@embedpdf/engine-services 3.0.0-next.10 → 3.0.0-next.12

package/dist/index.cjs

@@ -1212,11 +1212,143 @@ function readI32(mem, ptr, byteOffset = 0) {
 	return Number(mem.peek(ptr, "i32", byteOffset));
 }
 //#endregion
+//#region src/features/destinations/destinationViewCodes.ts
+/**
+* `PDFDEST_VIEW_*` fit-type codes (public/fpdf_doc.h) — the shared
+* vocabulary of `FPDFDest_GetView` (read) and `EPDFDest_CreateView`
+* (write). XYZ is listed for completeness but never goes through
+* CreateView (it has its own null-aware constructor).
+*/
+const DEST_VIEW = {
+	unknown: 0,
+	xyz: 1,
+	fit: 2,
+	fitH: 3,
+	fitV: 4,
+	fitR: 5,
+	fitB: 6,
+	fitBH: 7,
+	fitBV: 8
+};
+/** Wire destination kind → PDFDEST_VIEW code, for the non-XYZ kinds. */
+const VIEW_CODE_BY_KIND = {
+	fit: DEST_VIEW.fit,
+	fitH: DEST_VIEW.fitH,
+	fitV: DEST_VIEW.fitV,
+	fitR: DEST_VIEW.fitR,
+	fitB: DEST_VIEW.fitB,
+	fitBH: DEST_VIEW.fitBH,
+	fitBV: DEST_VIEW.fitBV
+};
+//#endregion
+//#region src/features/destinations/readDestination.ts
+const MAX_VIEW_PARAMS = 4;
+/**
+* Materialise one explicit `PdfDestination` from a live `destPtr`. PDFium
+* already resolved named destinations before handing us the pointer, so
+* only explicit arrays arrive here (the rule `PdfDestination` documents).
+*
+* Returns `null` when the destination is unreadable: no visible indirect page
+* in the document, or an unknown fit type. Coordinates stay raw PDF user
+* space — no conversion at this layer.
+*
+* Shared by the link reader, `goto` action-node payloads, and the document
+* `openDestination`; the outline/bookmark port reuses it too.
+*/
+function readDestination(fn, mem, docPtr, destPtr) {
+	const pageObjectNumber = fn.EPDFDest_GetPageObjectNumber(docPtr, destPtr);
+	if (pageObjectNumber === 0) return null;
+	const view = withScratchN(mem, [4, MAX_VIEW_PARAMS * 4], ([countPtr, paramsPtr]) => {
+		const code = fn.FPDFDest_GetView(destPtr, countPtr, paramsPtr);
+		const count = Math.min(readI32(mem, countPtr), MAX_VIEW_PARAMS);
+		const params = [];
+		for (let i = 0; i < count; i++) params.push(readF32(mem, paramsPtr, i * 4));
+		return {
+			code,
+			params
+		};
+	});
+	const at = (i) => i < view.params.length ? view.params[i] : null;
+	switch (view.code) {
+		case DEST_VIEW.xyz: return {
+			kind: "xyz",
+			pageObjectNumber,
+			...readXyzLocation(fn, mem, destPtr)
+		};
+		case DEST_VIEW.fit: return {
+			kind: "fit",
+			pageObjectNumber
+		};
+		case DEST_VIEW.fitH: return {
+			kind: "fitH",
+			pageObjectNumber,
+			top: at(0)
+		};
+		case DEST_VIEW.fitV: return {
+			kind: "fitV",
+			pageObjectNumber,
+			left: at(0)
+		};
+		case DEST_VIEW.fitR:
+			if (view.params.length < 4) return {
+				kind: "fit",
+				pageObjectNumber
+			};
+			return {
+				kind: "fitR",
+				pageObjectNumber,
+				left: view.params[0],
+				bottom: view.params[1],
+				right: view.params[2],
+				top: view.params[3]
+			};
+		case DEST_VIEW.fitB: return {
+			kind: "fitB",
+			pageObjectNumber
+		};
+		case DEST_VIEW.fitBH: return {
+			kind: "fitBH",
+			pageObjectNumber,
+			top: at(0)
+		};
+		case DEST_VIEW.fitBV: return {
+			kind: "fitBV",
+			pageObjectNumber,
+			left: at(0)
+		};
+		default: return null;
+	}
+}
+/** `/XYZ` null-aware axes via `FPDFDest_GetLocationInPage` (FPDF_BOOL is 4 bytes). */
+function readXyzLocation(fn, mem, destPtr) {
+	return withScratchN(mem, [
+		4,
+		4,
+		4,
+		4,
+		4,
+		4
+	], ([hasLeft, hasTop, hasZoom, left, top, zoom]) => {
+		if (!fn.FPDFDest_GetLocationInPage(destPtr, hasLeft, hasTop, hasZoom, left, top, zoom)) return {
+			left: null,
+			top: null,
+			zoom: null
+		};
+		return {
+			left: readI32(mem, hasLeft) ? readF32(mem, left) : null,
+			top: readI32(mem, hasTop) ? readF32(mem, top) : null,
+			zoom: readI32(mem, hasZoom) ? readF32(mem, zoom) : null
+		};
+	});
+}
+//#endregion
 //#region src/features/actions/ActionModelReader.ts
 const DEFAULT_ACTION_READ_BUDGET = {
 	maxModels: 512,
 	maxNodes: 16384,
-	maxScriptCodeUnits: 16e6
+	maxScriptCodeUnits: 16e6,
+	maxTargetEntries: 4096,
+	maxPayloadCodeUnits: 262144
 };
 const ACTION_TYPE_BY_CODE = {
 	0: "unknown",
@@ -1244,22 +1376,20 @@ const WARNING_MALFORMED_NEXT = 2;
 const WARNING_INCOMPLETE = 4;
 const INVALID_NODE_U32 = 4294967295;
 /** Decode one `EPDF_ACTION_TYPE_*` code — the shared vocabulary consumers
-*  (the link-target projection) use so the two surfaces cannot drift. */
+*  use so action-shaped surfaces cannot drift. */
 function actionTypeFromCode(code) {
 	return ACTION_TYPE_BY_CODE[code] ?? "unknown";
 }
-/** Is this `EPDFAction_GetRootNode`/`GetNextAt` result a real node id?
-*  (`EPDF_ACTION_NODE_INVALID` may surface as -1 or u32 max via cwrap.) */
-function isValidActionNodeId(raw) {
-	return raw !== -1 && raw >>> 0 !== INVALID_NODE_U32;
-}
-/** Mutable aggregate budget shared by every action model in one read job. */
+/** Mutable aggregate budget shared by every action model in one read job.
+*  Payload budgets are RESERVED before the backing buffer is allocated. */
 var ActionReadBudgetTracker = class {
 	constructor(limits = DEFAULT_ACTION_READ_BUDGET) {
 		this.limits = limits;
 		_defineProperty(this, "models", 0);
 		_defineProperty(this, "nodes", 0);
 		_defineProperty(this, "scriptCodeUnits", 0);
+		_defineProperty(this, "targetEntries", 0);
+		_defineProperty(this, "payloadCodeUnits", 0);
 	}
 	addModel(nodeCount) {
 		this.models += 1;
@@ -1270,11 +1400,23 @@ var ActionReadBudgetTracker = class {
 		this.scriptCodeUnits += script.length;
 		this.assertWithinBudget();
 	}
+	/** Charge target entries BEFORE the target array is walked. */
+	reserveTargets(count) {
+		this.targetEntries += count;
+		this.assertWithinBudget();
+	}
+	/** Charge payload text BEFORE the scratch buffer for it is allocated. */
+	reservePayloadBytes(length) {
+		this.payloadCodeUnits += length;
+		this.assertWithinBudget();
+	}
 	assertWithinBudget() {
-		if (this.models > this.limits.maxModels || this.nodes > this.limits.maxNodes || this.scriptCodeUnits > this.limits.maxScriptCodeUnits) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.MalformedPdf, "aggregate PDF action read budget exceeded", { details: {
+		if (this.models > this.limits.maxModels || this.nodes > this.limits.maxNodes || this.scriptCodeUnits > this.limits.maxScriptCodeUnits || this.targetEntries > this.limits.maxTargetEntries || this.payloadCodeUnits > this.limits.maxPayloadCodeUnits) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.MalformedPdf, "aggregate PDF action read budget exceeded", { details: {
 			models: this.models,
 			nodes: this.nodes,
 			scriptCodeUnits: this.scriptCodeUnits,
+			targetEntries: this.targetEntries,
+			payloadCodeUnits: this.payloadCodeUnits,
 			limits: this.limits
 		} });
 	}
@@ -1282,8 +1424,17 @@ var ActionReadBudgetTracker = class {
 /**
 * Convert and close one detached native action model. This is the only
 * native-model walker used by document, page, field, and annotation reads.
+*
+* `docPtr` resolves `goto` destinations (page identity + named-destination
+* lookup); every caller reads within an open document session.
+*
+* Payload rule: a node whose payload cannot be materialised (a goto without
+* a resolvable destination, a javascript node with no `/JS`, a withheld
+* target list) degrades to `{ type: 'unknown' }` with its original `/S` on
+* `subtype`, and the tree gains the `'payload-dropped'` warning — impossible
+* states stay unrepresentable while malformed documents stay readable.
 */
-function readActionModel(fn, mem, modelPtr, budget) {
+function readActionModel(fn, mem, docPtr, modelPtr, budget) {
 	if (modelPtr === _embedpdf_engine_runtime.NULL_PTR) return null;
 	try {
 		const nodeCount = fn.EPDFAction_GetNodeCount(modelPtr);
@@ -1293,13 +1444,61 @@ function readActionModel(fn, mem, modelPtr, budget) {
 		const incomplete = !fn.EPDFAction_IsComplete(modelPtr);
 		const rootId = normalizeOptionalNodeId(fn.EPDFAction_GetRootNode(modelPtr), nodeCount);
 		const visiting = /* @__PURE__ */ new Set();
+		let payloadDropped = false;
+		/** Probe the two-call length first and charge the budget BEFORE the
+		*  scratch buffer for the value is allocated. */
+		const readPayloadString = (call) => {
+			const length = call(_embedpdf_engine_runtime.NULL_PTR, 0);
+			if (length <= 0) return null;
+			budget.reservePayloadBytes(length);
+			return readUtf8String(mem, call);
+		};
+		const readOutBool = (read) => withScratchN(mem, [4], ([outPtr]) => read(outPtr) ? readI32(mem, outPtr) !== 0 : null);
+		const readTargetObjectNumber = (nodeId, index) => withScratchN(mem, [4], ([outPtr]) => {
+			if (!fn.EPDFAction_GetNodeTargetObjectNumber(modelPtr, nodeId, index, outPtr)) return null;
+			const value = readI32(mem, outPtr) >>> 0;
+			return value === 0 ? null : value;
+		});
+		const readTargets = (nodeId, count) => {
+			const targets = [];
+			for (let index = 0; index < count; index++) {
+				const name = readPayloadString((buf, capacity) => fn.EPDFAction_GetNodeTargetName(modelPtr, nodeId, index, buf, capacity));
+				if (name !== null) {
+					targets.push({
+						kind: "name",
+						name
+					});
+					continue;
+				}
+				const objectNumber = readTargetObjectNumber(nodeId, index);
+				if (objectNumber === null) return null;
+				targets.push({
+					kind: "objectNumber",
+					objectNumber
+				});
+			}
+			return targets;
+		};
+		const readResetFormState = (nodeId) => withScratchN(mem, [4, 4], ([hasFieldsPtr, excludePtr]) => {
+			if (!fn.EPDFAction_GetNodeResetForm(modelPtr, nodeId, hasFieldsPtr, excludePtr)) return null;
+			return {
+				hasFields: readI32(mem, hasFieldsPtr) !== 0,
+				exclude: readI32(mem, excludePtr) !== 0
+			};
+		});
+		const readSubmitFormState = (nodeId) => withScratchN(mem, [4, 4], ([hasFieldsPtr, flagsPtr]) => {
+			if (!fn.EPDFAction_GetNodeSubmitForm(modelPtr, nodeId, hasFieldsPtr, flagsPtr)) return null;
+			return {
+				hasFields: readI32(mem, hasFieldsPtr) !== 0,
+				flags: readI32(mem, flagsPtr) >>> 0
+			};
+		});
 		const readNode = (nodeId) => {
 			if (visiting.has(nodeId)) throw malformedActionModel("native action model contains a cycle", { nodeId });
 			visiting.add(nodeId);
 			try {
+				const type = actionTypeFromCode(fn.EPDFAction_GetNodeType(modelPtr, nodeId));
 				const subtype = readUtf8String(mem, (buf, capacity) => fn.EPDFAction_GetNodeSubtype(modelPtr, nodeId, buf, capacity)) ?? "";
-				const script = fn.EPDFAction_NodeHasJavaScript(modelPtr, nodeId) ? readUtf16String(mem, (buf, capacity) => fn.EPDFAction_GetNodeJavaScript(modelPtr, nodeId, buf, capacity)) ?? "" : void 0;
-				if (script !== void 0) budget.addScript(script);
 				const nextCount = fn.EPDFAction_GetNextCount(modelPtr, nodeId);
 				if (!Number.isInteger(nextCount) || nextCount < 0) throw malformedActionModel("invalid action child count", {
 					nodeId,
@@ -1310,21 +1509,157 @@ function readActionModel(fn, mem, modelPtr, budget) {
 					const childId = normalizeNodeId(fn.EPDFAction_GetNextAt(modelPtr, nodeId, index), nodeCount);
 					next.push(readNode(childId));
 				}
-				return {
-					type: ACTION_TYPE_BY_CODE[fn.EPDFAction_GetNodeType(modelPtr, nodeId)] ?? "unknown",
-					subtype,
-					...script !== void 0 ? { script } : {},
-					next
+				const degraded = () => {
+					payloadDropped = true;
+					return {
+						type: "unknown",
+						subtype,
+						next
+					};
 				};
+				switch (type) {
+					case "javascript": {
+						if (!fn.EPDFAction_NodeHasJavaScript(modelPtr, nodeId)) return degraded();
+						const script = readUtf16String(mem, (buf, capacity) => fn.EPDFAction_GetNodeJavaScript(modelPtr, nodeId, buf, capacity)) ?? "";
+						budget.addScript(script);
+						return {
+							type,
+							subtype,
+							script,
+							next
+						};
+					}
+					case "rendition": {
+						if (!fn.EPDFAction_NodeHasJavaScript(modelPtr, nodeId)) return {
+							type,
+							subtype,
+							next
+						};
+						const script = readUtf16String(mem, (buf, capacity) => fn.EPDFAction_GetNodeJavaScript(modelPtr, nodeId, buf, capacity)) ?? "";
+						budget.addScript(script);
+						return {
+							type,
+							subtype,
+							script,
+							next
+						};
+					}
+					case "goto": {
+						const destPtr = fn.EPDFAction_GetNodeDest(docPtr, modelPtr, nodeId);
+						const destination = destPtr !== _embedpdf_engine_runtime.NULL_PTR ? readDestination(fn, mem, docPtr, destPtr) : null;
+						return destination ? {
+							type,
+							subtype,
+							destination,
+							next
+						} : degraded();
+					}
+					case "uri": {
+						const uri = readPayloadString((buf, capacity) => fn.EPDFAction_GetNodeURI(docPtr, modelPtr, nodeId, buf, capacity));
+						if (uri === null) return degraded();
+						return {
+							type,
+							subtype,
+							uri,
+							isMap: readOutBool((outPtr) => fn.EPDFAction_GetNodeURIIsMap(modelPtr, nodeId, outPtr)) ?? false,
+							next
+						};
+					}
+					case "named": {
+						const name = readPayloadString((buf, capacity) => fn.EPDFAction_GetNodeName(modelPtr, nodeId, buf, capacity));
+						return name === null ? degraded() : {
+							type,
+							subtype,
+							name,
+							next
+						};
+					}
+					case "hide": {
+						const count = fn.EPDFAction_GetNodeTargetCount(modelPtr, nodeId);
+						if (!Number.isInteger(count) || count < 0) return degraded();
+						budget.reserveTargets(count);
+						const targets = readTargets(nodeId, count);
+						if (targets === null) return degraded();
+						return {
+							type,
+							subtype,
+							targets,
+							hide: readOutBool((outPtr) => fn.EPDFAction_GetNodeHideFlag(modelPtr, nodeId, outPtr)) ?? true,
+							next
+						};
+					}
+					case "reset-form": {
+						const state = readResetFormState(nodeId);
+						const count = fn.EPDFAction_GetNodeTargetCount(modelPtr, nodeId);
+						if (state === null || !Number.isInteger(count) || count < 0) return degraded();
+						budget.reserveTargets(count);
+						const fields = state.hasFields ? readTargets(nodeId, count) : null;
+						if (state.hasFields && fields === null) return degraded();
+						return {
+							type,
+							subtype,
+							fields,
+							exclude: state.exclude,
+							next
+						};
+					}
+					case "submit-form": {
+						if (typeof fn.EPDFAction_GetNodeSubmitForm !== "function") return {
+							type,
+							subtype,
+							next
+						};
+						const state = readSubmitFormState(nodeId);
+						if (state === null) return degraded();
+						const url = readPayloadString((buf, capacity) => fn.EPDFAction_GetNodeSubmitFormURL(modelPtr, nodeId, buf, capacity));
+						if (url === null) return degraded();
+						const count = fn.EPDFAction_GetNodeTargetCount(modelPtr, nodeId);
+						if (!Number.isInteger(count) || count < 0) return degraded();
+						budget.reserveTargets(count);
+						const fields = state.hasFields ? readTargets(nodeId, count) : null;
+						if (state.hasFields && fields === null) return degraded();
+						const charSet = readPayloadString((buf, capacity) => fn.EPDFAction_GetNodeSubmitFormCharSet(modelPtr, nodeId, buf, capacity));
+						return {
+							type,
+							subtype,
+							payload: {
+								url,
+								fields,
+								flags: (0, _embedpdf_engine_core_runtime.decodeSubmitFormFlags)(state.flags),
+								...charSet === null ? {} : { charSet }
+							},
+							next
+						};
+					}
+					case "goto-remote":
+					case "goto-embedded":
+					case "launch": {
+						const filePath = readPayloadString((buf, capacity) => fn.EPDFAction_GetNodeFilePath(modelPtr, nodeId, buf, capacity));
+						return filePath === null ? degraded() : {
+							type,
+							subtype,
+							filePath,
+							next
+						};
+					}
+					default: return {
+						type,
+						subtype,
+						next
+					};
+				}
 			} finally {
 				visiting.delete(nodeId);
 			}
 		};
+		const root = rootId === null ? null : readNode(rootId);
+		const warnings = warningsFromFlags(warningFlags, incomplete);
+		if (payloadDropped) warnings.push("payload-dropped");
 		return {
-			root: rootId === null ? null : readNode(rootId),
+			root,
 			incomplete,
 			warningFlags,
-			warnings: warningsFromFlags(warningFlags, incomplete)
+			warnings
 		};
 	} finally {
 		fn.EPDFAction_CloseModel(modelPtr);
@@ -1397,15 +1732,16 @@ var PagesReader = class {
 			});
 			return {
 				pageCount: pages.length,
-				pages
+				pages,
+				namedPages: readNamedPages(fn, mem, docPtr)
 			};
 		});
 	}
 };
 function readPageActions(fn, mem, docPtr, pageObjectNumber, budget) {
 	const actions = {};
-	const open = readActionModel(fn, mem, fn.EPDFDoc_GetPageActionModel(docPtr, pageObjectNumber, 0), budget);
-	const close = readActionModel(fn, mem, fn.EPDFDoc_GetPageActionModel(docPtr, pageObjectNumber, 1), budget);
+	const open = readActionModel(fn, mem, docPtr, fn.EPDFDoc_GetPageActionModel(docPtr, pageObjectNumber, 0), budget);
+	const close = readActionModel(fn, mem, docPtr, fn.EPDFDoc_GetPageActionModel(docPtr, pageObjectNumber, 1), budget);
 	if (open) actions.open = open;
 	if (close) actions.close = close;
 	return open || close ? actions : void 0;
@@ -1462,6 +1798,41 @@ function readUserUnit(fn, mem, docPtr, index, userUnitPtr) {
 function readLabel(fn, mem, docPtr, index) {
 	return readUtf16String(mem, (buf, capacity) => fn.FPDF_GetPageLabel(docPtr, index, buf, capacity), null) || null;
 }
+const NAMED_PAGE_TREES = [0, 1];
+const NAMED_PAGE_KIND_PAGE = 0;
+const NAMED_PAGE_KIND_TEMPLATE = 1;
+/**
+* The catalog's `/Names /Pages` and `/Names /Templates` registrations, in
+* tree order, each value classified by the fork (page / template /
+* dangling). Page-identity data like `label`, so it ships inside the same
+* snapshot — a registration is only meaningful against the page set that
+* contains its target.
+*/
+function readNamedPages(fn, mem, docPtr) {
+	const entries = [];
+	withScratchN(mem, [4, 4], ([objNumPtr, kindPtr]) => {
+		for (const tree of NAMED_PAGE_TREES) {
+			const count = fn.EPDFDoc_GetNamedPageCount(docPtr, tree);
+			for (let index = 0; index < count; index++) {
+				const name = readUtf16String(mem, (buf, capacity) => fn.EPDFDoc_GetNamedPageAt(docPtr, tree, index, buf, capacity, objNumPtr, kindPtr), "");
+				if (name === null) continue;
+				const objectNumber = Number(mem.peek(objNumPtr, "i32")) >>> 0;
+				const kind = Number(mem.peek(kindPtr, "i32"));
+				entries.push({
+					name,
+					target: kind === NAMED_PAGE_KIND_PAGE ? {
+						kind: "page",
+						pageObjectNumber: objectNumber
+					} : kind === NAMED_PAGE_KIND_TEMPLATE ? {
+						kind: "template",
+						objectNumber
+					} : { kind: "dangling" }
+				});
+			}
+		}
+	});
+	return entries;
+}
 //#endregion
 //#region src/features/pages/PagesMutator.ts
 /**
@@ -1609,6 +1980,38 @@ var PagesMutator = class {
 			cache: null
 		};
 	}
+	/**
+	* Register `name` → page in `/Names /Pages` (create, or replace what the
+	* key points at); with `replace`, drop that other key first — a rename as
+	* one job. Named pages are LAYOUT: page identity and order are untouched
+	* (no registry refresh, no revision bumps) and the fresh snapshot is
+	* returned like `move()`.
+	*/
+	setName(input, signal) {
+		throwIfAborted(signal);
+		if (input.name.length === 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, "pages.setName requires a non-empty name");
+		const { fn, mem } = this.runtime;
+		const docPtr = this.session.requireDocPtr();
+		this.session.recordByObjectNumber(input.pageObjectNumber);
+		if (input.replace !== void 0 && input.replace !== input.name && input.replace.length > 0) writeUtf16String(mem, input.replace, (ptr) => fn.EPDFDoc_RemoveNamedPage(docPtr, ptr));
+		if (!writeUtf16String(mem, input.name, (ptr) => fn.EPDFDoc_SetNamedPage(docPtr, ptr, input.pageObjectNumber))) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.Unknown, `EPDFDoc_SetNamedPage rejected '${input.name}' for page ${input.pageObjectNumber}`);
+		return {
+			layout: new PagesReader(this.runtime, this.session).read(signal),
+			cache: null
+		};
+	}
+	/** Remove one `/Names /Pages` registration; the page stays. */
+	removeName(input, signal) {
+		throwIfAborted(signal);
+		if (input.name.length === 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, "pages.removeName requires a non-empty name");
+		const { fn, mem } = this.runtime;
+		const docPtr = this.session.requireDocPtr();
+		if (!writeUtf16String(mem, input.name, (ptr) => fn.EPDFDoc_RemoveNamedPage(docPtr, ptr))) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.NotFound, `pages.removeName: no /Names /Pages registration '${input.name}'`);
+		return {
+			layout: new PagesReader(this.runtime, this.session).read(signal),
+			cache: null
+		};
+	}
 	/** Shared input check: non-empty, no duplicate PONs. */
 	requireUniquePons(op, pageObjectNumbers) {
 		if (pageObjectNumbers.length === 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, `${op} requires at least one page`);
@@ -1621,7 +2024,7 @@ var PagesMutator = class {
 };
 //#endregion
 //#region src/features/pages/PagesExtractor.ts
-const FPDF_NO_INCREMENTAL$1 = 2;
+const FPDF_NO_INCREMENTAL$2 = 2;
 /**
 * Export a subset of pages as a standalone PDF. A READ over the session:
 * `FPDF_ImportPagesByIndex` copies pages into a scratch document, so the
@@ -1660,7 +2063,7 @@ var PagesExtractor = class {
 			for (let i = 0; i < indices.length; i++) mem.poke(idxPtr, "i32", indices[i], 4 * i);
 			if (!fn.FPDF_ImportPagesByIndex(destPtr, srcPtr, idxPtr, indices.length, 0)) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.Unknown, `FPDF_ImportPagesByIndex rejected the request (indices=[${indices.join(",")}])`);
 			mem.poke(sizePtr, "i32", 0);
-			pdfPtr = fn.EPDF_SaveDocumentToOwnedBuffer(destPtr, FPDF_NO_INCREMENTAL$1, sizePtr);
+			pdfPtr = fn.EPDF_SaveDocumentToOwnedBuffer(destPtr, FPDF_NO_INCREMENTAL$2, sizePtr);
 			const size = Number(mem.peek(sizePtr, "i32"));
 			if (!pdfPtr || size <= 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocOpenFailed, "failed to save extracted pages");
 			const bytes = mem.readBytes(pdfPtr, size);
@@ -2212,6 +2615,13 @@ function readQuadPoints(fn, mem, annotPtr) {
 		return out;
 	});
 }
+/**
+* `/Name` as text, whatever its value (`EPDFAnnot_GetName`): a standard
+* icon/stamp name or a custom identifier. `null` when absent.
+*/
+function readAnnotName(fn, mem, annotPtr) {
+	return readUtf8String(mem, (buf, capacity) => fn.EPDFAnnot_GetName(annotPtr, buf, capacity));
+}
 //#endregion
 //#region src/features/annotations/internal/read/readAnnotationTransformMetadata.ts
 /**
@@ -2461,29 +2871,29 @@ function normalizeChecksum(raw) {
 //#endregion
 //#region src/features/annotations/internal/annotationIcon.ts
 /**
-* `/Name` icon ↔ `FPDF_ANNOT_NAME` enum code mapping for text and
-* file-attachment annotations (`EPDFAnnot_SetName` / `EPDFAnnot_GetName`).
-* Codes mirror the `FPDF_ANNOT_NAME` enum in `public/fpdf_annot.h` —
-* same pattern as `stampName.ts` (whose stamp block starts at 13, right
-* after these) keeping engine-core PDFium-free.
-*/
-const NOTE_ICON_TO_CODE = Object.freeze({
-	comment: 0,
-	key: 1,
-	note: 2,
-	help: 3,
-	"new-paragraph": 4,
-	paragraph: 5,
-	insert: 6
+* `/Name` icon vocabulary ↔ PDF name mapping for text and file-attachment
+* annotations (ISO 32000-2 tables 175 and 184). The wire speaks the
+* kebab-case ids; `EPDFAnnot_SetName` / `EPDFAnnot_GetName` speak the PDF
+* names. An unknown PDF name reads as the subtype's default (the reader
+* draws the default glyph for names it does not know — spec behavior).
+*/
+const NOTE_ICON_TO_NAME = Object.freeze({
+	comment: "Comment",
+	key: "Key",
+	note: "Note",
+	help: "Help",
+	"new-paragraph": "NewParagraph",
+	paragraph: "Paragraph",
+	insert: "Insert"
 });
-const NOTE_CODE_TO_ICON = Object.freeze(Object.fromEntries(Object.entries(NOTE_ICON_TO_CODE).map(([icon, code]) => [code, icon])));
-const FILE_ICON_TO_CODE = Object.freeze({
-	graph: 7,
-	"push-pin": 8,
-	paperclip: 9,
-	tag: 10
+const NOTE_NAME_TO_ICON = Object.freeze(Object.fromEntries(Object.entries(NOTE_ICON_TO_NAME).map(([icon, name]) => [name, icon])));
+const FILE_ICON_TO_NAME = Object.freeze({
+	graph: "Graph",
+	"push-pin": "PushPin",
+	paperclip: "Paperclip",
+	tag: "Tag"
 });
-const FILE_CODE_TO_ICON = Object.freeze(Object.fromEntries(Object.entries(FILE_ICON_TO_CODE).map(([icon, code]) => [code, icon])));
+const FILE_NAME_TO_ICON = Object.freeze(Object.fromEntries(Object.entries(FILE_ICON_TO_NAME).map(([icon, name]) => [name, icon])));
 //#endregion
 //#region src/features/annotations/internal/read/readFileAttachmentAnnotation.ts
 /** Default `/C` — matches the generator's default icon fill and the writer default. */
@@ -2505,7 +2915,7 @@ function readFileAttachment(fn, mem, annotPtr, base) {
 	const color = readAnnotColor(fn, mem, annotPtr) ?? { ...DEFAULT_FILE_ATTACHMENT_COLOR$1 };
 	const ca = readAnnotOpacity(fn, mem, annotPtr);
 	const opacity = ca == null ? 1 : Math.max(0, Math.min(1, ca));
-	const icon = FILE_CODE_TO_ICON[fn.EPDFAnnot_GetName(annotPtr)] ?? DEFAULT_FILE_ATTACHMENT_ICON;
+	const icon = FILE_NAME_TO_ICON[readAnnotName(fn, mem, annotPtr) ?? ""] ?? DEFAULT_FILE_ATTACHMENT_ICON;
 	const attachmentPtr = fn.FPDFAnnot_GetFileAttachment(annotPtr);
 	const file = attachmentPtr ? readAttachmentFileInfo(fn, mem, attachmentPtr) : { name: "" };
 	return {
@@ -2823,167 +3233,67 @@ function readLine(fn, mem, annotPtr, base) {
 	};
 }
 //#endregion
-//#region src/features/annotations/internal/destinationViewCodes.ts
-/**
-* `PDFDEST_VIEW_*` fit-type codes (public/fpdf_doc.h) — the shared
-* vocabulary of `FPDFDest_GetView` (read) and `EPDFDest_CreateView`
-* (write). XYZ is listed for completeness but never goes through
-* CreateView (it has its own null-aware constructor).
-*/
-const DEST_VIEW = {
-	unknown: 0,
-	xyz: 1,
-	fit: 2,
-	fitH: 3,
-	fitV: 4,
-	fitR: 5,
-	fitB: 6,
-	fitBH: 7,
-	fitBV: 8
-};
-/** Wire destination kind → PDFDEST_VIEW code, for the non-XYZ kinds. */
-const VIEW_CODE_BY_KIND = {
-	fit: DEST_VIEW.fit,
-	fitH: DEST_VIEW.fitH,
-	fitV: DEST_VIEW.fitV,
-	fitR: DEST_VIEW.fitR,
-	fitB: DEST_VIEW.fitB,
-	fitBH: DEST_VIEW.fitBH,
-	fitBV: DEST_VIEW.fitBV
-};
-//#endregion
-//#region src/features/annotations/internal/read/readDestination.ts
-const MAX_VIEW_PARAMS = 4;
-/**
-* Materialise one explicit `PdfDestination` from a live `destPtr`. PDFium
-* already resolved named destinations before handing us the pointer, so
-* only explicit arrays arrive here (the rule `PdfDestination` documents).
-*
-* Returns `null` when the destination is unreadable: no visible indirect page
-* in the document, or an unknown fit type. Coordinates stay raw PDF user
-* space — no conversion at this layer.
-*
-* Shared by the link reader today; the outline/bookmark port reuses it.
-*/
-function readDestination(fn, mem, docPtr, destPtr) {
-	const pageObjectNumber = fn.EPDFDest_GetPageObjectNumber(docPtr, destPtr);
-	if (pageObjectNumber === 0) return null;
-	const view = withScratchN(mem, [4, MAX_VIEW_PARAMS * 4], ([countPtr, paramsPtr]) => {
-		const code = fn.FPDFDest_GetView(destPtr, countPtr, paramsPtr);
-		const count = Math.min(readI32(mem, countPtr), MAX_VIEW_PARAMS);
-		const params = [];
-		for (let i = 0; i < count; i++) params.push(readF32(mem, paramsPtr, i * 4));
-		return {
-			code,
-			params
-		};
-	});
-	const at = (i) => i < view.params.length ? view.params[i] : null;
-	switch (view.code) {
-		case DEST_VIEW.xyz: return {
-			kind: "xyz",
-			pageObjectNumber,
-			...readXyzLocation(fn, mem, destPtr)
-		};
-		case DEST_VIEW.fit: return {
-			kind: "fit",
-			pageObjectNumber
-		};
-		case DEST_VIEW.fitH: return {
-			kind: "fitH",
-			pageObjectNumber,
-			top: at(0)
-		};
-		case DEST_VIEW.fitV: return {
-			kind: "fitV",
-			pageObjectNumber,
-			left: at(0)
-		};
-		case DEST_VIEW.fitR:
-			if (view.params.length < 4) return {
-				kind: "fit",
-				pageObjectNumber
-			};
-			return {
-				kind: "fitR",
-				pageObjectNumber,
-				left: view.params[0],
-				bottom: view.params[1],
-				right: view.params[2],
-				top: view.params[3]
-			};
-		case DEST_VIEW.fitB: return {
-			kind: "fitB",
-			pageObjectNumber
-		};
-		case DEST_VIEW.fitBH: return {
-			kind: "fitBH",
-			pageObjectNumber,
-			top: at(0)
-		};
-		case DEST_VIEW.fitBV: return {
-			kind: "fitBV",
-			pageObjectNumber,
-			left: at(0)
-		};
-		default: return null;
-	}
-}
-/** `/XYZ` null-aware axes via `FPDFDest_GetLocationInPage` (FPDF_BOOL is 4 bytes). */
-function readXyzLocation(fn, mem, destPtr) {
-	return withScratchN(mem, [
-		4,
-		4,
-		4,
-		4,
-		4,
-		4
-	], ([hasLeft, hasTop, hasZoom, left, top, zoom]) => {
-		if (!fn.FPDFDest_GetLocationInPage(destPtr, hasLeft, hasTop, hasZoom, left, top, zoom)) return {
-			left: null,
-			top: null,
-			zoom: null
-		};
-		return {
-			left: readI32(mem, hasLeft) ? readF32(mem, left) : null,
-			top: readI32(mem, hasTop) ? readF32(mem, top) : null,
-			zoom: readI32(mem, hasZoom) ? readF32(mem, zoom) : null
-		};
-	});
-}
-//#endregion
 //#region src/features/annotations/internal/read/readLinkAnnotation.ts
 /**
 * Link reader: rect/flags/relationship ride the base (a link grouped to an
 * annotation is plain `inReplyTo` + `replyType: 'group'`); this module only
 * materialises the normalized target.
 *
-* ONE truth, two views: the target is projected off the SAME fork action
-* model the scripting plane reads (`base.actions`) — root classification
-* via the full `EPDF_ACTION_TYPE_*` vocabulary, payloads via the on-demand
-* node getters. The classic `FPDFAction_*` surface (5 types, JavaScript-
-* and Named-blind) is deliberately not consulted; `FPDFLink_GetDest`
-* remains only for the data-only direct `/Dest`, which is not an action.
+* ONE truth, one projection: the target is a pure function of the SAME
+* payload-carrying action tree the scripting plane reads
+* (`base.actions.activate`) — no second native read exists any more, so the
+* two action-shaped surfaces cannot drift by construction.
 *
-* `/A` wins over `/Dest` — the spec forbids carrying both, and when a
-* malformed file has both, Acrobat gives the action precedence. (Our own
-* writes can't produce that state: `EPDFAnnot_SetAction` strips `/Dest`.)
+* `/A` precedence, pinned: an activate action that exists but cannot be
+* executed (an `incomplete` tree, a degraded/unreadable root) projects
+* `unsupported` — a broken action is a dead link, never an invitation to
+* guess. The direct `/Dest` (which is data, not an action) is consulted
+* ONLY when no `/A` exists at all.
 */
 function readLink(fn, mem, annotPtr, base, _rawSubtypeCode, ctx) {
 	return {
 		...base,
 		subtype: "link",
-		target: readLinkTarget(fn, mem, annotPtr, ctx)
+		target: readLinkTarget(fn, mem, annotPtr, base, ctx)
 	};
 }
-function readLinkTarget(fn, mem, annotPtr, ctx) {
-	const modelPtr = fn.EPDFAnnot_GetActionModel(annotPtr, 0);
-	if (modelPtr !== _embedpdf_engine_runtime.NULL_PTR) try {
-		const root = fn.EPDFAction_GetRootNode(modelPtr);
-		if (isValidActionNodeId(root)) return readRootTarget(fn, mem, modelPtr, root, ctx);
-	} finally {
-		fn.EPDFAction_CloseModel(modelPtr);
+/**
+* Project the navigation view from a payload-carrying activate tree. Pure —
+* shared with any consumer that wants the root-level navigation reading of a
+* tree (the link plugin's no-actions-plugin fallback uses the same law).
+*/
+function linkTargetFromActionTree(tree) {
+	if (tree.incomplete) return { kind: "unsupported" };
+	const root = tree.root;
+	if (!root) return { kind: "unsupported" };
+	switch (root.type) {
+		case "goto": return {
+			kind: "goto",
+			destination: root.destination
+		};
+		case "uri": return {
+			kind: "uri",
+			uri: root.uri
+		};
+		case "goto-remote": return {
+			kind: "goto-remote",
+			file: root.filePath
+		};
+		case "launch": return {
+			kind: "launch",
+			path: root.filePath
+		};
+		case "javascript": return { kind: "javascript" };
+		case "named": return {
+			kind: "named",
+			name: root.name
+		};
+		default: return { kind: "unsupported" };
 	}
+}
+function readLinkTarget(fn, mem, annotPtr, base, ctx) {
+	const activate = base.actions?.activate;
+	if (activate) return linkTargetFromActionTree(activate);
 	const linkPtr = fn.FPDFAnnot_GetLink(annotPtr);
 	if (!linkPtr) return null;
 	const destPtr = fn.FPDFLink_GetDest(ctx.docPtr, linkPtr);
@@ -2994,43 +3304,6 @@ function readLinkTarget(fn, mem, annotPtr, ctx) {
 		destination
 	} : { kind: "unsupported" };
 }
-/** Classify the root action node and fetch its payload — the projection. */
-function readRootTarget(fn, mem, modelPtr, node, ctx) {
-	switch (actionTypeFromCode(fn.EPDFAction_GetNodeType(modelPtr, node))) {
-		case "goto": {
-			const destPtr = fn.EPDFAction_GetNodeDest(ctx.docPtr, modelPtr, node);
-			const destination = destPtr ? readDestination(fn, mem, ctx.docPtr, destPtr) : null;
-			return destination ? {
-				kind: "goto",
-				destination
-			} : { kind: "unsupported" };
-		}
-		case "uri": {
-			const uri = readUtf8String(mem, (buf, capacity) => fn.EPDFAction_GetNodeURI(ctx.docPtr, modelPtr, node, buf, capacity));
-			return uri == null ? { kind: "unsupported" } : {
-				kind: "uri",
-				uri
-			};
-		}
-		case "goto-remote": return {
-			kind: "goto-remote",
-			file: readUtf8String(mem, (buf, capacity) => fn.EPDFAction_GetNodeFilePath(modelPtr, node, buf, capacity)) ?? ""
-		};
-		case "launch": return {
-			kind: "launch",
-			path: readUtf8String(mem, (buf, capacity) => fn.EPDFAction_GetNodeFilePath(modelPtr, node, buf, capacity)) ?? ""
-		};
-		case "javascript": return { kind: "javascript" };
-		case "named": {
-			const name = readUtf8String(mem, (buf, capacity) => fn.EPDFAction_GetNodeName(modelPtr, node, buf, capacity));
-			return name == null ? { kind: "unsupported" } : {
-				kind: "named",
-				name
-			};
-		}
-		default: return { kind: "unsupported" };
-	}
-}
 //#endregion
 //#region src/features/annotations/internal/read/readRedactAnnotation.ts
 /** Default `/C` marking outline (red) — the redaction marking convention and
@@ -3111,45 +3384,10 @@ function readSquare(fn, mem, annotPtr, base) {
 	};
 }
 //#endregion
-//#region src/features/annotations/internal/stampName.ts
-/**
-* Stamp `/Name` label ↔ `FPDF_ANNOT_NAME` enum code mapping for the
-* `EPDFAnnot_SetName` / `EPDFAnnot_GetName` fork helpers. Labels are the
-* PDF spec / Adobe literal name values (ISO 32000 §12.5.6.12 table 181
-* plus the Adobe SB/SH extended set the fork supports). Codes mirror the
-* `FPDF_ANNOT_NAME` enum in `public/fpdf_annot.h` — same pattern as
-* `lineEnding.ts` keeping engine-core PDFium-free.
-*/
-const STAMP_NAME_TO_CODE = Object.freeze({
-	Approved: 13,
-	Experimental: 14,
-	NotApproved: 15,
-	AsIs: 16,
-	Expired: 17,
-	NotForPublicRelease: 18,
-	Confidential: 19,
-	Final: 20,
-	Sold: 21,
-	Departmental: 22,
-	ForComment: 23,
-	TopSecret: 24,
-	Draft: 25,
-	ForPublicRelease: 26,
-	Completed: 27,
-	Void: 28,
-	PreliminaryResults: 29,
-	InformationOnly: 30,
-	Rejected: 31,
-	Witness: 32,
-	InitialHere: 33,
-	SignHere: 34,
-	Accepted: 35
-});
-const STAMP_CODE_TO_NAME = Object.freeze(Object.fromEntries(Object.entries(STAMP_NAME_TO_CODE).map(([name, code]) => [code, name])));
-//#endregion
 //#region src/features/annotations/internal/read/readStampAnnotation.ts
 /**
-* Stamp DTO: base + `/Name` label + transform metadata. The visual content
+* Stamp DTO: base + `/Name` (standard or custom identifier, verbatim) +
+* transform metadata. The visual content
 * stays in the `/AP` stream — rendered via `renderAppearanceImages()`,
 * never surfaced as DTO data.
 */
@@ -3159,16 +3397,11 @@ function readStamp(fn, mem, annotPtr, base) {
 	return {
 		...base,
 		subtype: "stamp",
-		name: readStampName(fn, mem, annotPtr),
+		name: readAnnotName(fn, mem, annotPtr),
 		...rotation != null ? { rotation } : {},
 		...unrotatedRect != null ? { unrotatedRect } : {}
 	};
 }
-function readStampName(fn, mem, annotPtr) {
-	const known = STAMP_CODE_TO_NAME[fn.EPDFAnnot_GetName(annotPtr)];
-	if (known !== void 0) return known;
-	return readAnnotString(fn, mem, annotPtr, "Name");
-}
 //#endregion
 //#region src/features/annotations/internal/annotationState.ts
 /**
@@ -3224,7 +3457,7 @@ function readText(fn, mem, annotPtr, base) {
 	const color = readAnnotColor(fn, mem, annotPtr) ?? { ...DEFAULT_NOTE_COLOR$1 };
 	const ca = readAnnotOpacity(fn, mem, annotPtr);
 	const opacity = ca == null ? 1 : Math.max(0, Math.min(1, ca));
-	const icon = NOTE_CODE_TO_ICON[fn.EPDFAnnot_GetName(annotPtr)] ?? DEFAULT_NOTE_ICON;
+	const icon = NOTE_NAME_TO_ICON[readAnnotName(fn, mem, annotPtr) ?? ""] ?? DEFAULT_NOTE_ICON;
 	const stateRaw = readAnnotString(fn, mem, annotPtr, "State");
 	const stateModelRaw = readAnnotString(fn, mem, annotPtr, "StateModel");
 	return {
@@ -3540,7 +3773,7 @@ function readOptions(runtime, model, fieldIndex) {
 	return options;
 }
 /** Read one field of the native model into its per-family DTO. */
-function readFieldAt(runtime, model, fieldIndex, actionBudget = new ActionReadBudgetTracker()) {
+function readFieldAt(runtime, model, fieldIndex, docPtr, actionBudget = new ActionReadBudgetTracker()) {
 	const { fn } = runtime;
 	const fieldObjectNumber = fn.EPDFForm_GetFieldObjNum(model, fieldIndex);
 	const name = readWide(runtime, (buf, cap) => fn.EPDFForm_GetFieldName(model, fieldIndex, buf, cap));
@@ -3548,7 +3781,7 @@ function readFieldAt(runtime, model, fieldIndex, actionBudget = new ActionReadBu
 	const family = FAMILY_BY_CODE[fn.EPDFForm_GetFieldFamily(model, fieldIndex)] ?? "unknown";
 	const valueEntry = readValueEntry(runtime, model, fieldIndex, false);
 	const defaultValueEntry = readValueEntry(runtime, model, fieldIndex, true);
-	const actions = readFieldActions(runtime, model, fieldIndex, actionBudget);
+	const actions = readFieldActions(runtime, model, fieldIndex, docPtr, actionBudget);
 	const base = {
 		ref: fieldObjectNumber > 0 ? {
 			kind: "objectNumber",
@@ -3647,12 +3880,12 @@ function readFieldAt(runtime, model, fieldIndex, actionBudget = new ActionReadBu
 	}
 }
 /** Read the whole native model into a detached {@link FormSnapshot}. */
-function readFormSnapshot(runtime, model) {
+function readFormSnapshot(runtime, model, docPtr) {
 	const { fn } = runtime;
 	const count = fn.EPDFForm_CountFields(model);
 	const fields = [];
 	const actionBudget = new ActionReadBudgetTracker();
-	for (let i = 0; i < count; i++) fields.push(readFieldAt(runtime, model, i, actionBudget));
+	for (let i = 0; i < count; i++) fields.push(readFieldAt(runtime, model, i, docPtr, actionBudget));
 	const calculationOrder = [];
 	const calculationCount = fn.EPDFForm_CountCalculationOrder(model);
 	for (let index = 0; index < calculationCount; index++) {
@@ -3688,7 +3921,7 @@ function entryScalar(entry) {
 	if (entry.kind === "array") return entry.values[0] ?? "";
 	return "";
 }
-function readFieldActions(runtime, model, fieldIndex, budget) {
+function readFieldActions(runtime, model, fieldIndex, docPtr, budget) {
 	const { fn, mem } = runtime;
 	const entries = [
 		["keystroke", 0],
@@ -3698,7 +3931,7 @@ function readFieldActions(runtime, model, fieldIndex, budget) {
 	];
 	const actions = {};
 	for (const [key, event] of entries) {
-		const action = readActionModel(fn, mem, fn.EPDFForm_GetFieldActionModel(model, fieldIndex, event), budget);
+		const action = readActionModel(fn, mem, docPtr, fn.EPDFForm_GetFieldActionModel(model, fieldIndex, event), budget);
 		if (action) actions[key] = action;
 	}
 	return Object.keys(actions).length > 0 ? actions : void 0;
@@ -3944,7 +4177,7 @@ function blendModeFromCode(code) {
 * per-subtype reader builds its DTO by extending this with its own
 * fields and `subtype: '...'` discriminator.
 */
-function readAnnotationBase(fn, mem, annotPtr, pageObjectNumber, index, revision, actionBudget = new ActionReadBudgetTracker()) {
+function readAnnotationBase(fn, mem, docPtr, annotPtr, pageObjectNumber, index, revision, actionBudget = new ActionReadBudgetTracker()) {
 	const identity = readAnnotationIdentity(fn, mem, annotPtr, pageObjectNumber, index, revision);
 	const rect = readAnnotRect(fn, mem, annotPtr);
 	const flags = readAnnotFlags(fn, annotPtr);
@@ -3956,7 +4189,7 @@ function readAnnotationBase(fn, mem, annotPtr, pageObjectNumber, index, revision
 	const blendMode = blendModeFromCode(fn.EPDFAnnot_GetBlendMode(annotPtr));
 	const embd = readEmbedMetadata(fn, mem, annotPtr);
 	const relationship = readAnnotationRelationship(fn, mem, annotPtr, pageObjectNumber);
-	const actions = readAnnotationActions(fn, mem, annotPtr, actionBudget);
+	const actions = readAnnotationActions(fn, mem, docPtr, annotPtr, actionBudget);
 	return {
 		ref: identity.ref,
 		pageObjectNumber,
@@ -3980,7 +4213,7 @@ function readAnnotationBase(fn, mem, annotPtr, pageObjectNumber, index, revision
 		...actions ? { actions } : {}
 	};
 }
-function readAnnotationActions(fn, mem, annotPtr, budget) {
+function readAnnotationActions(fn, mem, docPtr, annotPtr, budget) {
 	const events = [
 		["activate", 0],
 		["cursorEnter", 1],
@@ -3996,7 +4229,7 @@ function readAnnotationActions(fn, mem, annotPtr, budget) {
 	];
 	const actions = {};
 	for (const [key, event] of events) {
-		const action = readActionModel(fn, mem, fn.EPDFAnnot_GetActionModel(annotPtr, event), budget);
+		const action = readActionModel(fn, mem, docPtr, fn.EPDFAnnot_GetActionModel(annotPtr, event), budget);
 		if (action) actions[key] = action;
 	}
 	return Object.keys(actions).length > 0 ? actions : void 0;
@@ -4027,7 +4260,7 @@ function collectPageAnnotations(input) {
 		const annotPtr = getAnnotPtrAt(i);
 		if (!annotPtr) continue;
 		try {
-			const base = readAnnotationBase(fn, mem, annotPtr, pageObjectNumber, i, revision, actionBudget);
+			const base = readAnnotationBase(fn, mem, readCtx.docPtr, annotPtr, pageObjectNumber, i, revision, actionBudget);
 			const subtypeCode = fn.FPDFAnnot_GetSubtype(annotPtr);
 			const { reader } = pickReader(subtypeCode);
 			const dto = reader(fn, mem, annotPtr, base, subtypeCode, readCtx);
@@ -4965,7 +5198,7 @@ function computeMutationImpact(inputs) {
 *     `AnnotationUpdateResult.updated`.
 */
 function readAnnotationFromPtr(fn, mem, annotPtr, pageObjectNumber, index, revision, ctx) {
-	const base = readAnnotationBase(fn, mem, annotPtr, pageObjectNumber, index, revision);
+	const base = readAnnotationBase(fn, mem, ctx.docPtr, annotPtr, pageObjectNumber, index, revision);
 	const subtypeCode = fn.FPDFAnnot_GetSubtype(annotPtr);
 	const { reader } = pickReader(subtypeCode);
 	return reader(fn, mem, annotPtr, base, subtypeCode, ctx);
@@ -5246,7 +5479,7 @@ function isFileAttachmentSubtype(subtype) {
 	return subtype === "file-attachment";
 }
 function setFileAttachmentIcon(fn, annotPtr, icon) {
-	if (!fn.EPDFAnnot_SetName(annotPtr, FILE_ICON_TO_CODE[icon])) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.Unknown, "EPDFAnnot_SetName returned false");
+	if (!fn.EPDFAnnot_SetName(annotPtr, FILE_ICON_TO_NAME[icon])) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.Unknown, "EPDFAnnot_SetName returned false");
 }
 function requireFileResource(file, ctx) {
 	const resource = ctx?.resources?.[file.resource];
@@ -5908,12 +6141,12 @@ const STAMP_FIT_TO_CODE = {
 * creating an annotation or strengthening a weak annotation id.
 */
 function preflightStampDraft(draft, ctx) {
-	if (draft.name !== void 0) requireStampNameCode(draft.name);
+	if (draft.name !== void 0) requireStampName(draft.name);
 	requireStampFit(draft.fit ?? "contain");
 	requireStampContent(draft.source, ctx);
 }
 function preflightStampPatch(patch, ctx) {
-	if (patch.name !== void 0) requireStampNameCode(patch.name);
+	if (patch.name !== void 0 && patch.name !== null) requireStampName(patch.name);
 	requireStampFit(patch.fit ?? "contain");
 	if (patch.source !== void 0) requireStampContent(patch.source, ctx);
 }
@@ -5939,7 +6172,8 @@ function applyStampDraft(fn, mem, annotPtr, draft, ctx) {
 }
 function applyStampPatch(fn, mem, annotPtr, patch, ctx) {
 	applyAnnotationBasePatch(fn, mem, annotPtr, patch);
-	if (patch.name !== void 0) setStampName(fn, annotPtr, patch.name);
+	if (patch.name === null) fn.EPDFAnnot_RemoveKey(annotPtr, "Name");
+	else if (patch.name !== void 0) setStampName(fn, annotPtr, patch.name);
 	if (patch.source !== void 0) {
 		const rect = patch.rect ?? readAnnotRect(fn, mem, annotPtr);
 		authorStampAppearance(fn, mem, annotPtr, patch.source, patch.fit ?? "contain", {
@@ -5959,15 +6193,14 @@ function applyStampPatch(fn, mem, annotPtr, patch, ctx) {
 function isStampSubtype(subtype) {
 	return subtype === "stamp";
 }
+/** Any non-empty name: standard ('Approved') or custom ('#LBGiYhk8V…') —
+*  the fork writes a name object and escapes it; predefined sets are a
+*  reader concern (ISO 32000-2 table 187 allows additional names). */
 function setStampName(fn, annotPtr, name) {
-	const code = STAMP_NAME_TO_CODE[name];
-	if (code === void 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.Unknown, "stamp name preflight invariant broken");
-	if (!fn.EPDFAnnot_SetName(annotPtr, code)) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.Unknown, "EPDFAnnot_SetName returned false");
+	if (!fn.EPDFAnnot_SetName(annotPtr, name)) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.Unknown, "EPDFAnnot_SetName returned false");
 }
-function requireStampNameCode(name) {
-	const code = STAMP_NAME_TO_CODE[name];
-	if (code === void 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, `unknown stamp name '${name}'; supported names: ${Object.keys(STAMP_NAME_TO_CODE).join(", ")}`);
-	return code;
+function requireStampName(name) {
+	if (name.length === 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, "stamp name must be non-empty");
 }
 function requireStampFit(fit) {
 	if (STAMP_FIT_TO_CODE[fit] === void 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, `unknown stamp fit '${String(fit)}'; expected contain, cover, or fill`);
@@ -6155,7 +6388,7 @@ function isTextSubtype(subtype) {
 	return subtype === "text";
 }
 function setNoteIcon(fn, annotPtr, icon) {
-	if (!fn.EPDFAnnot_SetName(annotPtr, NOTE_ICON_TO_CODE[icon])) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.Unknown, "EPDFAnnot_SetName returned false");
+	if (!fn.EPDFAnnot_SetName(annotPtr, NOTE_ICON_TO_NAME[icon])) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.Unknown, "EPDFAnnot_SetName returned false");
 }
 //#endregion
 //#region src/features/annotations/internal/write/writeVertexAnnotation.ts
@@ -6882,6 +7115,141 @@ var AnnotationMutator = class {
 	}
 };
 //#endregion
+//#region src/features/annotations/AnnotationFlattener.ts
+const FLATTEN_FAIL$1 = 0;
+const FLATTEN_SUCCESS$1 = 1;
+const FLATTEN_NOTHING_TO_DO$1 = 2;
+const STATUS_APPLIED = 0;
+const STATUS_NOT_ON_PAGE = 2;
+const FPDF_NO_INCREMENTAL$1 = 2;
+/**
+* The annotation-plane flatten verbs — `pages.flatten` for a chosen set:
+* in place (`flatten`) or into a new single-page document
+* (`exportAppearance`). Both resolve refs to native handles on the page,
+* hand the SET to the fork (one candidate plan, one placement writer — the
+* same code whole-page flatten runs), and release every handle afterwards.
+*/
+var AnnotationFlattener = class {
+	constructor(runtime, session) {
+		this.runtime = runtime;
+		this.session = session;
+	}
+	flatten(pageObjectNumber, refs, usage, signal) {
+		throwIfAborted(signal);
+		this.requireRefs("annotations.flatten", pageObjectNumber, refs);
+		const { fn, mem } = this.runtime;
+		const pool = this.session.pagePool();
+		const pagePtr = pool.acquire(pageObjectNumber);
+		try {
+			const annotPtrs = this.resolveAll(pagePtr, refs);
+			let code;
+			let statuses;
+			try {
+				[code, statuses] = this.withHandleArray(annotPtrs, (arrayPtr) => withScratch(mem, 4 * refs.length, (statusPtr) => {
+					const rc = fn.EPDFPage_FlattenAnnotations(pagePtr, arrayPtr, refs.length, usage === "print" ? 1 : 0, statusPtr);
+					const out = [];
+					for (let i = 0; i < refs.length; i++) out.push(Number(mem.peek(statusPtr, "i32", 4 * i)));
+					return [rc, out];
+				}));
+			} finally {
+				for (const annotPtr of annotPtrs) fn.FPDFPage_CloseAnnot(annotPtr);
+			}
+			if (code === FLATTEN_FAIL$1) {
+				const foreign = statuses.findIndex((status) => status === STATUS_NOT_ON_PAGE);
+				throw new _embedpdf_engine_core_runtime.EngineError(foreign >= 0 ? _embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg : _embedpdf_engine_core_runtime.EngineErrorCode.Unknown, foreign >= 0 ? `annotations.flatten: ref ${foreign} is not an annotation of page ${pageObjectNumber}` : "native annotation flatten failed after preflight");
+			}
+			const results = refs.map((ref, i) => ({
+				ref,
+				status: statuses[i] === STATUS_APPLIED ? "applied" : "skipped"
+			}));
+			if (code === FLATTEN_NOTHING_TO_DO$1 || code !== FLATTEN_SUCCESS$1) return {
+				pageObjectNumber,
+				usage,
+				results,
+				meta: null
+			};
+			this.session.noteMutation();
+			this.session.bumpRevision(pageObjectNumber);
+			try {
+				new AnnotationReader(this.runtime, this.session).list(pageObjectNumber, signal);
+			} catch {}
+			return {
+				pageObjectNumber,
+				usage,
+				results,
+				meta: {
+					affectedPages: [this.session.pageState(pageObjectNumber)],
+					cacheDelta: null
+				}
+			};
+		} finally {
+			pool.release(pageObjectNumber);
+		}
+	}
+	exportAppearance(pageObjectNumber, refs, signal) {
+		throwIfAborted(signal);
+		this.requireRefs("annotations.exportAppearance", pageObjectNumber, refs);
+		const { fn, mem } = this.runtime;
+		const pool = this.session.pagePool();
+		const pagePtr = pool.acquire(pageObjectNumber);
+		let exportedPtr = null;
+		let pdfPtr = null;
+		try {
+			const annotPtrs = this.resolveAll(pagePtr, refs);
+			try {
+				exportedPtr = this.withHandleArray(annotPtrs, (arrayPtr) => fn.EPDFPage_ExportAnnotationsAsDocument(pagePtr, arrayPtr, refs.length));
+			} finally {
+				for (const annotPtr of annotPtrs) fn.FPDFPage_CloseAnnot(annotPtr);
+			}
+			if (!exportedPtr) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, "annotations.exportAppearance: every ref must be a visible annotation of this page with a normal appearance");
+			return withScratch(mem, 4, (sizePtr) => {
+				mem.poke(sizePtr, "i32", 0);
+				pdfPtr = fn.EPDF_SaveDocumentToOwnedBuffer(exportedPtr, FPDF_NO_INCREMENTAL$1, sizePtr);
+				const size = Number(mem.peek(sizePtr, "i32"));
+				if (!pdfPtr || size <= 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.DocOpenFailed, "failed to save exported appearances");
+				const bytes = mem.readBytes(pdfPtr, size);
+				const buffer = new ArrayBuffer(bytes.byteLength);
+				new Uint8Array(buffer).set(bytes);
+				return {
+					bytes: buffer,
+					size
+				};
+			});
+		} finally {
+			if (pdfPtr) fn.EPDF_FreeBuffer(pdfPtr);
+			if (exportedPtr) fn.FPDF_CloseDocument(exportedPtr);
+			pool.release(pageObjectNumber);
+		}
+	}
+	/** Resolve every ref on `pagePtr` (NotFound / InvalidReference from the
+	*  resolver on caller error); on any failure, close what was opened. */
+	resolveAll(pagePtr, refs) {
+		const { fn } = this.runtime;
+		const annotPtrs = [];
+		try {
+			for (const ref of refs) annotPtrs.push(resolveAnnotPtr(this.runtime, this.session, pagePtr, ref));
+			return annotPtrs;
+		} catch (error) {
+			for (const annotPtr of annotPtrs) fn.FPDFPage_CloseAnnot(annotPtr);
+			throw error;
+		}
+	}
+	/** Marshal an `FPDF_ANNOTATION*` array for the call's duration. */
+	withHandleArray(annotPtrs, body) {
+		const { mem } = this.runtime;
+		const isWasm = this.runtime.kind === "wasm";
+		const ptrSize = isWasm ? 4 : 8;
+		return withScratch(mem, Math.max(1, annotPtrs.length * ptrSize), (arrayPtr) => {
+			annotPtrs.forEach((ptr, i) => isWasm ? mem.poke(arrayPtr, "i32", Number(ptr), i * 4) : mem.poke(arrayPtr, "i64", ptr, i * 8));
+			return body(arrayPtr);
+		});
+	}
+	requireRefs(op, pageObjectNumber, refs) {
+		if (refs.length === 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, `${op} requires at least one ref`);
+		for (const ref of refs) if (ref.pageObjectNumber !== pageObjectNumber) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, `${op} refs must all target page ${pageObjectNumber}; got ref on page ${ref.pageObjectNumber}`);
+	}
+};
+//#endregion
 //#region src/features/pages/PagesFlattener.ts
 const FLATTEN_FAIL = 0;
 const FLATTEN_SUCCESS = 1;
@@ -8183,13 +8551,13 @@ var FormReader = class {
 	snapshot(signal) {
 		throwIfAborted(signal);
 		const model = acquireFormModel(this.runtime, this.session);
-		return readFormSnapshot(this.runtime, model);
+		return readFormSnapshot(this.runtime, model, this.session.requireDocPtr());
 	}
 	field(ref, signal) {
 		throwIfAborted(signal);
 		const model = acquireFormModel(this.runtime, this.session);
 		const { fieldIndex } = resolveFieldRef(this.runtime, model, ref);
-		return readFieldAt(this.runtime, model, fieldIndex);
+		return readFieldAt(this.runtime, model, fieldIndex, this.session.requireDocPtr());
 	}
 	/**
 	* Serialize form data. Exports read the reconciled view (recovered
@@ -8345,7 +8713,7 @@ var FormMutator = class {
 		const model = acquireFormModel(this.runtime, this.session);
 		const resolved = resolveFieldRef(this.runtime, model, ref);
 		this.assertWritable(resolved.fieldObjectNumber);
-		const before = readFieldAt(this.runtime, model, resolved.fieldIndex);
+		const before = readFieldAt(this.runtime, model, resolved.fieldIndex, this.session.requireDocPtr());
 		if (!FAMILY_BY_VALUE_TYPE[value.type].includes(before.family)) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, `value type '${value.type}' does not apply to a '${before.family}' field`);
 		const changed = this.applyWrite(resolved.fieldObjectNumber, value);
 		return this.readBack(resolved.fieldObjectNumber, changed);
@@ -8381,7 +8749,7 @@ var FormMutator = class {
 		const fresh = acquireFormModel(this.runtime, this.session);
 		return {
 			...counters,
-			snapshot: readFormSnapshot(this.runtime, fresh),
+			snapshot: readFormSnapshot(this.runtime, fresh, this.session.requireDocPtr()),
 			meta: EMPTY_META$1
 		};
 	}
@@ -8454,7 +8822,7 @@ var FormMutator = class {
 		const model = acquireFormModel(this.runtime, this.session);
 		const resolved = resolveFieldRef(this.runtime, model, ref);
 		this.assertWritable(resolved.fieldObjectNumber);
-		const before = readFieldAt(this.runtime, model, resolved.fieldIndex);
+		const before = readFieldAt(this.runtime, model, resolved.fieldIndex, this.session.requireDocPtr());
 		if (before.family !== patch.family) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, `patch family '${patch.family}' does not match field family '${before.family}'`);
 		const fieldObjectNumber = resolved.fieldObjectNumber;
 		if (patch.name !== void 0) this.applyWideSetter(fn.EPDFForm_SetFieldName, fieldObjectNumber, patch.name, `cannot rename to "${patch.name}" (sibling conflict or invalid)`);
@@ -8485,7 +8853,7 @@ var FormMutator = class {
 		const model = acquireFormModel(this.runtime, this.session);
 		const resolved = resolveFieldRef(this.runtime, model, ref);
 		this.assertWritable(resolved.fieldObjectNumber);
-		const before = readFieldAt(this.runtime, model, resolved.fieldIndex);
+		const before = readFieldAt(this.runtime, model, resolved.fieldIndex, this.session.requireDocPtr());
 		if (!withScratchN(mem, [256 * 4, 4], ([buf, countPtr]) => {
 			mem.poke(countPtr, "i32", 0);
 			return fn.EPDFForm_DeleteField(this.session.requireDocPtr(), resolved.fieldObjectNumber, buf, 256, countPtr);
@@ -8505,7 +8873,7 @@ var FormMutator = class {
 		const model = acquireFormModel(this.runtime, this.session);
 		const resolved = resolveFieldRef(this.runtime, model, ref);
 		this.assertWritable(resolved.fieldObjectNumber);
-		const before = readFieldAt(this.runtime, model, resolved.fieldIndex);
+		const before = readFieldAt(this.runtime, model, resolved.fieldIndex, this.session.requireDocPtr());
 		const toggle = before.family === "checkbox" || before.family === "radio";
 		const state = toggle ? onState ?? (before.family === "checkbox" ? "Yes" : "") : "";
 		if (toggle && (!state || state === "Off")) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, "attaching to a radio group needs a non-\"Off\" onState");
@@ -8551,7 +8919,7 @@ var FormMutator = class {
 		const fresh = acquireFormModel(this.runtime, this.session);
 		const fieldIndex = this.runtime.fn.EPDFForm_GetFieldIndexByObjNum(fresh, fieldObjectNumber);
 		if (fieldIndex < 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.Unknown, "form field vanished after write");
-		return readFieldAt(this.runtime, fresh, fieldIndex);
+		return readFieldAt(this.runtime, fresh, fieldIndex, this.session.requireDocPtr());
 	}
 	assertWritable(fieldObjectNumber) {
 		if (fieldObjectNumber === 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, "form field is stored as a direct object and cannot be written");
@@ -8597,7 +8965,7 @@ var FormMutator = class {
 		const fresh = acquireFormModel(this.runtime, this.session);
 		const fieldIndex = this.runtime.fn.EPDFForm_GetFieldIndexByObjNum(fresh, fieldObjectNumber);
 		if (fieldIndex < 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.Unknown, "form field vanished after write");
-		const field = readFieldAt(this.runtime, fresh, fieldIndex);
+		const field = readFieldAt(this.runtime, fresh, fieldIndex, this.session.requireDocPtr());
 		const changedSet = new Set(changedObjNums);
 		return {
 			field,
@@ -8743,7 +9111,7 @@ var FormsEffectsApplier = class {
 			if (refs.length === 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidArg, "reset effect requires at least one field");
 			const model = acquireFormModel(this.runtime, this.session);
 			const resolved = refs.map((ref) => this.resolve(model, ref));
-			const fields = resolved.map(({ fieldIndex }) => readFieldAt(this.runtime, model, fieldIndex, actionBudget));
+			const fields = resolved.map(({ fieldIndex }) => readFieldAt(this.runtime, model, fieldIndex, this.session.requireDocPtr(), actionBudget));
 			validateEffect(effect, fields);
 			return {
 				effect,
@@ -8768,7 +9136,7 @@ var FormsEffectsApplier = class {
 		const model = acquireFormModel(this.runtime, this.session);
 		const index = this.runtime.fn.EPDFForm_GetFieldIndexByObjNum(model, fieldObjectNumber);
 		if (index < 0) throw new _embedpdf_engine_core_runtime.EngineError(_embedpdf_engine_core_runtime.EngineErrorCode.InvalidReference, "form field disappeared");
-		return readFieldAt(this.runtime, model, index, actionBudget);
+		return readFieldAt(this.runtime, model, index, this.session.requireDocPtr(), actionBudget);
 	}
 	readFieldsBestEffort(fieldObjectNumbers, actionBudget) {
 		const fields = [];
@@ -9135,22 +9503,26 @@ var DocumentActionsReader = class {
 			} finally {
 				fn.FPDFDoc_CloseJavaScriptAction(namedPtr);
 			}
-			const action = requireAction(readActionModel(fn, mem, fn.EPDFDoc_GetNamedJavaScriptActionModel(docPtr, index), budget), "name-tree script", index);
+			budget.reservePayloadBytes(name.length);
+			const action = requireAction(readActionModel(fn, mem, docPtr, fn.EPDFDoc_GetNamedJavaScriptActionModel(docPtr, index), budget), "name-tree script", index);
 			nameTreeScripts.push({
 				name,
 				action
 			});
 		}
-		const openAction = readActionModel(fn, mem, fn.EPDFDoc_GetOpenActionModel(docPtr), budget);
+		const openAction = readActionModel(fn, mem, docPtr, fn.EPDFDoc_GetOpenActionModel(docPtr), budget);
+		const openDestPtr = openAction ? _embedpdf_engine_runtime.NULL_PTR : fn.EPDFDoc_GetOpenActionDest(docPtr);
+		const openDestination = openDestPtr !== _embedpdf_engine_runtime.NULL_PTR ? readDestination(fn, mem, docPtr, openDestPtr) : null;
 		const additional = {};
 		for (const [key, event] of DOCUMENT_ACTION_EVENTS) {
 			throwIfAborted(signal);
-			const action = readActionModel(fn, mem, fn.EPDFDoc_GetAdditionalActionModel(docPtr, event), budget);
+			const action = readActionModel(fn, mem, docPtr, fn.EPDFDoc_GetAdditionalActionModel(docPtr, event), budget);
 			if (action) additional[key] = action;
 		}
 		return {
 			nameTreeScripts,
 			openAction,
+			openDestination,
 			...additional
 		};
 	}
@@ -9484,6 +9856,18 @@ var WorkerHost = class {
 				case "pages.delete":
 					resultPack = this.handlePagesDelete(msg, ctrl.signal);
 					break;
+				case "pages.setName":
+					resultPack = this.handlePagesSetName(msg, ctrl.signal);
+					break;
+				case "annotations.flatten":
+					resultPack = this.handleAnnotationsFlatten(msg, ctrl.signal);
+					break;
+				case "annotations.exportAppearance":
+					resultPack = this.handleAnnotationsExportAppearance(msg, ctrl.signal);
+					break;
+				case "pages.removeName":
+					resultPack = this.handlePagesRemoveName(msg, ctrl.signal);
+					break;
 				case "pages.flatten":
 					resultPack = this.handlePagesFlatten(msg, ctrl.signal);
 					break;
@@ -9711,6 +10095,27 @@ var WorkerHost = class {
 			result
 		}, req.artifactPath);
 	}
+	handleAnnotationsFlatten(req, signal) {
+		const session = this.requireSession(req);
+		const result = new AnnotationFlattener(this.runtime, session).flatten(req.pageObjectNumber, req.refs, req.usage, signal);
+		if (result.meta === null) return (0, _embedpdf_engine_core_runtime.wirePack)({
+			tag: "annotations.flatten",
+			result
+		});
+		return this.finishMutation(session, {
+			tag: "annotations.flatten",
+			result
+		}, req.artifactPath);
+	}
+	handleAnnotationsExportAppearance(req, signal) {
+		const session = this.requireSession(req);
+		const exported = new AnnotationFlattener(this.runtime, session).exportAppearance(req.pageObjectNumber, req.refs, signal);
+		return (0, _embedpdf_engine_core_runtime.wirePack)({
+			tag: "annotations.exportAppearance",
+			bytes: exported.bytes,
+			size: exported.size
+		}, [exported.bytes]);
+	}
 	handleAnnotationsMove(req, signal) {
 		const session = this.requireSession(req);
 		const result = new AnnotationMutator(this.runtime, session).move(req.pageObjectNumber, req.refs, req.toIndex, signal);
@@ -9750,6 +10155,26 @@ var WorkerHost = class {
 			result
 		}, req.artifactPath);
 	}
+	handlePagesSetName(req, signal) {
+		const session = this.requireSession(req);
+		const result = new PagesMutator(this.runtime, session).setName({
+			name: req.name,
+			pageObjectNumber: req.pageObjectNumber,
+			...req.replace !== void 0 ? { replace: req.replace } : {}
+		}, signal);
+		return this.finishMutation(session, {
+			tag: "pages.setName",
+			result
+		}, req.artifactPath);
+	}
+	handlePagesRemoveName(req, signal) {
+		const session = this.requireSession(req);
+		const result = new PagesMutator(this.runtime, session).removeName({ name: req.name }, signal);
+		return this.finishMutation(session, {
+			tag: "pages.removeName",
+			result
+		}, req.artifactPath);
+	}
 	handlePagesFlatten(req, signal) {
 		const session = this.requireSession(req);
 		const result = new PagesFlattener(this.runtime, session).flatten(req.pageObjectNumbers, req.usage, signal);
@@ -10327,6 +10752,7 @@ function passwordRequiredProbe() {
 exports.ALL_STANDARD_SECURITY_PERMISSIONS = ALL_STANDARD_SECURITY_PERMISSIONS;
 exports.ActionReadBudgetTracker = ActionReadBudgetTracker;
 exports.AnnotationAppearanceReader = AnnotationAppearanceReader;
+exports.AnnotationFlattener = AnnotationFlattener;
 exports.AnnotationMutator = AnnotationMutator;
 exports.AnnotationReader = AnnotationReader;
 exports.AttachmentMutator = AttachmentMutator;