mirror of
https://github.com/storytold/pdfcraft.git
synced 2026-10-26 11:08:48 -06:00
* M12: run XFA forms' JavaScript: calculations, validation, rows, visibility (#60) Laid-out XFA forms had their fields but none of their behaviour: totals didn't compute, "Add row" buttons did nothing, and subforms a check box should reveal stayed hidden. The js crate gains the XFA scripting object model as native boa objects over a snapshot of the form tree: xfa.form navigation by name, SOM resolution (absolute, relative with the containing-subform search, descendants, indexes and wildcards), rawValue/presence/access, instance managers (_name, addInstance, removeInstance, setInstances, count), xfa.host (messageBox, resetData, print, setFocus, gotoURL), xfa.layout page numbers, xfa.event, app, console and util, plus unqualified sibling names as XFA resolves them. Scripts run with `this` bound to the node and yield their completion value; everything they change or ask for comes back as effects. The xfa crate builds the live form tree (instances from the data, values, presence and access with overrides) and the event table from the template, keeps presence and access overrides on the AcroForm (/PCXfaOverrides) so undo and reopening preserve them, adds and removes row instances in the datasets packet through the existing merge pipeline, and lays the form out again on demand. The engine runs initialize and calculate scripts on open (an appended revision, nothing dirty), exit, validate and calculate after a field changes (a failing validate shows its message and keeps the value, as Acrobat does), and click scripts for buttons through run_javascript, so the app's buttons and the js_run tool work unchanged. Values a script sets go to the fields and the data at once; rows and visibility changes re-lay the form out. All of it is one undo step. JavaScript off turns it off. FormCalc scripts are recognised and reported, not run. Bounds: script length and nesting as before, loop and recursion limits, at most 1000 instances added per run, 2000 scripts and 50 re-layouts per event; a calculate script that adds rows, or a click script looping on addInstance/setInstances, ends quickly with a bounded form (tested). Checked on IRCC's IMM 5669: opens with its page-number scripts, the Print button's xfa.host.print runs through js_run, fill and save keep the original bytes. * M12: Save and SaveAs named actions run the file commands (#60) XFA forms' Save buttons are app.execMenuItem("SaveAs"), which the layout turns into a SaveAs named action; the shell answered it with "the SaveAs action isn't supported yet". Named Save and SaveAs now run file.save and file.save_as, like Named Print opens the print dialog. The buttons test covers Save against a file on disk (SaveAs opens the native dialog, which a headless test must not). * M12: bound XFA form scripts against hostile forms (#60) Review fixes for the XFA scripting PR (#230): - Effects: values, presence and access set again on the same object merge (last wins, behind order-dependent effects); 10k effects, 100 message boxes and 1000 console lines per script and per event, reported when hit. An event's data writes are kept in memory and written as one rewrite of the datasets packet; later writes in the same edit replace that stream in place. - form_tree stops at 200k objects and says so; forms without scripts build no live form and run nothing. - Only click scripts may print, save, open links or move the focus; others are noted in the console. Open-time messages and errors show right after open. - Lower loop limits for initialize/calculate/validate, a time budget per event after which remaining scripts are skipped and reported, and a per-script time limit after which a runaway script is abandoned and the document's scripts turned off. - What open-time scripts change is noted in the XFA warnings. - A document's Named /Save no longer writes the file on click (SaveAs opens the Save As dialog, as a script's execMenuItem does). - XFA click scripts are no longer written as /S /JavaScript actions: the button carries /PCXfaClick and runs by SOM path. Private keys documented. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <echelon@gmail.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
102 lines
3.9 KiB
Rust
102 lines
3.9 KiB
Rust
//! pdfcraft-xfa — XFA forms (L3). See the README.
|
|
//!
|
|
//! A dynamic XFA form is a PDF shell around an XML template; viewers without an XFA engine
|
|
//! show its one placeholder page ("requires Adobe Reader"). This crate reads the template,
|
|
//! lays it out and writes ordinary pages and AcroForm fields into the document, so the rest
|
|
//! of PdfCraft (rendering, filling, saving, printing, tools) works on it unchanged.
|
|
|
|
#![deny(clippy::unwrap_used, clippy::expect_used, clippy::panic, clippy::unimplemented, clippy::todo, clippy::unreachable)]
|
|
|
|
pub mod data;
|
|
pub mod fixtures;
|
|
pub mod layout;
|
|
pub mod model;
|
|
pub mod packets;
|
|
pub mod parse;
|
|
pub mod pdf;
|
|
pub mod script;
|
|
pub mod text;
|
|
|
|
use pdfcraft_cos::Document;
|
|
|
|
pub use data::{
|
|
DataNode, DataOp, DataPath, DatasetsWrite, FieldData, FieldDatum, add_data_instances, build_data, iso_to_pattern, parse_datasets, pattern_to_iso,
|
|
read_values, remove_data_instance, som_to_path, write_data_ops, write_data_value, write_datasets, write_datasets_reusing,
|
|
};
|
|
pub use layout::{Action, BorderShape, Form, Item, MAX_PAGES, Page, Widget, WidgetKind, layout};
|
|
pub use packets::{Encoding, Packets, decode as decode_packet, encode as encode_packet, read_packets};
|
|
pub use parse::{measure, parse};
|
|
pub use pdf::{CLICK_KEY, LAYOUT_KEY, SOM_KEY, existing_layout};
|
|
pub use script::{
|
|
FormNode, LiveForm, MAX_FORM_NODES, NodeKind, OVERRIDES_KEY, Overrides, ScriptEvent, apply_overrides, data_of, fields_by_som, form_tree,
|
|
has_scripts, overrides, rerender, set_overrides, template_of,
|
|
};
|
|
|
|
#[derive(Debug, thiserror::Error)]
|
|
pub enum XfaError {
|
|
#[error("the document is not an XFA form")]
|
|
NotXfa,
|
|
#[error("the XFA template could not be read: {0}")]
|
|
Malformed(String),
|
|
#[error("{0}")]
|
|
TooLarge(String),
|
|
#[error("{0}")]
|
|
Cos(#[from] pdfcraft_cos::CosError),
|
|
}
|
|
|
|
/// What laying out a form produced.
|
|
#[derive(Clone, Debug, Default, PartialEq)]
|
|
pub struct Report {
|
|
pub pages: usize,
|
|
pub fields: usize,
|
|
/// Template bytes read.
|
|
pub template_bytes: usize,
|
|
/// What was approximated or left out, for the user.
|
|
pub warnings: Vec<String>,
|
|
}
|
|
|
|
/// Is this a dynamic XFA form still showing its placeholder pages (one PdfCraft has not laid
|
|
/// out yet)?
|
|
pub fn is_dynamic(doc: &Document) -> bool {
|
|
existing_layout(doc).is_none() && matches!(read_packets(doc), Ok(Some(p)) if p.needs_rendering || !p.has_fields)
|
|
}
|
|
|
|
/// Lay a template packet (or whole XDP, whose datasets then fill the fields) out.
|
|
pub fn layout_xml(xml: &str) -> Result<Form, XfaError> {
|
|
let (tpl, warnings) = parse(xml)?;
|
|
let data = parse_datasets(xml);
|
|
let mut form = layout(&tpl, data.as_ref())?;
|
|
form.warnings.splice(0..0, warnings);
|
|
Ok(form)
|
|
}
|
|
|
|
/// Lay a dynamic XFA form out into its own document: its placeholder pages are replaced by the
|
|
/// laid-out pages and its fields join the AcroForm, holding the values of the datasets packet.
|
|
/// The XFA packets stay, so Adobe's viewers keep rendering it their way. Widget appearances are
|
|
/// left for the forms layer to generate.
|
|
pub fn render_into(doc: &mut Document) -> Result<Report, XfaError> {
|
|
if !is_dynamic(doc) {
|
|
return Err(XfaError::NotXfa);
|
|
}
|
|
let packets = read_packets(doc)?.ok_or(XfaError::NotXfa)?;
|
|
if packets.xdp.trim().is_empty() {
|
|
return Err(XfaError::Malformed("the XFA packets hold no template".into()));
|
|
}
|
|
let (tpl, parse_warnings) = parse(&packets.xdp)?;
|
|
let data = parse_datasets(&packets.xdp);
|
|
let laid = apply_overrides(&tpl, &overrides(doc));
|
|
let mut form = layout(&laid, data.as_ref())?;
|
|
form.warnings.splice(0..0, parse_warnings);
|
|
if form.pages.is_empty() {
|
|
return Err(XfaError::Malformed("the template laid out to no pages".into()));
|
|
}
|
|
let written = pdf::write_form(doc, &form)?;
|
|
let mut warnings = form.warnings;
|
|
warnings.extend(written.warnings);
|
|
warnings.dedup();
|
|
Ok(Report { pages: written.pages, fields: written.fields, template_bytes: packets.xdp.len(), warnings })
|
|
}
|
|
|
|
#[cfg(test)]
|
|
mod tests;
|