@poe-platform/safe-bash 0.1.839 → 0.1.840

package/dist/safe-bash/command-chunks/{chunk-DX7KU6YU.js → chunk-N52AHO6S.js}

@@ -1,7 +1,7 @@
 import {
   digit,
   letter
-} from "./chunk-T6OXG7QQ.js";
+} from "./chunk-AAOPVEPF.js";
 import {
   unicodeWhitespace
 } from "./chunk-C5OMNOKM.js";

package/dist/safe-bash/command-chunks/{chunk-4BSD2RGK.js → chunk-QPKL5GWH.js}

@@ -15519,6 +15519,8 @@ function utf8PasswordToBytes(password) {
 }
 var CipherTransformFactory = class _CipherTransformFactory {
   #fileId;
+  passwordType;
+  userPasswordBytes;
   static get _defaultPasswordBytes() {
     return shadow2(
       this,
@@ -15559,6 +15561,21 @@ var CipherTransformFactory = class _CipherTransformFactory {
       ])
     );
   }
+  matchesOwnerPassword() {
+    if (this.passwordType === "owner") return true;
+    if (this.passwordType !== "user") return false;
+    const dict = this.dict, revision = dict.get("R");
+    const owner = stringToBytes(dict.get("O"));
+    const user = stringToBytes(dict.get("U"));
+    const password = this.userPasswordBytes;
+    if (revision >= 5) {
+      const algorithm = revision === 6 ? new PDF20() : new PDF17();
+      return algorithm.checkOwnerPassword(password, owner.subarray(32, 40), user.subarray(0, 48), owner.subarray(0, 32));
+    }
+    const keyLength = this.encryptionKey.length * 8;
+    const decoded = this.#decodeUserPassword(password, owner, revision, keyLength);
+    return !!this.#prepareKeyData(stringToBytes(this.#fileId), decoded, owner, user, dict.get("P"), revision, keyLength, this.encryptMetadata);
+  }
   #createEncryptionKey20(revision, password, ownerPassword, ownerValidationSalt, ownerKeySalt, uBytes, userPassword, userValidationSalt, userKeySalt, ownerEncryption, userEncryption, perms) {
     if (password) {
       const passwordLength = Math.min(127, password.length);
@@ -15568,6 +15585,8 @@ var CipherTransformFactory = class _CipherTransformFactory {
     }
     const pdfAlgorithm = revision === 6 ? new PDF20() : new PDF17();
     if (pdfAlgorithm.checkUserPassword(password, userValidationSalt, userPassword)) {
+      this.passwordType = "user";
+      this.userPasswordBytes = Uint8Array.from(password);
       return pdfAlgorithm.getUserKey(password, userKeySalt, userEncryption);
     } else if (password.length && pdfAlgorithm.checkOwnerPassword(
       password,
@@ -15575,6 +15594,7 @@ var CipherTransformFactory = class _CipherTransformFactory {
       uBytes,
       ownerPassword
     )) {
+      this.passwordType = "owner";
       return pdfAlgorithm.getOwnerKey(
         password,
         ownerKeySalt,
@@ -15782,6 +15802,10 @@ var CipherTransformFactory = class _CipherTransformFactory {
         keyLength,
         encryptMetadata
       );
+      if (encryptionKey) {
+        this.passwordType = "user";
+        this.userPasswordBytes = passwordBytes ?? new Uint8Array();
+      }
     } else {
       const ownerValidationSalt = ownerBytes.subarray(32, 40);
       const ownerKeySalt = ownerBytes.subarray(40, 48);
@@ -15842,6 +15866,10 @@ var CipherTransformFactory = class _CipherTransformFactory {
         keyLength,
         encryptMetadata
       );
+      if (encryptionKey) {
+        this.passwordType = "owner";
+        this.userPasswordBytes = decodedPassword;
+      }
     }
     if (!encryptionKey) {
       throw new PasswordException(
@@ -31444,6 +31472,37 @@ function derivePdfEncryptionKey(encryptDict, documentId0, password = "", options
     throw new PdfError("E_CAPABILITY", error instanceof Error && error.name === "PasswordException" ? "Invalid PDF password" : `PDF security handler: ${error instanceof Error ? error.message : String(error)}`);
   }
 }
+function getPdfEncryptionInfo(state) {
+  const handler = securityHandlers.get(state);
+  if (!handler) throw new PdfError("E_CAPABILITY", "Encryption inspection requires authenticated PDF security state");
+  const { factory } = handler;
+  let userBytes = factory.userPasswordBytes ?? new Uint8Array();
+  if (state.revision < 5) {
+    for (let length = 0; length < userBytes.length; length++) {
+      if (userBytes.subarray(length).every((byte3, index2) => byte3 === PADDING_32[index2])) {
+        userBytes = userBytes.subarray(0, length);
+        break;
+      }
+    }
+  }
+  const method = (filter) => {
+    if (state.version < 4) return "RC4";
+    if (filter.name === "Identity") return "none";
+    const entry = factory.cf?.get(filter.name);
+    const cipher = entry instanceof Dict2 ? entry.get("CFM") : void 0;
+    const name = cipher instanceof Name ? cipher.name : void 0;
+    return name === "V2" ? "RC4" : name === "AESV2" ? "AESv2" : name === "AESV3" ? "AESv3" : "none";
+  };
+  return {
+    permissionsMask: factory.dict.get("P"),
+    ownerPasswordMatched: factory.matchesOwnerPassword(),
+    userPasswordMatched: factory.passwordType === "user",
+    userPassword: state.revision >= 5 ? new TextDecoder().decode(userBytes) : bytesToString3(userBytes),
+    streamMethod: method(factory.stmf),
+    stringMethod: method(factory.strf),
+    fileMethod: method(factory.eff)
+  };
+}
 function decryptPdfBuffer(state, objectNumber, generationNumber, data) {
   if (data.length === 0) return data;
   const handler = securityHandlers.get(state);
@@ -64656,6 +64715,11 @@ async function* saveRetainedDocumentChunks(document2, storage, options = {}) {
   }
   try {
     for await (const object of retainedCosObjects(document2, storage, { ...options.streamMode ? { streamMode: options.streamMode } : {}, ...options.normalizeContent ? { normalizeContent: true } : {}, ...options.maxObjects === void 0 ? {} : { maxObjects: options.maxObjects }, ...options.maxOutputBytes === void 0 ? {} : { maxStreamBytes: options.maxOutputBytes }, signal })) {
+      const type = object.value.kind === "dict" ? dictGet(object.value, "Type") : void 0;
+      if (object.stream && type?.kind === "name" && type.decoded === "ObjStm") {
+        for await (const ignored of object.stream.chunks) void ignored;
+        continue;
+      }
       if (!object.stream && object.value.kind === "dict" && dictGet(object.value, "Linearized") !== void 0) mayLinearize = true;
       await objects.set(object);
     }
@@ -66822,44 +66886,22 @@ async function stampRetainedPages(document2, store, storage, getPage, stamps, si
   }
 }
 function retainedStampTransform(dstAttributes, srcAttributes) {
-  const dstSize = { width: Math.abs(dstAttributes.mediaBox[2] - dstAttributes.mediaBox[0]), height: Math.abs(dstAttributes.mediaBox[3] - dstAttributes.mediaBox[1]) };
-  const srcSize = { width: Math.abs(srcAttributes.mediaBox[2] - srcAttributes.mediaBox[0]), height: Math.abs(srcAttributes.mediaBox[3] - srcAttributes.mediaBox[1]) };
-  const rotDiff = ((dstAttributes.rotation - srcAttributes.rotation) % 360 + 360) % 360;
-  let stampOpenStr = "q\n";
-  if (srcSize.width > 0 && srcSize.height > 0) {
-    const fmt6 = (n) => Number(n.toFixed(6));
-    const fmt4 = (n) => Number(n.toFixed(4));
-    if (rotDiff === 90) {
-      const s = Math.min(dstSize.height / srcSize.width, dstSize.width / srcSize.height);
-      const ox = (dstSize.height - srcSize.width * s) / 2;
-      const oy = (dstSize.width - srcSize.height * s) / 2;
-      stampOpenStr = `q
-0 ${fmt6(s)} ${fmt6(-s)} 0 ${fmt4(dstSize.width - oy)} ${fmt4(ox)} cm
+  const [dx0, dy0, dx1, dy1] = dstAttributes.mediaBox;
+  const [sx0, sy0, sx1, sy1] = srcAttributes.mediaBox;
+  const width = Math.abs(sx1 - sx0), height = Math.abs(sy1 - sy0);
+  if (width === 0 || height === 0) return "q\n";
+  const rotation = ((dstAttributes.rotation - srcAttributes.rotation) % 360 + 360) % 360;
+  const swapped = rotation === 90 || rotation === 270;
+  const scale = Math.min(1, Math.abs(dx1 - dx0) / (swapped ? height : width), Math.abs(dy1 - dy0) / (swapped ? width : height));
+  const a = rotation === 180 ? -scale : swapped ? 0 : scale;
+  const b = rotation === 90 ? scale : rotation === 270 ? -scale : 0;
+  const c = -b, d = a;
+  const sx = (sx0 + sx1) / 2, sy = (sy0 + sy1) / 2;
+  const tx = (dx0 + dx1) / 2 - a * sx - c * sy;
+  const ty = (dy0 + dy1) / 2 - b * sx - d * sy;
+  return `q
+${[a, b, c, d, tx, ty].map((n) => Number(n.toFixed(6))).join(" ")} cm
 `;
-    } else if (rotDiff === 180) {
-      const s = Math.min(dstSize.width / srcSize.width, dstSize.height / srcSize.height);
-      const ox = (dstSize.width - srcSize.width * s) / 2;
-      const oy = (dstSize.height - srcSize.height * s) / 2;
-      stampOpenStr = `q
-${fmt6(-s)} 0 0 ${fmt6(-s)} ${fmt4(dstSize.width - ox)} ${fmt4(dstSize.height - oy)} cm
-`;
-    } else if (rotDiff === 270) {
-      const s = Math.min(dstSize.height / srcSize.width, dstSize.width / srcSize.height);
-      const ox = (dstSize.height - srcSize.width * s) / 2;
-      const oy = (dstSize.width - srcSize.height * s) / 2;
-      stampOpenStr = `q
-0 ${fmt6(-s)} ${fmt6(s)} 0 ${fmt4(oy)} ${fmt4(dstSize.height - ox)} cm
-`;
-    } else if (Math.abs(srcSize.width - dstSize.width) > 0.5 || Math.abs(srcSize.height - dstSize.height) > 0.5) {
-      const s = Math.min(dstSize.width / srcSize.width, dstSize.height / srcSize.height);
-      const tx = (dstSize.width - srcSize.width * s) / 2;
-      const ty = (dstSize.height - srcSize.height * s) / 2;
-      stampOpenStr = `q
-${fmt6(s)} 0 0 ${fmt6(s)} ${fmt4(tx)} ${fmt4(ty)} cm
-`;
-    }
-  }
-  return stampOpenStr;
 }
 
 // packages/pdf-ast/src/edit/retained-inline-images.ts
@@ -67180,8 +67222,15 @@ var PdfDuplicateAttachment = class extends PdfError {
   }
   key;
 };
+var PdfMissingAttachment = class extends PdfError {
+  constructor(key) {
+    super("E_CAPABILITY", `Attachment ${key} not found`);
+    this.key = key;
+  }
+  key;
+};
 async function editRetainedAttachments(document2, target, storage, remove, additions, signal, preserveTree = false) {
-  const pairs = new PdfMutableObjectStore(storage, { signal });
+  const pairs = new PdfMutableObjectStore(storage, { signal }), requested = new PdfMutableObjectStore(storage, { signal });
   const names = new PdfNameIndex(storage, Infinity, signal), removed = new PdfNameIndex(storage, Infinity, signal);
   const backing = new PagedStorage30({ fs: storage.fs, cwd: storage.directory, env: {}, signal }, 4), first = new IntegerTable17(backing), removals = new IntegerTable17(backing);
   let failed = false, count = 0, work = 0;
@@ -67221,7 +67270,9 @@ async function editRetainedAttachments(document2, target, storage, remove, addit
     if (tree.reference) owner = tree;
     for await (const key of remove) {
       await checkpoint();
-      await removals.set(BigInt((await removed.intern(key)).index), 1n);
+      const { index: index2, added } = await removed.intern(key);
+      if (added) await requested.set({ objectNumber: index2 + 1, generationNumber: 0, value: cosString(key) });
+      await removals.set(BigInt(index2), 1n);
     }
     let keyNode;
     for await (const node of retainedAttachmentNameTokens(document2, storage, tree.value, signal, !preserveTree)) {
@@ -67230,15 +67281,21 @@ async function editRetainedAttachments(document2, target, storage, remove, addit
         continue;
       }
       const keyValue = (await resolve2(keyNode))?.value, key = keyValue?.kind === "string" ? decodePdfString(keyValue) : "";
-      if (await removals.get(BigInt((await removed.intern(key)).index)) === void 0) {
+      const removalIndex = BigInt((await removed.intern(key)).index);
+      if (await removals.get(removalIndex) === void 0) {
         await pairs.set({ objectNumber: ++count, generationNumber: 0, value: cosArray([keyNode, node]) });
         if (keyValue?.kind === "string") {
           const name = await names.intern(key);
           if (name.added) await first.set(BigInt(name.index), BigInt(count));
         }
-      }
+      } else await removals.set(removalIndex, 0n);
       keyNode = void 0;
     }
+    for await (const request of requested.objects()) {
+      if (await removals.get(BigInt(request.objectNumber - 1)) === 1n && request.value.kind === "string") {
+        throw new PdfMissingAttachment(decodePdfString(request.value));
+      }
+    }
     let hasRemovals = false;
     for await (const ignored of removals.entries()) {
       void ignored;
@@ -67332,7 +67389,7 @@ async function editRetainedAttachments(document2, target, storage, remove, addit
     failed = true;
     throw error;
   } finally {
-    const results = await Promise.allSettled([pairs.close(), names.close(), removed.close(), backing.close()]);
+    const results = await Promise.allSettled([pairs.close(), requested.close(), names.close(), removed.close(), backing.close()]);
     if (!failed) {
       for (const result of results) if (result.status === "rejected") await Promise.reject(result.reason);
     }
@@ -68954,6 +69011,7 @@ export {
   encodePermissionsMask,
   computeR5R6Hash,
   derivePdfEncryptionKey,
+  getPdfEncryptionInfo,
   decryptPdfBuffer,
   decryptPdfObjectStrings,
   decryptedPdfStreamDictionary,
@@ -69120,7 +69178,9 @@ export {
   retainedCosObjects,
   saveRetainedDocumentChunks,
   replaceRetainedPdfName,
+  retainedStampTransform,
   PdfDuplicateAttachment,
+  PdfMissingAttachment,
   editRetainedDocument,
   copyRetainedAttachments,
   retainedObjectOrder,