forked from 1b-agent/opencadstudio-upstream
Afonsop
ca0d7b962d
Giant rasters (500 MB aerial/GIS TIFFs) decoded whole: multiple GB of RGBA on a wasm heap is tab death, and even desktop silently failed past the image crate's 512 MiB default allocation cap. Decoding now probes the header for dimensions first and runs in tiers — full decode under a per-target budget (512 MB wasm / 4 GB native, enforced through the decoder's allocation limits so oversize fails fast instead of ballooning), Lanczos3 downsample to a display cap (4096² wasm / 8192² native) when the decode fits but the buffer is oversized, and a clear localized refusal naming the dimensions and the limit when it cannot. The probed source dimensions stay the entity's sizing truth, so a downsampled buffer never shrinks the on-paper footprint; PDF export self-corrects (effective DPI derives from placement × stored pixels). Refusals surface once per image through the pick, open, and drop/re-resolve paths. Decode coverage gains webp and gif (pure Rust in image 0.25 — no C, no lockfile churn), with the attach picker and drop filters matching. Remote http(s) raster references now fetch on web: CORS-classified failures name CORS, HTTP errors name the status, bodies over 64 MB and 8 s deadlines are bounded, and fetched bytes join the session source registry (so ARCHIVE can package them and re-resolution reads cache). Georgian and Armenian Noto subsets ship (generation blocks included), so those scripts render instead of skipping; scripts still without subsets remain silently skipped, unchanged.