embedpdf · bobsingor · Sep 16, 2026 · Sep 16, 2026
diff --git a/.changeset/pre.json b/.changeset/pre.json
@@ -73,7 +73,9 @@
     "@embedpdf/bundler-matrix-rspack": "0.0.0",
     "@embedpdf/bundler-matrix-vite": "0.0.0",
     "@embedpdf/bundler-matrix-webpack": "0.0.0",
-    "@embedpdf/bundler-probe": "0.0.0"
+    "@embedpdf/bundler-probe": "0.0.0",
+    "@embedpdf/core-signature": "3.0.0-next.0",
+    "@embedpdf/plugin-signature": "3.0.0-next.0"
   },
   "changesets": [
     "acrojs-af-library",
@@ -230,6 +232,7 @@
     "initial-embedpdf-viewer",
     "initial-embedpdf-web",
     "keygen-expiring-cloudpdf-server",
+    "linear-base64-engine-core",
     "oriented-text-core-annotation",
     "oriented-text-core-geometry",
     "oriented-text-engine-core",
@@ -266,10 +269,23 @@
     "plugin-contracts-stamp",
     "plugin-contracts-view-manager",
     "prepaint-placement-react",
+    "redaction-residual-text-engine-runtime",
     "render-layer-viewer-chrome",
     "render-strategy-plugin-render",
     "render-strategy-react",
     "render-worker-engine",
+    "rich-text-cloudpdf-contract",
+    "rich-text-cloudpdf-sdk",
+    "rich-text-core-annotation",
+    "rich-text-engine-core",
+    "rich-text-engine-runtime",
+    "rich-text-engine-services",
+    "rich-text-engine",
+    "rich-text-plugin-annotation",
+    "rich-text-react",
+    "rich-text-viewer-chrome",
+    "rich-text-viewer",
+    "rich-text-web",
     "s3-stream-buffer-server",
     "script-host-core-acrojs",
     "script-host-core-annotation",
@@ -288,6 +304,21 @@
     "selection-handles-web",
     "selection-strip-viewer-chrome",
     "server-engine-host-isolation",
+    "signature-stamp-contract-react",
+    "signatures-cloudpdf-contract",
+    "signatures-cloudpdf-engine",
+    "signatures-cloudpdf-sdk",
+    "signatures-cloudpdf-server",
+    "signatures-core-signature",
+    "signatures-engine-runtime",
+    "signatures-engine-services",
+    "signatures-engine",
+    "signatures-plugin-annotation",
+    "signatures-plugin-form",
+    "signatures-plugin-signature",
+    "signatures-plugin-stamp",
+    "signatures-viewer-chrome",
+    "signatures-viewer",
     "stamp-libraries-cloudpdf-viewer",
     "stamp-libraries-default-stamps",
     "stamp-libraries-plugin-annotation",

diff --git a/cloudpdf/contract/CHANGELOG.md b/cloudpdf/contract/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @cloudpdf/contract
 
+## 3.0.0-next.13
+
+### Minor Changes
+
+- [#817](https://github.com/embedpdf/embed-pdf-viewer/pull/817) by [@bobsingor](https://github.com/bobsingor) – Expose structured FreeText rich text in OpenAPI annotation responses, including paragraph and run styles and custom font family names.
+
+  Update signature and version analysis response schemas with applicable restrictions, current-state findings, and information about later revisions and reverted objects.
+
+- [#812](https://github.com/embedpdf/embed-pdf-viewer/pull/812) by [@bobsingor](https://github.com/bobsingor) – Add API contracts and OpenAPI schemas for preparing, completing, aborting, listing, and analyzing digital signatures. Add document version history, immutable version downloads, signed revision downloads, and signature contents and digest endpoints, with signing permissions and version conflict responses.
+
 ## 3.0.0-next.12
 
 ### Minor Changes

diff --git a/cloudpdf/contract/openapi.json b/cloudpdf/contract/openapi.json
@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "CloudPDF Engine API",
-    "version": "3.0.0-next.12",
+    "version": "3.0.0-next.13",
     "description": "The backend-callable surface of the CloudPDF document engine: deployment and tenant administration plus the document operations (reads, annotations, forms, page operations, redaction, download). Interactive viewing goes through the CloudPDF viewer SDKs, whose session protocol is deliberately not part of this API. Generated from the @cloudpdf/contract operation registry — do not edit by hand.",
     "license": {
       "name": "Apache-2.0",

diff --git a/cloudpdf/contract/package.json b/cloudpdf/contract/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudpdf/contract",
-  "version": "3.0.0-next.12",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "The CloudPDF engine contract: operation registry, Zod schemas, and OpenAPI emitter for every backend-callable surface — used by @cloudpdf/server and the generated @cloudpdf/sdk, and the source of the committed openapi.json.",
   "type": "module",

diff --git a/cloudpdf/engine/CHANGELOG.md b/cloudpdf/engine/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @cloudpdf/engine
 
+## 3.0.0-next.13
+
+### Minor Changes
+
+- [#812](https://github.com/embedpdf/embed-pdf-viewer/pull/812) by [@bobsingor](https://github.com/bobsingor) – Add `doc.signatures` for cloud-backed signature inspection, revision analysis, and two-phase signing. Read signed bytes from immutable document versions and refresh the manifest after preparing or completing a signature.
+
+  Support visual appearances on unsigned signature fields and publish their form update events.
+
 ## 3.0.0-next.12
 
 ### Minor Changes

diff --git a/cloudpdf/engine/package.json b/cloudpdf/engine/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudpdf/engine",
-  "version": "3.0.0-next.12",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "CloudPDF engine: the cloud client that speaks the Engine v3 interface over HTTPS to a @cloudpdf/server deployment (or CloudPDF SaaS). Same AbortablePromise-based, EngineError-coded contract as the local engine.",
   "type": "module",

diff --git a/cloudpdf/sdk/.fern/metadata.json b/cloudpdf/sdk/.fern/metadata.json
@@ -25,6 +25,6 @@
     },
     "originGitCommit": null,
     "originGitCommitIsDirty": null,
-    "requestedVersion": "3.0.0-next.12",
-    "sdkVersion": "3.0.0-next.12"
+    "requestedVersion": "3.0.0-next.13",
+    "sdkVersion": "3.0.0-next.13"
 }
diff --git a/cloudpdf/sdk/CHANGELOG.md b/cloudpdf/sdk/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @cloudpdf/sdk
 
+## 3.0.0-next.13
+
+### Minor Changes
+
+- [#817](https://github.com/embedpdf/embed-pdf-viewer/pull/817) by [@bobsingor](https://github.com/bobsingor) – Add generated annotation response types for FreeText rich-text bodies, paragraphs, and styled runs, and allow custom font family names.
+
+  Expose restrictions, current-state findings, and later-revision details in the generated signature and version analysis response types.
+
+- [#812](https://github.com/embedpdf/embed-pdf-viewer/pull/812) by [@bobsingor](https://github.com/bobsingor) – Add generated `doc.signatures` and `doc.versions` clients, request and response types, and package subpath exports. Support preparing, completing, and aborting signatures; reading signature facts and modification analysis; and downloading document versions, signed revisions, signature contents, and digests.
+
 ## 3.0.0-next.12
 
 ### Minor Changes

diff --git a/cloudpdf/sdk/cloudpdf-generation.json b/cloudpdf/sdk/cloudpdf-generation.json
@@ -1,11 +1,11 @@
 {
   "language": "typescript",
-  "canonicalVersion": "3.0.0-next.12",
-  "sdkVersion": "3.0.0-next.12",
+  "canonicalVersion": "3.0.0-next.13",
+  "sdkVersion": "3.0.0-next.13",
   "source": {
     "repository": "embedpdf/embed-pdf-viewer",
     "openapi": "cloudpdf/contract/openapi.json",
-    "openapiSha256": "09a9a8785c092e8868eb7e4f47074cf39cb7a88965623109e49dd3be4d767d5f",
+    "openapiSha256": "a472da9c7aed5db7f2b6b1f67f1b6268a9407afe9e7cf879ac04b878b4fc9dc7",
     "gitCommit": null,
     "gitCommitIsDirty": null
   },

diff --git a/cloudpdf/sdk/package.json b/cloudpdf/sdk/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@cloudpdf/sdk",
-    "version": "3.0.0-next.12",
+    "version": "3.0.0-next.13",
     "private": false,
     "license": "Apache-2.0",
     "type": "commonjs",

diff --git a/cloudpdf/sdk/src/BaseClient.ts b/cloudpdf/sdk/src/BaseClient.ts
@@ -64,8 +64,8 @@ export function normalizeClientOptions<T extends BaseClientOptions = BaseClientO
         {
             "X-Fern-Language": "JavaScript",
             "X-Fern-SDK-Name": "@cloudpdf/sdk",
-            "X-Fern-SDK-Version": "3.0.0-next.12",
-            "User-Agent": "@cloudpdf/sdk/3.0.0-next.12",
+            "X-Fern-SDK-Version": "3.0.0-next.13",
+            "User-Agent": "@cloudpdf/sdk/3.0.0-next.13",
             "X-Fern-Runtime": core.RUNTIME.type,
             "X-Fern-Runtime-Version": core.RUNTIME.version,
         },

diff --git a/cloudpdf/sdk/src/version.ts b/cloudpdf/sdk/src/version.ts
@@ -1 +1 @@
-export const SDK_VERSION = "3.0.0-next.12";
+export const SDK_VERSION = "3.0.0-next.13";
diff --git a/cloudpdf/server/CHANGELOG.md b/cloudpdf/server/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @cloudpdf/server
 
+## 3.0.0-next.13
+
+### Minor Changes
+
+- [#812](https://github.com/embedpdf/embed-pdf-viewer/pull/812) by [@bobsingor](https://github.com/bobsingor) – Add durable two-phase digital signing with prepare, complete, abort, and expiry handling. Persist candidate data so completion can run on another replica, verify the supplied CMS, and reject completion when the document or layer has changed.
+
+  Publish each completed signature as an immutable document version while retaining the document ID and version history. Consume the signing layer's edits into the new base and refresh document state across replicas.
+
+  Add signature inspection and analysis routes, immutable version and revision downloads, and visual signature-field appearances. Use files and streaming storage transfers for signing candidates, with configurable temporary storage and signing expiry.
+
 ## 3.0.0-next.12
 
 ### Minor Changes

diff --git a/cloudpdf/server/package.json b/cloudpdf/server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudpdf/server",
-  "version": "3.0.0-next.12",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "Self-hostable CloudPDF document engine server: Fastify-based HTTP/REST API in front of a Node worker_thread pool running the native EmbedPDF Runtime (PDFium fork) via @embedpdf/engine-runtime. Uses the same engine-services code as the local browser engine.",
   "type": "module",

diff --git a/cloudpdf/viewer/main/CHANGELOG.md b/cloudpdf/viewer/main/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @cloudpdf/viewer
 
+## 3.0.0-next.13
+
 ## 3.0.0-next.12
 
 ### Patch Changes

diff --git a/cloudpdf/viewer/main/package.json b/cloudpdf/viewer/main/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudpdf/viewer",
-  "version": "3.0.0-next.12",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "The full viewer wired to the CloudPDF engine: one CDN artifact (cloudpdf.js) exposing CloudPDF.init(). A thin EE wrapper over the Apache-2.0 @embedpdf/viewer — no wasm, no workers: rendering happens on a @cloudpdf/server deployment (or CloudPDF SaaS) over HTTPS.",
   "type": "module",

diff --git a/cloudpdf/viewer/react/CHANGELOG.md b/cloudpdf/viewer/react/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @cloudpdf/viewer-react
 
+## 3.0.0-next.13
+
 ## 3.0.0-next.12
 
 ## 3.0.0-next.11

diff --git a/cloudpdf/viewer/react/package.json b/cloudpdf/viewer/react/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cloudpdf/viewer-react",
-  "version": "3.0.0-next.12",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "React wrapper for the full viewer wired to CloudPDF: the CloudPDFViewer component. A thin cloud door over @embedpdf/viewer-react/core - no wasm, no workers, rendering happens on a @cloudpdf/server deployment (or CloudPDF SaaS) over HTTPS.",
   "type": "module",

diff --git a/cloudpdf/website/src/generated/sdk-snippets.json b/cloudpdf/website/src/generated/sdk-snippets.json
@@ -1,7 +1,7 @@
 {
   "schemaVersion": 2,
-  "canonicalVersion": "3.0.0-next.12",
-  "openapiSha256": "09a9a8785c092e8868eb7e4f47074cf39cb7a88965623109e49dd3be4d767d5f",
+  "canonicalVersion": "3.0.0-next.13",
+  "openapiSha256": "a472da9c7aed5db7f2b6b1f67f1b6268a9407afe9e7cf879ac04b878b4fc9dc7",
   "languages": {
     "typescript": {
       "label": "TypeScript",

diff --git a/packages/core/acrojs/CHANGELOG.md b/packages/core/acrojs/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @embedpdf/core-acrojs
 
+## 3.0.0-next.13
+
 ## 3.0.0-next.12
 
 ## 3.0.0-next.11

diff --git a/packages/core/acrojs/package.json b/packages/core/acrojs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@embedpdf/core-acrojs",
-  "version": "3.0.0-next.12",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "Pure Acrobat-JavaScript compatibility core: deterministic contracts, security policy, and a self-contained VM prelude.",
   "type": "module",

diff --git a/packages/core/annotation/CHANGELOG.md b/packages/core/annotation/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @embedpdf/core-annotation
 
+## 3.0.0-next.13
+
+### Minor Changes
+
+- [#817](https://github.com/embedpdf/embed-pdf-viewer/pull/817) by [@bobsingor](https://github.com/bobsingor) – Add pure helpers for normalizing rich-text runs, mapping text offsets, and reading or applying styles to a text range. Support rich-text updates and bold, italic, and underline properties in the annotation model while keeping plain contents synchronized.
+
+  Align FreeText and callout text insets, borders, and backgrounds with their PDF appearances.
+
 ## 3.0.0-next.12
 
 ## 3.0.0-next.11

diff --git a/packages/core/annotation/package.json b/packages/core/annotation/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@embedpdf/core-annotation",
-  "version": "3.0.0-next.12",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "The pure annotation brain: model · update(msg)→[model,effects] · view. Content-space geometry per family, hit-testing, and tools. No DOM, engine, or framework dependencies.",
   "type": "module",

diff --git a/packages/core/geometry/CHANGELOG.md b/packages/core/geometry/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @embedpdf/core-geometry
 
+## 3.0.0-next.13
+
 ## 3.0.0-next.12
 
 ## 3.0.0-next.11

diff --git a/packages/core/geometry/package.json b/packages/core/geometry/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@embedpdf/core-geometry",
-  "version": "3.0.0-next.12",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "The viewer's pure 2D coordinate primitives: Point/Size, page rotation, and the rotation/scale transforms shared by stage-core, the stage plugin, and every framework adapter. Zero dependencies, DOM-free, serializable — the bottom of the pyramid.",
   "type": "module",

diff --git a/packages/core/js-sandbox/CHANGELOG.md b/packages/core/js-sandbox/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @embedpdf/core-js-sandbox
 
+## 3.0.0-next.13
+
 ## 3.0.0-next.12
 
 ## 3.0.0-next.11

diff --git a/packages/core/js-sandbox/package.json b/packages/core/js-sandbox/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@embedpdf/core-js-sandbox",
-  "version": "3.0.0-next.12",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "QuickJS-backed, resource-bounded execution adapter for deterministic Acrobat JavaScript.",
   "type": "module",

diff --git a/packages/core/main/CHANGELOG.md b/packages/core/main/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @embedpdf/core
 
+## 3.0.0-next.13
+
 ## 3.0.0-next.12
 
 ### Minor Changes

diff --git a/packages/core/main/package.json b/packages/core/main/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@embedpdf/core",
-  "version": "3.0.0-next.12",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "Pure, framework-free runtime for the EmbedPDF v3 viewer: store, typed capabilities, and plugin lifecycle. DOM-free and serializable.",
   "type": "module",

diff --git a/packages/core/signature/CHANGELOG.md b/packages/core/signature/CHANGELOG.md
@@ -0,0 +1,9 @@
+# @embedpdf/core-signature
+
+## 3.0.0-next.13
+
+### Minor Changes
+
+- [#812](https://github.com/embedpdf/embed-pdf-viewer/pull/812) by [@bobsingor](https://github.com/bobsingor) – Introduce cryptographic signing and validation helpers for PDF digital signatures. Build, parse, and verify detached CMS signatures, validate certificate chains against application-provided trust anchors, and check a signer's response before completing a signature.
+
+  Provide WebCrypto and remote signer adapters, persistent personal signing identities, and signature verdicts that distinguish byte integrity, cryptographic validity, trust, and later document changes.
diff --git a/packages/core/signature/package.json b/packages/core/signature/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@embedpdf/core-signature",
-  "version": "3.0.0-next.0",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "Digital signatures, the cryptographic half: parse and verify detached CMS (PKCS#7 / CAdES-B) signatures, build one from a raw signer, gate a signing before it completes, validate trust chains, and the sign()/validateSignatures() helpers over an engine document handle. Pure: no PDFium, no DOM.",
   "type": "module",

diff --git a/packages/core/stage/CHANGELOG.md b/packages/core/stage/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @embedpdf/core-stage
 
+## 3.0.0-next.13
+
 ## 3.0.0-next.12
 
 ## 3.0.0-next.11

diff --git a/packages/core/stage/package.json b/packages/core/stage/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@embedpdf/core-stage",
-  "version": "3.0.0-next.12",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "Pure spatial model for the EmbedPDF viewer: Scene (layout strategies), Camera, Anchor, and framing. DOM-free, framework-free, and serializable.",
   "type": "module",

diff --git a/packages/core/ui/CHANGELOG.md b/packages/core/ui/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @embedpdf/core-ui
 
+## 3.0.0-next.13
+
 ## 3.0.0-next.12
 
 ## 3.0.0-next.11

diff --git a/packages/core/ui/package.json b/packages/core/ui/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@embedpdf/core-ui",
-  "version": "3.0.0-next.12",
+  "version": "3.0.0-next.13",
   "private": false,
   "description": "Pure chrome core: the structure-only schema vocabulary, the toolbar fit solver (measure → solve → overflow), the overflow-to-menu projection, and the shortcut parser/matcher. DOM-free, kernel-free, framework-free.",
   "type": "module",
Original file line number	Diff line number	Diff line change
		@@ -1 +1 @@
		export const SDK_VERSION = "3.0.0-next.12";
		export const SDK_VERSION = "3.0.0-next.13";