8Array>, options?: {
+    readonly signal?: AbortSignal;
     readonly onAllocateBytes?: (bytes: number) => void;
 }): Promise<PdftoppmCliResult>;
-export declare function createPdftoppmCommand(_options?: PdftoppmCommandOptions): CommandDefinition;
-export declare const pdftoppmCommand: CommandDefinition;
-export declare function runPdftocairoCliSync(argv: readonly string[], files: Map<string, Uint8Array>, options?: {
+export declare function runPdftoppmCliSync(argv: readonly string[], files: Map<string, Uint8Array>, options?: {
+    readonly signal?: AbortSignal;
     readonly onAllocateBytes?: (bytes: number) => void;
 }): PdftoppmCliResult;
+export declare function createPdftoppmCommand(options?: PdftoppmCommandOptions): CommandDefinition;
+export declare const pdftoppmCommand: CommandDefinition;
 export declare function runPdftocairoCli(argv: readonly string[], files: Map<string, Uint8Array>, options?: {
+    readonly signal?: AbortSignal;
     readonly onAllocateBytes?: (bytes: number) => void;
 }): Promise<PdftoppmCliResult>;
-export declare function createPdftocairoCommand(_options?: PdftoppmCommandOptions): CommandDefinition;
+export declare function runPdftocairoCliSync(argv: readonly string[], files: Map<string, Uint8Array>, options?: {
+    readonly signal?: AbortSignal;
+    readonly onAllocateBytes?: (bytes: number) => void;
+}): PdftoppmCliResult;
+export declare function createPdftocairoCommand(options?: PdftoppmCommandOptions): CommandDefinition;
 export declare const pdftocairoCommand: CommandDefinition;
 export declare function pdftoppmPlugin(options?: PdftoppmCommandsOptions): VirtualShellPlugin;
 export declare const pdftoppmCommands: typeof pdftoppmPlugin;