modern-pdf-lib 0.40.0 → 0.40.2

package/dist/{src-wZnfMPwi.mjs → src-CGWTHRll.mjs}

@@ -1,7 +1,7 @@
-import { $r as beginText, A as encodeUTCTime, C as encodeInteger, Dn as formatPdfDate, E as encodeOctetString, F as parseDerTlv, Gr as rectangle, Gt as PageSizes, I as toBuffer, Kn as saveState, Kr as setDashPattern, M as extractIssuerAndSerial, N as extractSubjectPublicKeyInfo, O as encodeSequence, P as getSubtle, Qn as applyStrokeColor, Qr as stroke, S as encodeContextTag, T as encodeOID, Tn as buildInfoDict, Un as restoreState, Ur as lineTo, Ut as serializePdf, V as findSignatures, W as mergePdfs, Wr as moveTo, Xr as setLineWidth, Zn as applyFillColor, ai as setFont, b as detectKeyAlgorithm, bt as PdfLexer, cr as rgb, di as setWordSpacing, ei as endText, er as cmykToRgb, fi as showText$1, k as encodeSet, n as StandardFonts, nt as loadPdf, r as createPdf, rt as PdfEncryptionHandler, s as setPageLabels, st as sha256, t as PdfDocument, ti as moveText, vt as XrefParser, x as detectNamedCurve, xn as buildAnnotationDict, xt as PdfParseError, y as decodeOidBytes, yn as PdfAnnotation, yt as PdfObjectParser, z as computeSignatureHash, zr as fill } from "./pdfDocument-Q0wrwKEZ.mjs";
+import { $r as beginText, A as encodeUTCTime, C as encodeInteger, Dn as formatPdfDate, E as encodeOctetString, F as parseDerTlv, Gr as rectangle, Gt as PageSizes, I as toBuffer, Kn as saveState, Kr as setDashPattern, M as extractIssuerAndSerial, N as extractSubjectPublicKeyInfo, O as encodeSequence, P as getSubtle, Qn as applyStrokeColor, Qr as stroke, S as encodeContextTag, T as encodeOID, Tn as buildInfoDict, Un as restoreState, Ur as lineTo, Ut as serializePdf, V as findSignatures, W as mergePdfs, Wr as moveTo, Xr as setLineWidth, Zn as applyFillColor, ai as setFont, b as detectKeyAlgorithm, bt as PdfLexer, cr as rgb, di as setWordSpacing, ei as endText, er as cmykToRgb, fi as showText$1, k as encodeSet, n as StandardFonts, nt as loadPdf, ot as verifyUserPassword, r as createPdf, s as setPageLabels, st as sha256, t as PdfDocument, ti as moveText, vt as XrefParser, x as detectNamedCurve, xn as buildAnnotationDict, xt as PdfParseError, y as decodeOidBytes, yn as PdfAnnotation, yt as PdfObjectParser, z as computeSignatureHash, zr as fill } from "./pdfDocument-CeA1ysxB.mjs";
 import { c as PdfRef, i as PdfName, l as PdfStream, n as PdfBool, o as PdfNumber, r as PdfDict, s as PdfObjectRegistry, t as PdfArray, u as PdfString } from "./pdfObjects-CB7TEdbW.mjs";
 import { n as decodeStreamData, r as getStreamFilters } from "./streamDecode-DCpgTocN.mjs";
-import { g as FieldFlags, v as numVal } from "./pdfForm-CfLnlsj-.mjs";
+import { g as FieldFlags, v as numVal } from "./pdfForm-CMeKBmyB.mjs";
 import { i as parseContentStream, o as extractTextWithPositions } from "./compressionAnalysis-BEd_745I.mjs";
 import { n as decodeJpegWasm } from "./bridge-7dhURZj7.mjs";
 import { r as detectRuntime } from "./loader-DkrXz-h4.mjs";
@@ -277,7 +277,7 @@ function compressStream(stream, level) {
 * @returns              The incremental save result.
 */
 async function saveDocumentIncremental(originalBytes, doc, options) {
-	const { buildDocumentStructure } = await import("./pdfDocument-Q0wrwKEZ.mjs").then((n) => n.On);
+	const { buildDocumentStructure } = await import("./pdfDocument-CeA1ysxB.mjs").then((n) => n.On);
 	const registry = doc.getRegistry();
 	const structure = buildDocumentStructure(doc.getInternalPages().map((p) => p.finalize()), {
 		producer: doc.getProducer(),
@@ -28156,16 +28156,40 @@ const EXECUTABLE_EXTENSIONS = /* @__PURE__ */ new Set([
 	"pl",
 	"php"
 ]);
-/** Read a `PdfName` value (without the leading `/`) from a dict entry. */
-function nameValue$1(obj) {
-	if (obj !== void 0 && obj.kind === "name") {
-		const v = obj.value;
+/**
+* Resolve a {@link PdfObject} that may be an indirect reference to its
+* underlying value using the registry. Non-refs are returned as-is; an
+* unresolvable ref yields `undefined`. (Mirrors `resolve()` in
+* `./sanitize.ts`.)
+*
+* This is security-critical: a hostile PDF can write a dangerous value
+* indirectly — e.g. `/S 99 0 R` where object 99 is the name `/JavaScript` — and
+* a conforming viewer treats that exactly like `/S /JavaScript`. Classifying
+* `/S`, `/Type`, `/Subtype`, `/UF`, `/F`, and `/URI` without resolving the ref
+* first would let that one indirection evade detection entirely.
+*/
+function resolveRef(obj, registry) {
+	if (obj instanceof PdfRef) return registry.resolve(obj);
+	return obj;
+}
+/**
+* Read a `PdfName` value (without the leading `/`) from a dict entry, resolving
+* an indirect reference through the registry first.
+*/
+function nameValue$1(obj, registry) {
+	const resolved = resolveRef(obj, registry);
+	if (resolved !== void 0 && resolved.kind === "name") {
+		const v = resolved.value;
 		return v.startsWith("/") ? v.slice(1) : v;
 	}
 }
-/** Read a `PdfString` value from a dict entry. */
-function stringValue(obj) {
-	if (obj !== void 0 && obj.kind === "string") return obj.value;
+/**
+* Read a `PdfString` value from a dict entry, resolving an indirect reference
+* through the registry first.
+*/
+function stringValue(obj, registry) {
+	const resolved = resolveRef(obj, registry);
+	if (resolved !== void 0 && resolved.kind === "string") return resolved.value;
 }
 /** Format a `PdfRef` as the canonical `"N G R"` string, if available. */
 function refString(ref) {
@@ -28220,7 +28244,7 @@ function scanObjectGraph(registry, findings) {
 		if (obj.kind === "dict") dict = obj;
 		else if (obj.kind === "stream") dict = obj.dict;
 		if (dict === void 0) continue;
-		inspectDict(dict, refStr, findings);
+		inspectDict(dict, refStr, findings, registry);
 	}
 }
 /**
@@ -28229,8 +28253,10 @@ function scanObjectGraph(registry, findings) {
 * @param dict     The dictionary (or stream dictionary).
 * @param refStr   The owning object's `"N G R"` string, if known.
 * @param findings Accumulator.
+* @param registry Object registry, used to resolve indirectly-referenced
+*                 name/string values (e.g. an `/S` that is a `PdfRef`).
 */
-function inspectDict(dict, refStr, findings) {
+function inspectDict(dict, refStr, findings, registry) {
 	if (dict.has("/OpenAction")) findings.push({
 		category: "OpenAction",
 		severity: "medium",
@@ -28249,15 +28275,15 @@ function inspectDict(dict, refStr, findings) {
 		detail: "A /JavaScript name tree (catalog /Names → /JavaScript) is present; these scripts execute automatically on open (ISO 32000 §12.6.4.16, §7.7.4).",
 		objectRef: refStr
 	});
-	const subtype = nameValue$1(dict.get("/S"));
-	if (subtype !== void 0) inspectActionSubtype(subtype, dict, refStr, findings);
+	const subtype = nameValue$1(dict.get("/S"), registry);
+	if (subtype !== void 0) inspectActionSubtype(subtype, dict, refStr, findings, registry);
 	if (dict.has("/XFA")) findings.push({
 		category: "XFA",
 		severity: "low",
 		detail: "Document contains an XFA form (/AcroForm → /XFA, ISO 32000 §12.7.8); XFA carries its own scripting and data-binding model.",
 		objectRef: refStr
 	});
-	const annotSubtype = nameValue$1(dict.get("/Subtype"));
+	const annotSubtype = nameValue$1(dict.get("/Subtype"), registry);
 	if (annotSubtype === "RichMedia") findings.push({
 		category: "RichMedia",
 		severity: "low",
@@ -28294,8 +28320,8 @@ function inspectDict(dict, refStr, findings) {
 		detail: "Object references sound content via a /Sound entry (ISO 32000 §13.3).",
 		objectRef: refStr
 	});
-	if (nameValue$1(dict.get("/Type")) === "Filespec" || dict.has("/EF")) {
-		const fileName = stringValue(dict.get("/UF")) ?? stringValue(dict.get("/F"));
+	if (nameValue$1(dict.get("/Type"), registry) === "Filespec" || dict.has("/EF")) {
+		const fileName = stringValue(dict.get("/UF"), registry) ?? stringValue(dict.get("/F"), registry);
 		if (fileName !== void 0) {
 			const ext = extensionOf(fileName);
 			if (ext !== "" && EXECUTABLE_EXTENSIONS.has(ext)) findings.push({
@@ -28311,7 +28337,7 @@ function inspectDict(dict, refStr, findings) {
 * Flag a dangerous action `/S` subtype. Subtypes are ISO 32000 §12.6.4 /
 * §12.7.5 action types.
 */
-function inspectActionSubtype(subtype, dict, refStr, findings) {
+function inspectActionSubtype(subtype, dict, refStr, findings, registry) {
 	switch (subtype) {
 		case "JavaScript":
 			findings.push({
@@ -28333,7 +28359,7 @@ function inspectActionSubtype(subtype, dict, refStr, findings) {
 			findings.push({
 				category: "URI",
 				severity: "medium",
-				detail: `URI action (/S /URI, ISO 32000 §12.6.4.7) opens a remote URL ${describeUri(dict)}.`,
+				detail: `URI action (/S /URI, ISO 32000 §12.6.4.7) opens a remote URL ${describeUri(dict, registry)}.`,
 				objectRef: refStr
 			});
 			break;
@@ -28381,8 +28407,8 @@ function inspectActionSubtype(subtype, dict, refStr, findings) {
 	}
 }
 /** Append the target URL of a /URI action to the detail string, if present. */
-function describeUri(dict) {
-	const uri = stringValue(dict.get("/URI"));
+function describeUri(dict, registry) {
+	const uri = stringValue(dict.get("/URI"), registry);
 	return uri !== void 0 ? `→ "${uri}"` : "";
 }
 /**
@@ -28882,6 +28908,10 @@ async function verifyRedactions(pdf, regions) {
 	if (regions === void 0 || regions.length === 0) throw new TypeError("verifyRedactions requires an explicit, non-empty `regions` array. Automatic redaction-region detection is not performed: black-filled rectangles are indistinguishable from legitimate graphics, and a loaded page's original /Redact annotations are not exposed through a stable public API. Pass the regions you redacted (PDF points, bottom-left origin, y-up).");
 	const doc = await loadPdf(pdf);
 	const pageCount = doc.getPageCount();
+	for (const region of regions) {
+		const { page } = region;
+		if (!Number.isInteger(page) || page < 0 || page >= pageCount) throw new RangeError(`verifyRedactions: region page index ${page} is out of range. The document has ${pageCount} page(s) (valid indices 0..${pageCount - 1}). Every region must name a real, inspectable page — an out-of-range page cannot be verified and must not be silently reported clean.`);
+	}
 	const itemsByPage = /* @__PURE__ */ new Map();
 	const getItems = (pageIndex) => {
 		const cached = itemsByPage.get(pageIndex);
@@ -29087,21 +29117,41 @@ function decodePermissionBits(p) {
 	};
 }
 /**
-* Test whether the empty user password (`""`) authenticates against the
-* standard security handler.  Reuses {@link PdfEncryptionHandler.fromEncryptDict},
-* which throws when the password is incorrect; a successful return means
-* the empty password derived a valid file key.
+* Test whether the empty **user** password (`""`) authenticates against the
+* standard security handler.
+*
+* This must verify specifically against the `/U` (user) value using the
+* standard /U validation algorithm — **not** simply check whether the empty
+* password opens the document.  The general file-key derivation
+* (`PdfEncryptionHandler.fromEncryptDict` / `computeFileEncryptionKey`)
+* accepts a password that matches **either** the user **or** the owner
+* password, so a document whose *owner* password is empty (while the user
+* password is non-empty) would otherwise be mis-reported as having an empty
+* user password.  To avoid asserting a possibly-false `true`, we run the
+* user-password-specific check ({@link verifyUserPassword}) against `/U`.
 *
-* Returns `undefined` when the test cannot be performed (e.g. the handler
-* implementation does not support the document's /V/R).
+* Returns `undefined` when the test cannot be performed (e.g. the `/O` / `/U`
+* values are missing, or the maths throws for an unsupported /V/R).
 */
 async function testEmptyUserPassword(dict, fileId) {
+	const ownerKey = getStringBytes(dict, "/O");
+	const userKey = getStringBytes(dict, "/U");
+	if (ownerKey === void 0 || userKey === void 0) return void 0;
+	const dictValues = {
+		version: getNumber(dict, "/V") ?? 0,
+		revision: getNumber(dict, "/R") ?? 0,
+		keyLength: getNumber(dict, "/Length") ?? 40,
+		ownerKey,
+		userKey,
+		permissions: getNumber(dict, "/P") ?? 0,
+		ownerEncryptionKey: getStringBytes(dict, "/OE"),
+		userEncryptionKey: getStringBytes(dict, "/UE"),
+		perms: getStringBytes(dict, "/Perms"),
+		encryptMetadata: getBool(dict, "/EncryptMetadata") ?? true
+	};
 	try {
-		await PdfEncryptionHandler.fromEncryptDict(dict, fileId, "");
-		return true;
-	} catch (err) {
-		const message = err instanceof Error ? err.message : String(err);
-		if (/password/i.test(message)) return false;
+		return await verifyUserPassword("", dictValues, fileId);
+	} catch {
 		return;
 	}
 }
@@ -29115,6 +29165,32 @@ function getNumber(dict, key) {
 	const obj = dict.get(key);
 	if (obj !== void 0 && obj.kind === "number") return obj.value;
 }
+/** Read a boolean value from a dict. */
+function getBool(dict, key) {
+	const obj = dict.get(key);
+	if (obj !== void 0 && obj.kind === "bool") return obj.value;
+}
+/**
+* Read raw bytes from a `/String` entry.
+*
+* Hex strings whose value is still raw hex digits (e.g. produced by
+* `PdfString.hexFromBytes`) are decoded from hex pairs; otherwise the
+* character codes are treated as raw Latin-1 bytes.  Mirrors the decoding
+* used by `crypto/encryptionHandler.fromEncryptDict` so the /U validation
+* sees the same /O, /U, /OE, /UE, /Perms bytes.
+*/
+function getStringBytes(dict, key) {
+	const obj = dict.get(key);
+	if (obj === void 0 || obj.kind !== "string") return void 0;
+	const str = obj;
+	if (str.hex && /^[\da-fA-F\s]*$/.test(str.value)) {
+		const clean = str.value.replace(/\s/g, "");
+		return Uint8Array.fromHex(clean.length % 2 === 0 ? clean : clean + "0");
+	}
+	const bytes = new Uint8Array(str.value.length);
+	for (let i = 0; i < str.value.length; i++) bytes[i] = str.value.charCodeAt(i) & 255;
+	return bytes;
+}
 //#endregion
 //#region src/text/bidi.ts
 /** UAX #9 §3.3.2: the maximum explicit embedding depth. */
@@ -29866,24 +29942,16 @@ function resolveImplicit(seq, types, levels) {
 */
 function resetWhitespaceLevels(originalTypes, levels, baseLevel) {
 	const n = levels.length;
-	let resetFrom = n;
-	for (let i = n - 1; i >= 0; i--) {
+	const resettable = (t) => t === "WS" || t === "FSI" || t === "LRI" || t === "RLI" || t === "PDI" || isRemovedByX9(t);
+	let runStart = 0;
+	for (let i = 0; i < n; i++) {
 		const t = originalTypes[i];
 		if (t === "B" || t === "S") {
-			levels[i] = baseLevel;
-			for (let j = i + 1; j < resetFrom; j++) levels[j] = baseLevel;
-			resetFrom = i;
-		} else if (t === "WS" || t === "FSI" || t === "LRI" || t === "RLI" || t === "PDI" || isRemovedByX9(t)) {} else {
-			if (resetFrom === n) {}
-			resetFrom = i + 1 > resetFrom ? resetFrom : i + 1;
-			resetFrom = i + 1;
-		}
-	}
-	for (let i = n - 1; i >= 0; i--) {
-		const t = originalTypes[i];
-		if (t === "WS" || t === "FSI" || t === "LRI" || t === "RLI" || t === "PDI" || isRemovedByX9(t)) levels[i] = baseLevel;
-		else break;
+			for (let j = runStart; j <= i; j++) levels[j] = baseLevel;
+			runStart = i + 1;
+		} else if (resettable(t)) {} else runStart = i + 1;
 	}
+	for (let i = runStart; i < n; i++) levels[i] = baseLevel;
 }
 /** L2: reorder code-unit indices into visual order from the resolved levels. */
 function reorderLevels(levels) {
@@ -31913,11 +31981,15 @@ function boxBlurD(stdDev) {
 	return Math.floor(stdDev * 3 * Math.sqrt(2 * Math.PI) / 4 + .5);
 }
 /**
-* One horizontal box blur of the given (odd) length, premultiplied float
-* data, with an asymmetric left/right radius to support the even-`d` rule.
-* The window covers offsets `[-leftRadius, +rightRadius]` inclusive. Edge
-* samples are clamped (extend-edge) rather than treated as transparent so a
-* flat region stays flat.
+* One horizontal box blur of the given length, premultiplied float data, with
+* an asymmetric left/right radius to support the even-`d` rule. The window
+* covers offsets `[-leftRadius, +rightRadius]` inclusive.
+*
+* Samples that fall outside the filter region are treated as **transparent
+* black** `[0,0,0,0]` (SVG 1.1 §15.17 `edgeMode="none"`, the spec default).
+* In premultiplied space those samples contribute zero to every channel, so
+* the running sum simply skips them (the window length stays the full box
+* size, which is what fades edge pixels per spec).
 */
 function boxBlurH(data, width, height, leftRadius, rightRadius) {
 	const out = new Float32Array(data.length);
@@ -31927,38 +31999,40 @@ function boxBlurH(data, width, height, leftRadius, rightRadius) {
 		for (let c = 0; c < 4; c++) {
 			let sum = 0;
 			for (let k = -leftRadius; k <= rightRadius; k++) {
-				const cx = k < 0 ? 0 : k >= width ? width - 1 : k;
-				sum += data[(row + cx) * 4 + c];
+				if (k < 0 || k >= width) continue;
+				sum += data[(row + k) * 4 + c];
 			}
 			for (let x = 0; x < width; x++) {
 				out[(row + x) * 4 + c] = sum / windowLen;
 				const dropX = x - leftRadius;
 				const addX = x + rightRadius + 1;
-				const dc = dropX < 0 ? 0 : dropX >= width ? width - 1 : dropX;
-				const ac = addX < 0 ? 0 : addX >= width ? width - 1 : addX;
-				sum += data[(row + ac) * 4 + c] - data[(row + dc) * 4 + c];
+				if (addX >= 0 && addX < width) sum += data[(row + addX) * 4 + c];
+				if (dropX >= 0 && dropX < width) sum -= data[(row + dropX) * 4 + c];
 			}
 		}
 	}
 	return out;
 }
-/** One vertical box blur — the transpose of {@link boxBlurH}. */
+/**
+* One vertical box blur — the transpose of {@link boxBlurH}. Out-of-bounds
+* samples are transparent black (SVG 1.1 §15.17 `edgeMode="none"`) and so
+* contribute zero to the running sum.
+*/
 function boxBlurV(data, width, height, topRadius, bottomRadius) {
 	const out = new Float32Array(data.length);
 	const windowLen = topRadius + bottomRadius + 1;
 	for (let x = 0; x < width; x++) for (let c = 0; c < 4; c++) {
 		let sum = 0;
 		for (let k = -topRadius; k <= bottomRadius; k++) {
-			const cy = k < 0 ? 0 : k >= height ? height - 1 : k;
-			sum += data[(cy * width + x) * 4 + c];
+			if (k < 0 || k >= height) continue;
+			sum += data[(k * width + x) * 4 + c];
 		}
 		for (let y = 0; y < height; y++) {
 			out[(y * width + x) * 4 + c] = sum / windowLen;
 			const dropY = y - topRadius;
 			const addY = y + bottomRadius + 1;
-			const dc = dropY < 0 ? 0 : dropY >= height ? height - 1 : dropY;
-			const ac = addY < 0 ? 0 : addY >= height ? height - 1 : addY;
-			sum += data[(ac * width + x) * 4 + c] - data[(dc * width + x) * 4 + c];
+			if (addY >= 0 && addY < height) sum += data[(addY * width + x) * 4 + c];
+			if (dropY >= 0 && dropY < height) sum -= data[(dropY * width + x) * 4 + c];
 		}
 	}
 	return out;
@@ -33449,6 +33523,7 @@ function collectPages(children) {
 */
 async function renderToPdf(root) {
 	let documentEl;
+	const synthesized = [];
 	const stack = resolveNode(root);
 	while (stack.length > 0) {
 		const node = stack.shift();
@@ -33461,13 +33536,13 @@ async function renderToPdf(root) {
 			documentEl = node;
 			break;
 		}
-		documentEl = {
-			type: "document",
-			props: {},
-			children: [node]
-		};
-		break;
+		synthesized.push(node);
 	}
+	if (documentEl === void 0 && synthesized.length > 0) documentEl = {
+		type: "document",
+		props: {},
+		children: synthesized
+	};
 	const doc = createPdf();
 	const ctx = new RenderContext(doc);
 	await ctx.init();
@@ -37243,7 +37318,7 @@ function conformanceString(conformance) {
 function convertPdfAConformanceXmp(xmp, toPart, toConformance) {
 	const partVal = partString(toPart);
 	let result = xmp;
-	const partAttr = /pdfaid:part\s*=\s*"[^"]*"/;
+	const partAttr = /pdfaid:part\s*=\s*(["'])[^"']*\1/;
 	const partElem = /<pdfaid:part>[^<]*<\/pdfaid:part>/;
 	if (partAttr.test(result)) result = result.replace(partAttr, `pdfaid:part="${partVal}"`);
 	else if (partElem.test(result)) result = result.replace(partElem, `<pdfaid:part>${partVal}</pdfaid:part>`);
@@ -37253,7 +37328,7 @@ function convertPdfAConformanceXmp(xmp, toPart, toConformance) {
 	}
 	if (toConformance !== void 0) {
 		const confVal = conformanceString(toConformance);
-		const confAttr = /pdfaid:conformance\s*=\s*"[^"]*"/;
+		const confAttr = /pdfaid:conformance\s*=\s*(["'])[^"']*\1/;
 		const confElem = /<pdfaid:conformance>[^<]*<\/pdfaid:conformance>/;
 		if (confAttr.test(result)) result = result.replace(confAttr, `pdfaid:conformance="${confVal}"`);
 		else if (confElem.test(result)) result = result.replace(confElem, `<pdfaid:conformance>${confVal}</pdfaid:conformance>`);
@@ -37291,7 +37366,7 @@ function injectIdentification(xmp, partVal, toConformance) {
 function addConformanceBesidePart(xmp, confVal) {
 	const partElem = /(<pdfaid:part>[^<]*<\/pdfaid:part>)/;
 	if (partElem.test(xmp)) return xmp.replace(partElem, `$1<pdfaid:conformance>${confVal}</pdfaid:conformance>`);
-	const partAttr = /(pdfaid:part\s*=\s*"[^"]*")/;
+	const partAttr = /(pdfaid:part\s*=\s*(["'])[^"']*\2)/;
 	if (partAttr.test(xmp)) return xmp.replace(partAttr, `$1 pdfaid:conformance="${confVal}"`);
 	return xmp;
 }
@@ -37544,10 +37619,28 @@ function isNonEmptyText(value) {
 function amountsEqual(a, b) {
 	return Math.abs(a - b) <= MONETARY_TOLERANCE;
 }
-/** Sum the line net amounts (Σ quantity × unit price) of an invoice. */
+/**
+* Round a monetary amount to two decimals using half-away-from-zero, the
+* commercial rounding convention EN 16931 applies to BT-* amounts (and the
+* convention the Factur-X generator emits). `Math.round` is half-up toward
+* +∞, which is wrong for negative amounts (e.g. a credit line), so the sign
+* is factored out explicitly.
+*/
+function roundToCents(value) {
+	return Math.sign(value) * Math.round(Math.abs(value) * 100) / 100;
+}
+/**
+* Sum the line net amounts (Σ BT-131) of an invoice.
+*
+* Per EN 16931 each line net amount (BT-131) is rounded to two decimals
+* before the document-level sum (BT-106 / BT-109) is formed. Summing the raw
+* `quantity × unitPrice` products instead would diverge from the spec total
+* for fractional unit prices and could falsely flag (or falsely pass) a
+* borderline BR-CO-10 / BR-CO-13 comparison.
+*/
 function sumLineNet(invoice) {
 	let total = 0;
-	for (const line of invoice.lines) total += line.quantity * line.unitPrice;
+	for (const line of invoice.lines) total += roundToCents(line.quantity * line.unitPrice);
 	return total;
 }
 /**
@@ -37825,15 +37918,15 @@ async function initWasm(options) {
 	if (wasmInitialized) return;
 	const inits = [];
 	if (options.deflate || options.deflateWasm) inits.push((async () => {
-		const { initDeflateWasm } = await import("./pdfDocument-Q0wrwKEZ.mjs").then((n) => n.Wt);
+		const { initDeflateWasm } = await import("./pdfDocument-CeA1ysxB.mjs").then((n) => n.Wt);
 		await initDeflateWasm(options.deflateWasm);
 	})());
 	if (options.png || options.pngWasm) inits.push((async () => {
-		const { initPngWasm } = await import("./pdfDocument-Q0wrwKEZ.mjs").then((n) => n.Ft);
+		const { initPngWasm } = await import("./pdfDocument-CeA1ysxB.mjs").then((n) => n.Ft);
 		await initPngWasm(options.pngWasm);
 	})());
 	if (options.fonts || options.fontWasm) inits.push((async () => {
-		const { initSubsetWasm } = await import("./pdfDocument-Q0wrwKEZ.mjs").then((n) => n.zt);
+		const { initSubsetWasm } = await import("./pdfDocument-CeA1ysxB.mjs").then((n) => n.zt);
 		await initSubsetWasm(options.fontWasm);
 	})());
 	if (options.jpeg || options.jpegWasm) inits.push((async () => {
@@ -37846,4 +37939,4 @@ async function initWasm(options) {
 //#endregion
 export { pdfHeaders as $, buildAfArray as $a, minimalPreset as $i, readWoffHeader as $n, PdfInkAnnotation as $o, buildDPartRoot as $r, resolveBidi as $t, buildSoftMaskNone as A, PdfWorker as Aa, InvalidPageSizeError as Ai, verifySignatureDetailed as An, diffSignedContent as Ao, nameHalftone as Ar, saveIncremental as As, unregisterImageDecoder as At, redactRegions as B, extractJpegMetadata as Ba, formatDate$1 as Bi, setFieldValue as Bn, appendIncrementalUpdate as Bo, buildLab as Br, deviceRgbToXyz as Bt, tagTableHeaderCell as C, code39ToOperators as Ca, ExceededMaxLengthError as Ci, offsetSignedToUnsigned as Cn, findChangedObjects as Co, validateBoxGeometry as Cr, createXmpStream as Cs, feFlood as Ct, buildImageSoftMask as D, encodeCode128 as Da, ForeignPageError as Di, decodeTile as Dn, hasLtvData as Do, buildType1Halftone as Dr, buildSeparationColorSpace as Ds, getImageDecoder as Dt, buildColorKeyMask as E, code128ToOperators as Ea, FontNotEmbeddedError as Ei, assembleTiles as En, embedLtvData as Eo, buildThresholdHalftone as Er, buildDeviceNColorSpace as Es, decodeRegisteredImage as Et, attachAssociatedFiles as F, webpToJpeg as Fa, RichTextFieldReadError as Fi, checkCertificateStatus as Fn, MdpPermission as Fo, reconstructParagraphs as Fr, rgbToHsl as Ft, extractImages as G, optimizeImage as Ga, ellipsisText as Gi, AFDate_FormatEx as Gn, buildTimestampRequest as Go, toSarif as Gr, buildLatticeFormGouraudShading as Gt, compareImages as H, analyzeJpegMarkers as Ha, toAlpha as Hi, setFieldVisibility as Hn, parseExistingTrailer as Ho, DEFAULT_SARIF_TOOL_NAME as Hr, xyzToLab as Ht, registerEmbeddedFile as I, webpToPng as Ia, StreamingParseError as Ii, extractOcspUrl as In, buildDocMdpReference as Io, DEFAULT_DOC_TIMESTAMP_CONTENTS_SIZE as Ir, rgbToHsv as It, renderPageToCanvas as J, enforcePdfAFull as Ja, truncateText as Ji, AFNumber_Format as Jn, searchTextItems as Jo, buildNamespace as Jr, parseColorFont as Jt, generateThumbnail as K, recompressImage as Ka, estimateTextWidth as Ki, formatDate as Kn, parseTimestampResponse as Ko, MATHML_NAMESPACE as Kr, buildTensorPatchShading as Kt, RenderCache as L, convertTiffCmykToRgb as La, UnexpectedFieldTypeError as Li, createSandbox as Ln, getCertificationLevel as Lo, buildDocTimeStampDict as Lr, rgbToLab as Lt, buildUnencryptedWrapper as M, embedTiffDirect as Ma, NoSuchFieldError as Mi, downloadCrl as Mn, buildFieldLockDict as Mo, markdownToPdf as Mr, probeNextGenImage as Mt, attachOutputIntents as N, encodePngFromPixels as Na, PluginError as Ni, extractCrlUrls as Nn, getFieldLocks as No, buildCollection as Nr, hslToRgb as Nt, buildStencilMask as O, encodeCode128Values as Oa, InvalidColorError as Oi, decodeTileRegion as On, addCounterSignature as Oo, buildType5Halftone as Or, ChangeTracker as Os, hasImageDecoder as Ot, buildPageOutputIntent as P, recompressWebP as Pa, RemovePageFromEmptyDocumentError as Pi, isCertificateRevoked as Pn, detectModifications as Po, reconstructLines as Pr, hsvToRgb as Pt, interpretPage as Q, stripProhibitedFeatures as Qa, borderedPreset as Qi, isWoff2 as Qn, PdfRedactAnnotation as Qo, buildRequirements as Qr, reorderVisual as Qt, computeTileGrid as R, embedTiffCmyk as Ra, applyHeaderFooter as Ri, getFieldValue as Rn, setCertificationLevel as Ro, buildCalGray as Rr, rgbToXyz as Rt, tagTableDataCell as S, itfToOperators as Sa, EncryptedPdfError as Si, normalizeComponentDepth as Sn, computeObjectHash as So, buildPdfX6OutputIntent as Sr, buildXmpMetadata as Ss, feComposite as St, buildBlackPointCompensationExtGState as T, encodeCode39 as Ta, FieldExistsAsNonTerminalError as Ti, upscale8To16 as Tn, buildDssDictionary as To, buildSampledTransferFunction as Tr, PDFOperator as Ts, feOffset as Tt, comparePages as U, downscaleImage as Ua, toRoman as Ui, validateFieldValue as Un, saveIncrementalWithSignaturePreservation as Uo, SARIF_SCHEMA_URI as Ur, buildCoonsPatchShading as Ut, applyOcr as V, injectJpegMetadata as Va, replaceTemplateVariables as Vi, addVisibilityAction as Vn, findExistingSignatures as Vo, labToRgb as Vr, parseIccTransform as Vt, extractFonts as W, estimateJpegQuality as Wa, applyOverflow as Wi, AFSpecial_Format as Wn, validateByteRangeIntegrity as Wo, toJsonReport as Wr, buildFreeFormGouraudShading as Wt, renderPageToImage as X, generatePdfAXmpBytes as Xa, applyPreset as Xi, decodeWoff as Xn, PdfCaretAnnotation as Xo, buildPieceInfo as Xr, parseVariableFont as Xt, rasterize as Y, generatePdfAXmp as Ya, wrapText$2 as Yi, formatNumber$1 as Yn, PdfFileAttachmentAnnotation as Yo, buildNamespacesArray as Yr, normalizeAxisCoordinate as Yt, interpretContentStream as Z, countOccurrences as Za, applyTablePreset as Zi, isWoff as Zn, PdfPopupAnnotation as Zo, buildRequirement as Zr, resolveInstanceCoordinates as Zt, tagLink as _, ean13ToOperators as _a, flattenField as _i, buildPdfXOutputIntent as _n, validatePdfA as _o, levenshtein as _r, generateSquigglyAppearance as _s, SharedRingBuffer as _t, assembleFacturX as a, readEan13 as aa, timestampPlugin as ai, extractEmbeddedRevocationData as an, getSupportedLevels as ao, h$1 as ar, PdfSquareAnnotation as as, h as at, tagParagraph as b, encodeEan8 as ba, BatchProcessingError as bi, downscale16To8 as bn, isLinearized as bo, buildBoxDict as br, PdfLinkAnnotation as bs, feColorMatrix as bt, buildWtpdfIdentificationXmp as c, renderStyledBarcode as ca, enforcePdfUa as ci, validateCertificatePolicy as cn, generateWinAnsiToUnicodeCmap as co, resolveFallback as cr, PdfStrikeOutAnnotation as cs, renderToPdf as ct, autoTagPage as d, dataMatrixToOperators as da, batchMerge as di, buildCertificateChain as dn, buildOutputIntent as do, generateXRechnungCii as dr, generateCircleAppearance as ds, isWasmSimdSupported as dt, professionalPreset as ea, extractTables as ei, inspectEncryption as en, createAssociatedFile as eo, signDeferred as er, PdfStampAnnotation as es, pdfResponse as et, buildPdfUa2Xmp as f, encodeDataMatrix as fa, processBatch as fi, validateCertificateChain as fn, SRGB_ICC_PROFILE as fo, buildPdfA4Xmp as fr, generateFreeTextAppearance as fs, MemoryBudget as ft, tagHeading as g, calculateEanCheckDigit as ga, removeBookmark as gi, layoutTextFlow as gn, enforcePdfA as go, didYouMean as gr, generateSquareAppearance as gs, SharedFlag as gt, tagFigure as h, upcAToOperators as ha, removeAllBookmarks as hi, layoutParagraph as hn, flattenTransparency as ho, sampleShadingColor as hr, generateLineAppearance as hs, SharedCounter as ht, validateEn16931 as i, readCode39 as ia, metadataPlugin as ii, buildCertPath as in, getProfile as io, gtsPdfVtVersion as ir, PdfPolygonAnnotation as is, Fragment as it, buildEncryptedPayload as j, canDirectEmbed as ja, MissingOnValueCheckError as ji, TrustStore as jn, addFieldLock as jo, evaluateFunction as jr, detectNextGenFormat as jt, buildSoftMaskGroupExtGState as k, valuesToModules as ka, InvalidFieldNamePartError as ki, parseTileInfo as kn, getCounterSignatures as ko, identityTransferFunction as kr, saveDocumentIncremental as ks, registerImageDecoder as kt, convertPdfAConformanceXmp as l, encodePdf417 as la, validatePdfUa as li, validateExtendedKeyUsage as ln, generateZapfDingbatsToUnicodeCmap as lo, splitByScript as lr, PdfUnderlineAnnotation as ls, SIMD_NOTE as lt, LIST_NUMBERING_KEY as m, encodeUpcA as ma, getBookmarks as mi, layoutColumns as mn, detectTransparency as mo, buildFunctionShading as mr, generateInkAppearance as ms, createMemoryBudget as mt, detectFacturXProfile as n, readBarcode as na, tableToJson as ni, sanitizePdf as nn, parseXmpMetadata as no, buildPdfVtDParts as nr, PdfLineAnnotation as ns, sendPdfToNodeResponse as nt, buildFacturXXmp as o, readEan8 as oa, StreamingPdfParser as oi, verifyOfflineRevocation as on, isValidLevel as oo, renderToPdf$1 as or, PdfHighlightAnnotation as os, jsx as ot, validatePdfUa2 as p, calculateUpcCheckDigit as pa, addBookmark as pi, findHyphenationPoints as pn, generateSrgbIccProfile as po, pdfA4Rules as pr, generateHighlightAppearance as ps, MemoryBudgetExceededError as pt, renderDisplayListToCanvas as q, applyRedaction as qa, shrinkFontSize as qi, parseAcrobatDate as qn, requestTimestamp as qo, PDF2_NAMESPACE as qr, getColorGlyphLayers as qt, parseCiiXml as r, readCode128 as ra, accessibilityPlugin as ri, scanPdfThreats as rn, validateXmpMetadata as ro, buildVtDpm as rr, PdfPolyLineAnnotation as rs, buildFormFromJsonSchema as rt, buildPdfRIdentificationXmp as s, calculateBarcodeDimensions as sa, PdfDocumentBuilder as si, EKU_OIDS as sn, generateSymbolToUnicodeCmap as so, createRangeFetcher as sr, PdfSquigglyAnnotation as ss, jsxs as st, initWasm as t, stripedPreset as ta, tableToCsv as ti, verifyRedactions as tn, extractXmpMetadata as to, createWorkerPool as tr, PdfCircleAnnotation as ts, pdfStreamResponse as tt, preflightPdfA as u, pdf417ToOperators as ua, batchFlatten as ui, validateKeyUsage as un, getToUnicodeCmap as uo, generateOrderX as ur, PdfFreeTextAnnotation as us, detectRuntimeCapabilities as ut, tagList as v, ean8ToOperators as va, flattenFields as vi, enforcePdfX as vn, delinearizePdf as vo, renderCodeFrame as vr, generateStrikeOutAppearance as vs, isSharedMemoryAvailable as vt, tagTableRow as w, computeCode39CheckDigit as wa, FieldAlreadyExistsError as wi, summarizeBitDepth as wn, optimizeIncrementalSave as wo, STANDARD_SPOT_FUNCTIONS as wr, parseXmpMetadata$1 as ws, feGaussianBlur as wt, tagTable as x, encodeItf as xa, CombedTextLayoutError as xi, getComponentDepths as xn, linearizePdf as xo, buildGtsPdfxVersion as xr, PdfTextAnnotation as xs, feColorMatrixSaturate as xt, tagListItem as y, encodeEan13 as ya, flattenForm as yi, validatePdfX as yn, getLinearizationInfo as yo, generateCiiXml as yr, generateUnderlineAppearance as ys, feBlend as yt, renderPageTile as z, isCmykTiff as za, applyHeaderFooterToPage as zi, resolveFieldReference as zn, validateSignatureChain as zo, buildCalRGB as zr, xyzToRgb as zt };
 
-//# sourceMappingURL=src-wZnfMPwi.mjs.map
+//# sourceMappingURL=src-CGWTHRll.mjs.map