modern-pdf-lib 0.25.0 → 0.26.0

package/dist/{pdfDocument-B0_XwS4X.mjs → pdfDocument-D7aFSQEY.mjs}

@@ -1,11 +1,11 @@
-import { m as applyRedactions, n as PdfPage, t as PageSizes, v as PdfLayerManager, x as drawSvgOnPage } from "./pdfPage-B_d9HmkG.mjs";
+import { m as applyRedactions, n as PdfPage, t as PageSizes, v as PdfLayerManager, x as drawSvgOnPage } from "./pdfPage-BJIE5hc6.mjs";
 import { a as PdfNull, c as PdfRef, i as PdfName, l as PdfStream, n as PdfBool, o as PdfNumber, r as PdfDict, s as PdfObjectRegistry, t as PdfArray, u as PdfString } from "./pdfObjects-uEsWlfzU.mjs";
-import { a as formatPdfDate$1, n as buildDocumentStructure } from "./pdfCatalog-3yMIhJtt.mjs";
-import { n as isAvailable, t as deflateSync$1 } from "./libdeflateWasm-8b91Vmia.mjs";
-import { i as subsetFont, n as computeSubsetTag, t as buildSubsetCmap } from "./fontSubset-D-vQQems.mjs";
-import { t as embedPng } from "./pngEmbed-BWAbEUKF.mjs";
-import { t as decompressSync } from "./fflateAdapter-PSiW_ML7.mjs";
-import { t as PdfForm } from "./pdfForm-Cn-cVicP.mjs";
+import { a as formatPdfDate$1, n as buildDocumentStructure } from "./pdfCatalog-CnKMAtIo.mjs";
+import { n as isAvailable, t as deflateSync$1 } from "./libdeflateWasm-CcA1W04G.mjs";
+import { i as subsetFont, n as computeSubsetTag, t as buildSubsetCmap } from "./fontSubset-BGFDIMmT.mjs";
+import { t as embedPng } from "./pngEmbed-CGi7cym7.mjs";
+import { t as decompressSync } from "./fflateAdapter-DuNiByKx.mjs";
+import { t as PdfForm } from "./pdfForm-C3mC9FoQ.mjs";
 import { n as getStreamFilters, t as decodeStream$1 } from "./streamDecode-Bj568Nc9.mjs";
 import { deflateSync, inflateSync } from "fflate";
 
@@ -15,16 +15,17 @@ import { deflateSync, inflateSync } from "fflate";
 *
 * Binary serialization of a PDF document to a single `Uint8Array`.
 *
-* Produces a valid PDF 1.7 file:
+* Produces a valid PDF 1.7 (or 2.0 when encryption V=5) file:
 *
-* 1. `%PDF-1.7` header + binary comment
-* 2. Indirect-object bodies
+* 1. `%PDF-1.7` (or `%PDF-2.0`) header + binary comment
+* 2. Indirect-object bodies (optionally encrypted)
 * 3. Cross-reference table
-* 4. Trailer dictionary (`/Size`, `/Root`, `/Info`)
+* 4. Trailer dictionary (`/Size`, `/Root`, `/Info`, `/Encrypt`, `/ID`)
 * 5. `startxref` pointer
 * 6. `%%EOF`
 *
-* Supports optional FlateDecode compression for streams via `fflate`.
+* Supports optional FlateDecode compression for streams via `fflate`
+* and optional encryption via a {@link PdfEncryptionHandler}.
 */
 /**
 * Growable byte buffer used during serialization.  All writes go
@@ -74,32 +75,48 @@ var PdfWriter = class {
 	compressionLevel;
 	useWasm;
 	objectStreamThreshold;
-	constructor(registry, structure, options) {
+	encryptionHandler;
+	/**
+	* When encryption is active, the /Encrypt dict is registered as an
+	* indirect object.  Its reference is stored here for the trailer.
+	*/
+	encryptDictRef;
+	constructor(registry, structure, options, encryptionHandler) {
 		this.registry = registry;
 		this.structure = structure;
 		this.compress = options?.compress ?? true;
 		this.compressionLevel = options?.compressionLevel ?? 6;
 		this.useWasm = options?.useWasm ?? false;
 		this.objectStreamThreshold = options?.objectStreamThreshold ?? Infinity;
+		this.encryptionHandler = encryptionHandler;
 	}
 	/**
 	* Produce the complete PDF file as a `Uint8Array`.
+	*
+	* When an encryption handler is present, all string and stream
+	* objects are encrypted and the /Encrypt dictionary + /ID array
+	* are added to the trailer.
 	*/
-	write() {
+	async write() {
+		if (this.encryptionHandler) {
+			const encDict = this.encryptionHandler.buildEncryptDict();
+			this.encryptDictRef = this.registry.register(encDict);
+		}
 		this.writeHeader();
 		if (this.objectStreamThreshold !== Infinity) {
-			if (this.writeBodyWithObjectStreams(this.objectStreamThreshold)) return this.buf.toUint8Array();
+			if (await this.writeBodyWithObjectStreams(this.objectStreamThreshold)) return this.buf.toUint8Array();
 			const xrefOffset = this.writeXref();
 			this.writeTrailer(xrefOffset);
 		} else {
-			this.writeBody();
+			await this.writeBody();
 			const xrefOffset = this.writeXref();
 			this.writeTrailer(xrefOffset);
 		}
 		return this.buf.toUint8Array();
 	}
 	writeHeader() {
-		this.buf.writeString("%PDF-1.7\n");
+		const version = this.encryptionHandler && this.encryptionHandler.getVersion() === 5 ? "2.0" : "1.7";
+		this.buf.writeString(`%PDF-${version}\n`);
 		this.buf.write(new Uint8Array([
 			37,
 			226,
@@ -109,11 +126,13 @@ var PdfWriter = class {
 			10
 		]));
 	}
-	writeBody() {
-		for (const entry of this.registry) this.writeIndirectObject(entry);
+	async writeBody() {
+		for (const entry of this.registry) await this.writeIndirectObject(entry);
 	}
-	writeIndirectObject(entry) {
+	async writeIndirectObject(entry) {
 		if (this.compress && entry.object.kind === "stream") this.compressStream(entry.object);
+		const isEncryptDict = this.encryptDictRef && entry.ref.objectNumber === this.encryptDictRef.objectNumber;
+		if (this.encryptionHandler && !isEncryptDict) await this.encryptEntry(entry);
 		const objNum = entry.ref.objectNumber;
 		while (this.xrefOffsets.length <= objNum) this.xrefOffsets.push(0);
 		this.xrefOffsets[objNum] = this.buf.offset;
@@ -122,6 +141,50 @@ var PdfWriter = class {
 		this.buf.writeString(`\n${entry.ref.toObjectFooter()}\n`);
 	}
 	/**
+	* Encrypt all encryptable data within an indirect object.
+	*
+	* Per the PDF spec:
+	* - Strings inside the object are encrypted with the per-object key.
+	* - Stream data is encrypted with the per-object key.
+	* - The /Encrypt dictionary itself is never encrypted.
+	* - String values in the trailer /ID array are never encrypted.
+	*/
+	async encryptEntry(entry) {
+		const handler = this.encryptionHandler;
+		const objNum = entry.ref.objectNumber;
+		const genNum = entry.ref.generationNumber;
+		if (entry.object.kind === "stream") {
+			const stream = entry.object;
+			await this.encryptDictStrings(stream.dict, objNum, genNum);
+			stream.data = await handler.encryptObject(objNum, genNum, stream.data);
+			stream.syncLength();
+		} else if (entry.object.kind === "dict") await this.encryptDictStrings(entry.object, objNum, genNum);
+	}
+	/**
+	* Recursively encrypt all PdfString values inside a PdfDict.
+	*/
+	async encryptDictStrings(dict, objNum, genNum) {
+		const handler = this.encryptionHandler;
+		for (const [key, value] of dict) if (value.kind === "string") {
+			const encrypted = await handler.encryptString(objNum, genNum, value);
+			dict.set(key, encrypted);
+		} else if (value.kind === "dict") await this.encryptDictStrings(value, objNum, genNum);
+		else if (value.kind === "array") await this.encryptArrayStrings(value, objNum, genNum);
+	}
+	/**
+	* Recursively encrypt all PdfString values inside a PdfArray.
+	*/
+	async encryptArrayStrings(arr, objNum, genNum) {
+		const handler = this.encryptionHandler;
+		const items = arr.items;
+		for (let i = 0; i < items.length; i++) {
+			const item = items[i];
+			if (item.kind === "string") items[i] = await handler.encryptString(objNum, genNum, item);
+			else if (item.kind === "dict") await this.encryptDictStrings(item, objNum, genNum);
+			else if (item.kind === "array") await this.encryptArrayStrings(item, objNum, genNum);
+		}
+	}
+	/**
 	* Apply FlateDecode compression to a stream's data if it is not
 	* already compressed.
 	*/
@@ -159,7 +222,7 @@ var PdfWriter = class {
 	*          written in traditional format and the caller must still
 	*          emit the classic xref table and trailer.
 	*/
-	writeBodyWithObjectStreams(threshold) {
+	async writeBodyWithObjectStreams(threshold) {
 		const protectedNums = this.protectedObjectNumbers();
 		const streamEntries = [];
 		const protectedEntries = [];
@@ -168,11 +231,11 @@ var PdfWriter = class {
 		else if (protectedNums.has(entry.ref.objectNumber)) protectedEntries.push(entry);
 		else packableEntries.push(entry);
 		if (packableEntries.length < threshold) {
-			this.writeBody();
+			await this.writeBody();
 			return false;
 		}
-		for (const entry of streamEntries) this.writeIndirectObject(entry);
-		for (const entry of protectedEntries) this.writeIndirectObject(entry);
+		for (const entry of streamEntries) await this.writeIndirectObject(entry);
+		for (const entry of protectedEntries) await this.writeIndirectObject(entry);
 		const OBJS_PER_STREAM = 200;
 		const xrefEntries = /* @__PURE__ */ new Map();
 		for (let i = 0; i < this.xrefOffsets.length; i++) {
@@ -361,6 +424,11 @@ var PdfWriter = class {
 		this.buf.writeString(`/Size ${size}\n`);
 		this.buf.writeString(`/Root ${this.structure.catalogRef.objectNumber} ${this.structure.catalogRef.generationNumber} R\n`);
 		this.buf.writeString(`/Info ${this.structure.infoRef.objectNumber} ${this.structure.infoRef.generationNumber} R\n`);
+		if (this.encryptionHandler && this.encryptDictRef) {
+			this.buf.writeString(`/Encrypt ${this.encryptDictRef.objectNumber} ${this.encryptDictRef.generationNumber} R\n`);
+			const fileIdHex = this.encryptionHandler.getFileId().toHex();
+			this.buf.writeString(`/ID [<${fileIdHex}> <${fileIdHex}>]\n`);
+		}
 		this.buf.writeString(">>\n");
 		this.buf.writeString("startxref\n");
 		this.buf.writeString(`${xrefOffset}\n`);
@@ -415,13 +483,16 @@ function writeIntBE(buf, offset, width, value) {
 /**
 * Serialize a complete PDF from a registry and structure refs.
 *
-* @param registry   All registered indirect objects.
-* @param structure  Catalog / Info / Pages references.
-* @param options    Save options.
-* @returns          The raw PDF bytes.
+* @param registry            All registered indirect objects.
+* @param structure           Catalog / Info / Pages references.
+* @param options             Save options.
+* @param encryptionHandler   Optional encryption handler for encrypting
+*                            all objects and adding /Encrypt + /ID to
+*                            the trailer.
+* @returns                   The raw PDF bytes.
 */
-function serializePdf(registry, structure, options) {
-	return new PdfWriter(registry, structure, options).write();
+async function serializePdf(registry, structure, options, encryptionHandler) {
+	return new PdfWriter(registry, structure, options, encryptionHandler).write();
 }
 
 //#endregion
@@ -6282,10 +6353,10 @@ async function tryLoadLibdeflate() {
 	if (libdeflateAttempted) return libdeflateEngine;
 	libdeflateAttempted = true;
 	try {
-		const { LibdeflateWasm: LibdeflateCtor, initDeflateWasm } = await import("./libdeflateWasm-8b91Vmia.mjs").then((n) => n.r);
+		const { LibdeflateWasm: LibdeflateCtor, initDeflateWasm } = await import("./libdeflateWasm-CcA1W04G.mjs").then((n) => n.r);
 		let customBytes;
 		try {
-			const { getWasmLoaderConfig } = await import("./loader-C7B5dVCI.mjs").then((n) => n.l);
+			const { getWasmLoaderConfig } = await import("./loader-CVB-c_3Z.mjs").then((n) => n.l);
 			customBytes = getWasmLoaderConfig().moduleBytes?.["libdeflate"];
 		} catch {}
 		await initDeflateWasm(customBytes);
@@ -6303,7 +6374,7 @@ async function tryLoadLibdeflate() {
 */
 async function loadFflate() {
 	if (fflateEngine) return fflateEngine;
-	const { FflateEngine: FflateCtor } = await import("./fflateAdapter-PSiW_ML7.mjs").then((n) => n.n);
+	const { FflateEngine: FflateCtor } = await import("./fflateAdapter-DuNiByKx.mjs").then((n) => n.n);
 	fflateEngine = new FflateCtor();
 	return fflateEngine;
 }
@@ -9342,7 +9413,7 @@ var PdfDocumentParser = class {
 		for (let i = 0; i + 1 < headerTokens.length && objEntries.length < n; i += 2) {
 			const objNum = parseInt(headerTokens[i], 10);
 			const offset = parseInt(headerTokens[i + 1], 10);
-			if (!isNaN(objNum) && !isNaN(offset)) objEntries.push({
+			if (!Number.isNaN(objNum) && !Number.isNaN(offset)) objEntries.push({
 				objNum,
 				offset
 			});
@@ -9624,7 +9695,7 @@ var PdfDocumentParser = class {
 			const name = key.startsWith("/") ? key.slice(1) : key;
 			if (name.startsWith(prefix)) {
 				const num = parseInt(name.slice(prefix.length), 10);
-				return isNaN(num) ? 0 : num;
+				return Number.isNaN(num) ? 0 : num;
 			}
 			return 0;
 		}).reduce((max, n) => Math.max(max, n), 0);
@@ -10338,12 +10409,12 @@ function parseXmpMetadata(xmpString) {
 	const createDate = extractSimpleValue(xmpString, "xmp:CreateDate");
 	if (createDate !== void 0) {
 		const parsed = new Date(createDate);
-		if (!isNaN(parsed.getTime())) result.creationDate = parsed;
+		if (!Number.isNaN(parsed.getTime())) result.creationDate = parsed;
 	}
 	const modifyDate = extractSimpleValue(xmpString, "xmp:ModifyDate");
 	if (modifyDate !== void 0) {
 		const parsed = new Date(modifyDate);
-		if (!isNaN(parsed.getTime())) result.modDate = parsed;
+		if (!Number.isNaN(parsed.getTime())) result.modDate = parsed;
 	}
 	return result;
 }
@@ -13593,6 +13664,99 @@ function parseJpegDimensions(data) {
 	throw new Error("Invalid JPEG: SOF marker not found");
 }
 
+//#endregion
+//#region src/core/pageLabels.ts
+/** Map from user-facing style names to PDF /S name values. */
+const styleToPdfName = {
+	decimal: "D",
+	roman: "r",
+	Roman: "R",
+	alpha: "a",
+	Alpha: "A"
+};
+/**
+* Symbol used to store page labels on the PdfDocument instance.
+* This avoids modifying the PdfDocument class while keeping state
+* associated with the document.
+*/
+const PAGE_LABELS_KEY = Symbol.for("modern-pdf-lib:pageLabels");
+/**
+* Set the page label ranges for the document.
+*
+* Each entry in the `labels` array defines a contiguous range of pages
+* that share a numbering style.  Ranges must be sorted by `startPage`
+* in ascending order.
+*
+* @param doc     The document to set page labels on.
+* @param labels  An array of label range definitions.
+* @throws        If `labels` is empty or ranges are not sorted.
+*/
+function setPageLabels(doc, labels) {
+	if (labels.length === 0) throw new Error("Page labels array must not be empty");
+	for (let i = 1; i < labels.length; i++) if (labels[i].startPage <= labels[i - 1].startPage) throw new Error(`Page label ranges must be sorted by startPage in ascending order. Got startPage ${labels[i].startPage} after ${labels[i - 1].startPage}.`);
+	const store = doc;
+	store[PAGE_LABELS_KEY] = labels.map((r) => ({ ...r }));
+}
+/**
+* Get the current page label ranges for the document.
+*
+* Returns `undefined` if no page labels have been set.
+*
+* @param doc  The document to read page labels from.
+* @returns    The page label ranges, or `undefined`.
+*/
+function getPageLabels(doc) {
+	const labels = doc[PAGE_LABELS_KEY];
+	if (labels === void 0) return void 0;
+	return labels.map((r) => ({ ...r }));
+}
+/**
+* Remove all page labels from the document.
+*
+* @param doc  The document to clear page labels from.
+*/
+function removePageLabels(doc) {
+	const store = doc;
+	store[PAGE_LABELS_KEY] = void 0;
+}
+/**
+* Build the `/PageLabels` number tree dictionary for inclusion in the
+* document catalog.
+*
+* This is called during document serialization (by the save pipeline)
+* to produce the PDF objects that represent the page label scheme.
+*
+* The number tree format (PDF 1.7 §7.9.7) uses a `/Nums` array of
+* alternating page-index / label-dict pairs:
+*
+* ```
+* /PageLabels << /Nums [
+*   0 << /S /r >>
+*   4 << /S /D /St 1 >>
+* ] >>
+* ```
+*
+* @param doc  The document to read page label state from.
+* @returns    The number tree entries as `[pageIndex, labelDict]` pairs,
+*             or `undefined` if no labels are set.
+*
+* @internal
+*/
+function getPageLabelEntries(doc) {
+	return doc[PAGE_LABELS_KEY];
+}
+/**
+* Map a {@link PageLabelStyle} to its PDF `/S` name value.
+*
+* @param style  The user-facing style name.
+* @returns      The PDF name value (without the leading `/`).
+*
+* @internal
+*/
+function styleToPdf(style) {
+	return styleToPdfName[style];
+}
+
 //#endregion
 //#region src/core/pdfDocument.ts
 /**
@@ -15189,7 +15353,7 @@ var PdfDocument = class PdfDocument {
 		if ((options?.addDefaultPage ?? true) && this.getPageCount() === 0) this.addPage();
 		if ((options?.updateFieldAppearances ?? true) && this.form) for (const field of this.form.getFields()) field.generateAppearance();
 		const structure = this.buildStructure();
-		return serializePdf(this.registry, structure, options);
+		return serializePdf(this.registry, structure, options, this.encryptionHandler);
 	}
 	/**
 	* Serialize the document as a `ReadableStream<Uint8Array>`.
@@ -15365,6 +15529,21 @@ var PdfDocument = class PdfDocument {
 					catalogObj.set("/AA", aaDict);
 				}
 			}
+			const pageLabelRanges = getPageLabelEntries(this);
+			if (pageLabelRanges !== void 0 && pageLabelRanges.length > 0) {
+				const numsArray = new PdfArray();
+				for (const range of pageLabelRanges) {
+					numsArray.push(PdfNumber.of(range.startPage));
+					const labelDict = new PdfDict();
+					labelDict.set("/S", PdfName.of(styleToPdf(range.style)));
+					if (range.prefix !== void 0) labelDict.set("/P", PdfString.literal(range.prefix));
+					if (range.start !== void 0) labelDict.set("/St", PdfNumber.of(range.start));
+					numsArray.push(labelDict);
+				}
+				const pageLabelsDict = new PdfDict();
+				pageLabelsDict.set("/Nums", numsArray);
+				catalogObj.set("/PageLabels", pageLabelsDict);
+			}
 		}
 		if (this.originalBytes !== void 0) {
 			const rootRefs = [structure.catalogRef, structure.infoRef];
@@ -15439,5 +15618,5 @@ function createPdf() {
 }
 
 //#endregion
-export { PdfEncryptionHandler as $, parseDerTlv as A, EmbeddedFont as At, isAccessible as B, encodePrintableString as C, isWebP as Ct, encodeUtf8String as D, getSupportedFormats as Dt, encodeUTCTime as E, getImageFormatName as Et, prepareForSigning as F, buildViewerPreferencesDict as G, PdfStructureElement as H, copyPages as I, createXmpStream as J, parseViewerPreferences as K, mergePdfs as L, computeSignatureHash as M, PdfStreamWriter as Mt, embedSignature as N, PdfWriter as Nt, extractIssuerAndSerial as O, isOpenTypeCFF as Ot, findSignatures as P, serializePdf as Pt, loadPdf as Q, splitPdf as R, encodeOctetString as S, decodeWebP as St, encodeSet as T, detectImageFormat as Tt, PdfStructureTree as U, summarizeIssues as V, PdfViewerPreferences as W, PdfOutlineItem as X, parseXmpMetadata as Y, PdfOutlineTree as Z, detectNamedCurve as _, decodeTiffAll as _t, addWatermark as a, sha512 as at, encodeLength as b, isTiff as bt, buildEmbeddedFilesNameTree as c, aesDecryptCBC as ct, verifySignatures as d, md5 as dt, computeFileEncryptionKey as et, getSignatures as f, base64Decode as ft, detectKeyAlgorithm as g, decodeTiff as gt, decodeOidBytes as h, formatHexContext as ht, embedPageAsFormXObject as i, sha384 as it, toBuffer as j, extractMetrics as jt, getSubtle as k, isTrueType as kt, getAttachments as l, aesEncryptCBC as lt, buildPkcs7Signature as m, PdfParseError as mt, StandardFonts as n, verifyUserPassword as nt, addWatermarkToPage as o, decodePermissions as ot, signPdf as p, base64Encode as pt, buildXmpMetadata as q, createPdf as r, sha256 as rt, attachFile as s, encodePermissions as st, PdfDocument as t, verifyOwnerPassword as tt, verifySignature as u, rc4 as ut, encodeContextTag as v, decodeTiffPage as vt, encodeSequence as w, isWebPLossless as wt, encodeOID as x, parseTiffIfd as xt, encodeInteger as y, getTiffPageCount as yt, checkAccessibility as z };
-//# sourceMappingURL=pdfDocument-B0_XwS4X.mjs.map
+export { PdfOutlineItem as $, encodeUtf8String as A, getSupportedFormats as At, mergePdfs as B, encodeLength as C, isTiff as Ct, encodeSequence as D, isWebPLossless as Dt, encodePrintableString as E, isWebP as Et, computeSignatureHash as F, PdfStreamWriter as Ft, PdfStructureElement as G, checkAccessibility as H, embedSignature as I, PdfWriter as It, buildViewerPreferencesDict as J, PdfStructureTree as K, findSignatures as L, serializePdf as Lt, getSubtle as M, isTrueType as Mt, parseDerTlv as N, EmbeddedFont as Nt, encodeSet as O, detectImageFormat as Ot, toBuffer as P, extractMetrics as Pt, parseXmpMetadata as Q, prepareForSigning as R, encodeInteger as S, getTiffPageCount as St, encodeOctetString as T, decodeWebP as Tt, isAccessible as U, splitPdf as V, summarizeIssues as W, buildXmpMetadata as X, parseViewerPreferences as Y, createXmpStream as Z, buildPkcs7Signature as _, PdfParseError as _t, removePageLabels as a, verifyUserPassword as at, detectNamedCurve as b, decodeTiffAll as bt, addWatermark as c, sha512 as ct, buildEmbeddedFilesNameTree as d, aesDecryptCBC as dt, PdfOutlineTree as et, getAttachments as f, aesEncryptCBC as ft, signPdf as g, base64Encode as gt, getSignatures as h, base64Decode as ht, getPageLabels as i, verifyOwnerPassword as it, extractIssuerAndSerial as j, isOpenTypeCFF as jt, encodeUTCTime as k, getImageFormatName as kt, addWatermarkToPage as l, decodePermissions as lt, verifySignatures as m, md5 as mt, StandardFonts as n, PdfEncryptionHandler as nt, setPageLabels as o, sha256 as ot, verifySignature as p, rc4 as pt, PdfViewerPreferences as q, createPdf as r, computeFileEncryptionKey as rt, embedPageAsFormXObject as s, sha384 as st, PdfDocument as t, loadPdf as tt, attachFile as u, encodePermissions as ut, decodeOidBytes as v, formatHexContext as vt, encodeOID as w, parseTiffIfd as wt, encodeContextTag as x, decodeTiffPage as xt, detectKeyAlgorithm as y, decodeTiff as yt, copyPages as z };
+//# sourceMappingURL=pdfDocument-D7aFSQEY.mjs.map