@embedpdf/engine-core 3.0.0-next.11 → 3.0.0-next.13

package/dist/conformance.js

@@ -1,7 +1,7 @@
-import { f as pdfQuadBounds, i as EngineError, n as foldText, u as isRotatedGeometryRun } from "./fold-BfyxxwS6.js";
-import { f as EngineErrorCode, o as sliceTextByChars } from "./PageInsertBlankInput-WKY0tr6S.js";
-import { t as AbortError } from "./AbortError-8-9JAX1Y.js";
-import { A as FormSetValueResultSchema, B as PageDeleteResultSchema, O as FormImportResultSchema, Ot as FormSnapshotSchema, Pt as AnnotationDTOSchema, U as PageFlattenResultSchema, W as PageGeometrySnapshotSchema, Y as PageListSnapshotSchema, Z as PageMoveResultSchema, a as AnnotationCreateResultSchema, at as PageTextSnapshotSchema, c as AnnotationListPageSnapshotSchema, d as AnnotationUpdateResultSchema, k as FormRepairResultSchema, l as AnnotationListSnapshotAllPagesSchema, mt as SearchSliceSchema, nt as PageRotateResultSchema, o as AnnotationDeleteResultSchema, pr as DocumentActionsSnapshotSchema, st as RedactionApplyResultSchema, u as AnnotationMoveResultSchema } from "./schemas-XGrNVMDd.js";
+import { f as pdfQuadBounds, i as EngineError, n as foldText, u as isRotatedGeometryRun } from "./fold-CdEJTBTn.js";
+import { f as EngineErrorCode, o as sliceTextByChars } from "./PageInsertBlankInput-cHq9-i-z.js";
+import { t as AbortError } from "./AbortError-DHqPBnYc.js";
+import { B as FormImportResultSchema, Ct as PageTextSnapshotSchema, Et as RedactionApplyResultSchema, H as FormSetValueResultSchema, Nt as SearchSliceSchema, V as FormRepairResultSchema, at as PageGeometrySnapshotSchema, bt as PageRotateResultSchema, cn as FormSnapshotSchema, d as AnnotationListPageSnapshotSchema, f as AnnotationListSnapshotAllPagesSchema, ft as PageMoveResultSchema, it as PageFlattenResultSchema, l as AnnotationFlattenResultSchema, m as AnnotationUpdateResultSchema, mn as AnnotationDTOSchema, mt as PageNameResultSchema, o as AnnotationCreateResultSchema, p as AnnotationMoveResultSchema, qr as DocumentActionsSnapshotSchema, s as AnnotationDeleteResultSchema, tt as PageDeleteResultSchema, ut as PageListSnapshotSchema } from "./schemas-BLARNCgx.js";
 //#region src/conformance/runMetadataConformance.ts
 /**
 * The conformance harness is transport-agnostic. It takes the test runner as
@@ -18,7 +18,7 @@ function runMetadataConformance(runner, opts) {
 			if (engine) await engine.destroy();
 		});
 		test("reads metadata from sample fixture", async () => {
-			const doc = await openFixture$17(engine, opts);
+			const doc = await openFixture$20(engine, opts);
 			try {
 				const meta = await doc.metadata.read();
 				expect(meta).toMatchObject(opts.fixture.expected);
@@ -28,7 +28,7 @@ function runMetadataConformance(runner, opts) {
 			}
 		});
 		test("abort() before completion rejects with AbortError", async () => {
-			const doc = await openFixture$17(engine, opts);
+			const doc = await openFixture$20(engine, opts);
 			try {
 				const p = doc.metadata.read();
 				p.abort("test");
@@ -38,7 +38,7 @@ function runMetadataConformance(runner, opts) {
 			}
 		});
 		test("aborting one read does not affect a concurrent one", async () => {
-			const doc = await openFixture$17(engine, opts);
+			const doc = await openFixture$20(engine, opts);
 			try {
 				const a = doc.metadata.read();
 				const b = doc.metadata.read();
@@ -50,7 +50,7 @@ function runMetadataConformance(runner, opts) {
 			}
 		});
 		test("metadata after close throws DocNotOpen", async () => {
-			const doc = await openFixture$17(engine, opts);
+			const doc = await openFixture$20(engine, opts);
 			await doc.close();
 			let caught;
 			try {
@@ -62,7 +62,7 @@ function runMetadataConformance(runner, opts) {
 			expect(EngineError.is(caught, EngineErrorCode.DocNotOpen)).toBe(true);
 		});
 		test("update() sets standard + custom fields and a subsequent read observes them", async () => {
-			const doc = await openFixture$17(engine, opts);
+			const doc = await openFixture$20(engine, opts);
 			try {
 				const result = await doc.metadata.update({
 					title: "Conformance Title",
@@ -81,7 +81,7 @@ function runMetadataConformance(runner, opts) {
 			}
 		});
 		test("update() clears a field with null", async () => {
-			const doc = await openFixture$17(engine, opts);
+			const doc = await openFixture$20(engine, opts);
 			try {
 				await doc.metadata.update({ title: "To Be Cleared" });
 				const set = await doc.metadata.read();
@@ -94,7 +94,7 @@ function runMetadataConformance(runner, opts) {
 			}
 		});
 		test("update() after close throws DocNotOpen", async () => {
-			const doc = await openFixture$17(engine, opts);
+			const doc = await openFixture$20(engine, opts);
 			await doc.close();
 			let caught;
 			try {
@@ -107,7 +107,7 @@ function runMetadataConformance(runner, opts) {
 		});
 	});
 }
-async function openFixture$17(engine, opts) {
+async function openFixture$20(engine, opts) {
 	if (opts.openKind === "bytes") {
 		const bytes = await opts.fixture.bytes();
 		return engine.open({
@@ -134,7 +134,7 @@ function runAnnotationReadConformance(runner, opts) {
 			if (engine) await engine.destroy();
 		});
 		test("listRawAll returns one entry per page with valid PageState", async () => {
-			const doc = await openFixture$16(engine, opts);
+			const doc = await openFixture$19(engine, opts);
 			try {
 				const snap = await doc.annotations.listRawAll();
 				expect(AnnotationListSnapshotAllPagesSchema.safeParse(snap).success).toBe(true);
@@ -148,7 +148,7 @@ function runAnnotationReadConformance(runner, opts) {
 			}
 		});
 		test("listRaw on the test page returns the expected counts and DTO shape", async () => {
-			const doc = await openFixture$16(engine, opts);
+			const doc = await openFixture$19(engine, opts);
 			try {
 				const snap = await doc.annotations.listRaw(opts.fixture.pageObjectNumber);
 				expect(AnnotationListPageSnapshotSchema.safeParse(snap).success).toBe(true);
@@ -178,7 +178,7 @@ function runAnnotationReadConformance(runner, opts) {
 			}
 		});
 		test("shape/vertex/line annotations expose their family fields", async () => {
-			const doc = await openFixture$16(engine, opts);
+			const doc = await openFixture$19(engine, opts);
 			try {
 				const snap = await doc.annotations.listRaw(opts.fixture.pageObjectNumber);
 				for (const a of snap.annotations) {
@@ -237,7 +237,7 @@ function runAnnotationReadConformance(runner, opts) {
 			}
 		});
 		test("full page list dispatches per-subtype and matches raw counts", async () => {
-			const doc = await openFixture$16(engine, opts);
+			const doc = await openFixture$19(engine, opts);
 			try {
 				const full = await doc.page(opts.fixture.pageObjectNumber).annotations.list();
 				expect(AnnotationListPageSnapshotSchema.safeParse(full).success).toBe(true);
@@ -247,7 +247,7 @@ function runAnnotationReadConformance(runner, opts) {
 			}
 		});
 		test("every annotation DTO satisfies AnnotationDTOSchema (discriminated union)", async () => {
-			const doc = await openFixture$16(engine, opts);
+			const doc = await openFixture$19(engine, opts);
 			try {
 				const snap = await doc.annotations.listRaw(opts.fixture.pageObjectNumber);
 				for (const a of snap.annotations) {
@@ -287,7 +287,7 @@ function runAnnotationReadConformance(runner, opts) {
 		});
 		if (opts.fixture.expectsWeakAnnotation) {
 			test("weak annotations carry identityQuality: weak and ref.kind: index", async () => {
-				const doc = await openFixture$16(engine, opts);
+				const doc = await openFixture$19(engine, opts);
 				try {
 					const weak = (await doc.annotations.listRaw(opts.fixture.pageObjectNumber)).annotations.find((a) => a.identityQuality === "weak");
 					expect(weak !== void 0).toBe(true);
@@ -297,7 +297,7 @@ function runAnnotationReadConformance(runner, opts) {
 				}
 			});
 			test("a stale revision token throws InvalidReference", async () => {
-				const doc = await openFixture$16(engine, opts);
+				const doc = await openFixture$19(engine, opts);
 				try {
 					const snap = await doc.page(opts.fixture.pageObjectNumber).annotations.list();
 					const weak = snap.annotations.find((a) => a.identityQuality === "weak");
@@ -313,7 +313,7 @@ function runAnnotationReadConformance(runner, opts) {
 			});
 		}
 		test("abort() on listRaw rejects with AbortError", async () => {
-			const doc = await openFixture$16(engine, opts);
+			const doc = await openFixture$19(engine, opts);
 			try {
 				const p = doc.annotations.listRaw(opts.fixture.pageObjectNumber);
 				p.abort("test");
@@ -323,7 +323,7 @@ function runAnnotationReadConformance(runner, opts) {
 			}
 		});
 		test("listRaw on an unknown pageObjectNumber throws NotFound", async () => {
-			const doc = await openFixture$16(engine, opts);
+			const doc = await openFixture$19(engine, opts);
 			try {
 				let caught;
 				try {
@@ -339,7 +339,7 @@ function runAnnotationReadConformance(runner, opts) {
 		});
 	});
 }
-async function openFixture$16(engine, opts) {
+async function openFixture$19(engine, opts) {
 	if (opts.openKind === "bytes") {
 		const bytes = await opts.fixture.bytes();
 		return engine.open({
@@ -388,7 +388,7 @@ function runActionsConformance(runner, opts) {
 			if (engine) await engine.destroy();
 		});
 		test("reads catalog additional actions and preserves /CO identity", async () => {
-			const doc = await open(engine, opts, opts.fixtures.document);
+			const doc = await open$1(engine, opts, opts.fixtures.document);
 			try {
 				expect(Boolean(doc.actions)).toBe(true);
 				const snapshot = await doc.actions.read();
@@ -409,7 +409,7 @@ function runActionsConformance(runner, opts) {
 			}
 		});
 		test("attaches page /AA to PageLayout", async () => {
-			const doc = await open(engine, opts, opts.fixtures.page);
+			const doc = await open$1(engine, opts, opts.fixtures.page);
 			try {
 				const pages = await doc.pages.list();
 				expect(pages.pages[0].actions?.open?.root?.type).toBe("goto-embedded");
@@ -421,7 +421,7 @@ function runActionsConformance(runner, opts) {
 			}
 		});
 		test("attaches activation actions to AnnotationBase, including links", async () => {
-			const doc = await open(engine, opts, opts.fixtures.annotation);
+			const doc = await open$1(engine, opts, opts.fixtures.annotation);
 			try {
 				const firstPage = (await doc.pages.list()).pages[0];
 				const snapshot = await doc.page(firstPage.pageObjectNumber).annotations.list();
@@ -438,7 +438,7 @@ function runActionsConformance(runner, opts) {
 		test("classifies a /S /JavaScript link target, script staying on base.actions", async () => {
 			const fixture = opts.fixtures.javascriptLink;
 			if (!fixture) return;
-			const doc = await open(engine, opts, fixture);
+			const doc = await open$1(engine, opts, fixture);
 			try {
 				const firstPage = (await doc.pages.list()).pages[0];
 				const link = (await doc.page(firstPage.pageObjectNumber).annotations.list()).annotations.find((annotation) => annotation.subtype === "link");
@@ -451,7 +451,7 @@ function runActionsConformance(runner, opts) {
 			}
 		});
 		test("keeps field actions separate from merged widget events", async () => {
-			const doc = await open(engine, opts, opts.fixtures.field);
+			const doc = await open$1(engine, opts, opts.fixtures.field);
 			try {
 				const form = await doc.forms.list();
 				expect(form.fields).toHaveLength(1);
@@ -465,7 +465,7 @@ function runActionsConformance(runner, opts) {
 			}
 		});
 		test("carries interpreter payloads on every executable node", async () => {
-			const doc = await open(engine, opts, opts.fixtures.payloads);
+			const doc = await open$1(engine, opts, opts.fixtures.payloads);
 			try {
 				const page = (await doc.pages.list()).pages[0];
 				const snapshot = await doc.page(page.pageObjectNumber).annotations.list();
@@ -626,7 +626,7 @@ function runActionsConformance(runner, opts) {
 			}
 		});
 		test("degrades unreadable payloads to unknown with payload-dropped", async () => {
-			const doc = await open(engine, opts, opts.fixtures.payloads);
+			const doc = await open$1(engine, opts, opts.fixtures.payloads);
 			try {
 				const page = (await doc.pages.list()).pages[0];
 				const snapshot = await doc.page(page.pageObjectNumber).annotations.list();
@@ -650,7 +650,7 @@ function runActionsConformance(runner, opts) {
 			}
 		});
 		test("reads a destination-form /OpenAction as openDestination", async () => {
-			const doc = await open(engine, opts, opts.fixtures.openDestination);
+			const doc = await open$1(engine, opts, opts.fixtures.openDestination);
 			try {
 				expect(Boolean(doc.actions)).toBe(true);
 				const snapshot = await doc.actions.read();
@@ -670,7 +670,7 @@ function runActionsConformance(runner, opts) {
 		});
 	});
 }
-async function open(engine, opts, fixture) {
+async function open$1(engine, opts, fixture) {
 	if (opts.openKind === "bytes") return engine.open({
 		kind: "bytes",
 		id: fixture.id,
@@ -808,7 +808,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			if (engine) await engine.destroy();
 		});
 		test("create appends without shifting indices and leaves weak refs valid", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const before = await page.annotations.list();
@@ -844,7 +844,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("create + update honor annotation flags (set on create, merge on patch)", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const draft = {
@@ -879,7 +879,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("create shape annotations (circle + square) round-trip shape fields", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const circleDraft = {
@@ -960,7 +960,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("cloudy border (/BE) + rect differences (/RD) are tri-state", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const plainDraft = {
@@ -1039,7 +1039,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("update echoes the appearance verdict: moves preserve /AP, restyles re-bake", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const draft = {
@@ -1114,7 +1114,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("a partial /DA patch preserves the unpatched font members", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const draft = {
@@ -1170,7 +1170,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("box transform is tri-state: rect-only moves keep rotation, null flattens", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const draft = {
@@ -1231,7 +1231,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("create vertex + line annotations (polygon/polyline/line) round-trip geometry", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const polygonDraft = {
@@ -1362,7 +1362,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("create free-text + callout round-trip text/colour/intent fields", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const freeTextDraft = {
@@ -1458,7 +1458,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("update a free-text patches alignment + colours and is non-structural", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const created = await page.annotations.create({
@@ -1518,8 +1518,289 @@ function runAnnotationMutationConformance(runner, opts) {
 				await doc.close();
 			}
 		});
+		test("rich text: a plain draft reads back body-style paragraphs and a body from its font", async () => {
+			const doc = await openFixture$18(engine, opts);
+			try {
+				const created = await doc.page(fix.pageObjectNumber).annotations.create({
+					subtype: "free-text",
+					intent: "free-text",
+					contents: "Plain\rtext",
+					rect: shapeRect,
+					fontFamily: "helvetica-bold",
+					fontSize: 18,
+					textAlign: "center",
+					color: {
+						r: 0,
+						g: 0,
+						b: 0
+					}
+				});
+				expect(created.created.subtype).toBe("free-text");
+				if (created.created.subtype === "free-text") {
+					const rich = created.created.richText;
+					expect(created.created.fontFamily).toBe("helvetica-bold");
+					expect(rich.body.family).toBe("Helvetica");
+					expect(rich.body.weight).toBe(700);
+					expect(rich.body.italic).toBe(false);
+					expect(rich.body.size).toBe(18);
+					expect(rich.body.align).toBe("center");
+					expect(rich.paragraphs).toEqual([{ runs: [{ text: "Plain" }] }, { runs: [{ text: "text" }] }]);
+				}
+			} finally {
+				await doc.close();
+			}
+		});
+		test("rich text: a draft with runs round-trips the body, the runs and the plain projection", async () => {
+			const doc = await openFixture$18(engine, opts);
+			try {
+				const page = doc.page(fix.pageObjectNumber);
+				const created = await page.annotations.create({
+					subtype: "free-text",
+					intent: "free-text",
+					rect: shapeRect,
+					fontFamily: "helvetica",
+					fontSize: 12,
+					textAlign: "left",
+					color: {
+						r: 0,
+						g: 0,
+						b: 255
+					},
+					richText: {
+						body: {
+							family: "Helvetica",
+							size: 18,
+							color: "#102030"
+						},
+						paragraphs: [{ runs: [
+							{ text: "Hello " },
+							{
+								text: "bold",
+								style: { weight: 700 }
+							},
+							{
+								text: " red",
+								style: { color: "#FF0000" }
+							}
+						] }, {
+							align: "center",
+							runs: [{ text: "H" }, {
+								text: "2",
+								style: { script: "sub" }
+							}]
+						}]
+					}
+				});
+				expect(AnnotationCreateResultSchema.safeParse(created).success).toBe(true);
+				expect(created.created.subtype).toBe("free-text");
+				if (created.created.subtype === "free-text") {
+					const dto = created.created;
+					expect(dto.contents).toBe("Hello bold red\rH2");
+					expect(dto.fontFamily).toBe("helvetica");
+					expect(dto.fontSize).toBe(18);
+					expect(dto.color).toMatchObject({
+						r: 0,
+						g: 0,
+						b: 255
+					});
+					expect(dto.richText.body.color).toBe("#102030");
+					expect(dto.richText.paragraphs[0].runs).toEqual([
+						{ text: "Hello " },
+						{
+							text: "bold",
+							style: { weight: 700 }
+						},
+						{
+							text: " red",
+							style: { color: "#FF0000" }
+						}
+					]);
+					expect(dto.richText.paragraphs[1].align).toBe("center");
+					expect(dto.richText.paragraphs[1].runs[1]).toEqual({
+						text: "2",
+						style: { script: "sub" }
+					});
+				}
+				const listed = (await page.annotations.list()).annotations.find((a) => a.index === created.created.index);
+				expect(listed?.subtype).toBe("free-text");
+				if (listed?.subtype === "free-text") expect(listed.richText.paragraphs[0].runs[1]).toEqual({
+					text: "bold",
+					style: { weight: 700 }
+				});
+			} finally {
+				await doc.close();
+			}
+		});
+		test("rich text: paragraphs-only patch keeps the body; contents-only rewrites body-style paragraphs", async () => {
+			const doc = await openFixture$18(engine, opts);
+			try {
+				const page = doc.page(fix.pageObjectNumber);
+				const ref = (await page.annotations.create({
+					subtype: "free-text",
+					intent: "free-text",
+					rect: shapeRect,
+					fontFamily: "helvetica",
+					fontSize: 14,
+					textAlign: "center",
+					color: {
+						r: 0,
+						g: 0,
+						b: 0
+					},
+					richText: {
+						body: {
+							family: "Helvetica",
+							size: 14
+						},
+						paragraphs: [{ runs: [{ text: "a" }, {
+							text: "b",
+							style: { weight: 700 }
+						}] }]
+					}
+				})).created.ref;
+				const restyled = await page.annotations.update(ref, {
+					subtype: "free-text",
+					richText: { paragraphs: [{ runs: [{
+						text: "ab",
+						style: { italic: true }
+					}, { text: "c" }] }] }
+				});
+				expect(AnnotationUpdateResultSchema.safeParse(restyled).success).toBe(true);
+				expect(restyled.updated.subtype).toBe("free-text");
+				if (restyled.updated.subtype === "free-text") {
+					expect(restyled.updated.contents).toBe("abc");
+					expect(restyled.updated.richText.body.size).toBe(14);
+					expect(restyled.updated.richText.body.align).toBe("center");
+					expect(restyled.updated.textAlign).toBe("center");
+					expect(restyled.updated.richText.paragraphs[0].runs[0]).toEqual({
+						text: "ab",
+						style: { italic: true }
+					});
+				}
+				const rewritten = await page.annotations.update(ref, {
+					subtype: "free-text",
+					contents: "one\rtwo"
+				});
+				expect(rewritten.updated.subtype).toBe("free-text");
+				if (rewritten.updated.subtype === "free-text") {
+					expect(rewritten.updated.contents).toBe("one\rtwo");
+					expect(rewritten.updated.richText.paragraphs).toEqual([{ runs: [{ text: "one" }] }, { runs: [{ text: "two" }] }]);
+					expect(rewritten.updated.richText.body.size).toBe(14);
+				}
+				expect(rewritten.meta.weakRefsInvalidated).toBe(false);
+			} finally {
+				await doc.close();
+			}
+		});
+		test("rich text: fontSize / fontColor / fontFamily move the body while runs keep their deltas", async () => {
+			const doc = await openFixture$18(engine, opts);
+			try {
+				const page = doc.page(fix.pageObjectNumber);
+				const created = await page.annotations.create({
+					subtype: "free-text",
+					intent: "free-text",
+					rect: shapeRect,
+					fontFamily: "helvetica",
+					fontSize: 14,
+					textAlign: "left",
+					color: {
+						r: 0,
+						g: 0,
+						b: 0
+					},
+					richText: {
+						body: {
+							family: "Helvetica",
+							size: 14
+						},
+						paragraphs: [{ runs: [{ text: "a" }, {
+							text: "b",
+							style: { size: 30 }
+						}] }]
+					}
+				});
+				const updated = await page.annotations.update(created.created.ref, {
+					subtype: "free-text",
+					fontSize: 20,
+					fontColor: {
+						r: 255,
+						g: 0,
+						b: 0
+					},
+					fontFamily: "times-bold"
+				});
+				expect(updated.updated.subtype).toBe("free-text");
+				if (updated.updated.subtype === "free-text") {
+					const dto = updated.updated;
+					expect(dto.fontSize).toBe(20);
+					expect(dto.fontFamily).toBe("times-bold");
+					expect(dto.richText.body.size).toBe(20);
+					expect(dto.richText.body.color).toBe("#FF0000");
+					expect(dto.richText.body.family).toBe("Times");
+					expect(dto.richText.body.weight).toBe(700);
+					expect(dto.richText.paragraphs[0].runs[1]).toEqual({
+						text: "b",
+						style: { size: 30 }
+					});
+				}
+			} finally {
+				await doc.close();
+			}
+		});
+		test("rich text: contents and richText that disagree reject with InvalidArg; agreeing writes the runs", async () => {
+			const doc = await openFixture$18(engine, opts);
+			try {
+				const page = doc.page(fix.pageObjectNumber);
+				const created = await page.annotations.create({
+					subtype: "free-text",
+					intent: "free-text",
+					contents: "x",
+					rect: shapeRect,
+					fontFamily: "helvetica",
+					fontSize: 14,
+					textAlign: "left",
+					color: {
+						r: 0,
+						g: 0,
+						b: 0
+					}
+				});
+				const ref = created.created.ref;
+				let caught;
+				try {
+					await page.annotations.update(ref, {
+						subtype: "free-text",
+						contents: "stale",
+						richText: { paragraphs: [{ runs: [{ text: "fresh" }] }] }
+					});
+				} catch (err) {
+					caught = err;
+				}
+				expect(EngineError.is(caught, EngineErrorCode.InvalidArg)).toBe(true);
+				const after = (await page.annotations.list()).annotations.find((a) => a.index === created.created.index);
+				expect(after?.contents).toBe("x");
+				const agreed = await page.annotations.update(ref, {
+					subtype: "free-text",
+					contents: "fresh",
+					richText: { paragraphs: [{ runs: [{ text: "fr" }, {
+						text: "esh",
+						style: { weight: 700 }
+					}] }] }
+				});
+				expect(agreed.updated.subtype).toBe("free-text");
+				if (agreed.updated.subtype === "free-text") {
+					expect(agreed.updated.contents).toBe("fresh");
+					expect(agreed.updated.richText.paragraphs[0].runs[1]).toEqual({
+						text: "esh",
+						style: { weight: 700 }
+					});
+				}
+			} finally {
+				await doc.close();
+			}
+		});
 		test("create redact (area + text) round-trips label + colour fields", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const areaDraft = {
@@ -1599,7 +1880,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("update a redact patches the label and clears it, non-structurally", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const created = await page.annotations.create({
@@ -1676,7 +1957,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("create + update a caret round-trips color/opacity/rect differences", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const caretDraft = {
@@ -1756,7 +2037,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("update an ink annotation patches strokes + color and is non-structural", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const created = await page.annotations.create({
@@ -1807,7 +2088,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("ink highlight intent + blend round-trip and unrelated patches preserve blend", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const created = await page.annotations.create({
@@ -1850,7 +2131,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("update a polyline patches vertices + line endings and is non-structural", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const created = await page.annotations.create({
@@ -1899,7 +2180,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("update a shape annotation patches color and is non-structural", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const created = await page.annotations.create({
@@ -1948,7 +2229,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		if (opts.supportsAppearanceRasters) test("creating a shape bakes an /AP appearance the reader can rasterize", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const created = await page.annotations.create({
@@ -1978,7 +2259,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("update on a durable annotation is non-structural and never touches /NM", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const before = await page.annotations.list();
@@ -2004,7 +2285,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		if (fix.expectsWeakAnnotation) test("update on a weak annotation stamps a UUID v4 /NM and upgrades the ref", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const before = await page.annotations.list();
@@ -2034,7 +2315,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("delete by objectNumber removes the annotation and reports a stable id", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const draft = {
@@ -2064,7 +2345,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		if (fix.expectsWeakAnnotation) test("delete by index of a weak annotation reports deleted: null and refetch reason", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const weak = (await page.annotations.list()).annotations.find((a) => a.identityQuality === "weak");
@@ -2087,7 +2368,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("abort on create rejects with AbortError", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const draft = {
@@ -2103,7 +2384,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("update with a stale index revision throws InvalidReference", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const weak = (await page.annotations.list()).annotations.find((a) => a.identityQuality === "weak");
@@ -2130,7 +2411,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("move single durable annotation reorders within the page (single-as-batch)", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const aDraft = {
@@ -2174,7 +2455,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("move multi-block preserves caller-supplied order at the destination", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const ids = await Promise.all([
@@ -2213,7 +2494,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		if (fix.expectsWeakAnnotation) test("move on a weak annotation upgrades it to durable /NM (one rev bump for batch)", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const before = await page.annotations.list();
@@ -2238,7 +2519,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("move with a stale index revision rejects (locked rev-token guard)", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const a = await page.annotations.create({
@@ -2276,7 +2557,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("move with out-of-range toIndex rejects with InvalidArg", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const a = await page.annotations.create({
@@ -2300,7 +2581,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("move with duplicate refs rejects with InvalidArg", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const a = await page.annotations.create({
@@ -2323,7 +2604,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("abort on move rejects with AbortError", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const a = await page.annotations.create({
@@ -2344,7 +2625,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("a page move does NOT bump per-page RevisionTokens (weak refs survive reorder)", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				if (list.pages.length < 1) return;
@@ -2359,7 +2640,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("create a reply links /IRT and defaults /RT to \"reply\", reporting the parent", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const parent = await page.annotations.create({
@@ -2393,7 +2674,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("create a grouped subordinate writes /RT /Group", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const primary = await page.annotations.create({
@@ -2424,7 +2705,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("create link annotations round-trip uri, goto/xyz, goto/fitH, and dead targets", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const uri = await page.annotations.create({
@@ -2501,7 +2782,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("a link patch retargets in both directions (uri→goto, goto→uri) and moves the rect", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const created = await page.annotations.create({
@@ -2556,7 +2837,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("a link patch clears the target with null — a dead link on re-read", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const created = await page.annotations.create({
@@ -2595,7 +2876,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("a link grouped to a highlight round-trips /IRT + /RT /Group with its target", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const parent = await page.annotations.create({
@@ -2629,7 +2910,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("replace-text round-trips /IT and groups StrikeOut under its Caret", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const caret = await page.annotations.create({
@@ -2681,7 +2962,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("patch inReplyTo: null clears /IRT and /RT (back to top-level)", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const parent = await page.annotations.create({
@@ -2708,7 +2989,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("create with a cross-page /IRT parent throws InvalidArg", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const parent = await page.annotations.create({
@@ -2739,7 +3020,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("a review-status reply round-trips /State + /StateModel + /Subj", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const target = await page.annotations.create({
@@ -2773,7 +3054,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("a draft /State without /StateModel is rejected with InvalidArg", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				let caught;
@@ -2792,7 +3073,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("null-clear patches truly remove /State, /StateModel, /Subj and /Contents", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const note = await page.annotations.create({
@@ -2839,7 +3120,7 @@ function runAnnotationMutationConformance(runner, opts) {
 			}
 		});
 		test("custom state models round-trip verbatim", async () => {
-			const doc = await openFixture$15(engine, opts);
+			const doc = await openFixture$18(engine, opts);
 			try {
 				const page = doc.page(fix.pageObjectNumber);
 				const custom = await page.annotations.create({
@@ -2867,7 +3148,7 @@ async function beginWeakEditIfRequired(doc, pageObjectNumber, fix) {
 	if (doc.capabilities.weakAnnotationEditSessions !== "required" || !fix.expectsWeakAnnotation) return null;
 	return doc.annotations.beginWeakEdit([pageObjectNumber]);
 }
-async function openFixture$15(engine, opts) {
+async function openFixture$18(engine, opts) {
 	if (opts.openKind === "bytes") {
 		const bytes = await opts.fixture.bytes();
 		return engine.open({
@@ -3457,7 +3738,7 @@ function runAnnotationAppearanceConformance(runner, opts) {
 			if (engine) await engine.destroy();
 		});
 		test("renders the expected set of appearances with valid output", async () => {
-			const doc = await openFixture$14(engine, opts);
+			const doc = await openFixture$17(engine, opts);
 			try {
 				const { pageState, appearances } = await collect(doc, opts, useRaw);
 				expect(pageState.pageObjectNumber).toBe(opts.fixture.pageObjectNumber);
@@ -3484,7 +3765,7 @@ function runAnnotationAppearanceConformance(runner, opts) {
 			}
 		});
 		if (opts.fixture.expectsWeakAppearance) test("weak (index-only) annotations are emitted, not dropped", async () => {
-			const doc = await openFixture$14(engine, opts);
+			const doc = await openFixture$17(engine, opts);
 			try {
 				const { appearances } = await collect(doc, opts, useRaw);
 				const weak = appearances.find((a) => a.ref.kind === "index");
@@ -3494,7 +3775,7 @@ function runAnnotationAppearanceConformance(runner, opts) {
 			}
 		});
 		if (useRaw) test("rendered appearances are not blank (non-zero alpha)", async () => {
-			const doc = await openFixture$14(engine, opts);
+			const doc = await openFixture$17(engine, opts);
 			try {
 				const { appearances } = await collect(doc, opts, useRaw);
 				const anyVisible = appearances.some((a) => a.raster !== null && hasOpaquePixel(a.raster));
@@ -3504,7 +3785,7 @@ function runAnnotationAppearanceConformance(runner, opts) {
 			}
 		});
 		test("abort() rejects with AbortError", async () => {
-			const doc = await openFixture$14(engine, opts);
+			const doc = await openFixture$17(engine, opts);
 			try {
 				const page = doc.page(opts.fixture.pageObjectNumber);
 				const p = useRaw ? page.annotations.renderAppearances({ scale: 1 }) : page.annotations.renderAppearanceImages({
@@ -3559,7 +3840,7 @@ function hasOpaquePixel(raster) {
 	}
 	return false;
 }
-async function openFixture$14(engine, opts) {
+async function openFixture$17(engine, opts) {
 	if (opts.openKind === "bytes") {
 		const bytes = await opts.fixture.bytes();
 		return engine.open({
@@ -3628,7 +3909,7 @@ function runPageReorderConformance(runner, opts) {
 			if (engine) await engine.destroy();
 		});
 		test("pages.list() returns every page in display order, durable PONs only", async () => {
-			const doc = await openFixture$13(engine, opts);
+			const doc = await openFixture$16(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				expect(PageListSnapshotSchema.safeParse(list).success).toBe(true);
@@ -3647,7 +3928,7 @@ function runPageReorderConformance(runner, opts) {
 			}
 		});
 		test("pages.move() reorders pages and returns the full post-move order", async () => {
-			const doc = await openFixture$13(engine, opts);
+			const doc = await openFixture$16(engine, opts);
 			try {
 				const before = await doc.pages.list();
 				if (before.pages.length < 3) return;
@@ -3671,7 +3952,7 @@ function runPageReorderConformance(runner, opts) {
 			}
 		});
 		test("weak index-based annotation refs survive a page reorder", async () => {
-			const doc = await openFixture$13(engine, opts);
+			const doc = await openFixture$16(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				if (list.pages.length < 2) return;
@@ -3708,7 +3989,7 @@ function runPageReorderConformance(runner, opts) {
 			}
 		});
 		test("pages.move() rejects duplicate PONs with InvalidArg", async () => {
-			const doc = await openFixture$13(engine, opts);
+			const doc = await openFixture$16(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				if (list.pages.length < 1) return;
@@ -3725,7 +4006,7 @@ function runPageReorderConformance(runner, opts) {
 			}
 		});
 		test("pages.move() rejects out-of-range destIndex with InvalidArg", async () => {
-			const doc = await openFixture$13(engine, opts);
+			const doc = await openFixture$16(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				if (list.pages.length < 1) return;
@@ -3742,7 +4023,7 @@ function runPageReorderConformance(runner, opts) {
 			}
 		});
 		test("pages.move() rejects unknown PON with NotFound or InvalidArg", async () => {
-			const doc = await openFixture$13(engine, opts);
+			const doc = await openFixture$16(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				let bogus = 0;
@@ -3760,7 +4041,7 @@ function runPageReorderConformance(runner, opts) {
 			}
 		});
 		test("abort on pages.move() rejects with AbortError", async () => {
-			const doc = await openFixture$13(engine, opts);
+			const doc = await openFixture$16(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				if (list.pages.length < 1) return;
@@ -3774,7 +4055,7 @@ function runPageReorderConformance(runner, opts) {
 		});
 	});
 }
-async function openFixture$13(engine, opts) {
+async function openFixture$16(engine, opts) {
 	if (opts.openKind === "bytes") {
 		const bytes = await opts.fixture.bytes();
 		return engine.open({
@@ -3848,7 +4129,7 @@ function runPageRotateConformance(runner, opts) {
 			if (engine) await engine.destroy();
 		});
 		test("pages.rotate() sets the absolute rotation and returns the full layout", async () => {
-			const doc = await openFixture$12(engine, opts);
+			const doc = await openFixture$15(engine, opts);
 			try {
 				const before = await doc.pages.list();
 				const target = before.pages[0];
@@ -3867,7 +4148,7 @@ function runPageRotateConformance(runner, opts) {
 			}
 		});
 		test("absolute rotation is idempotent: setting the same value twice is a no-op", async () => {
-			const doc = await openFixture$12(engine, opts);
+			const doc = await openFixture$15(engine, opts);
 			try {
 				const pon = (await doc.pages.list()).pages[0].pageObjectNumber;
 				const first = await doc.pages.rotate([pon], 180);
@@ -3878,7 +4159,7 @@ function runPageRotateConformance(runner, opts) {
 			}
 		});
 		test("one rotation applies to EVERY listed page (the multi-select gesture)", async () => {
-			const doc = await openFixture$12(engine, opts);
+			const doc = await openFixture$15(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				if (list.pages.length < 2) return;
@@ -3890,7 +4171,7 @@ function runPageRotateConformance(runner, opts) {
 			}
 		});
 		test("weak index-based annotation refs survive a rotate (no revision bump)", async () => {
-			const doc = await openFixture$12(engine, opts);
+			const doc = await openFixture$15(engine, opts);
 			try {
 				const hostPon = (await doc.pages.list()).pages[0].pageObjectNumber;
 				const hostPage = doc.page(hostPon);
@@ -3920,7 +4201,7 @@ function runPageRotateConformance(runner, opts) {
 			}
 		});
 		test("pages.rotate() rejects an invalid rotation value with InvalidArg", async () => {
-			const doc = await openFixture$12(engine, opts);
+			const doc = await openFixture$15(engine, opts);
 			try {
 				const pon = (await doc.pages.list()).pages[0].pageObjectNumber;
 				let caught;
@@ -3935,7 +4216,7 @@ function runPageRotateConformance(runner, opts) {
 			}
 		});
 		test("pages.rotate() rejects duplicate PONs with InvalidArg", async () => {
-			const doc = await openFixture$12(engine, opts);
+			const doc = await openFixture$15(engine, opts);
 			try {
 				const pon = (await doc.pages.list()).pages[0].pageObjectNumber;
 				let caught;
@@ -3950,7 +4231,7 @@ function runPageRotateConformance(runner, opts) {
 			}
 		});
 		test("pages.rotate() rejects unknown PON with NotFound or InvalidArg", async () => {
-			const doc = await openFixture$12(engine, opts);
+			const doc = await openFixture$15(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				let bogus = 0;
@@ -3968,7 +4249,7 @@ function runPageRotateConformance(runner, opts) {
 			}
 		});
 		test("abort on pages.rotate() rejects with AbortError", async () => {
-			const doc = await openFixture$12(engine, opts);
+			const doc = await openFixture$15(engine, opts);
 			try {
 				const pon = (await doc.pages.list()).pages[0].pageObjectNumber;
 				const p = doc.pages.rotate([pon], 90);
@@ -3980,7 +4261,7 @@ function runPageRotateConformance(runner, opts) {
 		});
 	});
 }
-async function openFixture$12(engine, opts) {
+async function openFixture$15(engine, opts) {
 	if (opts.openKind === "bytes") {
 		const bytes = await opts.fixture.bytes();
 		return engine.open({
@@ -4043,7 +4324,7 @@ function runPageDeleteConformance(runner, opts) {
 			if (engine) await engine.destroy();
 		});
 		test("pages.delete() removes the page and returns the surviving layout", async () => {
-			const doc = await openFixture$11(engine, opts);
+			const doc = await openFixture$14(engine, opts);
 			try {
 				const before = await doc.pages.list();
 				if (before.pages.length < 2) return;
@@ -4064,7 +4345,7 @@ function runPageDeleteConformance(runner, opts) {
 			}
 		});
 		test("addressing a deleted page afterwards is a clean NotFound", async () => {
-			const doc = await openFixture$11(engine, opts);
+			const doc = await openFixture$14(engine, opts);
 			try {
 				const before = await doc.pages.list();
 				if (before.pages.length < 2) return;
@@ -4082,7 +4363,7 @@ function runPageDeleteConformance(runner, opts) {
 			}
 		});
 		test("surviving pages keep their weak index-based annotation refs", async () => {
-			const doc = await openFixture$11(engine, opts);
+			const doc = await openFixture$14(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				if (list.pages.length < 2) return;
@@ -4115,7 +4396,7 @@ function runPageDeleteConformance(runner, opts) {
 			}
 		});
 		test("deleting EVERY page is rejected with InvalidArg", async () => {
-			const doc = await openFixture$11(engine, opts);
+			const doc = await openFixture$14(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				let caught;
@@ -4130,7 +4411,7 @@ function runPageDeleteConformance(runner, opts) {
 			}
 		});
 		test("pages.delete() rejects duplicate PONs with InvalidArg", async () => {
-			const doc = await openFixture$11(engine, opts);
+			const doc = await openFixture$14(engine, opts);
 			try {
 				const pon = (await doc.pages.list()).pages[0].pageObjectNumber;
 				let caught;
@@ -4145,7 +4426,7 @@ function runPageDeleteConformance(runner, opts) {
 			}
 		});
 		test("pages.delete() rejects unknown PON with NotFound or InvalidArg", async () => {
-			const doc = await openFixture$11(engine, opts);
+			const doc = await openFixture$14(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				let bogus = 0;
@@ -4163,7 +4444,7 @@ function runPageDeleteConformance(runner, opts) {
 			}
 		});
 		test("abort on pages.delete() rejects with AbortError", async () => {
-			const doc = await openFixture$11(engine, opts);
+			const doc = await openFixture$14(engine, opts);
 			try {
 				const list = await doc.pages.list();
 				if (list.pages.length < 2) return;
@@ -4177,7 +4458,224 @@ function runPageDeleteConformance(runner, opts) {
 		});
 	});
 }
-async function openFixture$11(engine, opts) {
+async function openFixture$14(engine, opts) {
+	if (opts.openKind === "bytes") {
+		const bytes = await opts.fixture.bytes();
+		return engine.open({
+			kind: "bytes",
+			id: opts.fixture.id,
+			bytes
+		});
+	}
+	return engine.open({
+		kind: "id",
+		id: opts.fixture.cloudId ?? opts.fixture.id
+	});
+}
+//#endregion
+//#region src/conformance/runNamedPagesConformance.ts
+/**
+* Named-pages conformance: the catalog's `/Names /Pages` registry as LAYOUT
+* data. Locks the invariants both engines must share — do not loosen
+* without re-reading `NamedPageEntry` and `PageNameResult`:
+*
+*   1. `pages.list().namedPages` is present (possibly empty) and every
+*      registration resolves to a page in `pages`, a template, or is
+*      reported dangling — never silently dropped.
+*   2. `pages.setName()` creates or replaces by decoded key (idempotent),
+*      `replace` renames in one job, and the result IS the new layout.
+*   3. `pages.removeName()` drops the registration and nothing else.
+*   4. Deleting a page removes every registration pointing at it — inside
+*      the delete, with no plugin in the loop.
+*   5. Non-ASCII keys round-trip unchanged (Acrobat writes UTF-16 + BOM).
+*
+* Skips cleanly when the engine does not implement the optional members.
+*/
+function runNamedPagesConformance(runner, opts) {
+	const { describe, test, beforeAll, afterAll, expect } = runner;
+	describe(`named pages conformance: ${opts.label}`, () => {
+		let engine;
+		beforeAll(async () => {
+			engine = await opts.makeEngine();
+		});
+		afterAll(async () => {
+			if (engine) await engine.destroy();
+		});
+		test("pages.list() carries namedPages and every entry resolves", async () => {
+			const doc = await openFixture$13(engine, opts);
+			try {
+				const layout = await doc.pages.list();
+				PageListSnapshotSchema.parse(layout);
+				expect(Array.isArray(layout.namedPages)).toBe(true);
+				const pons = new Set(layout.pages.map((page) => page.pageObjectNumber));
+				for (const entry of layout.namedPages ?? []) {
+					expect(entry.name.length > 0).toBe(true);
+					if (entry.target.kind === "page") expect(pons.has(entry.target.pageObjectNumber)).toBe(true);
+				}
+			} finally {
+				await doc.close();
+			}
+		});
+		test("pages.setName() registers, replaces by key, and renames via `replace`", async () => {
+			const doc = await openFixture$13(engine, opts);
+			try {
+				if (!doc.pages.setName) return;
+				const before = await doc.pages.list();
+				const [first, second] = before.pages;
+				const baseline = (before.namedPages ?? []).length;
+				const created = await doc.pages.setName({
+					name: "Approved=Goedgekeurd",
+					pageObjectNumber: first.pageObjectNumber
+				});
+				PageNameResultSchema.parse(created);
+				expect(created.layout.pages.length).toBe(before.pages.length);
+				expect(find(created, "Approved=Goedgekeurd")).toEqual({
+					kind: "page",
+					pageObjectNumber: first.pageObjectNumber
+				});
+				expect((created.layout.namedPages ?? []).length).toBe(baseline + 1);
+				if (created.cache) {
+					expect(created.cache.docVersion > created.cache.previousDocVersion).toBe(true);
+					expect(created.cache.layoutVersion > 0).toBe(true);
+				}
+				const listed = await doc.pages.list();
+				expect(listed.namedPages).toEqual(created.layout.namedPages);
+				const replaced = await doc.pages.setName({
+					name: "Approved=Goedgekeurd",
+					pageObjectNumber: second.pageObjectNumber
+				});
+				expect(find(replaced, "Approved=Goedgekeurd")).toEqual({
+					kind: "page",
+					pageObjectNumber: second.pageObjectNumber
+				});
+				expect((replaced.layout.namedPages ?? []).length).toBe(baseline + 1);
+				const renamed = await doc.pages.setName({
+					name: "Approved=Approved",
+					pageObjectNumber: second.pageObjectNumber,
+					replace: "Approved=Goedgekeurd"
+				});
+				expect(find(renamed, "Approved=Goedgekeurd")).toBe(void 0);
+				expect(find(renamed, "Approved=Approved")).toEqual({
+					kind: "page",
+					pageObjectNumber: second.pageObjectNumber
+				});
+				expect((renamed.layout.namedPages ?? []).length).toBe(baseline + 1);
+			} finally {
+				await doc.close();
+			}
+		});
+		test("non-ASCII keys round-trip through set → list", async () => {
+			const doc = await openFixture$13(engine, opts);
+			try {
+				if (!doc.pages.setName) return;
+				const before = await doc.pages.list();
+				const key = "Stämpel=Stämpel 日本";
+				const result = await doc.pages.setName({
+					name: key,
+					pageObjectNumber: before.pages[0].pageObjectNumber
+				});
+				expect(find(result, key)).toEqual({
+					kind: "page",
+					pageObjectNumber: before.pages[0].pageObjectNumber
+				});
+				const listed = await doc.pages.list();
+				expect((listed.namedPages ?? []).some((entry) => entry.name === key)).toBe(true);
+			} finally {
+				await doc.close();
+			}
+		});
+		test("pages.removeName() drops the registration and keeps the page", async () => {
+			const doc = await openFixture$13(engine, opts);
+			try {
+				if (!doc.pages.setName || !doc.pages.removeName) return;
+				const before = await doc.pages.list();
+				await doc.pages.setName({
+					name: "Draft=Concept",
+					pageObjectNumber: before.pages[0].pageObjectNumber
+				});
+				const removed = await doc.pages.removeName({ name: "Draft=Concept" });
+				PageNameResultSchema.parse(removed);
+				expect(find(removed, "Draft=Concept")).toBe(void 0);
+				expect(removed.layout.pages.length).toBe(before.pages.length);
+				await expect(doc.pages.removeName({ name: "Draft=Concept" })).rejects.toMatchObject({ code: EngineErrorCode.NotFound });
+			} finally {
+				await doc.close();
+			}
+		});
+		test("pages.setName() rejects an empty name and an unknown page", async () => {
+			const doc = await openFixture$13(engine, opts);
+			try {
+				if (!doc.pages.setName) return;
+				const before = await doc.pages.list();
+				await expect(doc.pages.setName({
+					name: "",
+					pageObjectNumber: before.pages[0].pageObjectNumber
+				})).rejects.toMatchObject({ code: EngineErrorCode.InvalidArg });
+				let unknownPage = null;
+				try {
+					await doc.pages.setName({
+						name: "Ghost=Ghost",
+						pageObjectNumber: 987654321
+					});
+				} catch (error) {
+					unknownPage = error;
+				}
+				expect(EngineError.is(unknownPage, EngineErrorCode.NotFound) || EngineError.is(unknownPage, EngineErrorCode.InvalidArg)).toBe(true);
+			} finally {
+				await doc.close();
+			}
+		});
+		test("deleting a page removes every registration pointing at it", async () => {
+			const doc = await openFixture$13(engine, opts);
+			try {
+				if (!doc.pages.setName) return;
+				const before = await doc.pages.list();
+				if (before.pages.length < 2) return;
+				const victim = before.pages[1].pageObjectNumber;
+				const survivor = before.pages[0].pageObjectNumber;
+				await doc.pages.setName({
+					name: "Victim=One",
+					pageObjectNumber: victim
+				});
+				await doc.pages.setName({
+					name: "Victim=Two",
+					pageObjectNumber: victim
+				});
+				await doc.pages.setName({
+					name: "Survivor",
+					pageObjectNumber: survivor
+				});
+				const deleted = await doc.pages.delete([victim]);
+				const names = (deleted.layout.namedPages ?? []).map((entry) => entry.name);
+				expect(names.includes("Victim=One")).toBe(false);
+				expect(names.includes("Victim=Two")).toBe(false);
+				expect(names).toContain("Survivor");
+				expect((deleted.layout.namedPages ?? []).some((entry) => entry.target.kind === "dangling")).toBe(false);
+			} finally {
+				await doc.close();
+			}
+		});
+		test("abort on pages.setName() rejects with AbortError", async () => {
+			const doc = await openFixture$13(engine, opts);
+			try {
+				if (!doc.pages.setName) return;
+				const before = await doc.pages.list();
+				const promise = doc.pages.setName({
+					name: "Aborted=Aborted",
+					pageObjectNumber: before.pages[0].pageObjectNumber
+				});
+				promise.abort();
+				await expect(promise).rejects.toBeInstanceOf(AbortError);
+			} finally {
+				await doc.close();
+			}
+		});
+	});
+}
+function find(result, name) {
+	return (result.layout.namedPages ?? []).find((entry) => entry.name === name)?.target;
+}
+async function openFixture$13(engine, opts) {
 	if (opts.openKind === "bytes") {
 		const bytes = await opts.fixture.bytes();
 		return engine.open({
@@ -4192,6 +4690,243 @@ async function openFixture$11(engine, opts) {
 	});
 }
 //#endregion
+//#region src/conformance/runAnnotationFlattenConformance.ts
+const square$1 = (left, bottom) => ({
+	subtype: "square",
+	rect: {
+		left,
+		bottom,
+		right: left + 40,
+		top: bottom + 40
+	},
+	color: {
+		r: 20,
+		g: 40,
+		b: 220
+	},
+	strokeWidth: 2
+});
+/**
+* Selective annotation flatten: `page(pon).annotations.flatten(refs)` is
+* `pages.flatten` for a chosen set. Locks, on every engine:
+*   1. only the given refs are painted and removed; the rest of the page's
+*      annotations are untouched;
+*   2. per-ref status (`applied` / `skipped`), one `annotations.flattened`
+*      event, a `meta` with that page's new pins, layout unchanged;
+*   3. a hidden ref is `skipped`; a ref on another page rejects `InvalidArg`
+*      with nothing mutated.
+* Skips cleanly when the engine does not implement the optional member.
+*/
+function runAnnotationFlattenConformance(runner, opts) {
+	const { describe, test, beforeAll, afterAll, expect } = runner;
+	describe(`annotation flatten conformance: ${opts.label}`, () => {
+		let engine;
+		beforeAll(async () => {
+			engine = await opts.makeEngine();
+		});
+		afterAll(async () => {
+			if (engine) await engine.destroy();
+		});
+		test("flattens exactly the given refs and reports per-ref status", async () => {
+			const doc = await openFixture$12(engine, opts);
+			try {
+				const layoutBefore = await doc.pages.list();
+				const pon = layoutBefore.pages[0].pageObjectNumber;
+				const page = doc.page(pon);
+				if (!page.annotations.flatten) return;
+				const a = (await page.annotations.create(square$1(20, 20))).created.ref;
+				const b = (await page.annotations.create(square$1(80, 20))).created.ref;
+				const c = (await page.annotations.create(square$1(140, 20))).created.ref;
+				await page.annotations.update(c, {
+					subtype: "square",
+					flags: { hidden: true }
+				});
+				const before = await page.annotations.list();
+				const events = [];
+				const unsubscribe = doc.events.subscribe((event) => {
+					if (event.type === "annotations.flattened") events.push(event);
+				});
+				const result = await page.annotations.flatten([a, c], "display");
+				unsubscribe();
+				expect(AnnotationFlattenResultSchema.safeParse(result).success).toBe(true);
+				expect(result.pageObjectNumber).toBe(pon);
+				expect(result.usage).toBe("display");
+				expect(result.results.map((item) => item.status)).toEqual(["applied", "skipped"]);
+				expect(result.meta === null).toBe(false);
+				expect(events).toHaveLength(1);
+				expect(await doc.pages.list()).toEqual(layoutBefore);
+				const after = await page.annotations.list();
+				expect(after.annotations.length).toBe(before.annotations.length - 1);
+				expect(after.annotations.some((dto) => sameRef(dto.ref, b))).toBe(true);
+				expect(after.annotations.some((dto) => sameRef(dto.ref, c))).toBe(true);
+				expect(after.annotations.some((dto) => sameRef(dto.ref, a))).toBe(false);
+				expect(after.pageState.revision.generation > before.pageState.revision.generation).toBe(true);
+			} finally {
+				await doc.close();
+			}
+		});
+		test("a ref on another page rejects InvalidArg and mutates nothing", async () => {
+			const doc = await openFixture$12(engine, opts);
+			try {
+				const layout = await doc.pages.list();
+				if (layout.pages.length < 2) return;
+				const page0 = doc.page(layout.pages[0].pageObjectNumber);
+				const page1 = doc.page(layout.pages[1].pageObjectNumber);
+				if (!page0.annotations.flatten) return;
+				const own = (await page0.annotations.create(square$1(20, 100))).created.ref;
+				const foreign = (await page1.annotations.create(square$1(20, 100))).created.ref;
+				const countBefore = (await page0.annotations.list()).annotations.length;
+				await expect(page0.annotations.flatten([own, foreign])).rejects.toMatchObject({ code: EngineErrorCode.InvalidArg });
+				expect((await page0.annotations.list()).annotations.length).toBe(countBefore);
+			} finally {
+				await doc.close();
+			}
+		});
+		test("an empty ref list rejects InvalidArg; an unknown ref rejects", async () => {
+			const doc = await openFixture$12(engine, opts);
+			try {
+				const pon = (await doc.pages.list()).pages[0].pageObjectNumber;
+				const page = doc.page(pon);
+				if (!page.annotations.flatten) return;
+				await expect(page.annotations.flatten([])).rejects.toMatchObject({ code: EngineErrorCode.InvalidArg });
+				let unknown = null;
+				try {
+					await page.annotations.flatten([{
+						kind: "objectNumber",
+						pageObjectNumber: pon,
+						annotObjectNumber: 987654321
+					}]);
+				} catch (error) {
+					unknown = error;
+				}
+				expect(EngineError.is(unknown, EngineErrorCode.NotFound) || EngineError.is(unknown, EngineErrorCode.InvalidArg) || EngineError.is(unknown, EngineErrorCode.InvalidReference)).toBe(true);
+			} finally {
+				await doc.close();
+			}
+		});
+	});
+}
+function sameRef(left, right) {
+	if (left.kind === "objectNumber" && right.kind === "objectNumber") return left.annotObjectNumber === right.annotObjectNumber;
+	return JSON.stringify(left) === JSON.stringify(right);
+}
+async function openFixture$12(engine, opts) {
+	if (opts.openKind === "bytes") return engine.open({
+		kind: "bytes",
+		id: opts.fixture.id,
+		bytes: await opts.fixture.bytes()
+	});
+	return engine.open({
+		kind: "id",
+		id: opts.fixture.cloudId ?? opts.fixture.id
+	});
+}
+//#endregion
+//#region src/conformance/runAnnotationAppearanceExportConformance.ts
+const PDF_MAGIC$1 = [
+	37,
+	80,
+	68,
+	70
+];
+const square = (left, bottom, size = 40) => ({
+	subtype: "square",
+	rect: {
+		left,
+		bottom,
+		right: left + size,
+		top: bottom + size
+	},
+	color: {
+		r: 220,
+		g: 20,
+		b: 20
+	},
+	strokeWidth: 2
+});
+/**
+* `page(pon).annotations.exportAppearance(refs)`: the chosen annotations'
+* appearances as ONE single-page PDF sized to their union /Rect. Locks:
+*   1. bytes are a PDF; the source page is untouched (no mutation, no
+*      revision bump);
+*   2. re-opened (local engines), the page is exactly the union size and the
+*      requested count of annotations is gone — they are content now;
+*   3. a ref on another page rejects `InvalidArg`; an empty list rejects.
+* Skips cleanly when the engine does not implement the optional member.
+*/
+function runAnnotationAppearanceExportConformance(runner, opts) {
+	const { describe, test, beforeAll, afterAll, expect } = runner;
+	describe(`annotation appearance export conformance: ${opts.label}`, () => {
+		let engine;
+		beforeAll(async () => {
+			engine = await opts.makeEngine();
+		});
+		afterAll(async () => {
+			if (engine) await engine.destroy();
+		});
+		test("returns a single-page PDF sized to the union rect; source untouched", async () => {
+			const doc = await openFixture$11(engine, opts);
+			let exported = null;
+			try {
+				const pon = (await doc.pages.list()).pages[0].pageObjectNumber;
+				const page = doc.page(pon);
+				if (!page.annotations.exportAppearance) return;
+				const a = (await page.annotations.create(square(20, 20))).created.ref;
+				const b = (await page.annotations.create(square(100, 60, 30))).created.ref;
+				const before = await page.annotations.list();
+				const bytes = await page.annotations.exportAppearance([a, b]);
+				expect(bytes.length > 4).toBe(true);
+				expect([...bytes.subarray(0, 4)]).toEqual(PDF_MAGIC$1);
+				const after = await page.annotations.list();
+				expect(after.annotations.length).toBe(before.annotations.length);
+				expect(after.pageState.revision.generation).toBe(before.pageState.revision.generation);
+				if (opts.openKind !== "bytes") return;
+				exported = await engine.open({
+					kind: "bytes",
+					id: `${opts.fixture.id}-appearance`,
+					bytes
+				});
+				const layout = await exported.pages.list();
+				expect(layout.pageCount).toBe(1);
+				expect(Math.round(layout.pages[0].size.width)).toBe(110);
+				expect(Math.round(layout.pages[0].size.height)).toBe(70);
+				const exportedPage = exported.page(layout.pages[0].pageObjectNumber);
+				expect((await exportedPage.annotations.list()).annotations).toHaveLength(0);
+			} finally {
+				if (exported) await exported.close();
+				await doc.close();
+			}
+		});
+		test("a ref on another page and an empty list reject InvalidArg", async () => {
+			const doc = await openFixture$11(engine, opts);
+			try {
+				const layout = await doc.pages.list();
+				const page0 = doc.page(layout.pages[0].pageObjectNumber);
+				if (!page0.annotations.exportAppearance) return;
+				await expect(page0.annotations.exportAppearance([])).rejects.toMatchObject({ code: EngineErrorCode.InvalidArg });
+				if (layout.pages.length < 2) return;
+				const page1 = doc.page(layout.pages[1].pageObjectNumber);
+				const own = (await page0.annotations.create(square(20, 100))).created.ref;
+				const foreign = (await page1.annotations.create(square(20, 100))).created.ref;
+				await expect(page0.annotations.exportAppearance([own, foreign])).rejects.toMatchObject({ code: EngineErrorCode.InvalidArg });
+			} finally {
+				await doc.close();
+			}
+		});
+	});
+}
+async function openFixture$11(engine, opts) {
+	if (opts.openKind === "bytes") return engine.open({
+		kind: "bytes",
+		id: opts.fixture.id,
+		bytes: await opts.fixture.bytes()
+	});
+	return engine.open({
+		kind: "id",
+		id: opts.fixture.cloudId ?? opts.fixture.id
+	});
+}
+//#endregion
 //#region src/conformance/runPageFlattenConformance.ts
 /** Transport-neutral coverage for the content + annotation flatten rail. */
 function runPageFlattenConformance(runner, opts) {
@@ -6220,6 +6955,790 @@ function diffAnnotation(i, a, b, errs) {
 	if (a.nm !== b.nm) errs.push(`annotations[${i}].nm mismatch: ${a.nm} vs ${b.nm}`);
 }
 //#endregion
-export { TEXT_DIVERGENCE_CASES, diffAnnotationListSnapshot, diffAnnotationListSnapshotAll, runActionsConformance, runAnnotationAppearanceConformance, runAnnotationMutationConformance, runAnnotationReadConformance, runAttachmentConformance, runDocumentEventsConformance, runFormConformance, runMetadataConformance, runPageDeleteConformance, runPageExtractConformance, runPageFlattenConformance, runPageGeometryOrientationConformance, runPageInsertBlankConformance, runPageInsertConformance, runPageReorderConformance, runPageRotateConformance, runPageTextConformance, runPieceInfoConformance, runRedactionApplyConformance, runSearchConformance, runTextDivergenceConformance };
+//#region src/conformance/runSignatureConformance.ts
+/**
+* Digital signatures, read side. The service is OPTIONAL on the contract
+* (`downloadLayer?` pattern) — the suite runs only where the engine
+* provides it.
+*
+* Invariants:
+*   1. Byte facts describe the LOADED bytes: a revision is a byte prefix,
+*      a whole-revision signature seals exactly one, the digest over its
+*      `/ByteRange` is what the file's bytes hash to, and an unsaved edit
+*      changes none of it.
+*   2. Protection is derived from the signatures in the file and applied
+*      as document-derived capabilities: a certification with permission 2
+*      takes page assembly and annotation writes away, a FieldMDP freezes
+*      the fields it names, a rewrite save is refused. Under
+*      `signedDocumentPolicy: 'permit'` none of that applies and the
+*      analysis is unchanged.
+*   3. The same answers come from a plain session and from a layer
+*      session over the same bytes.
+*/
+function runSignatureConformance(runner, opts) {
+	const { describe, test, beforeAll, afterAll, expect } = runner;
+	describe(`signatures conformance: ${opts.label}`, () => {
+		let engine;
+		let permitEngine = null;
+		let supported = false;
+		beforeAll(async () => {
+			engine = await opts.makeEngine();
+			const probe = await open(engine, opts, opts.fixtures.unsignedForm);
+			supported = probe.signatures !== void 0;
+			await probe.close();
+			if (supported && opts.makePermitEngine) permitEngine = await opts.makePermitEngine();
+		});
+		afterAll(async () => {
+			if (permitEngine) await permitEngine.destroy();
+			if (engine) await engine.destroy();
+		});
+		test("an unsigned form has no signatures and no protection; version() hashes the loaded bytes", async () => {
+			if (!supported) return;
+			const bytes = await opts.fixtures.unsignedForm.bytes();
+			const doc = await open(engine, opts, opts.fixtures.unsignedForm);
+			try {
+				const snapshot = await doc.signatures.list();
+				expect(snapshot.chainValid).toBe(true);
+				expect(snapshot.signatures).toEqual([]);
+				expect(snapshot.revisions.length >= 1).toBe(true);
+				expect(snapshot.protection.judged).toBeNull();
+				expect(snapshot.protection.enforced).toBeNull();
+				expect(snapshot.protection.certification).toBeNull();
+				expect(snapshot.protection.fieldLocks).toEqual([]);
+				expect(doc.security.allows("doc.pages.assemble")).toBe(true);
+				if (doc.version) {
+					const version = await doc.version();
+					expect(version.byteLength).toBe(bytes.byteLength);
+					expect(version.sha256).toBe(await sha256Hex(bytes));
+				}
+				let caught;
+				try {
+					await doc.signatures.contents({
+						kind: "fqn",
+						name: "no-such-field"
+					});
+				} catch (err) {
+					caught = err;
+				}
+				expect(EngineError.is(caught, EngineErrorCode.NotFound)).toBe(true);
+			} finally {
+				await doc.close();
+			}
+		});
+		test("two approval signatures: revisions, coverage, digests, contents, revision bytes", async () => {
+			if (!supported) return;
+			const fixture = opts.fixtures.twoApprovals;
+			const bytes = await fixture.bytes();
+			const doc = await open(engine, opts, fixture);
+			try {
+				const snapshot = await doc.signatures.list();
+				expect(snapshot.chainValid).toBe(true);
+				expect(snapshot.revisions).toHaveLength(3);
+				expect(snapshot.signatures).toHaveLength(2);
+				expect(snapshot.revisions[2].end).toBe(bytes.byteLength);
+				for (const [i, sig] of snapshot.signatures.entries()) {
+					expect(sig.index).toBe(i);
+					expect(sig.signed).toBe(true);
+					expect(sig.kind).toBe("signature");
+					expect(sig.field.kind).toBe("objectNumber");
+					expect(sig.fieldName).toBe(fixture.fieldNames[i]);
+					expect(sig.coverage).toBe("whole-revision");
+					expect(sig.revisionIndex).toBe(i + 1);
+					expect(snapshot.revisions[i + 1].signatureIndex).toBe(i);
+					expect(sig.subFilter).toBe("ETSI.CAdES.detached");
+					expect(typeof sig.signer.claimedTime).toBe("string");
+					expect(sig.docMdp).toBeNull();
+					expect(sig.catalogCertification).toBe(false);
+					expect(sig.contentsSize > 0).toBe(true);
+					expect(sig.byteRange[0]).toBe(0);
+					expect(sig.byteRange[2] + sig.byteRange[3]).toBe(snapshot.revisions[i + 1].end);
+				}
+				expect(snapshot.protection.judged).toBe("annotate");
+				expect(snapshot.protection.enforced).toBeNull();
+				expect(snapshot.protection.certification).toBeNull();
+				expect(snapshot.protection.fieldLocks).toEqual([]);
+				const first = snapshot.signatures[0];
+				const contents = await doc.signatures.contents(first.field);
+				expect(contents.byteLength).toBe(first.contentsSize);
+				expect(contents[0]).toBe(48);
+				const [a, b, c, d] = first.byteRange;
+				const sealed = await doc.signatures.revisionBytes(1);
+				expect(sealed.byteLength).toBe(snapshot.revisions[1].end);
+				expect(bytesEqual(sealed, bytes.subarray(0, sealed.byteLength))).toBe(true);
+				const signedBytes = concat(sealed.subarray(a, a + b), sealed.subarray(c, c + d));
+				const digest = await doc.signatures.digest(first.field, "sha256");
+				expect(digest.byteLength).toBe(32);
+				expect(toHex(digest)).toBe(await sha256Hex(signedBytes));
+				expect((await doc.signatures.digest(first.field, "sha512")).byteLength).toBe(64);
+				const byName = await doc.signatures.digest({
+					kind: "fqn",
+					name: first.fieldName
+				}, "sha256");
+				expect(toHex(byName)).toBe(toHex(digest));
+				const text = (await doc.forms.list()).fields.find((f) => f.name === fixture.textField);
+				expect(text).toBeTruthy();
+				await doc.forms.setValue({
+					kind: "objectNumber",
+					fieldObjectNumber: text.fieldObjectNumber
+				}, {
+					type: "text",
+					value: "unsaved"
+				});
+				const again = await doc.signatures.list();
+				expect(again.revisions).toEqual(snapshot.revisions);
+				expect(again.signatures.map((s) => [
+					s.coverage,
+					s.revisionIndex,
+					s.byteRange
+				])).toEqual(snapshot.signatures.map((s) => [
+					s.coverage,
+					s.revisionIndex,
+					s.byteRange
+				]));
+				expect(toHex(await doc.signatures.digest(first.field, "sha256"))).toBe(toHex(digest));
+				if (doc.version) expect((await doc.version()).sha256).toBe(await sha256Hex(bytes));
+			} finally {
+				await doc.close();
+			}
+		});
+		test("a certification takes structural capabilities away; permit lifts it", async () => {
+			if (!supported) return;
+			const fixture = opts.fixtures.certified;
+			const doc = await open(engine, opts, fixture);
+			try {
+				const snapshot = await doc.signatures.list();
+				const signed = snapshot.signatures.filter((s) => s.signed);
+				expect(signed).toHaveLength(1);
+				const sig = signed[0];
+				expect(sig.fieldName).toBe(fixture.fieldName);
+				expect(sig.coverage).toBe("whole-revision");
+				expect(sig.docMdp).toBe(2);
+				expect(sig.catalogCertification).toBe(true);
+				expect(snapshot.protection.judged).toBe("fill");
+				expect(snapshot.protection.enforced).toBe("fill");
+				expect(snapshot.protection.certification).toEqual({
+					signatureIndex: sig.index,
+					permission: 2
+				});
+				expect(doc.security.allows("doc.forms.read")).toBe(true);
+				expect(doc.security.allows("doc.forms.fill")).toBe(true);
+				expect(doc.security.allows("doc.annotate.modify")).toBe(false);
+				expect(doc.security.allows("doc.pages.assemble")).toBe(false);
+				expect(doc.security.allows("doc.redact")).toBe(false);
+				const list = await doc.pages.list();
+				let caught;
+				try {
+					await doc.pages.delete([list.pages[0].pageObjectNumber]);
+				} catch (err) {
+					caught = err;
+				}
+				expect(EngineError.is(caught, EngineErrorCode.ProtectedDocument)).toBe(true);
+				caught = void 0;
+				try {
+					await doc.download({ mode: "rewrite" });
+				} catch (err) {
+					caught = err;
+				}
+				expect(EngineError.is(caught, EngineErrorCode.ProtectedDocument)).toBe(true);
+				const saved = await doc.download();
+				expect(saved.byteLength >= snapshot.revisions[1].end).toBe(true);
+			} finally {
+				await doc.close();
+			}
+			if (!permitEngine) return;
+			const permitted = await open(permitEngine, opts, fixture);
+			try {
+				const snapshot = await permitted.signatures.list();
+				expect(snapshot.protection.judged).toBe("fill");
+				expect(snapshot.protection.enforced).toBe("fill");
+				expect(permitted.security.allows("doc.pages.assemble")).toBe(true);
+				const rewritten = await permitted.download({ mode: "rewrite" });
+				expect(rewritten.byteLength > 0).toBe(true);
+			} finally {
+				await permitted.close();
+			}
+		});
+		test("a FieldMDP freezes the fields it names; permit lifts it", async () => {
+			if (!supported) return;
+			const fixture = opts.fixtures.fieldMdp;
+			const doc = await open(engine, opts, fixture);
+			const lockedRef = {
+				kind: "fqn",
+				name: fixture.lockedField
+			};
+			try {
+				const snapshot = await doc.signatures.list();
+				const sig = snapshot.signatures[0];
+				expect(sig.fieldName).toBe(fixture.fieldName);
+				expect(sig.fieldMdp).toEqual({
+					action: "include",
+					fields: [fixture.lockedField]
+				});
+				expect(snapshot.protection.judged).toBe("annotate");
+				expect(snapshot.protection.enforced).toBeNull();
+				expect(snapshot.protection.fieldLocks[0]).toEqual({
+					signatureIndex: 0,
+					source: "fieldmdp",
+					spec: {
+						action: "include",
+						fields: [fixture.lockedField]
+					}
+				});
+				for (const lock of snapshot.protection.fieldLocks) {
+					expect(lock.signatureIndex).toBe(0);
+					expect(lock.spec).toEqual({
+						action: "include",
+						fields: [fixture.lockedField]
+					});
+				}
+				expect(doc.security.allows("doc.forms.fill")).toBe(true);
+				let caught;
+				try {
+					await doc.forms.setValue(lockedRef, {
+						type: "text",
+						value: "changed"
+					});
+				} catch (err) {
+					caught = err;
+				}
+				expect(EngineError.is(caught, EngineErrorCode.ProtectedDocument)).toBe(true);
+				const field = await doc.forms.get(lockedRef);
+				expect(field.family).toBe("text");
+				expect(field.value === "changed").toBe(false);
+			} finally {
+				await doc.close();
+			}
+			if (!permitEngine) return;
+			const permitted = await open(permitEngine, opts, fixture);
+			try {
+				const result = await permitted.forms.setValue(lockedRef, {
+					type: "text",
+					value: "changed"
+				});
+				expect(result.field.name).toBe(fixture.lockedField);
+			} finally {
+				await permitted.close();
+			}
+		});
+		test("well-formed ranges that seal no revision are partial, with no revision index", async () => {
+			if (!supported) return;
+			const doc = await open(engine, opts, opts.fixtures.partialChain);
+			try {
+				const snapshot = await doc.signatures.list();
+				expect(snapshot.chainValid).toBe(true);
+				expect(snapshot.revisions).toHaveLength(3);
+				expect(snapshot.signatures).toHaveLength(2);
+				for (const sig of snapshot.signatures) {
+					expect(sig.signed).toBe(true);
+					expect(sig.coverage).toBe("partial");
+					expect(sig.revisionIndex).toBeNull();
+					expect(sig.contentsSize).toBe(13);
+					expect((await doc.signatures.contents(sig.field)).byteLength).toBe(13);
+					expect((await doc.signatures.digest(sig.field, "sha256")).byteLength).toBe(32);
+				}
+				expect(snapshot.revisions.every((r) => r.signatureIndex === null)).toBe(true);
+				expect(snapshot.protection.judged).toBe("annotate");
+				expect(snapshot.protection.enforced).toBeNull();
+				let caught;
+				try {
+					await doc.signatures.revisionBytes(3);
+				} catch (err) {
+					caught = err;
+				}
+				expect(EngineError.is(caught, EngineErrorCode.NotFound)).toBe(true);
+			} finally {
+				await doc.close();
+			}
+		});
+		if (opts.openKind !== "id") {
+			runSigningTests(runner, opts, () => engine, () => supported);
+			runAnalysisTests(runner, opts, () => engine, () => permitEngine, () => supported);
+		}
+	});
+}
+function runAnalysisTests(runner, opts, engineOf, permitEngineOf, supported) {
+	const { test, expect } = runner;
+	test("analyze: a form fill and a second signature after an approval are permitted", async () => {
+		if (!supported()) return;
+		const doc = await open(engineOf(), opts, opts.fixtures.twoApprovals);
+		try {
+			const analysis = await doc.signatures.analyze({ since: { signatureIndex: 0 } });
+			expect(analysis.mode).toBe("authoritative");
+			expect(analysis.basis.source).toBe("persisted");
+			expect(analysis.since).toEqual({
+				revisionIndex: 1,
+				signatureIndex: 0
+			});
+			expect(analysis.until.revisionIndex).toBe(2);
+			expect(analysis.steps).toHaveLength(1);
+			const [step] = analysis.steps;
+			expect(step.levelInForce).toBe("annotate");
+			expect(step.verdict).toBe("permitted");
+			expect(step.changes.length > 0).toBe(true);
+			const rules = new Set(step.findings.filter((f) => f.verdict === "permitted").map((f) => f.rule));
+			expect(rules.has("form-fill")).toBe(true);
+			expect(rules.has("signature-added")).toBe(true);
+			expect(step.findings.filter((f) => f.verdict === "forbidden")).toEqual([]);
+			expect(analysis.verdict).toBe("permitted");
+			const latest = await doc.signatures.analyze({ since: { signatureIndex: 1 } });
+			expect(latest.steps).toHaveLength(0);
+			expect(latest.verdict).toBe("unchanged");
+			const historic = await doc.signatures.analyze({
+				since: { revisionIndex: 0 },
+				until: { revisionIndex: 1 }
+			});
+			expect(historic.steps).toHaveLength(1);
+			expect(historic.verdict).toBe("permitted");
+		} finally {
+			await doc.close();
+		}
+	});
+	test("analyze: the working copy is one more revision; a partial signature cannot anchor", async () => {
+		if (!supported()) return;
+		const fx = opts.fixtures.unsignedSigField;
+		const doc = await open(engineOf(), opts, fx);
+		try {
+			const prepared = await doc.signatures.prepare({
+				field: {
+					kind: "fqn",
+					name: fx.fieldName
+				},
+				certify: { permission: 2 }
+			});
+			await doc.signatures.complete({
+				signingId: prepared.signingId,
+				cms: FAKE_CMS,
+				expectedVersion: prepared.expectedVersion
+			});
+			const clean = await doc.signatures.analyze({
+				since: { signatureIndex: 0 },
+				until: "working-copy"
+			});
+			expect(clean.steps).toHaveLength(0);
+			expect(clean.verdict).toBe("unchanged");
+			await doc.forms.setValue({
+				kind: "fqn",
+				name: fx.textField
+			}, {
+				type: "text",
+				value: "draft"
+			});
+			const persisted = await doc.signatures.analyze({ since: { signatureIndex: 0 } });
+			expect(persisted.steps).toHaveLength(0);
+			const working = await doc.signatures.analyze({
+				since: { signatureIndex: 0 },
+				until: "working-copy"
+			});
+			expect(working.basis.source).toBe("working-copy");
+			expect(working.steps).toHaveLength(1);
+			expect(working.steps[0].levelInForce).toBe("fill");
+			expect(working.verdict).toBe("permitted");
+			expect(working.steps[0].findings.some((f) => f.rule === "form-fill" && f.verdict === "permitted")).toBe(true);
+		} finally {
+			await doc.close();
+		}
+		const partial = await open(engineOf(), opts, opts.fixtures.partialChain);
+		try {
+			expect(await caughtCode(() => partial.signatures.analyze({ since: { signatureIndex: 0 } }))).toBe(EngineErrorCode.InvalidArg);
+			const byRevision = await partial.signatures.analyze({ since: { revisionIndex: 0 } });
+			expect(byRevision.later.revisionCount).toBe(2);
+			expect(byRevision.steps).toHaveLength(0);
+			const inFull = await partial.signatures.analyze({
+				since: { revisionIndex: 0 },
+				detail: "full"
+			});
+			expect(inFull.steps).toHaveLength(2);
+			expect(inFull.current.verdict).toBe(byRevision.current.verdict);
+		} finally {
+			await partial.close();
+		}
+	});
+	test("analyze: a page edit under a certification and a locked field edit are forbidden", async () => {
+		if (!supported()) return;
+		const permit = permitEngineOf();
+		if (!permit) return;
+		const certified = await open(permit, opts, opts.fixtures.certified);
+		let reopened = null;
+		try {
+			const list = await certified.pages.list();
+			await certified.pages.rotate([list.pages[0].pageObjectNumber], 90);
+			const working = await certified.signatures.analyze({
+				since: { signatureIndex: 0 },
+				until: "working-copy"
+			});
+			expect(working.verdict).toBe("forbidden");
+			const bytes = await certified.download();
+			reopened = await reopen(permit, opts, `${opts.fixtures.certified.id}-tampered`, bytes);
+			const analysis = await reopened.signatures.analyze({ since: { signatureIndex: 0 } });
+			expect(analysis.verdict).toBe("forbidden");
+			expect(analysis.steps[0].findings.some((f) => f.verdict === "forbidden")).toBe(true);
+		} finally {
+			if (reopened) await reopened.close();
+			await certified.close();
+		}
+		const locked = await open(permit, opts, opts.fixtures.fieldMdp);
+		try {
+			await locked.forms.setValue({
+				kind: "fqn",
+				name: opts.fixtures.fieldMdp.lockedField
+			}, {
+				type: "text",
+				value: "tampered"
+			});
+			const working = await locked.signatures.analyze({
+				since: { signatureIndex: 0 },
+				until: "working-copy"
+			});
+			expect(working.verdict).toBe("forbidden");
+			expect(working.steps[0].findings.some((f) => f.rule === "field-lock")).toBe(true);
+		} finally {
+			await locked.close();
+		}
+	});
+}
+/** A minimal DER SEQUENCE standing in for a CMS: the engine's job ends at the bytes. */
+const FAKE_CMS = new Uint8Array([
+	48,
+	6,
+	2,
+	1,
+	1,
+	2,
+	1,
+	2
+]);
+async function caughtCode(run) {
+	try {
+		await run();
+		return null;
+	} catch (err) {
+		return err instanceof EngineError ? err.code : "not-an-engine-error";
+	}
+}
+function runSigningTests(runner, opts, engineOf, supported) {
+	const { test, expect } = runner;
+	const fx = () => opts.fixtures.unsignedSigField;
+	const sigRef = () => ({
+		kind: "fqn",
+		name: fx().fieldName
+	});
+	const textRef = () => ({
+		kind: "fqn",
+		name: fx().textField
+	});
+	test("sign: prepare seals a candidate, complete installs it, download returns it verbatim", async () => {
+		if (!supported()) return;
+		const engine = engineOf();
+		const doc = await open(engine, opts, fx());
+		const events = [];
+		const unsubscribe = doc.events.subscribe((event) => events.push(event.type));
+		let reopened = null;
+		try {
+			const v0 = await doc.version();
+			const before = await doc.signatures.list();
+			expect(before.revisions).toHaveLength(1);
+			expect(before.signatures).toHaveLength(1);
+			expect(before.signatures[0].signed).toBe(false);
+			expect(before.protection.judged).toBeNull();
+			const prepared = await doc.signatures.prepare({
+				field: sigRef(),
+				subFilter: "ETSI.CAdES.detached",
+				digest: "sha256",
+				contentsSize: 1024,
+				attribution: { reason: "conformance" }
+			});
+			expect(prepared.digest.byteLength).toBe(32);
+			expect(prepared.algorithm).toBe("sha256");
+			expect(prepared.subFilter).toBe("ETSI.CAdES.detached");
+			expect(prepared.contentsSize).toBe(1024);
+			expect(prepared.byteRange[0]).toBe(0);
+			expect(prepared.byteRange[2] > prepared.byteRange[1]).toBe(true);
+			expect(prepared.expectedVersion.baseSha256).toBe(v0.sha256);
+			expect(await caughtCode(() => doc.signatures.prepare({ field: sigRef() }))).toBe(EngineErrorCode.SigningPending);
+			expect(await caughtCode(() => doc.forms.setValue(textRef(), {
+				type: "text",
+				value: "x"
+			}))).toBe(EngineErrorCode.SigningPending);
+			const during = await doc.signatures.list();
+			expect(during.signatures[0].signed).toBe(false);
+			expect((await doc.version()).sha256).toBe(v0.sha256);
+			expect(await caughtCode(() => doc.signatures.complete({
+				signingId: prepared.signingId,
+				cms: FAKE_CMS,
+				expectedVersion: {
+					baseSha256: prepared.expectedVersion.baseSha256,
+					editsVersion: prepared.expectedVersion.editsVersion + 1
+				}
+			}))).toBe(EngineErrorCode.SigningVersionMismatch);
+			const result = await doc.signatures.complete({
+				signingId: prepared.signingId,
+				cms: FAKE_CMS,
+				expectedVersion: prepared.expectedVersion
+			});
+			expect(result.status).toBe("completed");
+			expect(result.signature.signed).toBe(true);
+			expect(result.signature.fieldName).toBe(fx().fieldName);
+			expect(result.signature.coverage).toBe("whole-revision");
+			expect(result.signature.revisionIndex).toBe(1);
+			expect(result.signature.subFilter).toBe("ETSI.CAdES.detached");
+			expect(result.signature.signer.reason).toBe("conformance");
+			expect(result.signature.contentsSize).toBe(FAKE_CMS.byteLength);
+			expect(result.previous).toEqual(prepared.expectedVersion);
+			expect(result.version.sha256 === v0.sha256).toBe(false);
+			expect(result.protection.judged).toBe("annotate");
+			expect(result.protection.enforced).toBeNull();
+			expect(result.meta.affectedPages.length >= 1).toBe(true);
+			expect(await doc.version()).toEqual(result.version);
+			const after = await doc.signatures.list();
+			expect(after.revisions).toHaveLength(2);
+			expect(after.signatures[0].signed).toBe(true);
+			expect(after.signatures[0].revisionIndex).toBe(1);
+			expect(after.revisions[1].signatureIndex).toBe(0);
+			expect(toHex(await doc.signatures.digest(sigRef(), "sha256"))).toBe(toHex(prepared.digest));
+			expect(bytesEqual(await doc.signatures.contents(sigRef()), FAKE_CMS)).toBe(true);
+			const bytes = await doc.download();
+			expect(bytes.byteLength).toBe(result.version.byteLength);
+			expect(await sha256Hex(bytes)).toBe(result.version.sha256);
+			reopened = await reopen(engine, opts, `${fx().id}-signed`, bytes);
+			const fresh = await reopened.signatures.list();
+			expect(fresh.revisions).toHaveLength(2);
+			expect(fresh.signatures[0].coverage).toBe("whole-revision");
+			expect(toHex(await reopened.signatures.digest(sigRef(), "sha256"))).toBe(toHex(prepared.digest));
+			const replay = await doc.signatures.complete({
+				signingId: prepared.signingId,
+				cms: FAKE_CMS,
+				expectedVersion: prepared.expectedVersion
+			});
+			expect(replay.status).toBe("already-completed");
+			expect(replay.version).toEqual(result.version);
+			expect((await doc.signatures.abort(prepared.signingId)).status).toBe("already-completed");
+			expect((await doc.signatures.abort("never-prepared")).status).toBe("unknown");
+			await doc.forms.setValue(textRef(), {
+				type: "text",
+				value: "after"
+			});
+			expect(await caughtCode(() => doc.signatures.prepare({ field: sigRef() }))).toBe(EngineErrorCode.SignatureRefused);
+			expect(events.filter((t) => t === "signature.prepared")).toHaveLength(1);
+			expect(events.filter((t) => t === "signature.completed")).toHaveLength(1);
+			expect(events.filter((t) => t === "document.versioned")).toHaveLength(1);
+		} finally {
+			unsubscribe();
+			if (reopened) await reopened.close();
+			await doc.close();
+		}
+	});
+	test("sign: unsaved edits are sealed in the signature's own revision (layer session)", async () => {
+		if (!supported()) return;
+		const doc = await open(engineOf(), opts, fx());
+		try {
+			await doc.forms.setValue(textRef(), {
+				type: "text",
+				value: "unsaved"
+			});
+			const prepared = await doc.signatures.prepare({ field: sigRef() });
+			const result = await doc.signatures.complete({
+				signingId: prepared.signingId,
+				cms: FAKE_CMS,
+				expectedVersion: prepared.expectedVersion
+			});
+			expect(result.signature.revisionIndex).toBe(1);
+			const after = await doc.signatures.list();
+			expect(after.revisions).toHaveLength(2);
+			const text = await doc.forms.get(textRef());
+			expect(text.value).toBe("unsaved");
+			const bytes = await doc.download();
+			expect(await sha256Hex(bytes)).toBe(result.version.sha256);
+		} finally {
+			await doc.close();
+		}
+	});
+	test("sign: a certification protects the document from the moment it completes", async () => {
+		if (!supported()) return;
+		const doc = await open(engineOf(), opts, fx());
+		try {
+			expect(doc.security.allows("doc.pages.assemble")).toBe(true);
+			const prepared = await doc.signatures.prepare({
+				field: sigRef(),
+				certify: { permission: 2 },
+				subFilter: "adbe.pkcs7.detached"
+			});
+			const result = await doc.signatures.complete({
+				signingId: prepared.signingId,
+				cms: FAKE_CMS,
+				expectedVersion: prepared.expectedVersion
+			});
+			expect(result.signature.docMdp).toBe(2);
+			expect(result.signature.catalogCertification).toBe(true);
+			expect(result.protection.judged).toBe("fill");
+			expect(result.protection.enforced).toBe("fill");
+			expect(result.protection.certification).toEqual({
+				signatureIndex: result.signature.index,
+				permission: 2
+			});
+			expect(doc.security.allows("doc.pages.assemble")).toBe(false);
+			expect(doc.security.allows("doc.forms.fill")).toBe(true);
+			const list = await doc.pages.list();
+			expect(await caughtCode(() => doc.pages.delete([list.pages[0].pageObjectNumber]))).toBe(EngineErrorCode.ProtectedDocument);
+			expect(await caughtCode(() => doc.download({ mode: "rewrite" }))).toBe(EngineErrorCode.ProtectedDocument);
+			await doc.forms.setValue(textRef(), {
+				type: "text",
+				value: "filled"
+			});
+			const after = await doc.signatures.list();
+			expect(after.signatures[0].coverage).toBe("whole-revision");
+		} finally {
+			await doc.close();
+		}
+	});
+	test("sign: a lock freezes the named fields and is mirrored on the field", async () => {
+		if (!supported()) return;
+		const doc = await open(engineOf(), opts, fx());
+		try {
+			const prepared = await doc.signatures.prepare({
+				field: sigRef(),
+				lock: {
+					action: "include",
+					fields: [fx().textField]
+				}
+			});
+			const result = await doc.signatures.complete({
+				signingId: prepared.signingId,
+				cms: FAKE_CMS,
+				expectedVersion: prepared.expectedVersion
+			});
+			expect(result.signature.fieldMdp).toEqual({
+				action: "include",
+				fields: [fx().textField]
+			});
+			expect(result.signature.lock).toEqual({
+				action: "include",
+				fields: [fx().textField]
+			});
+			expect(result.protection.fieldLocks.length >= 1).toBe(true);
+			expect(await caughtCode(() => doc.forms.setValue(textRef(), {
+				type: "text",
+				value: "nope"
+			}))).toBe(EngineErrorCode.ProtectedDocument);
+		} finally {
+			await doc.close();
+		}
+	});
+	test("sign: abort discards the candidate and lifts the fence", async () => {
+		if (!supported()) return;
+		const doc = await open(engineOf(), opts, fx());
+		try {
+			const v0 = await doc.version();
+			const prepared = await doc.signatures.prepare({ field: sigRef() });
+			expect((await doc.signatures.abort(prepared.signingId)).status).toBe("aborted");
+			expect((await doc.signatures.list()).signatures[0].signed).toBe(false);
+			expect((await doc.version()).sha256).toBe(v0.sha256);
+			await doc.forms.setValue(textRef(), {
+				type: "text",
+				value: "free again"
+			});
+			expect(await caughtCode(() => doc.signatures.complete({
+				signingId: prepared.signingId,
+				cms: FAKE_CMS,
+				expectedVersion: prepared.expectedVersion
+			}))).toBe(EngineErrorCode.NotFound);
+		} finally {
+			await doc.close();
+		}
+	});
+	test("sign: artwork from a PDF page lands on the widget", async () => {
+		if (!supported()) return;
+		const doc = await open(engineOf(), opts, fx());
+		try {
+			const artwork = await opts.fixtures.artwork.bytes();
+			const prepared = await doc.signatures.prepare({
+				field: sigRef(),
+				appearance: {
+					pdf: artwork,
+					pageIndex: 0
+				}
+			});
+			const result = await doc.signatures.complete({
+				signingId: prepared.signingId,
+				cms: FAKE_CMS,
+				expectedVersion: prepared.expectedVersion
+			});
+			expect(result.signature.coverage).toBe("whole-revision");
+			expect(result.signature.widget).toBeTruthy();
+			const widget = (await doc.page(result.signature.widget.pageObjectNumber).annotations.list()).annotations.find((a) => a.ref.kind === "objectNumber" && a.ref.annotObjectNumber === result.signature.widget.annotObjectNumber);
+			expect(widget).toBeTruthy();
+		} finally {
+			await doc.close();
+		}
+	});
+	if (opts.openKind === "layerBytes") test("sign: a layer session keeps its kind, with an empty layer over the new base", async () => {
+		if (!supported()) return;
+		const doc = await open(engineOf(), opts, fx());
+		try {
+			const prepared = await doc.signatures.prepare({ field: sigRef() });
+			const result = await doc.signatures.complete({
+				signingId: prepared.signingId,
+				cms: FAKE_CMS,
+				expectedVersion: prepared.expectedVersion
+			});
+			const layer = await doc.downloadLayer();
+			expect(layer.byteLength > 0).toBe(true);
+			expect(await sha256Hex(await doc.download())).toBe(result.version.sha256);
+		} finally {
+			await doc.close();
+		}
+	});
+}
+async function reopen(engine, opts, id, bytes) {
+	if (opts.openKind === "layerBytes") return engine.open({
+		kind: "layerBytes",
+		id,
+		baseBytes: bytes
+	});
+	return engine.open({
+		kind: "bytes",
+		id,
+		bytes
+	});
+}
+async function open(engine, opts, fixture) {
+	if (opts.openKind === "bytes") return engine.open({
+		kind: "bytes",
+		id: fixture.id,
+		bytes: await fixture.bytes()
+	});
+	if (opts.openKind === "layerBytes") return engine.open({
+		kind: "layerBytes",
+		id: `${fixture.id}-layer`,
+		baseBytes: await fixture.bytes()
+	});
+	return engine.open({
+		kind: "id",
+		id: fixture.cloudId ?? fixture.id
+	});
+}
+function concat(a, b) {
+	const out = new Uint8Array(a.byteLength + b.byteLength);
+	out.set(a, 0);
+	out.set(b, a.byteLength);
+	return out;
+}
+function bytesEqual(a, b) {
+	if (a.byteLength !== b.byteLength) return false;
+	for (let i = 0; i < a.byteLength; i++) if (a[i] !== b[i]) return false;
+	return true;
+}
+function toHex(bytes) {
+	let out = "";
+	for (const b of bytes) out += b.toString(16).padStart(2, "0");
+	return out;
+}
+async function sha256Hex(bytes) {
+	const copy = new Uint8Array(bytes.byteLength);
+	copy.set(bytes);
+	const digest = await globalThis.crypto.subtle.digest("SHA-256", copy);
+	return toHex(new Uint8Array(digest));
+}
+//#endregion
+export { TEXT_DIVERGENCE_CASES, diffAnnotationListSnapshot, diffAnnotationListSnapshotAll, runActionsConformance, runAnnotationAppearanceConformance, runAnnotationAppearanceExportConformance, runAnnotationFlattenConformance, runAnnotationMutationConformance, runAnnotationReadConformance, runAttachmentConformance, runDocumentEventsConformance, runFormConformance, runMetadataConformance, runNamedPagesConformance, runPageDeleteConformance, runPageExtractConformance, runPageFlattenConformance, runPageGeometryOrientationConformance, runPageInsertBlankConformance, runPageInsertConformance, runPageReorderConformance, runPageRotateConformance, runPageTextConformance, runPieceInfoConformance, runRedactionApplyConformance, runSearchConformance, runSignatureConformance, runTextDivergenceConformance };
 
 //# sourceMappingURL=conformance.js.map