@poe-platform/safe-bash 0.1.839 → 0.1.841

package/dist/safe-bash/command-chunks/{chunk-46GA576V.js → chunk-CPKVUB7S.js}

@@ -1,10 +1,10 @@
 import {
   createArchive,
   manifest
-} from "./chunk-MBXNG6C3.js";
+} from "./chunk-DLLN3C3Q.js";
 import {
   readArchive
-} from "./chunk-SG2KOOD4.js";
+} from "./chunk-3SAYZFMD.js";
 import {
   quoteName
 } from "./chunk-PYIG32ZI.js";

package/dist/safe-bash/command-chunks/{chunk-MBXNG6C3.js → chunk-DLLN3C3Q.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-LSYPQ2W5.js";
 import {
   encodeEntry
-} from "./chunk-TCXM7BSZ.js";
+} from "./chunk-YFMNXPLP.js";
 
 // packages/safe-bash-command-tar/src/create.ts
 import { compareIdentity as compareIdentity2, compareFileVersion } from "@poe-platform/safe-fs/contracts";

package/dist/safe-bash/command-chunks/{chunk-ZSQCROFE.js → chunk-DM5T5D2K.js}

@@ -288,7 +288,11 @@ function createUnzipCommand(options = {}) {
           }
           let parent = await extraction.operation(() => context.fs.lstat(dirname(path), { signal: context.signal }));
           let existing = await extraction.destination(path, archivePath, archiveStat);
-          if (parsed.update && existing && Math.ceil(Math.floor(existing.mtimeMs / 1e3) / 2) * 2e3 >= entry.modified.getTime()) continue;
+          if (parsed.update && existing) {
+            const seconds = Math.floor(existing.mtimeMs / 1e3);
+            const modified = entry.extendedTimestamp ? seconds * 1e3 : Math.ceil(seconds / 2) * 2e3;
+            if (modified >= entry.modified.getTime()) continue;
+          }
           let skip = false;
           let prompting = 0;
           while (existing && overwrite !== "all") {

package/dist/safe-bash/command-chunks/{chunk-3EAZRKI4.js → chunk-G7HQYFIU.js}

@@ -246,7 +246,15 @@ function extras(bytes, rawName, comment, central, limits) {
 }
 function nameFrom(rawName, flags, metadata, limits) {
   number(rawName.length, Math.min(limits.maxPathBytes, 65535), "raw path byte");
-  const raw = flags & 2048 ? text(rawName) : legacyName(rawName);
+  let raw;
+  if (flags & 2048) raw = text(rawName);
+  else {
+    try {
+      raw = text(rawName);
+    } catch {
+      raw = legacyName(rawName);
+    }
+  }
   pathBytes(raw, limits);
   if (flags & 2048 && metadata.name !== void 0 && metadata.name !== raw) fail2("ZIP conflicting UTF-8 and Unicode extra names");
   return metadata.name ?? raw;
@@ -448,6 +456,7 @@ async function openZipDirectory(input, limits, signal, profile = {}) {
     if (timestamp !== void 0) modified.setTime(timestamp);
     const entry = { name, data: buffered ? await bytes.subarray(payloadStart, payloadStart + compressedSize) : new Uint8Array(), ...buffered ? {} : { compressedSize, compressedOffset: payloadStart, compressedSource: () => bytes.stream(payloadStart, compressedSize) }, size, method, crc32: checksum, modified, mode, directory, symlink, rawName, localName, comment, localExtra, centralExtra, flags, versionMadeBy, internalAttributes, externalAttributes, dosTime, dosDate };
     if (aes) entry.aes = aes;
+    entry.extendedTimestamp = timestamp !== void 0;
     entryBounds(entry, limits);
     if ((profile.grow || !buffered) && (centralMetadata.zip64 || localMetadata.zip64)) entry.zip64 = true;
     if (profile.grow) {

package/dist/safe-bash/command-chunks/{chunk-GYKQ3IOV.js → chunk-LMYQMJYY.js}

@@ -1,9 +1,11 @@
 import {
   pipeRow
-} from "./chunk-DX7KU6YU.js";
+} from "./chunk-N52AHO6S.js";
 import {
-  normalizeLabel
-} from "./chunk-T6OXG7QQ.js";
+  fencedDivAttributes,
+  normalizeLabel,
+  romanListNumber
+} from "./chunk-AAOPVEPF.js";
 
 // packages/safe-bash-markdown-engine/src/commonmark-blocks.ts
 function spaces(text, offset) {
@@ -77,22 +79,30 @@ function fence(text, offset) {
   if (end - offset < 3 || char === "`" && text.indexOf("`", end) !== -1) return;
   return { char, length: end - offset };
 }
-function marker(text, offset) {
+function marker(text, offset, fancy = false) {
   let end = offset;
   let start = null;
+  let style;
   let char = text[end];
   if (char === "-" || char === "+" || char === "*") end++;
   else {
     while (text[end] !== void 0 && text[end] >= "0" && text[end] <= "9" && end - offset < 10) end++;
-    if (end === offset || end - offset > 9 || text[end] !== "." && text[end] !== ")") return;
-    start = Number(text.slice(offset, end));
+    if (end === offset && fancy) {
+      while (end - offset < 16 && text[end] && "ivxlcdmIVXLCDM".includes(text[end])) end++;
+      const label = text.slice(offset, end), number = romanListNumber(label);
+      if (number === void 0) return;
+      start = number;
+      style = label === label.toLowerCase() ? "LowerRoman" : "UpperRoman";
+    }
+    if (end === offset || !style && end - offset > 9 || text[end] !== "." && text[end] !== ")") return;
+    start ??= Number(text.slice(offset, end));
     char = text[end++];
   }
   if (end !== text.length && text[end] !== " ") return;
   const padding = spaces(text, end);
   const empty = end + padding === text.length;
   const content = end + (empty || padding > 4 ? Math.min(padding, 1) : padding);
-  return { start, marker: char, content, indent: end - offset + (empty ? 1 : padding > 4 ? 1 : padding), empty };
+  return { start, style, marker: char, content, indent: end - offset + (empty ? 1 : padding > 4 ? 1 : padding), empty };
 }
 var blockTags = /* @__PURE__ */ new Set([
   "address",
@@ -227,11 +237,11 @@ function htmlStart(text, offset, interrupt) {
   if (blockTags.has(name)) return { end: null };
   if (!interrupt && (closing || !["script", "pre", "style", "textarea"].includes(name)) && completeTag(text, offset)) return { end: null };
 }
-function interrupts(text, offset, rawHtml = true) {
+function interrupts(text, offset, rawHtml = true, fancy = false) {
   const indent = spaces(text, offset);
   if (indent > 3) return false;
   const at = offset + indent;
-  const item = marker(text, at);
+  const item = marker(text, at, fancy);
   return Boolean(heading(text, at) || rule(text, at) || fence(text, at) || text[at] === ">" || rawHtml && htmlStart(text, at, true) || item && !item.empty && (item.start === null || item.start === 1));
 }
 async function parseCommonMarkBlocks(text, context, source = "input", extensions = {}) {
@@ -249,7 +259,7 @@ async function parseCommonMarkBlocks(text, context, source = "input", extensions
   const range = (line, offset) => ({ source, start: point(line, offset), end: endPoint(line) });
   const blocks = () => {
     const top = stack[stack.length - 1];
-    return top?.kind === "quote" || top?.kind === "item" || top?.kind === "footnote" ? top.node.blocks : document.blocks;
+    return top?.kind === "div" || top?.kind === "quote" || top?.kind === "item" || top?.kind === "footnote" || top?.kind === "definition" ? top.node.blocks : document.blocks;
   };
   const add = (node) => {
     context.bound("depth", stack.length + 1);
@@ -258,6 +268,8 @@ async function parseCommonMarkBlocks(text, context, source = "input", extensions
     const item = stack[stack.length - 1];
     if (item?.kind === "item" && item.blank && item.node.blocks.length > 0) item.list.tight = false;
     if (item?.kind === "item") item.blank = false;
+    if (item?.kind === "definition" && item.blank) item.node.tight = false;
+    if (item?.kind === "definition") item.blank = false;
     blocks().push(node);
   };
   const push = (container) => {
@@ -358,7 +370,7 @@ async function parseCommonMarkBlocks(text, context, source = "input", extensions
     for (; matched < stack.length; matched++) {
       context.checkpoint();
       const container = stack[matched];
-      if (container.kind === "list") continue;
+      if (container.kind === "list" || container.kind === "div") continue;
       const indent = spaces(line.text, offset);
       if (container.kind === "quote") {
         if (indent > 3 || line.text[offset + indent] !== ">") break;
@@ -374,10 +386,11 @@ async function parseCommonMarkBlocks(text, context, source = "input", extensions
     if (matched < stack.length) {
       const failed = stack[matched];
       const siblingIndent = spaces(line.text, offset);
-      const sibling = siblingIndent <= 3 ? marker(line.text, offset + siblingIndent) : void 0;
+      const sibling = siblingIndent <= 3 ? marker(line.text, offset + siblingIndent, extensions.fancy_lists) : void 0;
       const siblingItem = failed?.kind === "item" && sibling;
       const siblingFootnote = failed?.kind === "footnote" && line.text.startsWith("[^", offset + siblingIndent) && line.text.includes("]:", offset + siblingIndent + 2);
-      if (leaf?.kind === "paragraph" && !blank && !siblingItem && !siblingFootnote && !interrupts(line.text, offset, extensions.raw_html !== false)) {
+      const siblingDefinition = extensions.definition_lists && siblingIndent <= 3 && [":", "~"].includes(line.text[offset + siblingIndent] ?? "") && line.text[offset + siblingIndent + 1] === " ";
+      if (leaf?.kind === "paragraph" && !blank && !siblingItem && !siblingFootnote && !siblingDefinition && !interrupts(line.text, offset, extensions.raw_html !== false, extensions.fancy_lists)) {
         leaf.node.inline.lines.push(inlineLine(line, offset + spaces(line.text, offset)));
         leaf.node.source.end = endPoint(line);
         for (const container of stack) container.node.source.end = endPoint(line);
@@ -432,6 +445,31 @@ async function parseCommonMarkBlocks(text, context, source = "input", extensions
       }
       finish();
     }
+    if (extensions.fenced_divs && spaces(line.text, offset) <= 3) {
+      const at = offset + spaces(line.text, offset);
+      let stop = at;
+      while (line.text[stop] === ":") stop++;
+      if (stop - at >= 3) {
+        const tail = rawFrom(line, stop).trim();
+        const attributes = fencedDivAttributes(tail, context);
+        if (attributes) {
+          finish();
+          const node = { kind: "div", attributes, blocks: [], source: range(line, at) };
+          add(node);
+          push({ kind: "div", node });
+          continue;
+        }
+        if (!tail) {
+          let index = stack.length - 1;
+          while (index >= 0 && stack[index].kind !== "div") index--;
+          if (index >= 0) {
+            finish();
+            stack.length = index;
+            continue;
+          }
+        }
+      }
+    }
     if (blank) {
       finish();
       let deepest;
@@ -442,10 +480,12 @@ async function parseCommonMarkBlocks(text, context, source = "input", extensions
         }
       }
       if (deepest) deepest.blank = true;
+      const top = stack[stack.length - 1];
+      if (top?.kind === "definition") top.blank = true;
       continue;
     }
     if (leaf?.kind === "table") {
-      const row = !interrupts(line.text, offset, extensions.raw_html !== false) ? pipeRow(rawFrom(line, offset), context) : void 0;
+      const row = !interrupts(line.text, offset, extensions.raw_html !== false, extensions.fancy_lists) ? pipeRow(rawFrom(line, offset), context) : void 0;
       if (row) {
         context.charge("tableCells", extensions.preserve_table_columns ? row.length : leaf.node.alignments.length);
         leaf.node.rows.push(extensions.preserve_table_columns ? row : row.slice(0, leaf.node.alignments.length));
@@ -480,6 +520,31 @@ async function parseCommonMarkBlocks(text, context, source = "input", extensions
         }
       }
     }
+    const definitionIndent = spaces(line.text, offset), definitionAt = offset + definitionIndent;
+    if (extensions.definition_lists && definitionIndent <= 3 && [":", "~"].includes(line.text[definitionAt] ?? "") && line.text[definitionAt + 1] === " ") {
+      if (leaf?.kind === "paragraph") extractDefinitions(leaf.node);
+      const siblings = blocks(), previous = siblings[siblings.length - 1];
+      if (previous?.kind === "paragraph" || previous?.kind === "definitionList") {
+        finish();
+        const term = previous.kind === "paragraph" ? previous : void 0;
+        if (term) siblings.pop();
+        let list = siblings[siblings.length - 1];
+        if (list?.kind !== "definitionList") {
+          list = { kind: "definitionList", items: [], source: { ...previous.source } };
+          add(list);
+        }
+        if (term) list.items.push({ term: term.inline, definitions: [] });
+        const lastDefinition = previous.kind === "definitionList" ? previous.items.at(-1)?.definitions.at(-1) : void 0;
+        const previousEnd = lastDefinition?.blocks.at(-1)?.source.end.line ?? previous.source.end.line;
+        const definition = { blocks: [], tight: previousEnd + 1 === line.number, source: range(line, definitionAt) };
+        context.charge("nodes", 1);
+        context.charge("retainedBytes", 128);
+        list.items[list.items.length - 1].definitions.push(definition);
+        list.source.end = endPoint(line);
+        push({ kind: "definition", node: definition, indent: definitionIndent + 4, blank: false, empty: false });
+        offset = definitionAt + 1 + Math.min(3, spaces(line.text, definitionAt + 1));
+      }
+    }
     const initialIndent = spaces(line.text, offset);
     const underline = initialIndent <= 3 ? setext(line.text, offset + initialIndent) : 0;
     if (leaf?.kind === "paragraph" && underline) {
@@ -493,7 +558,7 @@ async function parseCommonMarkBlocks(text, context, source = "input", extensions
       }
       leaf = void 0;
     }
-    if (leaf?.kind === "paragraph" && !interrupts(line.text, offset, extensions.raw_html !== false)) {
+    if (leaf?.kind === "paragraph" && !interrupts(line.text, offset, extensions.raw_html !== false, extensions.fancy_lists)) {
       leaf.node.inline.lines.push(inlineLine(line, offset + initialIndent));
       leaf.node.source.end = endPoint(line);
       continue;
@@ -516,8 +581,8 @@ async function parseCommonMarkBlocks(text, context, source = "input", extensions
           continue;
         }
       }
-      const item = indent <= 3 && !rule(line.text, at) ? marker(line.text, at) : void 0;
-      if (top?.kind === "list" && (!item || item.start !== null !== (top.node.start !== null) || item.marker !== top.node.marker)) {
+      const item = indent <= 3 && !rule(line.text, at) ? marker(line.text, at, extensions.fancy_lists) : void 0;
+      if (top?.kind === "list" && (!item || item.start !== null !== (top.node.start !== null) || item.marker !== top.node.marker || item.style !== top.node.style)) {
         stack.pop();
         const parent = stack[stack.length - 1];
         const previous = top.node.items[top.node.items.length - 1];
@@ -534,7 +599,7 @@ async function parseCommonMarkBlocks(text, context, source = "input", extensions
       if (item && (!wasParagraph || !item.empty && (item.start === null || item.start === 1))) {
         let listContainer = stack[stack.length - 1];
         if (listContainer?.kind !== "list") {
-          const node3 = { kind: "list", start: item.start, marker: item.marker, tight: true, items: [], source: range(line, at) };
+          const node3 = { kind: "list", start: item.start, marker: item.marker, style: item.style, tight: true, items: [], source: range(line, at) };
           add(node3);
           listContainer = { kind: "list", node: node3 };
           push(listContainer);
@@ -550,6 +615,17 @@ async function parseCommonMarkBlocks(text, context, source = "input", extensions
         if (item.empty) break;
         continue;
       }
+      if (extensions.fenced_divs && indent <= 3 && line.text.startsWith(":::", at)) {
+        let stop = at + 3;
+        while (line.text[stop] === ":") stop++;
+        const attributes = fencedDivAttributes(rawFrom(line, stop), context);
+        if (attributes) {
+          const node2 = { kind: "div", attributes, blocks: [], source: range(line, at) };
+          add(node2);
+          push({ kind: "div", node: node2 });
+          break;
+        }
+      }
       if (at === line.text.length) break;
       const level = indent <= 3 ? heading(line.text, at) : 0;
       if (level) {

package/dist/safe-bash/command-chunks/{chunk-DX7KU6YU.js → chunk-N52AHO6S.js}

@@ -1,7 +1,7 @@
 import {
   digit,
   letter
-} from "./chunk-T6OXG7QQ.js";
+} from "./chunk-AAOPVEPF.js";
 import {
   unicodeWhitespace
 } from "./chunk-C5OMNOKM.js";

package/dist/safe-bash/command-chunks/{chunk-4BSD2RGK.js → chunk-QPKL5GWH.js}

@@ -15519,6 +15519,8 @@ function utf8PasswordToBytes(password) {
 }
 var CipherTransformFactory = class _CipherTransformFactory {
   #fileId;
+  passwordType;
+  userPasswordBytes;
   static get _defaultPasswordBytes() {
     return shadow2(
       this,
@@ -15559,6 +15561,21 @@ var CipherTransformFactory = class _CipherTransformFactory {
       ])
     );
   }
+  matchesOwnerPassword() {
+    if (this.passwordType === "owner") return true;
+    if (this.passwordType !== "user") return false;
+    const dict = this.dict, revision = dict.get("R");
+    const owner = stringToBytes(dict.get("O"));
+    const user = stringToBytes(dict.get("U"));
+    const password = this.userPasswordBytes;
+    if (revision >= 5) {
+      const algorithm = revision === 6 ? new PDF20() : new PDF17();
+      return algorithm.checkOwnerPassword(password, owner.subarray(32, 40), user.subarray(0, 48), owner.subarray(0, 32));
+    }
+    const keyLength = this.encryptionKey.length * 8;
+    const decoded = this.#decodeUserPassword(password, owner, revision, keyLength);
+    return !!this.#prepareKeyData(stringToBytes(this.#fileId), decoded, owner, user, dict.get("P"), revision, keyLength, this.encryptMetadata);
+  }
   #createEncryptionKey20(revision, password, ownerPassword, ownerValidationSalt, ownerKeySalt, uBytes, userPassword, userValidationSalt, userKeySalt, ownerEncryption, userEncryption, perms) {
     if (password) {
       const passwordLength = Math.min(127, password.length);
@@ -15568,6 +15585,8 @@ var CipherTransformFactory = class _CipherTransformFactory {
     }
     const pdfAlgorithm = revision === 6 ? new PDF20() : new PDF17();
     if (pdfAlgorithm.checkUserPassword(password, userValidationSalt, userPassword)) {
+      this.passwordType = "user";
+      this.userPasswordBytes = Uint8Array.from(password);
       return pdfAlgorithm.getUserKey(password, userKeySalt, userEncryption);
     } else if (password.length && pdfAlgorithm.checkOwnerPassword(
       password,
@@ -15575,6 +15594,7 @@ var CipherTransformFactory = class _CipherTransformFactory {
       uBytes,
       ownerPassword
     )) {
+      this.passwordType = "owner";
       return pdfAlgorithm.getOwnerKey(
         password,
         ownerKeySalt,
@@ -15782,6 +15802,10 @@ var CipherTransformFactory = class _CipherTransformFactory {
         keyLength,
         encryptMetadata
       );
+      if (encryptionKey) {
+        this.passwordType = "user";
+        this.userPasswordBytes = passwordBytes ?? new Uint8Array();
+      }
     } else {
       const ownerValidationSalt = ownerBytes.subarray(32, 40);
       const ownerKeySalt = ownerBytes.subarray(40, 48);
@@ -15842,6 +15866,10 @@ var CipherTransformFactory = class _CipherTransformFactory {
         keyLength,
         encryptMetadata
       );
+      if (encryptionKey) {
+        this.passwordType = "owner";
+        this.userPasswordBytes = decodedPassword;
+      }
     }
     if (!encryptionKey) {
       throw new PasswordException(
@@ -31444,6 +31472,37 @@ function derivePdfEncryptionKey(encryptDict, documentId0, password = "", options
     throw new PdfError("E_CAPABILITY", error instanceof Error && error.name === "PasswordException" ? "Invalid PDF password" : `PDF security handler: ${error instanceof Error ? error.message : String(error)}`);
   }
 }
+function getPdfEncryptionInfo(state) {
+  const handler = securityHandlers.get(state);
+  if (!handler) throw new PdfError("E_CAPABILITY", "Encryption inspection requires authenticated PDF security state");
+  const { factory } = handler;
+  let userBytes = factory.userPasswordBytes ?? new Uint8Array();
+  if (state.revision < 5) {
+    for (let length = 0; length < userBytes.length; length++) {
+      if (userBytes.subarray(length).every((byte3, index2) => byte3 === PADDING_32[index2])) {
+        userBytes = userBytes.subarray(0, length);
+        break;
+      }
+    }
+  }
+  const method = (filter) => {
+    if (state.version < 4) return "RC4";
+    if (filter.name === "Identity") return "none";
+    const entry = factory.cf?.get(filter.name);
+    const cipher = entry instanceof Dict2 ? entry.get("CFM") : void 0;
+    const name = cipher instanceof Name ? cipher.name : void 0;
+    return name === "V2" ? "RC4" : name === "AESV2" ? "AESv2" : name === "AESV3" ? "AESv3" : "none";
+  };
+  return {
+    permissionsMask: factory.dict.get("P"),
+    ownerPasswordMatched: factory.matchesOwnerPassword(),
+    userPasswordMatched: factory.passwordType === "user",
+    userPassword: state.revision >= 5 ? new TextDecoder().decode(userBytes) : bytesToString3(userBytes),
+    streamMethod: method(factory.stmf),
+    stringMethod: method(factory.strf),
+    fileMethod: method(factory.eff)
+  };
+}
 function decryptPdfBuffer(state, objectNumber, generationNumber, data) {
   if (data.length === 0) return data;
   const handler = securityHandlers.get(state);
@@ -64656,6 +64715,11 @@ async function* saveRetainedDocumentChunks(document2, storage, options = {}) {
   }
   try {
     for await (const object of retainedCosObjects(document2, storage, { ...options.streamMode ? { streamMode: options.streamMode } : {}, ...options.normalizeContent ? { normalizeContent: true } : {}, ...options.maxObjects === void 0 ? {} : { maxObjects: options.maxObjects }, ...options.maxOutputBytes === void 0 ? {} : { maxStreamBytes: options.maxOutputBytes }, signal })) {
+      const type = object.value.kind === "dict" ? dictGet(object.value, "Type") : void 0;
+      if (object.stream && type?.kind === "name" && type.decoded === "ObjStm") {
+        for await (const ignored of object.stream.chunks) void ignored;
+        continue;
+      }
       if (!object.stream && object.value.kind === "dict" && dictGet(object.value, "Linearized") !== void 0) mayLinearize = true;
       await objects.set(object);
     }
@@ -66822,44 +66886,22 @@ async function stampRetainedPages(document2, store, storage, getPage, stamps, si
   }
 }
 function retainedStampTransform(dstAttributes, srcAttributes) {
-  const dstSize = { width: Math.abs(dstAttributes.mediaBox[2] - dstAttributes.mediaBox[0]), height: Math.abs(dstAttributes.mediaBox[3] - dstAttributes.mediaBox[1]) };
-  const srcSize = { width: Math.abs(srcAttributes.mediaBox[2] - srcAttributes.mediaBox[0]), height: Math.abs(srcAttributes.mediaBox[3] - srcAttributes.mediaBox[1]) };
-  const rotDiff = ((dstAttributes.rotation - srcAttributes.rotation) % 360 + 360) % 360;
-  let stampOpenStr = "q\n";
-  if (srcSize.width > 0 && srcSize.height > 0) {
-    const fmt6 = (n) => Number(n.toFixed(6));
-    const fmt4 = (n) => Number(n.toFixed(4));
-    if (rotDiff === 90) {
-      const s = Math.min(dstSize.height / srcSize.width, dstSize.width / srcSize.height);
-      const ox = (dstSize.height - srcSize.width * s) / 2;
-      const oy = (dstSize.width - srcSize.height * s) / 2;
-      stampOpenStr = `q
-0 ${fmt6(s)} ${fmt6(-s)} 0 ${fmt4(dstSize.width - oy)} ${fmt4(ox)} cm
+  const [dx0, dy0, dx1, dy1] = dstAttributes.mediaBox;
+  const [sx0, sy0, sx1, sy1] = srcAttributes.mediaBox;
+  const width = Math.abs(sx1 - sx0), height = Math.abs(sy1 - sy0);
+  if (width === 0 || height === 0) return "q\n";
+  const rotation = ((dstAttributes.rotation - srcAttributes.rotation) % 360 + 360) % 360;
+  const swapped = rotation === 90 || rotation === 270;
+  const scale = Math.min(1, Math.abs(dx1 - dx0) / (swapped ? height : width), Math.abs(dy1 - dy0) / (swapped ? width : height));
+  const a = rotation === 180 ? -scale : swapped ? 0 : scale;
+  const b = rotation === 90 ? scale : rotation === 270 ? -scale : 0;
+  const c = -b, d = a;
+  const sx = (sx0 + sx1) / 2, sy = (sy0 + sy1) / 2;
+  const tx = (dx0 + dx1) / 2 - a * sx - c * sy;
+  const ty = (dy0 + dy1) / 2 - b * sx - d * sy;
+  return `q
+${[a, b, c, d, tx, ty].map((n) => Number(n.toFixed(6))).join(" ")} cm
 `;
-    } else if (rotDiff === 180) {
-      const s = Math.min(dstSize.width / srcSize.width, dstSize.height / srcSize.height);
-      const ox = (dstSize.width - srcSize.width * s) / 2;
-      const oy = (dstSize.height - srcSize.height * s) / 2;
-      stampOpenStr = `q
-${fmt6(-s)} 0 0 ${fmt6(-s)} ${fmt4(dstSize.width - ox)} ${fmt4(dstSize.height - oy)} cm
-`;
-    } else if (rotDiff === 270) {
-      const s = Math.min(dstSize.height / srcSize.width, dstSize.width / srcSize.height);
-      const ox = (dstSize.height - srcSize.width * s) / 2;
-      const oy = (dstSize.width - srcSize.height * s) / 2;
-      stampOpenStr = `q
-0 ${fmt6(-s)} ${fmt6(s)} 0 ${fmt4(oy)} ${fmt4(dstSize.height - ox)} cm
-`;
-    } else if (Math.abs(srcSize.width - dstSize.width) > 0.5 || Math.abs(srcSize.height - dstSize.height) > 0.5) {
-      const s = Math.min(dstSize.width / srcSize.width, dstSize.height / srcSize.height);
-      const tx = (dstSize.width - srcSize.width * s) / 2;
-      const ty = (dstSize.height - srcSize.height * s) / 2;
-      stampOpenStr = `q
-${fmt6(s)} 0 0 ${fmt6(s)} ${fmt4(tx)} ${fmt4(ty)} cm
-`;
-    }
-  }
-  return stampOpenStr;
 }
 
 // packages/pdf-ast/src/edit/retained-inline-images.ts
@@ -67180,8 +67222,15 @@ var PdfDuplicateAttachment = class extends PdfError {
   }
   key;
 };
+var PdfMissingAttachment = class extends PdfError {
+  constructor(key) {
+    super("E_CAPABILITY", `Attachment ${key} not found`);
+    this.key = key;
+  }
+  key;
+};
 async function editRetainedAttachments(document2, target, storage, remove, additions, signal, preserveTree = false) {
-  const pairs = new PdfMutableObjectStore(storage, { signal });
+  const pairs = new PdfMutableObjectStore(storage, { signal }), requested = new PdfMutableObjectStore(storage, { signal });
   const names = new PdfNameIndex(storage, Infinity, signal), removed = new PdfNameIndex(storage, Infinity, signal);
   const backing = new PagedStorage30({ fs: storage.fs, cwd: storage.directory, env: {}, signal }, 4), first = new IntegerTable17(backing), removals = new IntegerTable17(backing);
   let failed = false, count = 0, work = 0;
@@ -67221,7 +67270,9 @@ async function editRetainedAttachments(document2, target, storage, remove, addit
     if (tree.reference) owner = tree;
     for await (const key of remove) {
       await checkpoint();
-      await removals.set(BigInt((await removed.intern(key)).index), 1n);
+      const { index: index2, added } = await removed.intern(key);
+      if (added) await requested.set({ objectNumber: index2 + 1, generationNumber: 0, value: cosString(key) });
+      await removals.set(BigInt(index2), 1n);
     }
     let keyNode;
     for await (const node of retainedAttachmentNameTokens(document2, storage, tree.value, signal, !preserveTree)) {
@@ -67230,15 +67281,21 @@ async function editRetainedAttachments(document2, target, storage, remove, addit
         continue;
       }
       const keyValue = (await resolve2(keyNode))?.value, key = keyValue?.kind === "string" ? decodePdfString(keyValue) : "";
-      if (await removals.get(BigInt((await removed.intern(key)).index)) === void 0) {
+      const removalIndex = BigInt((await removed.intern(key)).index);
+      if (await removals.get(removalIndex) === void 0) {
         await pairs.set({ objectNumber: ++count, generationNumber: 0, value: cosArray([keyNode, node]) });
         if (keyValue?.kind === "string") {
           const name = await names.intern(key);
           if (name.added) await first.set(BigInt(name.index), BigInt(count));
         }
-      }
+      } else await removals.set(removalIndex, 0n);
       keyNode = void 0;
     }
+    for await (const request of requested.objects()) {
+      if (await removals.get(BigInt(request.objectNumber - 1)) === 1n && request.value.kind === "string") {
+        throw new PdfMissingAttachment(decodePdfString(request.value));
+      }
+    }
     let hasRemovals = false;
     for await (const ignored of removals.entries()) {
       void ignored;
@@ -67332,7 +67389,7 @@ async function editRetainedAttachments(document2, target, storage, remove, addit
     failed = true;
     throw error;
   } finally {
-    const results = await Promise.allSettled([pairs.close(), names.close(), removed.close(), backing.close()]);
+    const results = await Promise.allSettled([pairs.close(), requested.close(), names.close(), removed.close(), backing.close()]);
     if (!failed) {
       for (const result of results) if (result.status === "rejected") await Promise.reject(result.reason);
     }
@@ -68954,6 +69011,7 @@ export {
   encodePermissionsMask,
   computeR5R6Hash,
   derivePdfEncryptionKey,
+  getPdfEncryptionInfo,
   decryptPdfBuffer,
   decryptPdfObjectStrings,
   decryptedPdfStreamDictionary,
@@ -69120,7 +69178,9 @@ export {
   retainedCosObjects,
   saveRetainedDocumentChunks,
   replaceRetainedPdfName,
+  retainedStampTransform,
   PdfDuplicateAttachment,
+  PdfMissingAttachment,
   editRetainedDocument,
   copyRetainedAttachments,
   retainedObjectOrder,