@cloudpdf/engine 3.0.0-next.15 → 3.0.0-next.16

package/dist/index.cjs

@@ -241,97 +241,23 @@ var CloudDocumentAnnotationsService = class {
 	}
 };
 //#endregion
-//#region src/document/buildMutationForm.ts
-/**
-* The multipart envelope of a write that carries files, in the shape every
-* multipart message has: the `body` part holds the JSON the plain request
-* would have been, which names each file by role
-* (`resources: { <role>: <key> }`), and each file is the part
-* `resource:<key>`.
-*/
-function buildMutationForm(body, resources) {
-	const form = new FormData();
-	form.append("body", JSON.stringify(body));
-	for (const [key, resource] of Object.entries(resources)) form.append(`resource:${key}`, new Blob([resource.bytes], { type: resource.mimeType ?? "application/octet-stream" }), resource.name ?? key);
-	return form;
-}
-/**
-* The envelope of a write with at most one file per role (an annotation's
-* drawing or attached file, a page insert's source PDF, a signature's
-* mark): each file's key is its role's name, and the body names it so,
-* `resources: { <role>: '<role>' }`.
-*/
-function buildRoleMutationForm(body, files) {
-	const parts = {};
-	const resources = {};
-	for (const [role, file] of Object.entries(files)) {
-		if (!file) continue;
-		parts[role] = file;
-		resources[role] = role;
-	}
-	return buildMutationForm(Object.keys(resources).length > 0 ? {
-		...body,
-		resources
-	} : body, parts);
-}
-/** An annotation write's envelope: its drawing and attached file, by role. */
-function buildAnnotationMutationForm(body, resources) {
-	return buildRoleMutationForm(body, {
-		appearance: resources.appearance && { bytes: resources.appearance },
-		file: resources.file && { bytes: resources.file }
-	});
-}
-//#endregion
-//#region src/document/parseAttachmentContent.ts
-/** Header carrying the file's name, token-text encoded (names are
-*  arbitrary UTF-8; HTTP header values are not). */
-const FILE_NAME_HEADER = "X-EmbedPDF-File-Name";
-/** Header carrying the file's declared type; absent when it has none. */
-const FILE_TYPE_HEADER = "X-EmbedPDF-File-Type";
-/**
-* Project an attachment-file response into `AttachmentContent`. The body
-* is the decoded bytes; the metadata rides as headers — `X-EmbedPDF-File-Type`
-* for the declared type (`Content-Type` is only what HTTP needs), and
-* `X-EmbedPDF-File-Name` for the file name.
-* Used by the document-level `attachments.download()`; the annotation-level
-* `annotations.downloadResource(ref, 'file')` reads the same response's bytes.
-*/
-function parseAttachmentContent(file) {
-	const encodedName = file.headers.get(FILE_NAME_HEADER);
-	if (encodedName === null) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.WireFormat, `attachment response missing ${FILE_NAME_HEADER} header`);
-	let name;
-	try {
-		name = (0, _embedpdf_engine_core_wire.decodeTokenText)(encodedName);
-	} catch (err) {
-		throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.WireFormat, `malformed ${FILE_NAME_HEADER} header: ${err?.message ?? err}`, { cause: err });
-	}
-	return {
-		bytes: file.bytes,
-		name,
-		mimeType: file.headers.get(FILE_TYPE_HEADER)
-	};
-}
-//#endregion
 //#region src/document/CloudDocumentAttachmentsService.ts
-/** The `/attachments@…` listing leaf is a bare array of name-tree entries. */
 /**
-* Cloud-side document-level attachments (the catalog's `/EmbeddedFiles`
-* name tree). Reads use immutable leaves pinned by the manifest's
-* `attachmentsVersion`: `/attachments@…` for the metadata listing and
-* `/attachment-files/…@…` for one file's decoded bytes — a separate
-* capability tier, so a CDN credential for the listing can never egress
-* content. Mutations use unversioned collection/member URLs and are
-* never cached.
+* The reads of document-level attachments (the catalog's `/EmbeddedFiles`
+* name tree) on the cloud engine; `create` and `delete` are changes
+* (`attachmentVerbs`, through `POST …/changes`). Reads use immutable leaves
+* pinned by the manifest's `attachmentsVersion`: `/attachments@…` for the
+* metadata listing and `/attachment-files/…@…` for one file's decoded
+* bytes — a separate capability tier, so a CDN credential for the listing
+* can never egress content.
 */
 var CloudDocumentAttachmentsService = class {
-	constructor(http, docId, layerName, isClosed, manifest, publisher, writes) {
+	constructor(http, docId, layerName, isClosed, manifest) {
 		this.http = http;
 		this.docId = docId;
 		this.layerName = layerName;
 		this.isClosed = isClosed;
 		this.manifest = manifest;
-		this.publisher = publisher;
-		this.writes = writes;
 	}
 	/**
 	* Snapshot of the name tree, in tree (key-sorted) order. Pulls
@@ -353,10 +279,9 @@ var CloudDocumentAttachmentsService = class {
 		});
 	}
 	/**
-	* Decode and return one embedded file's bytes. The body is the decoded
-	* stream; the name and mime type ride as response headers (see
-	* `parseAttachmentContent`). Same versioned-leaf + refresh-retry rails
-	* as {@link list}.
+	* One embedded file's decoded bytes; its name and type are what the
+	* listing says. Same versioned-leaf + refresh-retry rails as
+	* {@link list}. The server's limit on decoded size applies.
 	*/
 	download(ref) {
 		if (this.isClosed()) return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocNotOpen, `document ${this.docId} is closed`));
@@ -365,51 +290,54 @@ var CloudDocumentAttachmentsService = class {
 				const manifest = await this.manifest.get(s);
 				return planesInherited(manifest, ["attachments"]) ? _embedpdf_engine_core_wire.wirePaths.docAttachmentFile(this.docId, ref.key, manifest.attachmentsVersion) : _embedpdf_engine_core_wire.wirePaths.layerAttachmentFile(this.docId, this.layerName, ref.key, manifest.attachmentsVersion);
 			};
-			return parseAttachmentContent(await this.http.getFileWithRefresh(buildPath, async (s) => {
+			return (await this.http.getFileWithRefresh(buildPath, async (s) => {
 				await this.manifest.refresh(s);
-			}, signal));
-		});
-	}
-	/**
-	* Create an embedded file in the name tree: metadata into the `body`
-	* part, naming its file `resources: { file: 'file' }`, and the bytes in
-	* the part `resource:file`.
-	*/
-	create(file, options) {
-		if (this.isClosed()) return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocNotOpen, `document ${this.docId} is closed`));
-		return _embedpdf_engine_core_runtime.AbortablePromise.run(async (signal) => {
-			const opId = (0, _embedpdf_engine_core_runtime.opIdOf)(options);
-			return this.writes.run(opId, signal, async (write) => {
-				const { wireFile, resource } = await (0, _embedpdf_engine_core_runtime.normalizeAttachmentFileSource)(file, "file");
-				const result = await write.send((sent) => this.http.postMultipartJson(_embedpdf_engine_core_wire.wirePaths.layerAttachmentsCollection(this.docId, this.layerName), buildMutationForm(wireFile, { file: resource }), (raw) => _embedpdf_engine_core_wire.AttachmentCreateResultSchema.parse(raw), signal, sent));
-				this.manifest.apply(result.meta, ["attachments"]);
-				this.publisher.publishWrite(opId, {
-					type: "attachments.created",
-					...result
-				});
-				return result;
-			});
-		});
-	}
-	/** Delete an embedded file from the name tree by its durable key. */
-	delete(ref, options) {
-		if (this.isClosed()) return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocNotOpen, `document ${this.docId} is closed`));
-		return _embedpdf_engine_core_runtime.AbortablePromise.run(async (signal) => {
-			const opId = (0, _embedpdf_engine_core_runtime.opIdOf)(options);
-			return this.writes.run(opId, signal, async (write) => {
-				const result = await write.send((sent) => this.http.deleteJson(_embedpdf_engine_core_wire.wirePaths.layerAttachmentItem(this.docId, this.layerName, ref.key), (raw) => _embedpdf_engine_core_wire.AttachmentDeleteResultSchema.parse(raw), signal, sent));
-				this.manifest.apply(result.meta, ["attachments"]);
-				this.publisher.publishWrite(opId, {
-					type: "attachments.deleted",
-					deleted: (0, _embedpdf_engine_core_runtime.deletedAttachmentOf)(result),
-					...result
-				});
-				return result;
-			});
+			}, signal)).bytes;
 		});
 	}
 };
 //#endregion
+//#region src/document/buildMutationForm.ts
+/**
+* The multipart envelope of a write that carries files, in the shape every
+* multipart message has: the `body` part holds the JSON the plain request
+* would have been, which names each file by role
+* (`resources: { <role>: <key> }`), and each file is the part
+* `resource:<key>`.
+*/
+function buildMutationForm(body, resources) {
+	const form = new FormData();
+	form.append("body", JSON.stringify(body));
+	for (const [key, resource] of Object.entries(resources)) form.append(`resource:${key}`, new Blob([resource.bytes], { type: resource.mimeType ?? "application/octet-stream" }), resource.name ?? key);
+	return form;
+}
+/**
+* The envelope of a write with at most one file per role (an annotation's
+* drawing or attached file, a page insert's source PDF, a signature's
+* mark): each file's key is its role's name, and the body names it so,
+* `resources: { <role>: '<role>' }`.
+*/
+function buildRoleMutationForm(body, files) {
+	const parts = {};
+	const resources = {};
+	for (const [role, file] of Object.entries(files)) {
+		if (!file) continue;
+		parts[role] = file;
+		resources[role] = role;
+	}
+	return buildMutationForm(Object.keys(resources).length > 0 ? {
+		...body,
+		resources
+	} : body, parts);
+}
+/** An annotation write's envelope: its drawing and attached file, by role. */
+function buildAnnotationMutationForm(body, resources) {
+	return buildRoleMutationForm(body, {
+		appearance: resources.appearance && { bytes: resources.appearance },
+		file: resources.file && { bytes: resources.file }
+	});
+}
+//#endregion
 //#region \0@oxc-project+runtime@0.140.0/helpers/esm/typeof.js
 function _typeof(o) {
 	"@babel/helpers - typeof";
@@ -504,6 +432,8 @@ var CloudDocumentChanges = class {
 	*/
 	absorb(opId, change, result) {
 		this.manifest.apply(result.meta, planesOf(result));
+		for (const item of result.items) if (item.type === "pages.delete") this.manifest.applyPageDelete(result.meta, item.pages);
+		else if (item.type === "pages.insert" || item.type === "pages.insertBlank" || item.type === "pages.restore") this.manifest.applyPageInsert(result.meta);
 		if (this.published.has(opId)) return;
 		this.published.add(opId);
 		if (this.published.size > PUBLISHED_MEMORY) this.published.delete(this.published.values().next().value);
@@ -573,6 +503,20 @@ function changeRequestOf(changes) {
 					resources: { appearance: part(appearance.pdf.slice().buffer) }
 				};
 			}
+			case "pages.insert": {
+				const { source, ...rest } = op;
+				return {
+					...rest,
+					resources: { source: part(source.slice().buffer) }
+				};
+			}
+			case "attachments.create": {
+				const { file } = op.resources;
+				return {
+					...op,
+					resources: file ? { file: part(file) } : {}
+				};
+			}
 			default: return op;
 		}
 	};
@@ -587,10 +531,13 @@ function changeRequestOf(changes) {
 		parts
 	};
 }
-/** Whether a change carries bytes: a drawing, an attached file, a signature's artwork. */
+/**
+* Whether a change carries bytes: a drawing, an attached file, a signature's
+* artwork, a PDF whose pages come in.
+*/
 function carriesBytes(change) {
 	if ((0, _embedpdf_engine_core_runtime.isUndoChange)(change)) return false;
-	return change.ops.some((op) => op.type === "forms.setSignatureAppearance" || (op.type === "annotations.create" || op.type === "annotations.update") && op.resources !== void 0 && Object.values(op.resources).some((resource) => resource !== void 0));
+	return change.ops.some((op) => op.type === "forms.setSignatureAppearance" || op.type === "pages.insert" || op.type === "attachments.create" || (op.type === "annotations.create" || op.type === "annotations.update") && op.resources !== void 0 && Object.values(op.resources).some((resource) => resource !== void 0));
 }
 /** The planes a change's writes took over from the base, each op by its family. */
 function planesOf(result) {
@@ -598,7 +545,10 @@ function planesOf(result) {
 	for (const item of result.items) {
 		if ((0, _embedpdf_engine_core_runtime.isSkippedItem)(item)) continue;
 		if (item.type.startsWith("metadata.")) planes.add("metadata");
+		else if (item.type.startsWith("outline.")) planes.add("outline");
+		else if (item.type.startsWith("pages.")) planes.add("layout");
 		else if (item.type.startsWith("forms.")) planes.add("forms");
+		else if (item.type.startsWith("attachments.")) planes.add("attachments");
 		else planes.add("annotations");
 	}
 	return [...planes];
@@ -969,6 +919,33 @@ var CloudDocumentFormsService = class {
 	}
 };
 //#endregion
+//#region src/document/CloudDocumentOutlineService.ts
+/**
+* The read behind the cloud `doc.outline`; its verbs are one-op changes
+* through `doc.apply` (`outlineVerbs`). The outline lives at a
+* content-addressed leaf pinned by `outlineVersion` and `layoutVersion` (it
+* is read in page space). The read takes both pins from the cached
+* manifest, and on a 404 (a stale pin) refreshes the manifest and tries
+* once more. While the layer inherits both planes, one doc-level URL serves
+* every visitor.
+*/
+function readCloudOutline(http, docId, layerName, isClosed, manifest) {
+	if (isClosed()) return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocNotOpen, `document ${docId} is closed`));
+	return _embedpdf_engine_core_runtime.AbortablePromise.run(async (signal) => {
+		const buildPath = async (s) => {
+			const current = await manifest.get(s);
+			const token = {
+				outlineVersion: current.outlineVersion,
+				layoutVersion: current.layoutVersion
+			};
+			return planesInherited(current, ["outline", "layout"]) ? _embedpdf_engine_core_wire.wirePaths.docOutline(docId, token) : _embedpdf_engine_core_wire.wirePaths.layerOutline(docId, layerName, token);
+		};
+		return http.getJsonWithRefresh(buildPath, (raw) => _embedpdf_engine_core_wire.DocumentOutlineSchema.parse(raw), async (s) => {
+			await manifest.refresh(s);
+		}, signal);
+	});
+}
+//#endregion
 //#region src/shared/awaitSignal.ts
 /**
 * Wait for a shared promise under one caller's signal: an abort rejects
@@ -992,16 +969,10 @@ function awaitSignal(promise, signal) {
 }
 //#endregion
 //#region src/document/CloudDocumentPagesService.ts
-/** Detach a Uint8Array view into a standalone ArrayBuffer (the resource-map
-*  shape) without disturbing a larger buffer the caller still owns. */
-function copyToExactBuffer(view) {
-	const copy = new ArrayBuffer(view.byteLength);
-	new Uint8Array(copy).set(view);
-	return copy;
-}
 /**
-* Cloud-side document pages service. Mirrors `LocalDocumentPagesService`
-* over HTTP: GET /pages for `list`, POST /pages/reorder for the reorder.
+* Cloud-side document pages service: the reads, extract, flatten and the page
+* names, over HTTP, as `LocalDocumentPagesService` has them. The structure
+* verbs are changes (`pageVerbs`), so they can be undone.
 *
 * Page identity rule (locked with the user, do not change):
 *   - Pages are addressed exclusively by `PageRef` (their indirect
@@ -1009,8 +980,8 @@ function copyToExactBuffer(view) {
 *     The wire never sends a page index for a mutation. This keeps
 *     multi-call client logic from having to account for index drift
 *     between requests.
-*   - Successful `reorder()` returns the new `layout` (order + geometry) plus
-*     cloud coherence pins. A page reorder bumps only `docVersion` +
+*   - A page reorder (a change) returns the new `layout` (order + geometry)
+*     plus cloud coherence pins. It bumps only `docVersion` +
 *     `layoutVersion`; every per-page pin stays warm.
 */
 var CloudDocumentPagesService = class {
@@ -1076,24 +1047,6 @@ var CloudDocumentPagesService = class {
 			await this.manifest.refresh(s);
 		}, signal);
 	}
-	reorder(pages, position, options) {
-		if (this.isClosed()) return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocNotOpen, `document ${this.docId} is closed`));
-		return _embedpdf_engine_core_runtime.AbortablePromise.run(async (signal) => {
-			const opId = (0, _embedpdf_engine_core_runtime.opIdOf)(options);
-			return this.writes.run(opId, signal, async (write) => {
-				const result = await write.send((sent) => this.http.postJson(_embedpdf_engine_core_wire.wirePaths.layerPagesReorder(this.docId, this.layerName), {
-					pages,
-					position
-				}, (raw) => _embedpdf_engine_core_wire.PageReorderResultSchema.parse(raw), signal, sent));
-				this.manifest.apply(result.meta, ["layout"]);
-				this.publisher.publishWrite(opId, {
-					type: "pages.reordered",
-					...result
-				});
-				return result;
-			});
-		});
-	}
 	setName(input, options) {
 		return this.runNameMutation(_embedpdf_engine_core_wire.wirePaths.layerPagesNames(this.docId, this.layerName), input, input.name, input.page, options);
 	}
@@ -1122,86 +1075,13 @@ var CloudDocumentPagesService = class {
 			});
 		});
 	}
-	rotate(pages, rotation, options) {
-		if (this.isClosed()) return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocNotOpen, `document ${this.docId} is closed`));
-		return _embedpdf_engine_core_runtime.AbortablePromise.run(async (signal) => {
-			const opId = (0, _embedpdf_engine_core_runtime.opIdOf)(options);
-			return this.writes.run(opId, signal, async (write) => {
-				const result = await write.send((sent) => this.http.postJson(_embedpdf_engine_core_wire.wirePaths.layerPagesRotate(this.docId, this.layerName), {
-					pages,
-					rotation
-				}, (raw) => _embedpdf_engine_core_wire.PageRotateResultSchema.parse(raw), signal, sent));
-				this.manifest.apply(result.meta, ["layout"]);
-				this.publisher.publishWrite(opId, {
-					type: "pages.rotated",
-					pages,
-					rotation,
-					...result
-				});
-				return result;
-			});
-		});
-	}
-	delete(pages, options) {
-		if (this.isClosed()) return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocNotOpen, `document ${this.docId} is closed`));
-		return _embedpdf_engine_core_runtime.AbortablePromise.run(async (signal) => {
-			const opId = (0, _embedpdf_engine_core_runtime.opIdOf)(options);
-			return this.writes.run(opId, signal, async (write) => {
-				const result = await write.send((sent) => this.http.postJson(_embedpdf_engine_core_wire.wirePaths.layerPagesDelete(this.docId, this.layerName), { pages }, (raw) => _embedpdf_engine_core_wire.PageDeleteResultSchema.parse(raw), signal, sent));
-				this.manifest.applyPageDelete(result.meta, pages);
-				this.publisher.publishWrite(opId, {
-					type: "pages.deleted",
-					pages,
-					...result
-				});
-				return result;
-			});
-		});
-	}
-	insert(bytes, position = "end", options) {
-		if (this.isClosed()) return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocNotOpen, `document ${this.docId} is closed`));
-		return _embedpdf_engine_core_runtime.AbortablePromise.run(async (signal) => {
-			const opId = (0, _embedpdf_engine_core_runtime.opIdOf)(options);
-			return this.writes.run(opId, signal, async (write) => {
-				const buffer = bytes instanceof ArrayBuffer ? bytes : copyToExactBuffer(bytes);
-				const form = buildRoleMutationForm({ position }, { source: {
-					bytes: buffer,
-					mimeType: "application/pdf",
-					name: "source.pdf"
-				} });
-				const result = await write.send((sent) => this.http.postMultipartJson(_embedpdf_engine_core_wire.wirePaths.layerPagesInsert(this.docId, this.layerName), form, (raw) => _embedpdf_engine_core_wire.PageInsertResultSchema.parse(raw), signal, sent));
-				this.manifest.applyPageInsert(result.meta);
-				this.publisher.publishWrite(opId, {
-					type: "pages.inserted",
-					...result
-				});
-				return result;
-			});
-		});
-	}
-	insertBlank(spec, position = "end", options = {}) {
-		if (this.isClosed()) return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocNotOpen, `document ${this.docId} is closed`));
-		return _embedpdf_engine_core_runtime.AbortablePromise.run(async (signal) => {
-			const opId = (0, _embedpdf_engine_core_runtime.opIdOf)(options);
-			const { objectNumbers } = options;
-			return this.writes.run(opId, signal, async (write) => {
-				const result = await write.send((sent) => this.http.postJson(withObjectNumbers(_embedpdf_engine_core_wire.wirePaths.layerPagesInsertBlank(this.docId, this.layerName), { objectNumbers }), {
-					size: spec.size,
-					...spec.count !== void 0 ? { count: spec.count } : {},
-					position
-				}, (raw) => _embedpdf_engine_core_wire.PageInsertResultSchema.parse(raw), signal, sent));
-				this.manifest.applyPageInsert(result.meta);
-				this.publisher.publishWrite(opId, {
-					type: "pages.inserted",
-					...result
-				});
-				return result;
-			}, objectNumbers ?? []);
-		});
-	}
-	extract(pages) {
+	extract(pages, options) {
 		if (this.isClosed()) return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocNotOpen, `document ${this.docId} is closed`));
-		return _embedpdf_engine_core_runtime.AbortablePromise.run(async (signal) => this.http.postJsonBytes(_embedpdf_engine_core_wire.wirePaths.layerPagesExtract(this.docId, this.layerName), { pages }, signal));
+		const body = {
+			pages,
+			...options
+		};
+		return _embedpdf_engine_core_runtime.AbortablePromise.run(async (signal) => this.http.postJsonBytes(_embedpdf_engine_core_wire.wirePaths.layerPagesExtract(this.docId, this.layerName), body, signal));
 	}
 	flatten(pages, options) {
 		const usage = options?.usage ?? "display";
@@ -1420,6 +1300,17 @@ var CloudDocumentSecurityService = class {
 			formFields: this.allows("doc.forms.read")
 		};
 	}
+	/**
+	* What the caller may print, when the client can know it (as for
+	* {@link pageLayerRights}). Null leaves it to the server.
+	*/
+	pagePrintRights() {
+		if (!this.access && !this.tokenHasDocScope) return null;
+		return {
+			print: this.allows("doc.print"),
+			printHigh: this.allows("doc.print.high")
+		};
+	}
 	get state() {
 		return this.securityState;
 	}
@@ -2394,7 +2285,7 @@ var CloudPageFormsService = class {
 //#endregion
 //#region src/document/CloudPageRenderService.ts
 var CloudPageRenderService = class {
-	constructor(http, docId, layerName, pageRef, isClosed, manifest, layout, layerRights) {
+	constructor(http, docId, layerName, pageRef, isClosed, manifest, layout, layerRights, printRights) {
 		this.http = http;
 		this.docId = docId;
 		this.layerName = layerName;
@@ -2403,28 +2294,32 @@ var CloudPageRenderService = class {
 		this.manifest = manifest;
 		this.layout = layout;
 		this.layerRights = layerRights;
+		this.printRights = printRights;
 	}
 	image(options = {}) {
 		if (this.isClosed()) return _embedpdf_engine_core_runtime.AbortablePromise.rejectReason(new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocNotOpen, `document ${this.docId} is closed`));
 		return _embedpdf_engine_core_runtime.AbortablePromise.run(async (signal) => {
 			(0, _embedpdf_engine_core_runtime.checkImageQuality)(options.quality);
 			const format = normalizeFormat(options.format);
-			const family = _embedpdf_engine_core_wire.PAGE_RENDER_FAMILIES[(0, _embedpdf_engine_core_wire.pageRenderFamilyOf)((0, _embedpdf_engine_core_runtime.resolvePageLayers)(options, this.layerRights() ?? {
+			(0, _embedpdf_engine_core_runtime.checkRenderUsage)(options, this.printRights());
+			const picture = (0, _embedpdf_engine_core_wire.pagePictureOf)((0, _embedpdf_engine_core_runtime.resolvePageLayers)(options, this.layerRights() ?? {
 				annotations: true,
 				formFields: true
-			}))];
+			}), (0, _embedpdf_engine_core_runtime.printDpiOf)(options));
 			const buildPath = async (s) => {
 				const manifest = await this.manifest.get(s);
 				const pageObjectNumber = this.pageRef.objectNumber;
 				const page = manifest.pages.find((p) => p.page.objectNumber === pageObjectNumber);
 				if (!page) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.NotFound, `no page with object number ${pageObjectNumber} in document ${this.docId}`);
 				const pins = { contentVersion: page.cache.contentVersion };
-				for (const pin of family.pins) pins[pin] = page.cache[pin];
+				for (const pin of picture.pins) pins[pin] = page.cache[pin];
 				const wireToken = (0, _embedpdf_engine_core_wire.renderImageOptionsToWire)({
 					...options,
 					format
 				}, pins);
-				return planesInherited(manifest, family.planes) ? _embedpdf_engine_core_wire.wirePaths.docPageRender(this.docId, family.family, this.pageRef, wireToken) : _embedpdf_engine_core_wire.wirePaths.layerPageRender(this.docId, this.layerName, family.family, this.pageRef, wireToken);
+				const print = picture.print;
+				if (planesInherited(manifest, picture.planes)) return print ? _embedpdf_engine_core_wire.wirePaths.docPagePrint(this.docId, print.tier, picture.family, this.pageRef, wireToken) : _embedpdf_engine_core_wire.wirePaths.docPageRender(this.docId, picture.family, this.pageRef, wireToken);
+				return print ? _embedpdf_engine_core_wire.wirePaths.layerPagePrint(this.docId, this.layerName, print.tier, picture.family, this.pageRef, wireToken) : _embedpdf_engine_core_wire.wirePaths.layerPageRender(this.docId, this.layerName, picture.family, this.pageRef, wireToken);
 			};
 			const [requestPath, transform] = await Promise.all([buildPath(signal), this.transformOf(options, signal)]);
 			return {
@@ -2557,7 +2452,7 @@ var CloudPageMeasureService = class {
 * that number in events.
 */
 var CloudPageHandle = class {
-	constructor(ref, http, docId, layerName, isClosed, manifest, publisher, writes, layout, layerRights) {
+	constructor(ref, http, docId, layerName, isClosed, manifest, publisher, writes, layout, layerRights, printRights) {
 		this.ref = ref;
 		_defineProperty(this, "annotations", void 0);
 		_defineProperty(this, "forms", void 0);
@@ -2568,7 +2463,7 @@ var CloudPageHandle = class {
 		this.annotations = new CloudPageAnnotationsService(http, docId, layerName, ref, isClosed, manifest, publisher, writes);
 		this.forms = new CloudPageFormsService(http, docId, layerName, ref, isClosed, manifest);
 		this.text = new CloudPageTextService(http, docId, layerName, ref, isClosed, manifest);
-		this.render = new CloudPageRenderService(http, docId, layerName, ref, isClosed, manifest, layout, layerRights);
+		this.render = new CloudPageRenderService(http, docId, layerName, ref, isClosed, manifest, layout, layerRights, printRights);
 	}
 };
 //#endregion
@@ -2719,12 +2614,8 @@ function untilTurn(before, signal) {
 * this engine version doesn't know (a newer server's events degrade to
 * "ignored", never to a crash).
 *
-* Context-field fidelity differs by op, by design of the audit row:
-*   - rotate/delete: `affectedPages` is exactly the op's page set; rotation
-*     is recovered from the layout (it's absolute — every affected page
-*     carries the value).
-*   - reorder: the payload is the result, as the originator got it: the
-*     pages that moved and the new `layout`.
+* A page name write's row is a `pages.reorder` that moved no page: its
+* payload is the result, as the originator got it, with the new `layout`.
 *
 * The audit row keys pages by object number (its storage identity); the
 * event carries them as `PageRef` addresses, like every other event.
@@ -2799,7 +2690,6 @@ function factsOf(row, origin) {
 /** The one event a single-fact row records, or `null` for a kind this version doesn't know. */
 function eventOf(row, origin) {
 	const rowPage = () => (0, _embedpdf_engine_core_runtime.toPageRef)(row.pageObjectNumber ?? row.affectedPages[0] ?? 0);
-	const affectedPages = () => row.affectedPages.map((pageObjectNumber) => (0, _embedpdf_engine_core_runtime.toPageRef)(pageObjectNumber));
 	switch (row.kind) {
 		case "measure.setScale": return {
 			type: "pages.scaleSet",
@@ -2836,29 +2726,6 @@ function eventOf(row, origin) {
 			origin,
 			...row.payload
 		};
-		case "pages.rotate": {
-			const payload = row.payload;
-			const rotation = payload.layout.pages.find((page) => page.ref.objectNumber === row.affectedPages[0])?.rotation ?? 0;
-			return {
-				type: "pages.rotated",
-				pages: affectedPages(),
-				rotation,
-				origin,
-				...payload
-			};
-		}
-		case "pages.delete": return {
-			type: "pages.deleted",
-			pages: affectedPages(),
-			origin,
-			...row.payload
-		};
-		case "pages.insert":
-		case "pages.insertBlank": return {
-			type: "pages.inserted",
-			origin,
-			...row.payload
-		};
 		case "pages.flatten": return {
 			type: "pages.flattened",
 			origin,
@@ -2874,17 +2741,6 @@ function eventOf(row, origin) {
 			origin,
 			...row.payload
 		};
-		case "attachment.create": return {
-			type: "attachments.created",
-			origin,
-			...row.payload
-		};
-		case "attachment.delete": return {
-			type: "attachments.deleted",
-			origin,
-			deleted: (0, _embedpdf_engine_core_runtime.deletedAttachmentOf)(row.payload),
-			...row.payload
-		};
 		case "form.setValue": return {
 			type: "forms.valueSet",
 			origin,
@@ -3086,11 +2942,13 @@ var CloudDocumentHandle = class {
 		_defineProperty(this, "metadata", void 0);
 		_defineProperty(this, "annotations", void 0);
 		_defineProperty(this, "actions", void 0);
+		_defineProperty(this, "outline", void 0);
 		_defineProperty(this, "attachments", void 0);
 		_defineProperty(this, "signatures", void 0);
 		_defineProperty(this, "forms", void 0);
 		_defineProperty(this, "search", void 0);
 		_defineProperty(this, "pages", void 0);
+		_defineProperty(this, "pageReads", void 0);
 		_defineProperty(this, "redaction", void 0);
 		_defineProperty(this, "security", void 0);
 		_defineProperty(this, "render", void 0);
@@ -3174,15 +3032,17 @@ var CloudDocumentHandle = class {
 		const importLimits = async () => (security.currentAccess ?? (await security.establishAccess()).access)?.bundleLimits ?? _embedpdf_engine_core_runtime.DEFAULT_BUNDLE_LIMITS;
 		this.annotations = new CloudDocumentAnnotationsService(http, id, layerName, () => this.closed, this.manifestAccessor, this.publisher, this.writes, importLimits);
 		this.actions = new CloudDocumentActionsService(http, id, layerName, () => this.closed, this.manifestAccessor);
-		this.attachments = new CloudDocumentAttachmentsService(http, id, layerName, () => this.closed, this.manifestAccessor, this.publisher, this.writes);
+		this.outline = (0, _embedpdf_engine_core_runtime.outlineVerbs)(() => readCloudOutline(http, id, layerName, () => this.closed, this.manifestAccessor), (change, options) => this.apply(change, options));
+		this.attachments = (0, _embedpdf_engine_core_runtime.attachmentVerbs)(new CloudDocumentAttachmentsService(http, id, layerName, () => this.closed, this.manifestAccessor), (change, options) => this.apply(change, options));
 		this.signatures = new CloudDocumentSignaturesService(http, id, layerName, () => this.closed, this.manifestAccessor, this.publisher, this.writes);
 		this.forms = new CloudDocumentFormsService(http, id, layerName, () => this.closed, this.manifestAccessor, this.publisher, this.writes, importLimits);
 		this.search = new CloudDocumentSearchService(http, id, layerName, () => this.closed, this.manifestAccessor);
-		this.pages = new CloudDocumentPagesService(http, id, layerName, () => this.closed, this.manifestAccessor, this.publisher, this.writes);
+		this.pageReads = new CloudDocumentPagesService(http, id, layerName, () => this.closed, this.manifestAccessor, this.publisher, this.writes);
+		this.pages = (0, _embedpdf_engine_core_runtime.pageVerbs)(this.pageReads, (change, options) => this.apply(change, options));
 		this.redaction = new CloudDocumentRedactionService(http, id, layerName, () => this.closed, this.manifestAccessor, this.publisher, this.writes);
 	}
 	page(ref) {
-		return new CloudPageHandle(ref, this.http, this.id, this.layerName, () => this.closed, this.manifestAccessor, this.publisher, this.writes, (signal) => this.pages.pageLayout(ref, signal), () => this.cloudSecurity.pageLayerRights());
+		return new CloudPageHandle(ref, this.http, this.id, this.layerName, () => this.closed, this.manifestAccessor, this.publisher, this.writes, (signal) => this.pageReads.pageLayout(ref, signal), () => this.cloudSecurity.pageLayerRights(), () => this.cloudSecurity.pagePrintRights());
 	}
 	/**
 	* This handle: the cloud engine sends every call as it's made, in
@@ -3303,6 +3163,7 @@ var CloudDocumentHandle = class {
 			...delta?.layoutVersion !== void 0 ? { layoutVersion: delta.layoutVersion } : {},
 			...delta?.metadataVersion !== void 0 ? { metadataVersion: delta.metadataVersion } : {},
 			...delta?.attachmentsVersion !== void 0 ? { attachmentsVersion: delta.attachmentsVersion } : {},
+			...delta?.outlineVersion !== void 0 ? { outlineVersion: delta.outlineVersion } : {},
 			...delta?.layerVersion !== void 0 ? { layerVersion: delta.layerVersion } : {},
 			...delta?.working !== void 0 ? { working: delta.working } : {},
 			pages: Array.from(byPageObjectNumber.values()).sort((a, b) => a.page.objectNumber - b.page.objectNumber)
@@ -3447,7 +3308,9 @@ var CloudDocumentHandle = class {
 	}
 	/** Patch the cached manifest from a remote event's coherence pins — the
 	*  same absorb rails local mutations use, so reads stay warm no matter
-	*  whose hand caused the change. */
+	*  whose hand caused the change. Every event kind is named below, so a new
+	*  one can't be forgotten: a missed one leaves this client reading the
+	*  old version from an immutable, cached URL. */
 	absorbRemoteEvent(event) {
 		switch (event.type) {
 			case "pages.scaleSet":
@@ -3456,9 +3319,17 @@ var CloudDocumentHandle = class {
 			case "annotations.created":
 			case "annotations.updated":
 			case "annotations.deleted":
+			case "annotations.restored":
 			case "annotations.reordered":
 				this.absorbMutation(event.meta, ["annotations"]);
 				return;
+			case "outline.created":
+			case "outline.updated":
+			case "outline.moved":
+			case "outline.deleted":
+			case "outline.restored":
+				this.absorbMutation(event.meta, ["outline"]);
+				return;
 			case "pages.reordered":
 			case "pages.rotated":
 			case "pages.named":
@@ -3468,6 +3339,7 @@ var CloudDocumentHandle = class {
 				this.absorbPageDelete(event.meta, event.pages);
 				return;
 			case "pages.inserted":
+			case "pages.restored":
 				this.absorbPageInsert(event.meta);
 				return;
 			case "metadata.updated":
@@ -3476,6 +3348,7 @@ var CloudDocumentHandle = class {
 				return;
 			case "attachments.created":
 			case "attachments.deleted":
+			case "attachments.restored":
 				this.absorbMutation(event.meta, ["attachments"]);
 				return;
 			case "forms.valueSet":
@@ -3513,6 +3386,10 @@ var CloudDocumentHandle = class {
 					"forms"
 				]);
 				return;
+			case "signatures.completed": return;
+			case "signatures.cancelled": return;
+			case "stream.desynced": return;
+			default:
 		}
 	}
 };