@poe-platform/safe-bash 0.1.787 → 0.1.789

package/dist/safe-bash-command-qpdf/index.js

@@ -4,6 +4,7 @@ import {
 
 // packages/safe-bash-command-qpdf/dist/index.js
 init_buffer();
+import { yieldTurn } from "../safe-bash-contracts/yield.js";
 import { writeFileOutput } from "../safe-bash-contracts/filesystem-output-budget.js";
 import {
   commandRuntimeIdentity,
@@ -43993,6 +43994,13 @@ function replacePdfNameToken(content, oldName, newName) {
   }
   return out;
 }
+function resolveLimits(options) {
+  const limits = { maxInputBytes: Infinity, maxOutputBytes: Infinity, maxArgumentBytes: Infinity, ...options.limits };
+  for (const [name, value] of Object.entries(limits)) {
+    if (value !== Infinity && (!Number.isSafeInteger(value) || value < 0)) throw new RangeError(`${name} limit must be a nonnegative safe integer or Infinity`);
+  }
+  return limits;
+}
 function parseSingleTokenPageNumber(tok, totalPages) {
   const trimmed = tok.trim();
   if (trimmed === "z") return totalPages;
@@ -44417,13 +44425,25 @@ function collectNumberTreeDicts(doc, treeDict, visited = /* @__PURE__ */ new Set
   }
   return out;
 }
-async function runQpdfCli(argv, files, readStdin) {
+async function runQpdfCli(argv, files, readStdin, signal) {
+  signal?.throwIfAborted();
   const parsed = parseQpdfArguments(argv);
   if (parsed.result) return parsed.result;
   const { inputFile, pageSpecs, stampSpecs, addAttachmentSpecs, copyAttachmentsSpecs, updateFromJsonFiles } = parsed.options;
   const usesStdin = inputFile === "-" || updateFromJsonFiles.includes("-") || [...pageSpecs, ...stampSpecs, ...addAttachmentSpecs, ...copyAttachmentsSpecs].some((spec) => spec.file === "-");
   if (readStdin && usesStdin) await readStdin();
-  return executeQpdfCli(parsed.options, files);
+  const steps = executeQpdfCli(parsed.options, files);
+  try {
+    let step = steps.next();
+    while (!step.done) {
+      await yieldTurn(signal);
+      signal?.throwIfAborted();
+      step = steps.next();
+    }
+    return step.value;
+  } finally {
+    steps.return({ exitCode: 2, stdout: "", stderr: "" });
+  }
 }
 function parseQpdfArguments(argv) {
   let check = false;
@@ -44845,9 +44865,12 @@ function parseQpdfArguments(argv) {
 function runQpdfCliSync(argv, files) {
   const parsed = parseQpdfArguments(argv);
   if (parsed.result) return parsed.result;
-  return executeQpdfCli(parsed.options, files);
+  const steps = executeQpdfCli(parsed.options, files);
+  let step = steps.next();
+  while (!step.done) step = steps.next();
+  return step.value;
 }
-function executeQpdfCli(options, files) {
+function* executeQpdfCli(options, files) {
   const {
     check,
     showNpages,
@@ -45316,6 +45339,7 @@ extract for accessibility: ${enc.permissions.copy ? "allowed" : "not allowed"}
     }
     const loadedSpecs = [];
     for (const spec of pageSpecs) {
+      yield;
       const srcBytes = loadBytes(spec.file);
       if (!srcBytes) {
         return { exitCode: 2, stdout: "", stderr: `qpdf: cannot open ${spec.file}
@@ -45352,6 +45376,7 @@ extract for accessibility: ${enc.permissions.copy ? "allowed" : "not allowed"}
   for (const rot of rotateSpecs) {
     const pageNums = parseQpdfPageRange(rot.range, workingDoc.getPageCount());
     for (const pNum of pageNums) {
+      yield;
       const page = workingDoc.getPage(pNum - 1);
       if (rot.relative) {
         const current = page.getRotation();
@@ -45508,6 +45533,7 @@ ${fmt6(s)} 0 0 ${fmt6(s)} ${fmt4(tx)} ${fmt4(ty)} cm
   if (flattenRotation) {
     const enc = new TextEncoder();
     for (const page of workingDoc.getPages()) {
+      yield;
       const rot = page.getRotation();
       if (rot === 90 || rot === 180 || rot === 270) {
         const { width: W, height: H } = page.getSize();
@@ -45576,6 +45602,7 @@ ${fmt6(s)} 0 0 ${fmt6(s)} ${fmt4(tx)} ${fmt4(ty)} cm
   if (flattenAnnotations !== false) {
     const enc = new TextEncoder();
     for (const page of workingDoc.getPages()) {
+      yield;
       const annotsNode = workingDoc.cos.resolve(dictGet(page.dict, "Annots"));
       const annotsArr = asArray(annotsNode);
       if (!annotsArr) continue;
@@ -45754,6 +45781,7 @@ Q
     };
     let extCounter = 1;
     for (const page of workingDoc.getPages()) {
+      yield;
       let modified = false;
       const pageRes = page.getResourcesDict();
       let xobjSub = asDict(workingDoc.cos.resolve(dictGet(pageRes, "XObject")));
@@ -45839,6 +45867,7 @@ Q
       "Properties"
     ];
     for (const page of workingDoc.getPages()) {
+      yield;
       const refNames = /* @__PURE__ */ new Set();
       collectPdfNamesFromBytes(page.getRawContentStream(), refNames);
       const annotsArr = asArray(workingDoc.cos.resolve(dictGet(page.dict, "Annots")));
@@ -45957,6 +45986,7 @@ Q
     }
   }
   for (const copySpec of copyAttachmentsSpecs) {
+    yield;
     const srcBytes = loadBytes(copySpec.file);
     if (!srcBytes) {
       return { exitCode: 2, stdout: "", stderr: `qpdf: cannot open ${copySpec.file}
@@ -46092,6 +46122,7 @@ Q
         namesArr = asArray(dictGet(efTree, "Names"));
       }
       for (const addSpec of addAttachmentSpecs) {
+        yield;
         const attBytes = loadBytes(addSpec.file);
         if (!attBytes) {
           return { exitCode: 2, stdout: "", stderr: `qpdf: cannot open attachment ${addSpec.file}
@@ -46190,6 +46221,7 @@ Q
       return replaced ? out : void 0;
     };
     for (let startIdx = 0; startIdx < total; startIdx += splitPagesGroup) {
+      yield;
       const endIdx = Math.min(total - 1, startIdx + splitPagesGroup - 1);
       const subDoc = PdfDocument.create();
       if (wMeta.title) subDoc.setTitle(wMeta.title);
@@ -46237,12 +46269,20 @@ Q
   files.set(finalTarget, outBytes);
   return { exitCode: repairedWarning && !warningExit0 ? 3 : 0, stdout: "", stderr: "" };
 }
-async function qpdf(context) {
+async function qpdf(context, options = {}) {
+  const limits = resolveLimits(options);
+  let outputBytes = 0;
+  const chargeOutput = (bytes) => {
+    outputBytes += bytes;
+    if (outputBytes > limits.maxOutputBytes) throw new RangeError("Output byte limit exceeded");
+  };
   const invocation = createOutputOperation(context, { write: async () => {
   } });
   try {
     const carrier = getCommandArguments(context);
     const argv = [...carrier.args];
+    const argumentBytes = argv.reduce((total, arg) => total + new TextEncoder().encode(arg).byteLength + 1, 0);
+    if (argumentBytes > limits.maxArgumentBytes) throw new RangeError("Argument byte limit exceeded");
     const vfsFiles = /* @__PURE__ */ new Map();
     const resolveVfsPath = (p) => p.startsWith("/") ? p : `${context.cwd === "/" ? "" : context.cwd}/${p}`;
     let accountedBytes = 0;
@@ -46250,6 +46290,7 @@ async function qpdf(context) {
       if (delta > 0) {
         accountedBytes += delta;
         context.inputBudget?.check(accountedBytes);
+        if (accountedBytes > limits.maxInputBytes) throw new RangeError("Input byte limit exceeded");
       }
     };
     for (let i = 0; i < argv.length; i++) {
@@ -46270,39 +46311,49 @@ async function qpdf(context) {
       i += args.length - 1;
     }
     for (const token of argv) {
+      await yieldTurn(invocation.signal);
+      invocation.signal.throwIfAborted();
       let candidate = token;
-      if (token.startsWith("--overlay=") || token.startsWith("--underlay=") || token.startsWith("--update-from-json=")) {
+      if (token.startsWith("--overlay=") || token.startsWith("--underlay=") || token.startsWith("--add-attachment=") || token.startsWith("--copy-attachments-from=") || token.startsWith("--update-from-json=")) {
         candidate = token.slice(token.indexOf("=") + 1);
       } else if (token.startsWith("-") || token === "--" || token === ".") {
         continue;
       }
       const abs = resolveVfsPath(candidate);
+      let bytes;
       try {
-        const bytes = await context.fs.readFile(abs, { signal: invocation.signal });
-        chargeBytes(bytes.byteLength);
-        vfsFiles.set(candidate, bytes);
+        bytes = await context.fs.readFile(abs, { signal: invocation.signal });
       } catch {
+        invocation.signal.throwIfAborted();
+        continue;
       }
+      chargeBytes(bytes.byteLength);
+      vfsFiles.set(candidate, bytes);
     }
     if (argv.includes("--json-input") || argv.some((t) => t.startsWith("--update-from-json="))) {
       for (const fileBytes of [...vfsFiles.values()]) {
+        let parsed;
         try {
-          const parsed = JSON.parse(new TextDecoder().decode(fileBytes));
-          const objs = Array.isArray(parsed.qpdf) && typeof parsed.qpdf[1] === "object" ? parsed.qpdf[1] : typeof parsed.objects === "object" && parsed.objects !== null ? parsed.objects : void 0;
-          if (!objs) continue;
-          for (const entry of Object.values(objs)) {
-            if (typeof entry === "object" && entry !== null && "stream" in entry) {
-              const st = entry.stream;
-              if (st && typeof st.datafile === "string" && !vfsFiles.has(st.datafile)) {
-                const dfBytes = await context.fs.readFile(resolveVfsPath(st.datafile), {
-                  signal: invocation.signal
-                });
-                chargeBytes(dfBytes.byteLength);
-                vfsFiles.set(st.datafile, dfBytes);
-              }
-            }
-          }
+          parsed = JSON.parse(new TextDecoder().decode(fileBytes));
         } catch {
+          continue;
+        }
+        if (!parsed || typeof parsed !== "object") continue;
+        const objs = Array.isArray(parsed.qpdf) && typeof parsed.qpdf[1] === "object" ? parsed.qpdf[1] : typeof parsed.objects === "object" && parsed.objects !== null ? parsed.objects : void 0;
+        if (!objs) continue;
+        for (const entry of Object.values(objs)) {
+          if (typeof entry !== "object" || entry === null || !("stream" in entry)) continue;
+          const stream = entry.stream;
+          if (!stream || typeof stream.datafile !== "string" || vfsFiles.has(stream.datafile)) continue;
+          let bytes;
+          try {
+            bytes = await context.fs.readFile(resolveVfsPath(stream.datafile), { signal: invocation.signal });
+          } catch {
+            invocation.signal.throwIfAborted();
+            continue;
+          }
+          chargeBytes(bytes.byteLength);
+          vfsFiles.set(stream.datafile, bytes);
         }
       }
     }
@@ -46323,19 +46374,19 @@ async function qpdf(context) {
       }
       vfsFiles.set("-", bytes);
       existingSnap.set("-", bytes);
-    });
+    }, invocation.signal);
     if (res.stderr) {
       await writeBytes(context.stderr, new TextEncoder().encode(res.stderr), invocation.signal);
     }
     if (res.stdout) {
       const outBytes = new TextEncoder().encode(res.stdout);
-      chargeBytes(outBytes.byteLength);
+      chargeOutput(outBytes.byteLength);
       const stdout = invocation.child(context.stdout);
       await writeBytes(stdout.output, outBytes, invocation.signal);
     }
     for (const [fileKey, fileBytes] of vfsFiles.entries()) {
       if (existingSnap.get(fileKey) !== fileBytes) {
-        chargeBytes(fileBytes.byteLength);
+        chargeOutput(fileBytes.byteLength);
         if (fileKey === "-") {
           const stdout = invocation.child(context.stdout);
           await writeBytes(stdout.output, fileBytes, invocation.signal);
@@ -46350,13 +46401,13 @@ async function qpdf(context) {
     await invocation.close();
   }
 }
-function createQpdfCommand(_options = {}) {
+function createQpdfCommand(options = {}) {
   return Object.freeze({
     name: "qpdf",
     runtimeIdentity: commandRuntimeIdentity,
     description: "Structural PDF inspection, encryption, page selection, and transformation via @poe-code/pdf-ast",
     execute(context) {
-      return qpdf(context);
+      return qpdf(context, options);
     }
   });
 }