reamkit 1.32.1 → 1.33.1

package/dist/esm/pdf/styled-page-emitter.js

@@ -348,7 +348,7 @@ function assembleStyledPdf(laid, options, doc) {
 	});
 	if (pageRefs.length === 0) {
 		const fallback = sectionCtxs[0] ?? defaultPageCtx();
-		const contentsRef = doc.add(stream({}, new Uint8Array(0)));
+		const contentsRef = doc.add(stream({}, /* @__PURE__ */ new Uint8Array(0)));
 		const fallbackDict = dict({
 			Type: name("Page"),
 			Parent: ref(pagesRef.id),
@@ -372,17 +372,23 @@ function assembleStyledPdf(laid, options, doc) {
 		Type: name("Catalog"),
 		Pages: ref(pagesRef.id)
 	};
-	if (pdfaProfile) catalogEntries["OutputIntents"] = [ref(doc.add(dict({
-		Type: name("OutputIntent"),
-		S: name("GTS_PDFA1"),
-		OutputConditionIdentifier: "sRGB",
-		Info: "sRGB IEC61966-2.1",
-		DestOutputProfile: ref(pdfaIccRef.id)
-	})).id)];
-	if (pdfaProfile || options.pdfUA) catalogEntries["Metadata"] = ref(doc.add(stream({
-		Type: name("Metadata"),
-		Subtype: name("XML")
-	}, buildXmpPacket(xmpFromInfo(docInfo, pdfaProfile, options.pdfUA === true)))).id);
+	if (pdfaProfile) {
+		const outputIntentRef = doc.add(dict({
+			Type: name("OutputIntent"),
+			S: name("GTS_PDFA1"),
+			OutputConditionIdentifier: "sRGB",
+			Info: "sRGB IEC61966-2.1",
+			DestOutputProfile: ref(pdfaIccRef.id)
+		}));
+		catalogEntries["OutputIntents"] = [ref(outputIntentRef.id)];
+	}
+	if (pdfaProfile || options.pdfUA) {
+		const xmpRef = doc.add(stream({
+			Type: name("Metadata"),
+			Subtype: name("XML")
+		}, buildXmpPacket(xmpFromInfo(docInfo, pdfaProfile, options.pdfUA === true))));
+		catalogEntries["Metadata"] = ref(xmpRef.id);
+	}
 	if (tagged && structBuilder) {
 		const structRootRef = structBuilder.emit(doc, pageRefs);
 		catalogEntries["MarkInfo"] = dict({ Marked: true });
@@ -399,7 +405,8 @@ function assembleStyledPdf(laid, options, doc) {
 		const sorted = [...embedded].sort((a, b) => a.file.name < b.file.name ? -1 : a.file.name > b.file.name ? 1 : 0);
 		const names = [];
 		for (const e of sorted) names.push(e.file.name, ref(e.ref.id));
-		namesTreeEntries["EmbeddedFiles"] = ref(doc.add(dict({ Names: names })).id);
+		const embeddedFilesRef = doc.add(dict({ Names: names }));
+		namesTreeEntries["EmbeddedFiles"] = ref(embeddedFilesRef.id);
 	}
 	const bookmarkDests = laid.pdf.bookmarks;
 	const destNames = [...referencedAnchors].filter((n) => bookmarkDests.has(n)).sort((a, b) => a < b ? -1 : a > b ? 1 : 0);
@@ -415,7 +422,8 @@ function assembleStyledPdf(laid, options, doc) {
 				pos.yTopPt
 			]);
 		}
-		namesTreeEntries["Dests"] = ref(doc.add(dict({ Names: names })).id);
+		const destsRef = doc.add(dict({ Names: names }));
+		namesTreeEntries["Dests"] = ref(destsRef.id);
 	}
 	if (Object.keys(namesTreeEntries).length > 0) catalogEntries["Names"] = dict(namesTreeEntries);
 	if (options.signaturePlaceholder && firstPageDict) {
@@ -655,7 +663,7 @@ function emitPageContent(page, tagging, gradientNames, alphaStateNames, duotoneS
 	const commands = page.commands;
 	const links = [];
 	if (commands.length === 0) return {
-		content: new Uint8Array(0),
+		content: /* @__PURE__ */ new Uint8Array(0),
 		links
 	};
 	const H = page.height;

package/dist/esm/pdf/styled-page-renderer.js

@@ -1,6 +1,6 @@
 import { PdfDocument } from "./writer.js";
-import "../layout/page-doc.js";
-import { layoutStyledDocument } from "../layout/styled-layout.js";
+import { pageItemBounds, pageLayers, paintPlan } from "../layout/page-doc.js";
+import { GLUE_SHRINK_RATIO, layoutStyledDocument } from "../layout/styled-layout.js";
 import { emitStyledPdf, emitStyledPdfEncrypted } from "./styled-page-emitter.js";
 //#region src/pdf/styled-page-renderer.ts
 /**
@@ -12,7 +12,9 @@ import { emitStyledPdf, emitStyledPdfEncrypted } from "./styled-page-emitter.js"
 */
 function renderStyledPdf(body, options) {
 	if (options.encrypt) throw new Error("PDF encryption requires the async conversion path (WebCrypto)");
-	return emitStyledPdf(layoutStyledDocument(body, options), options, new PdfDocument());
+	const laid = layoutStyledDocument(body, options);
+	const doc = new PdfDocument();
+	return emitStyledPdf(laid, options, doc);
 }
 /**
 * The encrypting variant of {@link renderStyledPdf} (ISO 32000 §7.6; async
@@ -37,7 +39,9 @@ async function renderStyledPdfEncrypted(body, options) {
 			contentAccessibility: true
 		}
 	} : encrypt;
-	return emitStyledPdfEncrypted(layoutStyledDocument(body, options), options, new PdfDocument(), effective);
+	const laid = layoutStyledDocument(body, options);
+	const doc = new PdfDocument();
+	return emitStyledPdfEncrypted(laid, options, doc, effective);
 }
 //#endregion
-export { renderStyledPdf, renderStyledPdfEncrypted };
+export { GLUE_SHRINK_RATIO, layoutStyledDocument, pageItemBounds, pageLayers, paintPlan, renderStyledPdf, renderStyledPdfEncrypted };

package/dist/esm/pdf-reader/annot-draw.js

@@ -167,7 +167,7 @@ function drawnResources(file, annot) {
 	const subtype = file.get(annot, "Subtype");
 	if (subtype instanceof PdfName && subtype.value === "FreeText") {
 		const text = freeTextContents(file, annot);
-		return text === void 0 ? void 0 : new Map([["Font", new Map([[FREE_TEXT_FONT, spelledFace(text)]])]]);
+		return text === void 0 ? void 0 : /* @__PURE__ */ new Map([["Font", /* @__PURE__ */ new Map([[FREE_TEXT_FONT, spelledFace(text)]])]]);
 	}
 	if (!(subtype instanceof PdfName) || subtype.value !== "Widget") return void 0;
 	const acro = file.get(file.catalog, "AcroForm");
@@ -296,11 +296,11 @@ function spelledFace(text) {
 		const cp = ch.codePointAt(0) ?? 32;
 		differences.push(new PdfName(`uni${cp.toString(16).toUpperCase().padStart(4, "0")}`));
 	}
-	return new Map([
+	return /* @__PURE__ */ new Map([
 		["Type", new PdfName("Font")],
 		["Subtype", new PdfName("Type1")],
 		["BaseFont", new PdfName("Helvetica")],
-		["Encoding", new Map([["Differences", differences]])]
+		["Encoding", /* @__PURE__ */ new Map([["Differences", differences]])]
 	]);
 }
 /** §12.7.4.3 — the field is a multi-line text box (bit 13 of `/Ff`). */

package/dist/esm/pdf-reader/ccitt.js

@@ -164,6 +164,7 @@ function readCode(reader, table) {
 	return -1;
 }
 var BitReader = class {
+	data;
 	bytePos = 0;
 	bitPos = 0;
 	constructor(data) {
@@ -502,4 +503,4 @@ var WHITE = buildRunTable(WHITE_CODES, SHARED_MAKEUP);
 var BLACK = buildRunTable(BLACK_CODES, SHARED_MAKEUP);
 var MODES = new Map(MODE_CODES.map(([bits, m]) => [bits.length << 8 | parseInt(bits, 2), m]));
 //#endregion
-export { decodeCcitt, decodeCcittPlanes };
+export { BLACK_CODES, MODE_CODES, SHARED_MAKEUP, WHITE_CODES, decodeCcitt, decodeCcittPlanes };

package/dist/esm/pdf-reader/cff-outline.js

@@ -1022,9 +1022,7 @@ function runGlyph(font, gid, part = false) {
 					stack.length = 0;
 					break;
 				}
-				default:
-					stack.length = 0;
-					break;
+				default: stack.length = 0;
 			}
 		}
 		return true;
@@ -1118,7 +1116,6 @@ function runEscape(op, stack, trans) {
 			stack.push(b, a);
 			break;
 		}
-		default: break;
 	}
 }
 /**

package/dist/esm/pdf-reader/content.js

@@ -416,11 +416,17 @@ function interpretContent(bytes, fonts, initialCtm = IDENTITY, shadings = /* @__
 		});
 	};
 	const showString = (operand) => {
-		emitAt(multiply(tm, state.ctm), consume(operand), multiply(tm, state.ctm));
+		const origin = multiply(tm, state.ctm);
+		const text = consume(operand);
+		emitAt(origin, text, multiply(tm, state.ctm));
 	};
 	const showArray = (arr) => {
 		for (const el of arr) if (typeof el === "number") tm = multiply(translation(-el / 1e3 * state.fontSize * state.hScale, 0), tm);
-		else if (typeof el === "string" || el instanceof PdfHexString) emitAt(multiply(tm, state.ctm), consume(el), multiply(tm, state.ctm));
+		else if (typeof el === "string" || el instanceof PdfHexString) {
+			const origin = multiply(tm, state.ctm);
+			const text = consume(el);
+			emitAt(origin, text, multiply(tm, state.ctm));
+		}
 	};
 	const exec = (op) => {
 		switch (op) {
@@ -696,10 +702,7 @@ function interpretContent(bytes, fonts, initialCtm = IDENTITY, shadings = /* @__
 				break;
 			}
 			case "W":
-			case "W*":
-				pendingClip = true;
-				break;
-			default: break;
+			case "W*": pendingClip = true;
 		}
 	};
 	for (;;) {
@@ -741,9 +744,7 @@ function interpretContent(bytes, fonts, initialCtm = IDENTITY, shadings = /* @__
 				} else exec(tok.value);
 				operands = [];
 				break;
-			default:
-				operands = [];
-				break;
+			default: operands = [];
 		}
 	}
 	return {
@@ -863,7 +864,7 @@ function toBytes(operand) {
 		for (let i = 0; i < operand.length; i++) out[i] = operand.charCodeAt(i) & 255;
 		return out;
 	}
-	return new Uint8Array(0);
+	return /* @__PURE__ */ new Uint8Array(0);
 }
 function splitCodes(bytes, bytesPerCode) {
 	const out = [];
@@ -897,10 +898,7 @@ function readArray(lexer) {
 			case "dictOpen":
 				out.push(readDict(lexer));
 				break;
-			case "keyword":
-				if (tok.value === "true" || tok.value === "false") out.push(tok.value === "true");
-				break;
-			default: break;
+			case "keyword": if (tok.value === "true" || tok.value === "false") out.push(tok.value === "true");
 		}
 	}
 	return out;
@@ -1048,4 +1046,4 @@ function inlineLength(dict) {
 	return ((w * comps * bpc + 7) / 8 | 0) * h;
 }
 //#endregion
-export { IDENTITY, interpretContent, isRightToLeft, multiply };
+export { IDENTITY, interpretContent, isRightToLeft, multiply, statesACharacter };

package/dist/esm/pdf-reader/decrypt.d.ts

@@ -7,16 +7,28 @@ export interface Decryptor {
      */
     decrypt: (value: PdfValue, objNum: number, gen: number) => PdfValue;
 }
+/**
+ * What {@link buildDecryptor} makes of a file: the decryptor, or why there is
+ * none — the password opens it as neither its user nor its owner, or the file is
+ * locked by a handler this does not implement.
+ */
+export type DecryptorResult = {
+    readonly decryptor: Decryptor;
+} | {
+    readonly refused: 'password' | 'handler';
+};
 /**
  * Build a {@link Decryptor} from the `/Encrypt` dictionary and the file `/ID`
- * (ISO 32000 §7.6.3 / ISO 32000-2 §7.6.4). Derives the file key for the
- * handler's revision — R6/V5 via `/UE` (AES-256), else the legacy MD5 key — and
+ * (ISO 32000 §7.6.3 / ISO 32000-2 §7.6.4). Authenticates the password as the
+ * user's and then as the owner's, derives the file key for the handler's
+ * revision — R6/V5 via `/UE` or `/OE` (AES-256), else the legacy MD5 key — and
  * picks the cipher (RC4, AES-128 `/AESV2`, AES-256 `/AESV3`).
  *
  * @param encrypt  The `/Encrypt` dictionary.
  * @param idArray  The trailer `/ID` array (its first element seeds the legacy key).
- * @param password The user password (EP14); the empty string opens permissions-only encryption.
- * @returns A decryptor, or `undefined` for a non-Standard filter, an unencrypting
- *          crypt filter, or a password that fails key validation.
+ * @param password The password (EP14), the user's or the owner's; the empty
+ *                 string opens permissions-only encryption.
+ * @returns The decryptor, or why there is none: a password the file's own
+ *          verifiers refuse, or a non-Standard filter or unencrypting crypt filter.
  */
-export declare function buildDecryptor(encrypt: PdfDict, idArray: PdfValue | undefined, password?: string): Decryptor | undefined;
+export declare function buildDecryptor(encrypt: PdfDict, idArray: PdfValue | undefined, password?: string): DecryptorResult;

package/dist/esm/pdf-reader/decrypt.js

@@ -41,64 +41,96 @@ var AES_SALT = Uint8Array.from([
 	108,
 	84
 ]);
-var ZERO16 = new Uint8Array(16);
-var EMPTY = new Uint8Array(0);
+var ZERO16 = /* @__PURE__ */ new Uint8Array(16);
+var EMPTY = /* @__PURE__ */ new Uint8Array(0);
 /**
 * Build a {@link Decryptor} from the `/Encrypt` dictionary and the file `/ID`
-* (ISO 32000 §7.6.3 / ISO 32000-2 §7.6.4). Derives the file key for the
-* handler's revision — R6/V5 via `/UE` (AES-256), else the legacy MD5 key — and
+* (ISO 32000 §7.6.3 / ISO 32000-2 §7.6.4). Authenticates the password as the
+* user's and then as the owner's, derives the file key for the handler's
+* revision — R6/V5 via `/UE` or `/OE` (AES-256), else the legacy MD5 key — and
 * picks the cipher (RC4, AES-128 `/AESV2`, AES-256 `/AESV3`).
 *
 * @param encrypt  The `/Encrypt` dictionary.
 * @param idArray  The trailer `/ID` array (its first element seeds the legacy key).
-* @param password The user password (EP14); the empty string opens permissions-only encryption.
-* @returns A decryptor, or `undefined` for a non-Standard filter, an unencrypting
-*          crypt filter, or a password that fails key validation.
+* @param password The password (EP14), the user's or the owner's; the empty
+*                 string opens permissions-only encryption.
+* @returns The decryptor, or why there is none: a password the file's own
+*          verifiers refuse, or a non-Standard filter or unencrypting crypt filter.
 */
 function buildDecryptor(encrypt, idArray, password = "") {
 	const filter = encrypt.get("Filter");
-	if (!(filter instanceof PdfName) || filter.value !== "Standard") return void 0;
+	if (!(filter instanceof PdfName) || filter.value !== "Standard") return { refused: "handler" };
 	const v = numOf(encrypt.get("V"));
 	const r = numOf(encrypt.get("R"));
+	const o = strBytes(encrypt.get("O"));
+	const u = strBytes(encrypt.get("U"));
+	const methods = cryptMethods(encrypt, v, r);
+	if (methods.stream === "none" && methods.string === "none") return { decryptor: { decrypt: (value) => value } };
 	let fileKey;
-	let method;
-	if (r >= 5 || v >= 5) {
-		fileKey = deriveKeyR6(strBytes(encrypt.get("U")), strBytes(encrypt.get("UE")), password);
-		method = "aesv3";
-	} else {
-		const keyLen = (numOf(encrypt.get("Length")) || 40) / 8;
+	if (r >= 5 || v >= 5) fileKey = userKeyR6(u, strBytes(encrypt.get("UE")), password) ?? ownerKeyR6(o, u, strBytes(encrypt.get("OE")), password);
+	else {
+		const keyLen = Math.max(5, Math.min(16, (numOf(encrypt.get("Length")) || 40) / 8));
 		const id0 = Array.isArray(idArray) ? strBytes(idArray[0]) : EMPTY;
-		fileKey = deriveKeyLegacy(strBytes(encrypt.get("O")), numOf(encrypt.get("P")) | 0, id0, r, Math.max(5, Math.min(16, keyLen)), encrypt.get("EncryptMetadata") !== false, password);
-		const m = cipherMethod(encrypt, v);
-		if (m === void 0) return void 0;
-		method = m;
+		const keyFor = (padded) => {
+			const key = deriveKeyLegacy(o, numOf(encrypt.get("P")) | 0, id0, r, keyLen, encrypt.get("EncryptMetadata") !== false, padded);
+			return userKeyMatches(key, r, id0, u) ? key : void 0;
+		};
+		fileKey = keyFor(padPassword(password)) ?? keyFor(userPasswordFromOwner(password, o, r, keyLen));
 	}
-	if (!fileKey) return void 0;
+	if (!fileKey) return { refused: "password" };
 	const key = fileKey;
-	return { decrypt: (value, objNum, gen) => decryptValue(value, objNum, gen, key, method) };
+	return { decryptor: { decrypt: (value, objNum, gen) => decryptValue(value, objNum, gen, key, methods) } };
 }
-function deriveKeyLegacy(o, p, id0, r, keyLen, encryptMetadata, password) {
+function deriveKeyLegacy(o, p, id0, r, keyLen, encryptMetadata, padded) {
 	const tail = r >= 4 && !encryptMetadata ? Uint8Array.from([
 		255,
 		255,
 		255,
 		255
 	]) : EMPTY;
-	let hash = md5(concat(padPassword(password), o.subarray(0, 32), p32le(p), id0, tail));
+	let hash = md5(concat(padded, o.subarray(0, 32), p32le(p), id0, tail));
 	if (r >= 3) for (let i = 0; i < 50; i++) hash = md5(hash.subarray(0, keyLen));
 	return hash.subarray(0, keyLen);
 }
-function deriveKeyR6(u, ue, password) {
+function userKeyMatches(key, r, id0, u) {
+	if (r <= 2) return u.length < 32 || equal(rc4(key, PAD), u.subarray(0, 32));
+	if (u.length < 16) return true;
+	let x = rc4(key, md5(concat(PAD, id0)));
+	for (let i = 1; i <= 19; i++) x = rc4(xorKey(key, i), x);
+	return equal(x, u.subarray(0, 16));
+}
+function userPasswordFromOwner(owner, o, r, keyLen) {
+	let hash = md5(padPassword(owner));
+	if (r >= 3) for (let i = 0; i < 50; i++) hash = md5(hash);
+	const key = hash.subarray(0, r >= 3 ? keyLen : 5);
+	let x = o.subarray(0, 32);
+	if (r <= 2) return rc4(key, x);
+	for (let i = 19; i >= 0; i--) x = rc4(xorKey(key, i), x);
+	return x;
+}
+function xorKey(key, i) {
+	return key.map((b) => b ^ i);
+}
+function userKeyR6(u, ue, password) {
 	if (u.length < 48 || ue.length < 32) return void 0;
 	const pw = passwordBytes(password);
 	const validationSalt = u.subarray(32, 40);
 	const keySalt = u.subarray(40, 48);
 	if (!equal(hash2B(pw, validationSalt, EMPTY), u.subarray(0, 32))) return void 0;
-	return aesCbcDecrypt(hash2B(pw, keySalt, EMPTY), ZERO16, ue.subarray(0, 32), false);
+	const intermediate = hash2B(pw, keySalt, EMPTY);
+	return aesCbcDecrypt(intermediate, ZERO16, ue.subarray(0, 32), false);
+}
+function ownerKeyR6(o, u, oe, password) {
+	if (o.length < 48 || u.length < 48 || oe.length < 32) return void 0;
+	const pw = passwordBytes(password);
+	const udata = u.subarray(0, 48);
+	if (!equal(hash2B(pw, o.subarray(32, 40), udata), o.subarray(0, 32))) return void 0;
+	const intermediate = hash2B(pw, o.subarray(40, 48), udata);
+	return aesCbcDecrypt(intermediate, ZERO16, oe.subarray(0, 32), false);
 }
 function padPassword(password) {
 	const raw = strToBytes(password);
-	const out = new Uint8Array(32);
+	const out = /* @__PURE__ */ new Uint8Array(32);
 	const n = Math.min(raw.length, 32);
 	out.set(raw.subarray(0, n), 0);
 	out.set(PAD.subarray(0, 32 - n), n);
@@ -122,19 +154,31 @@ function hash2B(pw, salt, udata) {
 	}
 	return k.subarray(0, 32);
 }
-function cipherMethod(encrypt, v) {
-	if (v < 4) return "rc4";
-	const stmf = encrypt.get("StmF");
-	const cfName = stmf instanceof PdfName ? stmf.value : "StdCF";
-	if (cfName === "Identity") return void 0;
-	const cf = encrypt.get("CF");
-	const cfDict = cf instanceof Map ? cf.get(cfName) : void 0;
-	const cfm = cfDict instanceof Map ? cfDict.get("CFM") : void 0;
-	if (cfm instanceof PdfName) {
-		if (cfm.value === "AESV2") return "aesv2";
-		if (cfm.value === "AESV3") return "aesv3";
-	}
-	return "rc4";
+function cryptMethods(encrypt, v, r) {
+	if (v < 4) return {
+		stream: "rc4",
+		string: "rc4"
+	};
+	const fallback = r >= 5 || v >= 5 ? "aesv3" : "rc4";
+	const methodOf = (key) => {
+		const named = encrypt.get(key);
+		const cfName = named instanceof PdfName ? named.value : "StdCF";
+		if (cfName === "Identity") return "none";
+		const cf = encrypt.get("CF");
+		const cfDict = cf instanceof Map ? cf.get(cfName) : void 0;
+		const cfm = cfDict instanceof Map ? cfDict.get("CFM") : void 0;
+		if (cfm instanceof PdfName) {
+			if (cfm.value === "AESV2") return "aesv2";
+			if (cfm.value === "AESV3") return "aesv3";
+			if (cfm.value === "V2") return "rc4";
+			if (cfm.value === "None") return "none";
+		}
+		return fallback;
+	};
+	return {
+		stream: methodOf("StmF"),
+		string: methodOf("StrF")
+	};
 }
 function objectKey(fileKey, objNum, gen, aes) {
 	const extra = aes ? AES_SALT : EMPTY;
@@ -149,6 +193,7 @@ function objectKey(fileKey, objNum, gen, aes) {
 	return md5(seed).subarray(0, Math.min(fileKey.length + 5, 16));
 }
 function decryptBytes(data, objNum, gen, fileKey, method) {
+	if (method === "none") return data;
 	if (method === "aesv3") {
 		if (data.length < 16) return data;
 		return aesCbcDecrypt(fileKey, data.subarray(0, 16), data.subarray(16), true);
@@ -160,18 +205,18 @@ function decryptBytes(data, objNum, gen, fileKey, method) {
 	}
 	return rc4(key, data);
 }
-function decryptValue(value, objNum, gen, fileKey, method) {
-	if (typeof value === "string") return latin1(decryptBytes(strToBytes(value), objNum, gen, fileKey, method));
-	if (value instanceof PdfHexString) return new PdfHexString(decryptBytes(value.bytes, objNum, gen, fileKey, method));
+function decryptValue(value, objNum, gen, fileKey, methods) {
+	if (typeof value === "string") return latin1(decryptBytes(strToBytes(value), objNum, gen, fileKey, methods.string));
+	if (value instanceof PdfHexString) return new PdfHexString(decryptBytes(value.bytes, objNum, gen, fileKey, methods.string));
 	if (value instanceof PdfStream) {
-		const dict = decryptValue(value.dict, objNum, gen, fileKey, method);
-		const data = decryptBytes(value.data, objNum, gen, fileKey, method);
+		const dict = decryptValue(value.dict, objNum, gen, fileKey, methods);
+		const data = decryptBytes(value.data, objNum, gen, fileKey, methods.stream);
 		return new PdfStream(dict instanceof Map ? dict : value.dict, data);
 	}
-	if (Array.isArray(value)) return value.map((v) => decryptValue(v, objNum, gen, fileKey, method));
+	if (Array.isArray(value)) return value.map((v) => decryptValue(v, objNum, gen, fileKey, methods));
 	if (value instanceof Map) {
 		const out = /* @__PURE__ */ new Map();
-		for (const [k, v] of value) out.set(k, decryptValue(v, objNum, gen, fileKey, method));
+		for (const [k, v] of value) out.set(k, decryptValue(v, objNum, gen, fileKey, methods));
 		return out;
 	}
 	return value;

package/dist/esm/pdf-reader/document.d.ts

@@ -35,6 +35,7 @@ export declare class PdfFile {
     private readonly cache;
     private readonly objStmCache;
     private decryptor;
+    private refused;
     private encryptObjNum;
     private constructor();
     /**
@@ -71,9 +72,14 @@ export declare class PdfFile {
     get catalog(): PdfDict;
     /**
      * The document is encrypted but no decryptor could be built (an unsupported
-     * handler, or a wrong/missing user password) — its content is unreadable.
+     * handler, or a refused password) — its content is unreadable.
      */
     get encryptionUnsupported(): boolean;
+    /**
+     * §7.6.3.4 — the document is encrypted and the password it was opened with is
+     * neither its user's nor its owner's, by the verifiers the file itself stores.
+     */
+    get passwordRefused(): boolean;
     /** The leaf pages, in document order, each with its inherited `/MediaBox` and `/Resources`. */
     pages(): Array<PdfPage>;
     /**

package/dist/esm/pdf-reader/document.js

@@ -24,9 +24,14 @@ var MAX_OBJSTM_N = 2e5;
 * object scan recovers files whose xref is broken. Construct via {@link PdfFile.parse}.
 */
 var PdfFile = class PdfFile {
+	buf;
+	xref;
+	trailer;
+	filters;
 	cache = /* @__PURE__ */ new Map();
 	objStmCache = /* @__PURE__ */ new Map();
 	decryptor;
+	refused;
 	encryptObjNum = -1;
 	constructor(buf, xref, trailer, filters = {}) {
 		this.buf = buf;
@@ -81,7 +86,9 @@ var PdfFile = class PdfFile {
 		const enc = this.resolve(encVal);
 		if (!(enc instanceof Map)) return;
 		const id = this.trailer.get("ID");
-		this.decryptor = buildDecryptor(enc, Array.isArray(id) ? id : void 0, password);
+		const built = buildDecryptor(enc, Array.isArray(id) ? id : void 0, password);
+		if ("decryptor" in built) this.decryptor = built.decryptor;
+		else this.refused = built.refused;
 	}
 	/** Resolve a stream's `/Length` when it is an indirect reference. */
 	lengthResolver = (r) => {
@@ -143,11 +150,18 @@ var PdfFile = class PdfFile {
 	}
 	/**
 	* The document is encrypted but no decryptor could be built (an unsupported
-	* handler, or a wrong/missing user password) — its content is unreadable.
+	* handler, or a refused password) — its content is unreadable.
 	*/
 	get encryptionUnsupported() {
 		return this.trailer.get("Encrypt") !== void 0 && this.decryptor === void 0;
 	}
+	/**
+	* §7.6.3.4 — the document is encrypted and the password it was opened with is
+	* neither its user's nor its owner's, by the verifiers the file itself stores.
+	*/
+	get passwordRefused() {
+		return this.refused === "password";
+	}
 	/** The leaf pages, in document order, each with its inherited `/MediaBox` and `/Resources`. */
 	pages() {
 		const out = [];
@@ -265,7 +279,7 @@ var GENERAL_FILTERS = {
 	RunLengthDecode: runLengthDecode,
 	RL: runLengthDecode
 };
-var PASSTHROUGH_FILTERS = new Set([
+var PASSTHROUGH_FILTERS = /* @__PURE__ */ new Set([
 	"DCTDecode",
 	"DCT",
 	"JPXDecode",
@@ -401,7 +415,7 @@ function inflateStream(stream, unknown, filters = {}) {
 		if (f.value === "FlateDecode" || f.value === "Fl") try {
 			data = unzlibSync(data);
 		} catch {
-			return new Uint8Array(0);
+			return /* @__PURE__ */ new Uint8Array(0);
 		}
 		else if (!PASSTHROUGH_FILTERS.has(f.value)) {
 			const decoded = runFilter(filters[f.value], data);

package/dist/esm/pdf-reader/encodings.js

@@ -61,7 +61,7 @@ function baseEncodingTable(name) {
 function standardEncodingTable() {
 	return STANDARD;
 }
-var STANDARD_LATIN_FACES = new Set([
+var STANDARD_LATIN_FACES = /* @__PURE__ */ new Set([
 	"courier",
 	"courier-bold",
 	"courier-oblique",

package/dist/esm/pdf-reader/flow-build.js

@@ -538,7 +538,7 @@ function floatOntoSheet(el, sheetWidth) {
 			}
 		};
 	};
-	const quarter = (rotation60k) => ((rotation60k ?? 0) + 90 * 6e4) % (360 * 6e4);
+	const quarter = (rotation60k) => ((rotation60k ?? 0) + 54e5) % 216e5;
 	if (el.kind === "image" && el.image.float) {
 		const float = onto(el.image.float, el.image.width, el.image.height);
 		if (!float) return el;
@@ -605,8 +605,6 @@ var DEEPEST_MARGIN = .5;
 * rest of it.
 */
 var GUESSED_MARGIN = 1 / 3;
-/** The narrowest measure a sheet's own lines may leave, as a share of the sheet. */
-var NARROWEST_MEASURE = .2;
 /**
 * The lines a sheet's runs stand on — baselines further apart than half the
 * size of the type on them — and how many of them END at the sheet's right
@@ -660,7 +658,7 @@ var ASCENDER = BASELINE_AT * NATURAL_LINE_EM;
 * face's descender instead, bug1337429.pdf's last line did not fit the sheet
 * it was drawn on and went to a second one.
 */
-var DESCENDER = (1 - BASELINE_AT) * 1.5;
+var DESCENDER = .29999999999999993;
 /**
 * How small, against the document's own text, type may be set and still be
 * read as text rather than as a mark the producer left on the sheet.
@@ -780,7 +778,7 @@ function withMeasuredMargins(section, shown, pageRuns, pageMarks = [], foot = []
 	const floor = inked.length > 0 ? footTop + textSize * FOOT_CLEAR_EM : Infinity;
 	const left = clamp(Math.min(...lefts), width);
 	const voters = rights.filter((r) => r.full);
-	const farthest = voters.length > 0 && voters.every((r) => r.edged) ? Math.max(width * GUESSED_MARGIN, width * (1 - NARROWEST_MEASURE) - left) : width * GUESSED_MARGIN;
+	const farthest = voters.length > 0 && voters.every((r) => r.edged) ? Math.max(width * GUESSED_MARGIN, width * .8 - left) : width * GUESSED_MARGIN;
 	return {
 		...section,
 		margins: {
@@ -918,4 +916,4 @@ var RECONSTRUCTION_SHEET = {
 	defaultParagraphProperties: { widowControl: false }
 };
 //#endregion
-export { ASCENDER, BASELINE_AT, CARRIER_LINE_PT, GUESSED_MARGIN, NATURAL_LINE_EM, buildFlowDoc, dedupeLosses, figureBlock, floatOntoSheet, imageBlock, imageMember, labelMember, membersBox, paragraphBlock, paragraphFromRuns, positionedText, sectionFromPdfPages, sectionOnSheet, shapeBlock, spaceAfter, textSizeOf, tooSmallToRead, vectorMember, withMeasuredMargins };
+export { ASCENDER, BASELINE_AT, CARRIER_LINE_PT, FLOAT_CARRIER, GUESSED_MARGIN, NATURAL_LINE_EM, buildFlowDoc, dedupeLosses, figureBlock, floatOntoSheet, imageBlock, imageMember, labelMember, membersBox, paragraphBlock, paragraphFromRuns, positionedText, sectionFromPdfPages, sectionOnSheet, shapeBlock, spaceAfter, textSizeOf, tooSmallToRead, typesetRuns, typesetting, vectorMember, withMeasuredMargins };

package/dist/esm/pdf-reader/font.js

@@ -149,7 +149,7 @@ function lettersOf(text) {
 }
 var LIGATURE = /[\uFB00-\uFB06]/u;
 var LIGATURES = /[\uFB00-\uFB06]/gu;
-var LATIN_LIGATURES = new Map([
+var LATIN_LIGATURES = /* @__PURE__ */ new Map([
 	["ff", "ff"],
 	["fi", "fi"],
 	["fl", "fl"],
@@ -231,7 +231,7 @@ function coreGlyphOrder(file, fontDict) {
 	return out;
 }
 /** The core faces whose first glyphs stand in the standard Macintosh order. */
-var CORE_FACES = new Set([
+var CORE_FACES = /* @__PURE__ */ new Set([
 	"arial",
 	"timesnewroman",
 	"couriernew",
@@ -1230,4 +1230,4 @@ function asNumber(v, dflt) {
 	return typeof v === "number" ? v : dflt;
 }
 //#endregion
-export { buildContentFont, collectFaceFamilies };
+export { buildContentFont, collectFaceFamilies, familyOfFace };