@embedpdf/plugin-page-edit 3.0.0-next.0

package/LICENSE

@@ -0,0 +1,192 @@
+Copyright 2026 CloudPDF LTD
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use files in this distribution except in compliance with the License.
+You may obtain a copy of the License at
+
+    https://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+-----------------------------------------------------------------------
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS

package/dist/index.cjs

@@ -0,0 +1,70 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _embedpdf_core = require("@embedpdf/core");
+//#region src/capability.ts
+/**
+* Authorization for structural page edits. Maps to PDF bit 11 (ASSEMBLE =
+* insert/rotate/delete pages). The engine ALSO enforces this — every
+* page-structure verb throws `PermissionDenied` without it, identically on
+* local and cloud — so `canEdit()` is the UI mirror of a real guard, not the
+* guard itself. Typed as `DocCapability` so a typo is a compile error.
+*/
+const ASSEMBLE_CAPABILITY = "doc.pages.assemble";
+/**
+* Forwards structural edits to the document's engine handle, addressed by PON.
+* The handle (`ctx.doc`) and the page registry (`ctx.document()`, kept in sync
+* by the kernel's event→registry bridge) are both already on the plugin
+* context — this capability is the thin layer that turns the relative rotate
+* gesture into the engine's absolute wire.
+*/
+function createPageEditCapability(ctx) {
+	const requireDoc = () => {
+		const doc = ctx.doc;
+		if (!doc) throw new Error("[page-edit] no document bound");
+		return doc;
+	};
+	/** Current absolute rotation of a page from the registry; 0 if unknown. */
+	const rotationOf = (pon) => {
+		return (ctx.document()?.pages.find((p) => p.pageObjectNumber === pon))?.rotation ?? 0;
+	};
+	return {
+		canEdit() {
+			return ctx.doc?.security.allows(ASSEMBLE_CAPABILITY) ?? false;
+		},
+		rotateBy(pon, delta) {
+			const next = ((rotationOf(pon) + delta) % 360 + 360) % 360;
+			return requireDoc().pages.rotate([pon], next);
+		},
+		setRotation(pons, rotation) {
+			return requireDoc().pages.rotate(pons, rotation);
+		},
+		move(pons, destIndex) {
+			return requireDoc().pages.move(pons, destIndex);
+		},
+		delete(pons) {
+			return requireDoc().pages.delete(pons);
+		}
+	};
+}
+//#endregion
+//#region src/types.ts
+const PageEditToken = (0, _embedpdf_core.createCapabilityToken)("page-edit");
+//#endregion
+//#region src/page-edit.plugin.ts
+/**
+* Document-scoped, stateless: turns the engine handle's page service into a
+* PON-addressed edit capability. The relative→absolute rotation lives in the
+* capability so the four framework adapters never re-derive it, and this is the
+* home for client-side edit state (pending/optimistic/undo) when it lands —
+* adapters keep their thin hook over `PageEditToken` unchanged.
+*/
+const pageEditPlugin = () => (0, _embedpdf_core.definePlugin)({
+	id: "page-edit",
+	scope: "document",
+	token: PageEditToken,
+	capability: createPageEditCapability
+});
+//#endregion
+exports.PageEditToken = PageEditToken;
+exports.pageEditPlugin = pageEditPlugin;
+
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":[],"sources":["../src/capability.ts","../src/types.ts","../src/page-edit.plugin.ts"],"sourcesContent":["import type { PluginContext, PageObjectNumber, PageRotation, DocCapability } from '@embedpdf/core';\nimport type { PageEditCapability } from './types';\n\n/**\n * Authorization for structural page edits. Maps to PDF bit 11 (ASSEMBLE =\n * insert/rotate/delete pages). The engine ALSO enforces this — every\n * page-structure verb throws `PermissionDenied` without it, identically on\n * local and cloud — so `canEdit()` is the UI mirror of a real guard, not the\n * guard itself. Typed as `DocCapability` so a typo is a compile error.\n */\nconst ASSEMBLE_CAPABILITY: DocCapability = 'doc.pages.assemble';\n\n/**\n * Forwards structural edits to the document's engine handle, addressed by PON.\n * The handle (`ctx.doc`) and the page registry (`ctx.document()`, kept in sync\n * by the kernel's event→registry bridge) are both already on the plugin\n * context — this capability is the thin layer that turns the relative rotate\n * gesture into the engine's absolute wire.\n */\nexport function createPageEditCapability(ctx: PluginContext<unknown>): PageEditCapability {\n  const requireDoc = () => {\n    const doc = ctx.doc;\n    if (!doc) throw new Error('[page-edit] no document bound');\n    return doc;\n  };\n\n  /** Current absolute rotation of a page from the registry; 0 if unknown. */\n  const rotationOf = (pon: PageObjectNumber): PageRotation => {\n    const page = ctx.document()?.pages.find((p) => p.pageObjectNumber === pon);\n    return page?.rotation ?? 0;\n  };\n\n  return {\n    canEdit() {\n      // Wildcard-aware predicate (mirrors the engine's own enforcement),\n      // identical on both engines. NOT `effectiveScope.includes(...)` — that\n      // enumeration drops the `*` admin grant, so it would hide the UI on a\n      // default admin open even though the engine allows the edit.\n      return ctx.doc?.security.allows(ASSEMBLE_CAPABILITY) ?? false;\n    },\n\n    rotateBy(pon, delta) {\n      // Wrap to [0, 360) — the double-mod keeps -90 from current 0 landing on 270.\n      const next = ((((rotationOf(pon) + delta) % 360) + 360) % 360) as PageRotation;\n      return requireDoc().pages.rotate([pon], next);\n    },\n\n    setRotation(pons, rotation) {\n      return requireDoc().pages.rotate(pons, rotation);\n    },\n\n    move(pons, destIndex) {\n      return requireDoc().pages.move(pons, destIndex);\n    },\n\n    delete(pons) {\n      return requireDoc().pages.delete(pons);\n    },\n  };\n}\n","import {\n  createCapabilityToken,\n  type AbortablePromise,\n  type PageObjectNumber,\n  type PageRotation,\n  type PageRotateResult,\n  type PageMoveResult,\n  type PageDeleteResult,\n} from '@embedpdf/core';\n\n/**\n * Structural page edits, addressed by durable PON (never display index — an\n * index shifts the moment a sibling is moved or deleted). Mirrors the engine's\n * `DocumentPagesService` 1:1, with one addition the engine can't have: the\n * relative `rotateBy` gesture. The engine wire is always ABSOLUTE; turning a\n * \"+90° on this thumbnail\" click into an absolute value needs the page's\n * current rotation, so that read+arithmetic lives HERE — once — instead of\n * being re-derived in every framework adapter's click handler.\n *\n * Document-scoped: rotation is shared document metadata, so editing through the\n * sidebar lens and seeing it in the main lens is automatic (both read the same\n * registry, which the kernel keeps in sync from the engine's event stream).\n */\nexport interface PageEditCapability {\n  /**\n   * Whether this caller is authorized to perform structural page edits —\n   * `effectiveScope` includes `doc.pages.assemble` (PDF bit 11). UIs gate their\n   * edit affordances on this; the engine independently enforces the same\n   * capability and throws `PermissionDenied` if a call slips through.\n   */\n  canEdit(): boolean;\n\n  /**\n   * Rotate a SINGLE page by a relative quarter-turn — the per-thumbnail button\n   * gesture. Reads the page's current rotation from the registry and forwards\n   * the resulting absolute rotation to the engine.\n   */\n  rotateBy(pon: PageObjectNumber, delta: 90 | -90): AbortablePromise<PageRotateResult>;\n\n  /**\n   * Set the ABSOLUTE rotation of one or more pages to a single shared value —\n   * the multi-select gesture. Maps 1:1 to the engine.\n   */\n  setRotation(pons: PageObjectNumber[], rotation: PageRotation): AbortablePromise<PageRotateResult>;\n\n  /** Reorder pages (by PON) as a contiguous block starting at `destIndex`. */\n  move(pons: PageObjectNumber[], destIndex: number): AbortablePromise<PageMoveResult>;\n\n  /** Delete pages by PON. The engine rejects deleting every page. */\n  delete(pons: PageObjectNumber[]): AbortablePromise<PageDeleteResult>;\n}\n\nexport const PageEditToken = createCapabilityToken<PageEditCapability>('page-edit');\n","import { definePlugin } from '@embedpdf/core';\nimport { createPageEditCapability } from './capability';\nimport { PageEditToken } from './types';\n\n/**\n * Document-scoped, stateless: turns the engine handle's page service into a\n * PON-addressed edit capability. The relative→absolute rotation lives in the\n * capability so the four framework adapters never re-derive it, and this is the\n * home for client-side edit state (pending/optimistic/undo) when it lands —\n * adapters keep their thin hook over `PageEditToken` unchanged.\n */\nexport const pageEditPlugin = () =>\n  definePlugin({\n    id: 'page-edit',\n    scope: 'document',\n    token: PageEditToken,\n    capability: createPageEditCapability,\n  });\n"],"mappings":";;;;;;;;;;AAUA,MAAM,sBAAqC;;;;;;;;AAS3C,SAAgB,yBAAyB,KAAiD;CACxF,MAAM,mBAAmB;EACvB,MAAM,MAAM,IAAI;EAChB,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,+BAA+B;EACzD,OAAO;CACT;;CAGA,MAAM,cAAc,QAAwC;EAE1D,QADa,IAAI,SAAS,CAAC,EAAE,MAAM,MAAM,MAAM,EAAE,qBAAqB,GAAG,EAAA,EAC5D,YAAY;CAC3B;CAEA,OAAO;EACL,UAAU;GAKR,OAAO,IAAI,KAAK,SAAS,OAAO,mBAAmB,KAAK;EAC1D;EAEA,SAAS,KAAK,OAAO;GAEnB,MAAM,SAAW,WAAW,GAAG,IAAI,SAAS,MAAO,OAAO;GAC1D,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,GAAG,IAAI;EAC9C;EAEA,YAAY,MAAM,UAAU;GAC1B,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,MAAM,QAAQ;EACjD;EAEA,KAAK,MAAM,WAAW;GACpB,OAAO,WAAW,CAAC,CAAC,MAAM,KAAK,MAAM,SAAS;EAChD;EAEA,OAAO,MAAM;GACX,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,IAAI;EACvC;CACF;AACF;;;ACPA,MAAa,iBAAA,GAAA,eAAA,sBAAA,CAA0D,WAAW;;;;;;;;;;ACzClF,MAAa,wBAAA,GAAA,eAAA,aAAA,CACE;CACX,IAAI;CACJ,OAAO;CACP,OAAO;CACP,YAAY;AACd,CAAC"}

package/dist/index.d.cts

@@ -0,0 +1,53 @@
+import { AbortablePromise, PageDeleteResult, PageMoveResult, PageObjectNumber, PageRotateResult, PageRotation } from "@embedpdf/core";
+//#region src/types.d.ts
+/**
+ * Structural page edits, addressed by durable PON (never display index — an
+ * index shifts the moment a sibling is moved or deleted). Mirrors the engine's
+ * `DocumentPagesService` 1:1, with one addition the engine can't have: the
+ * relative `rotateBy` gesture. The engine wire is always ABSOLUTE; turning a
+ * "+90° on this thumbnail" click into an absolute value needs the page's
+ * current rotation, so that read+arithmetic lives HERE — once — instead of
+ * being re-derived in every framework adapter's click handler.
+ *
+ * Document-scoped: rotation is shared document metadata, so editing through the
+ * sidebar lens and seeing it in the main lens is automatic (both read the same
+ * registry, which the kernel keeps in sync from the engine's event stream).
+ */
+interface PageEditCapability {
+  /**
+   * Whether this caller is authorized to perform structural page edits —
+   * `effectiveScope` includes `doc.pages.assemble` (PDF bit 11). UIs gate their
+   * edit affordances on this; the engine independently enforces the same
+   * capability and throws `PermissionDenied` if a call slips through.
+   */
+  canEdit(): boolean;
+  /**
+   * Rotate a SINGLE page by a relative quarter-turn — the per-thumbnail button
+   * gesture. Reads the page's current rotation from the registry and forwards
+   * the resulting absolute rotation to the engine.
+   */
+  rotateBy(pon: PageObjectNumber, delta: 90 | -90): AbortablePromise<PageRotateResult>;
+  /**
+   * Set the ABSOLUTE rotation of one or more pages to a single shared value —
+   * the multi-select gesture. Maps 1:1 to the engine.
+   */
+  setRotation(pons: PageObjectNumber[], rotation: PageRotation): AbortablePromise<PageRotateResult>;
+  /** Reorder pages (by PON) as a contiguous block starting at `destIndex`. */
+  move(pons: PageObjectNumber[], destIndex: number): AbortablePromise<PageMoveResult>;
+  /** Delete pages by PON. The engine rejects deleting every page. */
+  delete(pons: PageObjectNumber[]): AbortablePromise<PageDeleteResult>;
+}
+declare const PageEditToken: import("@embedpdf/core").CapabilityToken<PageEditCapability>;
+//#endregion
+//#region src/page-edit.plugin.d.ts
+/**
+ * Document-scoped, stateless: turns the engine handle's page service into a
+ * PON-addressed edit capability. The relative→absolute rotation lives in the
+ * capability so the four framework adapters never re-derive it, and this is the
+ * home for client-side edit state (pending/optimistic/undo) when it lands —
+ * adapters keep their thin hook over `PageEditToken` unchanged.
+ */
+declare const pageEditPlugin: () => import("@embedpdf/core").PluginDef<unknown, import("@embedpdf/core").Action, PageEditCapability>;
+//#endregion
+export { type PageEditCapability, PageEditToken, pageEditPlugin };
+//# sourceMappingURL=index.d.cts.map

package/dist/index.d.ts

@@ -0,0 +1,53 @@
+import { AbortablePromise, PageDeleteResult, PageMoveResult, PageObjectNumber, PageRotateResult, PageRotation } from "@embedpdf/core";
+//#region src/types.d.ts
+/**
+ * Structural page edits, addressed by durable PON (never display index — an
+ * index shifts the moment a sibling is moved or deleted). Mirrors the engine's
+ * `DocumentPagesService` 1:1, with one addition the engine can't have: the
+ * relative `rotateBy` gesture. The engine wire is always ABSOLUTE; turning a
+ * "+90° on this thumbnail" click into an absolute value needs the page's
+ * current rotation, so that read+arithmetic lives HERE — once — instead of
+ * being re-derived in every framework adapter's click handler.
+ *
+ * Document-scoped: rotation is shared document metadata, so editing through the
+ * sidebar lens and seeing it in the main lens is automatic (both read the same
+ * registry, which the kernel keeps in sync from the engine's event stream).
+ */
+interface PageEditCapability {
+  /**
+   * Whether this caller is authorized to perform structural page edits —
+   * `effectiveScope` includes `doc.pages.assemble` (PDF bit 11). UIs gate their
+   * edit affordances on this; the engine independently enforces the same
+   * capability and throws `PermissionDenied` if a call slips through.
+   */
+  canEdit(): boolean;
+  /**
+   * Rotate a SINGLE page by a relative quarter-turn — the per-thumbnail button
+   * gesture. Reads the page's current rotation from the registry and forwards
+   * the resulting absolute rotation to the engine.
+   */
+  rotateBy(pon: PageObjectNumber, delta: 90 | -90): AbortablePromise<PageRotateResult>;
+  /**
+   * Set the ABSOLUTE rotation of one or more pages to a single shared value —
+   * the multi-select gesture. Maps 1:1 to the engine.
+   */
+  setRotation(pons: PageObjectNumber[], rotation: PageRotation): AbortablePromise<PageRotateResult>;
+  /** Reorder pages (by PON) as a contiguous block starting at `destIndex`. */
+  move(pons: PageObjectNumber[], destIndex: number): AbortablePromise<PageMoveResult>;
+  /** Delete pages by PON. The engine rejects deleting every page. */
+  delete(pons: PageObjectNumber[]): AbortablePromise<PageDeleteResult>;
+}
+declare const PageEditToken: import("@embedpdf/core").CapabilityToken<PageEditCapability>;
+//#endregion
+//#region src/page-edit.plugin.d.ts
+/**
+ * Document-scoped, stateless: turns the engine handle's page service into a
+ * PON-addressed edit capability. The relative→absolute rotation lives in the
+ * capability so the four framework adapters never re-derive it, and this is the
+ * home for client-side edit state (pending/optimistic/undo) when it lands —
+ * adapters keep their thin hook over `PageEditToken` unchanged.
+ */
+declare const pageEditPlugin: () => import("@embedpdf/core").PluginDef<unknown, import("@embedpdf/core").Action, PageEditCapability>;
+//#endregion
+export { type PageEditCapability, PageEditToken, pageEditPlugin };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -0,0 +1,68 @@
+import { createCapabilityToken, definePlugin } from "@embedpdf/core";
+//#region src/capability.ts
+/**
+* Authorization for structural page edits. Maps to PDF bit 11 (ASSEMBLE =
+* insert/rotate/delete pages). The engine ALSO enforces this — every
+* page-structure verb throws `PermissionDenied` without it, identically on
+* local and cloud — so `canEdit()` is the UI mirror of a real guard, not the
+* guard itself. Typed as `DocCapability` so a typo is a compile error.
+*/
+const ASSEMBLE_CAPABILITY = "doc.pages.assemble";
+/**
+* Forwards structural edits to the document's engine handle, addressed by PON.
+* The handle (`ctx.doc`) and the page registry (`ctx.document()`, kept in sync
+* by the kernel's event→registry bridge) are both already on the plugin
+* context — this capability is the thin layer that turns the relative rotate
+* gesture into the engine's absolute wire.
+*/
+function createPageEditCapability(ctx) {
+	const requireDoc = () => {
+		const doc = ctx.doc;
+		if (!doc) throw new Error("[page-edit] no document bound");
+		return doc;
+	};
+	/** Current absolute rotation of a page from the registry; 0 if unknown. */
+	const rotationOf = (pon) => {
+		return (ctx.document()?.pages.find((p) => p.pageObjectNumber === pon))?.rotation ?? 0;
+	};
+	return {
+		canEdit() {
+			return ctx.doc?.security.allows(ASSEMBLE_CAPABILITY) ?? false;
+		},
+		rotateBy(pon, delta) {
+			const next = ((rotationOf(pon) + delta) % 360 + 360) % 360;
+			return requireDoc().pages.rotate([pon], next);
+		},
+		setRotation(pons, rotation) {
+			return requireDoc().pages.rotate(pons, rotation);
+		},
+		move(pons, destIndex) {
+			return requireDoc().pages.move(pons, destIndex);
+		},
+		delete(pons) {
+			return requireDoc().pages.delete(pons);
+		}
+	};
+}
+//#endregion
+//#region src/types.ts
+const PageEditToken = createCapabilityToken("page-edit");
+//#endregion
+//#region src/page-edit.plugin.ts
+/**
+* Document-scoped, stateless: turns the engine handle's page service into a
+* PON-addressed edit capability. The relative→absolute rotation lives in the
+* capability so the four framework adapters never re-derive it, and this is the
+* home for client-side edit state (pending/optimistic/undo) when it lands —
+* adapters keep their thin hook over `PageEditToken` unchanged.
+*/
+const pageEditPlugin = () => definePlugin({
+	id: "page-edit",
+	scope: "document",
+	token: PageEditToken,
+	capability: createPageEditCapability
+});
+//#endregion
+export { PageEditToken, pageEditPlugin };
+
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../src/capability.ts","../src/types.ts","../src/page-edit.plugin.ts"],"sourcesContent":["import type { PluginContext, PageObjectNumber, PageRotation, DocCapability } from '@embedpdf/core';\nimport type { PageEditCapability } from './types';\n\n/**\n * Authorization for structural page edits. Maps to PDF bit 11 (ASSEMBLE =\n * insert/rotate/delete pages). The engine ALSO enforces this — every\n * page-structure verb throws `PermissionDenied` without it, identically on\n * local and cloud — so `canEdit()` is the UI mirror of a real guard, not the\n * guard itself. Typed as `DocCapability` so a typo is a compile error.\n */\nconst ASSEMBLE_CAPABILITY: DocCapability = 'doc.pages.assemble';\n\n/**\n * Forwards structural edits to the document's engine handle, addressed by PON.\n * The handle (`ctx.doc`) and the page registry (`ctx.document()`, kept in sync\n * by the kernel's event→registry bridge) are both already on the plugin\n * context — this capability is the thin layer that turns the relative rotate\n * gesture into the engine's absolute wire.\n */\nexport function createPageEditCapability(ctx: PluginContext<unknown>): PageEditCapability {\n  const requireDoc = () => {\n    const doc = ctx.doc;\n    if (!doc) throw new Error('[page-edit] no document bound');\n    return doc;\n  };\n\n  /** Current absolute rotation of a page from the registry; 0 if unknown. */\n  const rotationOf = (pon: PageObjectNumber): PageRotation => {\n    const page = ctx.document()?.pages.find((p) => p.pageObjectNumber === pon);\n    return page?.rotation ?? 0;\n  };\n\n  return {\n    canEdit() {\n      // Wildcard-aware predicate (mirrors the engine's own enforcement),\n      // identical on both engines. NOT `effectiveScope.includes(...)` — that\n      // enumeration drops the `*` admin grant, so it would hide the UI on a\n      // default admin open even though the engine allows the edit.\n      return ctx.doc?.security.allows(ASSEMBLE_CAPABILITY) ?? false;\n    },\n\n    rotateBy(pon, delta) {\n      // Wrap to [0, 360) — the double-mod keeps -90 from current 0 landing on 270.\n      const next = ((((rotationOf(pon) + delta) % 360) + 360) % 360) as PageRotation;\n      return requireDoc().pages.rotate([pon], next);\n    },\n\n    setRotation(pons, rotation) {\n      return requireDoc().pages.rotate(pons, rotation);\n    },\n\n    move(pons, destIndex) {\n      return requireDoc().pages.move(pons, destIndex);\n    },\n\n    delete(pons) {\n      return requireDoc().pages.delete(pons);\n    },\n  };\n}\n","import {\n  createCapabilityToken,\n  type AbortablePromise,\n  type PageObjectNumber,\n  type PageRotation,\n  type PageRotateResult,\n  type PageMoveResult,\n  type PageDeleteResult,\n} from '@embedpdf/core';\n\n/**\n * Structural page edits, addressed by durable PON (never display index — an\n * index shifts the moment a sibling is moved or deleted). Mirrors the engine's\n * `DocumentPagesService` 1:1, with one addition the engine can't have: the\n * relative `rotateBy` gesture. The engine wire is always ABSOLUTE; turning a\n * \"+90° on this thumbnail\" click into an absolute value needs the page's\n * current rotation, so that read+arithmetic lives HERE — once — instead of\n * being re-derived in every framework adapter's click handler.\n *\n * Document-scoped: rotation is shared document metadata, so editing through the\n * sidebar lens and seeing it in the main lens is automatic (both read the same\n * registry, which the kernel keeps in sync from the engine's event stream).\n */\nexport interface PageEditCapability {\n  /**\n   * Whether this caller is authorized to perform structural page edits —\n   * `effectiveScope` includes `doc.pages.assemble` (PDF bit 11). UIs gate their\n   * edit affordances on this; the engine independently enforces the same\n   * capability and throws `PermissionDenied` if a call slips through.\n   */\n  canEdit(): boolean;\n\n  /**\n   * Rotate a SINGLE page by a relative quarter-turn — the per-thumbnail button\n   * gesture. Reads the page's current rotation from the registry and forwards\n   * the resulting absolute rotation to the engine.\n   */\n  rotateBy(pon: PageObjectNumber, delta: 90 | -90): AbortablePromise<PageRotateResult>;\n\n  /**\n   * Set the ABSOLUTE rotation of one or more pages to a single shared value —\n   * the multi-select gesture. Maps 1:1 to the engine.\n   */\n  setRotation(pons: PageObjectNumber[], rotation: PageRotation): AbortablePromise<PageRotateResult>;\n\n  /** Reorder pages (by PON) as a contiguous block starting at `destIndex`. */\n  move(pons: PageObjectNumber[], destIndex: number): AbortablePromise<PageMoveResult>;\n\n  /** Delete pages by PON. The engine rejects deleting every page. */\n  delete(pons: PageObjectNumber[]): AbortablePromise<PageDeleteResult>;\n}\n\nexport const PageEditToken = createCapabilityToken<PageEditCapability>('page-edit');\n","import { definePlugin } from '@embedpdf/core';\nimport { createPageEditCapability } from './capability';\nimport { PageEditToken } from './types';\n\n/**\n * Document-scoped, stateless: turns the engine handle's page service into a\n * PON-addressed edit capability. The relative→absolute rotation lives in the\n * capability so the four framework adapters never re-derive it, and this is the\n * home for client-side edit state (pending/optimistic/undo) when it lands —\n * adapters keep their thin hook over `PageEditToken` unchanged.\n */\nexport const pageEditPlugin = () =>\n  definePlugin({\n    id: 'page-edit',\n    scope: 'document',\n    token: PageEditToken,\n    capability: createPageEditCapability,\n  });\n"],"mappings":";;;;;;;;;AAUA,MAAM,sBAAqC;;;;;;;;AAS3C,SAAgB,yBAAyB,KAAiD;CACxF,MAAM,mBAAmB;EACvB,MAAM,MAAM,IAAI;EAChB,IAAI,CAAC,KAAK,MAAM,IAAI,MAAM,+BAA+B;EACzD,OAAO;CACT;;CAGA,MAAM,cAAc,QAAwC;EAE1D,QADa,IAAI,SAAS,CAAC,EAAE,MAAM,MAAM,MAAM,EAAE,qBAAqB,GAAG,EAAA,EAC5D,YAAY;CAC3B;CAEA,OAAO;EACL,UAAU;GAKR,OAAO,IAAI,KAAK,SAAS,OAAO,mBAAmB,KAAK;EAC1D;EAEA,SAAS,KAAK,OAAO;GAEnB,MAAM,SAAW,WAAW,GAAG,IAAI,SAAS,MAAO,OAAO;GAC1D,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,GAAG,IAAI;EAC9C;EAEA,YAAY,MAAM,UAAU;GAC1B,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,MAAM,QAAQ;EACjD;EAEA,KAAK,MAAM,WAAW;GACpB,OAAO,WAAW,CAAC,CAAC,MAAM,KAAK,MAAM,SAAS;EAChD;EAEA,OAAO,MAAM;GACX,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,IAAI;EACvC;CACF;AACF;;;ACPA,MAAa,gBAAgB,sBAA0C,WAAW;;;;;;;;;;ACzClF,MAAa,uBACX,aAAa;CACX,IAAI;CACJ,OAAO;CACP,OAAO;CACP,YAAY;AACd,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@embedpdf/plugin-page-edit",
+  "version": "3.0.0-next.0",
+  "private": false,
+  "description": "Document-scoped page-edit capability: PON-addressed rotate/move/delete over the engine DocumentHandle. Owns relative→absolute rotation so framework adapters never re-derive it; the home for pending/undo/gating state.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@embedpdf/core": "3.0.0-next.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.0.0",
+    "vitest": "^2.1.9",
+    "@embedpdf/tooling-build": "0.0.0"
+  },
+  "license": "Apache-2.0",
+  "sideEffects": false,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/embedpdf/embed-pdf-viewer.git",
+    "directory": "packages/plugin/page-edit"
+  },
+  "scripts": {
+    "build": "epdf-build",
+    "clean": "rimraf dist",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
+}