feat: implement PDF password handling and enhance toolbox UI for better accessibility

src/js/workflow/engine.ts

@@ -73,6 +73,25 @@ function tick(): Promise<void> {
   return new Promise((r) => setTimeout(r, 0));
 }
 
+function validateEncryptOrdering(
+  editor: NodeEditor<ClassicScheme>,
+  pipelineNodes: string[]
+): string | null {
+  for (const nodeId of pipelineNodes) {
+    const node = editor.getNode(nodeId) as BaseWorkflowNode;
+    if (node?.label !== 'Encrypt') continue;
+
+    const outConns = editor.getConnections().filter((c) => c.source === nodeId);
+    for (const conn of outConns) {
+      const target = editor.getNode(conn.target) as BaseWorkflowNode;
+      if (target && target.category !== 'Output') {
+        return `The Encrypt node feeds into "${target.label}", which may fail on encrypted data. Move Encrypt to just before the output node.`;
+      }
+    }
+  }
+  return null;
+}
+
 export async function executeWorkflow(
   editor: NodeEditor<ClassicScheme>,
   engine: DataflowEngine<DataflowEngineScheme>,
@@ -107,6 +126,11 @@ export async function executeWorkflow(
 
   const sorted = topologicalSort(pipelineNodes, editor);
 
+  const encryptWarning = validateEncryptOrdering(editor, sorted);
+  if (encryptWarning) {
+    throw new WorkflowError(encryptWarning, 'Encrypt');
+  }
+
   engine.reset();
 
   for (const nodeId of sorted) {

src/js/workflow/nodes/pdf-input-node.ts

@@ -3,7 +3,14 @@ import { BaseWorkflowNode } from './base-node';
 import { pdfSocket } from '../sockets';
 import type { PDFData, SocketData, MultiPDFData } from '../types';
 import { PDFDocument } from 'pdf-lib';
-import { readFileAsArrayBuffer } from '../../utils/helpers.js';
+import { readFileAsArrayBuffer, initializeQpdf } from '../../utils/helpers.js';
+
+export class EncryptedPDFError extends Error {
+  constructor(public readonly filename: string) {
+    super(`PDF "${filename}" is password-protected`);
+    this.name = 'EncryptedPDFError';
+  }
+}
 
 export class PDFInputNode extends BaseWorkflowNode {
   readonly category = 'Input' as const;
@@ -20,8 +27,29 @@ export class PDFInputNode extends BaseWorkflowNode {
   async addFile(file: File): Promise<void> {
     const arrayBuffer = await readFileAsArrayBuffer(file);
     const bytes = new Uint8Array(arrayBuffer as ArrayBuffer);
+
+    let isEncrypted = false;
+    try {
+      await PDFDocument.load(bytes, { throwOnInvalidObject: false });
+    } catch {
+      isEncrypted = true;
+    }
+
+    if (isEncrypted) {
+      try {
+        await PDFDocument.load(bytes, {
+          ignoreEncryption: true,
+          throwOnInvalidObject: false,
+        });
+      } catch {
+        throw new Error(
+          `Failed to load "${file.name}" - file may be corrupted`
+        );
+      }
+      throw new EncryptedPDFError(file.name);
+    }
+
     const document = await PDFDocument.load(bytes, {
-      ignoreEncryption: true,
       throwOnInvalidObject: false,
     });
     this.files.push({
@@ -32,6 +60,49 @@ export class PDFInputNode extends BaseWorkflowNode {
     });
   }
 
+  async addDecryptedFile(file: File, password: string): Promise<void> {
+    const arrayBuffer = await readFileAsArrayBuffer(file);
+    const bytes = new Uint8Array(arrayBuffer as ArrayBuffer);
+    const qpdf = await initializeQpdf();
+    const uid = `${Date.now()}_${Math.random().toString(36).slice(2, 9)}`;
+    const inputPath = `/tmp/input_decrypt_${uid}.pdf`;
+    const outputPath = `/tmp/output_decrypt_${uid}.pdf`;
+
+    try {
+      qpdf.FS.writeFile(inputPath, bytes);
+      qpdf.callMain([
+        inputPath,
+        '--password=' + password,
+        '--decrypt',
+        outputPath,
+      ]);
+      const decryptedData = qpdf.FS.readFile(outputPath, {
+        encoding: 'binary',
+      });
+      const decryptedBytes = new Uint8Array(decryptedData);
+      const document = await PDFDocument.load(decryptedBytes, {
+        throwOnInvalidObject: false,
+      });
+      this.files.push({
+        type: 'pdf',
+        document,
+        bytes: decryptedBytes,
+        filename: file.name,
+      });
+    } finally {
+      try {
+        qpdf.FS.unlink(inputPath);
+      } catch {
+        /* cleanup */
+      }
+      try {
+        qpdf.FS.unlink(outputPath);
+      } catch {
+        /* cleanup */
+      }
+    }
+  }
+
   async setFile(file: File): Promise<void> {
     this.files = [];
     await this.addFile(file);