@poe-platform/safe-bash 0.1.788 → 0.1.790

package/dist/safe-bash-command-pdftoppm/index.js

@@ -4,6 +4,8 @@ import {
 
 // packages/safe-bash-command-pdftoppm/dist/index.js
 init_buffer();
+import { yieldTurn, drainCooperativeSteps as drainSteps } from "../safe-bash-contracts/yield.js";
+import { InputByteBudget } from "../safe-bash-contracts/io.js";
 import { writeFileOutput } from "../safe-bash-contracts/filesystem-output-budget.js";
 import {
   commandRuntimeIdentity,
@@ -27294,6 +27296,11 @@ function tokenizeCos(bytes, start = 0, end = bytes.length) {
   }
   return tokens;
 }
+function drainWork(work) {
+  let step = work.next();
+  while (!step.done) step = work.next();
+  return step.value;
+}
 function bytesToString3(bytes) {
   if (typeof bytes !== "object" || bytes?.length === void 0) {
     throw new Error("Invalid argument for bytesToString");
@@ -27889,7 +27896,9 @@ function concatByteArrays(chunks) {
   }
   return out;
 }
-function serializeCosDocument(options) {
+function* serializeCosDocumentSteps(options) {
+  yield;
+  let work = 0;
   const maxOutputBytes = options.maxOutputBytes ?? Infinity;
   const maxObjects = options.maxObjects ?? Infinity;
   const sorted = [...options.objects].sort((a, b) => a.objectNumber - b.objectNumber);
@@ -27912,6 +27921,7 @@ function serializeCosDocument(options) {
     const packable = [];
     const direct = [];
     for (const obj of sorted) {
+      if (++work % 16 === 0) yield;
       const isLinearized = obj.value.kind === "dict" && dictGet(obj.value, "Linearized") !== void 0;
       if (obj.value.kind !== "stream" && obj.generationNumber === 0 && !isLinearized) {
         packable.push(obj);
@@ -27926,6 +27936,7 @@ function serializeCosDocument(options) {
       const headerPairs = [];
       let relOffset = 0;
       for (const pObj of packable) {
+        if (++work % 16 === 0) yield;
         headerPairs.push(`${pObj.objectNumber} ${relOffset}`);
         const bBytes = serializeCosNodeBytes(pObj.value);
         const nl = textEncoder2.encode("\n");
@@ -27951,6 +27962,7 @@ function serializeCosDocument(options) {
       ];
       const directOffsets = /* @__PURE__ */ new Map();
       for (const dObj of allDirect) {
+        if (++work % 16 === 0) yield;
         directOffsets.set(dObj.objectNumber, { offset, generation: dObj.generationNumber });
         const prefix = textEncoder2.encode(`${dObj.objectNumber} ${dObj.generationNumber} obj
 `);
@@ -27961,6 +27973,7 @@ function serializeCosDocument(options) {
       }
       const compressedMap = /* @__PURE__ */ new Map();
       for (let idx = 0; idx < packable.length; idx++) {
+        if (++work % 16 === 0) yield;
         compressedMap.set(packable[idx].objectNumber, idx);
       }
       const xrefOffset2 = offset;
@@ -27978,6 +27991,7 @@ function serializeCosDocument(options) {
       };
       writeEntry7(0, 0, 0, 65535);
       for (let i = 1; i < size2; i++) {
+        if (++work % 16 === 0) yield;
         if (i === xrefStmNum) {
           writeEntry7(i, 1, xrefOffset2, 0);
         } else if (compressedMap.has(i)) {
@@ -28058,6 +28072,7 @@ ${xrefOffset2}
     let pageCount = 0;
     let firstPageObjNum = options.rootRef.objectNumber;
     for (const o of sorted) {
+      if (++work % 16 === 0) yield;
       if (o.value.kind === "dict") {
         const t = dictGet(o.value, "Type");
         if (t?.kind === "name" && t.decoded === "Page") {
@@ -28105,6 +28120,7 @@ ${xrefOffset2}
   }
   const objectOffsets = /* @__PURE__ */ new Map();
   for (const obj of sorted) {
+    if (++work % 16 === 0) yield;
     objectOffsets.set(obj.objectNumber, { offset, generation: obj.generationNumber });
     let value = obj.value;
     if (options.normalizeContent && value.kind === "stream" && value.decodedBytes) {
@@ -28136,6 +28152,7 @@ ${xrefOffset2}
 0000000000 65535 f 
 `;
   for (let i = 1; i < size; i++) {
+    if (++work % 16 === 0) yield;
     const entry = objectOffsets.get(i);
     if (entry) {
       xrefText += `${String(entry.offset).padStart(10, "0")} ${String(entry.generation).padStart(5, "0")} n 
@@ -28182,6 +28199,7 @@ ${xrefOffset}
     let endFirstPage = xrefOffset;
     const sortedOffsets = [...objectOffsets.entries()].sort((a, b) => a[1].offset - b[1].offset);
     for (let i = 0; i < sortedOffsets.length; i++) {
+      if (++work % 16 === 0) yield;
       const [objNum, info3] = sortedOffsets[i];
       const nextOff = sortedOffsets[i + 1]?.[1].offset ?? xrefOffset;
       if (objNum === hintObjAfter.objectNumber) {
@@ -28215,6 +28233,9 @@ ${xrefOffset}
   }
   return fullBytes;
 }
+function serializeCosDocument(options) {
+  return drainWork(serializeCosDocumentSteps(options));
+}
 function appendIncrementalRevision(originalBytes, doc, updatedObjects) {
   const chunks = [originalBytes, textEncoder2.encode("\n")];
   let offset = originalBytes.length + 1;
@@ -28488,48 +28509,30 @@ function encryptPdfBuffer(state, objectNumber, generationNumber, plaintext) {
   const objKey = md5Bytes([state.fileKey, suffix]).subarray(0, Math.min(16, state.fileKey.length + 5));
   return rc4Transform(objKey, plaintext);
 }
-function transformNodeStringsAndStreams(node, transform, transformStream) {
+function* transformNodeStringsAndStreamsSteps(node, transform, transformStream) {
+  yield;
   switch (node.kind) {
     case "string":
-      return {
-        kind: "string",
-        format: "hex",
-        bytes: transform(node.bytes)
-      };
-    case "array":
-      return {
-        kind: "array",
-        items: node.items.map((item) => transformNodeStringsAndStreams(item, transform, transformStream))
-      };
+      return { kind: "string", format: "hex", bytes: transform(node.bytes) };
+    case "array": {
+      const items = [];
+      for (const item of node.items) items.push(yield* transformNodeStringsAndStreamsSteps(item, transform, transformStream));
+      return { kind: "array", items };
+    }
     case "dict": {
-      const type = dictGet(node, "Type");
-      const fieldType = dictGet(node, "FT");
-      const byteRange = dictGet(node, "ByteRange");
+      const type = dictGet(node, "Type"), fieldType = dictGet(node, "FT"), byteRange = dictGet(node, "ByteRange");
       const signature = type?.kind === "name" && type.decoded === "Sig" || fieldType?.kind === "name" && fieldType.decoded === "Sig" || byteRange?.kind === "array" && dictGet(node, "Filter")?.kind === "name";
-      return {
-        kind: "dict",
-        entries: node.entries.map((e) => ({
-          key: e.key,
-          value: signature && e.key.decoded === "Contents" ? e.value : transformNodeStringsAndStreams(e.value, transform, transformStream)
-        }))
-      };
+      const entries = [];
+      for (const e of node.entries) entries.push({ key: e.key, value: signature && e.key.decoded === "Contents" ? e.value : yield* transformNodeStringsAndStreamsSteps(e.value, transform, transformStream) });
+      return { kind: "dict", entries };
     }
     case "stream": {
       const type = dictGet(node.dict, "Type");
       if (type?.kind === "name" && type.decoded === "XRef") return node;
       const stream = transformStream ? transformStream(node) : { ...node, rawBytes: transform(node.rawBytes) };
-      const updatedDict = {
-        kind: "dict",
-        entries: stream.dict.entries.map((e) => ({
-          key: e.key,
-          value: e.key.decoded === "Length" ? cosNumber(stream.rawBytes.length) : transformNodeStringsAndStreams(e.value, transform, transformStream)
-        }))
-      };
-      return {
-        kind: "stream",
-        dict: updatedDict,
-        rawBytes: stream.rawBytes
-      };
+      const entries = [];
+      for (const e of stream.dict.entries) entries.push({ key: e.key, value: e.key.decoded === "Length" ? cosNumber(stream.rawBytes.length) : yield* transformNodeStringsAndStreamsSteps(e.value, transform, transformStream) });
+      return { kind: "stream", dict: { kind: "dict", entries }, rawBytes: stream.rawBytes };
     }
     default:
       return node;
@@ -28598,7 +28601,8 @@ function createR6Encryption(userPassword, ownerPassword, pMask) {
     StrF: cosName("StdCF")
   }) };
 }
-function encryptCosDocument(doc, options = {}) {
+function* encryptCosDocumentSteps(doc, options = {}) {
+  yield;
   const userPassword = options.userPassword ?? "";
   const ownerPassword = options.ownerPassword ?? userPassword;
   const revision = options.revision ?? 6;
@@ -28620,14 +28624,15 @@ function encryptCosDocument(doc, options = {}) {
   const encryptObjNum = maxObjNum + 1;
   const encryptedObjects = [];
   for (const obj of doc.objects.values()) {
-    const transformed = transformNodeStringsAndStreams(
+    yield;
+    const transformed = yield* transformNodeStringsAndStreamsSteps(
       obj.value,
       (plain) => encryptPdfBuffer(state, obj.objectNumber, obj.generationNumber, plain)
     );
     encryptedObjects.push({ objectNumber: obj.objectNumber, generationNumber: obj.generationNumber, value: transformed });
   }
   encryptedObjects.push({ objectNumber: encryptObjNum, generationNumber: 0, value: encryptDict });
-  return serializeCosDocument({
+  return yield* serializeCosDocumentSteps({
     objects: encryptedObjects,
     rootRef: doc.rootRef,
     infoRef: doc.infoRef,
@@ -28677,17 +28682,19 @@ function decryptStream(doc, stream, transform) {
   }
   return { kind: "stream", dict, rawBytes: bytes };
 }
-function decryptCosDocument(doc, state) {
+function* decryptCosDocumentSteps(doc, state) {
+  yield;
   const encryptObjNum = doc.encryptRef?.objectNumber;
   const handler = securityHandlers.get(state);
   for (const [num, obj] of doc.objects.entries()) {
+    yield;
     if (num === encryptObjNum || handler?.plaintextObjects.has(num)) continue;
     if (obj.value.kind === "stream") {
       const type = doc.resolve(dictGet(obj.value.dict, "Type"));
       if (type?.kind === "name" && (type.decoded === "XRef" || type.decoded === "Metadata" && !state.encryptMetadata)) continue;
     }
     const transform = handler?.factory.createCipherTransform(obj.objectNumber, obj.generationNumber);
-    const decrypted = transformNodeStringsAndStreams(
+    const decrypted = yield* transformNodeStringsAndStreamsSteps(
       obj.value,
       (cipher) => decryptPdfBuffer(state, obj.objectNumber, obj.generationNumber, cipher),
       transform ? (stream) => decryptStream(doc, stream, transform) : void 0
@@ -28801,9 +28808,12 @@ var ParsedCosDocument = class {
     return void 0;
   }
 };
-function parseNodeFromLexer(lexer, bytes, maxDepth, repair = false) {
+function* parseNodeFromLexerSteps(lexer, bytes, maxDepth, repair = false) {
+  yield;
+  let work = 0;
   const stack = [];
   while (true) {
+    if (++work % 16 === 0) yield;
     const tok = lexer.nextToken();
     const parent = stack.at(-1);
     if (!tok) {
@@ -28999,7 +29009,8 @@ function parseHeaderVersion(bytes) {
   }
   return head.slice(idx + 5, idx + 8);
 }
-function parseObjectAtOffset(bytes, offset, maxRecursionDepth, repair = false) {
+function* parseObjectAtOffsetSteps(bytes, offset, maxRecursionDepth, repair = false) {
+  yield;
   const lexer = new CosByteLexer(bytes, offset);
   const objNumTok = lexer.nextToken();
   const genNumTok = lexer.nextToken();
@@ -29007,7 +29018,7 @@ function parseObjectAtOffset(bytes, offset, maxRecursionDepth, repair = false) {
   if (objNumTok?.kind !== "number" || genNumTok?.kind !== "number" || objKwTok?.kind !== "keyword" || objKwTok.value !== "obj") {
     throw new PdfError("E_PARSE", `Malformed indirect object header at byte offset ${offset}`);
   }
-  const value = parseNodeFromLexer(lexer, bytes, maxRecursionDepth, repair);
+  const value = yield* parseNodeFromLexerSteps(lexer, bytes, maxRecursionDepth, repair);
   if (!value) {
     throw new PdfError("E_PARSE", `Empty indirect object ${objNumTok.value} at offset ${offset}`);
   }
@@ -29018,7 +29029,9 @@ function parseObjectAtOffset(bytes, offset, maxRecursionDepth, repair = false) {
     span: { start: objNumTok.span.start, end: lexer.offset }
   };
 }
-function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursionDepth, maxObjects) {
+function* parseXrefRevisionAtSteps(bytes, xrefOffset, maxDecompressedBytes, maxRecursionDepth, maxObjects) {
+  yield;
+  let work = 0;
   if (xrefOffset < 0 || xrefOffset >= bytes.length) {
     throw new PdfError("E_PARSE", `Invalid xref offset: ${xrefOffset}`);
   }
@@ -29030,6 +29043,7 @@ function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursi
   if (firstTok.kind === "keyword" && firstTok.value === "xref") {
     const entries2 = /* @__PURE__ */ new Map();
     while (true) {
+      if (++work % 16 === 0) yield;
       const saved = lexer.offset;
       const tok = lexer.nextToken();
       if (!tok) {
@@ -29053,6 +29067,7 @@ function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursi
       }
       if (count > maxObjects + 1) throw new PdfError("E_LIMIT", "PDF object count limit exceeded while reading xref entries");
       for (let i = 0; i < count; i++) {
+        if (++work % 16 === 0) yield;
         const offTok = lexer.nextToken();
         const genTok = lexer.nextToken();
         const flagTok = lexer.nextToken();
@@ -29078,7 +29093,7 @@ function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursi
         if (entries2.size > maxObjects + 1) throw new PdfError("E_LIMIT", "PDF object count limit exceeded while reading xref entries");
       }
     }
-    const trailerNode = parseNodeFromLexer(lexer, bytes, maxRecursionDepth);
+    const trailerNode = yield* parseNodeFromLexerSteps(lexer, bytes, maxRecursionDepth);
     if (!trailerNode || trailerNode.kind !== "dict") {
       throw new PdfError("E_PARSE", "Missing trailer dictionary after xref table");
     }
@@ -29090,7 +29105,7 @@ function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursi
       previousXrefOffset: prevNode2?.kind === "number" ? prevNode2.value : void 0
     };
   }
-  const xrefObj = parseObjectAtOffset(bytes, xrefOffset, maxRecursionDepth);
+  const xrefObj = yield* parseObjectAtOffsetSteps(bytes, xrefOffset, maxRecursionDepth);
   if (xrefObj.value.kind !== "stream") {
     throw new PdfError("E_PARSE", `Expected xref table or XRef stream at offset ${xrefOffset}`);
   }
@@ -29111,6 +29126,7 @@ function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursi
   if (indexArray) {
     if (indexArray.kind !== "array" || indexArray.items.length % 2 !== 0) throw new PdfError("E_PARSE", "Invalid XRef range fields");
     for (let i = 0; i < indexArray.items.length; i += 2) {
+      if (++work % 16 === 0) yield;
       const first = indexArray.items[i];
       const count = indexArray.items[i + 1];
       if (first?.kind !== "number" || count?.kind !== "number" || !Number.isSafeInteger(first.value) || first.value < 0 || !Number.isSafeInteger(count.value) || count.value < 0 || !Number.isSafeInteger(first.value + count.value)) {
@@ -29133,9 +29149,11 @@ function parseXrefRevisionAt(bytes, xrefOffset, maxDecompressedBytes, maxRecursi
     return v;
   };
   for (const [startObj, count] of subsections) {
+    if (++work % 16 === 0) yield;
     if (count > (decoded.length - pos) / stride) throw new PdfError("E_PARSE", "Truncated XRef stream");
     if (count > maxObjects + 1) throw new PdfError("E_LIMIT", "PDF object count limit exceeded while reading xref entries");
     for (let i = 0; i < count; i++) {
+      if (++work % 16 === 0) yield;
       const objNum = startObj + i;
       const field0 = w0 > 0 ? readInt(w0) : 1;
       const field1 = readInt(w1);
@@ -29181,12 +29199,16 @@ function isAsciiWhitespace(ch3) {
 function isAsciiDigit(ch3) {
   return ch3 >= 48 && ch3 <= 57;
 }
-function repairScanCosDocument(bytes, maxObjects, maxRecursionDepth) {
+function* repairScanCosDocumentSteps(bytes, maxObjects, maxRecursionDepth) {
+  yield;
+  let work = 0;
   const objects = /* @__PURE__ */ new Map();
   const trailers = [];
   let pos = 0;
   while (pos < bytes.length) {
+    if (++work % 16 === 0) yield;
     while (pos < bytes.length && !isAsciiDigit(bytes[pos])) {
+      if (++work % 16 === 0) yield;
       if (bytes[pos] === 37) {
         while (pos < bytes.length && bytes[pos] !== 10 && bytes[pos] !== 13) pos++;
         continue;
@@ -29196,7 +29218,7 @@ function repairScanCosDocument(bytes, maxObjects, maxRecursionDepth) {
         try {
           const token = lexer.nextToken();
           if (token?.kind === "keyword" && token.value === "trailer") {
-            const trailer = parseNodeFromLexer(lexer, bytes, maxRecursionDepth, true);
+            const trailer = yield* parseNodeFromLexerSteps(lexer, bytes, maxRecursionDepth, true);
             if (trailer?.kind === "dict") trailers.push(trailer);
             pos = lexer.offset;
             continue;
@@ -29229,7 +29251,7 @@ function repairScanCosDocument(bytes, maxObjects, maxRecursionDepth) {
     bytes[pos + 3] === 40)) {
       pos += 3;
       try {
-        const parsed = parseObjectAtOffset(bytes, headerStart, maxRecursionDepth, true);
+        const parsed = yield* parseObjectAtOffsetSteps(bytes, headerStart, maxRecursionDepth, true);
         objects.set(parsed.objectNumber, parsed);
         if (parsed.value.kind === "stream") {
           const type = dictGet(parsed.value.dict, "Type");
@@ -29246,13 +29268,17 @@ function repairScanCosDocument(bytes, maxObjects, maxRecursionDepth) {
   }
   return { objects, trailers };
 }
-function unpackRecoveredObjects(objects, maxObjects, maxDecompressedBytes, maxRecursionDepth) {
+function* unpackRecoveredObjectsSteps(objects, maxObjects, maxDecompressedBytes, maxRecursionDepth) {
+  yield;
+  let work = 0;
   for (const obj of [...objects.values()]) {
+    if (++work % 16 === 0) yield;
     if (obj.value.kind === "stream") {
       const t = dictGet(obj.value.dict, "Type");
       if (t?.kind === "name" && t.decoded === "ObjStm") {
         try {
-          for (const [unpackedNum, unpackedVal] of unpackObjectStream(obj.value, maxDecompressedBytes, maxRecursionDepth, true).entries()) {
+          for (const [unpackedNum, unpackedVal] of (yield* unpackObjectStreamSteps(obj.value, maxDecompressedBytes, maxRecursionDepth, true)).entries()) {
+            if (++work % 16 === 0) yield;
             if (!objects.has(unpackedNum)) {
               objects.set(unpackedNum, {
                 objectNumber: unpackedNum,
@@ -29288,7 +29314,9 @@ function recoveredReferences(objects) {
   }
   return { ...rootRef ? { rootRef } : {}, ...infoRef ? { infoRef } : {} };
 }
-function unpackObjectStream(streamObj, maxDecompressedBytes, maxRecursionDepth, repair = false) {
+function* unpackObjectStreamSteps(streamObj, maxDecompressedBytes, maxRecursionDepth, repair = false) {
+  yield;
+  let work = 0;
   const nNode = dictGet(streamObj.dict, "N");
   const firstNode = dictGet(streamObj.dict, "First");
   if (nNode?.kind !== "number" || firstNode?.kind !== "number") {
@@ -29298,6 +29326,7 @@ function unpackObjectStream(streamObj, maxDecompressedBytes, maxRecursionDepth,
   const headerLexer = new CosByteLexer(decoded, 0);
   const pairs = [];
   for (let i = 0; i < nNode.value; i++) {
+    if (++work % 16 === 0) yield;
     const numTok = headerLexer.nextToken();
     const offTok = headerLexer.nextToken();
     if (numTok?.kind === "number" && offTok?.kind === "number") {
@@ -29306,9 +29335,10 @@ function unpackObjectStream(streamObj, maxDecompressedBytes, maxRecursionDepth,
   }
   const result = /* @__PURE__ */ new Map();
   for (const pair of pairs) {
+    if (++work % 16 === 0) yield;
     try {
       const valLexer = new CosByteLexer(decoded, firstNode.value + pair.relativeOffset);
-      const node = parseNodeFromLexer(valLexer, decoded, maxRecursionDepth, repair);
+      const node = yield* parseNodeFromLexerSteps(valLexer, decoded, maxRecursionDepth, repair);
       if (node) {
         result.set(pair.objectNumber, node);
       }
@@ -29318,7 +29348,9 @@ function unpackObjectStream(streamObj, maxDecompressedBytes, maxRecursionDepth,
   }
   return result;
 }
-function parseCosDocument(bytes, options = {}) {
+function* parseCosDocumentSteps(bytes, options = {}) {
+  yield;
+  let work = 0;
   const version = parseHeaderVersion(bytes);
   const recovery = options.recovery ?? "strict";
   const maxObjects = options.maxObjects ?? Infinity;
@@ -29353,10 +29385,12 @@ function parseCosDocument(bytes, options = {}) {
         let currentXrefOffset = offsetTok.value;
         const visitedOffsets = /* @__PURE__ */ new Set();
         while (currentXrefOffset !== void 0 && !visitedOffsets.has(currentXrefOffset)) {
+          if (++work % 16 === 0) yield;
           visitedOffsets.add(currentXrefOffset);
-          const rev = parseXrefRevisionAt(bytes, currentXrefOffset, maxDecompressedBytes, maxRecursionDepth, maxObjects);
+          const rev = yield* parseXrefRevisionAtSteps(bytes, currentXrefOffset, maxDecompressedBytes, maxRecursionDepth, maxObjects);
           revisions.push(rev);
           for (const [num, entry] of rev.entries.entries()) {
+            if (++work % 16 === 0) yield;
             if (!mergedXref.has(num)) {
               mergedXref.set(num, entry);
               if (mergedXref.size > maxObjects + 1) throw new PdfError("E_LIMIT", "PDF object count limit exceeded while reading xref entries");
@@ -29389,8 +29423,9 @@ function parseCosDocument(bytes, options = {}) {
   if (!useRepair && rootRef) {
     try {
       for (const [objNum, entry] of mergedXref.entries()) {
+        if (++work % 16 === 0) yield;
         if (entry.type !== "uncompressed") continue;
-        const parsed = parseObjectAtOffset(bytes, entry.offset ?? 0, maxRecursionDepth, recovery === "repair");
+        const parsed = yield* parseObjectAtOffsetSteps(bytes, entry.offset ?? 0, maxRecursionDepth, recovery === "repair");
         if (parsed.objectNumber !== objNum || parsed.generationNumber !== (entry.generationNumber ?? 0)) {
           throw new PdfError("E_PARSE", `Bad uncompressed XRef entry for object ${objNum}`);
         }
@@ -29408,7 +29443,7 @@ function parseCosDocument(bytes, options = {}) {
       throw new PdfError("E_PARSE", "PDF trailer missing /Root reference");
     }
     useRepair = true;
-    const scanned = repairScanCosDocument(bytes, maxObjects, maxRecursionDepth);
+    const scanned = yield* repairScanCosDocumentSteps(bytes, maxObjects, maxRecursionDepth);
     objects = scanned.objects;
     revisions.length = 0;
     mergedXref.clear();
@@ -29443,7 +29478,7 @@ function parseCosDocument(bytes, options = {}) {
     encryptNode = encrypt?.kind === "ref" || encrypt?.kind === "dict" ? encrypt : void 0;
     encryptRef = encrypt?.kind === "ref" ? encrypt : void 0;
     idArray = id?.kind === "array" ? id : void 0;
-    if (!rootRef && !encryptNode) unpackRecoveredObjects(objects, maxObjects, maxDecompressedBytes, maxRecursionDepth);
+    if (!rootRef && !encryptNode) yield* unpackRecoveredObjectsSteps(objects, maxObjects, maxDecompressedBytes, maxRecursionDepth);
     const fallback = recoveredReferences(objects);
     rootRef ??= fallback.rootRef;
     infoRef ??= fallback.infoRef;
@@ -29478,20 +29513,21 @@ function parseCosDocument(bytes, options = {}) {
       maxRecursionDepth
     });
     doc.encryption = encState;
-    decryptCosDocument(doc, encState);
+    yield* decryptCosDocumentSteps(doc, encState);
   }
   if (useRepair) {
-    unpackRecoveredObjects(objects, maxObjects, maxDecompressedBytes, maxRecursionDepth);
+    yield* unpackRecoveredObjectsSteps(objects, maxObjects, maxDecompressedBytes, maxRecursionDepth);
     doc.infoRef ??= recoveredReferences(objects).infoRef;
   }
   const objStmCache = /* @__PURE__ */ new Map();
   for (const [objNum, entry] of mergedXref.entries()) {
+    if (++work % 16 === 0) yield;
     if (entry.type === "compressed" && entry.objectStreamNumber !== void 0) {
       let unpacked = objStmCache.get(entry.objectStreamNumber);
       if (!unpacked) {
         const stmObj = objects.get(entry.objectStreamNumber)?.value;
         if (stmObj?.kind === "stream") {
-          unpacked = unpackObjectStream(stmObj, maxDecompressedBytes, maxRecursionDepth, recovery === "repair");
+          unpacked = yield* unpackObjectStreamSteps(stmObj, maxDecompressedBytes, maxRecursionDepth, recovery === "repair");
           objStmCache.set(entry.objectStreamNumber, unpacked);
         }
       }
@@ -29508,6 +29544,9 @@ function parseCosDocument(bytes, options = {}) {
   }
   return doc;
 }
+function parseCosDocument(bytes, options = {}) {
+  return drainWork(parseCosDocumentSteps(bytes, options));
+}
 var WIN_ANSI_HIGH_BYTES = {
   128: 8364,
   130: 8218,
@@ -40538,7 +40577,8 @@ function resolveInheritedFieldEntry(doc, dict, key) {
   }
   return void 0;
 }
-function collectFieldDicts(doc, node, prefix = "", out = [], parentFt = "", parentFf = 0, parentQ = 0, parentMaxLen) {
+function* collectFieldDictsSteps(doc, node, prefix = "", out = [], parentFt = "", parentFf = 0, parentQ = 0, parentMaxLen, yieldState = { work: 0 }) {
+  if (++yieldState.work % 256 === 0) yield;
   const dict = doc.resolveDict(node);
   if (!dict) return out;
   const tNode = doc.resolve(dictGet(dict, "T"));
@@ -40571,7 +40611,8 @@ function collectFieldDicts(doc, node, prefix = "", out = [], parentFt = "", pare
       return out;
     }
     for (const kid of kidsArr.items) {
-      collectFieldDicts(doc, kid, fullName, out, currentFt, currentFf, currentQ, currentMaxLen);
+      if (++yieldState.work % 16 === 0) yield;
+      yield* collectFieldDictsSteps(doc, kid, fullName, out, currentFt, currentFf, currentQ, currentMaxLen, yieldState);
     }
   } else if (fullName) {
     out.push({
@@ -41012,6 +41053,9 @@ function escapePdfLiteralString(str) {
   }
   return out;
 }
+function collectFieldDicts(doc, node, prefix = "", out = [], parentFt = "", parentFf = 0, parentQ = 0, parentMaxLen) {
+  drainWork(collectFieldDictsSteps(doc, node, prefix, out, parentFt, parentFf, parentQ, parentMaxLen));
+}
 var PdfPage = class {
   cosDoc;
   pageRef;
@@ -44061,14 +44105,18 @@ var PdfDocument = class _PdfDocument {
     });
     return new _PdfDocument(parseCosDocument(rawBytes));
   }
-  static load(bytes, options) {
+  static *loadSteps(bytes, options) {
+    yield;
     return new _PdfDocument(
-      parseCosDocument(bytes, {
+      yield* parseCosDocumentSteps(bytes, {
         ...options,
         recovery: options?.recovery ?? "repair"
       })
     );
   }
+  static load(bytes, options) {
+    return drainWork(_PdfDocument.loadSteps(bytes, options));
+  }
   rebuildPagesList() {
     const catalog = this.cos.resolveDict(this.cos.rootRef);
     const pagesNode = catalog ? dictGet(catalog, "Pages") : void 0;
@@ -44150,20 +44198,30 @@ var PdfDocument = class _PdfDocument {
     this.pages.splice(index, 1);
     this.syncPageTree();
   }
-  copyPagesFrom(sourceDoc, indices) {
+  *copyPagesFromSteps(sourceDoc, indices) {
+    function* cloneItems(items) {
+      const result = [];
+      for (const item of items) result.push(yield* cloneNode(item));
+      return result;
+    }
+    yield;
+    let work = 0;
     const memo = /* @__PURE__ */ new Map();
     const sourcePageObjNums = /* @__PURE__ */ new Set();
     for (let i = 0; i < sourceDoc.getPageCount(); i++) {
+      if (++work % 16 === 0) yield;
       sourcePageObjNums.add(sourceDoc.getPage(i).ref.objectNumber);
     }
     const targetPageRefs = [];
     for (const idx of indices) {
+      if (++work % 16 === 0) yield;
       const srcPage = sourceDoc.getPage(idx);
       const pageRef = this.cos.allocateObject({ kind: "null" });
       targetPageRefs.push(pageRef);
       memo.set(srcPage.ref.objectNumber, pageRef);
     }
-    const cloneNode = (node) => {
+    const cloneNode = function* (node) {
+      if (++work % 16 === 0) yield;
       if (node.kind === "ref") {
         const existing = memo.get(node.objectNumber);
         if (existing) return existing;
@@ -44174,12 +44232,12 @@ var PdfDocument = class _PdfDocument {
         if (!target) return cosRef(0);
         const placeholderRef = this.cos.allocateObject({ kind: "null" });
         memo.set(node.objectNumber, placeholderRef);
-        const clonedTarget = cloneNode(target);
+        const clonedTarget = yield* cloneNode(target);
         this.cos.setObject(placeholderRef.objectNumber, clonedTarget, 0);
         return placeholderRef;
       }
       if (node.kind === "array") {
-        return cosArray(node.items.map(cloneNode));
+        return cosArray(yield* cloneItems(node.items));
       }
       if (node.kind === "dict") {
         const typeEntry = dictGet(node, "Type");
@@ -44189,13 +44247,13 @@ var PdfDocument = class _PdfDocument {
           if (isPageTreeNode && entry.key.decoded === "Parent") continue;
           newEntries.push({
             key: { ...entry.key },
-            value: cloneNode(entry.value)
+            value: yield* cloneNode(entry.value)
           });
         }
         return { kind: "dict", entries: newEntries };
       }
       if (node.kind === "stream") {
-        const clonedDict = cloneNode(node.dict);
+        const clonedDict = yield* cloneNode(node.dict);
         return {
           kind: "stream",
           dict: clonedDict,
@@ -44204,11 +44262,12 @@ var PdfDocument = class _PdfDocument {
         };
       }
       return node;
-    };
+    }.bind(this);
     const copiedPages = [];
     for (const [position, idx] of indices.entries()) {
+      if (++work % 16 === 0) yield;
       const srcPage = sourceDoc.getPage(idx);
-      const clonedPageDict = cloneNode(srcPage.pageDict);
+      const clonedPageDict = yield* cloneNode(srcPage.pageDict);
       const size = srcPage.getSize();
       if (!dictGet(clonedPageDict, "MediaBox")) {
         dictSet(
@@ -44218,13 +44277,14 @@ var PdfDocument = class _PdfDocument {
         );
       }
       if (!dictGet(clonedPageDict, "Resources")) {
-        dictSet(clonedPageDict, "Resources", cloneNode(srcPage.getResourcesDict()));
+        dictSet(clonedPageDict, "Resources", yield* cloneNode(srcPage.getResourcesDict()));
       }
       if (!dictGet(clonedPageDict, "Rotate") && srcPage.getRotation() !== 0) {
         dictSet(clonedPageDict, "Rotate", cosNumber(srcPage.getRotation()));
       }
       const inheritedBoxKeys = ["CropBox", "BleedBox", "TrimBox", "ArtBox"];
       for (const boxKey of inheritedBoxKeys) {
+        if (++work % 16 === 0) yield;
         if (!dictGet(clonedPageDict, boxKey)) {
           const boxVal = boxKey === "CropBox" ? srcPage.getCropBox() : boxKey === "BleedBox" ? srcPage.getBleedBox() : boxKey === "TrimBox" ? srcPage.getTrimBox() : srcPage.getArtBox();
           if (boxVal[0] !== 0 || boxVal[1] !== 0 || boxVal[2] !== size.width || boxVal[3] !== size.height) {
@@ -44266,8 +44326,9 @@ var PdfDocument = class _PdfDocument {
       };
       const clonedRootFieldRefs = [];
       for (const item of srcFieldsArr.items) {
+        if (++work % 16 === 0) yield;
         if (!hasClonedDescendant(item)) continue;
-        const cloned = cloneNode(item);
+        const cloned = yield* cloneNode(item);
         if (cloned.kind === "ref") {
           const clonedDict = this.cos.resolveDict(cloned);
           const kidsArr = clonedDict ? this.cos.resolveArray(dictGet(clonedDict, "Kids")) : void 0;
@@ -44301,6 +44362,7 @@ var PdfDocument = class _PdfDocument {
             dstFields.items.filter((x) => x.kind === "ref").map((x) => x.objectNumber)
           );
           for (const fRef of clonedRootFieldRefs) {
+            if (++work % 16 === 0) yield;
             if (!existingNums.has(fRef.objectNumber)) {
               dstFields.items.push(fRef);
               existingNums.add(fRef.objectNumber);
@@ -44308,11 +44370,11 @@ var PdfDocument = class _PdfDocument {
           }
           const srcDr = dictGet(srcAcroForm, "DR");
           if (srcDr && !dictGet(dstAcroForm, "DR")) {
-            dictSet(dstAcroForm, "DR", cloneNode(srcDr));
+            dictSet(dstAcroForm, "DR", yield* cloneNode(srcDr));
           }
           const srcDa = dictGet(srcAcroForm, "DA");
           if (srcDa && !dictGet(dstAcroForm, "DA")) {
-            dictSet(dstAcroForm, "DA", cloneNode(srcDa));
+            dictSet(dstAcroForm, "DA", yield* cloneNode(srcDa));
           }
         }
       }
@@ -44321,12 +44383,15 @@ var PdfDocument = class _PdfDocument {
     if (srcOcProps) {
       const dstCatalog = this.cos.resolveDict(this.cos.rootRef);
       if (dstCatalog && !dictGet(dstCatalog, "OCProperties")) {
-        dictSet(dstCatalog, "OCProperties", cloneNode(srcOcProps));
+        dictSet(dstCatalog, "OCProperties", yield* cloneNode(srcOcProps));
       }
     }
     this.syncPageTree();
     return copiedPages;
   }
+  copyPagesFrom(sourceDoc, indices) {
+    return drainWork(this.copyPagesFromSteps(sourceDoc, indices));
+  }
   embedStandardFont(fontName) {
     return createStandardFontHandle(fontName);
   }
@@ -44526,14 +44591,15 @@ var PdfDocument = class _PdfDocument {
     });
     return buildSemanticAstFromPages(extractedPages, tablesByPage, displayLists);
   }
-  save(options = {}) {
+  *saveSteps(options = {}) {
+    yield;
     this.syncPageTree();
     if (this.cos.requiresFullRewrite) {
       pruneUnusedXObjects(this.cos, this.pages);
       discardUnreachableObjects(this.cos);
     }
     if (options.encrypt) {
-      return encryptCosDocument(this.cos, options.encrypt);
+      return yield* encryptCosDocumentSteps(this.cos, options.encrypt);
     }
     const allObjects = [...this.cos.objects.values()].sort(
       (a, b) => a.objectNumber - b.objectNumber
@@ -44541,7 +44607,7 @@ var PdfDocument = class _PdfDocument {
     if (options.incremental && !this.cos.requiresFullRewrite && this.cos.bytes.length > 0) {
       return appendIncrementalRevision(this.cos.bytes, this.cos, allObjects);
     }
-    return serializeCosDocument({
+    return yield* serializeCosDocumentSteps({
       objects: allObjects,
       rootRef: this.cos.rootRef,
       infoRef: this.cos.infoRef,
@@ -44552,6 +44618,9 @@ var PdfDocument = class _PdfDocument {
       linearize: options.linearize
     });
   }
+  save(options = {}) {
+    return drainWork(this.saveSteps(options));
+  }
 };
 var VALUE_FLAGS = /* @__PURE__ */ new Set([
   "-r",
@@ -44595,7 +44664,8 @@ function extractPdftoppmPositionals(argv) {
   }
   return pos;
 }
-function runPdftoppmCliSync(argv, files, options = {}) {
+function* runPdftoppmCliSteps(argv, files, options = {}) {
+  let cooperativeWork = 63;
   let format = "ppm";
   let explicitContainer;
   let colorMode = "rgb";
@@ -44631,6 +44701,8 @@ function runPdftoppmCliSync(argv, files, options = {}) {
   let password = "";
   const positionals = [];
   for (let i = 0; i < argv.length; i++) {
+    if (++cooperativeWork % 64 === 0)
+      yield;
     const arg = argv[i];
     if (arg === "-v" || arg === "--version") {
       return { exitCode: 0, stdout: "pdftoppm version 24.08.0\n", stderr: "" };
@@ -44674,6 +44746,8 @@ function runPdftoppmCliSync(argv, files, options = {}) {
     else if (arg === "-jpegopt") {
       const optStr = argv[++i] ?? "";
       for (const part of optStr.split(",")) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         const eqIdx = part.indexOf("=");
         if (eqIdx > 0 && part.slice(0, eqIdx).trim().toLowerCase() === "quality") {
           const qVal = Number(part.slice(eqIdx + 1).trim());
@@ -44795,8 +44869,11 @@ function runPdftoppmCliSync(argv, files, options = {}) {
   const outChunks = [];
   const progressLines = [];
   for (let p = firstPage; p <= endPage; p++) {
-    if (oddOnly && p % 2 === 0) continue;
-    if (evenOnly && p % 2 === 1) continue;
+    yield;
+    if (oddOnly && p % 2 === 0)
+      continue;
+    if (evenOnly && p % 2 === 1)
+      continue;
     const page = doc.getPage(p - 1);
     const displayList = page.evaluateDisplayList({ hideAnnotations });
     const box = useCropBox ? getDisplayListCropBox(displayList) : [0, 0, displayList.width, displayList.height];
@@ -44813,11 +44890,13 @@ function runPdftoppmCliSync(argv, files, options = {}) {
     } else {
       if (scaleToX > 0) {
         effDpiX = scaleToX * 72 / Math.max(ptW, 1);
-        if (scaleToY < 0) effDpiY = effDpiX;
+        if (scaleToY < 0)
+          effDpiY = effDpiX;
       }
       if (scaleToY > 0) {
         effDpiY = scaleToY * 72 / Math.max(ptH, 1);
-        if (scaleToX < 0) effDpiX = effDpiY;
+        if (scaleToX < 0)
+          effDpiX = effDpiY;
       }
     }
     const cropRect = hasCrop ? { x: cropX, y: cropY, width: cropW, height: cropH } : void 0;
@@ -44847,6 +44926,8 @@ function runPdftoppmCliSync(argv, files, options = {}) {
       options.onAllocateBytes?.(bitmap.width * bitmap.height * 4);
       if (colorMode !== "rgb" && (format === "png" || format === "tif" || format === "jpg")) {
         for (let px = 0; px < bitmap.data.length; px += 4) {
+          if (++cooperativeWork % 65536 === 0)
+            yield;
           const r = bitmap.data[px];
           const g = bitmap.data[px + 1];
           const b = bitmap.data[px + 2];
@@ -44857,12 +44938,18 @@ function runPdftoppmCliSync(argv, files, options = {}) {
           bitmap.data[px + 2] = v;
         }
       }
-      if (format === "png") renderedBytes = encodePng(bitmap);
-      else if (format === "tif") renderedBytes = encodeTiff(bitmap, effDpiX, tiffCompression);
-      else if (format === "jpg") renderedBytes = encodeJpeg(bitmap, jpegQuality);
-      else if (format === "pgm") renderedBytes = encodePgm(bitmap);
-      else if (format === "pbm") renderedBytes = encodePbm(bitmap);
-      else renderedBytes = encodePpm(bitmap);
+      if (format === "png")
+        renderedBytes = encodePng(bitmap);
+      else if (format === "tif")
+        renderedBytes = encodeTiff(bitmap, effDpiX, tiffCompression);
+      else if (format === "jpg")
+        renderedBytes = encodeJpeg(bitmap, jpegQuality);
+      else if (format === "pgm")
+        renderedBytes = encodePgm(bitmap);
+      else if (format === "pbm")
+        renderedBytes = encodePbm(bitmap);
+      else
+        renderedBytes = encodePpm(bitmap);
     }
     options.onAllocateBytes?.(renderedBytes.byteLength);
     if (!prefix || prefix === "-") {
@@ -44872,17 +44959,15 @@ function runPdftoppmCliSync(argv, files, options = {}) {
       }
     } else {
       const effectivePageNo = setPageNo !== void 0 ? setPageNo + (p - firstPage) : p;
-      const pageSuffix = String(effectivePageNo).padStart(
-        Math.max(padWidth, String(effectivePageNo).length),
-        "0"
-      );
+      const pageSuffix = String(effectivePageNo).padStart(Math.max(padWidth, String(effectivePageNo).length), "0");
       const fileName = singleFile && !forceNum ? `${prefix}.${ext}` : `${prefix}${sep}${pageSuffix}.${ext}`;
       files.set(fileName, renderedBytes);
       if (progress && !quiet) {
         progressLines.push(`${p} ${endPage} ${fileName}`);
       }
     }
-    if (singleFile) break;
+    if (singleFile)
+      break;
   }
   const stderrText = progressLines.length > 0 ? progressLines.join("\n") + "\n" : "";
   if (outChunks.length > 0) {
@@ -44890,6 +44975,8 @@ function runPdftoppmCliSync(argv, files, options = {}) {
     const merged = new Uint8Array(totalLen);
     let off = 0;
     for (const c of outChunks) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       merged.set(c, off);
       off += c.byteLength;
     }
@@ -44898,9 +44985,18 @@ function runPdftoppmCliSync(argv, files, options = {}) {
   return { exitCode: 0, stdout: "", stderr: stderrText };
 }
 async function runPdftoppmCli(argv, files, options = {}) {
-  return runPdftoppmCliSync(argv, files, options);
+  return drainSteps(runPdftoppmCliSteps(argv, files, options), options.signal);
+}
+function runPdftoppmCliSync(argv, files, options = {}) {
+  const steps = runPdftoppmCliSteps(argv, files, options);
+  let next = steps.next();
+  while (!next.done) {
+    next = steps.next();
+  }
+  return next.value;
 }
 async function executePdftoppm(context) {
+  let cooperativeWork = 63;
   const invocation = createOutputOperation(context, { write: async () => {
   } });
   try {
@@ -44921,6 +45017,7 @@ async function executePdftoppm(context) {
       const chunks = [];
       let total = 0;
       for await (const chunk of readBytes(context.stdin, invocation.signal)) {
+        if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
         chunks.push(chunk);
         total += chunk.byteLength;
         chargeBytes(chunk.byteLength);
@@ -44929,6 +45026,7 @@ async function executePdftoppm(context) {
         const buf = new Uint8Array(total);
         let off = 0;
         for (const c of chunks) {
+          if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
           buf.set(c, off);
           off += c.byteLength;
         }
@@ -44936,6 +45034,7 @@ async function executePdftoppm(context) {
       }
     }
     for (const token of positionals) {
+      if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
       if (token === "-") continue;
       try {
         const bytes = await context.fs.readFile(resolveVfsPath(token), { signal: invocation.signal });
@@ -44944,8 +45043,9 @@ async function executePdftoppm(context) {
       } catch {
       }
     }
+    context.inputBudget?.check(0);
     const existingSnap = new Map(vfsFiles);
-    const res = await runPdftoppmCli(argv, vfsFiles, { onAllocateBytes: chargeBytes });
+    const res = await runPdftoppmCli(argv, vfsFiles, { onAllocateBytes: chargeBytes, signal: invocation.signal });
     if (res.stderr) {
       await writeBytes(context.stderr, new TextEncoder().encode(res.stderr), invocation.signal);
     }
@@ -44957,6 +45057,7 @@ async function executePdftoppm(context) {
       await writeBytes(stdout.output, new TextEncoder().encode(res.stdout), invocation.signal);
     }
     for (const [key, val] of vfsFiles.entries()) {
+      if (++cooperativeWork % 64 === 0) await yieldTurn(context.signal);
       if (key !== "-" && existingSnap.get(key) !== val) {
         const abs = resolveVfsPath(key);
         const parentDir = abs.slice(0, abs.lastIndexOf("/")) || "/";
@@ -44972,13 +45073,14 @@ async function executePdftoppm(context) {
     await invocation.close();
   }
 }
-function createPdftoppmCommand(_options = {}) {
+function createPdftoppmCommand(options = {}) {
+  const maxInputBytes = InputByteBudget.limit(options.limits?.maxInputBytes);
   return Object.freeze({
     name: "pdftoppm",
     runtimeIdentity: commandRuntimeIdentity,
     description: "Render PDF pages to PNG, PPM, PGM, PBM, or SVG via @poe-code/pdf-ast",
     execute(context) {
-      return executePdftoppm(context);
+      return new InputByteBudget(maxInputBytes).run(context, executePdftoppm);
     }
   });
 }
@@ -45014,7 +45116,8 @@ function extractPdftocairoPositionals(argv) {
   }
   return pos;
 }
-function runPdftocairoCliSync(argv, files, options = {}) {
+function* runPdftocairoCliSteps(argv, files, options = {}) {
+  let cooperativeWork = 63;
   let format = "png";
   let grayMode = false;
   let monoMode = false;
@@ -45035,6 +45138,8 @@ function runPdftocairoCliSync(argv, files, options = {}) {
   const forwardedArgs = [];
   const positionals = [];
   for (let i = 0; i < argv.length; i++) {
+    if (++cooperativeWork % 64 === 0)
+      yield;
     const arg = argv[i];
     if (arg === "-v" || arg === "--version") {
       return { exitCode: 0, stdout: "pdftocairo version 24.08.0\n", stderr: "" };
@@ -45115,8 +45220,10 @@ function runPdftocairoCliSync(argv, files, options = {}) {
     } else if (VALUE_FLAGS.has(arg)) {
       const val = argv[++i] ?? "";
       forwardedArgs.push(arg, val);
-      if (arg === "-f") firstPage = Math.max(1, Number.parseInt(val, 10) || 1);
-      else if (arg === "-l") lastPage = Math.max(0, Number.parseInt(val, 10) || 0);
+      if (arg === "-f")
+        firstPage = Math.max(1, Number.parseInt(val, 10) || 1);
+      else if (arg === "-l")
+        lastPage = Math.max(0, Number.parseInt(val, 10) || 0);
       else if (arg === "-x") {
         cropX = Math.max(0, Number.parseInt(val, 10) || 0);
         hasCrop = true;
@@ -45138,8 +45245,10 @@ function runPdftocairoCliSync(argv, files, options = {}) {
         password = val;
       }
     } else if (arg.startsWith("-") && arg !== "-") {
-      if (arg === "-o") oddOnly = true;
-      if (arg === "-e") evenOnly = true;
+      if (arg === "-o")
+        oddOnly = true;
+      if (arg === "-e")
+        evenOnly = true;
       forwardedArgs.push(arg);
     } else {
       positionals.push(arg);
@@ -45153,7 +45262,7 @@ function runPdftocairoCliSync(argv, files, options = {}) {
   if (format === "svg") {
     const rawOut = positionals[1] ?? (inputPath === "-" ? "-" : `${inputStem}.svg`);
     const rootForSvg = rawOut.toLowerCase().endsWith(".svg") ? rawOut.slice(0, -4) : rawOut;
-    return runPdftoppmCliSync(["-svg", "-singlefile", ...forwardedArgs, inputPath, rootForSvg], files, options);
+    return yield* runPdftoppmCliSteps(["-svg", "-singlefile", ...forwardedArgs, inputPath, rootForSvg], files, options);
   }
   if (format === "pdf" || format === "ps" || format === "eps") {
     const pdfBytes = files.get(inputPath);
@@ -45180,8 +45289,11 @@ function runPdftocairoCliSync(argv, files, options = {}) {
     }
     const selectedIndices = [];
     for (let p = firstPage; p <= endPage; p++) {
-      if (oddOnly && p % 2 === 0) continue;
-      if (evenOnly && p % 2 !== 0) continue;
+      yield;
+      if (oddOnly && p % 2 === 0)
+        continue;
+      if (evenOnly && p % 2 !== 0)
+        continue;
       selectedIndices.push(p - 1);
     }
     const rawOut = positionals[1] ?? (inputPath === "-" ? "-" : `${inputStem}.${format}`);
@@ -45189,29 +45301,29 @@ function runPdftocairoCliSync(argv, files, options = {}) {
     if (format === "pdf") {
       const outDoc = PdfDocument.create();
       const srcMeta = doc.getMetadata();
-      if (srcMeta.title) outDoc.setTitle(srcMeta.title);
-      if (srcMeta.author) outDoc.setAuthor(srcMeta.author);
-      if (srcMeta.subject) outDoc.setSubject(srcMeta.subject);
-      if (srcMeta.keywords) outDoc.setKeywords(srcMeta.keywords);
-      if (srcMeta.creator) outDoc.setCreator(srcMeta.creator);
-      if (srcMeta.producer) outDoc.setProducer(srcMeta.producer);
+      if (srcMeta.title)
+        outDoc.setTitle(srcMeta.title);
+      if (srcMeta.author)
+        outDoc.setAuthor(srcMeta.author);
+      if (srcMeta.subject)
+        outDoc.setSubject(srcMeta.subject);
+      if (srcMeta.keywords)
+        outDoc.setKeywords(srcMeta.keywords);
+      if (srcMeta.creator)
+        outDoc.setCreator(srcMeta.creator);
+      if (srcMeta.producer)
+        outDoc.setProducer(srcMeta.producer);
       const hasPaper = !origPageSizes && paperW > 0 && paperH > 0;
       for (const idx of selectedIndices) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         const [copied] = outDoc.copyPagesFrom(doc, [idx]);
         if (copied && (hasCrop || hasPaper)) {
           const origSize = copied.getSize();
           const effW = hasPaper ? paperW : cropW > 0 ? cropW : Math.max(1, origSize.width - cropX);
           const effH = hasPaper ? paperH : cropH > 0 ? cropH : Math.max(1, origSize.height - cropY);
-          dictSet(
-            copied.pageDict,
-            "MediaBox",
-            cosArray([cosNumber(0), cosNumber(0), cosNumber(effW), cosNumber(effH)])
-          );
-          dictSet(
-            copied.pageDict,
-            "CropBox",
-            cosArray([cosNumber(0), cosNumber(0), cosNumber(effW), cosNumber(effH)])
-          );
+          dictSet(copied.pageDict, "MediaBox", cosArray([cosNumber(0), cosNumber(0), cosNumber(effW), cosNumber(effH)]));
+          dictSet(copied.pageDict, "CropBox", cosArray([cosNumber(0), cosNumber(0), cosNumber(effW), cosNumber(effH)]));
         }
       }
       const outBytes = outDoc.save();
@@ -45233,12 +45345,18 @@ function runPdftocairoCliSync(argv, files, options = {}) {
       "%%EndComments"
     ];
     for (let s = 0; s < selectedIndices.length; s++) {
+      if (++cooperativeWork % 64 === 0)
+        yield;
       const page = doc.getPage(selectedIndices[s]);
       psLines.push(`%%Page: ${s + 1} ${s + 1}`);
       psLines.push("/Helvetica findfont 12 scalefont setfont");
       const extracted = page.extractPage();
       for (const block of extracted.blocks) {
+        if (++cooperativeWork % 64 === 0)
+          yield;
         for (const line of block.lines) {
+          if (++cooperativeWork % 64 === 0)
+            yield;
           const escaped = line.text.replaceAll("\\", "\\\\").replaceAll("(", "\\(").replaceAll(")", "\\)");
           psLines.push(`${Math.round(line.bbox[0])} ${Math.round(line.bbox[1])} moveto (${escaped}) show`);
         }
@@ -45255,7 +45373,7 @@ function runPdftocairoCliSync(argv, files, options = {}) {
   }
   const snapBefore = new Map(files);
   const rasterPositionals = positionals.length === 1 && inputPath !== "-" ? [inputPath, inputStem] : positionals;
-  const res = runPdftoppmCliSync([...forwardedArgs, ...rasterPositionals], files, options);
+  const res = yield* runPdftoppmCliSteps([...forwardedArgs, ...rasterPositionals], files, options);
   if (res.exitCode !== 0 || !grayMode && !monoMode) {
     return res;
   }
@@ -45269,6 +45387,8 @@ function runPdftocairoCliSync(argv, files, options = {}) {
     }
   };
   for (const [k, v] of files.entries()) {
+    if (++cooperativeWork % 64 === 0)
+      yield;
     if (snapBefore.get(k) !== v && k.endsWith(".png")) {
       const decoded = decodePng(v);
       convertRgbaInPlace(decoded.data);
@@ -45278,83 +45398,100 @@ function runPdftocairoCliSync(argv, files, options = {}) {
   return res;
 }
 async function runPdftocairoCli(argv, files, options = {}) {
-  return runPdftocairoCliSync(argv, files, options);
+  return drainSteps(runPdftocairoCliSteps(argv, files, options), options.signal);
 }
-function createPdftocairoCommand(_options = {}) {
+function runPdftocairoCliSync(argv, files, options = {}) {
+  const steps = runPdftocairoCliSteps(argv, files, options);
+  let next = steps.next();
+  while (!next.done) {
+    next = steps.next();
+  }
+  return next.value;
+}
+function createPdftocairoCommand(options = {}) {
+  const maxInputBytes = InputByteBudget.limit(options.limits?.maxInputBytes);
   return Object.freeze({
     name: "pdftocairo",
     runtimeIdentity: commandRuntimeIdentity,
     description: "Render PDF pages to PNG, JPEG, TIFF, PDF, PS, EPS, or SVG via @poe-code/pdf-ast",
     async execute(context) {
-      const invocation = createOutputOperation(context, { write: async () => {
-      } });
-      try {
-        const carrier = getCommandArguments(context);
-        const argv = [...carrier.args];
-        const vfsFiles = /* @__PURE__ */ new Map();
-        const resolveVfsPath = (p) => p.startsWith("/") ? p : `${context.cwd === "/" ? "" : context.cwd}/${p}`;
-        let accountedBytes = 0;
-        const chargeBytes = (delta) => {
-          if (delta > 0) {
-            accountedBytes += delta;
-            context.inputBudget?.check(accountedBytes);
-          }
-        };
-        const positionals = extractPdftocairoPositionals(argv);
-        if (positionals.length === 0 || positionals[0] === "-") {
-          const chunks = [];
-          let total = 0;
-          for await (const chunk of readBytes(context.stdin, invocation.signal)) {
-            chunks.push(chunk);
-            total += chunk.byteLength;
-            chargeBytes(chunk.byteLength);
-          }
-          if (total > 0) {
-            const buf = new Uint8Array(total);
-            let off = 0;
-            for (const c of chunks) {
-              buf.set(c, off);
-              off += c.byteLength;
+      return new InputByteBudget(maxInputBytes).run(context, async (context2) => {
+        let cooperativeWork = 63;
+        const invocation = createOutputOperation(context2, { write: async () => {
+        } });
+        try {
+          const carrier = getCommandArguments(context2);
+          const argv = [...carrier.args];
+          const vfsFiles = /* @__PURE__ */ new Map();
+          const resolveVfsPath = (p) => p.startsWith("/") ? p : `${context2.cwd === "/" ? "" : context2.cwd}/${p}`;
+          let accountedBytes = 0;
+          const chargeBytes = (delta) => {
+            if (delta > 0) {
+              accountedBytes += delta;
+              context2.inputBudget?.check(accountedBytes);
+            }
+          };
+          const positionals = extractPdftocairoPositionals(argv);
+          if (positionals.length === 0 || positionals[0] === "-") {
+            const chunks = [];
+            let total = 0;
+            for await (const chunk of readBytes(context2.stdin, invocation.signal)) {
+              if (++cooperativeWork % 64 === 0) await yieldTurn(context2.signal);
+              chunks.push(chunk);
+              total += chunk.byteLength;
+              chargeBytes(chunk.byteLength);
+            }
+            if (total > 0) {
+              const buf = new Uint8Array(total);
+              let off = 0;
+              for (const c of chunks) {
+                if (++cooperativeWork % 64 === 0) await yieldTurn(context2.signal);
+                buf.set(c, off);
+                off += c.byteLength;
+              }
+              vfsFiles.set("-", buf);
             }
-            vfsFiles.set("-", buf);
           }
-        }
-        for (const token of positionals) {
-          if (token === "-") continue;
-          try {
-            const bytes = await context.fs.readFile(resolveVfsPath(token), { signal: invocation.signal });
-            chargeBytes(bytes.byteLength);
-            vfsFiles.set(token, bytes);
-          } catch {
-          }
-        }
-        const existingSnap = new Map(vfsFiles);
-        const res = await runPdftocairoCli(argv, vfsFiles, { onAllocateBytes: chargeBytes });
-        if (res.stderr) {
-          await writeBytes(context.stderr, new TextEncoder().encode(res.stderr), invocation.signal);
-        }
-        if (res.stdoutBytes) {
-          const stdout = invocation.child(context.stdout);
-          await writeBytes(stdout.output, res.stdoutBytes, invocation.signal);
-        } else if (res.stdout) {
-          const stdout = invocation.child(context.stdout);
-          await writeBytes(stdout.output, new TextEncoder().encode(res.stdout), invocation.signal);
-        }
-        for (const [key, val] of vfsFiles.entries()) {
-          if (key !== "-" && existingSnap.get(key) !== val) {
-            const abs = resolveVfsPath(key);
-            const parentDir = abs.slice(0, abs.lastIndexOf("/")) || "/";
+          for (const token of positionals) {
+            if (++cooperativeWork % 64 === 0) await yieldTurn(context2.signal);
+            if (token === "-") continue;
             try {
-              await context.fs.mkdir(parentDir, { recursive: true, signal: invocation.signal });
+              const bytes = await context2.fs.readFile(resolveVfsPath(token), { signal: invocation.signal });
+              chargeBytes(bytes.byteLength);
+              vfsFiles.set(token, bytes);
             } catch {
             }
-            await writeFileOutput(context, val, (data) => context.fs.writeFile(abs, data, { signal: invocation.signal }));
           }
+          context2.inputBudget?.check(0);
+          const existingSnap = new Map(vfsFiles);
+          const res = await runPdftocairoCli(argv, vfsFiles, { onAllocateBytes: chargeBytes, signal: invocation.signal });
+          if (res.stderr) {
+            await writeBytes(context2.stderr, new TextEncoder().encode(res.stderr), invocation.signal);
+          }
+          if (res.stdoutBytes) {
+            const stdout = invocation.child(context2.stdout);
+            await writeBytes(stdout.output, res.stdoutBytes, invocation.signal);
+          } else if (res.stdout) {
+            const stdout = invocation.child(context2.stdout);
+            await writeBytes(stdout.output, new TextEncoder().encode(res.stdout), invocation.signal);
+          }
+          for (const [key, val] of vfsFiles.entries()) {
+            if (++cooperativeWork % 64 === 0) await yieldTurn(context2.signal);
+            if (key !== "-" && existingSnap.get(key) !== val) {
+              const abs = resolveVfsPath(key);
+              const parentDir = abs.slice(0, abs.lastIndexOf("/")) || "/";
+              try {
+                await context2.fs.mkdir(parentDir, { recursive: true, signal: invocation.signal });
+              } catch {
+              }
+              await writeFileOutput(context2, val, (data) => context2.fs.writeFile(abs, data, { signal: invocation.signal }));
+            }
+          }
+          return { exitCode: res.exitCode };
+        } finally {
+          await invocation.close();
         }
-        return { exitCode: res.exitCode };
-      } finally {
-        await invocation.close();
-      }
+      });
     }
   });
 }