pdf-oxide-wasm 0.3.49 → 0.3.51

package/nodejs/pdf_oxide.js

@@ -89,6 +89,216 @@ class ArtifactStyle {
 if (Symbol.dispose) ArtifactStyle.prototype[Symbol.dispose] = ArtifactStyle.prototype.free;
 exports.ArtifactStyle = ArtifactStyle;
 
+/**
+ * A parsed Document Security Store (`/DSS`, ISO 32000-2 §12.8.4.3).
+ * Count + index accessors mirror `WasmCertificate`'s flat shape
+ * (wasm-bindgen cannot return `Uint8Array[]` directly).
+ */
+class Dss {
+    static __wrap(ptr) {
+        const obj = Object.create(Dss.prototype);
+        obj.__wbg_ptr = ptr;
+        DssFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        DssFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_dss_free(ptr, 0);
+    }
+    /**
+     * Number of DER X.509 certificates in the DSS.
+     * @returns {number}
+     */
+    get certCount() {
+        const ret = wasm.wasmdss_certCount(this.__wbg_ptr);
+        return ret >>> 0;
+    }
+    /**
+     * Number of DER CRLs in the DSS.
+     * @returns {number}
+     */
+    get crlCount() {
+        const ret = wasm.wasmdss_crlCount(this.__wbg_ptr);
+        return ret >>> 0;
+    }
+    /**
+     * The `i`-th DER certificate, or `undefined` if out of range.
+     * @param {number} i
+     * @returns {Uint8Array | undefined}
+     */
+    getCert(i) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.wasmdss_getCert(retptr, this.__wbg_ptr, i);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            let v1;
+            if (r0 !== 0) {
+                v1 = getArrayU8FromWasm0(r0, r1).slice();
+                wasm.__wbindgen_export4(r0, r1 * 1, 1);
+            }
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * The `i`-th DER CRL, or `undefined` if out of range.
+     * @param {number} i
+     * @returns {Uint8Array | undefined}
+     */
+    getCrl(i) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.wasmdss_getCrl(retptr, this.__wbg_ptr, i);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            let v1;
+            if (r0 !== 0) {
+                v1 = getArrayU8FromWasm0(r0, r1).slice();
+                wasm.__wbindgen_export4(r0, r1 * 1, 1);
+            }
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * The `i`-th DER OCSP response, or `undefined` if out of range.
+     * @param {number} i
+     * @returns {Uint8Array | undefined}
+     */
+    getOcsp(i) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.wasmdss_getOcsp(retptr, this.__wbg_ptr, i);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            let v1;
+            if (r0 !== 0) {
+                v1 = getArrayU8FromWasm0(r0, r1).slice();
+                wasm.__wbindgen_export4(r0, r1 * 1, 1);
+            }
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+    /**
+     * Number of DER OCSP responses in the DSS.
+     * @returns {number}
+     */
+    get ocspCount() {
+        const ret = wasm.wasmdss_ocspCount(this.__wbg_ptr);
+        return ret >>> 0;
+    }
+    /**
+     * Per-signature VRI keys (uppercase-hex SHA-1 of `/Contents`).
+     * @returns {string[]}
+     */
+    get vri() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.wasmdss_vri(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var v1 = getArrayJsValueFromWasm0(r0, r1).slice();
+            wasm.__wbindgen_export4(r0, r1 * 4, 4);
+            return v1;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
+}
+if (Symbol.dispose) Dss.prototype[Symbol.dispose] = Dss.prototype.free;
+exports.Dss = Dss;
+
+/**
+ * PAdES baseline level. Frozen integer mapping (BB=0, BT=1, BLt=2,
+ * BLta=3) shared with the C ABI and every binding — never renumber.
+ * @enum {0 | 1 | 2 | 3}
+ */
+const PadesLevel = Object.freeze({
+    /**
+     * B-B: signed attrs incl. the ESS signing-certificate-v2.
+     */
+    BB: 0, "0": "BB",
+    /**
+     * B-T: B-B + an RFC 3161 signature-time-stamp unsigned attr.
+     */
+    BT: 1, "1": "BT",
+    /**
+     * B-LT: B-T + a Document Security Store (DSS/VRI).
+     */
+    BLt: 2, "2": "BLt",
+    /**
+     * B-LTA: B-LT + a document-scoped `/DocTimeStamp`.
+     */
+    BLta: 3, "3": "BLta",
+});
+exports.PadesLevel = PadesLevel;
+
+/**
+ * Offline B-LT validation material (DER certs / CRLs / OCSP
+ * responses). Build with `new()` then `addCert`/`addCrl`/`addOcsp`.
+ */
+class RevocationMaterial {
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        RevocationMaterialFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_revocationmaterial_free(ptr, 0);
+    }
+    /**
+     * Add a DER X.509 certificate.
+     * @param {Uint8Array} der
+     */
+    addCert(der) {
+        const ptr0 = passArray8ToWasm0(der, wasm.__wbindgen_export);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.wasmrevocationmaterial_addCert(this.__wbg_ptr, ptr0, len0);
+    }
+    /**
+     * Add a DER CRL.
+     * @param {Uint8Array} der
+     */
+    addCrl(der) {
+        const ptr0 = passArray8ToWasm0(der, wasm.__wbindgen_export);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.wasmrevocationmaterial_addCrl(this.__wbg_ptr, ptr0, len0);
+    }
+    /**
+     * Add a DER OCSP response.
+     * @param {Uint8Array} der
+     */
+    addOcsp(der) {
+        const ptr0 = passArray8ToWasm0(der, wasm.__wbindgen_export);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.wasmrevocationmaterial_addOcsp(this.__wbg_ptr, ptr0, len0);
+    }
+    /**
+     * Create an empty revocation-material set.
+     */
+    constructor() {
+        const ret = wasm.wasmrevocationmaterial_new();
+        this.__wbg_ptr = ret;
+        RevocationMaterialFinalization.register(this, this.__wbg_ptr, this);
+        return this;
+    }
+}
+if (Symbol.dispose) RevocationMaterial.prototype[Symbol.dispose] = RevocationMaterial.prototype.free;
+exports.RevocationMaterial = RevocationMaterial;
+
 /**
  * WASM handle to a streaming-table building session. Created by
  * `FluentPageBuilder.streamingTable()`; rows are pushed via `pushRow`,
@@ -2830,6 +3040,31 @@ class WasmPdfDocument {
         const ptr = this.__destroy_into_raw();
         wasm.__wbg_wasmpdfdocument_free(ptr, 0);
     }
+    /**
+     * Queue an explicit destructive redaction rectangle on a page
+     * (page user space; `fill` is an optional DeviceRGB `[r,g,b]`).
+     * @param {number} page
+     * @param {number} x0
+     * @param {number} y0
+     * @param {number} x1
+     * @param {number} y1
+     * @param {Float32Array | null} [fill]
+     */
+    addRedaction(page, x0, y0, x1, y1, fill) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            var ptr0 = isLikeNone(fill) ? 0 : passArrayF32ToWasm0(fill, wasm.__wbindgen_export);
+            var len0 = WASM_VECTOR_LEN;
+            wasm.wasmpdfdocument_addRedaction(retptr, this.__wbg_ptr, page, x0, y0, x1, y1, ptr0, len0);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            if (r1) {
+                throw takeObject(r0);
+            }
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * Apply all redactions in the document.
      */
@@ -2863,6 +3098,27 @@ class WasmPdfDocument {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Destructively apply all queued redactions (true content removal,
+     * ISO 32000-1:2008 §12.5.6.23). Returns a `RedactionReport` object.
+     * @param {boolean | null} [scrub_metadata]
+     * @returns {any}
+     */
+    applyRedactionsDestructive(scrub_metadata) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.wasmpdfdocument_applyRedactionsDestructive(retptr, this.__wbg_ptr, isLikeNone(scrub_metadata) ? 0xFFFFFF : scrub_metadata ? 1 : 0);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return takeObject(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * Authenticate with a password to decrypt an encrypted PDF.
      *
@@ -2888,6 +3144,64 @@ class WasmPdfDocument {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Cheap per-page text-vs-OCR classification → JSON
+     * `DocumentClassification`.
+     * @returns {string}
+     */
+    classifyDocument() {
+        let deferred2_0;
+        let deferred2_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.wasmpdfdocument_classifyDocument(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+            var ptr1 = r0;
+            var len1 = r1;
+            if (r3) {
+                ptr1 = 0; len1 = 0;
+                throw takeObject(r2);
+            }
+            deferred2_0 = ptr1;
+            deferred2_1 = len1;
+            return getStringFromWasm0(ptr1, len1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export4(deferred2_0, deferred2_1, 1);
+        }
+    }
+    /**
+     * Cheap per-page classification → JSON `PageClassification`.
+     * @param {number} page_index
+     * @returns {string}
+     */
+    classifyPage(page_index) {
+        let deferred2_0;
+        let deferred2_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.wasmpdfdocument_classifyPage(retptr, this.__wbg_ptr, page_index);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+            var ptr1 = r0;
+            var len1 = r1;
+            if (r3) {
+                ptr1 = 0; len1 = 0;
+                throw takeObject(r2);
+            }
+            deferred2_0 = ptr1;
+            deferred2_1 = len1;
+            return getStringFromWasm0(ptr1, len1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export4(deferred2_0, deferred2_1, 1);
+        }
+    }
     /**
      * Clear all pending erase operations for a page.
      * @param {number} page_index
@@ -2967,6 +3281,26 @@ class WasmPdfDocument {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * The document's Document Security Store (`/DSS`) as a `Dss`, or
+     * `undefined` if absent. Mirrors Rust `signatures::read_dss`.
+     * @returns {Dss | undefined}
+     */
+    dss() {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.wasmpdfdocument_dss(retptr, this.__wbg_ptr);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return r0 === 0 ? undefined : Dss.__wrap(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * Deprecated: Use eraseFooter instead.
      * @param {number} page_index
@@ -3296,6 +3630,40 @@ class WasmPdfDocument {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Rich per-page extraction → JSON `PageExtraction` (per-region
+     * bbox + typed reason). `optionsJson` is `{}`-tolerant
+     * `AutoExtractOptions`; undefined/empty → defaults.
+     * @param {number} page_index
+     * @param {string | null} [options_json]
+     * @returns {string}
+     */
+    extractPageAuto(page_index, options_json) {
+        let deferred3_0;
+        let deferred3_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            var ptr0 = isLikeNone(options_json) ? 0 : passStringToWasm0(options_json, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+            var len0 = WASM_VECTOR_LEN;
+            wasm.wasmpdfdocument_extractPageAuto(retptr, this.__wbg_ptr, page_index, ptr0, len0);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+            var ptr2 = r0;
+            var len2 = r1;
+            if (r3) {
+                ptr2 = 0; len2 = 0;
+                throw takeObject(r2);
+            }
+            deferred3_0 = ptr2;
+            deferred3_1 = len2;
+            return getStringFromWasm0(ptr2, len2);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export4(deferred3_0, deferred3_1, 1);
+        }
+    }
     /**
      * Extract complete page text data in a single call.
      *
@@ -3497,6 +3865,36 @@ class WasmPdfDocument {
             wasm.__wbindgen_export4(deferred2_0, deferred2_1, 1);
         }
     }
+    /**
+     * One-shot auto text extraction — graceful native fallback (never
+     * the opaque OCR error #513).
+     * @param {number} page_index
+     * @returns {string}
+     */
+    extractTextAuto(page_index) {
+        let deferred2_0;
+        let deferred2_1;
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.wasmpdfdocument_extractTextAuto(retptr, this.__wbg_ptr, page_index);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+            var ptr1 = r0;
+            var len1 = r1;
+            if (r3) {
+                ptr1 = 0; len1 = 0;
+                throw takeObject(r2);
+            }
+            deferred2_0 = ptr1;
+            deferred2_1 = len1;
+            return getStringFromWasm0(ptr1, len1);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+            wasm.__wbindgen_export4(deferred2_0, deferred2_1, 1);
+        }
+    }
     /**
      * Extract text lines from a page.
      *
@@ -4110,6 +4508,26 @@ class WasmPdfDocument {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Number of redaction regions queued for `page`.
+     * @param {number} page
+     * @returns {number}
+     */
+    redactionCount(page) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.wasmpdfdocument_redactionCount(retptr, this.__wbg_ptr, page);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return r0 >>> 0;
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * Identify and remove both headers and footers.
      *
@@ -4294,6 +4712,30 @@ class WasmPdfDocument {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * Standalone document sanitization (#231 T10): strip `/Info`,
+     * catalog XMP `/Metadata`, document JavaScript and embedded files
+     * without geometric redaction. Returns a `RedactionReport` object.
+     * @param {boolean | null} [scrub_metadata]
+     * @param {boolean | null} [remove_javascript]
+     * @param {boolean | null} [remove_embedded_files]
+     * @returns {any}
+     */
+    sanitizeDocument(scrub_metadata, remove_javascript, remove_embedded_files) {
+        try {
+            const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+            wasm.wasmpdfdocument_sanitizeDocument(retptr, this.__wbg_ptr, isLikeNone(scrub_metadata) ? 0xFFFFFF : scrub_metadata ? 1 : 0, isLikeNone(remove_javascript) ? 0xFFFFFF : remove_javascript ? 1 : 0, isLikeNone(remove_embedded_files) ? 0xFFFFFF : remove_embedded_files ? 1 : 0);
+            var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+            var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+            var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+            if (r2) {
+                throw takeObject(r1);
+            }
+            return takeObject(r0);
+        } finally {
+            wasm.__wbindgen_add_to_stack_pointer(16);
+        }
+    }
     /**
      * Save all edits and return the resulting PDF as bytes.
      *
@@ -5400,6 +5842,16 @@ class WasmSignature {
             wasm.__wbindgen_add_to_stack_pointer(16);
         }
     }
+    /**
+     * PAdES baseline level from this signature's CMS attributes alone
+     * (`BB` vs `BT`). `BLt` additionally needs the document `/DSS` —
+     * read it via `WasmPdfDocument.dss()` and re-classify there.
+     * @returns {PadesLevel}
+     */
+    get padesLevel() {
+        const ret = wasm.wasmsignature_padesLevel(this.__wbg_ptr);
+        return ret;
+    }
     /**
      * `/Reason` entry from the signature dictionary, if present.
      * @returns {string | undefined}
@@ -5688,6 +6140,73 @@ class WasmTimestamp {
 if (Symbol.dispose) WasmTimestamp.prototype[Symbol.dispose] = WasmTimestamp.prototype.free;
 exports.WasmTimestamp = WasmTimestamp;
 
+/**
+ * A CycloneDX 1.6 Cryptographic Bill of Materials (JSON string) of the
+ * algorithms exercised so far this process (#230 Phase F).
+ * @returns {string}
+ */
+function cryptoCbom() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.cryptoCbom(retptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred1_0 = r0;
+        deferred1_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export4(deferred1_0, deferred1_1, 1);
+    }
+}
+exports.cryptoCbom = cryptoCbom;
+
+/**
+ * The cryptographic algorithm tokens exercised so far this process
+ * (governance report), as a JSON string array.
+ * @returns {any}
+ */
+function cryptoInventory() {
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.cryptoInventory(retptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        if (r2) {
+            throw takeObject(r1);
+        }
+        return takeObject(r0);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+}
+exports.cryptoInventory = cryptoInventory;
+
+/**
+ * The active crypto policy as its canonical grammar string.
+ * @returns {string}
+ */
+function cryptoPolicy() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.cryptoPolicy(retptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred1_0 = r0;
+        deferred1_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export4(deferred1_0, deferred1_1, 1);
+    }
+}
+exports.cryptoPolicy = cryptoPolicy;
+
 /**
  * Disable all pdf_oxide log output — convenience wrapper for
  * `setLogLevel("off")`.
@@ -5770,6 +6289,121 @@ function generateQrSvg(data, error_correction, size) {
 }
 exports.generateQrSvg = generateQrSvg;
 
+/**
+ * Whether `pdf_data` carries a document-scoped RFC 3161
+ * `/DocTimeStamp` archival timestamp (PAdES-B-LTA). This is the
+ * document-level reader signal; a `WasmSignature`'s `padesLevel`
+ * getter is signature-scoped and tops out at B-LT by design.
+ * @param {Uint8Array} pdf_data
+ * @returns {boolean}
+ */
+function hasDocumentTimestamp(pdf_data) {
+    const ptr0 = passArray8ToWasm0(pdf_data, wasm.__wbindgen_export);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.hasDocumentTimestamp(ptr0, len0);
+    return ret !== 0;
+}
+exports.hasDocumentTimestamp = hasDocumentTimestamp;
+
+/**
+ * #519: Air-gapped OCR model manifest — JSON (detector + every
+ * supported language's cache filenames and source URLs).
+ *
+ * WASM provisioning is **host-side**: browser/WASM has no filesystem
+ * or network-to-disk, so a download-to-cache prefetch cannot run
+ * here. This manifest is informational — it lets the JS host learn
+ * which model files/URLs to fetch and bundle (or ship out of band)
+ * before driving OCR. There is intentionally no `prefetchModels` in
+ * the WASM surface (see `prefetchAvailable`, which always returns
+ * `false`).
+ * @returns {string}
+ */
+function modelManifest() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.modelManifest(retptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred1_0 = r0;
+        deferred1_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export4(deferred1_0, deferred1_1, 1);
+    }
+}
+exports.modelManifest = modelManifest;
+
+/**
+ * Plan a bookmark split without producing PDFs. Returns a JSON array
+ * of segment objects (`index, startPage…` shape from
+ * `BookmarkSegment`). `level`: 0 = all depths, 1 = top-level.
+ * @param {Uint8Array} src_bytes
+ * @param {string | null | undefined} title_prefix
+ * @param {boolean} ignore_case
+ * @param {number} level
+ * @param {boolean} include_front_matter
+ * @returns {any}
+ */
+function planSplitByBookmarks(src_bytes, title_prefix, ignore_case, level, include_front_matter) {
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passArray8ToWasm0(src_bytes, wasm.__wbindgen_export);
+        const len0 = WASM_VECTOR_LEN;
+        var ptr1 = isLikeNone(title_prefix) ? 0 : passStringToWasm0(title_prefix, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        var len1 = WASM_VECTOR_LEN;
+        wasm.planSplitByBookmarks(retptr, ptr0, len0, ptr1, len1, ignore_case, level, include_front_matter);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        if (r2) {
+            throw takeObject(r1);
+        }
+        return takeObject(r0);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+}
+exports.planSplitByBookmarks = planSplitByBookmarks;
+
+/**
+ * #519: Whether this build can download OCR models to a local cache.
+ * Always `false` in WASM — provisioning is host-side (see
+ * `modelManifest`).
+ * @returns {boolean}
+ */
+function prefetchAvailable() {
+    const ret = wasm.prefetchAvailable();
+    return ret !== 0;
+}
+exports.prefetchAvailable = prefetchAvailable;
+
+/**
+ * Install the process-wide runtime crypto policy from its grammar
+ * string (`"compat"|"strict"|"fips-strict"[;…]`). Fail-closed:
+ * throws on an unparseable spec (policy NOT installed) or if a
+ * policy is already set. Default (never set) is `compat`.
+ * @param {string} spec
+ */
+function setCryptoPolicy(spec) {
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(spec, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.setCryptoPolicy(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        if (r1) {
+            throw takeObject(r0);
+        }
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+}
+exports.setCryptoPolicy = setCryptoPolicy;
+
 /**
  * Set the maximum log level for pdf_oxide messages.
  *
@@ -5842,6 +6476,90 @@ function signPdfBytes(pdf_data, cert, reason, location) {
     }
 }
 exports.signPdfBytes = signPdfBytes;
+
+/**
+ * Sign raw PDF bytes at a PAdES baseline level and return the signed
+ * PDF as a `Uint8Array`.
+ *
+ * `level` `BLTA` is reserved (→ error). For `BT`/`BLt` pass a
+ * pre-fetched RFC 3161 `timestampToken` (DER): WASM intentionally
+ * omits the online TSA client (same `ureq`-incompat carve-out as
+ * v0.3.38) — without a token the core fail-closes with `Unsupported`.
+ * `revocation` supplies the B-LT DSS material.
+ * @param {Uint8Array} pdf_data
+ * @param {WasmCertificate} cert
+ * @param {PadesLevel} level
+ * @param {Uint8Array | null} [timestamp_token]
+ * @param {RevocationMaterial | null} [revocation]
+ * @param {string | null} [reason]
+ * @param {string | null} [location]
+ * @returns {Uint8Array}
+ */
+function signPdfBytesPades(pdf_data, cert, level, timestamp_token, revocation, reason, location) {
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passArray8ToWasm0(pdf_data, wasm.__wbindgen_export);
+        const len0 = WASM_VECTOR_LEN;
+        _assertClass(cert, WasmCertificate);
+        var ptr1 = isLikeNone(timestamp_token) ? 0 : passArray8ToWasm0(timestamp_token, wasm.__wbindgen_export);
+        var len1 = WASM_VECTOR_LEN;
+        let ptr2 = 0;
+        if (!isLikeNone(revocation)) {
+            _assertClass(revocation, RevocationMaterial);
+            ptr2 = revocation.__destroy_into_raw();
+        }
+        var ptr3 = isLikeNone(reason) ? 0 : passStringToWasm0(reason, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        var len3 = WASM_VECTOR_LEN;
+        var ptr4 = isLikeNone(location) ? 0 : passStringToWasm0(location, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        var len4 = WASM_VECTOR_LEN;
+        wasm.signPdfBytesPades(retptr, ptr0, len0, cert.__wbg_ptr, level, ptr1, len1, ptr2, ptr3, len3, ptr4, len4);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        var r3 = getDataViewMemory0().getInt32(retptr + 4 * 3, true);
+        if (r3) {
+            throw takeObject(r2);
+        }
+        var v6 = getArrayU8FromWasm0(r0, r1).slice();
+        wasm.__wbindgen_export4(r0, r1 * 1, 1);
+        return v6;
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+}
+exports.signPdfBytesPades = signPdfBytesPades;
+
+/**
+ * Split at bookmark boundaries. Returns a JSON array of
+ * `[segment, bytes]` pairs (bytes as a number array; source
+ * unmodified).
+ * @param {Uint8Array} src_bytes
+ * @param {string | null | undefined} title_prefix
+ * @param {boolean} ignore_case
+ * @param {number} level
+ * @param {boolean} include_front_matter
+ * @returns {any}
+ */
+function splitByBookmarks(src_bytes, title_prefix, ignore_case, level, include_front_matter) {
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passArray8ToWasm0(src_bytes, wasm.__wbindgen_export);
+        const len0 = WASM_VECTOR_LEN;
+        var ptr1 = isLikeNone(title_prefix) ? 0 : passStringToWasm0(title_prefix, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        var len1 = WASM_VECTOR_LEN;
+        wasm.splitByBookmarks(retptr, ptr0, len0, ptr1, len1, ignore_case, level, include_front_matter);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        if (r2) {
+            throw takeObject(r1);
+        }
+        return takeObject(r0);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+}
+exports.splitByBookmarks = splitByBookmarks;
 function __wbg_get_imports() {
     const import0 = {
         __proto__: null,
@@ -6166,6 +6884,9 @@ const WasmCertificateFinalization = (typeof FinalizationRegistry === 'undefined'
 const WasmDocumentBuilderFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_wasmdocumentbuilder_free(ptr, 1));
+const DssFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_dss_free(ptr, 1));
 const WasmEmbeddedFontFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_wasmembeddedfont_free(ptr, 1));
@@ -6196,6 +6917,9 @@ const WasmPdfDocumentFinalization = (typeof FinalizationRegistry === 'undefined'
 const WasmPdfPageRegionFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_wasmpdfpageregion_free(ptr, 1));
+const RevocationMaterialFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_revocationmaterial_free(ptr, 1));
 const WasmSignatureFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_wasmsignature_free(ptr, 1));