@laminapdf/wasm 0.2.0-alpha.6 → 0.3.0

package/dist/lamina_pdf_base.d.ts

@@ -14,11 +14,146 @@ export interface Diagnostic {
 }
 
 
+/**
+ * A bookmark's look: its colour (`/C`; `None` is the viewer's default, black) and type style
+ * (`/F`: bit 1 italic, bit 2 bold).
+ *
+ * Added in 0.3.0.
+ */
+export interface OutlineStyle {
+    /**
+     * The colour.
+     */
+    color?: string | null;
+    /**
+     * Bold.
+     */
+    bold?: boolean;
+    /**
+     * Italic.
+     */
+    italic?: boolean;
+}
+
+/**
+ * A change a signature's restriction forbids.
+ */
+export interface ViolationJs {
+    /**
+     * The kind of change.
+     */
+    class: ModificationClass;
+    /**
+     * `docMdp`, `fieldMdp`, `usageRights`, `signedBytes` or `signedWidget`.
+     */
+    restriction: string;
+    /**
+     * The certification's `/P` (1, 2 or 3), for a `docMdp` restriction.
+     */
+    permission?: number;
+    /**
+     * The signature that carries the restriction.
+     */
+    signature: SignatureJs;
+    /**
+     * The form field whose widget a page edit deletes or reshows (its ID), for a
+     * `signedWidget` restriction or a `fieldMdp` one that a page edit breaks.
+     */
+    field?: string;
+}
+
+/**
+ * A colour of 8 bits a channel, `"#rrggbb"` on the wire. A bookmark's `/C` (§12.3.3,
+ * Table 151) holds it as three numbers from 0 to 1.
+ *
+ * Added in 0.3.0.
+ */
+export type Rgb = string;
+
+/**
+ * A conformance claim the document's metadata no longer meets.
+ *
+ * Added in 0.2.0.
+ */
+export type ConformanceWarning = { code: "pdfa-one-author"; authors: number } | { code: "pdfua-title-missing" } | { code: "pdfa-info-mismatch"; keys: MetadataKey[] } | { code: "duplicate-tags-incomplete" } | { code: "imported-tags-dropped" } | { code: "imported-pdfa-unchecked" };
+
 /**
  * A conformance profile.
  */
 export type ProfileInit = "PDF/UA-1" | "PDF/A-2b" | "PDF/A-2u" | "PDF/A-3b";
 
+/**
+ * A document's metadata as one record, read from the Info dictionary and the XMP packet.
+ *
+ * When the two disagree, the values come from the XMP packet in a PDF 2.0 file (ISO 32000-2
+ * §14.3.3 deprecates the Info entries) or a file that claims PDF/A (whose packet is
+ * authoritative, ISO 19005-2 §6.6.2.3.1), and otherwise from the side whose modification date
+ * is newer, Info winning a tie. A field the winning side lacks is taken from the other.
+ * [`disagreements`](DocumentMetadata::disagreements) names the fields where the two differ, so
+ * a properties view can say so.
+ *
+ * Added in 0.2.0.
+ */
+export interface DocumentMetadata {
+    /**
+     * The title.
+     */
+    title?: string;
+    /**
+     * The authors, in order (Info's `/Author` split at `;`).
+     */
+    authors: string[];
+    /**
+     * The subject.
+     */
+    subject?: string;
+    /**
+     * The keywords.
+     */
+    keywords?: string;
+    /**
+     * The application the content came from.
+     */
+    creator?: string;
+    /**
+     * The application that wrote the PDF.
+     */
+    producer?: string;
+    /**
+     * The creation date (a PDF date string on the wire).
+     */
+    created?: string;
+    /**
+     * The modification date.
+     */
+    modified?: string;
+    /**
+     * Which side the values come from.
+     */
+    source: MetadataSource;
+    /**
+     * The fields where Info and XMP hold different values.
+     */
+    disagreements: MetadataKey[];
+    /**
+     * What `/Metadata` holds.
+     */
+    packet: PacketStatus;
+    /**
+     * The PDF/A part and conformance the packet claims (`pdfaid:`), e.g. `"2B"`.
+     */
+    pdfa?: string;
+    /**
+     * The PDF/UA part the packet claims (`pdfuaid:part`).
+     */
+    pdfua?: number;
+    /**
+     * In a PDF 2.0 file, the Info entries besides the two dates: deprecated, kept as they
+     * were for older readers, and never written by an edit.
+     */
+    keptInfoKeys: MetadataKey[];
+}
+
 /**
  * A job's progress (`laminapdf::Step::Progress`).
  */
@@ -52,6 +187,8 @@ export interface ProgressJs {
  * ```
  *
  * [ADR 0006]: https://github.com/laudebugs/laminapdf/blob/main/docs/decisions/0006-op-log-and-undo.md
+ *
+ * Added in 0.2.0.
  */
 export interface OpLog {
     v: 1;
@@ -59,147 +196,955 @@ export interface OpLog {
 }
 
 /**
- * A page-label numbering style.
+ * A metadata field Lamina PDF keeps in step in the Info dictionary and the XMP packet: what
+ * [`RemoveMetadata`] removes and [`DocumentMetadata::disagreements`] names.
+ *
+ * | Key | Info | XMP |
+ * | --- | --- | --- |
+ * | `title` | `/Title` | `dc:title` |
+ * | `authors` | `/Author` (joined with `; `) | `dc:creator` |
+ * | `subject` | `/Subject` | `dc:description` |
+ * | `keywords` | `/Keywords` | `pdf:Keywords` |
+ * | `creator` | `/Creator` | `xmp:CreatorTool` |
+ * | `producer` | `/Producer` | `pdf:Producer` |
+ * | `created` | `/CreationDate` | `xmp:CreateDate` |
+ * | `modified` | `/ModDate` | `xmp:ModifyDate` |
+ *
+ * Added in 0.2.0.
+ */
+export type MetadataKey = "title" | "authors" | "subject" | "keywords" | "creator" | "producer" | "created" | "modified";
+
+/**
+ * A move in user space (ISO 32000-2 §8.3.2.3: y up), in user-space units. Both distances are
+ * finite: [`Offset::new`] and the wire form refuse anything else, so a move never writes a
+ * coordinate a PDF can't hold.
+ *
+ * Added in 0.3.0.
+ */
+export interface Offset {
+    dx: number;
+    dy: number;
+}
+
+/**
+ * A named destination brought in under another name.
+ */
+export interface RenamedDestinationJs {
+    /**
+     * Its name in the source.
+     */
+    from: string;
+    /**
+     * Its name in this document.
+     */
+    to: string;
+}
+
+/**
+ * A page of this document and how to show it: what `/Dest [page /XYZ …]` holds.
+ *
+ * Added in 0.3.0.
+ */
+export interface ExplicitDestination {
+    /**
+     * The page.
+     */
+    page: string;
+    /**
+     * How to show it.
+     */
+    view: DestinationView;
+}
+
+/**
+ * A page-label numbering style.
+ */
+export type LabelStyleInit = "decimal" | "upperRoman" | "lowerRoman" | "upperLetters" | "lowerLetters";
+
+/**
+ * A patch of the window entries of `/ViewerPreferences` ([`WindowPreferences`]): each field
+ * left out keeps what the file has, `true` sets the entry, `false` removes it.
+ *
+ * Added in 0.3.0.
+ */
+export interface WindowPreferencesPatch {
+    /**
+     * `/HideToolbar`.
+     */
+    hideToolbar?: boolean;
+    /**
+     * `/HideMenubar`.
+     */
+    hideMenubar?: boolean;
+    /**
+     * `/HideWindowUI`.
+     */
+    hideWindowUi?: boolean;
+    /**
+     * `/FitWindow`.
+     */
+    fitWindow?: boolean;
+    /**
+     * `/CenterWindow`.
+     */
+    centerWindow?: boolean;
+    /**
+     * `/DisplayDocTitle`.
+     */
+    displayDocTitle?: boolean;
+}
+
+/**
+ * A signature the planner found.
+ */
+export interface SignatureJs {
+    /**
+     * `approval`, `certification`, `docTimeStamp` or `usageRights`.
+     */
+    kind: string;
+    /**
+     * The signature field's ID, when a field holds it.
+     */
+    field?: string;
+    /**
+     * The 1-based revision the signature closes, when known.
+     */
+    revision?: number;
+}
+
+/**
+ * Adds a bookmark under `parent` (`null`: the top level) at `at`, with its title, target and
+ * style. It has no children, so it has no open state yet (`/Count`, §12.3.3): set it with
+ * [`UpdateOutlineItem::open`] once it has some. The new item's ID is in
+ * [`Applied::created_outline_items`](crate::Applied::created_outline_items).
+ *
+ * On the wire: `{ "op": "addOutlineItem", "args": { "parent": null, "at": "last", "title":
+ * "Chapter 1", "target": { "destination": { "page": "p3.0", "view": { "kind": "fit" } } } } }`.
+ *
+ * Added in 0.3.0.
+ */
+export interface AddOutlineItem {
+    /**
+     * The parent item; `None` for the top level.
+     */
+    parent?: string | null;
+    /**
+     * Where among the parent's children.
+     */
+    at: "first" | "last" | { before: string } | { after: string };
+    /**
+     * The title.
+     */
+    title: string;
+    /**
+     * Where the bookmark goes.
+     */
+    target: OutlineTarget;
+    /**
+     * Its colour and type style.
+     */
+    style?: OutlineStyle;
+}
+
+/**
+ * Adds a named destination, or points an existing one at `destination`. A name the catalog's
+ * `/Dests` dictionary holds stays there; any other goes into the `/Names /Dests` tree.
+ *
+ * On the wire: `{ "op": "setNamedDestination", "args": { "name": "results", "destination": {
+ * "page": "p7.0", "view": { "kind": "fitH", "top": 700 } } } }`.
+ *
+ * Added in 0.3.0.
+ */
+export interface SetNamedDestination {
+    /**
+     * The name.
+     */
+    name: string;
+    /**
+     * Where it points.
+     */
+    destination: ExplicitDestination;
+}
+
+/**
+ * An XMP property declared in a PDF/A file's extension schemas.
+ */
+export interface ExtensionPropertyJs {
+    /**
+     * The schema's namespace URI.
+     */
+    namespace: string;
+    /**
+     * The prefix the packet writes the namespace with.
+     */
+    prefix: string;
+    /**
+     * The property's local name.
+     */
+    name: string;
+    /**
+     * Its declared type, e.g. `Text` or `Seq Integer`.
+     */
+    valueType: string;
+}
+
+/**
+ * An attached file's options.
+ */
+export interface AttachmentInit {
+    /**
+     * How the file relates to the document (default `unspecified`).
+     */
+    relationship?: AfRelationshipInit;
+    /**
+     * `/Desc`, shown next to the file.
+     */
+    description?: string;
+    /**
+     * When the file last changed, a PDF date (default: the document's creation date).
+     */
+    modDate?: string;
+}
+
+/**
+ * An editing operation ([ADR 0006] §1): typed and semantic (it names things by
+ * [`LaminaPdfId`](laminapdf_model::LaminaPdfId), never by object reference), serialisable, and free
+ * of ambient inputs (a modification date is in the payload), so the same op on the same
+ * document gives the same result on every platform.
+ *
+ * Apply it inside a transaction ([`Tx::apply`](crate::Tx::apply)); its JSON form is
+ * adjacently tagged, `{ "op": "rotatePage", "args": { … } }`, and unknown ops and fields
+ * are rejected, never skipped.
+ *
+ * ```
+ * use laminapdf_ops::Op;
+ *
+ * let op: Op = serde_json::from_str(r#"{ "op": "rotatePage", "args": { "page": "p3.0", "rotate": 90 } }"#)?;
+ * assert_eq!(serde_json::to_string(&op)?, r#"{"op":"rotatePage","args":{"page":"p3.0","rotate":90}}"#);
+ * assert!(serde_json::from_str::<Op>(r#"{ "op": "explode", "args": {} }"#).is_err());
+ * # Ok::<(), serde_json::Error>(())
+ * ```
+ *
+ * [ADR 0006]: https://github.com/laudebugs/laminapdf/blob/main/docs/decisions/0006-op-log-and-undo.md
+ *
+ * Added in 0.2.0.
+ */
+export type Op = { op: "setInfo"; args: SetInfo } | { op: "rotatePage"; args: RotatePage } | { op: "setMetadata"; args: SetMetadata } | { op: "removeMetadata"; args: RemoveMetadata } | { op: "setInitialView"; args: SetInitialView } | { op: "addOutlineItem"; args: AddOutlineItem } | { op: "updateOutlineItem"; args: UpdateOutlineItem } | { op: "moveOutlineItem"; args: MoveOutlineItem } | { op: "deleteOutlineItem"; args: DeleteOutlineItem } | { op: "setNamedDestination"; args: SetNamedDestination } | { op: "renameNamedDestination"; args: RenameNamedDestination } | { op: "deleteNamedDestination"; args: DeleteNamedDestination } | { op: "setXmpProperty"; args: SetXmpProperty } | { op: "removeXmpProperty"; args: RemoveXmpProperty } | { op: "replaceXmpPacket"; args: ReplaceXmpPacket } | { op: "insertBlankPages"; args: InsertBlankPages } | { op: "deletePages"; args: DeletePages } | { op: "movePages"; args: MovePages } | { op: "rotatePages"; args: RotatePages } | { op: "reversePages"; args: ReversePages } | { op: "duplicatePages"; args: DuplicatePages } | { op: "insertPagesFrom"; args: InsertPagesFrom } | { op: "replacePages"; args: ReplacePages } | { op: "mergeDocuments"; args: MergeDocuments } | { op: "updateAnnot"; args: UpdateAnnot } | { op: "deleteAnnot"; args: DeleteAnnot } | { op: "setPageLabels"; args: SetPageLabels };
+
+/**
+ * Changes a bookmark's title, target, style or open state. An absent field is left alone. A
+ * target held as another action (JavaScript, `Launch`, …) is replaced only when `target` is
+ * given; the item's other entries are kept.
+ *
+ * On the wire: `{ "op": "updateOutlineItem", "args": { "item": "o12.0", "title": "Results",
+ * "open": true } }`.
+ *
+ * Added in 0.3.0.
+ */
+export interface UpdateOutlineItem {
+    /**
+     * The item.
+     */
+    item: string;
+    /**
+     * A new title.
+     */
+    title?: string;
+    /**
+     * A new target.
+     */
+    target?: OutlineTarget;
+    /**
+     * A new style (colour and type style together).
+     */
+    style?: OutlineStyle;
+    /**
+     * Open (children shown) or closed; a bookmark without children has nowhere to keep it
+     * (`/Count`, §12.3.3), so it writes nothing there.
+     */
+    open?: boolean;
+}
+
+/**
+ * Changes an annotation's common and markup entries and moves it.
+ *
+ * An absent field leaves the entry alone and `null` removes it. `translate` moves `/Rect` and
+ * the subtype's geometry (`/QuadPoints`, `/InkList`, `/Vertices`, `/L`, `/CL`) and the
+ * annotation's Popup with it, and keeps the appearance, which §12.5.5 maps onto the new
+ * `/Rect`. A `Locked` annotation refuses everything but a change of its flags and its
+ * contents; a `LockedContents` one refuses a change of its contents (`annotation-locked`).
+ * Widgets and annotations stored as direct dictionaries are refused (`annotation-not-editable`).
+ *
+ * On the wire: `{ "op": "updateAnnot", "args": { "id": "a12.0", "contents": "Checked",
+ * "translate": { "dx": 0, "dy": -10 } } }`.
+ *
+ * Added in 0.3.0.
+ */
+export interface UpdateAnnot {
+    /**
+     * The annotation.
+     */
+    id: string;
+    /**
+     * `/Contents`: the comment, or the alternative description.
+     */
+    contents?: string | null;
+    /**
+     * `/T`: the author.
+     */
+    author?: string | null;
+    /**
+     * `/Subj`.
+     */
+    subject?: string | null;
+    /**
+     * `/M`, the modification date the edit writes.
+     */
+    modified?: string;
+    /**
+     * `/F`, all the flags at once (Table 167).
+     */
+    flags?: number;
+    /**
+     * A move in user space.
+     */
+    translate?: Offset;
+}
+
+/**
+ * Changes how the document asks to be shown when it opens. Each field is a patch: left out,
+ * it keeps what the file has; `null` removes the entry, so readers use their default; a value
+ * sets it.
+ *
+ * * `open`: the page and zoom to open at, written as an explicit destination in
+ *   `/OpenAction` (§12.3.2.2). An `/OpenAction` that is an action other than `GoTo`
+ *   (JavaScript, a named action, a link to another file) is never replaced or removed: the op
+ *   fails with [`Error::OpenActionNotDestination`].
+ * * `page_mode`, `page_layout`: the panel to show and how to lay the pages out.
+ * * `preferences`: the window entries of `/ViewerPreferences` (§12.2, Table 147); `true` sets
+ *   one, `false` removes it (its default), and other entries (`/Direction`, `/PrintScaling`, …)
+ *   are kept.
+ *
+ * When a value needs a later PDF version than the file declares (`UseAttachments` 1.6,
+ * `UseOC` and the two-page layouts 1.5, `/DisplayDocTitle` 1.4), the catalog's `/Version` is
+ * raised to it. The op is class [`Document`](crate::ModificationClass::Document) and touches no
+ * page.
+ *
+ * On the wire:
+ * `{ "op": "setInitialView", "args": { "open": { "page": "p12.0", "zoom": "fitWidth" },
+ * "pageMode": "outlines", "pageLayout": null, "preferences": { "displayDocTitle": true } } }`.
+ *
+ * ```
+ * use laminapdf_ops::{OpenAt, OpenZoom, SetInitialView, WindowPreferencesPatch};
+ * use laminapdf_model::PageMode;
+ *
+ * let op = SetInitialView::default()
+ *     .with_open(Some(OpenAt::new("p3.0".parse()?, OpenZoom::FitWidth)))
+ *     .with_page_mode(Some(PageMode::Outlines))
+ *     .with_preferences(WindowPreferencesPatch::default().with_display_doc_title(true));
+ * assert_eq!(
+ *     serde_json::to_string(&op)?,
+ *     r#"{"open":{"page":"p3.0","zoom":"fitWidth"},"pageMode":"outlines","preferences":{"displayDocTitle":true}}"#
+ * );
+ * # Ok::<(), Box<dyn std::error::Error>>(())
+ * ```
+ *
+ * Added in 0.3.0.
+ */
+export interface SetInitialView {
+    /**
+     * The page and zoom to open at.
+     */
+    open?: OpenAt | null;
+    /**
+     * The panel to show (`/PageMode`).
+     */
+    pageMode?: "none" | "outlines" | "thumbnails" | "fullScreen" | "optionalContent" | "attachments" | null;
+    /**
+     * How to lay the pages out (`/PageLayout`).
+     */
+    pageLayout?: "singlePage" | "oneColumn" | "twoColumnLeft" | "twoColumnRight" | "twoPageLeft" | "twoPageRight" | null;
+    /**
+     * The window entries of `/ViewerPreferences`.
+     */
+    preferences?: WindowPreferencesPatch;
+}
+
+/**
+ * Changes to the Info dictionary's text entries. For each field, `None` leaves the entry
+ * alone, `Some(None)` removes it and `Some(Some(text))` sets it (encoded as
+ * PDFDocEncoding when it can be, else UTF-16BE, §7.9.2.2).
+ *
+ * On the wire an absent field is left alone and `null` clears: `{ "title": "Report",
+ * "author": null }`.
+ *
+ * Added in 0.2.0.
+ */
+export interface InfoPatch {
+    /**
+     * `/Title`.
+     */
+    title?: string | null;
+    /**
+     * `/Author`.
+     */
+    author?: string | null;
+    /**
+     * `/Subject`.
+     */
+    subject?: string | null;
+    /**
+     * `/Keywords`.
+     */
+    keywords?: string | null;
+    /**
+     * `/Creator`: the application that created the original document.
+     */
+    creator?: string | null;
+    /**
+     * `/Producer`: the application that converted it to PDF.
+     */
+    producer?: string | null;
+}
+
+/**
+ * Changes to the document's metadata. For each field, `None` leaves it alone, `Some(None)`
+ * removes it and `Some(Some(value))` sets it, in Info and XMP alike.
+ *
+ * On the wire an absent field is left alone and `null` removes: `{ "title": "Report",
+ * "authors": ["Ada Lovelace", "Charles Babbage"], "keywords": null }`; dates are PDF date
+ * strings (`"D:20261110093000+01'00'"`).
+ *
+ * ```
+ * use laminapdf_ops::MetadataPatch;
+ *
+ * let patch = MetadataPatch::new().title(Some("Quarterly figures")).authors(&["Ada Lovelace", "Charles Babbage"]);
+ * assert_eq!(patch.authors, Some(Some(vec!["Ada Lovelace".to_owned(), "Charles Babbage".to_owned()])));
+ * assert_eq!(serde_json::to_string(&patch)?, r#"{"title":"Quarterly figures","authors":["Ada Lovelace","Charles Babbage"]}"#);
+ * # Ok::<(), serde_json::Error>(())
+ * ```
+ *
+ * Added in 0.2.0.
+ */
+export interface MetadataPatch {
+    /**
+     * `/Title`, `dc:title`.
+     */
+    title?: string | null;
+    /**
+     * `/Author` (joined with `; `), `dc:creator` (in order). An empty list removes them.
+     */
+    authors?: string[] | null;
+    /**
+     * `/Subject`, `dc:description`.
+     */
+    subject?: string | null;
+    /**
+     * `/Keywords`, `pdf:Keywords`.
+     */
+    keywords?: string | null;
+    /**
+     * `/Creator`, `xmp:CreatorTool`: the application the content came from.
+     */
+    creator?: string | null;
+    /**
+     * `/Producer`, `pdf:Producer`: the application that wrote the PDF.
+     */
+    producer?: string | null;
+    /**
+     * `/CreationDate`, `xmp:CreateDate`.
+     */
+    created?: string | null;
+    /**
+     * `/ModDate`, `xmp:ModifyDate`.
+     */
+    modified?: string | null;
+}
+
+/**
+ * Copies `pages` (each once, in the order given) to `at`. A copy shares its source's content
+ * streams and resources and shows what it shows, inherited attributes included (ISO 32000-2
+ * §7.7.3.4). Its annotations are new objects with a new `/NM`; a form field's widget becomes
+ * a new field named `<partial>#<n>` with its own value, and a signature's widget is not copied
+ * (both in [`Applied::fields`](crate::Applied::fields)). In a tagged document the copy gets
+ * its own `/StructParents` key and clones of the elements whose content lies only on its
+ * source; content of elements that span pages is left untagged and the copy is listed in
+ * [`Applied::tags_incomplete`](crate::Applied::tags_incomplete). Page labels continue the range
+ * each copy lands in.
+ *
+ * On the wire: `{ "op": "duplicatePages", "args": { "pages": ["p7.0"], "at": { "after": "p7.0" } } }`.
+ *
+ * Added in 0.3.0.
+ */
+export interface DuplicatePages {
+    /**
+     * The pages to copy.
+     */
+    pages: string[];
+    /**
+     * Where the copies go.
+     */
+    at: "start" | "end" | { before: string } | { after: string };
+}
+
+/**
+ * Copies pages of a source document into this one at `at`, in the order given (each once).
+ * The copies are new objects with new IDs, sharing nothing with the source. Their
+ * annotations point at them and get a new `/NM`; a link to a page that didn't come along is
+ * removed ([`Applied::links_removed`](crate::Applied::links_removed)), and the named
+ * destinations the others use come along, renamed `<name>#<n>` on a clash. Form fields join
+ * the form under their own names, or per [`Carry::fields`] when the name is taken
+ * ([`Applied::fields`](crate::Applied::fields)); signature fields are left off. The copies
+ * lose their tags ([`Applied::tags_dropped`](crate::Applied::tags_dropped)), page labels
+ * continue the range each copy lands in, and the document's version rises to the source's
+ * when that is newer.
+ *
+ * On the wire: `{ "op": "insertPagesFrom", "args": { "source": "<64 hex digits>", "pages":
+ * ["p3.0"], "at": "end" } }`, with `carry` optional.
+ *
+ * Added in 0.3.0.
+ */
+export interface InsertPagesFrom {
+    /**
+     * The source document.
+     */
+    source: string;
+    /**
+     * The source's pages to copy, by their IDs in the source.
+     */
+    pages: string[];
+    /**
+     * Where the copies go.
+     */
+    at: "start" | "end" | { before: string } | { after: string };
+    /**
+     * What comes along with the pages.
+     */
+    carry?: Carry;
+}
+
+/**
+ * Deletes `pages` (each once; unknown pages are an error). Outline items, links and `GoTo`
+ * actions on surviving pages, named destinations and `/OpenAction` that named a deleted page
+ * follow `references` ([`ReferencePolicy`]); structure elements whose content was all on
+ * deleted pages are removed with their `/ParentTree` entries, and the widgets on deleted pages
+ * leave the form (a field left with none leaves it too). The page objects stay in the file's
+ * earlier revisions. Deleting every page is [`Error::NoPagesLeft`].
+ *
+ * On the wire: `{ "op": "deletePages", "args": { "pages": ["p7.0"], "references": "retarget" } }`.
+ *
+ * Added in 0.3.0.
+ */
+export interface DeletePages {
+    /**
+     * The pages.
+     */
+    pages: string[];
+    /**
+     * What happens to destinations that name them; `retarget` when left out.
+     */
+    references?: ReferencePolicy;
+}
+
+/**
+ * Deletes a bookmark, and its children with it or moved up into its place.
+ *
+ * On the wire: `{ "op": "deleteOutlineItem", "args": { "item": "o12.0", "children":
+ * "promote" } }`.
+ *
+ * Added in 0.3.0.
+ */
+export interface DeleteOutlineItem {
+    /**
+     * The item.
+     */
+    item: string;
+    /**
+     * What happens to its children.
+     */
+    children: ChildItems;
+}
+
+/**
+ * Deletes a named destination, from both stores when both hold it. Its uses in this file are left as they are and reported
+ * ([`Applied::destination_uses`](crate::Applied::destination_uses)): a bookmark or link that
+ * names it no longer goes anywhere.
+ *
+ * On the wire: `{ "op": "deleteNamedDestination", "args": { "name": "draft-notes" } }`.
+ *
+ * Added in 0.3.0.
+ */
+export interface DeleteNamedDestination {
+    /**
+     * The name.
+     */
+    name: string;
+}
+
+/**
+ * Deletes an annotation with what belongs to it: its Popup, every reply whose `/IRT` chain
+ * reaches it, and, for a member of a group (`/RT /Group`, §12.5.6.2), the whole group, which
+ * is one unit. Chains are followed through cycles once. In a tagged document, the structure
+ * element's object reference to each deleted annotation is removed, and so is an element left
+ * with nothing in it. Each deleted object is freed.
+ *
+ * A `Locked` annotation is refused (`annotation-locked`), and so are widgets and direct
+ * dictionaries (`annotation-not-editable`). Deleting a Popup alone removes the `/Popup` entry
+ * that names it.
+ *
+ * On the wire: `{ "op": "deleteAnnot", "args": { "id": "a12.0" } }`.
+ *
+ * Added in 0.3.0.
+ */
+export interface DeleteAnnot {
+    /**
+     * The annotation.
+     */
+    id: string;
+}
+
+/**
+ * Edits the Info dictionary: applies `patch` and, when `at` is given, sets `/ModDate` to it.
+ *
+ * **Deprecated:** use [`SetMetadata`](crate::SetMetadata), which writes authors as a list and
+ * the dates, and edits files whose metadata is in XMP alone. `SetInfo` stays, with its v1 wire
+ * form (`setInfo`) and meaning, so op logs already written still apply (ADR 0006 §6). It now
+ * goes through the same writer, so a document's XMP packet, when it has one, changes with it.
+ * It adds a packet only to a PDF 2.0 file, where the fields other than the dates belong in XMP.
+ * The date is part of the op, never read from a clock, so the same op gives the same bytes
+ * everywhere (ADR 0006 §1).
+ *
+ * An Info dictionary written directly in the trailer, or missing, becomes a new indirect
+ * object that the trailer's `/Info` points to (the first time the op changes something).
+ *
+ * Added in 0.2.0.
+ */
+export interface SetInfo {
+    /**
+     * The entries to set or clear.
+     */
+    patch?: InfoPatch;
+    /**
+     * The modification date to record as `/ModDate`.
+     */
+    at?: string;
+}
+
+/**
+ * Edits the document's metadata: applies `patch` to the Info dictionary and the XMP packet
+ * together and, when `at` is given, records it as the modification date (`/ModDate`,
+ * `xmp:ModifyDate`) and as `xmp:MetadataDate`, unless the patch sets the modification date
+ * itself. The date is part of the op, never read from a clock (ADR 0006 §1).
+ *
+ * ```
+ * use laminapdf_ops::{MetadataPatch, Op, SetMetadata};
+ *
+ * let op = Op::from(SetMetadata::new(MetadataPatch::new().title(Some("Minutes")), Some("D:20261110093000Z".parse()?)));
+ * assert_eq!(
+ *     serde_json::to_string(&op)?,
+ *     r#"{"op":"setMetadata","args":{"patch":{"title":"Minutes"},"at":"D:20261110093000Z"}}"#
+ * );
+ * # Ok::<(), Box<dyn std::error::Error>>(())
+ * ```
+ *
+ * Added in 0.2.0.
+ */
+export interface SetMetadata {
+    /**
+     * The fields to set or remove.
+     */
+    patch?: MetadataPatch;
+    /**
+     * The modification date the edit writes.
+     */
+    at?: string;
+    /**
+     * Replace an XMP packet that can't be read with a new one, losing whatever it held.
+     * Without it, such a packet makes the op fail with `malformed-xmp`, so nothing is lost
+     * without the user saying so.
+     */
+    replaceMalformed?: boolean;
+}
+
+/**
+ * How [`RotatePages`] reads its angle.
+ *
+ * Added in 0.3.0.
+ */
+export type RotateMode = "set" | "turn";
+
+/**
+ * How a destination shows its page (§12.3.2.2).
+ */
+export type FitInit = { type: "page" } | { type: "width"; top?: number } | { type: "height"; left?: number } | { type: "xyz"; left?: number; top?: number; zoom?: number } | { type: "rect"; x: number; y: number; width: number; height: number } | { type: "bounds" };
+
+/**
+ * How a destination shows its page (§12.3.2.2, Table 149), in the page's user space. A `None`
+ * coordinate keeps the viewer's current one (`null` in the file).
+ *
+ * Every number must be finite: the ops refuse any other with `view-not-finite`.
+ *
+ * Added in 0.3.0.
+ */
+export type DestinationView = { kind: "xyz"; left: number | undefined; top: number | undefined; zoom: number | undefined } | { kind: "fit" } | { kind: "fitH"; top: number | undefined } | { kind: "fitV"; left: number | undefined } | { kind: "fitR"; left: number; bottom: number; right: number; top: number } | { kind: "fitB" } | { kind: "fitBH"; top: number | undefined } | { kind: "fitBV"; left: number | undefined };
+
+/**
+ * How a merge brings in what the sources hold besides their pages.
+ *
+ * Added in 0.3.0.
+ */
+export interface MergeOptions {
+    /**
+     * What becomes of the sources' bookmarks; `perFile` when left out.
+     */
+    outline?: OutlineMerge;
+    /**
+     * What happens to a form field whose name is already used; `rename` when left out.
+     */
+    fields?: FieldClash;
+}
+
+/**
+ * How a save would go (`laminapdf::PlannedSave`).
+ */
+export interface PlannedSaveJs {
+    /**
+     * The mode the save resolves to; absent when it would be refused.
+     */
+    mode?: SaveModeJs;
+    /**
+     * The code the save would be refused with.
+     */
+    refusal?: string;
+    /**
+     * `free`, `appendOnly`, `requiresRewrite` or `conflict`.
+     */
+    constraint: string;
+    /**
+     * Every signature, in the order found.
+     */
+    signatures: SignatureJs[];
+    /**
+     * The certification's `/P` (1, 2 or 3), when the document is certified.
+     */
+    docMdp?: number;
+    /**
+     * Why only a full rewrite is safe: `repairedBase`, `encryptedBase`, `noBase`,
+     * `opRequiresRewrite`.
+     */
+    rewriteReasons: string[];
+    /**
+     * The pending changes a signature's restriction forbids.
+     */
+    violations: ViolationJs[];
+    /**
+     * The signatures the save would invalidate (only with `invalidateSignatures`).
+     */
+    wouldInvalidate: SignatureJs[];
+    /**
+     * Whether the save writes an encrypted document as plaintext.
+     */
+    removesEncryption: boolean;
+    /**
+     * What the save does with the save-time metadata: `none`, `stamp` or `skipped`.
+     */
+    metadata: string;
+    /**
+     * Whether an edit to save rewrote the XMP packet whole.
+     */
+    packetRewritten: boolean;
+    /**
+     * The PDF/A and PDF/UA claims the edited metadata breaks (warnings that never block).
+     */
+    conformanceWarnings: Diagnostic[];
+    /**
+     * The document has no changes.
+     */
+    unchanged: boolean;
+}
+
+/**
+ * How a viewer lays pages out.
+ */
+export type PageLayoutInit = "singlePage" | "oneColumn" | "twoColumnLeft" | "twoColumnRight" | "twoPageLeft" | "twoPageRight";
+
+/**
+ * How an attached file relates to the document (`/AFRelationship`).
+ */
+export type AfRelationshipInit = "source" | "data" | "alternative" | "supplement" | "unspecified";
+
+/**
+ * How an undo or redo went (`laminapdf::UndoOutcome`).
  */
-export type LabelStyleInit = "decimal" | "upperRoman" | "lowerRoman" | "upperLetters" | "lowerLetters";
+export type UndoOutcomeJs = "applied" | "partial" | "skipped";
 
 /**
- * An attached file's options.
+ * How viewers present the document when it opens.
  */
-export interface AttachmentInit {
+export interface ViewerPreferencesInit {
     /**
-     * How the file relates to the document (default `unspecified`).
+     * Show the title, not the file name.
      */
-    relationship?: AfRelationshipInit;
+    displayDocTitle?: boolean;
     /**
-     * `/Desc`, shown next to the file.
+     * The panel shown.
      */
-    description?: string;
+    pageMode?: PageModeInit;
     /**
-     * When the file last changed, a PDF date (default: the document's creation date).
+     * The page layout.
      */
-    modDate?: string;
+    pageLayout?: PageLayoutInit;
 }
 
 /**
- * An editing operation ([ADR 0006] §1): typed and semantic (it names things by
- * [`LaminaPdfId`](laminapdf_model::LaminaPdfId), never by object reference), serialisable, and free
- * of ambient inputs (a modification date is in the payload), so the same op on the same
- * document gives the same result on every platform.
- *
- * Apply it inside a transaction ([`Tx::apply`](crate::Tx::apply)); its JSON form is
- * adjacently tagged, `{ "op": "rotatePage", "args": { … } }`, and unknown ops and fields
- * are rejected, never skipped.
- *
- * ```
- * use laminapdf_ops::Op;
- *
- * let op: Op = serde_json::from_str(r#"{ "op": "rotatePage", "args": { "page": "p3.0", "rotate": 90 } }"#)?;
- * assert_eq!(serde_json::to_string(&op)?, r#"{"op":"rotatePage","args":{"page":"p3.0","rotate":90}}"#);
- * assert!(serde_json::from_str::<Op>(r#"{ "op": "explode", "args": {} }"#).is_err());
- * # Ok::<(), serde_json::Error>(())
- * ```
+ * Inserts `count` blank pages of `size` at `at`, each showing at `rotate`. Each new page
+ * gets a new object and [`PageId`] (ADR 0005 §5), an empty `/Resources` and no content; in
+ * a labelled document they continue the label range they land in. A count outside 1 to
+ * 10,000, or a side that isn't above 0 and at most 14,400 points, is
+ * [`Error::InvalidOp`](crate::Error::InvalidOp).
  *
- * [ADR 0006]: https://github.com/laudebugs/laminapdf/blob/main/docs/decisions/0006-op-log-and-undo.md
- */
-export type Op = { op: "setInfo"; args: SetInfo } | { op: "rotatePage"; args: RotatePage };
-
-/**
- * Changes to the Info dictionary's text entries. For each field, `None` leaves the entry
- * alone, `Some(None)` removes it and `Some(Some(text))` sets it (encoded as
- * PDFDocEncoding when it can be, else UTF-16BE, §7.9.2.2).
+ * On the wire: `{ "op": "insertBlankPages", "args": { "at": { "after": "p3.0" }, "count": 2,
+ * "size": { "width": 612, "height": 792 }, "rotate": 0 } }`.
  *
- * On the wire an absent field is left alone and `null` clears: `{ "title": "Report",
- * "author": null }`.
+ * Added in 0.3.0.
  */
-export interface InfoPatch {
+export interface InsertBlankPages {
     /**
-     * `/Title`.
+     * Where the pages go.
      */
-    title?: string | null;
+    at: "start" | "end" | { before: string } | { after: string };
     /**
-     * `/Author`.
+     * How many pages, at least 1.
      */
-    author?: string | null;
+    count: number;
     /**
-     * `/Subject`.
+     * Their `/MediaBox` size, in points: `{ "width": 612, "height": 792 }`.
      */
-    subject?: string | null;
+    size: { width: number; height: number };
     /**
-     * `/Keywords`.
+     * Their rotation in degrees clockwise: 0, 90, 180 or 270.
      */
-    keywords?: string | null;
+    rotate: 0 | 90 | 180 | 270;
+}
+
+/**
+ * Merges source documents into this one at `at`, one after another, as one edit. Each
+ * source's pages come in as [`InsertPagesFrom`](crate::InsertPagesFrom) brings them (their
+ * annotations, links and the named destinations those use, form fields under the clash rule
+ * of `options.fields`, signature fields left off, tags dropped), and with them what belongs to
+ * the whole source:
+ *
+ * - its bookmarks, per `options.outline`, going to the copies of their pages; a bookmark whose
+ *   page didn't come along is left out unless one of its children came
+ *   ([`Applied::bookmarks_dropped`](crate::Applied::bookmarks_dropped));
+ * - its layers (optional content groups the copied pages use), added to this document's list
+ *   in the source's order and visible or hidden as the source showed them;
+ * - its page labels: each copy keeps the label it had in its source, and this document's
+ *   pages keep theirs (a document without labels numbers its pages from 1);
+ * - its form's default appearance and `/NeedAppearances`, and its PDF version when newer.
+ *
+ * Named destinations that clash are renamed `<name>#<n>`
+ * ([`Applied::renamed_destinations`](crate::Applied::renamed_destinations)).
+ *
+ * On the wire: `{ "op": "mergeDocuments", "args": { "sources": [{ "source": "<64 hex
+ * digits>" }], "at": "end" } }`, with each source's `pages` and `title`, and `options`,
+ * optional.
+ *
+ * Added in 0.3.0.
+ */
+export interface MergeDocuments {
     /**
-     * `/Creator`: the application that created the original document.
+     * The documents to bring in, in order.
      */
-    creator?: string | null;
+    sources: MergeSource[];
     /**
-     * `/Producer`: the application that converted it to PDF.
+     * Where their pages go.
      */
-    producer?: string | null;
+    at: "start" | "end" | { before: string } | { after: string };
+    /**
+     * What comes along besides the pages.
+     */
+    options?: MergeOptions;
 }
 
 /**
- * Edits the Info dictionary: applies `patch` and, when `at` is given, sets `/ModDate` to it.
- * The date is part of the op, never read from a clock, so the same op gives the same bytes
- * everywhere (ADR 0006 §1).
+ * Moves `pages` to `to`. They keep their order among themselves (the order given, each page
+ * once) and their IDs; an anchor that is itself moved is replaced by the nearest page that
+ * stays.
  *
- * An Info dictionary written directly in the trailer, or missing, becomes a new indirect
- * object that the trailer's `/Info` points to (the first time the op changes something).
+ * On the wire: `{ "op": "movePages", "args": { "pages": ["p7.0", "p8.0"], "to": "start" } }`.
+ *
+ * Added in 0.3.0.
  */
-export interface SetInfo {
+export interface MovePages {
     /**
-     * The entries to set or clear.
+     * The pages, in the order they take at `to`.
      */
-    patch?: InfoPatch;
+    pages: string[];
     /**
-     * The modification date to record as `/ModDate`.
+     * Where they go.
      */
-    at?: string;
+    to: "start" | "end" | { before: string } | { after: string };
 }
 
 /**
- * How a destination shows its page (§12.3.2.2).
- */
-export type FitInit = { type: "page" } | { type: "width"; top?: number } | { type: "height"; left?: number } | { type: "xyz"; left?: number; top?: number; zoom?: number } | { type: "rect"; x: number; y: number; width: number; height: number } | { type: "bounds" };
-
-/**
- * How a viewer lays pages out.
- */
-export type PageLayoutInit = "singlePage" | "oneColumn" | "twoColumnLeft" | "twoColumnRight" | "twoPageLeft" | "twoPageRight";
-
-/**
- * How an attached file relates to the document (`/AFRelationship`).
+ * Moves a bookmark, with its children, under `parent` (`null`: the top level) at `at`. The
+ * item keeps its ID.
+ *
+ * On the wire: `{ "op": "moveOutlineItem", "args": { "item": "o12.0", "parent": "o9.0", "at":
+ * { "after": "o10.0" } } }`.
+ *
+ * Added in 0.3.0.
  */
-export type AfRelationshipInit = "source" | "data" | "alternative" | "supplement" | "unspecified";
+export interface MoveOutlineItem {
+    /**
+     * The item.
+     */
+    item: string;
+    /**
+     * The new parent; `None` for the top level.
+     */
+    parent?: string | null;
+    /**
+     * Where among the new parent's children.
+     */
+    at: "first" | "last" | { before: string } | { after: string };
+}
 
 /**
- * How an undo or redo went (`laminapdf::UndoOutcome`).
+ * Object numbering in a full rewrite.
  */
-export type UndoOutcomeJs = "applied" | "partial" | "skipped";
+export type RenumberJs = "keep" | "compact";
 
 /**
- * How viewers present the document when it opens.
+ * One document a merge brings in.
+ *
+ * Added in 0.3.0.
  */
-export interface ViewerPreferencesInit {
+export interface MergeSource {
     /**
-     * Show the title, not the file name.
+     * The source document, added with [`Document::add_source`](crate::Document::add_source).
      */
-    displayDocTitle?: boolean;
+    source: string;
     /**
-     * The panel shown.
+     * The source's pages to bring in, by their IDs in the source, in order; all of them when
+     * left out.
      */
-    pageMode?: PageModeInit;
+    pages?: string[];
     /**
-     * The page layout.
+     * The name of the bookmark [`OutlineMerge::PerFile`] gives the source's bookmarks (a file
+     * name, say); the source's own title when left out.
      */
-    pageLayout?: PageLayoutInit;
+    title?: string;
 }
 
 /**
- * Object numbering in a full rewrite.
+ * One entry of a language alternative, under the name TypeScript gives it.
  */
-export type RenumberJs = "keep" | "compact";
+export interface XmpLangText {
+    lang: string;
+    text: string;
+}
 
 /**
  * One outline item and its children.
@@ -287,6 +1232,59 @@ export interface PageLabelInit {
     first?: number;
 }
 
+/**
+ * One range of [`SetPageLabels`]: the labels from `page` up to the next range's page.
+ *
+ * Added in 0.3.0.
+ */
+export interface PageLabelRange {
+    /**
+     * The range's first page.
+     */
+    page: string;
+    /**
+     * The numbering style; without one, each label is the prefix alone. On the wire:
+     * `decimal`, `upperRoman`, `lowerRoman`, `upperLetters` or `lowerLetters`.
+     */
+    style?: "decimal" | "upperRoman" | "lowerRoman" | "upperLetters" | "lowerLetters";
+    /**
+     * Text before each number (`A-` in `A-1`).
+     */
+    prefix?: string;
+    /**
+     * The number of the range's first page, 1 or more (a `u32`, as the builder's page labels
+     * take).
+     */
+    first?: number;
+}
+
+/**
+ * One reference to a deleted page and what the deletion did to it.
+ */
+export interface ReferenceEditJs {
+    /**
+     * The deleted page it named.
+     */
+    page: string;
+    /**
+     * `outlineItem`, `link`, `namedDestination`, `openAction`, `structureElement`,
+     * `structureKid` or `widget`.
+     */
+    kind: "outlineItem" | "link" | "namedDestination" | "openAction" | "structureElement" | "structureKid" | "widget";
+    /**
+     * The named destination's name, for a `namedDestination`.
+     */
+    name?: string;
+    /**
+     * `retargeted` or `removed`.
+     */
+    outcome: "retargeted" | "removed";
+    /**
+     * The surviving page it now names, when retargeted.
+     */
+    to?: string;
+}
+
 /**
  * Options for `WasmDocument.openBytes`.
  */
@@ -300,76 +1298,296 @@ export interface OpenOptionsInit {
      */
     strict?: boolean;
     /**
-     * Resource limits (ADR 0003 §3); each one left out keeps its default.
+     * Resource limits (ADR 0003 §3); each one left out keeps its default.
+     */
+    limits?: LimitsInit;
+}
+
+/**
+ * Options for a new document: everything that would come from the environment is given,
+ * so the same calls give the same bytes.
+ */
+export interface BuildOptionsInit {
+    /**
+     * The header version (default 1.7).
+     */
+    version?: PdfVersionInit;
+    /**
+     * The first `/ID` entry: 16 bytes as 32 hex digits (default: a content hash).
+     */
+    id?: string;
+    /**
+     * `/Producer`.
+     */
+    producer?: string;
+    /**
+     * `/CreationDate`, a PDF date (`D:20261030120000Z`).
+     */
+    creationDate?: string;
+    /**
+     * Flate-compress content streams (default `true`).
+     */
+    compress?: boolean;
+    /**
+     * A tagged document (structure tree, `/MarkInfo`) even before any element (default
+     * `false`; a page using `beginTag` or `beginArtifact` makes it tagged either way).
+     */
+    tagged?: boolean;
+    /**
+     * Conformance profiles: `PDF/UA-1` with at most one PDF/A profile. `finish` then fails
+     * with a coded error for each machine-checkable rule the document breaks.
+     */
+    profiles?: ProfileInit[];
+}
+
+/**
+ * Options for saving.
+ */
+export interface SaveOptionsInit {
+    /**
+     * The mode (default `auto`).
+     */
+    mode?: SaveModeJs;
+    /**
+     * Save even when it invalidates signatures (removing them from the output).
+     */
+    invalidateSignatures?: boolean;
+    /**
+     * Write an encrypted document as a plaintext full rewrite.
+     */
+    removeEncryption?: boolean;
+    /**
+     * What an incremental save returns.
+     */
+    output?: OutputJs;
+    /**
+     * Numbering in a full rewrite.
+     */
+    renumber?: RenumberJs;
+    /**
+     * The cross-reference form.
+     */
+    xref?: XrefJs;
+    /**
+     * When the save happens, as the app's clock reads it: a PDF date (`D:20261110093000Z`)
+     * or an ISO 8601 date-time. A save that writes changes stamps it as the modification and
+     * metadata dates and gives the XMP packet a new instance ID.
+     */
+    metadataDate?: string;
+    /**
+     * The XMP instance ID the save writes, a UUID (`uuid:` optional); without it, one is
+     * derived from the content.
+     */
+    instanceId?: string;
+}
+
+/**
+ * Removes an XMP property, every copy of it in the packet; a property the Info dictionary
+ * mirrors is removed from both. The value stays in the file's earlier revisions until a full
+ * rewrite ([`Applied::still_in_earlier_revisions`](crate::Applied::still_in_earlier_revisions)).
+ *
+ * ```
+ * use laminapdf_ops::{Op, RemoveXmpProperty};
+ *
+ * let op = Op::from(RemoveXmpProperty::new("http://example.com/ns/", "batch"));
+ * assert_eq!(
+ *     serde_json::to_string(&op)?,
+ *     r#"{"op":"removeXmpProperty","args":{"namespace":"http://example.com/ns/","name":"batch"}}"#
+ * );
+ * # Ok::<(), serde_json::Error>(())
+ * ```
+ *
+ * Added in 0.3.0.
+ */
+export interface RemoveXmpProperty {
+    /**
+     * The property's namespace URI.
+     */
+    namespace: string;
+    /**
+     * The property's local name.
+     */
+    name: string;
+    /**
+     * As [`SetMetadata::replace_malformed`](crate::SetMetadata::replace_malformed).
+     */
+    replaceMalformed?: boolean;
+}
+
+/**
+ * Removes metadata fields from the Info dictionary and the XMP packet; the packet's other
+ * properties stay (J.10).
+ *
+ * The values stay in the file's earlier revisions until a full rewrite: an incremental save
+ * appends the change and keeps the original bytes. When it removed anything, the op's result
+ * says so ([`Applied::still_in_earlier_revisions`](crate::Applied::still_in_earlier_revisions)),
+ * so the caller can offer a full rewrite (on a signed file, the override that removes the
+ * signatures).
+ *
+ * ```
+ * use laminapdf_ops::{MetadataKey, Op, RemoveMetadata};
+ *
+ * let op = Op::from(RemoveMetadata::new(vec![MetadataKey::Authors, MetadataKey::Creator]));
+ * assert_eq!(serde_json::to_string(&op)?, r#"{"op":"removeMetadata","args":{"keys":["authors","creator"]}}"#);
+ * # Ok::<(), serde_json::Error>(())
+ * ```
+ *
+ * Added in 0.2.0.
+ */
+export interface RemoveMetadata {
+    /**
+     * The fields to remove.
+     */
+    keys: MetadataKey[];
+    /**
+     * As [`SetMetadata::replace_malformed`].
      */
-    limits?: LimitsInit;
+    replaceMalformed?: boolean;
 }
 
 /**
- * Options for a new document: everything that would come from the environment is given,
- * so the same calls give the same bytes.
+ * Renames a named destination, keeping it where it is. With `links: follow` (the default) the
+ * bookmarks, links and `GoTo` actions of this file that name it are renamed too, in the form
+ * they named it in.
+ *
+ * On the wire: `{ "op": "renameNamedDestination", "args": { "from": "sec2", "to": "methods" } }`.
+ *
+ * Added in 0.3.0.
  */
-export interface BuildOptionsInit {
+export interface RenameNamedDestination {
     /**
-     * The header version (default 1.7).
+     * The current name.
      */
-    version?: PdfVersionInit;
+    from: string;
     /**
-     * The first `/ID` entry: 16 bytes as 32 hex digits (default: a content hash).
+     * The new name; no destination may have it yet.
      */
-    id?: string;
+    to: string;
     /**
-     * `/Producer`.
+     * Whether the uses follow.
      */
-    producer?: string;
+    links?: RenameLinks;
+}
+
+/**
+ * Replaces pages of this document with pages of a source document, pair by pair: the first
+ * source page takes the first target's place, and so on. What pointed at a replaced page
+ * (outline items, links, named destinations, `GoTo` actions, `/OpenAction`) now points at
+ * the page that took its place, with the view `/Fit`, since coordinates on the old page mean
+ * nothing on the new one. Targets left over are deleted (their references retargeted to the
+ * nearest surviving page); source pages left over go after the last copy. The copies come
+ * in as with [`InsertPagesFrom`]; the replaced pages are deleted as with
+ * [`DeletePages`](crate::DeletePages), structure, widgets and earlier revisions included.
+ *
+ * On the wire: `{ "op": "replacePages", "args": { "targets": ["p7.0"], "source": "<64 hex
+ * digits>", "pages": ["p3.0"] } }`, with `carry` optional.
+ *
+ * Added in 0.3.0.
+ */
+export interface ReplacePages {
     /**
-     * `/CreationDate`, a PDF date (`D:20261030120000Z`).
+     * The pages to replace, in order.
      */
-    creationDate?: string;
+    targets: string[];
     /**
-     * Flate-compress content streams (default `true`).
+     * The source document.
      */
-    compress?: boolean;
+    source: string;
     /**
-     * A tagged document (structure tree, `/MarkInfo`) even before any element (default
-     * `false`; a page using `beginTag` or `beginArtifact` makes it tagged either way).
+     * The source's pages that take their places, by their IDs in the source.
      */
-    tagged?: boolean;
+    pages: string[];
     /**
-     * Conformance profiles: `PDF/UA-1` with at most one PDF/A profile. `finish` then fails
-     * with a coded error for each machine-checkable rule the document breaks.
+     * What comes along with the pages.
      */
-    profiles?: ProfileInit[];
+    carry?: Carry;
 }
 
 /**
- * Options for saving.
+ * Replaces the document's page labels with `ranges`; an empty list removes them, so viewers
+ * show page numbers again.
+ *
+ * Each range starts at a page, named by its ID, and labels that page and the ones after it up
+ * to the next range. The ranges must be in page order, two never on one page, the first on
+ * the document's first page (the number tree must have an entry for page 0, §12.4.2), and
+ * each numbered from 1 or more; otherwise the op fails with `invalid-label-ranges`. Nothing
+ * is written when the catalog already holds exactly these labels
+ * ([`PageLabels::is_written`]); any other tree, a damaged one included, is replaced.
+ *
+ * On the wire:
+ * `{ "op": "setPageLabels", "args": { "ranges": [{ "page": "p3.0", "style": "lowerRoman" }] } }`.
+ *
+ * Added in 0.3.0.
  */
-export interface SaveOptionsInit {
+export interface SetPageLabels {
     /**
-     * The mode (default `auto`).
+     * The ranges, in page order.
      */
-    mode?: SaveModeJs;
+    ranges: PageLabelRange[];
+}
+
+/**
+ * Replaces the whole XMP packet with `xml`, for what the property ops can't write
+ * (structures, qualifiers, comments). The packet is parsed before it applies and refused if it
+ * doesn't parse (`invalid-xmp-packet`) or changes the PDF/A or PDF/UA identification
+ * (`xmp-claim-read-only`). Info's mirrored entries follow the new packet; in a file that
+ * claims PDF/A, the extension schema entries its properties lack are added and reported
+ * ([`Applied::declared`](crate::Applied::declared)). The old packet stays in the file's
+ * earlier revisions until a full rewrite.
+ *
+ * ```
+ * use laminapdf_ops::{Op, ReplaceXmpPacket};
+ *
+ * let op = Op::from(ReplaceXmpPacket::new("<x:xmpmeta xmlns:x=\"adobe:ns:meta/\">…</x:xmpmeta>"));
+ * assert!(serde_json::to_string(&op)?.starts_with(r#"{"op":"replaceXmpPacket","args":{"xml":"<x:xmpmeta"#));
+ * # Ok::<(), serde_json::Error>(())
+ * ```
+ *
+ * Added in 0.3.0.
+ */
+export interface ReplaceXmpPacket {
     /**
-     * Save even when it invalidates signatures (removing them from the output).
+     * The new packet's XML, with or without its `<?xpacket … ?>` wrapper.
      */
-    invalidateSignatures?: boolean;
+    xml: string;
+}
+
+/**
+ * Reverses the order of `pages` within the places they hold: the first of them (in page
+ * order) takes the last one's place, and so on; the other pages don't move.
+ *
+ * On the wire: `{ "op": "reversePages", "args": { "pages": ["p3.0", "p4.0", "p5.0"] } }`.
+ *
+ * Added in 0.3.0.
+ */
+export interface ReversePages {
     /**
-     * Write an encrypted document as a plaintext full rewrite.
+     * The pages; their order here doesn't matter.
      */
-    removeEncryption?: boolean;
+    pages: string[];
+}
+
+/**
+ * Rotates `pages` by `angle`, set or turned ([`RotateMode`]); each page as
+ * [`RotatePage`] does, keeping its object and [`PageId`].
+ *
+ * On the wire: `{ "op": "rotatePages", "args": { "pages": ["p3.0"], "angle": 90, "mode": "turn" } }`.
+ *
+ * Added in 0.3.0.
+ */
+export interface RotatePages {
     /**
-     * What an incremental save returns.
+     * The pages.
      */
-    output?: OutputJs;
+    pages: string[];
     /**
-     * Numbering in a full rewrite.
+     * The angle in degrees clockwise: 0, 90, 180 or 270.
      */
-    renumber?: RenumberJs;
+    angle: 0 | 90 | 180 | 270;
     /**
-     * The cross-reference form.
+     * Whether the angle is set or added; `set` when left out.
      */
-    xref?: XrefJs;
+    mode?: RotateMode;
 }
 
 /**
@@ -384,6 +1602,8 @@ export interface SaveOptionsInit {
  * On the wire: `{ "op": "rotatePage", "args": { "page": "p12.0", "rotate": 90 } }`.
  *
  * [ADR 0005]: https://github.com/laudebugs/laminapdf/blob/main/docs/decisions/0005-document-model.md
+ *
+ * Added in 0.2.0.
  */
 export interface RotatePage {
     /**
@@ -396,6 +1616,60 @@ export interface RotatePage {
     rotate: 0 | 90 | 180 | 270;
 }
 
+/**
+ * Sets any XMP property: text, a URI, a number, a boolean, a date, a language alternative,
+ * or an ordered or unordered array of simple values. A file without a packet gets one.
+ *
+ * `prefix` names the namespace when the packet binds no prefix to it. A property the Info
+ * dictionary mirrors (`dc:title`, `pdf:Producer`, …) is set in both, as
+ * [`SetMetadata`](crate::SetMetadata) sets it, and must have its shape: text, or a language
+ * alternative of the `x-default` entry alone, for `dc:title` and `dc:description`; an array of
+ * text for `dc:creator`; a date for the dates.
+ *
+ * ```
+ * use laminapdf_ops::{Op, SetXmpProperty};
+ * use laminapdf_model::xmp::XmpValue;
+ *
+ * let op = Op::from(SetXmpProperty::new("http://example.com/ns/", "acme", "batch", XmpValue::Integer(42)));
+ * assert_eq!(
+ *     serde_json::to_string(&op)?,
+ *     r#"{"op":"setXmpProperty","args":{"namespace":"http://example.com/ns/","prefix":"acme","name":"batch","value":{"type":"integer","value":42}}}"#
+ * );
+ * # Ok::<(), serde_json::Error>(())
+ * ```
+ *
+ * Added in 0.3.0.
+ */
+export interface SetXmpProperty {
+    /**
+     * The property's namespace URI.
+     */
+    namespace: string;
+    /**
+     * The prefix to write the namespace with when the packet binds none.
+     */
+    prefix: string;
+    /**
+     * The property's local name.
+     */
+    name: string;
+    /**
+     * The new value.
+     */
+    value: XmpValue;
+    /**
+     * As [`SetMetadata::replace_malformed`](crate::SetMetadata::replace_malformed).
+     */
+    replaceMalformed?: boolean;
+}
+
+/**
+ * Something in the file that names a destination.
+ *
+ * Added in 0.3.0.
+ */
+export type DestinationUse = { kind: "outlineItem"; item: string } | { kind: "annotation"; page: string; annot: string } | { kind: "catalog" };
+
 /**
  * The Info dictionary's text entries; absent ones are left out (document text).
  */
@@ -474,14 +1748,50 @@ export interface MetadataInit {
     modDate?: string;
 }
 
+/**
+ * The document's XMP packet as text (`laminapdf::XmpText`).
+ */
+export interface XmpTextJs {
+    /**
+     * Whether there is a packet, and whether it was read.
+     */
+    status: PacketStatus;
+    /**
+     * The packet's XML, with the edits made so far.
+     */
+    xml?: string;
+    /**
+     * The PDF/A part and conformance the packet claims, e.g. `"2B"`.
+     */
+    pdfa?: string;
+}
+
 /**
  * The kind of change an op makes. The save planner checks it against `DocMDP` / `FieldMDP`
  * permissions and the document's `SaveConstraint` ([ADR 0007]).
  *
  * [ADR 0007]: https://github.com/laudebugs/laminapdf/blob/main/docs/decisions/0007-save-planner.md
+ *
+ * Added in 0.2.0.
  */
 export type ModificationClass = "metadata" | "formFill" | "annotation" | "signature" | "pageStructure" | "content" | "document";
 
+/**
+ * The page and zoom a document opens at.
+ *
+ * Added in 0.3.0.
+ */
+export interface OpenAt {
+    /**
+     * The page.
+     */
+    page: string;
+    /**
+     * The zoom.
+     */
+    zoom?: "default" | "fitPage" | "fitWidth" | number;
+}
+
 /**
  * The pages an edit touched.
  */
@@ -490,11 +1800,80 @@ export interface EditedJs {
      * IDs of the pages whose content or attributes changed.
      */
     touchedPages: string[];
+    /**
+     * A metadata edit rewrote the XMP packet whole (UTF-16, or marked read-only).
+     */
+    packetRewritten: boolean;
+    /**
+     * A metadata edit removed values the file's earlier revisions still hold, which only a
+     * full rewrite drops.
+     */
+    stillInEarlierRevisions: boolean;
+    /**
+     * IDs of annotations an annotation op deleted besides the one it names (Popups, replies,
+     * the rest of a group); left out when there are none.
+     */
+    alsoDeleted?: string[];
     /**
      * Whether the edit changed the document: one that only set values they already had leaves
      * no step to undo.
      */
     changed: boolean;
+    /**
+     * The IDs of the bookmarks the edit added, in order.
+     */
+    createdOutlineItems: string[];
+    /**
+     * An outline edit found the outline's links broken and rewrote them whole; bookmarks
+     * stored inside others have new IDs.
+     */
+    outlineRepaired: boolean;
+    /**
+     * What still names a named destination the edit deleted.
+     */
+    destinationUses: DestinationUse[];
+    /**
+     * The XMP properties the edit declared in a PDF/A file's extension schemas.
+     */
+    declared: ExtensionPropertyJs[];
+    /**
+     * The page IDs in order after the edit, when it changed the page list.
+     */
+    pageOrder?: string[];
+    /**
+     * What a page deletion did to the references to the deleted pages.
+     */
+    references: ReferenceEditJs[];
+    /**
+     * What a page duplication did to the form fields whose widgets the copied pages show;
+     * left out when there are none.
+     */
+    fields?: FieldEditJs[];
+    /**
+     * The copies a page duplication made whose tags couldn't all be cloned; left out when
+     * there are none.
+     */
+    tagsIncomplete?: string[];
+    /**
+     * The page holding each link a page copied in from another document lost, one entry per
+     * link; left out when there are none.
+     */
+    linksRemoved?: string[];
+    /**
+     * The pages copied in from another document without the tags their source gave them; left
+     * out when there are none.
+     */
+    tagsDropped?: string[];
+    /**
+     * The named destinations a merge or a page import brought in under another name, because
+     * the document already used theirs; left out when there are none.
+     */
+    renamedDestinations?: RenamedDestinationJs[];
+    /**
+     * The bookmarks a merge left out because the pages they went to didn't come along; left
+     * out when there are none.
+     */
+    bookmarksDropped?: number;
 }
 
 /**
@@ -507,6 +1886,52 @@ export type PageModeInit = "none" | "outlines" | "thumbnails" | "fullScreen" | "
  */
 export type SaveModeJs = "auto" | "incremental" | "fullRewrite";
 
+/**
+ * The wire form, under the name TypeScript gives it.
+ */
+export type XmpValue = { type: "text"; value: string } | { type: "uri"; value: string } | { type: "integer"; value: number } | { type: "real"; value: number } | { type: "boolean"; value: boolean } | { type: "date"; value: string } | { type: "langAlt"; value: XmpLangText[] } | { type: "seq"; value: XmpValue[] } | { type: "bag"; value: XmpValue[] };
+
+/**
+ * What [`DeleteOutlineItem`](super::DeleteOutlineItem) does with the item's children.
+ *
+ * Added in 0.3.0.
+ */
+export type ChildItems = "delete" | "promote";
+
+/**
+ * What [`DeletePages`] does with a destination that names a deleted page.
+ *
+ * Added in 0.3.0.
+ */
+export type ReferencePolicy = "retarget" | "remove";
+
+/**
+ * What a page duplication or a page copied in did to one form field.
+ */
+export interface FieldEditJs {
+    /**
+     * The field on the source page (in the source document, for a page copied in).
+     */
+    field: string;
+    /**
+     * The copy whose widget it concerns.
+     */
+    page: string;
+    /**
+     * `renamed` (the copy's widget belongs to a new field), `linked` (it joined the field of
+     * the same name) or `notCopied` (a signature's widget).
+     */
+    outcome: "renamed" | "linked" | "notCopied";
+    /**
+     * The new field's ID, when renamed; the field it joined, when linked.
+     */
+    to?: string;
+    /**
+     * The new field's fully qualified name, when renamed.
+     */
+    name?: string;
+}
+
 /**
  * What a save wrote (`laminapdf::SaveReport`).
  */
@@ -535,6 +1960,24 @@ export interface SaveReportJs {
      * Whether encryption was removed.
      */
     encryptionRemoved: boolean;
+    /**
+     * Whether the save stamped the save-time metadata (`metadataDate`, `instanceId`).
+     */
+    metadataUpdated: boolean;
+    /**
+     * Whether the options asked for the stamp and the save left it out, because it would have
+     * broken a signature's restriction the saved changes keep.
+     */
+    metadataNotUpdated: boolean;
+    /**
+     * Whether an edit saved here rewrote the XMP packet whole.
+     */
+    packetRewritten: boolean;
+    /**
+     * Whether the save emptied the undo history (a full rewrite, or an incremental save that
+     * freed objects); for a copy, whether adopting it would.
+     */
+    historyCleared: boolean;
 }
 
 /**
@@ -556,11 +1999,73 @@ export interface RevertedJs {
     touchedPages: string[];
 }
 
+/**
+ * What becomes of the sources' outlines (bookmarks) in a merge.
+ *
+ * Added in 0.3.0.
+ */
+export type OutlineMerge = "perFile" | "keep" | "none";
+
+/**
+ * What comes along with pages copied from another document.
+ *
+ * Added in 0.3.0.
+ */
+export interface Carry {
+    /**
+     * Whether the pages' annotations other than form fields come along (links, comments,
+     * markup); `true` when left out.
+     */
+    annotations?: boolean;
+    /**
+     * What happens to a form field whose name the target already uses; `rename` when left
+     * out.
+     */
+    fields?: FieldClash;
+}
+
+/**
+ * What happens to a copied form field whose fully qualified name the target already uses
+ * (E2 plan §11).
+ *
+ * Added in 0.3.0.
+ */
+export type FieldClash = "rename" | "link";
+
+/**
+ * What the document's `/Metadata` holds.
+ *
+ * Added in 0.2.0.
+ */
+export type PacketStatus = "absent" | "parsed" | "malformed";
+
+/**
+ * Where a bookmark goes.
+ *
+ * Added in 0.3.0.
+ */
+export type OutlineTarget = { destination: ExplicitDestination } | { named: string } | { uri: string };
+
 /**
  * Where a link or outline item goes.
  */
 export type LinkTargetInit = { type: "uri"; uri: string } | { type: "page"; index: number; fit?: FitInit } | { type: "named"; name: string };
 
+/**
+ * Whether [`RenameNamedDestination`](super::RenameNamedDestination) renames the uses of the
+ * name in this file too.
+ *
+ * Added in 0.3.0.
+ */
+export type RenameLinks = "keep" | "follow";
+
+/**
+ * Which side [`DocumentMetadata`]'s values come from.
+ *
+ * Added in 0.2.0.
+ */
+export type MetadataSource = "info" | "xmp";
+
 /**
  * `Limits` with every field optional (ADR 0003 §3; names as in Rust, camelCase).
  */
@@ -715,6 +2220,24 @@ export class WasmDocument {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
+    /**
+     * Adds another PDF as a source document: `{ id, pages }`, its ID (64 hex digits, the
+     * SHA-256 of `bytes`) and its page IDs in order. An encrypted one opens with `password`,
+     * which no op ever holds.
+     *
+     * # Errors
+     * `wrong-password`, `password-required`, and the errors of a file that doesn't open.
+     */
+    addSource(bytes: Uint8Array, password?: string | null): { id: string; pages: string[] };
+    /**
+     * Makes `bytes`, the whole output of `saveCopy`, the document's saved file (it rebases onto
+     * them), once they are written where the document lives; `historyCleared` is the copy's
+     * report's.
+     *
+     * # Errors
+     * `nested-transaction`, `saved-not-rebased`; `not-rebased` when `bytes` can't be read.
+     */
+    adoptCopy(bytes: Uint8Array, historyCleared: boolean): void;
     /**
      * Applies an op log (`{ "v": 1, "ops": [ … ] }`) as one transaction.
      *
@@ -730,6 +2253,14 @@ export class WasmDocument {
      * error (nothing is applied).
      */
     apply(ops: Op[]): EditedJs;
+    /**
+     * A new document of `pages` of this one, in the order given.
+     *
+     * # Errors
+     * `invalid-argument` for a value that isn't a list of page IDs, `unknown-page`; reading
+     * errors.
+     */
+    extractPages(pages: string[]): WasmDocument;
     /**
      * Whether there are changes no save has written yet.
      */
@@ -745,6 +2276,24 @@ export class WasmDocument {
      * Whether the file is encrypted (it opened with its password, or the empty one).
      */
     isEncrypted(): boolean;
+    /**
+     * A new document of `inputs` (each `{ bytes, password?, title? }`) one after another,
+     * with their bookmarks, named destinations, form fields, layers and page labels; `options`
+     * as `mergeDocuments`' (`outline`, `fields`).
+     *
+     * # Errors
+     * `invalid-argument` / `unknown-option` for bad values, `wrong-password`,
+     * `password-required`, and the errors of a file that doesn't open.
+     */
+    static merge(inputs: { bytes: Uint8Array; password?: string; title?: string }[], options: MergeOptions | undefined): WasmDocument;
+    /**
+     * The document's metadata, read from Info and XMP together, with the fields where they
+     * disagree.
+     *
+     * # Errors
+     * Reading errors.
+     */
+    metadata(): DocumentMetadata;
     /**
      * Opens a document from its bytes.
      *
@@ -797,6 +2346,13 @@ export class WasmDocument {
      * `page-index-out-of-range`; reading errors.
      */
     page(index: number): WasmPage;
+    /**
+     * How a save with `options` would go, without saving.
+     *
+     * # Errors
+     * `invalid-argument` / `unknown-option` for bad options; reading errors.
+     */
+    plan(options: SaveOptionsInit | undefined): PlannedSaveJs;
     /**
      * Rebases onto `bytes`, the output of a save whose rebase failed (`not-rebased`).
      *
@@ -812,6 +2368,14 @@ export class WasmDocument {
      * As [`WasmDocument::undo`].
      */
     redo(): RevertedJs | undefined;
+    /**
+     * Writes what `save` would and leaves the document as it was: not rebased, its changes
+     * still unsaved, the save-time stamp in the copy only (Save a copy).
+     *
+     * # Errors
+     * As `save`; the document is unchanged either way.
+     */
+    saveCopy(options: SaveOptionsInit | undefined): { bytes: Uint8Array<ArrayBuffer>; report: SaveReportJs };
     /**
      * A save as a job, stepped with a budget of work units (ADR 0028 §3, §4).
      *
@@ -826,6 +2390,17 @@ export class WasmDocument {
      * The save's errors (`would-invalidate-signatures`, `requires-rewrite`, …).
      */
     save(options: SaveOptionsInit | undefined): { bytes: Uint8Array<ArrayBuffer>; report: SaveReportJs };
+    /**
+     * This document cut into new ones: `{ count: n }` parts of `n` pages, `{ ranges: [[id, …],
+     * …] }` one part per list of page IDs, or `{ bookmarks: level }` a part from each bookmark
+     * at that depth (1: the top level). Each part carries what its pages reach and the
+     * bookmarks that go to them.
+     *
+     * # Errors
+     * `invalid-argument` / `unknown-option` for a value that isn't one of those, `unknown-page`,
+     * `no-pages-left` for an empty list; reading errors.
+     */
+    split(by: { readonly count: number } | { readonly ranges: readonly (readonly string[])[] } | { readonly bookmarks: number }): WasmDocument[];
     /**
      * Undoes the newest transaction: how it went and the pages it touched; `undefined` when
      * there is nothing to undo.
@@ -838,6 +2413,20 @@ export class WasmDocument {
      * A cursor over the warnings so far (build warnings first), each as the §1 object.
      */
     warnings(): WasmWarningCursor;
+    /**
+     * The signature restrictions `op` would break if it were applied and saved.
+     *
+     * # Errors
+     * `invalid-argument` for a value that isn't an op; reading errors.
+     */
+    wouldViolate(op: Op): ViolationJs[];
+    /**
+     * The document's XMP packet as text, with the edits made so far.
+     *
+     * # Errors
+     * Reading errors.
+     */
+    xmpPacket(): XmpTextJs;
 }
 
 /**
@@ -1205,11 +2794,16 @@ export interface InitOutput {
     readonly wasmbuilder_page: (a: number, b: number, c: number) => number;
     readonly wasmbuilder_pageLabels: (a: number, b: any) => [number, number];
     readonly wasmbuilder_viewerPreferences: (a: number, b: any) => [number, number];
+    readonly wasmdocument_addSource: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
+    readonly wasmdocument_adoptCopy: (a: number, b: number, c: number, d: number) => [number, number];
     readonly wasmdocument_apply: (a: number, b: any) => [number, number, number];
     readonly wasmdocument_applyLog: (a: number, b: number, c: number) => [number, number, number];
+    readonly wasmdocument_extractPages: (a: number, b: any) => [number, number, number];
     readonly wasmdocument_hasUnsavedChanges: (a: number) => number;
     readonly wasmdocument_info: (a: number) => [number, number, number];
     readonly wasmdocument_isEncrypted: (a: number) => number;
+    readonly wasmdocument_merge: (a: any, b: any) => [number, number, number];
+    readonly wasmdocument_metadata: (a: number) => [number, number, number];
     readonly wasmdocument_openBytes: (a: number, b: number, c: any) => [number, number, number];
     readonly wasmdocument_openSource: (a: number, b: any) => [number, number, number];
     readonly wasmdocument_page: (a: number, b: number) => [number, number, number];
@@ -1217,12 +2811,17 @@ export interface InitOutput {
     readonly wasmdocument_pageCount: (a: number) => [number, number, number];
     readonly wasmdocument_pageInfo: (a: number, b: number) => [number, number, number];
     readonly wasmdocument_pageInfos: (a: number) => [number, number, number];
+    readonly wasmdocument_plan: (a: number, b: any) => [number, number, number];
     readonly wasmdocument_rebase: (a: number, b: number, c: number) => [number, number];
     readonly wasmdocument_redo: (a: number) => [number, number, number];
     readonly wasmdocument_save: (a: number, b: any) => [number, number, number];
+    readonly wasmdocument_saveCopy: (a: number, b: any) => [number, number, number];
     readonly wasmdocument_saveJob: (a: number, b: any) => [number, number, number];
+    readonly wasmdocument_split: (a: number, b: any) => [number, number, number];
     readonly wasmdocument_undo: (a: number) => [number, number, number];
     readonly wasmdocument_warnings: (a: number) => number;
+    readonly wasmdocument_wouldViolate: (a: number, b: any) => [number, number, number];
+    readonly wasmdocument_xmpPacket: (a: number) => [number, number, number];
     readonly wasmimage_height: (a: number) => number;
     readonly wasmimage_jpeg: (a: number, b: number) => [number, number, number];
     readonly wasmimage_png: (a: number, b: number) => [number, number, number];