mirror of
https://github.com/storytold/pdfcraft.git
synced 2026-10-14 19:27:04 -04:00
306bbcedf9
* M3: harden render and CLI failure surfaces Make content truncation observable, reject unknown CLI options, expose deterministic render work counters, and scope render failures to exact requests. Refuse silently reduced whole-page export rasters while preserving tiled rendering, and add heavy-vector and CLI regression coverage. Co-authored-by: Codex <[email protected]> * Render: remember a failed render by page and kind again A key with scale and tag made every zoom level and tile a new key: a pathological page tied up a worker for the watchdog limit per request (exhausting worker replacements) and was re-parsed each time. The repeated-parsing check asks for a new generation and scale again. * Export: pages too large at the chosen dpi export at the most the renderer allows, and say so #669 made every Exporter refuse oversized whole-page renders, which reached File > Export to image, doc_export_* and OCR: at 600 dpi any page side over 13.65 in (Legal, A3, Tabloid) failed instead of exporting. The exporter clamps again; Exporter::dpi_used reports the resolution a page is drawn at, which the Export dialog's message and doc_export_png's lower_dpi list mention. A source with reject_oversize still refuses (CLI render keeps its strict config). * doc_export_images: describe lower_dpi * Render: ContentTruncated is reported once per page; the hayro-interpret patch is recorded Nested forms, Type 3 glyphs and patterns are interpreted again and each reported the exhausted budget; pdfcraft-render now keeps one. The warning is part of hayro-interpret patch (18) (the page content budget): marked in the code and described in vendor/README.md. * CLI render: print render warnings (skipped content) to stderr * CLI: the option check refuses unknown options only; commands report missing values themselves text's own --page parsing (and its test on main) says what a page value must be; the generic "needs a value" pre-empted it. --------- Co-authored-by: Codex <[email protected]> Co-authored-by: Brandon Thomas <[email protected]>
849 lines
40 KiB
Rust
849 lines
40 KiB
Rust
//! pdfcraft-cli — headless PdfCraft.
|
||
//!
|
||
//! Usage: `pdfcraft-cli --help`, which prints `USAGE` below.
|
||
//!
|
||
//! `run` and `mcp` drive the same tool table (`pdfcraft-automation`). In `run`, values parse as
|
||
//! JSON when they can (`pages=[1,3]`, `degrees=90`) and are strings otherwise. A script runs its
|
||
//! steps in one session, so `doc_open` returns id 1, the next document id 2, and so on. A step's
|
||
//! `"out"` (like `--out`) saves its image there. With `--root DIR`, every path a tool or step
|
||
//! names, `"out"` included, must be inside DIR, and relative paths resolve inside it.
|
||
//!
|
||
//! The MCP server never starts on its own: it runs only when this command is launched (normally
|
||
//! by an agent configured to use it), talks only over stdio, and exits when stdin closes.
|
||
//!
|
||
//! `check` is the robustness harness: every file is opened, inspected and fully rendered in a
|
||
//! *separate child process* with a wall-clock timeout, so hangs, panics and aborts in any
|
||
//! dependency are observed and reported instead of taking the harness down.
|
||
|
||
#![deny(clippy::unwrap_used, clippy::expect_used, clippy::panic, clippy::unimplemented, clippy::todo, clippy::unreachable)]
|
||
|
||
use std::io::Write;
|
||
use std::path::{Path, PathBuf};
|
||
use std::process::{Command, ExitCode, Stdio};
|
||
use std::sync::Arc;
|
||
use std::time::{Duration, Instant};
|
||
|
||
use pdfcraft_engine::export::ImageFormat;
|
||
use pdfcraft_render::{PageRenderer, RenderConfig, RenderRequest, RequestKind, inspect};
|
||
|
||
/// The `mcp` lines of [`USAGE`]: only a build with the `mcp` feature has the command.
|
||
#[cfg(feature = "mcp")]
|
||
macro_rules! mcp_usage {
|
||
() => {
|
||
"\
|
||
pdfcraft-cli mcp [--root DIR] [--compact] MCP server on stdin/stdout (opt-in)
|
||
--compact lists a core set of tools plus tool_search and tool_call
|
||
"
|
||
};
|
||
}
|
||
#[cfg(not(feature = "mcp"))]
|
||
macro_rules! mcp_usage {
|
||
() => {
|
||
""
|
||
};
|
||
}
|
||
|
||
/// The full usage, printed by `--help` (also after a command, e.g. `render --help`).
|
||
const USAGE: &str = concat!(
|
||
"\
|
||
pdfcraft-cli info <file.pdf> [--password PW] document summary as JSON
|
||
pdfcraft-cli render <file.pdf> --page N [--dpi 96] --out x.png (.png, .jpg, .tif or .pam)
|
||
pdfcraft-cli text <file.pdf> [--page N] extracted text (pages separated by form feeds)
|
||
pdfcraft-cli edit <in.pdf> --out out.pdf [--rotate 1,3:90] [--delete 2,4] [--move 5:1]
|
||
[--insert-blank 1] [--title T] [--author A] [--full]
|
||
pdfcraft-cli combine <a.pdf> <b.pdf> … --out combined.pdf
|
||
pdfcraft-cli extract <in.pdf> --pages 1,3,5 --out out.pdf
|
||
pdfcraft-cli split <in.pdf> (--every N | --before 3,7) [--out-dir DIR]
|
||
pdfcraft-cli check <files or dirs…> [--timeout 20] [--dpi 36] [--json out.json]
|
||
pdfcraft-cli tools automation tools and their JSON Schemas
|
||
pdfcraft-cli run <tool> [key=value …] [--root DIR] [--out image.png]
|
||
pdfcraft-cli run --script steps.json [--root DIR] [{\"tool\": \"doc_open\", \"args\": {…}}, …]
|
||
",
|
||
mcp_usage!(),
|
||
"\
|
||
pdfcraft-cli ui --control FILE <method> [key=value …] [--out shot.png]
|
||
drive a running app started with --control FILE
|
||
help and feedback: https://discord.gg/artcraft"
|
||
);
|
||
|
||
fn main() -> ExitCode {
|
||
let args: Vec<String> = std::env::args().skip(1).collect();
|
||
// `<command> --help` too; only right after the command, so a later `-h` (a value) still reaches it.
|
||
let command = match args.get(1).map(String::as_str) {
|
||
Some("--help" | "-h") => Some("--help"),
|
||
_ => args.first().map(String::as_str),
|
||
};
|
||
let result = match command {
|
||
Some("--help" | "-h" | "help") => stdout_line(format_args!("{USAGE}")),
|
||
None => Err(format!("usage:\n{USAGE}").into()),
|
||
Some("info") => info(&args[1..]),
|
||
Some("render") => render(&args[1..]),
|
||
Some("text") => text(&args[1..]),
|
||
Some("edit") => edit(&args[1..]),
|
||
Some("combine") => combine(&args[1..]),
|
||
Some("extract") => extract(&args[1..]),
|
||
Some("split") => split(&args[1..]),
|
||
Some("check") => check(&args[1..]),
|
||
Some("check-one") => check_one(&args[1..]),
|
||
Some("tools") => tools(),
|
||
Some("run") => run(&args[1..]),
|
||
Some("ui") => ui(&args[1..]),
|
||
#[cfg(feature = "mcp")]
|
||
Some("mcp") => mcp(&args[1..]),
|
||
#[cfg(not(feature = "mcp"))]
|
||
Some("mcp") => Err("mcp: this build leaves out the MCP server (built without the `mcp` feature)".into()),
|
||
Some("--version") => version(),
|
||
Some(other) => Err(format!("unknown command '{other}'; see pdfcraft-cli --help").into()),
|
||
};
|
||
match result {
|
||
Ok(()) => ExitCode::SUCCESS,
|
||
Err(CliError::Stdout(e)) if e.kind() == std::io::ErrorKind::BrokenPipe => ExitCode::SUCCESS,
|
||
Err(e) => {
|
||
let _ = writeln!(std::io::stderr().lock(), "pdfcraft-cli: {e}");
|
||
ExitCode::FAILURE
|
||
}
|
||
}
|
||
}
|
||
|
||
// Keep stdout errors typed: a closed pipe is normal, but file and command errors still fail.
|
||
#[derive(Debug)]
|
||
enum CliError {
|
||
Message(String),
|
||
Stdout(std::io::Error),
|
||
}
|
||
|
||
impl From<String> for CliError {
|
||
fn from(message: String) -> Self {
|
||
Self::Message(message)
|
||
}
|
||
}
|
||
|
||
impl From<&str> for CliError {
|
||
fn from(message: &str) -> Self {
|
||
Self::Message(message.to_string())
|
||
}
|
||
}
|
||
|
||
impl std::fmt::Display for CliError {
|
||
fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
|
||
match self {
|
||
Self::Message(message) => f.write_str(message),
|
||
Self::Stdout(error) => write!(f, "stdout: {error}"),
|
||
}
|
||
}
|
||
}
|
||
|
||
fn stdout_line(line: std::fmt::Arguments<'_>) -> Result<(), CliError> {
|
||
let mut stdout = std::io::stdout().lock();
|
||
writeln!(stdout, "{line}").and_then(|()| stdout.flush()).map_err(CliError::Stdout)
|
||
}
|
||
|
||
fn version() -> Result<(), CliError> {
|
||
stdout_line(format_args!("pdfcraft-cli {}", env!("CARGO_PKG_VERSION")))?;
|
||
stdout_line(format_args!("Discord: {} (help and feedback)", pdfcraft_engine::links::DISCORD))?;
|
||
stdout_line(format_args!("Web: {}", pdfcraft_engine::links::APP_PAGE))?;
|
||
stdout_line(format_args!("Source: {}", pdfcraft_engine::links::GITHUB))?;
|
||
Ok(())
|
||
}
|
||
|
||
fn flag<'a>(args: &'a [String], name: &str) -> Option<&'a str> {
|
||
args.iter().position(|a| a == name).and_then(|i| args.get(i + 1)).map(String::as_str)
|
||
}
|
||
|
||
#[derive(Clone, Copy)]
|
||
struct OptionSpec {
|
||
name: &'static str,
|
||
takes_value: bool,
|
||
}
|
||
|
||
/// Refuse a long option `command` doesn't take (a misspelling) before any file is read.
|
||
fn validate_options(command: &str, args: &[String], specs: &[OptionSpec]) -> Result<(), CliError> {
|
||
let mut i = 0;
|
||
while let Some(arg) = args.get(i) {
|
||
if let Some(name) = arg.strip_prefix("--") {
|
||
let Some(spec) = specs.iter().find(|spec| spec.name == arg) else {
|
||
return Err(format!("{command}: unknown option --{name}").into());
|
||
};
|
||
// A missing or malformed value is left to the command, which reports it in its own
|
||
// terms (`text` and `extract` explain what a page value must be).
|
||
i += if spec.takes_value { 2 } else { 1 };
|
||
} else {
|
||
i += 1;
|
||
}
|
||
}
|
||
Ok(())
|
||
}
|
||
|
||
const INFO_OPTIONS: &[OptionSpec] = &[OptionSpec { name: "--password", takes_value: true }];
|
||
const TEXT_OPTIONS: &[OptionSpec] = &[OptionSpec { name: "--page", takes_value: true }, OptionSpec { name: "--password", takes_value: true }];
|
||
const COMBINE_OPTIONS: &[OptionSpec] = &[OptionSpec { name: "--out", takes_value: true }];
|
||
const EXTRACT_OPTIONS: &[OptionSpec] = &[
|
||
OptionSpec { name: "--out", takes_value: true },
|
||
OptionSpec { name: "--pages", takes_value: true },
|
||
OptionSpec { name: "--password", takes_value: true },
|
||
];
|
||
const SPLIT_OPTIONS: &[OptionSpec] = &[
|
||
OptionSpec { name: "--every", takes_value: true },
|
||
OptionSpec { name: "--before", takes_value: true },
|
||
OptionSpec { name: "--out-dir", takes_value: true },
|
||
OptionSpec { name: "--password", takes_value: true },
|
||
];
|
||
const RENDER_OPTIONS: &[OptionSpec] = &[
|
||
OptionSpec { name: "--page", takes_value: true },
|
||
OptionSpec { name: "--dpi", takes_value: true },
|
||
OptionSpec { name: "--out", takes_value: true },
|
||
OptionSpec { name: "--password", takes_value: true },
|
||
];
|
||
const CHECK_ONE_OPTIONS: &[OptionSpec] = &[OptionSpec { name: "--dpi", takes_value: true }, OptionSpec { name: "--edit", takes_value: false }];
|
||
const CHECK_OPTIONS: &[OptionSpec] = &[
|
||
OptionSpec { name: "--timeout", takes_value: true },
|
||
OptionSpec { name: "--dpi", takes_value: true },
|
||
OptionSpec { name: "--json", takes_value: true },
|
||
];
|
||
const RUN_OPTIONS: &[OptionSpec] = &[
|
||
OptionSpec { name: "--root", takes_value: true },
|
||
OptionSpec { name: "--script", takes_value: true },
|
||
OptionSpec { name: "--out", takes_value: true },
|
||
];
|
||
const UI_OPTIONS: &[OptionSpec] = &[OptionSpec { name: "--control", takes_value: true }, OptionSpec { name: "--out", takes_value: true }];
|
||
|
||
#[cfg(feature = "mcp")]
|
||
const MCP_OPTIONS: &[OptionSpec] = &[OptionSpec { name: "--root", takes_value: true }, OptionSpec { name: "--compact", takes_value: false }];
|
||
|
||
fn positional(args: &[String]) -> Vec<&str> {
|
||
let mut out = Vec::new();
|
||
let mut skip = false;
|
||
for a in args {
|
||
if skip {
|
||
skip = false;
|
||
continue;
|
||
}
|
||
if a.starts_with("--") {
|
||
skip = true;
|
||
continue;
|
||
}
|
||
out.push(a.as_str());
|
||
}
|
||
out
|
||
}
|
||
|
||
fn read(path: &str) -> Result<Arc<Vec<u8>>, String> {
|
||
std::fs::read(path).map(Arc::new).map_err(|e| format!("{path}: {e}"))
|
||
}
|
||
|
||
fn info(args: &[String]) -> Result<(), CliError> {
|
||
validate_options("info", args, INFO_OPTIONS)?;
|
||
let path = *positional(args).first().ok_or("info: missing file")?;
|
||
let bytes = read(path)?;
|
||
let password = flag(args, "--password");
|
||
let info = inspect(bytes.clone(), password).map_err(|e| e.to_string())?;
|
||
// Dynamic XFA forms: say what laying the template out gives (what the app shows).
|
||
let xfa_layout = (info.xfa == Some(pdfcraft_render::Xfa::Dynamic))
|
||
.then(|| {
|
||
let mut s = pdfcraft_engine::Session::new();
|
||
let id = s.open("info.pdf", None, bytes.clone(), password).ok()?;
|
||
let d = s.get(id)?;
|
||
d.xfa.as_ref().map(|x| serde_json::json!({ "pages": x.pages, "fields": x.fields, "warnings": x.warnings }))
|
||
})
|
||
.flatten();
|
||
let json = serde_json::json!({
|
||
"file": path,
|
||
"pdf_version": info.pdf_version,
|
||
"file_size": info.file_size,
|
||
"pages": info.pages.len(),
|
||
"first_page_pt": info.pages.first().map(|p| [p.width, p.height]),
|
||
"title": info.title, "author": info.author, "producer": info.producer, "creator": info.creator,
|
||
"encrypted": info.encrypted, "tagged": info.tagged, "javascript": info.has_javascript,
|
||
"xfa": info.xfa.map(|x| match x { pdfcraft_render::Xfa::Static => "static", pdfcraft_render::Xfa::Dynamic => "dynamic" }),
|
||
"xfa_layout": xfa_layout,
|
||
"bookmarks": info.outline.len(), "annotations": info.annotations.len(), "fields": info.fields.len(),
|
||
"links": info.links.len(), "layers": info.layers.len(), "attachments": info.attachments.len(),
|
||
"page_labels": info.pages.iter().take(8).map(|p| p.label.clone()).collect::<Vec<_>>(),
|
||
"warnings": info.warnings,
|
||
});
|
||
stdout_line(format_args!("{}", serde_json::to_string_pretty(&json).unwrap_or_default()))?;
|
||
Ok(())
|
||
}
|
||
|
||
fn text(args: &[String]) -> Result<(), CliError> {
|
||
validate_options("text", args, TEXT_OPTIONS)?;
|
||
let path = *positional(args).first().ok_or("text: missing file")?;
|
||
let mut selected_page = None;
|
||
// Validate every supplied value before reading, retaining the first valid selection.
|
||
let mut options = args.iter();
|
||
while let Some(option) = options.next() {
|
||
if option == "--page" {
|
||
let page = options
|
||
.next()
|
||
.and_then(|value| value.parse::<usize>().ok())
|
||
.filter(|page| *page > 0)
|
||
.ok_or("bad --page: expected a positive page number")?;
|
||
selected_page.get_or_insert(page - 1);
|
||
} else if option.starts_with("--") {
|
||
// Match positional(): an option's operand is not itself another option.
|
||
options.next();
|
||
}
|
||
}
|
||
let password = flag(args, "--password");
|
||
let bytes = read(path)?;
|
||
let mut r = PageRenderer::new(bytes.clone(), RenderConfig { password: password.map(Arc::from), ..Default::default() });
|
||
// A document the renderer could not open (wrong or missing password, unparseable file) has
|
||
// no pages, and "extract every page" of nothing would print nothing and exit 0 (#132). Ask
|
||
// `inspect` why instead, so a protected file fails the same way `info` does.
|
||
if r.page_count() == 0 {
|
||
let info = inspect(bytes, password).map_err(|e| format!("text: {e}"))?;
|
||
if !info.pages.is_empty() {
|
||
return Err("text: the document could not be parsed".into());
|
||
}
|
||
}
|
||
let pages: Vec<usize> = match selected_page {
|
||
Some(page) => vec![page],
|
||
None => (0..r.page_count()).collect(),
|
||
};
|
||
let mut failed: Vec<usize> = Vec::new();
|
||
for (n, p) in pages.iter().enumerate() {
|
||
let out = r.render(RenderRequest { page: *p, kind: RequestKind::Text, tile: None, scale: 1.0, tag: 0 });
|
||
if let Some(e) = out.error {
|
||
let _ = writeln!(std::io::stderr().lock(), "page {}: {e}", p + 1);
|
||
failed.push(p + 1);
|
||
continue;
|
||
}
|
||
if n > 0 {
|
||
stdout_line(format_args!("\u{c}"))?;
|
||
}
|
||
stdout_line(format_args!("{}", out.text.map(|t| t.plain_text()).unwrap_or_default()))?;
|
||
}
|
||
if failed.is_empty() {
|
||
Ok(())
|
||
} else {
|
||
Err(format!("text: page(s) {} could not be read", failed.iter().map(usize::to_string).collect::<Vec<_>>().join(", ")).into())
|
||
}
|
||
}
|
||
|
||
/// 1-based page list ("1,3,5") → 0-based indices.
|
||
fn page_list(s: &str) -> Result<Vec<usize>, String> {
|
||
s.split(',').map(|p| p.trim().parse::<usize>().ok().filter(|n| *n > 0).map(|n| n - 1).ok_or(format!("bad page number {p:?}"))).collect()
|
||
}
|
||
|
||
/// The options `edit` understands, for its "unknown option" message.
|
||
const EDIT_OPTIONS: &str = "--out, --password, --full, --rotate, --delete, --move, --insert-blank, --title, --author";
|
||
|
||
/// Apply page and metadata edits through the engine and save (incrementally unless `--full`).
|
||
///
|
||
/// Every argument is parsed before the file is opened: an option this command does not know
|
||
/// (a typo like `--rotat`) is an error, not something to skip — skipping it would write an
|
||
/// unchanged copy and exit 0, which looks like a successful edit (#133).
|
||
fn edit(args: &[String]) -> Result<(), CliError> {
|
||
use pdfcraft_engine::{Edit, Session};
|
||
let mut path: Option<&str> = None;
|
||
let mut out: Option<&str> = None;
|
||
let mut password: Option<&str> = None;
|
||
let mut full = false;
|
||
let mut edits = Vec::new();
|
||
let mut i = 0;
|
||
while let Some(arg) = args.get(i).map(String::as_str) {
|
||
// Options that take no value, and the input file.
|
||
match arg {
|
||
"--full" => {
|
||
full = true;
|
||
i += 1;
|
||
continue;
|
||
}
|
||
a if a.starts_with("--") => {}
|
||
a => {
|
||
if path.is_some() {
|
||
return Err(format!("edit: unexpected argument {a:?} (one input file, then options)").into());
|
||
}
|
||
path = Some(a);
|
||
i += 1;
|
||
continue;
|
||
}
|
||
}
|
||
let value = args.get(i + 1).map(String::as_str).ok_or_else(|| format!("edit: {arg} needs a value"))?;
|
||
match arg {
|
||
"--out" => out = Some(value),
|
||
"--password" => password = Some(value),
|
||
"--rotate" => {
|
||
let (pages, deg) = value.split_once(':').ok_or("--rotate PAGES:DEGREES")?;
|
||
edits.push(Edit::RotatePages { pages: page_list(pages)?, degrees: deg.parse().map_err(|_| "bad degrees")? });
|
||
}
|
||
"--delete" => edits.push(Edit::DeletePages { pages: page_list(value)? }),
|
||
"--move" => {
|
||
let (pages, to) = value.split_once(':').ok_or("--move PAGES:TO")?;
|
||
let to: usize = to.parse().map_err(|_| "bad target")?;
|
||
edits.push(Edit::MovePages { pages: page_list(pages)?, to: to.checked_sub(1).ok_or("--move target must be at least 1")? });
|
||
}
|
||
"--insert-blank" => {
|
||
let at: usize = value.parse().map_err(|_| "bad position")?;
|
||
edits.push(Edit::InsertBlankPage { at: at.checked_sub(1).ok_or("--insert-blank must be at least 1")?, width: 612.0, height: 792.0 });
|
||
}
|
||
"--title" => edits.push(Edit::SetInfo { key: "Title".into(), value: value.into() }),
|
||
"--author" => edits.push(Edit::SetInfo { key: "Author".into(), value: value.into() }),
|
||
other => return Err(format!("edit: unknown option {other:?} (expected one of: {EDIT_OPTIONS})").into()),
|
||
}
|
||
i += 2;
|
||
}
|
||
let path = path.ok_or("edit: missing file")?;
|
||
let out = out.ok_or("edit: missing --out")?;
|
||
let mut session = Session::new();
|
||
let id = session.open(path, Some(path.to_string()), read(path)?, password).map_err(|e| e.to_string())?;
|
||
for e in edits {
|
||
session.apply(id, e).map_err(|e| e.to_string())?;
|
||
}
|
||
let bytes = if full { session.save_full_bytes(id) } else { session.save_bytes(id) }.map_err(|e| e.to_string())?;
|
||
std::fs::write(out, bytes.as_slice()).map_err(|e| format!("{out}: {e}").into())
|
||
}
|
||
|
||
fn file_stem(path: &str) -> String {
|
||
Path::new(path).file_stem().map(|s| s.to_string_lossy().into_owned()).unwrap_or_else(|| path.to_string())
|
||
}
|
||
|
||
fn combine(args: &[String]) -> Result<(), CliError> {
|
||
validate_options("combine", args, COMBINE_OPTIONS)?;
|
||
let out = flag(args, "--out").ok_or("combine: missing --out")?;
|
||
let inputs = positional(args);
|
||
if inputs.len() < 2 {
|
||
return Err("combine: give at least two input files".into());
|
||
}
|
||
let sources = inputs.iter().map(|p| Ok((file_stem(p), read(p)?))).collect::<Result<Vec<_>, String>>()?;
|
||
let bytes = pdfcraft_engine::Session::new().combine(&sources).map_err(|e| e.to_string())?;
|
||
std::fs::write(out, bytes.as_slice()).map_err(|e| format!("{out}: {e}").into())
|
||
}
|
||
|
||
fn extract(args: &[String]) -> Result<(), CliError> {
|
||
validate_options("extract", args, EXTRACT_OPTIONS)?;
|
||
let path = *positional(args).first().ok_or("extract: missing file")?;
|
||
let out = flag(args, "--out").ok_or("extract: missing --out")?;
|
||
let pages = page_list(flag(args, "--pages").ok_or("extract: missing --pages")?)?;
|
||
let mut session = pdfcraft_engine::Session::new();
|
||
let id = session.open(path, None, read(path)?, flag(args, "--password")).map_err(|e| e.to_string())?;
|
||
let bytes = session.extract(id, &pages).map_err(|e| e.to_string())?;
|
||
std::fs::write(out, bytes.as_slice()).map_err(|e| format!("{out}: {e}").into())
|
||
}
|
||
|
||
fn split(args: &[String]) -> Result<(), CliError> {
|
||
validate_options("split", args, SPLIT_OPTIONS)?;
|
||
use pdfcraft_engine::SplitBy;
|
||
let path = *positional(args).first().ok_or("split: missing file")?;
|
||
let by = match (flag(args, "--every"), flag(args, "--before")) {
|
||
(Some(n), None) => SplitBy::PageCount(n.parse().map_err(|_| "bad --every")?),
|
||
(None, Some(list)) => SplitBy::Before(page_list(list)?),
|
||
_ => return Err("split: give either --every N or --before PAGES".into()),
|
||
};
|
||
let dir = PathBuf::from(flag(args, "--out-dir").unwrap_or("."));
|
||
let mut session = pdfcraft_engine::Session::new();
|
||
let id = session.open(path, None, read(path)?, flag(args, "--password")).map_err(|e| e.to_string())?;
|
||
let stem = file_stem(path);
|
||
let parts = session.split(id, &by).map_err(|e| e.to_string())?;
|
||
// An output folder that does not exist yet is created (#249); one that can't be is reported
|
||
// as the folder's problem, not as the first part's.
|
||
std::fs::create_dir_all(&dir).map_err(|e| format!("split: --out-dir {}: {e}", dir.display()))?;
|
||
for (a, b, bytes) in parts {
|
||
let name = dir.join(if a == b { format!("{stem}-p{a}.pdf") } else { format!("{stem}-p{a}-{b}.pdf") });
|
||
std::fs::write(&name, bytes.as_slice()).map_err(|e| format!("{}: {e}", name.display()))?;
|
||
stdout_line(format_args!("{}", name.display()))?;
|
||
}
|
||
Ok(())
|
||
}
|
||
|
||
fn render(args: &[String]) -> Result<(), CliError> {
|
||
validate_options("render", args, RENDER_OPTIONS)?;
|
||
let path = *positional(args).first().ok_or("render: missing file")?;
|
||
let page: usize = flag(args, "--page").unwrap_or("1").parse().map_err(|_| "bad --page")?;
|
||
let page_index = page.checked_sub(1).ok_or("--page must be at least 1")?;
|
||
let dpi: f32 = flag(args, "--dpi").unwrap_or("96").parse().map_err(|_| "bad --dpi")?;
|
||
let out = flag(args, "--out").ok_or("render: missing --out (.png, .jpg, .tif or .pam)")?;
|
||
// The file is what its name says (#248): a `.png` used to get a netpbm PAM stream.
|
||
let format = match Path::new(out).extension().and_then(|e| e.to_str()).map(str::to_ascii_lowercase).as_deref() {
|
||
Some("png") => Some(ImageFormat::Png),
|
||
Some("jpg" | "jpeg") => Some(ImageFormat::Jpeg { quality: 90 }),
|
||
Some("tif" | "tiff") => Some(ImageFormat::Tiff),
|
||
Some("pam") => None,
|
||
_ => return Err(format!("render: --out {out}: use a .png, .jpg, .tif or .pam name").into()),
|
||
};
|
||
let mut r = PageRenderer::new(
|
||
read(path)?,
|
||
RenderConfig { password: flag(args, "--password").map(Arc::from), reject_oversize: true, ..Default::default() },
|
||
);
|
||
let p = r.render(RenderRequest { page: page_index, kind: RequestKind::Pixels, tile: None, scale: dpi / 72.0, tag: 0 });
|
||
if let Some(e) = p.error {
|
||
return Err(e.into());
|
||
}
|
||
let bytes = match format {
|
||
Some(f) => pdfcraft_engine::export::encode_image(p.width, p.height, &p.rgba, f)?,
|
||
None => {
|
||
// PAM (netpbm RGB_ALPHA): the raw premultiplied pixels, for tools that read it.
|
||
let mut pam = format!("P7\nWIDTH {}\nHEIGHT {}\nDEPTH 4\nMAXVAL 255\nTUPLTYPE RGB_ALPHA\nENDHDR\n", p.width, p.height).into_bytes();
|
||
pam.extend_from_slice(&p.rgba);
|
||
pam
|
||
}
|
||
};
|
||
std::fs::write(out, bytes).map_err(|e| format!("{out}: {e}"))?;
|
||
let _ = writeln!(std::io::stderr().lock(), "rendered page {page} at {dpi} dpi: {}×{} px in {} ms", p.width, p.height, p.millis);
|
||
for warning in &p.warnings {
|
||
match warning {
|
||
pdfcraft_render::RenderWarning::ContentTruncated => {
|
||
let _ = writeln!(std::io::stderr().lock(), "warning: page {page}: content past the page's safety budget was skipped");
|
||
}
|
||
}
|
||
}
|
||
Ok(())
|
||
}
|
||
|
||
/// Child-process body for `check`: prints one JSON line.
|
||
fn check_one(args: &[String]) -> Result<(), CliError> {
|
||
validate_options("check-one", args, CHECK_ONE_OPTIONS)?;
|
||
let path = *positional(args).first().ok_or("check-one: missing file")?;
|
||
let dpi: f32 = flag(args, "--dpi").unwrap_or("36").parse().map_err(|_| "bad --dpi")?;
|
||
let start = Instant::now();
|
||
let bytes = read(path)?;
|
||
let (status, pages, failed, detail, warnings) = match inspect(bytes.clone(), None) {
|
||
Err(e) => (format!("open-error:{}", short(&e.to_string())), 0, 0, e.to_string(), 0),
|
||
Ok(info) => {
|
||
let mut r = PageRenderer::new(bytes, RenderConfig::default());
|
||
let mut failed = Vec::new();
|
||
for i in 0..info.pages.len().min(500) {
|
||
let p = r.render(RenderRequest { page: i, kind: RequestKind::Pixels, tile: None, scale: dpi / 72.0, tag: 0 });
|
||
if let Some(e) = r.render(RenderRequest { page: i, kind: RequestKind::Text, tile: None, scale: 1.0, tag: 0 }).error {
|
||
failed.push(format!("p{} text: {e}", i + 1));
|
||
}
|
||
if let Some(e) = p.error {
|
||
failed.push(format!("p{}: {e}", i + 1));
|
||
}
|
||
}
|
||
let status = if failed.is_empty() { "ok".to_string() } else { "page-errors".to_string() };
|
||
(status, info.pages.len(), failed.len(), failed.join(" | "), info.warnings.len())
|
||
}
|
||
};
|
||
// `--edit` (fuzzing): also run our own object layer end to end, with no panic safety net,
|
||
// so a panic in cos shows up as a crash of this process.
|
||
if args.iter().any(|a| a == "--edit") {
|
||
edit_round_trip(&std::fs::read(path).map_err(|e| e.to_string())?);
|
||
}
|
||
let line = serde_json::json!({ "file": path, "status": status, "pages": pages, "failed_pages": failed, "warnings": warnings,
|
||
"ms": start.elapsed().as_millis() as u64, "detail": detail.chars().take(400).collect::<String>() });
|
||
stdout_line(format_args!("{line}"))?;
|
||
Ok(())
|
||
}
|
||
|
||
/// Open with cos, touch every object, edit the catalog, save incrementally and in full (both
|
||
/// output styles), and reopen each result. Errors are fine; panics, hangs and aborts are bugs.
|
||
fn edit_round_trip(bytes: &[u8]) {
|
||
use pdfcraft_cos::{Document, Object, SaveOptions, write_full, write_incremental};
|
||
let Ok(mut doc) = Document::open(Arc::new(bytes.to_vec())) else { return };
|
||
for num in doc.object_numbers().into_iter().take(20_000) {
|
||
if let Ok(o) = doc.try_get(num)
|
||
&& let Object::Stream(s) = &*o
|
||
{
|
||
let _ = s.decoded();
|
||
}
|
||
}
|
||
if let Some(root) = doc.root() {
|
||
let _ = doc.update_dict(root, |d| d.set(b"PdfCraftFuzz".to_vec(), Object::Bool(true)));
|
||
}
|
||
let classic = SaveOptions { object_streams: false, ..SaveOptions::default() };
|
||
for out in [write_incremental(&doc, &SaveOptions::default()), write_full(&doc, &SaveOptions::default()), write_full(&doc, &classic)]
|
||
.into_iter()
|
||
.flatten()
|
||
{
|
||
if let Ok(again) = Document::open(Arc::new(out)) {
|
||
let _ = again.root().map(|r| again.get(r));
|
||
}
|
||
}
|
||
}
|
||
|
||
fn short(s: &str) -> String {
|
||
s.split(|c: char| !c.is_alphanumeric()).filter(|w| !w.is_empty()).take(4).collect::<Vec<_>>().join("-").to_lowercase()
|
||
}
|
||
|
||
fn collect(paths: &[&str]) -> Vec<PathBuf> {
|
||
let mut out = Vec::new();
|
||
let mut stack: Vec<PathBuf> = paths.iter().map(PathBuf::from).collect();
|
||
while let Some(p) = stack.pop() {
|
||
if p.is_dir() {
|
||
if let Ok(rd) = std::fs::read_dir(&p) {
|
||
stack.extend(rd.flatten().map(|e| e.path()));
|
||
}
|
||
} else if p.extension().and_then(|e| e.to_str()).is_some_and(|e| e.eq_ignore_ascii_case("pdf")) {
|
||
out.push(p);
|
||
}
|
||
}
|
||
out.sort();
|
||
out
|
||
}
|
||
|
||
fn check(args: &[String]) -> Result<(), CliError> {
|
||
validate_options("check", args, CHECK_OPTIONS)?;
|
||
let files = collect(&positional(args));
|
||
if files.is_empty() {
|
||
return Err("check: no PDF files found".into());
|
||
}
|
||
let timeout = Duration::from_secs(flag(args, "--timeout").unwrap_or("20").parse().map_err(|_| "bad --timeout")?);
|
||
let dpi = flag(args, "--dpi").unwrap_or("36").to_string();
|
||
let exe = std::env::current_exe().map_err(|e| e.to_string())?;
|
||
let mut results = Vec::new();
|
||
let mut counts: std::collections::BTreeMap<String, usize> = Default::default();
|
||
for (n, f) in files.iter().enumerate() {
|
||
let r = run_child(&exe, f, &dpi, timeout);
|
||
let status = r["status"].as_str().unwrap_or("?").to_string();
|
||
*counts.entry(status.split(':').next().unwrap_or("?").to_string()).or_default() += 1;
|
||
if status != "ok" {
|
||
eprintln!(
|
||
"[{}/{}] {status:<28} {} {}",
|
||
n + 1,
|
||
files.len(),
|
||
f.display(),
|
||
r["detail"].as_str().unwrap_or("").chars().take(160).collect::<String>()
|
||
);
|
||
}
|
||
results.push(r);
|
||
}
|
||
eprintln!("\nchecked {} files: {:?}", files.len(), counts);
|
||
if let Some(out) = flag(args, "--json") {
|
||
std::fs::write(out, serde_json::to_string_pretty(&results).unwrap_or_default()).map_err(|e| e.to_string())?;
|
||
}
|
||
Ok(())
|
||
}
|
||
|
||
fn run_child(exe: &Path, file: &Path, dpi: &str, timeout: Duration) -> serde_json::Value {
|
||
let file_s = file.to_string_lossy().to_string();
|
||
let child = Command::new(exe).args(["check-one", &file_s, "--dpi", dpi]).stdout(Stdio::piped()).stderr(Stdio::null()).spawn();
|
||
let mut child = match child {
|
||
Ok(c) => c,
|
||
Err(e) => return serde_json::json!({ "file": file_s, "status": "harness-error", "detail": e.to_string() }),
|
||
};
|
||
let start = Instant::now();
|
||
loop {
|
||
match child.try_wait() {
|
||
Ok(Some(status)) => {
|
||
let mut out = String::new();
|
||
if let Some(mut so) = child.stdout.take() {
|
||
use std::io::Read;
|
||
let _ = so.read_to_string(&mut out);
|
||
}
|
||
return match serde_json::from_str::<serde_json::Value>(out.trim()) {
|
||
Ok(v) => v,
|
||
Err(_) => serde_json::json!({ "file": file_s, "status": "crash", "detail": format!("child exited with {status}") }),
|
||
};
|
||
}
|
||
Ok(None) if start.elapsed() > timeout => {
|
||
let _ = child.kill();
|
||
let _ = child.wait();
|
||
return serde_json::json!({ "file": file_s, "status": "timeout", "detail": format!("exceeded {}s", timeout.as_secs()) });
|
||
}
|
||
Ok(None) => std::thread::sleep(Duration::from_millis(20)),
|
||
Err(e) => return serde_json::json!({ "file": file_s, "status": "harness-error", "detail": e.to_string() }),
|
||
}
|
||
}
|
||
}
|
||
|
||
// ---- automation --------------------------------------------------------------------------------
|
||
|
||
fn automation(args: &[String]) -> Result<pdfcraft_automation::Automation, String> {
|
||
let a = pdfcraft_automation::Automation::new();
|
||
match flag(args, "--root") {
|
||
Some(root) => a.with_root(root).map_err(|e| format!("--root {root}: {e}")),
|
||
None => Ok(a),
|
||
}
|
||
}
|
||
|
||
fn tools() -> Result<(), CliError> {
|
||
let list: Vec<serde_json::Value> = pdfcraft_automation::tools()
|
||
.iter()
|
||
.map(|t| serde_json::json!({ "name": t.name, "description": t.description, "read_only": t.read_only, "command": t.command, "input_schema": t.input_schema }))
|
||
.collect();
|
||
stdout_line(format_args!("{}", serde_json::to_string_pretty(&list).unwrap_or_default()))?;
|
||
Ok(())
|
||
}
|
||
|
||
/// Print a tool's result: JSON as JSON; images go to `--out` (or are summarised). The image is
|
||
/// written like a tool's own output, so `--root` confines it too.
|
||
fn print_output(auto: &pdfcraft_automation::Automation, content: Vec<pdfcraft_automation::Content>, out: Option<&str>) -> Result<(), CliError> {
|
||
for c in content {
|
||
match c {
|
||
pdfcraft_automation::Content::Json(v) => stdout_line(format_args!("{}", serde_json::to_string_pretty(&v).unwrap_or_default()))?,
|
||
pdfcraft_automation::Content::Png { data, width, height } => match out {
|
||
Some(path) => {
|
||
let written = auto.write_output(path, &data).map_err(|e| e.to_string())?;
|
||
stdout_line(format_args!("{}", serde_json::json!({ "image": written.to_string_lossy(), "width": width, "height": height })))?;
|
||
}
|
||
None => stdout_line(format_args!(
|
||
"{}",
|
||
serde_json::json!({ "image": "png", "width": width, "height": height, "bytes": data.len(), "hint": "pass --out file.png to save it" })
|
||
))?,
|
||
},
|
||
}
|
||
}
|
||
Ok(())
|
||
}
|
||
|
||
fn run(args: &[String]) -> Result<(), CliError> {
|
||
validate_options("run", args, RUN_OPTIONS)?;
|
||
let mut auto = automation(args)?;
|
||
if let Some(script) = flag(args, "--script") {
|
||
let text = std::fs::read_to_string(script).map_err(|e| format!("{script}: {e}"))?;
|
||
let steps: Vec<serde_json::Value> = serde_json::from_str(&text).map_err(|e| format!("{script}: {e}"))?;
|
||
for (i, step) in steps.iter().enumerate() {
|
||
let tool = step["tool"].as_str().ok_or(format!("step {}: missing \"tool\"", i + 1))?;
|
||
let content = auto.call(tool, &step["args"]).map_err(|e| format!("step {} ({tool}): {e}", i + 1))?;
|
||
print_output(&auto, content, step["out"].as_str()).map_err(|e| match e {
|
||
CliError::Message(message) => CliError::Message(format!("step {} ({tool}): {message}", i + 1)),
|
||
stdout => stdout,
|
||
})?;
|
||
}
|
||
return Ok(());
|
||
}
|
||
let tool = *positional(args).first().ok_or("run: missing tool name (see `pdfcraft-cli tools`)")?;
|
||
let mut obj = serde_json::Map::new();
|
||
for kv in positional(args).iter().skip(1) {
|
||
let (k, v) = kv.split_once('=').ok_or(format!("run: expected key=value, got {kv:?}"))?;
|
||
let value = serde_json::from_str(v).unwrap_or_else(|_| serde_json::Value::String(v.to_string()));
|
||
obj.insert(k.to_string(), value);
|
||
}
|
||
let content = auto.call(tool, &serde_json::Value::Object(obj)).map_err(|e| e.to_string())?;
|
||
print_output(&auto, content, flag(args, "--out"))
|
||
}
|
||
|
||
#[cfg(feature = "mcp")]
|
||
fn mcp(args: &[String]) -> Result<(), CliError> {
|
||
validate_options("mcp", args, MCP_OPTIONS)?;
|
||
let compact = args.iter().any(|a| a == "--compact");
|
||
let mut server = pdfcraft_automation::mcp::McpServer::new(automation(args)?).with_compact(compact);
|
||
let _ = writeln!(
|
||
std::io::stderr().lock(),
|
||
"pdfcraft-cli: MCP server on stdio (protocol {}{}); close stdin to stop",
|
||
pdfcraft_automation::mcp::PROTOCOL_VERSIONS[0],
|
||
if compact { ", compact tool list" } else { "" }
|
||
);
|
||
server.serve(std::io::stdin().lock(), std::io::stdout().lock()).map_err(|e| CliError::Message(e.to_string()))
|
||
}
|
||
|
||
// ---- UI control channel client -----------------------------------------------------------------
|
||
|
||
/// One request to a running app's control channel (`pdfcraft --control FILE`).
|
||
fn ui(args: &[String]) -> Result<(), CliError> {
|
||
validate_options("ui", args, UI_OPTIONS)?;
|
||
use std::io::{BufRead, BufReader, Write as _};
|
||
let file = flag(args, "--control").ok_or("ui: missing --control FILE (start the app with `pdfcraft --control FILE`)")?;
|
||
let info = read_control_file(file)?;
|
||
let port = info["port"].as_u64().ok_or(format!("{file}: no port"))?;
|
||
// Refused rather than truncated, which would quietly reach some other port.
|
||
let port = u16::try_from(port).map_err(|_| format!("{file}: {port} is not a port number"))?;
|
||
let token = info["token"].as_str().ok_or(format!("{file}: no token"))?;
|
||
let pos = positional(args);
|
||
let method = *pos.first().ok_or("ui: missing method (state, inspect, click, drag, type, key, command, commands, set, open, screenshot)")?;
|
||
let method = if method.starts_with("ui.") { method.to_string() } else { format!("ui.{method}") };
|
||
let mut params = serde_json::Map::new();
|
||
for kv in pos.iter().skip(1) {
|
||
let (k, v) = kv.split_once('=').ok_or(format!("ui: expected key=value, got {kv:?}"))?;
|
||
params.insert(k.to_string(), serde_json::from_str(v).unwrap_or_else(|_| serde_json::Value::String(v.to_string())));
|
||
}
|
||
let stream =
|
||
std::net::TcpStream::connect(("127.0.0.1", port)).map_err(|e| format!("can't reach the app on port {port}: {e} (is it still running?)"))?;
|
||
stream.set_read_timeout(Some(Duration::from_secs(40))).map_err(|e| e.to_string())?;
|
||
let mut write = stream.try_clone().map_err(|e| e.to_string())?;
|
||
let mut lines = BufReader::new(stream).lines();
|
||
let mut rpc = |id: u64, method: &str, params: serde_json::Value| -> Result<serde_json::Value, String> {
|
||
writeln!(write, "{}", serde_json::json!({ "jsonrpc": "2.0", "id": id, "method": method, "params": params })).map_err(|e| e.to_string())?;
|
||
let line = lines.next().ok_or("the app closed the connection")?.map_err(|e| e.to_string())?;
|
||
let reply: serde_json::Value = serde_json::from_str(&line).map_err(|e| e.to_string())?;
|
||
match reply.get("error") {
|
||
Some(e) => Err(e["message"].as_str().unwrap_or("error").to_string()),
|
||
None => Ok(reply["result"].clone()),
|
||
}
|
||
};
|
||
rpc(1, "auth", serde_json::json!({ "token": token }))?;
|
||
let mut result = rpc(2, &method, serde_json::Value::Object(params))?;
|
||
if let (Some(out), Some(data)) = (flag(args, "--out"), result.get("png_base64").and_then(|d| d.as_str())) {
|
||
use base64::Engine as _;
|
||
let png = base64::engine::general_purpose::STANDARD.decode(data).map_err(|e| e.to_string())?;
|
||
std::fs::write(out, png).map_err(|e| format!("{out}: {e}"))?;
|
||
result["png_base64"] = serde_json::json!(format!("written to {out}"));
|
||
}
|
||
stdout_line(format_args!("{}", serde_json::to_string_pretty(&result).unwrap_or_default()))?;
|
||
Ok(())
|
||
}
|
||
|
||
/// Most a control file may hold. The app writes under 100 bytes.
|
||
const CONTROL_FILE_MAX: u64 = 64 * 1024;
|
||
|
||
const CONTROL_FILE_ADVICE: &str =
|
||
"Start the app with a control file in a folder only you can write, such as `pdfcraft --control ~/.pdfcraft-control.json`";
|
||
|
||
/// Read the file written by `pdfcraft --control FILE`.
|
||
///
|
||
/// It names the port that receives the token and every command, typed text included, so it must
|
||
/// be the user's own. In a shared folder such as `/tmp`, another local user can create the file
|
||
/// first; the app then can't write it, and the CLI would talk to the other user's listener.
|
||
/// Refused: a symbolic link, anything but a regular file, and on Unix a file owned by someone
|
||
/// else or open to other users (the app writes it with mode 600).
|
||
fn read_control_file(file: &str) -> Result<serde_json::Value, String> {
|
||
use std::io::Read as _;
|
||
let at_path = std::fs::symlink_metadata(file).map_err(|e| format!("{file}: {e}"))?;
|
||
if at_path.file_type().is_symlink() {
|
||
return Err(format!("{file}: is a symbolic link, which could point at another user's file. {CONTROL_FILE_ADVICE}"));
|
||
}
|
||
if !at_path.is_file() {
|
||
return Err(format!("{file}: not a regular file. {CONTROL_FILE_ADVICE}"));
|
||
}
|
||
let f = std::fs::File::open(file).map_err(|e| format!("{file}: {e}"))?;
|
||
#[cfg(unix)]
|
||
{
|
||
use std::os::unix::fs::MetadataExt;
|
||
// Checked on the open file, so nothing swapped in after `symlink_metadata` gets through.
|
||
let opened = f.metadata().map_err(|e| format!("{file}: {e}"))?;
|
||
if (opened.dev(), opened.ino()) != (at_path.dev(), at_path.ino()) {
|
||
return Err(format!("{file}: was replaced while being opened. {CONTROL_FILE_ADVICE}"));
|
||
}
|
||
if let Some(problem) = control_file_problem(opened.uid(), opened.mode(), current_uid()) {
|
||
return Err(format!("{file}: {problem}. {CONTROL_FILE_ADVICE}"));
|
||
}
|
||
}
|
||
let mut text = String::new();
|
||
f.take(CONTROL_FILE_MAX.saturating_add(1)).read_to_string(&mut text).map_err(|e| format!("{file}: {e}"))?;
|
||
if u64::try_from(text.len()).unwrap_or(u64::MAX) > CONTROL_FILE_MAX {
|
||
return Err(format!("{file}: too large for a control file (over {} KiB)", CONTROL_FILE_MAX / 1024));
|
||
}
|
||
serde_json::from_str(&text).map_err(|e| format!("{file}: {e}"))
|
||
}
|
||
|
||
/// Why user `me` can't trust a control file with this owner and mode, if they can't.
|
||
#[cfg(any(test, unix))]
|
||
fn control_file_problem(owner: u32, mode: u32, me: u32) -> Option<String> {
|
||
if owner != me {
|
||
return Some(format!("owned by another user (uid {owner}; you are uid {me}), who may be the one listening for your commands"));
|
||
}
|
||
let permissions = mode & 0o7777;
|
||
(permissions & 0o077 != 0).then(|| format!("other users have access to it (mode {permissions:o}; the app writes it with mode 600)"))
|
||
}
|
||
|
||
/// The effective user id: the owner of the files this process creates, and so of a control file
|
||
/// the app wrote for this user. std has no `geteuid` and this crate forbids `unsafe`; rustix's is
|
||
/// safe and can't fail.
|
||
#[cfg(unix)]
|
||
fn current_uid() -> u32 {
|
||
rustix::process::geteuid().as_raw()
|
||
}
|
||
|
||
#[cfg(test)]
|
||
mod tests {
|
||
use super::control_file_problem;
|
||
|
||
#[test]
|
||
fn a_control_file_must_be_yours_and_private() {
|
||
// Regular file type bits (0o100000) don't matter, only the owner and the permission bits.
|
||
assert_eq!(control_file_problem(1000, 0o100600, 1000), None);
|
||
assert_eq!(control_file_problem(1000, 0o600, 1000), None);
|
||
assert_eq!(control_file_problem(1000, 0o400, 1000), None);
|
||
let other = control_file_problem(1001, 0o600, 1000).unwrap_or_default();
|
||
assert!(other.contains("owned by another user") && other.contains("1001"), "{other}");
|
||
// Root gets no exception: a file a user planted is still theirs.
|
||
assert!(control_file_problem(1000, 0o600, 0).is_some_and(|p| p.contains("owned by another user")));
|
||
for mode in [0o644, 0o640, 0o604, 0o660, 0o606, 0o620, 0o602, 0o610, 0o601, 0o100666] {
|
||
let open = control_file_problem(1000, mode, 1000).unwrap_or_default();
|
||
assert!(open.contains("other users"), "{mode:o}: {open}");
|
||
}
|
||
assert!(control_file_problem(1000, 0o100644, 1000).unwrap_or_default().contains("mode 644"));
|
||
}
|
||
}
|