@poe-platform/safe-bash 0.1.788 → 0.1.790

package/dist/safe-bash-command-pdftk/index.js

@@ -4,6 +4,8 @@ import {
 
 // packages/safe-bash-command-pdftk/dist/index.js
 init_buffer();
+import { yieldTurn, drainCooperativeSteps as drainSteps } from "../safe-bash-contracts/yield.js";
+import { InputByteBudget } from "../safe-bash-contracts/io.js";
 import { writeFileOutput } from "../safe-bash-contracts/filesystem-output-budget.js";
 import {
   commandRuntimeIdentity,
@@ -27100,6 +27102,11 @@ function tokenizeCos(bytes, start = 0, end = bytes.length) {
   }
   return tokens;
 }
+function drainWork(work) {
+  let step = work.next();
+  while (!step.done) step = work.next();
+  return step.value;
+}
 function bytesToString3(bytes) {
   if (typeof bytes !== "object" || bytes?.length === void 0) {
     throw new Error("Invalid argument for bytesToString");
@@ -27695,7 +27702,9 @@ function concatByteArrays(chunks) {
   }
   return out;
 }
-function serializeCosDocument(options) {
+function* serializeCosDocumentSteps(options) {
+  yield;
+  let work = 0;
   const maxOutputBytes = options.maxOutputBytes ?? Infinity;
   const maxObjects = options.maxObjects ?? Infinity;
   const sorted = [...options.objects].sort((a, b) => a.objectNumber - b.objectNumber);
@@ -27718,6 +27727,7 @@ function serializeCosDocument(options) {
     const packable = [];
     const direct = [];
     for (const obj of sorted) {
+      if (++work % 16 === 0) yield;
       const isLinearized = obj.value.kind === "dict" && dictGet(obj.value, "Linearized") !== void 0;
       if (obj.value.kind !== "stream" && obj.generationNumber === 0 && !isLinearized) {
         packable.push(obj);
@@ -27732,6 +27742,7 @@ function serializeCosDocument(options) {
       const headerPairs = [];
       let relOffset = 0;
       for (const pObj of packable) {
+        if (++work % 16 === 0) yield;
         headerPairs.push(`${pObj.objectNumber} ${relOffset}`);
         const bBytes = serializeCosNodeBytes(pObj.value);
         const nl = textEncoder2.encode("\n");
@@ -27757,6 +27768,7 @@ function serializeCosDocument(options) {
       ];
       const directOffsets = /* @__PURE__ */ new Map();
       for (const dObj of allDirect) {
+        if (++work % 16 === 0) yield;
         directOffsets.set(dObj.objectNumber, { offset, generation: dObj.generationNumber });
         const prefix = textEncoder2.encode(`${dObj.objectNumber} ${dObj.generationNumber} obj
 `);
@@ -27767,6 +27779,7 @@ function serializeCosDocument(options) {
       }
       const compressedMap = /* @__PURE__ */ new Map();
       for (let idx = 0; idx < packable.length; idx++) {
+        if (++work % 16 === 0) yield;
         compressedMap.set(packable[idx].objectNumber, idx);
       }
       const xrefOffset2 = offset;
@@ -27784,6 +27797,7 @@ function serializeCosDocument(options) {
       };
       writeEntry7(0, 0, 0, 65535);
       for (let i = 1; i < size2; i++) {
+        if (++work % 16 === 0) yield;
         if (i === xrefStmNum) {
           writeEntry7(i, 1, xrefOffset2, 0);
         } else if (compressedMap.has(i)) {
@@ -27864,6 +27878,7 @@ ${xrefOffset2}
     let pageCount = 0;
     let firstPageObjNum = options.rootRef.objectNumber;
     for (const o of sorted) {
+      if (++work % 16 === 0) yield;
       if (o.value.kind === "dict") {
         const t = dictGet(o.value, "Type");
         if (t?.kind === "name" && t.decoded === "Page") {
@@ -27911,6 +27926,7 @@ ${xrefOffset2}
   }
   const objectOffsets = /* @__PURE__ */ new Map();
   for (const obj of sorted) {
+    if (++work % 16 === 0) yield;
     objectOffsets.set(obj.objectNumber, { offset, generation: obj.generationNumber });
     let value = obj.value;
     if (options.normalizeContent && value.kind === "stream" && value.decodedBytes) {
@@ -27942,6 +27958,7 @@ ${xrefOffset2}
 0000000000 65535 f 
 `;
   for (let i = 1; i < size; i++) {
+    if (++work % 16 === 0) yield;
     const entry = objectOffsets.get(i);
     if (entry) {
       xrefText += `${String(entry.offset).padStart(10, "0")} ${String(entry.generation).padStart(5, "0")} n 
@@ -27988,6 +28005,7 @@ ${xrefOffset}
     let endFirstPage = xrefOffset;
     const sortedOffsets = [...objectOffsets.entries()].sort((a, b) => a[1].offset - b[1].offset);
     for (let i = 0; i < sortedOffsets.length; i++) {
+      if (++work % 16 === 0) yield;
       const [objNum, info3] = sortedOffsets[i];
       const nextOff = sortedOffsets[i + 1]?.[1].offset ?? xrefOffset;
       if (objNum === hintObjAfter.objectNumber) {
@@ -28021,6 +28039,9 @@ ${xrefOffset}
   }
   return fullBytes;
 }
+function serializeCosDocument(options) {
+  return drainWork(serializeCosDocumentSteps(options));
+}
 function appendIncrementalRevision(originalBytes, doc, updatedObjects) {
   const chunks = [originalBytes, textEncoder2.encode("\n")];
   let offset = originalBytes.length + 1;
@@ -28294,48 +28315,30 @@ function encryptPdfBuffer(state, objectNumber, generationNumber, plaintext) {
   const objKey = md5Bytes([state.fileKey, suffix]).subarray(0, Math.min(16, state.fileKey.length + 5));
   return rc4Transform(objKey, plaintext);
 }
-function transformNodeStringsAndStreams(node, transform, transformStream) {
+function* transformNodeStringsAndStreamsSteps(node, transform, transformStream) {
+  yield;
   switch (node.kind) {
     case "string":
-      return {
-        kind: "string",
-        format: "hex",
-        bytes: transform(node.bytes)
-      };
-    case "array":
-      return {
-        kind: "array",
-        items: node.items.map((item) => transformNodeStringsAndStreams(item, transform, transformStream))
-      };
+      return { kind: "string", format: "hex", bytes: transform(node.bytes) };
+    case "array": {
+      const items = [];
+      for (const item of node.items) items.push(yield* transformNodeStringsAndStreamsSteps(item, transform, transformStream));
+      return { kind: "array", items };
+    }
     case "dict": {
-      const type = dictGet(node, "Type");
-      const fieldType = dictGet(node, "FT");
-      const byteRange = dictGet(node, "ByteRange");
+      const type = dictGet(node, "Type"), fieldType = dictGet(node, "FT"), byteRange = dictGet(node, "ByteRange");
       const signature = type?.kind === "name" && type.decoded === "Sig" || fieldType?.kind === "name" && fieldType.decoded === "Sig" || byteRange?.kind === "array" && dictGet(node, "Filter")?.kind === "name";
-      return {
-        kind: "dict",
-        entries: node.entries.map((e) => ({
-          key: e.key,
-          value: signature && e.key.decoded === "Contents" ? e.value : transformNodeStringsAndStreams(e.value, transform, transformStream)
-        }))
-      };
+      const entries = [];
+      for (const e of node.entries) entries.push({ key: e.key, value: signature && e.key.decoded === "Contents" ? e.value : yield* transformNodeStringsAndStreamsSteps(e.value, transform, transformStream) });
+      return { kind: "dict", entries };
     }
     case "stream": {
       const type = dictGet(node.dict, "Type");
       if (type?.kind === "name" && type.decoded === "XRef") return node;
       const stream = transformStream ? transformStream(node) : { ...node, rawBytes: transform(node.rawBytes) };
-      const updatedDict = {
-        kind: "dict",
-        entries: stream.dict.entries.map((e) => ({
-          key: e.key,
-          value: e.key.decoded === "Length" ? cosNumber(stream.rawBytes.length) : transformNodeStringsAndStreams(e.value, transform, transformStream)
-        }))
-      };
-      return {
-        kind: "stream",
-        dict: updatedDict,
-        rawBytes: stream.rawBytes
-      };
+      const entries = [];
+      for (const e of stream.dict.entries) entries.push({ key: e.key, value: e.key.decoded === "Length" ? cosNumber(stream.rawBytes.length) : yield* transformNodeStringsAndStreamsSteps(e.value, transform, transformStream) });
+      return { kind: "stream", dict: { kind: "dict", entries }, rawBytes: stream.rawBytes };
     }
     default:
       return node;
@@ -28404,7 +28407,8 @@ function createR6Encryption(userPassword, ownerPassword, pMask) {
     StrF: cosName("StdCF")
   }) };
 }
-function encryptCosDocument(doc, options = {}) {
+function* encryptCosDocumentSteps(doc, options = {}) {
+  yield;
   const userPassword = options.userPassword ?? "";
   const ownerPassword = options.ownerPassword ?? userPassword;
   const revision = options.revision ?? 6;
@@ -28426,14 +28430,15 @@ function encryptCosDocument(doc, options = {}) {
   const encryptObjNum = maxObjNum + 1;
   const encryptedObjects = [];
   for (const obj of doc.objects.values()) {
-    const transformed = transformNodeStringsAndStreams(
+    yield;
+    const transformed = yield* transformNodeStringsAndStreamsSteps(
       obj.value,
       (plain) => encryptPdfBuffer(state, obj.objectNumber, obj.generationNumber, plain)
     );
     encryptedObjects.push({ objectNumber: obj.objectNumber, generationNumber: obj.generationNumber, value: transformed });
   }
   encryptedObjects.push({ objectNumber: encryptObjNum, generationNumber: 0, value: encryptDict });
-  return serializeCosDocument({
+  return yield* serializeCosDocumentSteps({
     objects: encryptedObjects,
     rootRef: doc.rootRef,
     infoRef: doc.infoRef,
@@ -28483,17 +28488,19 @@ function decryptStream(doc, stream, transform) {
   }
   return { kind: "stream", dict, rawBytes: bytes };
 }
-function decryptCosDocument(doc, state) {
+function* decryptCosDocumentSteps(doc, state) {
+  yield;
   const encryptObjNum = doc.encryptRef?.objectNumber;
   const handler = securityHandlers.get(state);
   for (const [num, obj] of doc.objects.entries()) {
+    yield;
     if (num === encryptObjNum || handler?.plaintextObjects.has(num)) continue;
     if (obj.value.kind === "stream") {
       const type = doc.resolve(dictGet(obj.value.dict, "Type"));
       if (type?.kind === "name" && (type.decoded === "XRef" || type.decoded === "Metadata" && !state.encryptMetadata)) continue;
     }
     const transform = handler?.factory.createCipherTransform(obj.objectNumber, obj.generationNumber);
-    const decrypted = transformNodeStringsAndStreams(
+    const decrypted = yield* transformNodeStringsAndStreamsSteps(
       obj.value,
       (cipher) => decryptPdfBuffer(state, obj.objectNumber, obj.generationNumber, cipher),
       transform ? (stream) => decryptStream(doc, stream, transform) : void 0
@@ -28607,9 +28614,12 @@ var ParsedCosDocument = class {
     return void 0;
   }
 };
-function parseNodeFromLexer(lexer, bytes, maxDepth, repair = false) {
+function* parseNodeFromLexerSteps(lexer, bytes, maxDepth, repair = false) {
+  yield;
+  let work = 0;
   const stack = [];
   while (true) {
+    if (++work % 16 === 0) yield;
     const tok = lexer.nextToken();
     const parent = stack.at(-1);
     if (!tok) {
@@ -28805,7 +28815,8 @@ function parseHeaderVersion(bytes) {
   }
   return head.slice(idx + 5, idx + 8);
 }
-function parseObjectAtOffset(bytes, offset, maxRecursionDepth, repair = false) {
+function* parseObjectAtOffsetSteps(bytes, offset, maxRecursionDepth, repair = false) {
+  yield;
   const lexer = new CosByteLexer(bytes, offset);
   const objNumTok = lexer.nextToken();
   const genNumTok = lexer.nextToken();
@@ -28813,7 +28824,7 @@ function parseObjectAtOffset(bytes, offset, maxRecursionDepth, repair = false) {
   if (objNumTok?.kind !== "number" || genNumTok?.kind !== "number" || objKwTok?.kind !== "keyword" || objKwTok.value !== "obj") {
     throw new PdfError("E_PARSE", `Malformed indirect object header at byte offset ${offset}`);
   }
-  const value = parseNodeFromLexer(lexer, bytes, maxRecursionDepth, repair);
+  const value = yield* parseNodeFromLexerSteps(lexer, bytes, maxRecursionDepth, repair);
   if (!value) {
     throw new PdfError("E_PARSE", `Empty indirect object ${objNumTok.value} at offset ${offset}`);
   }
@@ -28824,7 +28835,9 @@ function parseObjectAtOffset(bytes, offset, maxRecursionDepth, repair = false) {
     span: { start: objNumTok.span.start, end: lexer.offset }
   };
 }
-function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursionDepth, maxObjects) {
+function* parseXrefRevisionAtSteps(bytes, xrefOffset, maxDecompressedBytes, maxRecursionDepth, maxObjects) {
+  yield;
+  let work = 0;
   if (xrefOffset < 0 || xrefOffset >= bytes.length) {
     throw new PdfError("E_PARSE", `Invalid xref offset: ${xrefOffset}`);
   }
@@ -28836,6 +28849,7 @@ function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursi
   if (firstTok.kind === "keyword" && firstTok.value === "xref") {
     const entries2 = /* @__PURE__ */ new Map();
     while (true) {
+      if (++work % 16 === 0) yield;
       const saved = lexer.offset;
       const tok = lexer.nextToken();
       if (!tok) {
@@ -28859,6 +28873,7 @@ function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursi
       }
       if (count > maxObjects + 1) throw new PdfError("E_LIMIT", "PDF object count limit exceeded while reading xref entries");
       for (let i = 0; i < count; i++) {
+        if (++work % 16 === 0) yield;
         const offTok = lexer.nextToken();
         const genTok = lexer.nextToken();
         const flagTok = lexer.nextToken();
@@ -28884,7 +28899,7 @@ function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursi
         if (entries2.size > maxObjects + 1) throw new PdfError("E_LIMIT", "PDF object count limit exceeded while reading xref entries");
       }
     }
-    const trailerNode = parseNodeFromLexer(lexer, bytes, maxRecursionDepth);
+    const trailerNode = yield* parseNodeFromLexerSteps(lexer, bytes, maxRecursionDepth);
     if (!trailerNode || trailerNode.kind !== "dict") {
       throw new PdfError("E_PARSE", "Missing trailer dictionary after xref table");
     }
@@ -28896,7 +28911,7 @@ function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursi
       previousXrefOffset: prevNode2?.kind === "number" ? prevNode2.value : void 0
     };
   }
-  const xrefObj = parseObjectAtOffset(bytes, xrefOffset, maxRecursionDepth);
+  const xrefObj = yield* parseObjectAtOffsetSteps(bytes, xrefOffset, maxRecursionDepth);
   if (xrefObj.value.kind !== "stream") {
     throw new PdfError("E_PARSE", `Expected xref table or XRef stream at offset ${xrefOffset}`);
   }
@@ -28917,6 +28932,7 @@ function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursi
   if (indexArray) {
     if (indexArray.kind !== "array" || indexArray.items.length % 2 !== 0) throw new PdfError("E_PARSE", "Invalid XRef range fields");
     for (let i = 0; i < indexArray.items.length; i += 2) {
+      if (++work % 16 === 0) yield;
       const first = indexArray.items[i];
       const count = indexArray.items[i + 1];
       if (first?.kind !== "number" || count?.kind !== "number" || !Number.isSafeInteger(first.value) || first.value < 0 || !Number.isSafeInteger(count.value) || count.value < 0 || !Number.isSafeInteger(first.value + count.value)) {
@@ -28939,9 +28955,11 @@ function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursi
     return v;
   };
   for (const [startObj, count] of subsections) {
+    if (++work % 16 === 0) yield;
     if (count > (decoded.length - pos) / stride) throw new PdfError("E_PARSE", "Truncated XRef stream");
     if (count > maxObjects + 1) throw new PdfError("E_LIMIT", "PDF object count limit exceeded while reading xref entries");
     for (let i = 0; i < count; i++) {
+      if (++work % 16 === 0) yield;
       const objNum = startObj + i;
       const field0 = w0 > 0 ? readInt(w0) : 1;
       const field1 = readInt(w1);
@@ -28987,12 +29005,16 @@ function isAsciiWhitespace(ch3) {
 function isAsciiDigit(ch3) {
   return ch3 >= 48 && ch3 <= 57;
 }
-function repairScanCosDocument(bytes, maxObjects, maxRecursionDepth) {
+function* repairScanCosDocumentSteps(bytes, maxObjects, maxRecursionDepth) {
+  yield;
+  let work = 0;
   const objects = /* @__PURE__ */ new Map();
   const trailers = [];
   let pos = 0;
   while (pos < bytes.length) {
+    if (++work % 16 === 0) yield;
     while (pos < bytes.length && !isAsciiDigit(bytes[pos])) {
+      if (++work % 16 === 0) yield;
       if (bytes[pos] === 37) {
         while (pos < bytes.length && bytes[pos] !== 10 && bytes[pos] !== 13) pos++;
         continue;
@@ -29002,7 +29024,7 @@ function repairScanCosDocument(bytes, maxObjects, maxRecursionDepth) {
         try {
           const token = lexer.nextToken();
           if (token?.kind === "keyword" && token.value === "trailer") {
-            const trailer = parseNodeFromLexer(lexer, bytes, maxRecursionDepth, true);
+            const trailer = yield* parseNodeFromLexerSteps(lexer, bytes, maxRecursionDepth, true);
             if (trailer?.kind === "dict") trailers.push(trailer);
             pos = lexer.offset;
             continue;
@@ -29035,7 +29057,7 @@ function repairScanCosDocument(bytes, maxObjects, maxRecursionDepth) {
     bytes[pos + 3] === 40)) {
       pos += 3;
       try {
-        const parsed = parseObjectAtOffset(bytes, headerStart, maxRecursionDepth, true);
+        const parsed = yield* parseObjectAtOffsetSteps(bytes, headerStart, maxRecursionDepth, true);
         objects.set(parsed.objectNumber, parsed);
         if (parsed.value.kind === "stream") {
           const type = dictGet(parsed.value.dict, "Type");
@@ -29052,13 +29074,17 @@ function repairScanCosDocument(bytes, maxObjects, maxRecursionDepth) {
   }
   return { objects, trailers };
 }
-function unpackRecoveredObjects(objects, maxObjects, maxDecompressedBytes, maxRecursionDepth) {
+function* unpackRecoveredObjectsSteps(objects, maxObjects, maxDecompressedBytes, maxRecursionDepth) {
+  yield;
+  let work = 0;
   for (const obj of [...objects.values()]) {
+    if (++work % 16 === 0) yield;
     if (obj.value.kind === "stream") {
       const t = dictGet(obj.value.dict, "Type");
       if (t?.kind === "name" && t.decoded === "ObjStm") {
         try {
-          for (const [unpackedNum, unpackedVal] of unpackObjectStream(obj.value, maxDecompressedBytes, maxRecursionDepth, true).entries()) {
+          for (const [unpackedNum, unpackedVal] of (yield* unpackObjectStreamSteps(obj.value, maxDecompressedBytes, maxRecursionDepth, true)).entries()) {
+            if (++work % 16 === 0) yield;
             if (!objects.has(unpackedNum)) {
               objects.set(unpackedNum, {
                 objectNumber: unpackedNum,
@@ -29094,7 +29120,9 @@ function recoveredReferences(objects) {
   }
   return { ...rootRef ? { rootRef } : {}, ...infoRef ? { infoRef } : {} };
 }
-function unpackObjectStream(streamObj, maxDecompressedBytes, maxRecursionDepth, repair = false) {
+function* unpackObjectStreamSteps(streamObj, maxDecompressedBytes, maxRecursionDepth, repair = false) {
+  yield;
+  let work = 0;
   const nNode = dictGet(streamObj.dict, "N");
   const firstNode = dictGet(streamObj.dict, "First");
   if (nNode?.kind !== "number" || firstNode?.kind !== "number") {
@@ -29104,6 +29132,7 @@ function unpackObjectStream(streamObj, maxDecompressedBytes, maxRecursionDepth,
   const headerLexer = new CosByteLexer(decoded, 0);
   const pairs = [];
   for (let i = 0; i < nNode.value; i++) {
+    if (++work % 16 === 0) yield;
     const numTok = headerLexer.nextToken();
     const offTok = headerLexer.nextToken();
     if (numTok?.kind === "number" && offTok?.kind === "number") {
@@ -29112,9 +29141,10 @@ function unpackObjectStream(streamObj, maxDecompressedBytes, maxRecursionDepth,
   }
   const result = /* @__PURE__ */ new Map();
   for (const pair of pairs) {
+    if (++work % 16 === 0) yield;
     try {
       const valLexer = new CosByteLexer(decoded, firstNode.value + pair.relativeOffset);
-      const node = parseNodeFromLexer(valLexer, decoded, maxRecursionDepth, repair);
+      const node = yield* parseNodeFromLexerSteps(valLexer, decoded, maxRecursionDepth, repair);
       if (node) {
         result.set(pair.objectNumber, node);
       }
@@ -29124,7 +29154,9 @@ function unpackObjectStream(streamObj, maxDecompressedBytes, maxRecursionDepth,
   }
   return result;
 }
-function parseCosDocument(bytes, options = {}) {
+function* parseCosDocumentSteps(bytes, options = {}) {
+  yield;
+  let work = 0;
   const version = parseHeaderVersion(bytes);
   const recovery = options.recovery ?? "strict";
   const maxObjects = options.maxObjects ?? Infinity;
@@ -29159,10 +29191,12 @@ function parseCosDocument(bytes, options = {}) {
         let currentXrefOffset = offsetTok.value;
         const visitedOffsets = /* @__PURE__ */ new Set();
         while (currentXrefOffset !== void 0 && !visitedOffsets.has(currentXrefOffset)) {
+          if (++work % 16 === 0) yield;
           visitedOffsets.add(currentXrefOffset);
-          const rev = parseXrefRevisionAt(bytes, currentXrefOffset, maxDecompressedBytes, maxRecursionDepth, maxObjects);
+          const rev = yield* parseXrefRevisionAtSteps(bytes, currentXrefOffset, maxDecompressedBytes, maxRecursionDepth, maxObjects);
           revisions.push(rev);
           for (const [num, entry] of rev.entries.entries()) {
+            if (++work % 16 === 0) yield;
             if (!mergedXref.has(num)) {
               mergedXref.set(num, entry);
               if (mergedXref.size > maxObjects + 1) throw new PdfError("E_LIMIT", "PDF object count limit exceeded while reading xref entries");
@@ -29195,8 +29229,9 @@ function parseCosDocument(bytes, options = {}) {
   if (!useRepair && rootRef) {
     try {
       for (const [objNum, entry] of mergedXref.entries()) {
+        if (++work % 16 === 0) yield;
         if (entry.type !== "uncompressed") continue;
-        const parsed = parseObjectAtOffset(bytes, entry.offset ?? 0, maxRecursionDepth, recovery === "repair");
+        const parsed = yield* parseObjectAtOffsetSteps(bytes, entry.offset ?? 0, maxRecursionDepth, recovery === "repair");
         if (parsed.objectNumber !== objNum || parsed.generationNumber !== (entry.generationNumber ?? 0)) {
           throw new PdfError("E_PARSE", `Bad uncompressed XRef entry for object ${objNum}`);
         }
@@ -29214,7 +29249,7 @@ function parseCosDocument(bytes, options = {}) {
       throw new PdfError("E_PARSE", "PDF trailer missing /Root reference");
     }
     useRepair = true;
-    const scanned = repairScanCosDocument(bytes, maxObjects, maxRecursionDepth);
+    const scanned = yield* repairScanCosDocumentSteps(bytes, maxObjects, maxRecursionDepth);
     objects = scanned.objects;
     revisions.length = 0;
     mergedXref.clear();
@@ -29249,7 +29284,7 @@ function parseCosDocument(bytes, options = {}) {
     encryptNode = encrypt?.kind === "ref" || encrypt?.kind === "dict" ? encrypt : void 0;
     encryptRef = encrypt?.kind === "ref" ? encrypt : void 0;
     idArray = id?.kind === "array" ? id : void 0;
-    if (!rootRef && !encryptNode) unpackRecoveredObjects(objects, maxObjects, maxDecompressedBytes, maxRecursionDepth);
+    if (!rootRef && !encryptNode) yield* unpackRecoveredObjectsSteps(objects, maxObjects, maxDecompressedBytes, maxRecursionDepth);
     const fallback = recoveredReferences(objects);
     rootRef ??= fallback.rootRef;
     infoRef ??= fallback.infoRef;
@@ -29284,20 +29319,21 @@ function parseCosDocument(bytes, options = {}) {
       maxRecursionDepth
     });
     doc.encryption = encState;
-    decryptCosDocument(doc, encState);
+    yield* decryptCosDocumentSteps(doc, encState);
   }
   if (useRepair) {
-    unpackRecoveredObjects(objects, maxObjects, maxDecompressedBytes, maxRecursionDepth);
+    yield* unpackRecoveredObjectsSteps(objects, maxObjects, maxDecompressedBytes, maxRecursionDepth);
     doc.infoRef ??= recoveredReferences(objects).infoRef;
   }
   const objStmCache = /* @__PURE__ */ new Map();
   for (const [objNum, entry] of mergedXref.entries()) {
+    if (++work % 16 === 0) yield;
     if (entry.type === "compressed" && entry.objectStreamNumber !== void 0) {
       let unpacked = objStmCache.get(entry.objectStreamNumber);
       if (!unpacked) {
         const stmObj = objects.get(entry.objectStreamNumber)?.value;
         if (stmObj?.kind === "stream") {
-          unpacked = unpackObjectStream(stmObj, maxDecompressedBytes, maxRecursionDepth, recovery === "repair");
+          unpacked = yield* unpackObjectStreamSteps(stmObj, maxDecompressedBytes, maxRecursionDepth, recovery === "repair");
           objStmCache.set(entry.objectStreamNumber, unpacked);
         }
       }
@@ -29314,6 +29350,9 @@ function parseCosDocument(bytes, options = {}) {
   }
   return doc;
 }
+function parseCosDocument(bytes, options = {}) {
+  return drainWork(parseCosDocumentSteps(bytes, options));
+}
 var WIN_ANSI_HIGH_BYTES = {
   128: 8364,
   130: 8218,
@@ -40344,7 +40383,8 @@ function resolveInheritedFieldEntry(doc, dict, key) {
   }
   return void 0;
 }
-function collectFieldDicts(doc, node, prefix = "", out = [], parentFt = "", parentFf = 0, parentQ = 0, parentMaxLen) {
+function* collectFieldDictsSteps(doc, node, prefix = "", out = [], parentFt = "", parentFf = 0, parentQ = 0, parentMaxLen, yieldState = { work: 0 }) {
+  if (++yieldState.work % 256 === 0) yield;
   const dict = doc.resolveDict(node);
   if (!dict) return out;
   const tNode = doc.resolve(dictGet(dict, "T"));
@@ -40377,7 +40417,8 @@ function collectFieldDicts(doc, node, prefix = "", out = [], parentFt = "", pare
       return out;
     }
     for (const kid of kidsArr.items) {
-      collectFieldDicts(doc, kid, fullName, out, currentFt, currentFf, currentQ, currentMaxLen);
+      if (++yieldState.work % 16 === 0) yield;
+      yield* collectFieldDictsSteps(doc, kid, fullName, out, currentFt, currentFf, currentQ, currentMaxLen, yieldState);
     }
   } else if (fullName) {
     out.push({
@@ -41382,6 +41423,9 @@ q ${sx} 0 0 ${sy} ${tx} ${ty} cm /${appearanceName} Do Q
     dictSet(acroForm, "NeedAppearances", cosBool(false));
   }
 }
+function collectFieldDicts(doc, node, prefix = "", out = [], parentFt = "", parentFf = 0, parentQ = 0, parentMaxLen) {
+  drainWork(collectFieldDictsSteps(doc, node, prefix, out, parentFt, parentFf, parentQ, parentMaxLen));
+}
 var PdfPage = class {
   cosDoc;
   pageRef;
@@ -43835,14 +43879,18 @@ var PdfDocument = class _PdfDocument {
     });
     return new _PdfDocument(parseCosDocument(rawBytes));
   }
-  static load(bytes, options) {
+  static *loadSteps(bytes, options) {
+    yield;
     return new _PdfDocument(
-      parseCosDocument(bytes, {
+      yield* parseCosDocumentSteps(bytes, {
         ...options,
         recovery: options?.recovery ?? "repair"
       })
     );
   }
+  static load(bytes, options) {
+    return drainWork(_PdfDocument.loadSteps(bytes, options));
+  }
   rebuildPagesList() {
     const catalog = this.cos.resolveDict(this.cos.rootRef);
     const pagesNode = catalog ? dictGet(catalog, "Pages") : void 0;
@@ -43924,20 +43972,30 @@ var PdfDocument = class _PdfDocument {
     this.pages.splice(index, 1);
     this.syncPageTree();
   }
-  copyPagesFrom(sourceDoc, indices) {
+  *copyPagesFromSteps(sourceDoc, indices) {
+    function* cloneItems(items) {
+      const result = [];
+      for (const item of items) result.push(yield* cloneNode(item));
+      return result;
+    }
+    yield;
+    let work = 0;
     const memo = /* @__PURE__ */ new Map();
     const sourcePageObjNums = /* @__PURE__ */ new Set();
     for (let i = 0; i < sourceDoc.getPageCount(); i++) {
+      if (++work % 16 === 0) yield;
       sourcePageObjNums.add(sourceDoc.getPage(i).ref.objectNumber);
     }
     const targetPageRefs = [];
     for (const idx of indices) {
+      if (++work % 16 === 0) yield;
       const srcPage = sourceDoc.getPage(idx);
       const pageRef = this.cos.allocateObject({ kind: "null" });
       targetPageRefs.push(pageRef);
       memo.set(srcPage.ref.objectNumber, pageRef);
     }
-    const cloneNode = (node) => {
+    const cloneNode = function* (node) {
+      if (++work % 16 === 0) yield;
       if (node.kind === "ref") {
         const existing = memo.get(node.objectNumber);
         if (existing) return existing;
@@ -43948,12 +44006,12 @@ var PdfDocument = class _PdfDocument {
         if (!target) return cosRef(0);
         const placeholderRef = this.cos.allocateObject({ kind: "null" });
         memo.set(node.objectNumber, placeholderRef);
-        const clonedTarget = cloneNode(target);
+        const clonedTarget = yield* cloneNode(target);
         this.cos.setObject(placeholderRef.objectNumber, clonedTarget, 0);
         return placeholderRef;
       }
       if (node.kind === "array") {
-        return cosArray(node.items.map(cloneNode));
+        return cosArray(yield* cloneItems(node.items));
       }
       if (node.kind === "dict") {
         const typeEntry = dictGet(node, "Type");
@@ -43963,13 +44021,13 @@ var PdfDocument = class _PdfDocument {
           if (isPageTreeNode && entry.key.decoded === "Parent") continue;
           newEntries.push({
             key: { ...entry.key },
-            value: cloneNode(entry.value)
+            value: yield* cloneNode(entry.value)
           });
         }
         return { kind: "dict", entries: newEntries };
       }
       if (node.kind === "stream") {
-        const clonedDict = cloneNode(node.dict);
+        const clonedDict = yield* cloneNode(node.dict);
         return {
           kind: "stream",
           dict: clonedDict,
@@ -43978,11 +44036,12 @@ var PdfDocument = class _PdfDocument {
         };
       }
       return node;
-    };
+    }.bind(this);
     const copiedPages = [];
     for (const [position, idx] of indices.entries()) {
+      if (++work % 16 === 0) yield;
       const srcPage = sourceDoc.getPage(idx);
-      const clonedPageDict = cloneNode(srcPage.pageDict);
+      const clonedPageDict = yield* cloneNode(srcPage.pageDict);
       const size = srcPage.getSize();
       if (!dictGet(clonedPageDict, "MediaBox")) {
         dictSet(
@@ -43992,13 +44051,14 @@ var PdfDocument = class _PdfDocument {
         );
       }
       if (!dictGet(clonedPageDict, "Resources")) {
-        dictSet(clonedPageDict, "Resources", cloneNode(srcPage.getResourcesDict()));
+        dictSet(clonedPageDict, "Resources", yield* cloneNode(srcPage.getResourcesDict()));
       }
       if (!dictGet(clonedPageDict, "Rotate") && srcPage.getRotation() !== 0) {
         dictSet(clonedPageDict, "Rotate", cosNumber(srcPage.getRotation()));
       }
       const inheritedBoxKeys = ["CropBox", "BleedBox", "TrimBox", "ArtBox"];
       for (const boxKey of inheritedBoxKeys) {
+        if (++work % 16 === 0) yield;
         if (!dictGet(clonedPageDict, boxKey)) {
           const boxVal = boxKey === "CropBox" ? srcPage.getCropBox() : boxKey === "BleedBox" ? srcPage.getBleedBox() : boxKey === "TrimBox" ? srcPage.getTrimBox() : srcPage.getArtBox();
           if (boxVal[0] !== 0 || boxVal[1] !== 0 || boxVal[2] !== size.width || boxVal[3] !== size.height) {
@@ -44040,8 +44100,9 @@ var PdfDocument = class _PdfDocument {
       };
       const clonedRootFieldRefs = [];
       for (const item of srcFieldsArr.items) {
+        if (++work % 16 === 0) yield;
         if (!hasClonedDescendant(item)) continue;
-        const cloned = cloneNode(item);
+        const cloned = yield* cloneNode(item);
         if (cloned.kind === "ref") {
           const clonedDict = this.cos.resolveDict(cloned);
           const kidsArr = clonedDict ? this.cos.resolveArray(dictGet(clonedDict, "Kids")) : void 0;
@@ -44075,6 +44136,7 @@ var PdfDocument = class _PdfDocument {
             dstFields.items.filter((x) => x.kind === "ref").map((x) => x.objectNumber)
           );
           for (const fRef of clonedRootFieldRefs) {
+            if (++work % 16 === 0) yield;
             if (!existingNums.has(fRef.objectNumber)) {
               dstFields.items.push(fRef);
               existingNums.add(fRef.objectNumber);
@@ -44082,11 +44144,11 @@ var PdfDocument = class _PdfDocument {
           }
           const srcDr = dictGet(srcAcroForm, "DR");
           if (srcDr && !dictGet(dstAcroForm, "DR")) {
-            dictSet(dstAcroForm, "DR", cloneNode(srcDr));
+            dictSet(dstAcroForm, "DR", yield* cloneNode(srcDr));
           }
           const srcDa = dictGet(srcAcroForm, "DA");
           if (srcDa && !dictGet(dstAcroForm, "DA")) {
-            dictSet(dstAcroForm, "DA", cloneNode(srcDa));
+            dictSet(dstAcroForm, "DA", yield* cloneNode(srcDa));
           }
         }
       }
@@ -44095,12 +44157,15 @@ var PdfDocument = class _PdfDocument {
     if (srcOcProps) {
       const dstCatalog = this.cos.resolveDict(this.cos.rootRef);
       if (dstCatalog && !dictGet(dstCatalog, "OCProperties")) {
-        dictSet(dstCatalog, "OCProperties", cloneNode(srcOcProps));
+        dictSet(dstCatalog, "OCProperties", yield* cloneNode(srcOcProps));
       }
     }
     this.syncPageTree();
     return copiedPages;
   }
+  copyPagesFrom(sourceDoc, indices) {
+    return drainWork(this.copyPagesFromSteps(sourceDoc, indices));
+  }
   embedStandardFont(fontName) {
     return createStandardFontHandle(fontName);
   }
@@ -44300,14 +44365,15 @@ var PdfDocument = class _PdfDocument {
     });
     return buildSemanticAstFromPages(extractedPages, tablesByPage, displayLists);
   }
-  save(options = {}) {
+  *saveSteps(options = {}) {
+    yield;
     this.syncPageTree();
     if (this.cos.requiresFullRewrite) {
       pruneUnusedXObjects(this.cos, this.pages);
       discardUnreachableObjects(this.cos);
     }
     if (options.encrypt) {
-      return encryptCosDocument(this.cos, options.encrypt);
+      return yield* encryptCosDocumentSteps(this.cos, options.encrypt);
     }
     const allObjects = [...this.cos.objects.values()].sort(
       (a, b) => a.objectNumber - b.objectNumber
@@ -44315,7 +44381,7 @@ var PdfDocument = class _PdfDocument {
     if (options.incremental && !this.cos.requiresFullRewrite && this.cos.bytes.length > 0) {
       return appendIncrementalRevision(this.cos.bytes, this.cos, allObjects);
     }
-    return serializeCosDocument({
+    return yield* serializeCosDocumentSteps({
       objects: allObjects,
       rootRef: this.cos.rootRef,
       infoRef: this.cos.infoRef,
@@ -44326,6 +44392,9 @@ var PdfDocument = class _PdfDocument {
       linearize: options.linearize
     });
   }
+  save(options = {}) {
+    return drainWork(this.saveSteps(options));
+  }
 };
 function resolveDestinationPageIndex(doc, destOrActionNode) {
   const cos = doc.cos;
@@ -45660,10 +45729,8 @@ function normalizeQuarterTurn(degrees) {
   if (mod === 90 || mod === 180 || mod === 270) return mod;
   return 0;
 }
-async function runPdftkCli(argv, files) {
-  return runPdftkCliSync(argv, files);
-}
-function runPdftkCliSync(argv, files) {
+function* runPdftkCliSteps(argv, files, signal) {
+  let cooperativeWork = 63;
   if (argv.length === 0 || argv.includes("--help") || argv.includes("-h")) {
     return {
       exitCode: 0,
@@ -45677,13 +45744,20 @@ function runPdftkCliSync(argv, files) {
   const inputPasswords = /* @__PURE__ */ new Map();
   let defaultInputPassword = "";
   for (let p = 0; p < argv.length; p++) {
+    if (++cooperativeWork % 64 === 0)
+      yield;
     if (argv[p]?.toLowerCase() === "input_pw") {
       for (let q = p + 1; q < argv.length; q++) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         const tok = argv[q];
-        if (PDFTK_OPERATIONS.has(tok.toLowerCase())) break;
+        if (PDFTK_OPERATIONS.has(tok.toLowerCase()))
+          break;
         const eq = tok.indexOf("=");
-        if (eq > 0) inputPasswords.set(tok.slice(0, eq), tok.slice(eq + 1));
-        else defaultInputPassword = tok;
+        if (eq > 0)
+          inputPasswords.set(tok.slice(0, eq), tok.slice(eq + 1));
+        else
+          defaultInputPassword = tok;
       }
     }
   }
@@ -45692,8 +45766,11 @@ function runPdftkCliSync(argv, files) {
   let idx = 0;
   let autoHandleCharCode = 65;
   while (idx < argv.length) {
+    if (++cooperativeWork % 64 === 0)
+      yield;
     const token = argv[idx];
-    if (PDFTK_OPERATIONS.has(token.toLowerCase()) || token.toLowerCase() === "input_pw") break;
+    if (PDFTK_OPERATIONS.has(token.toLowerCase()) || token.toLowerCase() === "input_pw")
+      break;
     idx++;
     let handleName = "";
     let filePath = token;
@@ -45718,15 +45795,20 @@ function runPdftkCliSync(argv, files) {
 ` };
     }
     handles.set(handleName, doc);
-    if (!handles.has("")) handles.set("", doc);
+    if (!handles.has(""))
+      handles.set("", doc);
     orderedDocs.push({ handle: handleName, doc });
   }
   if (orderedDocs.length === 0) {
     return { exitCode: 1, stdout: "", stderr: "Error: No input PDF files specified.\n" };
   }
   while (idx < argv.length && argv[idx]?.toLowerCase() === "input_pw") {
+    if (++cooperativeWork % 64 === 0)
+      yield;
     idx++;
     while (idx < argv.length && !PDFTK_OPERATIONS.has(argv[idx].toLowerCase())) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       idx++;
     }
   }
@@ -45763,6 +45845,8 @@ function runPdftkCliSync(argv, files) {
     "allfeatures"
   ]);
   while (idx < argv.length) {
+    if (++cooperativeWork % 64 === 0)
+      yield;
     const tok = argv[idx++];
     const lower = tok.toLowerCase();
     if (lower === "output") {
@@ -45777,6 +45861,8 @@ function runPdftkCliSync(argv, files) {
       ownerPassword = argv[idx++];
     } else if (lower === "allow") {
       while (idx < argv.length && ALLOW_KEYWORDS.has(argv[idx].toLowerCase())) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         allowPermissions.add(argv[idx++].toLowerCase());
       }
     } else if (lower === "keep_first_id") {
@@ -45825,6 +45911,7 @@ function runPdftkCliSync(argv, files) {
   if (operation === "burst") {
     const pattern = outputTarget ?? "pg_%04d.pdf";
     for (let p = 1; p <= primaryDoc.pageCount; p++) {
+      yield;
       const singleDoc = PdfDocument.create();
       copyPrimaryMetadata(primaryDoc, singleDoc);
       singleDoc.copyPagesFrom(primaryDoc, [p - 1]);
@@ -45833,7 +45920,10 @@ function runPdftkCliSync(argv, files) {
       }
       if (uncompressStreams || compressStreams) {
         for (const obj of singleDoc.cos.objects.values()) {
-          if (obj.value.kind !== "stream") continue;
+          if (++cooperativeWork % 64 === 0)
+            yield;
+          if (obj.value.kind !== "stream")
+            continue;
           const raw = singleDoc.cos.decodeStream(obj.value);
           dictDelete(obj.value.dict, "Filter");
           dictDelete(obj.value.dict, "DecodeParms");
@@ -45879,6 +45969,8 @@ function runPdftkCliSync(argv, files) {
     const filesToAttach = [];
     let toPageSpec;
     for (let k = 0; k < opArgs.length; k++) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       if (opArgs[k]?.toLowerCase() === "to_page") {
         toPageSpec = opArgs[++k];
         continue;
@@ -45895,6 +45987,8 @@ function runPdftkCliSync(argv, files) {
     }
     const fieldValues = parseFormDataBytes(dataBytes);
     for (const [k, v] of fieldValues.entries()) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       setDocumentFormField(resultDoc.cos, k, v);
     }
     if (shouldFlatten) {
@@ -45908,7 +46002,10 @@ function runPdftkCliSync(argv, files) {
     const selections = [];
     if (opArgs.length === 0) {
       for (const item of orderedDocs) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         for (let p = 1; p <= item.doc.pageCount; p++) {
+          yield;
           selections.push({ handle: item.handle, pageNumber: p });
         }
       }
@@ -45916,12 +46013,19 @@ function runPdftkCliSync(argv, files) {
       const groups = opArgs.map((arg) => parsePdftkRangeToken(arg, handles, primaryHandle));
       const maxLen = Math.max(0, ...groups.map((g) => g.length));
       for (let k = 0; k < maxLen; k++) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         for (const g of groups) {
-          if (k < g.length) selections.push(g[k]);
+          if (++cooperativeWork % 64 === 0)
+            yield;
+          if (k < g.length)
+            selections.push(g[k]);
         }
       }
     } else {
       for (const arg of opArgs) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         selections.push(...parsePdftkRangeToken(arg, handles, primaryHandle));
       }
     }
@@ -45941,6 +46045,8 @@ function runPdftkCliSync(argv, files) {
     };
     const remappedBookmarks = [];
     for (let sIdx = 0; sIdx < selections.length; sIdx++) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       const sel = selections[sIdx];
       const srcDoc = handles.get(sel.handle) ?? primaryDoc;
       const [copied] = resultDoc.copyPagesFrom(srcDoc, [sel.pageNumber - 1]);
@@ -45950,6 +46056,8 @@ function runPdftkCliSync(argv, files) {
         copied.setRotation(normalizeQuarterTurn(rawRot));
       }
       for (const bm of getDocBookmarks(srcDoc)) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         if (bm.pageNumber === sel.pageNumber) {
           remappedBookmarks.push({
             title: bm.title,
@@ -45962,11 +46070,15 @@ function runPdftkCliSync(argv, files) {
     setDocumentBookmarks(resultDoc, remappedBookmarks);
     const usedDocs = /* @__PURE__ */ new Set();
     for (const sel of selections) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       const d = handles.get(sel.handle) ?? primaryDoc;
       usedDocs.add(d);
     }
     const unpackedMap = /* @__PURE__ */ new Map();
     for (const d of usedDocs) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       unpackFilesFromDocument(d, ".", unpackedMap);
     }
     if (unpackedMap.size > 0) {
@@ -45978,11 +46090,17 @@ function runPdftkCliSync(argv, files) {
   } else if (operation === "rotate") {
     const rotByPage = /* @__PURE__ */ new Map();
     for (const arg of opArgs) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       for (const sel of parsePdftkRangeToken(arg, handles, primaryHandle)) {
-        if (sel.rotation) rotByPage.set(sel.pageNumber, sel.rotation);
+        if (++cooperativeWork % 64 === 0)
+          yield;
+        if (sel.rotation)
+          rotByPage.set(sel.pageNumber, sel.rotation);
       }
     }
     for (let p = 1; p <= resultDoc.pageCount; p++) {
+      yield;
       const spec = rotByPage.get(p);
       if (spec) {
         const page = resultDoc.getPage(p - 1);
@@ -45998,12 +46116,7 @@ function runPdftkCliSync(argv, files) {
 ` };
     }
     const overlayDoc = PdfDocument.load(overlayBytes);
-    applyOverlayToDocument(
-      resultDoc,
-      overlayDoc,
-      operation.includes("background") ? "background" : "stamp",
-      operation.startsWith("multi")
-    );
+    applyOverlayToDocument(resultDoc, overlayDoc, operation.includes("background") ? "background" : "stamp", operation.startsWith("multi"));
     if (shouldFlatten) {
       flattenDocumentFormFields(resultDoc.cos);
     }
@@ -46015,15 +46128,19 @@ function runPdftkCliSync(argv, files) {
   if (dropXfa) {
     const root = resultDoc.cos.resolveDict(resultDoc.cos.rootRef);
     const acroForm = root ? resultDoc.cos.resolveDict(dictGet(root, "AcroForm")) : void 0;
-    if (acroForm) dictDelete(acroForm, "XFA");
+    if (acroForm)
+      dictDelete(acroForm, "XFA");
   }
   if (dropXmp) {
     const root = resultDoc.cos.resolveDict(resultDoc.cos.rootRef);
-    if (root) dictDelete(root, "Metadata");
+    if (root)
+      dictDelete(root, "Metadata");
   }
   if (replacementFont && operation === "fill_form") {
     const cleanFontName = replacementFont.startsWith("/") ? replacementFont.slice(1) : replacementFont;
     for (const obj of resultDoc.cos.objects.values()) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       if (obj.value.kind === "dict") {
         const stNode = dictGet(obj.value, "Subtype");
         const bfNode = dictGet(obj.value, "BaseFont");
@@ -46064,7 +46181,10 @@ function runPdftkCliSync(argv, files) {
   }
   if (uncompressStreams || compressStreams) {
     for (const obj of resultDoc.cos.objects.values()) {
-      if (obj.value.kind !== "stream") continue;
+      if (++cooperativeWork % 64 === 0)
+        yield;
+      if (obj.value.kind !== "stream")
+        continue;
       const raw = resultDoc.cos.decodeStream(obj.value);
       dictDelete(obj.value.dict, "Filter");
       dictDelete(obj.value.dict, "DecodeParms");
@@ -46079,34 +46199,44 @@ function runPdftkCliSync(argv, files) {
   }
   const hasAllow = allowPermissions.size > 0;
   const allAllowed = allowPermissions.has("allfeatures");
-  const savedBytes = resultDoc.save(
-    userPassword || ownerPassword ? {
-      encrypt: {
-        userPassword: userPassword ?? "",
-        ownerPassword: ownerPassword ?? userPassword ?? "owner",
-        revision: 6,
-        ...hasAllow ? {
-          permissions: {
-            print: allAllowed || allowPermissions.has("printing") || allowPermissions.has("degradedprinting"),
-            modify: allAllowed || allowPermissions.has("modifycontents"),
-            copy: allAllowed || allowPermissions.has("copycontents"),
-            addNotes: allAllowed || allowPermissions.has("modifyannotations"),
-            fillForms: allAllowed || allowPermissions.has("fillin") || allowPermissions.has("modifyannotations"),
-            extractAccessibility: allAllowed || allowPermissions.has("screenreaders"),
-            assemble: allAllowed || allowPermissions.has("assembly") || allowPermissions.has("modifycontents"),
-            printHighRes: allAllowed || allowPermissions.has("printing")
-          }
-        } : {}
-      }
-    } : {}
-  );
+  const savedBytes = resultDoc.save(userPassword || ownerPassword ? {
+    encrypt: {
+      userPassword: userPassword ?? "",
+      ownerPassword: ownerPassword ?? userPassword ?? "owner",
+      revision: 6,
+      ...hasAllow ? {
+        permissions: {
+          print: allAllowed || allowPermissions.has("printing") || allowPermissions.has("degradedprinting"),
+          modify: allAllowed || allowPermissions.has("modifycontents"),
+          copy: allAllowed || allowPermissions.has("copycontents"),
+          addNotes: allAllowed || allowPermissions.has("modifyannotations"),
+          fillForms: allAllowed || allowPermissions.has("fillin") || allowPermissions.has("modifyannotations"),
+          extractAccessibility: allAllowed || allowPermissions.has("screenreaders"),
+          assemble: allAllowed || allowPermissions.has("assembly") || allowPermissions.has("modifycontents"),
+          printHighRes: allAllowed || allowPermissions.has("printing")
+        }
+      } : {}
+    }
+  } : {});
   if (!outputTarget || outputTarget === "-") {
     return { exitCode: 0, stdout: "", stderr: "", stdoutBytes: savedBytes };
   }
   files.set(outputTarget, savedBytes);
   return { exitCode: 0, stdout: "", stderr: "" };
 }
+async function runPdftkCli(argv, files, signal) {
+  return drainSteps(runPdftkCliSteps(argv, files, signal), signal);
+}
+function runPdftkCliSync(argv, files, signal) {
+  const steps = runPdftkCliSteps(argv, files, signal);
+  let next = steps.next();
+  while (!next.done) {
+    next = steps.next();
+  }
+  return next.value;
+}
 async function executePdftk(context) {
+  let cooperativeWork = 63;
   const invocation = createOutputOperation(context, { write: async () => {
   } });
   try {
@@ -46125,6 +46255,7 @@ async function executePdftk(context) {
       const chunks = [];
       let total = 0;
       for await (const chunk of readBytes(context.stdin, invocation.signal)) {
+        if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
         chunks.push(chunk);
         total += chunk.byteLength;
         chargeBytes(chunk.byteLength);
@@ -46132,12 +46263,14 @@ async function executePdftk(context) {
       const buf = new Uint8Array(total);
       let off = 0;
       for (const c of chunks) {
+        if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
         buf.set(c, off);
         off += c.byteLength;
       }
       vfsFiles.set("-", buf);
     }
     for (const token of argv) {
+      if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
       if (token.startsWith("-") && token !== "-") continue;
       const eqIdx = token.indexOf("=");
       const filePath = eqIdx > 0 ? token.slice(eqIdx + 1) : token;
@@ -46149,8 +46282,9 @@ async function executePdftk(context) {
       } catch {
       }
     }
+    context.inputBudget?.check(0);
     const existingSnap = new Map(vfsFiles);
-    const res = await runPdftkCli(argv, vfsFiles);
+    const res = await runPdftkCli(argv, vfsFiles, invocation.signal);
     if (res.stderr) {
       await writeBytes(context.stderr, new TextEncoder().encode(res.stderr), invocation.signal);
     }
@@ -46165,6 +46299,7 @@ async function executePdftk(context) {
       await writeBytes(stdout.output, outBytes, invocation.signal);
     }
     for (const [key, val] of vfsFiles.entries()) {
+      if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
       if (key !== "-" && existingSnap.get(key) !== val) {
         chargeBytes(val.byteLength);
         const abs = resolveVfsPath(key);
@@ -46181,13 +46316,14 @@ async function executePdftk(context) {
     await invocation.close();
   }
 }
-function createPdftkCommand(_options = {}) {
+function createPdftkCommand(options = {}) {
+  const maxInputBytes = InputByteBudget.limit(options.limits?.maxInputBytes);
   return Object.freeze({
     name: "pdftk",
     runtimeIdentity: commandRuntimeIdentity,
     description: "Manipulate PDF documents, fill/flatten AcroForms, and assemble pages via @poe-code/pdf-ast",
     execute(context) {
-      return executePdftk(context);
+      return new InputByteBudget(maxInputBytes).run(context, executePdftk);
     }
   });
 }