Part of #491 : pen taps click where they tap; Linux note for tablet pens on Wayland

Pens on KDE Plasma 6.3+ under Wayland don't reach the app: winit 0.30 binds no Wayland tablet protocol (zwp_tablet_v2), and since Plasma 6.3 KWin no longer emulates pointer input for such clients (kwin!6336), so the pen moves KWin's own cursor while the window gets no motion or presses. The fix is upstream (winit 0.31's tablet input, winit#4318, once eframe moves to it). docs/development.md and the README give the workarounds: run under XWayland (WAYLAND_DISPLAY=), or set KWIN_WAYLAND_EMULATE_TABLET=1 for the session. On our side, a pen or finger (winit Touch, emulated as a mouse by egui-winit) lifts with an egui PointerGone in the same frame. A tap whose press and lift arrived in one frame had no hover position, so the canvas ignored it, and a drag ending without a pointer position ended at the canvas's centre. The press and double-tap now fall back to the interact position, and the release to the last position seen during the drag. Headless frame tests replay the events a pen produces: a stroke with pressure reaching Use Pressure Pen, and a one-frame tap that selects without moving (fails without the fix). ROADMAP: Last updated, the Platforms row, the hardening gap and the graphics processor/input bullet (pen pressure reaches the tools on Windows only). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Bump version to 0.5.0 (from 0.4.0) for release
2026-10-08 20:14:18 +07:00 · 2026-10-08 08:13:01 -04:00 · 2026-10-08 19:10:19 +07:00 · 2026-10-08 19:08:05 +07:00 · 2026-10-08 19:07:03 +07:00 · 2026-10-08 19:00:03 +07:00
53 changed files with 3501 additions and 340 deletions
@@ -4297,7 +4297,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "arboard",
 "block2 0.6.2",
@@ -4321,7 +4321,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-brush"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "kurbo 0.13.1",
 "serde",
@@ -4333,7 +4333,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-cad"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "image",
 "kurbo 0.13.1",
@@ -4349,7 +4349,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-cli"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "serde_json",
 "vectorcraft-color",
@@ -4365,7 +4365,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-color"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "kurbo 0.13.1",
 "moxcms",
@@ -4377,7 +4377,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-doc"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "image",
 "jpeg-encoder",
@@ -4394,7 +4394,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-effects"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "kurbo 0.13.1",
 "serde_json",
@@ -4408,7 +4408,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-engine"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "flate2",
 "image",
@@ -4440,7 +4440,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-eps"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "flate2",
 "image",
@@ -4450,6 +4450,7 @@ dependencies = [
 "vectorcraft-doc",
 "vectorcraft-effects",
 "vectorcraft-geom",
+ "vectorcraft-metafile",
 "vectorcraft-render",
 "vectorcraft-testkit",
 "vectorcraft-text",
@@ -4457,7 +4458,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-format"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "flate2",
 "proptest",
@@ -4471,7 +4472,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-geom"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "kurbo 0.13.1",
 "proptest",
@@ -4483,7 +4484,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-mcp"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "image",
 "log",
@@ -4502,7 +4503,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-metafile"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "image",
 "kurbo 0.13.1",
@@ -4516,7 +4517,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-pathops"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "kurbo 0.13.1",
 "linesweeper",
@@ -4528,7 +4529,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-pdf"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "aes",
 "flate2",
@@ -4557,7 +4558,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-plugins"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "serde",
 "serde_json",
@@ -4571,7 +4572,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-render"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "flate2",
 "gif",
@@ -4596,7 +4597,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-svg"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "flate2",
 "image",
@@ -4620,7 +4621,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-testkit"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "image",
 "kurbo 0.13.1",
@@ -4637,7 +4638,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-text"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "harfrust 0.13.3",
 "kurbo 0.13.1",
@@ -4655,7 +4656,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-tools"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "image",
 "kurbo 0.13.1",
@@ -4670,7 +4671,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-trace"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "image",
 "kurbo 0.13.1",
@@ -4683,7 +4684,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-ui-egui"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "egui",
 "egui_extras",
@@ -4712,7 +4713,7 @@ dependencies = [

 [[package]]
 name = "vectorcraft-web"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "eframe",
 "egui",
@@ -5815,7 +5816,7 @@ checksum = "9440ea3e5aeabb0ac63af70daf835274065238cdd0cec83418f417eae38bacee"

 [[package]]
 name = "xtask"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
 "serde_json",
 ]
@@ -4,7 +4,7 @@ members = ["crates/*", "apps/*", "xtask"]
 default-members = ["crates/*", "apps/vectorcraft", "apps/vectorcraft-cli", "xtask"]

 [workspace.package]
-version = "0.4.0"
+version = "0.5.0"
 edition = "2024"
 license = "MIT OR Apache-2.0"
 rust-version = "1.95"
@@ -166,6 +166,10 @@ On laptops with two graphics processors, VectorCraft uses the power-saving (inte
 To use the discrete one, choose **Preferences › Performance › Graphics Processor › High Performance**
 and restart, or start the app with `WGPU_POWER_PREF=high` (see [`docs/development.md`](docs/development.md#desktop-graphics-processor)).

+On Linux under KDE Plasma 6.3 or later with Wayland, a drawing tablet's pen moves the cursor but VectorCraft doesn't
+respond to it yet (#491). Start the app under XWayland instead: `WAYLAND_DISPLAY= vectorcraft` (see
+[`docs/development.md`](docs/development.md#linux-wayland-and-x11)).
+
 ### Use it from Claude Code and other agents

 Register the MCP server with Claude Code:
@@ -4,7 +4,7 @@ VectorCraft is a clean-room, open-source, pure-Rust reimplementation of the Adob

 This file tracks **how far we are and what's left**. Time estimates are wall-clock hours of continuous Claude Opus 5.5 agent work (including builds and the CI gate), given both for **one agent** and for **4–6 parallel agents** on disjoint crates. They are counted from the remaining work (see [Parity estimate](#parity-estimate)), calibrated against measured throughput, and updated as work lands.

-_Last updated: 2026-10-08 (after M4.14–M4.98, M8.1–M8.20, M14.4–M14.7, the MCP prompts, resource templates, completions and logging, the 2026-10-07 issue fixes, the Layers panel rework and the 2026-10-08 community contributions: Pen and shape-tool modifiers, path editing, Layers, Artboards, Swatches/Brushes and dialogs, Japanese composition and PDF text, Hebrew/Arabic type, interface languages (Spanish among them), the font menu, saved selections, MCP and EPS, the missing-font export warning (#319), open paths in the Shape Builder (#374), PDF/`.ai` import keeping strokes live and hidden and nested layers (#372), per-corner Live Corners (#381), SVG type opening at the size it draws at (#396), the Wayland clipboard with copied-file paste (#398), ruler guides that can be selected, moved and deleted (#414), two batches of Preferences options that were stored but unused (#394), skeleton reads with `document.find` for large documents over MCP (#416) and anchors dragged with Direct Selection snapping to points, segments and smart guides, clipped SVG layers opening as clipping layers (#420), PDF/`.ai` layers read on pages of tens of millions of operators (#419), Document Color Mode putting RGB greys on the black plate on request and converting pattern tiles (#421) and movable dialogs with Offset Path's Joins dropdown (#423) and numeric fields scrubbed by dragging their label (#400), stroke weight presets in the stroke unit (#426), the Appearance panel's Opacity popup (#430), type on a path brackets, flip and Type on a Path Options that keep the type in place (#429), Layers rows dragged with a ghost and dropped on the trash or New Layer (#435), tool flyouts opening on a right or corner press (#436), tool flyouts torn off into floating toolbars (#437), the Shape Builder's erase mode deleting edges too (#439), installed fonts registered outside the font folders and fonts installed while the app runs listed in the font menus (#443), alike circular corners on rectangles that aren't square (#442), tool cursors as OS cursors so the pointer no longer trails over the canvas (#444), artboards copied and pasted with their art (#446), guides dragged out of the rulers snapping to the art's side midpoints and the artboards, artboard guides (#451), the toolbar's double arrow and Window › Toolbars › Double Column switching between one and two columns in any window height (#455), the Smart Guides display options and Snapping Tolerance (#394), Font Size and Leading combo boxes with preset lists in the Character and Properties panels and the Control bar (#458), screenshots pasted from the clipboard on macOS, Windows and the web (#457), the Properties panel's Fill and Stroke matching the Control bar's, Illustrator's Window menu panel keys (Shift+F7 for Align…) and Alt-wheel zoom whatever the wheel preference (Discord feedback), the point/area type widget (Discord feedback), groups in legacy Illustrator .ai files (Discord feedback), a rotating desktop log file (#465), image controls in the Control bar and Properties panel: Image Trace with its presets, Mask, Crop Image, Embed/Unembed, and an Image Trace object's preset, Expand and Release (Discord feedback), the Pen working as the Anchor Point tool with Alt held over a selected path's handles and anchors, and anchor buttons that convert, connect and cut paths at the selected anchors (Discord feedback), Japanese hanging punctuation (burasagari, #463), Escape leaving Presentation Mode with no screen mode saved across restarts, documents dropped on the desktop app opening as tabs of their own and a note that an `.ai` file's art off its artboards isn't in the part read (#472), Add/Delete Anchor Point tool icons drawn from the Pen tool's (#479); see [Honest assessment](#honest-assessment-2026-10-05))._
+_Last updated: 2026-10-08 (after M4.14–M4.98, M8.1–M8.20, M14.4–M14.7, the MCP prompts, resource templates, completions and logging, the 2026-10-07 issue fixes, the Layers panel rework and the 2026-10-08 community contributions: Pen and shape-tool modifiers, path editing, Layers, Artboards, Swatches/Brushes and dialogs, Japanese composition and PDF text, Hebrew/Arabic type, interface languages (Spanish among them), the font menu, saved selections, MCP and EPS, the missing-font export warning (#319), open paths in the Shape Builder (#374), PDF/`.ai` import keeping strokes live and hidden and nested layers (#372), per-corner Live Corners (#381), SVG type opening at the size it draws at (#396), the Wayland clipboard with copied-file paste (#398), ruler guides that can be selected, moved and deleted (#414), two batches of Preferences options that were stored but unused (#394), skeleton reads with `document.find` for large documents over MCP (#416) and anchors dragged with Direct Selection snapping to points, segments and smart guides, clipped SVG layers opening as clipping layers (#420), PDF/`.ai` layers read on pages of tens of millions of operators (#419), Document Color Mode putting RGB greys on the black plate on request and converting pattern tiles (#421) and movable dialogs with Offset Path's Joins dropdown (#423) and numeric fields scrubbed by dragging their label (#400), stroke weight presets in the stroke unit (#426), the Appearance panel's Opacity popup (#430), type on a path brackets, flip and Type on a Path Options that keep the type in place (#429), Layers rows dragged with a ghost and dropped on the trash or New Layer (#435), tool flyouts opening on a right or corner press (#436), tool flyouts torn off into floating toolbars (#437), the Shape Builder's erase mode deleting edges too (#439), installed fonts registered outside the font folders and fonts installed while the app runs listed in the font menus (#443), alike circular corners on rectangles that aren't square (#442), tool cursors as OS cursors so the pointer no longer trails over the canvas (#444), artboards copied and pasted with their art (#446), guides dragged out of the rulers snapping to the art's side midpoints and the artboards, artboard guides (#451), the toolbar's double arrow and Window › Toolbars › Double Column switching between one and two columns in any window height (#455), the Smart Guides display options and Snapping Tolerance (#394), Font Size and Leading combo boxes with preset lists in the Character and Properties panels and the Control bar (#458), screenshots pasted from the clipboard on macOS, Windows and the web (#457), the Properties panel's Fill and Stroke matching the Control bar's, Illustrator's Window menu panel keys (Shift+F7 for Align…) and Alt-wheel zoom whatever the wheel preference (Discord feedback), the point/area type widget (Discord feedback), groups in legacy Illustrator .ai files (Discord feedback), a rotating desktop log file (#465), image controls in the Control bar and Properties panel: Image Trace with its presets, Mask, Crop Image, Embed/Unembed, and an Image Trace object's preset, Expand and Release (Discord feedback), the Pen working as the Anchor Point tool with Alt held over a selected path's handles and anchors, and anchor buttons that convert, connect and cut paths at the selected anchors (Discord feedback), Japanese hanging punctuation (burasagari, #463), Escape leaving Presentation Mode with no screen mode saved across restarts, documents dropped on the desktop app opening as tabs of their own and a note that an `.ai` file's art off its artboards isn't in the part read (#472), Add/Delete Anchor Point tool icons drawn from the Pen tool's (#479), EPS files from Illustrator 2026, Inkscape/cairo, matplotlib, CorelDRAW, Affinity, LibreOffice and Ghostscript opening as vectors, and a preview that stands in saying why (Discord feedback, #466, #469, #474), chords with modifiers recorded in Edit › Keyboard Shortcuts (#487), Type Object Selection by Path Only (#394), Anti-aliased Artwork (#394), Show Pixel Grid (#394), pen and touch taps pressed and lifted within one frame clicking where they tapped and the Linux/Wayland pen-tablet workaround (#491); see [Honest assessment](#honest-assessment-2026-10-05))._

 ## Where we are

@@ -42,7 +42,7 @@ since 2026-10-01.
 | **Bundled content:** brush, symbol, style and swatch libraries | ~30% | Ours are original and generated in code, and far fewer than Illustrator ships; brush and symbol libraries are still missing |
 | **Performance** | unverified | Multithreaded, off-thread rendering and caches are in place. The last budget run (2026-10-01, loaded machine) measured 290 ms for a 50k-path fit against a 16 ms budget. Re-run `vectorcraft-cli perf` on an idle machine |
 | **Robustness** | good, new | ~2,840 tests, property tests, no panics in shipped code (lints, the `guard` safety net, import fuzzing), Data Recovery. Missing: a corpus of real-world files, Windows/Linux/browser QA |
-| **Platforms and 1.0 polish** | ~60% | The macOS app and the web build work, and Finder opens every readable format with the macOS app (#295, #354); hybrid-graphics laptops render on the power-saving GPU by default (#306); web drops land in the document they were dropped on (#359); desktop drops carry no pointer position (winit 0.30), so a dropped document opens as a tab of its own and a picture or text is placed in the middle of the view, while the web places anything dropped on the canvas and opens what is dropped off it, as Illustrator does (#472); a web page that loses its WebGPU device or WebGL context restarts its graphics with the same documents (#369); on Linux/Wayland the clipboard reads the compositor's own (data-control) and copied image files paste, but files can't be dropped on the window under Wayland until eframe moves to winit 0.31 (#398; the Wayland side is verified by compilation only); Windows/Linux packaging and accessibility are pending; an experimental, unsupported Windows 7 x64 OpenGL build exists (community-contributed, not verified by maintainers) |
+| **Platforms and 1.0 polish** | ~60% | The macOS app and the web build work, and Finder opens every readable format with the macOS app (#295, #354); hybrid-graphics laptops render on the power-saving GPU by default (#306); web drops land in the document they were dropped on (#359); desktop drops carry no pointer position (winit 0.30), so a dropped document opens as a tab of its own and a picture or text is placed in the middle of the view, while the web places anything dropped on the canvas and opens what is dropped off it, as Illustrator does (#472); a web page that loses its WebGPU device or WebGL context restarts its graphics with the same documents (#369); on Linux/Wayland the clipboard reads the compositor's own (data-control) and copied image files paste, but files can't be dropped on the window under Wayland until eframe moves to winit 0.31 (#398; the Wayland side is verified by compilation only); on KDE Plasma 6.3+ under Wayland, pens and pen displays reach the app only under XWayland (`WAYLAND_DISPLAY=`) or with KWin's `KWIN_WAYLAND_EMULATE_TABLET=1`, since winit 0.30 has no Wayland tablet input (#491, not verified on hardware); Windows/Linux packaging and accessibility are pending; an experimental, unsupported Windows 7 x64 OpenGL build exists (community-contributed, not verified by maintainers) |
 | **Agent automation** | beyond Illustrator | Every command, gesture and dialog is drivable over MCP, the CLI and the control channel |
 | **Scrubby numeric fields** | beyond Illustrator | As in Photoshop, dragging a numeric field's label (`W:`, `Opacity:`, the Character panel's icons) left or right steps its value live; one undo step per drag, Escape cancels (#400) |

@@ -70,7 +70,7 @@ Ordered by how much each gap blocks someone from switching. Sizes are one-agent
 7. **Views and windows:** multiple windows and arrange, Consolidate All Windows, video
   rulers. 15–25 h.
 8. **Hardening at scale:** a corpus of real-world SVG/PDF/EPS files, idle-machine perf budgets, Windows, Linux and
-   browser QA, accessibility, packaging. 50–80 h.
+   browser QA, pen tablets on Wayland and pen pressure beyond Windows (winit 0.31's tablet input, #491), accessibility, packaging. 50–80 h.

 ### Where we're going

@@ -105,7 +105,7 @@ grade by behaviour against `plan/illustrator/`, not by whether a menu item exist
  - A canvas context menu: right-click selects the object under the pointer and lists what applies to the selection (Undo/Redo, clipboard, group, isolation, join, Remove Anchor Points when anchors are selected, masks, compound paths, guides, Transform, Arrange, Select, Export Selection), or the view commands on empty canvas.
  - Save / Don't Save / Cancel before closing or quitting with unsaved documents (tabs, Close, Close All, Quit, window close).
  - Four brightness themes, persistent preferences.
-  - Preferences that act (#394, in part): Show Tool Tips, Double Click To Isolate, Zoom with Mouse Wheel (the wheel zooms about the pointer, Shift-wheel scrolls up and down, Cmd/Ctrl-wheel sideways; Alt/Option-wheel and a trackpad pinch zoom about the pointer either way), Use Precise Cursors; Selection & Anchor Display › Tolerance (objects, anchors and handles), Object Selection by Path Only, Command Click to Select Objects Behind (cycling down the stack), Zoom to Selection, anchor Size, Highlight anchors on mouse over; Type › Number of Recent Fonts (up to 15); Guides & Grid › guide and grid Color and Style (lines or dots) and Grids In Back. Then Snap to Point (its distance, for moves, drawn points and reference points), Move Locked and Hidden Artwork with Artboard, Enable Rubber Band for the Pen and Curvature tools, Handles style, Show handles when multiple anchors are selected, Hide Corner Widget for angles greater than; General › Transform Pattern Tiles (the transforms' and dialogs' Transform Patterns) and Select Same Tint %; Type › Size/Leading, Tracking and Baseline Shift increments (`type.step`, Cmd+Shift+. and Cmd+Shift+, for the size, the Type tool's Alt+arrows), Enable Missing Glyph Protection and Fill New Type Objects With Placeholder Text. Then Smart Guides › Color, Alignment Guides, Anchor/Path Labels, Measurement Labels, Transform Tools, Object Highlighting (with Smart Guides on) and Snapping Tolerance (4 px by default, for every smart guide snap). They reach agents too (`prefs.set`, then `pointer_gesture` or `press_key`; `ui.wheel` on the control channel). About 38 stored options still do nothing yet (the rest of #394: Auto Size New Area Type, Show Font Names in English, Highlight Alternate Glyphs, Construction and Spacing Guides, performance, devices…).
+  - Preferences that act (#394, in part): Show Tool Tips, Double Click To Isolate, Zoom with Mouse Wheel (the wheel zooms about the pointer, Shift-wheel scrolls up and down, Cmd/Ctrl-wheel sideways; Alt/Option-wheel and a trackpad pinch zoom about the pointer either way), Use Precise Cursors; Selection & Anchor Display › Tolerance (objects, anchors and handles), Object Selection by Path Only, Command Click to Select Objects Behind (cycling down the stack), Zoom to Selection, anchor Size, Highlight anchors on mouse over; Type › Number of Recent Fonts (up to 15); Guides & Grid › guide and grid Color and Style (lines or dots) and Grids In Back. Then Snap to Point (its distance, for moves, drawn points and reference points), Move Locked and Hidden Artwork with Artboard, Enable Rubber Band for the Pen and Curvature tools, Handles style, Show handles when multiple anchors are selected, Hide Corner Widget for angles greater than; General › Transform Pattern Tiles (the transforms' and dialogs' Transform Patterns) and Select Same Tint %; Type › Size/Leading, Tracking and Baseline Shift increments (`type.step`, Cmd+Shift+. and Cmd+Shift+, for the size, the Type tool's Alt+arrows), Enable Missing Glyph Protection and Fill New Type Objects With Placeholder Text. Then Smart Guides › Color, Alignment Guides, Anchor/Path Labels, Measurement Labels, Transform Tools, Object Highlighting (with Smart Guides on) and Snapping Tolerance (4 px by default, for every smart guide snap). Then Type › Type Object Selection by Path Only (type is picked on the baseline of any of its lines, area type's frame or the path of type on a path, no longer anywhere in its bounds; the Type tools and the Eyedropper still take a click among the characters). Then General › Anti-aliased Artwork (off, the canvas draws the art with hard edges). Then Guides & Grid › Show Pixel Grid (Above 600% Zoom), a line at every document pixel over the art in Pixel Preview, turning with a rotated view as the document grid now does too. They reach agents too (`prefs.set`, then `pointer_gesture` or `press_key`; `ui.wheel` on the control channel). About 35 stored options still do nothing yet (the rest of #394: Auto Size New Area Type, Show Font Names in English, Highlight Alternate Glyphs, Construction and Spacing Guides, performance, devices…).
  - Dialogs move by dragging their heading (the band down from the top edge, as a title bar), stay on screen and keep where they were moved for the session; the form dialogs' choices are dropdowns (Offset Path's Joins, Average's and Shear's and Reflect's axis), and Offset Path lists Offset, Joins, Miter Limit and previews (#423).
  - Dialogs open with their first field focused and its value selected: type a value and press Enter (Move, Rotate, Scale…). Number fields in panels and dialogs step with Up/Down (Shift: ten, Ctrl/Cmd: a tenth of their unit), applied at once.
  - Scrubby labels (#400, beyond Illustrator, as in Photoshop): dragging a numeric field's label left or right (the ↔ cursor shows over it) steps the value one unit every 2 points (Shift: ten, Ctrl/Cmd: a tenth; counts stay whole), in the field's unit and within its limits, applied live as the art follows; the whole drag is one undo step and Escape puts the value back. A click on the label focuses the field; the text box itself never scrubs, and a field with no label doesn't. Text labels before a field (Transform, Properties, Control bar, Stroke, Transparency, form rows in dialogs) and the Character and Paragraph panels' icons act as labels. Preferences › General › Scrub Numeric Fields by Dragging (on by default) turns it off.
@@ -152,10 +152,10 @@ grade by behaviour against `plan/illustrator/`, not by whether a menu item exist
 - **Files (M4):**
  - `.vectorcraft` (lossless JSON, compressed, atomic saves, save down to v1), Save As with a format chooser, Save a Copy, Revert, templates, Data Recovery after a crash (browser tabs hold their copies with Web Locks too, so a background tab's copies are never taken for a crash's, and a tab repairs copies another removed when it resumes: #367), background save and export. The desktop app writes its warnings and errors (graphics adapter, a lost graphics device, panics the guard recovered from) to standard error and to `logs/vectorcraft.log` next to the preferences, the two previous runs kept and each file capped at 16 MiB, so a launch without a terminal still leaves something to attach to a bug report (#465).
  - SVG/SVGZ in and out with SVG Options, Preserve Editing, symbols, filters, rich text and physical units (SVG type under a transform or `viewBox` scale opens at the size it draws at, the scale moved into its size, leading, baseline shift and strokes, a stretch, skew or rotation kept as its transform: #396; a top-level group with a clip path, such as a clipped Inkscape layer, opens as a layer with a clipping mask, its name kept: #420); PDF and PDF-compatible `.ai` in and out (layers, with hidden ones kept hidden with their art and nested ones as sublayers, on pages of up to 64 million operators, art whose layer can't be told going to a hidden, non-printing layer rather than showing or printing: #419; strokes kept live, a fill and a stroke of one outline as one object; masks, editable text with type set along a curve coming back as type on a path, each artboard's art on its own page only, an `.ai`'s white page under its layers left out rather than coming in as art, spot colours, presets, security, marks and bleed, ICC output intents, raster effects, subset fonts, PDF/X, PDF layers, overprint, page thumbnails, fast web view, PDF 1.3). CMYK images keep their ink amounts from PDF import (and from placed CMYK TIFFs) to PDF export: a CMYK JPEG passes through unchanged, others stay CMYK (DeviceCMYK, or ICC-based CMYK in PDF/X-3/X-4) unless the Output settings convert them; the canvas shows them through the working CMYK profile (#320).
-  - EPS and DXF in and out, EMF/WMF in and out; PNG (with PNG-8), JPEG, WebP, GIF, TIFF, BMP, Targa and layered PSD export. EPS import runs Illustrator's AGM/CoolType prologs (resource categories, `resourceforall`, `clipsave`/`cliprestore`, subarrays and substrings that share storage, the standard dictionaries in `systemdict`, `dictstack`, `internaldict`, executable filters, `cshow`, metadata skipped with `flushfile`), so Illustrator 30 EPS files open as vectors, and falls back to its palette TIFF preview. Legacy PostScript `.ai` files (Illustrator 3–8, written with the prolog that defines their operators) keep their groups and nested groups (`u` … `U`), between and inside clipping groups; EPS and EMF/WMF import nest clips (and groups) at most 128 deep, so a hostile file can't exhaust the stack. DXF TEXT justified Fit or Aligned spans its two points (stretched, or scaled as a whole).
+  - EPS and DXF in and out, EMF/WMF in and out; PNG (with PNG-8), JPEG, WebP, GIF, TIFF, BMP, Targa and layered PSD export. EPS import runs Illustrator's AGM/CoolType prologs (resource categories, `resourceforall`, `clipsave`/`cliprestore`, subarrays and substrings that share storage, the standard dictionaries in `systemdict`, `dictstack`, `internaldict`, executable filters, `cshow`, metadata skipped with `flushfile`), so Illustrator 30 EPS files open as vectors. It also runs what other generators write (Discord feedback, #466, #469): Illustrator 2026's procsets (`gcheck`, `rootfont`, `currentcolorrendering`: every Illustrator 2026 EPS fell back to its preview before), cairo/Inkscape (`status`/`flushfile`, images with a mask, `ImageType 3`, reusable streams), matplotlib's Type 3 fonts, Illustrator 8 EPS (stock art's usual format: executable strings such as its gradients' `ed`, `load` by integer keys, #474), Ghostscript's `//name` immediate names, `pdfmark`, `token`, `execform` and user paths. Tiling patterns come in as pattern swatches, uncoloured ones too; Type 3 fonts' glyphs as their outlines, spaced by `ashow`/`widthshow`/`xshow`/`kshow`; mesh and function-based shadings (types 1, 4–7) as gradient meshes; sampled functions (type 0) and Flate/LZW predictors are read. When a file's PostScript still can't be read, it opens as its TIFF preview, its Windows metafile preview (as vectors) or its EPSI preview, and the warning (in the status bar, `document.open`/`app.open`/MCP `open_file` replies and `vectorcraft-cli info`) names the error, the operator that raised it and the procedures it ran in. Legacy PostScript `.ai` files (Illustrator 3–8, written with the prolog that defines their operators) keep their groups and nested groups (`u` … `U`), between and inside clipping groups; EPS and EMF/WMF import nest clips (and groups) at most 128 deep, so a hostile file can't exhaust the stack. DXF TEXT justified Fit or Aligned spans its two points (stretched, or scaled as a whole).
  - Place and the Links panel, Package, File Info, Print with print presets, PostScript output and print tiling, slices and Save for Web, Export for Screens and Asset Export, CSS Properties, PNG/PDF/SVG/text clipboard flavours; files copied in a file manager paste as art (SVG, PDF, EMF/WMF, bitmaps) on every desktop platform, and Linux/Wayland reads the compositor's clipboard (#398); screenshots and other copied pictures paste as embedded images at the view centre everywhere, the web included (#457).
 - **Performance:** 20k shapes + 1k texts render in 27 ms per full-retina frame (7.8 ms zoomed), 7× faster than the first version. The UI thread never blocks. The web build is 7.1 MB gzipped.
- **Graphics processor:** the canvas is rasterized on the CPU and the GPU only composites it, so the desktop app asks for the power-saving GPU by default (the integrated one on hybrid-graphics laptops, where presenting from the discrete GPU made the window flicker, #306). Preferences › Performance › Graphics Processor (`gpuPreference`) or `WGPU_POWER_PREF` picks the discrete one; Help › About and `ui.inspect` name the adapter in use. When the browser drops the page's WebGPU device or WebGL context, the web build writes recovery copies, starts again on new graphics with the same app and uploads its textures again; if it can't, it removes the stale canvas and says to reload, which offers the copies back. The desktop app writes the copies and says to restart (#369). On Windows and Linux the tools' cursors are OS cursors (bitmaps rasterized once per display scale), which the system moves itself: painted into the window, they trailed the pointer by the frames waiting to be shown, and the window now queues one frame instead of two (#444). macOS and the web still paint them (macOS sizes cursor bitmaps in points, eframe has no bitmap cursors on the web).
+- **Graphics processor:** the canvas is rasterized on the CPU and the GPU only composites it, so the desktop app asks for the power-saving GPU by default (the integrated one on hybrid-graphics laptops, where presenting from the discrete GPU made the window flicker, #306). Preferences › Performance › Graphics Processor (`gpuPreference`) or `WGPU_POWER_PREF` picks the discrete one; Help › About and `ui.inspect` name the adapter in use. When the browser drops the page's WebGPU device or WebGL context, the web build writes recovery copies, starts again on new graphics with the same app and uploads its textures again; if it can't, it removes the stale canvas and says to reload, which offers the copies back. The desktop app writes the copies and says to restart (#369). On Windows and Linux the tools' cursors are OS cursors (bitmaps rasterized once per display scale), which the system moves itself: painted into the window, they trailed the pointer by the frames waiting to be shown, and the window now queues one frame instead of two (#444). macOS and the web still paint them (macOS sizes cursor bitmaps in points, eframe has no bitmap cursors on the web). Pens and touch drive the tools as the mouse does, and a tap pressed and lifted within one frame clicks where it tapped (#491); pen pressure reaches the Liquify tools' Use Pressure Pen on Windows, while winit 0.30 reports none on macOS or Linux and egui none on the web. On Linux, see `docs/development.md` for pens under Wayland.
 - **Tests and robustness:** ~2,840 automated tests: model-based property tests, a junk-parameter sweep over every command, import fuzzing (SVG, PDF, libraries), golden renders, and MCP end-to-end tests over stdio. Shipped code never panics (workspace lints and a rollback safety net; see `docs/development.md`).

 ## Milestones and estimates
@@ -211,11 +211,11 @@ about 1–1.5 agent-hours each, so the other rows (estimated on the older scale)
 | Layers, artboards, document setup | 5 | 82% | Layers panel: a confirmation before deleting layers that hold art, Collect for Export, row context menus, the Layer Options dialog for several rows with mixed values, Paste Remembers Layers for sublayers, drag-scrolling a long panel while dragging rows; artboard presets/rearrange polish (Document Setup, New Document and the rest of the Layers panel are done) | 4–7 |
 | View & navigation | 3 | 70% | New View/Edit Views, multiple windows/arrange, Snap to Pixel/Glyph (print tiling is done) | 9–14 |
 | Guides, grids, smart guides, snapping, rulers | 3 | 82% | global/video rulers, smart-guide preference depth, Alt swapping a ruler guide's orientation, ruler guides selected together with art (marquee, Shift-click), ruler guides as Layers rows with their own lock and hide (#451: Lock Guides locks them all; Make Guides paths are Layers rows already) (dragging existing guides is done, #414; new guides snapping to side midpoints and artboards, and artboard guides, #451) | 3–5 |
-| File formats | 6 | 85% | DWG (no open spec: DXF instead), PSD placement as layers, Illustrator EPS checked against more real files (two Illustrator 30 files open as vectors so far), legacy `.ai` files saved without the prolog that defines their operators (their own operator set isn't read yet), the remaining fidelity polish; EPS, DXF, EMF/WMF, TIFF, BMP, Targa, PSD export, SVGZ, PDF security, PDF/X, PDF layers and presets are done | 6–10 |
+| File formats | 6 | 85% | DWG (no open spec: DXF instead), PSD placement as layers, EPS checked against more real files (Illustrator 2026 and Inkscape files open as vectors; CorelDRAW, Affinity, LibreOffice, matplotlib and Ghostscript output checked with synthetic programs only; CID-keyed CJK type and `CCITTFaxDecode` images not read), legacy `.ai` files saved without the prolog that defines their operators (their own operator set isn't read yet), the remaining fidelity polish; EPS, DXF, EMF/WMF, TIFF, BMP, Targa, PSD export, SVGZ, PDF security, PDF/X, PDF layers and presets are done | 6–10 |
 | Export for Screens, Asset Export, slices, Save for Web | 3 | 85% | polish only (all four are done) | 2–4 |
 | Print, colour management, separations, flattener | 3 | 80% | print preview fidelity (flattener presets in PDF and print, overprint in PDF and composite print, Print dialog, presets, PostScript, marks, separations, Print Tiling, print overprint/flattener/bitmap options and printer profile are done) | 1–2 |
 | Automation | 3 | 60% | Variables (data merge), scripting surface, batch | 8–12 |
-| UI chrome (panels, contextual Properties, workspaces, prefs) | 6 | 78% | Variables, SVG Interactivity, Properties per context, Consolidate All Windows, context menus beyond the canvas (Links, Asset Export, CSS Properties, Attributes and the canvas context menu are done), about 38 Preferences options stored but not yet acted on (#394: Construction and Spacing Guides, Auto Size New Area Type, Show Font Names in English, Highlight Alternate Glyphs, Show Pixel Grid, performance, devices…) | 14–22 |
+| UI chrome (panels, contextual Properties, workspaces, prefs) | 6 | 78% | Variables, SVG Interactivity, Properties per context, Consolidate All Windows, context menus beyond the canvas (Links, Asset Export, CSS Properties, Attributes and the canvas context menu are done), about 35 Preferences options stored but not yet acted on (#394: Construction and Spacing Guides, Auto Size New Area Type, Show Font Names in English, Highlight Alternate Glyphs, performance, devices…) | 14–22 |
 | Libraries, Links, Package | 2 | 50% | a local Libraries panel (no cloud by design); Links and Package are done | 5–8 |
 | **Feature parity** | **103** | **~75%** | | **~210–330** |
 | Interaction-fidelity pass (side by side with Illustrator: every tool modifier, cursor, dialog, Properties context) | | | | 60–90 |
@@ -72,7 +72,9 @@ USAGE:
      Live effects are kept; --outline-text writes SVG text as paths.

  vectorcraft-cli info FILE
-      Print a JSON summary: title, colour mode, units, artboards, object counts by kind, fonts.
+      Print a JSON summary: the import warnings (what didn't come in as it was, such as an EPS
+      read from its preview and why), title, colour mode, units, artboards, object counts by
+      kind, fonts.

  vectorcraft-cli bench FILE [--size WxH] [--iters N]
      Render FILE (any readable format) fitted to WxH (default 2880x1800) and print ms per frame
@@ -188,7 +190,7 @@ fn convert(args: &[String]) -> Result<(), String> {
 fn info(args: &[String]) -> Result<(), String> {
    let file = args.first().ok_or("info needs a FILE")?;
    let mut h = Headless::new();
-    h.call("app.open", json!({"path": file})).map_err(|e| format!("open {file}: {e}"))?;
+    let opened = h.call("app.open", json!({"path": file})).map_err(|e| format!("open {file}: {e}"))?;
    let base = h.call("engine.execute", json!({"command": "file.info", "params": {}}))?;
    let doc = h.session.doc().map_err(|e| e.to_string())?.doc.clone();
    let mut kinds: std::collections::BTreeMap<&'static str, usize> = Default::default();
@@ -196,7 +198,8 @@ fn info(args: &[String]) -> Result<(), String> {
    let fonts = h.call("engine.execute", json!({"command": "text.fonts", "params": {}})).unwrap_or(Value::Null);
    let artboards: Vec<Value> =
        doc.artboards.iter().map(|a| json!({"name": a.name, "rect": [a.rect.x0, a.rect.y0, a.rect.width(), a.rect.height()]})).collect();
-    let v = json!({"file": file, "info": base, "artboards": artboards, "kinds": kinds, "fonts": fonts});
+    // What didn't come in as it was (an EPS read from its preview says why).
+    let v = json!({"file": file, "warnings": opened["warnings"], "info": base, "artboards": artboards, "kinds": kinds, "fonts": fonts});
    outln!("{}", serde_json::to_string_pretty(&v).unwrap_or_default());
    Ok(())
 }
@@ -82,3 +82,14 @@ fn help_lists_readable_formats() {
    let out = ok(&["--help"]);
    assert!(out.contains("Readable formats: .vectorcraft") && out.contains(".ait") && out.contains(".webp"), "{out}");
 }
+
+/// `info` reports the import warnings: an EPS read only up to an error names it.
+#[test]
+fn info_reports_why_an_eps_read_partly() {
+    let eps = tmp("partial.eps");
+    std::fs::write(&eps, "%!PS-Adobe-3.0 EPSF-3.0\n%%BoundingBox: 0 0 100 100\n%%EndComments\n0 0 10 10 rectfill frobnicate\n%%EOF\n").unwrap();
+    let v = info(&eps);
+    let w = v["warnings"][0].as_str().unwrap_or_default();
+    assert!(w.contains("`frobnicate`"), "{v}");
+    assert_eq!(v["kinds"]["Path"], 1, "{v}");
+}
@@ -687,6 +687,7 @@ fn lerp_text(o: &mut TextObject, x: &TextObject, y: &TextObject, t: f64) {
    }
    if resized {
        o.cached_bounds = None;
+        o.cached_baselines.clear();
    }
 }

@@ -50,11 +50,15 @@ pub struct HitOptions {
    pub outline: bool,
    /// "Object Selection by Path Only" preference.
    pub path_only: bool,
+    /// "Type Object Selection by Path Only" preference: type is picked on its type path only
+    /// (point type's baseline, area type's frame, type on a path's path), not anywhere in its
+    /// bounds.
+    pub type_path_only: bool,
 }

 impl Default for HitOptions {
    fn default() -> Self {
-        Self { tol: 3.0, outline: false, path_only: false }
+        Self { tol: 3.0, outline: false, path_only: false, type_path_only: false }
    }
 }

@@ -190,6 +194,11 @@ fn hit_leaf(n: &Node, p: Point, opt: HitOptions) -> Option<HitKind> {
            }
            (!opt.outline && !opt.path_only && fill_contains(&bp, *rule, p)).then_some(HitKind::Fill)
        }
+        // The type path lies within the bounds: they rule out the rest before it is measured.
+        NodeKind::Text(t) if opt.type_path_only => {
+            n.geometric_bounds().filter(|b| b.inflate(opt.tol, opt.tol).contains(p))?;
+            on_type_path(n, t, p, opt.tol).then_some(HitKind::Outline)
+        }
        NodeKind::Text(_) | NodeKind::Image(_) | NodeKind::SymbolInstance { .. } | NodeKind::Blend { .. } | NodeKind::Envelope { .. } => {
            n.geometric_bounds().filter(|b| b.inflate(opt.tol, opt.tol).contains(p)).map(|_| HitKind::Bounds)
        }
@@ -205,6 +214,28 @@ fn hit_leaf(n: &Node, p: Point, opt: HitOptions) -> Option<HitKind> {
    }
 }

+/// Is `p` within `tol` of the type path of `t` (in `n`), what "Type Object Selection by Path
+/// Only" picks type by: its baselines ([`crate::TextObject::baselines`]), area type's frame and
+/// type on a path's path, drawn through `n`'s perspective projection if it has one.
+fn on_type_path(n: &Node, t: &crate::TextObject, p: Point, tol: f64) -> bool {
+    use crate::TextKind;
+    use vectorcraft_geom::kurbo::ParamCurveNearest;
+    let h = n.projection();
+    let project = |q: Point| h.as_ref().and_then(|h| h.apply(q)).unwrap_or(q);
+    // A homography keeps straight lines straight: a baseline's ends are enough.
+    let near = |(a, b): (Point, Point)| vectorcraft_geom::Line::new(project(t.xf * a), project(t.xf * b)).nearest(p, 1e-9).distance_sq <= tol * tol;
+    if t.baselines().any(near) {
+        return true;
+    }
+    let (TextKind::Area { frame: path } | TextKind::OnPath { path, .. }) = &t.kind else { return false };
+    let mut path = path.transformed(t.xf);
+    if h.is_some() {
+        let piece = path.bounds().map_or(1.0, |b| (b.width().max(b.height()) / 64.0).max(0.25));
+        path = crate::live::map_nonlinear(&path, piece, project);
+    }
+    stroke_contains(&path.to_bezpath(), 0.0, tol, p)
+}
+
 /// Hit anywhere in an evaluated subtree (groups recurse; leaves use [`hit_leaf`]).
 fn hit_any(n: &Node, p: Point, opt: HitOptions) -> Option<HitKind> {
    match &n.kind {
@@ -404,6 +435,102 @@ mod tests {
        }
    }

+    /// Type Object Selection by Path Only: point type is picked on its baseline, area type on its
+    /// frame and type on a path on its path, no longer anywhere in its bounds.
+    #[test]
+    fn type_path_only_picks_type_on_its_path() {
+        use crate::{CharStyle, TextKind, TextObject};
+        let mut d = Document::new(400.0, 400.0);
+        let l = d.layers[0].id;
+        let mut add = |t: TextObject| {
+            let id = d.alloc_id();
+            d.insert(Some(l), 9, Node::new(id, NodeKind::Text(Box::new(t)))).unwrap();
+            id
+        };
+        // Point type at (10, 100), 20 pt: its glyphs rise above the baseline, its layout is 60 wide.
+        let mut point = TextObject::point(Point::new(10.0, 100.0), "Hello", CharStyle { size: 20.0, ..CharStyle::default() });
+        point.cached_bounds = Some(Rect::new(0.0, -16.0, 60.0, 4.0));
+        let point = add(point);
+        let mut area = TextObject::point(Point::new(200.0, 200.0), "Area", CharStyle::default());
+        area.kind = TextKind::Area { frame: shapes::rectangle(Rect::new(0.0, 0.0, 100.0, 50.0)) };
+        let area = add(area);
+        let mut on_path = TextObject::point(Point::new(10.0, 300.0), "Path", CharStyle::default());
+        on_path.kind = TextKind::OnPath { path: shapes::rectangle(Rect::new(0.0, 0.0, 100.0, 40.0)), start: 0.0, end: None };
+        let on_path = add(on_path);
+        let path_only = HitOptions { type_path_only: true, ..Default::default() };
+        let hit = |p: Point, opt: HitOptions| hit_test(&d, p, opt).map(|h| (h.leaf, h.kind));
+        // Off: anywhere in the bounds.
+        assert_eq!(hit(Point::new(40.0, 90.0), HitOptions::default()), Some((point, HitKind::Bounds)));
+        assert_eq!(hit(Point::new(250.0, 225.0), HitOptions::default()), Some((area, HitKind::Bounds)));
+        assert_eq!(hit(Point::new(60.0, 320.0), HitOptions::default()), Some((on_path, HitKind::Bounds)));
+        // On: the glyphs and the inside of the frame or path no longer pick the type.
+        assert_eq!(hit(Point::new(40.0, 90.0), path_only), None, "point type: among its glyphs");
+        assert_eq!(hit(Point::new(250.0, 225.0), path_only), None, "area type: inside its frame");
+        assert_eq!(hit(Point::new(60.0, 320.0), path_only), None, "type on a path: inside its path");
+        // The baseline (within the tolerance, across the layout's width), frame and path do.
+        assert_eq!(hit(Point::new(40.0, 101.5), path_only), Some((point, HitKind::Outline)), "point type: its baseline");
+        assert_eq!(hit(Point::new(75.0, 100.0), path_only), None, "point type: past the end of its layout");
+        assert_eq!(hit(Point::new(250.0, 200.5), path_only), Some((area, HitKind::Outline)), "area type: its frame");
+        assert_eq!(hit(Point::new(60.0, 339.5), path_only), Some((on_path, HitKind::Outline)), "type on a path: its path");
+    }
+
+    /// Type Object Selection by Path Only with the layout's baselines: every line's for point type,
+    /// area type's besides its frame, a vertical column's centre line, and type in perspective
+    /// where it is drawn.
+    #[test]
+    fn type_path_only_picks_every_baseline() {
+        use crate::{CharStyle, PerspectiveAttachment, TextKind, TextObject};
+        use vectorcraft_geom::{Affine, Homography};
+        let mut d = Document::new(400.0, 400.0);
+        let l = d.layers[0].id;
+        let mut add = |t: TextObject, perspective: Option<Affine>| {
+            let mut n = Node::new(d.alloc_id(), NodeKind::Text(Box::new(t)));
+            n.perspective = perspective.map(|a| {
+                Box::new(PerspectiveAttachment { projection: Some(Homography::from_affine(a).to_array()), ..PerspectiveAttachment::new("left", 0.0) })
+            });
+            let id = n.id;
+            d.insert(Some(l), 9, n).unwrap();
+            id
+        };
+        let style = CharStyle { size: 20.0, ..CharStyle::default() };
+        // Two lines of point type at (10, 100), 24 pt apart.
+        let mut point = TextObject::point(
+            Point::new(10.0, 100.0),
+            "Hello
+world",
+            style.clone(),
+        );
+        point.cached_bounds = Some(Rect::new(0.0, -16.0, 60.0, 28.0));
+        point.cached_baselines = vec![(Point::ZERO, Point::new(60.0, 0.0)), (Point::new(0.0, 24.0), Point::new(50.0, 24.0))];
+        let point = add(point, None);
+        // Area type: a line inside its frame.
+        let mut area = TextObject::point(Point::new(200.0, 50.0), "Area", style.clone());
+        area.kind = TextKind::Area { frame: shapes::rectangle(Rect::new(0.0, 0.0, 100.0, 50.0)) };
+        area.cached_baselines = vec![(Point::new(0.0, 16.0), Point::new(40.0, 16.0))];
+        let area = add(area, None);
+        // Vertical point type at (300, 200) with no baselines cached: down its first column.
+        let mut vertical = TextObject::point(Point::new(300.0, 200.0), "Tate", style.clone());
+        vertical.vertical = true;
+        vertical.cached_bounds = Some(Rect::new(-10.0, 0.0, 10.0, 80.0));
+        let vertical = add(vertical, None);
+        // Point type drawn 100 to the right of where it is laid out.
+        let mut moved = TextObject::point(Point::new(10.0, 350.0), "Moved", style);
+        moved.cached_bounds = Some(Rect::new(0.0, -16.0, 60.0, 4.0));
+        let moved = add(moved, Some(Affine::translate((100.0, 0.0))));
+        let path_only = HitOptions { type_path_only: true, ..Default::default() };
+        let hit = |p: Point| hit_test(&d, p, path_only).map(|h| h.leaf);
+        assert_eq!(hit(Point::new(40.0, 100.0)), Some(point), "the first line's baseline");
+        assert_eq!(hit(Point::new(40.0, 125.0)), Some(point), "the second line's");
+        assert_eq!(hit(Point::new(40.0, 112.0)), None, "between the lines");
+        assert_eq!(hit(Point::new(65.0, 124.0)), None, "past the end of the shorter second line");
+        assert_eq!(hit(Point::new(220.0, 66.0)), Some(area), "area type: a line's baseline");
+        assert_eq!(hit(Point::new(220.0, 80.0)), None, "area type: inside the frame, off the baselines");
+        assert_eq!(hit(Point::new(299.0, 260.0)), Some(vertical), "vertical type: down the column");
+        assert_eq!(hit(Point::new(306.0, 260.0)), None, "vertical type: beside it");
+        assert_eq!(hit(Point::new(140.0, 351.0)), Some(moved), "in perspective: where it is drawn");
+        assert_eq!(hit(Point::new(40.0, 351.0)), None, "in perspective: not where it is laid out");
+    }
+
    /// `objects_at`: every object under the point, topmost first; a group counts once.
    #[test]
    fn objects_at_lists_the_stack() {
@@ -589,6 +589,46 @@ impl GradientMesh {
        self.rows >= 1 && self.cols >= 1 && self.points.len() == (self.rows as usize + 1) * (self.cols as usize + 1)
    }

+    /// A 1×1 mesh from its four corners (bottom-left, top-left, top-right, bottom-right in u/v
+    /// order: row 0 is v = 0, columns follow u), each with its handles ([`H_RIGHT`] …).
+    fn patch(corners: [(Point, [Vec2; 4], Color); 4]) -> Self {
+        let point = |(p, handles, color): (Point, [Vec2; 4], Color)| MeshPoint { p, color, opacity: 1.0, handles };
+        let [a, b, c, d] = corners;
+        Self { rows: 1, cols: 1, points: vec![point(a), point(d), point(b), point(c)] }
+    }
+
+    /// A 1×1 mesh from a Coons patch's twelve boundary points (in the order PDF and PostScript
+    /// shadings list them: v runs cp0 → cp3 along cp1 and cp2, u runs cp0 → cp9 along cp11 and
+    /// cp10) and its corner colours (at cp0, cp3, cp6, cp9); `None` if a point isn't finite.
+    pub fn coons(cp: &[Point; 12], colors: [Color; 4]) -> Option<Self> {
+        if !cp.iter().all(|p| p.is_finite()) {
+            return None;
+        }
+        let h = |a: usize, b: usize| cp[b] - cp[a];
+        let handles = |right: Vec2, left: Vec2, down: Vec2, up: Vec2| {
+            let mut h = [Vec2::ZERO; 4];
+            (h[H_RIGHT], h[H_LEFT], h[H_DOWN], h[H_UP]) = (right, left, down, up);
+            h
+        };
+        let [c0, c1, c2, c3] = colors;
+        Some(Self::patch([
+            (cp[0], handles(h(0, 11), Vec2::ZERO, h(0, 1), Vec2::ZERO), c0),
+            (cp[3], handles(h(3, 4), Vec2::ZERO, Vec2::ZERO, h(3, 2)), c1),
+            (cp[6], handles(Vec2::ZERO, h(6, 5), Vec2::ZERO, h(6, 7)), c2),
+            (cp[9], handles(Vec2::ZERO, h(9, 10), h(9, 8), Vec2::ZERO), c3),
+        ]))
+    }
+
+    /// A 1×1 mesh of a Gouraud-shaded triangle (a patch with two corners together); `None` if a
+    /// point isn't finite.
+    pub fn triangle(corners: [(Point, Color); 3]) -> Option<Self> {
+        if !corners.iter().all(|(p, _)| p.is_finite()) {
+            return None;
+        }
+        let [a, b, c] = corners.map(|(p, color)| (p, [Vec2::ZERO; 4], color));
+        Some(Self::patch([a, b, c, c]))
+    }
+
    /// A mesh over surface `s` (u, v ∈ [0,1]) with handles from its partial derivatives.
    pub fn from_surface(rows: u32, cols: u32, s: &dyn Fn(f64, f64) -> Point, color: &dyn Fn(f64, f64) -> Color) -> Self {
        let (us, vs) = (even_steps(cols), even_steps(rows));
@@ -715,6 +715,10 @@ pub struct TextObject {
    /// Cached layout bounds in text space, filled in by the layout engine (not serialized).
    #[serde(skip)]
    pub cached_bounds: Option<Rect>,
+    /// Cached baselines in text space, start to end, one per line that holds characters (a
+    /// vertical column's centre line), filled in with `cached_bounds` (not serialized).
+    #[serde(skip)]
+    pub cached_baselines: Vec<(Point, Point)>,
 }

 impl TextObject {
@@ -731,6 +735,7 @@ impl TextObject {
            path_spacing: 0.0,
            wrap: Vec::new(),
            cached_bounds: None,
+            cached_baselines: Vec::new(),
        }
    }
    pub fn plain_text(&self) -> String {
@@ -839,6 +844,15 @@ impl TextObject {
    pub fn local_bounds(&self) -> Rect {
        self.cached_bounds.unwrap_or_else(|| self.estimate_bounds())
    }
+    /// The baselines in text space (the layout cache): for point type with none cached, the first
+    /// one across [`Self::local_bounds`] (down the first column's centre line for vertical type).
+    pub fn baselines(&self) -> impl Iterator<Item = (Point, Point)> + '_ {
+        let first = (self.cached_baselines.is_empty() && matches!(self.kind, TextKind::Point)).then(|| {
+            let b = self.local_bounds();
+            if self.vertical { (Point::new(0.0, b.y0), Point::new(0.0, b.y1)) } else { (Point::new(b.x0, 0.0), Point::new(b.x1, 0.0)) }
+        });
+        self.cached_baselines.iter().copied().chain(first)
+    }
 }

 #[cfg(test)]
@@ -300,7 +300,7 @@ fn import_text(s: &mut Session, p: &Value) -> Result<Value> {
        return Err(bad(C, "the text is empty"));
    }
    let mut t = TextObject::point(Point::ZERO, text, super::super::create::new_type_style(s, &Value::Null));
-    t.cached_bounds = Some(vectorcraft_text::layout(vectorcraft_text::FontDb::global(), &t).bounds);
+    crate::cmd::typecmd::refresh_bounds(&mut t);
    let n = Node::new(NodeId(1), NodeKind::Text(Box::new(t)));
    let count = s.load_clipboard(Clipboard { nodes: vec![n], ..Default::default() }, p)?;
    Ok(json!({ "count": count }))
@@ -197,8 +197,7 @@ pub(super) fn area_text(text: String, frame: Rect) -> vectorcraft_doc::TextObjec
        run.text = text;
    }
    t.kind = vectorcraft_doc::TextKind::Area { frame: shapes::rectangle(Rect::from_origin_size(Point::ORIGIN, frame.size())) };
-    let lay = vectorcraft_text::layout(vectorcraft_text::FontDb::global(), &t);
-    t.cached_bounds = Some(lay.bounds);
+    crate::cmd::typecmd::refresh_bounds(&mut t);
    t
 }

@@ -469,6 +469,7 @@ fn create_in_path(s: &mut Session, p: &Value) -> Result<Value> {
        path_spacing: 0.0,
        wrap: Vec::new(),
        cached_bounds: None,
+        cached_baselines: Vec::new(),
    };
    if bool_or(p, "placeholder", false) {
        super::typemenu::fill_with_placeholder(&mut t);
@@ -601,6 +602,7 @@ fn headline_tracking(t: &TextObject, target: f64) -> Option<f64> {
            path_spacing: 0.0,
            wrap: Vec::new(),
            cached_bounds: None,
+            cached_baselines: Vec::new(),
        };
        for r in &mut h.runs {
            r.style.tracking = tr;
@@ -97,10 +97,11 @@ fn orientation(s: &mut Session, p: &Value, vertical: bool) -> Result<Value> {
    Ok(json!({"vertical": vertical, "ids": ids.iter().map(|id| id.0).collect::<Vec<_>>()}))
 }

-/// Recompute the layout bounds cache after a text edit.
+/// Recompute the layout caches (bounds and baselines) after a text edit.
 pub(crate) fn refresh_bounds(t: &mut TextObject) {
    let lay = vectorcraft_text::layout(vectorcraft_text::FontDb::global(), t);
    t.cached_bounds = Some(lay.bounds);
+    t.cached_baselines = lay.baselines();
 }

 /// Text objects among `ids` and their descendants.
@@ -589,8 +589,7 @@ fn mesh_hit_test_inside() {
    sel(&mut s, &[a]);
    s.execute("object.mesh.create", &json!({"rows": 2, "cols": 2})).unwrap();
    let d = &s.doc().unwrap().doc;
-    let h =
-        vectorcraft_doc::hit::hit_test(d, Point::new(50.0, 30.0), vectorcraft_doc::hit::HitOptions { tol: 1.0, outline: false, path_only: false });
+    let h = vectorcraft_doc::hit::hit_test(d, Point::new(50.0, 30.0), vectorcraft_doc::hit::HitOptions { tol: 1.0, ..Default::default() });
    assert_eq!(h.map(|h| h.leaf), Some(a));
 }

@@ -561,3 +561,82 @@ fn missing_glyph_protection_keeps_glyphs_a_new_font_lacks() {
    s.execute("text.setStyle", &json!({"font": to})).unwrap();
    assert_eq!(fonts(&s), [to, to, to]);
 }
+
+// ---------- #394, fourth batch ----------
+
+/// Type › Type Object Selection by Path Only (#394): on, a click among point type's glyphs no
+/// longer selects it with the Selection tool, a click on its baseline does; off (the default),
+/// anywhere in its bounds selects it.
+#[test]
+fn type_selection_by_path_only_picks_type_on_its_baseline() {
+    use vectorcraft_tools::{PointerEvent, PointerKind};
+    let mut s = new_doc();
+    let id = NodeId(s.execute("text.create", &json!({"x": 100, "y": 100, "text": "Hello world", "size": 20})).unwrap()["id"].as_u64().unwrap());
+    s.execute("select.none", &json!({})).unwrap();
+    let b = s.doc().unwrap().doc.node(id).and_then(|n| n.geometric_bounds()).unwrap();
+    assert!(b.y0 < 95.0 && b.x1 > 130.0, "the glyphs rise above the baseline at y = 100: {b:?}");
+    s.select_tool("selection", ViewInfo::default()).unwrap();
+    let click = |s: &mut Session, x: f64, y: f64| {
+        for k in [PointerKind::Down, PointerKind::Up] {
+            s.pointer(&PointerEvent::new(k, x, y), ViewInfo::default()).unwrap();
+        }
+        s.doc().unwrap().selection.objects.clone()
+    };
+    // Clear of the bounding box's handles: 15 px in from the left, halfway up the glyphs.
+    let (x, glyphs) = (b.x0 + 15.0, (b.y0 + 100.0) / 2.0);
+    assert_eq!(click(&mut s, x, glyphs), vec![id], "off: a click among the glyphs selects the type");
+    assert!(click(&mut s, x, 300.0).is_empty(), "empty canvas deselects");
+    set_pref(&mut s, "typeSelectionByPathOnly", json!(true));
+    assert!(click(&mut s, x, glyphs).is_empty(), "on: a click among the glyphs selects nothing");
+    assert_eq!(click(&mut s, x, 101.0), vec![id], "on: a click on the baseline selects it");
+    assert!(click(&mut s, x, 300.0).is_empty());
+    set_pref(&mut s, "typeSelectionByPathOnly", json!(false));
+    assert_eq!(click(&mut s, x, glyphs), vec![id], "off again: the glyphs select it");
+}
+
+/// Type Object Selection by Path Only (#394) with real layout: every line's baseline picks point
+/// type, between the lines nothing does; the Type tool still edits type clicked among its
+/// characters, and the Eyedropper still samples it there.
+#[test]
+fn type_selection_by_path_only_takes_every_line_and_spares_the_type_tool_and_eyedropper() {
+    use vectorcraft_tools::{PointerEvent, PointerKind};
+    let v = ViewInfo::default();
+    let mut s = new_doc();
+    let created = s
+        .execute(
+            "text.create",
+            &json!({"x": 100, "y": 100, "text": "Hello
+world", "size": 20}),
+        )
+        .unwrap();
+    let src = NodeId(created["id"].as_u64().unwrap());
+    s.execute("text.setStyle", &json!({"fill": "#00ff00"})).unwrap();
+    let NodeKind::Text(t) = &s.doc().unwrap().doc.node(src).unwrap().kind else { panic!("not type") };
+    let [(a, _), (b, _)] = t.cached_baselines[..] else { panic!("two baselines: {:?}", t.cached_baselines) };
+    let (first, second) = (t.xf * a, t.xf * b);
+    assert!(first.y == 100.0 && second.y > 115.0, "{first:?} {second:?}");
+    let click = |s: &mut Session, tool: &str, x: f64, y: f64| {
+        s.select_tool(tool, v).unwrap();
+        for k in [PointerKind::Down, PointerKind::Up] {
+            s.pointer(&PointerEvent::new(k, x, y), v).unwrap();
+        }
+        s.doc().unwrap().selection.objects.clone()
+    };
+    set_pref(&mut s, "typeSelectionByPathOnly", json!(true));
+    let x = first.x + 15.0;
+    assert!(click(&mut s, "selection", x, 300.0).is_empty());
+    assert_eq!(click(&mut s, "selection", x, second.y + 1.0), vec![src], "the second line's baseline");
+    assert!(click(&mut s, "selection", x, (first.y + second.y) / 2.0).is_empty(), "between the lines");
+    // The Type tool: a click among the glyphs puts the caret in that type, it adds none.
+    assert_eq!(click(&mut s, "type", x, first.y - 7.0), vec![src]);
+    assert!(s.tool_wants_text(), "editing");
+    let texts =
+        |s: &Session| s.doc().unwrap().doc.layers[0].children().map_or(0, |c| c.iter().filter(|n| matches!(n.kind, NodeKind::Text(_))).count());
+    assert_eq!(texts(&s), 1, "no new type");
+    // The Eyedropper: a click among the glyphs samples the type into the selected type.
+    s.select_tool("selection", v).unwrap();
+    let dst = NodeId(s.execute("text.create", &json!({"x": 100, "y": 300, "text": "Target"})).unwrap()["id"].as_u64().unwrap());
+    click(&mut s, "eyedropper", x, first.y - 7.0);
+    let NodeKind::Text(t) = &s.doc().unwrap().doc.node(dst).unwrap().kind else { panic!("not type") };
+    assert_eq!((t.first_style().size, t.first_style().fill.color().map(|c| c.to_hex())), (20.0, Some("#00ff00".into())));
+}
@@ -166,6 +166,7 @@ impl Session {
            auto_add_delete: !self.prefs.disable_auto_add_delete,
            selection_tolerance: self.prefs.selection_tolerance,
            path_only: self.prefs.object_selection_by_path_only,
+            type_path_only: self.prefs.type_selection_by_path_only,
            double_click_isolate: self.prefs.double_click_to_isolate,
            select_behind: self.prefs.ctrl_click_selects_behind,
            highlight_anchors: self.prefs.highlight_anchors_on_hover,
@@ -925,6 +925,31 @@ fn arb_ps_token() -> impl Strategy<Value = String> {
            "<< /PatternType 2 /Shading << /ShadingType 3 /ColorSpace /DeviceGray /Coords [0 0 0 9 9 9] /Function << /FunctionType 3 /Functions [] /Bounds [] /Encode [] >> >> >>",
            "<< /ImageType 1 /Width 2 /Height 2 /BitsPerComponent 8 /ImageMatrix [2 0 0 2 0 0] /DataSource (abcdefghijkl) >>",
            "u", "U", "u u u", "U U", "{ u } 300 repeat", "1 1 300 { pop u 0 0 9 9 rectclip } for",
+            // Probing, files, forms and devices.
+            "status", "token", "bytesavailable", "resetfile", "pdfmark", "execform", "nulldevice", "strokepath", "pathforall",
+            "currenthsbcolor", "currentcolorrendering", "gcheck", "rootfont", "setcachedevice2", "writestring", "(%stdout) (w) file",
+            "//x", "{ //dup }", "/ReusableStreamDecode", "currentfile /ASCII85Decode filter /ReusableStreamDecode filter",
+            "<< /Predictor 12 /Columns 2 /Colors 1 >> /FlateDecode", "<< /FormType 1 /BBox [0 0 9 9] /PaintProc { pop 0 0 5 5 rectfill } >>",
+            // Tiling patterns, uncoloured ones and patterns drawing patterns.
+            "<< /PatternType 1 /PaintType 1 /XStep 5 /YStep 5 /BBox [0 0 5 5] /PaintProc { pop 0 0 3 3 rectfill } >> matrix makepattern",
+            "<< /PatternType 1 /PaintType 2 /XStep 5 /YStep 5 /BBox [0 0 5 5] /PaintProc { pop dup setpattern 0 0 3 3 rectfill } >>",
+            "[/Pattern /DeviceRGB] setcolorspace", "1 0 0", "setpattern",
+            // Mesh and function shadings, sampled functions.
+            "<< /ShadingType 4 /ColorSpace /DeviceGray /DataSource [0 0 0 0 0 9 0 1 0 0 9 1 1 9 9 0] >>",
+            "<< /ShadingType 5 /ColorSpace /DeviceGray /VerticesPerRow 2 /DataSource [0 0 0 9 0 1 0 9 1 9 9 0] >>",
+            "<< /ShadingType 6 /ColorSpace /DeviceGray /BitsPerCoordinate 8 /BitsPerComponent 8 /BitsPerFlag 8 /Decode [0 9 0 9 0 1] /DataSource <00ff10ff20ff30> >>",
+            "<< /ShadingType 7 /ColorSpace /DeviceRGB /BitsPerCoordinate 32 /BitsPerComponent 16 /BitsPerFlag 8 /Decode [0 9 0 9 0 1 0 1 0 1] /DataSource (abc) >>",
+            "<< /ShadingType 1 /ColorSpace /DeviceGray /Function << /FunctionType 0 /Domain [0 1 0 1] /Range [0 1] /Size [2 2] /BitsPerSample 8 /DataSource <00ff00ff> >> >>",
+            "<< /FunctionType 0 /Domain [0 1] /Range [0 1 0 1 0 1] /Size [99999999] /BitsPerSample 32 /DataSource () >>",
+            // Masked images.
+            "<< /ImageType 3 /InterleaveType 1 /DataDict << /ImageType 1 /Width 2 /Height 2 /BitsPerComponent 8 /ImageMatrix [2 0 0 2 0 0] /DataSource (abcdefghijklmnop) >> /MaskDict << /ImageType 1 /Width 2 /Height 2 /BitsPerComponent 1 /ImageMatrix [2 0 0 2 0 0] >> >>",
+            "<< /ImageType 3 /InterleaveType 2 /DataDict << /ImageType 1 /Width 3 /Height 1 /BitsPerComponent 8 /ImageMatrix [3 0 0 1 0 0] /DataSource (abcdefghijklmnop) >> /MaskDict << /ImageType 1 /Width 3 /Height 5 /BitsPerComponent 1 /ImageMatrix [3 0 0 5 0 0] >> >>",
+            // Type 3 fonts and the show operators that space their glyphs.
+            "/T3 << /FontType 3 /FontMatrix [0.1 0 0 0.1 0 0] /FontBBox [0 0 9 9] /Encoding [/a /b] /BuildChar { pop pop 9 0 setcharwidth 0 0 5 5 rectfill } >> definefont setfont",
+            "/T4 << /FontType 3 /FontMatrix [1 0 0 1 0 0] /BuildGlyph { pop pop (x) show } /Encoding [/a] >> definefont setfont",
+            "glyphshow", "xshow", "xyshow", "awidthshow", "kshow", "/a", "[1 2 3]",
+            // Executable strings and integer keys (Illustrator 8's procsets).
+            "(>>) cvx", "(1 2 add) cvx exec", "(x) cvx dup exec", "0 load", "1 { } def", "(mark) cvx cvlit"
        ])
        .prop_map(str::to_string),
    ]
@@ -15,6 +15,8 @@ vectorcraft-doc = { workspace = true }
 vectorcraft-effects = { workspace = true }
 vectorcraft-brush = { workspace = true }
 vectorcraft-text = { workspace = true }
+# Windows metafile previews, opened when a file's PostScript can't be read.
+vectorcraft-metafile = { workspace = true }
 # The TIFF writer (previews) and PackBits, shared with raster export.
 vectorcraft-render = { workspace = true }
 kurbo = { workspace = true }
@@ -11,7 +11,7 @@ use vectorcraft_geom::Affine;

 use super::graphics::{Space, process};
 use super::interp::{Interp, matrix_of};
-use super::lex::{find, hex_decode};
+use super::lex::{Lexer, find, hex_decode};
 use super::obj::{DictRef, Key, Obj, Op, PsError, Res, Shared, ps_err};
 use crate::ps;

@@ -19,6 +19,8 @@ use crate::ps;
 const MAX_DATA: usize = 1 << 28;
 /// Most pixels an image may have.
 const MAX_PIXELS: usize = 1 << 26;
+/// Why an image is missing.
+const TOO_LARGE: &str = "images too large to read were left out";
 /// Most distinct colours an image converts through a tint transform.
 const MAX_TINTS: usize = 1 << 16;

@@ -159,6 +161,100 @@ pub(crate) struct Filter {
    name: Rc<str>,
    /// `SubFileDecode`'s count and end-of-data string.
    sub: (usize, Vec<u8>),
+    /// `FlateDecode`'s and `LZWDecode`'s `Predictor`: what it undoes.
+    predictor: Option<Predictor>,
+}
+
+/// A `Predictor` (2: TIFF, 10–15: PNG) with its `Colors`, `BitsPerComponent` and `Columns`.
+#[derive(Clone, Copy, Debug)]
+struct Predictor {
+    kind: u8,
+    colors: usize,
+    bpc: usize,
+    columns: usize,
+}
+
+impl Predictor {
+    /// The predictor of a filter's parameters, if it has one.
+    fn of(d: &DictRef) -> Res<Option<Self>> {
+        let num = |k: &str, default: f64| d.borrow().get(&Key::name(k)).and_then(Obj::as_num).unwrap_or(default);
+        let kind = num("Predictor", 1.0);
+        if kind <= 1.0 {
+            return Ok(None);
+        }
+        let (colors, bpc, columns) = (num("Colors", 1.0), num("BitsPerComponent", 8.0), num("Columns", 1.0));
+        if !(kind == 2.0 || (10.0..=15.0).contains(&kind))
+            || !(1.0..=32.0).contains(&colors)
+            || ![1.0, 2.0, 4.0, 8.0, 16.0].contains(&bpc)
+            || !(1.0..=1e6).contains(&columns)
+        {
+            return ps_err("rangecheck", "Predictor");
+        }
+        Ok(Some(Self { kind: kind as u8, colors: colors as usize, bpc: bpc as usize, columns: columns as usize }))
+    }
+
+    /// The data the predictor made `data` from.
+    fn undo(self, data: &[u8]) -> Vec<u8> {
+        // A row longer than the data is the data.
+        let row = (self.colors * self.bpc * self.columns).div_ceil(8).min(data.len().max(1));
+        // Bytes per pixel (at least one) is how far back the left neighbour is.
+        let bpp = (self.colors * self.bpc).div_ceil(8).max(1);
+        if self.kind == 2 {
+            let mut out = data.to_vec();
+            // Horizontal differencing, for 8-bit components (the common case).
+            if self.bpc == 8 {
+                for line in out.chunks_mut(row.max(1)) {
+                    for i in bpp..line.len() {
+                        let left = line.get(i - bpp).copied().unwrap_or(0);
+                        if let Some(b) = line.get_mut(i) {
+                            *b = b.wrapping_add(left);
+                        }
+                    }
+                }
+            }
+            return out;
+        }
+        // PNG: each row starts with its filter type.
+        let mut out: Vec<u8> = Vec::with_capacity(data.len());
+        let mut prev = vec![0u8; row];
+        for chunk in data.chunks(row + 1) {
+            let Some((&kind, line)) = chunk.split_first() else { break };
+            let mut cur = line.to_vec();
+            cur.resize(row, 0);
+            for i in 0..row {
+                let a = if i >= bpp { cur.get(i - bpp).copied().unwrap_or(0) } else { 0 };
+                let b = prev.get(i).copied().unwrap_or(0);
+                let c = if i >= bpp { prev.get(i - bpp).copied().unwrap_or(0) } else { 0 };
+                let add = match kind {
+                    1 => a,
+                    2 => b,
+                    3 => ((u16::from(a) + u16::from(b)) / 2) as u8,
+                    4 => paeth(a, b, c),
+                    _ => 0,
+                };
+                if let Some(v) = cur.get_mut(i) {
+                    *v = v.wrapping_add(add);
+                }
+            }
+            out.extend_from_slice(cur.get(..line.len().min(row)).unwrap_or_default());
+            prev = cur;
+        }
+        out
+    }
+}
+
+/// The PNG Paeth predictor.
+fn paeth(a: u8, b: u8, c: u8) -> u8 {
+    let (ia, ib, ic) = (i16::from(a), i16::from(b), i16::from(c));
+    let p = ia + ib - ic;
+    let (pa, pb, pc) = ((p - ia).abs(), (p - ib).abs(), (p - ic).abs());
+    if pa <= pb && pa <= pc {
+        a
+    } else if pb <= pc {
+        b
+    } else {
+        c
+    }
 }

 /// The bytes `f` decodes from `raw`, how many it read, and the channels of a decoded JPEG.
@@ -176,8 +272,13 @@ fn decode(f: &Filter, raw: &[u8]) -> Res<(Vec<u8>, usize, Option<u8>)> {
            (ps::ascii85_decode(&text).ok_or(PsError::Ps("ioerror", "ASCII85Decode".into()))?, end.map_or(raw.len(), |e| e + 2))
        }
        "RunLengthDecode" => run_length(raw)?,
-        "FlateDecode" => flate(raw)?,
-        "LZWDecode" => lzw(raw)?,
+        "FlateDecode" | "LZWDecode" => {
+            let (data, used) = if &*f.name == "FlateDecode" { flate(raw)? } else { lzw(raw)? };
+            match f.predictor {
+                Some(p) => (p.undo(&data), used),
+                None => (data, used),
+            }
+        }
        "DCTDecode" => {
            let (d, used, channels) = dct(raw)?;
            return Ok((d, used, Some(channels)));
@@ -202,13 +303,15 @@ fn decode(f: &Filter, raw: &[u8]) -> Res<(Vec<u8>, usize, Option<u8>)> {
                }
            }
        }
-        "NullEncode" => (raw.to_vec(), raw.len()),
+        // Reads all of its source (up to the end of the filters below it) and keeps it.
+        "NullEncode" | "ReusableStreamDecode" => (raw.to_vec(), raw.len()),
        other => return ps_err("undefined", other),
    };
    Ok((data, used, None))
 }

 /// What a source of image data gives.
+#[derive(Clone)]
 enum Source {
    File(Rc<RefCell<Stream>>),
    Str(Vec<u8>),
@@ -263,9 +366,74 @@ impl Interp<'_> {
            }
            File => {
                self.pop()?;
-                self.pop()?;
-                return ps_err("invalidfileaccess", "file");
+                let name = self.pop()?.text().unwrap_or_else(|| Rc::from(""));
+                // The standard files take what programs print (and give nothing); there is no
+                // file system to open others in.
+                if !matches!(&*name, "%stdout" | "%stderr" | "%stdin" | "%lineedit" | "%statementedit") {
+                    return ps_err("invalidfileaccess", "file");
+                }
+                self.push(Obj::File { stream: Rc::new(RefCell::new(Stream::Buf { data: vec![], pos: 0, rgb: None })), exec: false })?;
            }
+            Status => match self.pop()? {
+                Obj::File { .. } => self.push(Obj::Bool(true))?,
+                // A file name: there are no files.
+                Obj::Str(_) => self.push(Obj::Bool(false))?,
+                _ => return ps_err("typecheck", ""),
+            },
+            BytesAvailable => {
+                let Obj::File { stream: f, .. } = self.pop()? else { return ps_err("typecheck", "") };
+                self.materialize(&f)?;
+                let n = match &*f.borrow() {
+                    Stream::Current => self.lex.rest().len(),
+                    Stream::Buf { data, pos, .. } => data.len().saturating_sub(*pos),
+                    Stream::Pending(_) => 0,
+                };
+                self.push(Obj::Int(n as i64))?;
+            }
+            ResetFile => {
+                // A decoded (reusable) stream reads again from its start.
+                if let Obj::File { stream: f, .. } = self.pop()?
+                    && let Stream::Buf { pos, .. } = &mut *f.borrow_mut()
+                {
+                    *pos = 0;
+                }
+            }
+            Write | WriteString | WriteHexString => {
+                self.pop()?;
+                self.pop()?;
+            }
+            Read => {
+                let Obj::File { stream: f, .. } = self.pop()? else { return ps_err("typecheck", "") };
+                match self.read(&f, 1)?.first() {
+                    Some(b) => {
+                        self.push(Obj::Int(i64::from(*b)))?;
+                        self.push(Obj::Bool(true))?;
+                    }
+                    None => self.push(Obj::Bool(false))?,
+                }
+            }
+            FilePosition => {
+                let Obj::File { stream: f, .. } = self.pop()? else { return ps_err("typecheck", "") };
+                let Stream::Buf { pos, .. } = &*f.borrow() else { return ps_err("ioerror", "") };
+                self.push(Obj::Int(*pos as i64))?;
+            }
+            SetFilePosition => {
+                let at = self.pop_count()?;
+                let Obj::File { stream: f, .. } = self.pop()? else { return ps_err("typecheck", "") };
+                let Stream::Buf { data, pos, .. } = &mut *f.borrow_mut() else { return ps_err("ioerror", "") };
+                *pos = at.min(data.len());
+            }
+            // There are no files to delete, rename or run.
+            DeleteFile | Run => {
+                self.pop_str()?;
+                return ps_err("undefinedfilename", "");
+            }
+            RenameFile => {
+                self.pop_str()?;
+                self.pop_str()?;
+                return ps_err("undefinedfilename", "");
+            }
+            Token => self.token()?,
            Eexec => self.eexec()?,
            Image | ImageMask | ColorImage => self.image(op)?,
            _ => self.text_op(op)?,
@@ -273,6 +441,41 @@ impl Interp<'_> {
        Ok(())
    }

+    /// `token`: the next object read from a string (and the rest of it) or a file.
+    fn token(&mut self) -> Res {
+        match self.pop()? {
+            Obj::Str(s) => {
+                let bytes = s.to_vec();
+                let mut lex = Lexer::new(&bytes);
+                let Some(o) = lex.next()? else { return self.push(Obj::Bool(false)) };
+                let o = self.scanned(o, lex.immediate)?;
+                // The whitespace after the token is read with it.
+                let used = bytes.len() - lex.data().len();
+                self.push_interval(Obj::Str(s), used, bytes.len() - used)?;
+                self.push(o)?;
+            }
+            Obj::File { stream: f, .. } => {
+                self.materialize(&f)?;
+                let (o, immediate) = match &mut *f.borrow_mut() {
+                    Stream::Current => (self.lex.next()?, self.lex.immediate),
+                    Stream::Buf { data, pos, .. } => {
+                        let rest = data.get(*pos..).unwrap_or_default();
+                        let mut lex = Lexer::new(rest);
+                        let o = lex.next()?;
+                        *pos += rest.len() - lex.data().len();
+                        (o, lex.immediate)
+                    }
+                    Stream::Pending(_) => (None, false),
+                };
+                let Some(o) = o else { return self.push(Obj::Bool(false)) };
+                let o = self.scanned(o, immediate)?;
+                self.push(o)?;
+            }
+            _ => return ps_err("typecheck", "token"),
+        }
+        self.push(Obj::Bool(true))
+    }
+
    /// Up to `n` bytes of file `f`.
    fn read(&mut self, f: &Rc<RefCell<Stream>>, n: usize) -> Res<Vec<u8>> {
        self.materialize(f)?;
@@ -328,14 +531,13 @@ impl Interp<'_> {
        } else {
            (0, vec![])
        };
+        let mut predictor = None;
        if let Some(Obj::Dict(d)) = self.stack.last().cloned() {
            self.pop()?;
-            let predictor = d.borrow().get(&Key::name("Predictor")).and_then(Obj::as_num).unwrap_or(1.0);
-            if predictor > 1.0 {
-                return ps_err("undefined", "a filter predictor");
-            }
+            predictor = Predictor::of(&d)?;
        }
-        let spec = Filter { name, sub };
+        let spec_name = name.clone();
+        let spec = Filter { name, sub, predictor };
        let stream = match self.pop()? {
            Obj::File { stream: f, .. } => {
                if let Stream::Buf { data, pos, .. } = &*f.borrow() {
@@ -377,7 +579,12 @@ impl Interp<'_> {
            }
            _ => return ps_err("typecheck", "filter"),
        };
-        self.push(Obj::File { stream: Rc::new(RefCell::new(stream)), exec: false })
+        let stream = Rc::new(RefCell::new(stream));
+        // A reusable stream reads its source when it is made: the data follows the operator.
+        if &*spec_name == "ReusableStreamDecode" {
+            self.materialize(&stream)?;
+        }
+        self.push(Obj::File { stream, exec: false })
    }

    /// The data an executable file runs as a program: what is left of it. `None` for the
@@ -389,6 +596,15 @@ impl Interp<'_> {
        self.read(f, MAX_DATA).map(Some)
    }

+    /// The decoded data left in file `f`, without reading it (a shading's or function's data).
+    pub(super) fn peek_all(&mut self, f: &Rc<RefCell<Stream>>) -> Res<Vec<u8>> {
+        self.materialize(f)?;
+        Ok(match &*f.borrow() {
+            Stream::Buf { data, pos, .. } => data.get(*pos..).unwrap_or_default().to_vec(),
+            _ => vec![],
+        })
+    }
+
    /// Decode the filters a file waits to run over the program's data, from where it is now.
    fn materialize(&mut self, f: &Rc<RefCell<Stream>>) -> Res {
        let chain = match &*f.borrow() {
@@ -467,17 +683,79 @@ impl Interp<'_> {

    fn image(&mut self, op: Op) -> Res {
        let mask = op == Op::ImageMask;
-        let spec = match self.stack.last() {
+        let img = match self.stack.last() {
            Some(Obj::Dict(_)) if op != Op::ColorImage => {
                let d = self.pop_dict()?;
-                self.image_dict(&d, mask)?
+                let kind = d.borrow().get(&Key::name("ImageType")).and_then(Obj::as_num);
+                if kind == Some(3.0) && !mask {
+                    self.masked_image(&d)?
+                } else {
+                    let spec = self.image_dict(&d, mask)?;
+                    self.decode_image(spec)?
+                }
+            }
+            _ => {
+                let spec = self.image_operands(op)?;
+                self.decode_image(spec)?
            }
-            _ => self.image_operands(op)?,
        };
-        let Some(img) = self.decode_image(spec)? else { return Ok(()) };
+        let Some(img) = img else { return Ok(()) };
        self.place_image(img)
    }

+    /// ImageType 3: an image and the mask that says where it paints (where the mask's samples
+    /// read below one half through its `Decode`, as an image mask paints its 0 bits), in separate
+    /// sources (`InterleaveType` 3) or interleaved with the image's by row (2) or by sample (1).
+    fn masked_image(&mut self, d: &DictRef) -> Res<Option<Pixels>> {
+        let get = |k: &str| d.borrow().get(&Key::name(k)).cloned();
+        let (Some(Obj::Dict(data)), Some(Obj::Dict(mask))) = (get("DataDict"), get("MaskDict")) else {
+            return ps_err("typecheck", "ImageType 3");
+        };
+        let interleave = get("InterleaveType").and_then(|o| o.as_num()).unwrap_or(1.0);
+        let mut image = self.image_dict(&data, false)?;
+        let mut stencil = self.image_dict(&mask, false)?;
+        stencil.space = Space::Gray;
+        let n = image.space.n();
+        if image.w.saturating_mul(image.h) > MAX_PIXELS || stencil.w.saturating_mul(stencil.h) > MAX_PIXELS {
+            self.out.warn(TOO_LARGE);
+            return Ok(None);
+        }
+        if interleave != 3.0 {
+            let src = image.sources.first().cloned().ok_or(PsError::Ps("undefined", "DataSource".into()))?;
+            let (pixels, samples) = if interleave == 2.0 {
+                let (mrow, drow) = (stencil.row_bytes(1), image.row_bytes(n));
+                let total = mrow.saturating_mul(stencil.h).saturating_add(drow.saturating_mul(image.h));
+                self.alloc(total)?;
+                let raw = self.source_bytes(&src, total.min(MAX_DATA))?;
+                by_rows(&raw, (mrow, stencil.h), (drow, image.h))
+            } else {
+                // Each sample: the mask's value, then the colour's, as many bits each.
+                stencil.bpc = image.bpc;
+                (stencil.w, stencil.h) = (image.w, image.h);
+                let row = (image.w * (n + 1) * usize::from(image.bpc)).div_ceil(8);
+                self.alloc(row.saturating_mul(image.h))?;
+                let raw = self.source_bytes(&src, row.saturating_mul(image.h).min(MAX_DATA))?;
+                by_samples(&raw, image.w, image.h, n, image.bpc)
+            };
+            stencil.sources = vec![Source::Str(pixels)];
+            image.sources = vec![Source::Str(samples)];
+        }
+        let Some(mut img) = self.decode_image(image)? else { return Ok(None) };
+        let Some(m) = self.decode_image(stencil)? else { return Ok(Some(img)) };
+        let (w, h, mw, mh) = (img.w as usize, img.h as usize, m.w as usize, m.h as usize);
+        for (i, px) in img.rgba.chunks_exact_mut(4).enumerate() {
+            let (x, y) = (i % w, i / w);
+            // The mask's pixel over this one (in 64 bits: rows times rows overflow 32).
+            let at = (y as u64 * mh as u64 / h.max(1) as u64) * mw as u64 + x as u64 * mw as u64 / w.max(1) as u64;
+            if usize::try_from(at * 4).ok().and_then(|i| m.rgba.get(i)).is_none_or(|v| *v >= 128)
+                && let Some(a) = px.get_mut(3)
+            {
+                *a = 0;
+            }
+        }
+        Ok(Some(img))
+    }
+
    /// The dictionary form of `image` and `imagemask`.
    fn image_dict(&mut self, d: &DictRef, mask: bool) -> Res<Spec> {
        let get = |k: &str| d.borrow().get(&Key::name(k)).cloned();
@@ -494,10 +772,10 @@ impl Interp<'_> {
        let decode: Vec<f64> = get("Decode").and_then(|o| o.items().map(|i| i.borrow().iter().filter_map(Obj::as_num).collect())).unwrap_or_default();
        let space = if mask { Space::Gray } else { (*self.g.space).clone() };
        let multi = get("MultipleDataSources").is_some_and(|o| matches!(o, Obj::Bool(true)));
-        let src = get("DataSource").ok_or(PsError::Ps("undefined", "DataSource".into()))?;
-        let sources = match (&src, multi) {
-            (Obj::Array { items, exec: false }, true) => items.borrow().iter().map(source).collect::<Res<Vec<_>>>()?,
-            _ => vec![source(&src)?],
+        let sources = match (get("DataSource"), multi) {
+            (None, _) => vec![],
+            (Some(Obj::Array { items, exec: false }), true) => items.borrow().iter().map(source).collect::<Res<Vec<_>>>()?,
+            (Some(src), _) => vec![source(&src)?],
        };
        let mask_color: Option<Vec<u32>> = (kind == 4.0)
            .then(|| {
@@ -544,7 +822,7 @@ impl Interp<'_> {
            return ps_err("rangecheck", "BitsPerComponent");
        }
        if s.w.saturating_mul(s.h) > MAX_PIXELS {
-            self.out.warn("images too large to read were left out");
+            self.out.warn(TOO_LARGE);
            return Ok(None);
        }
        self.alloc(s.w * s.h * 4)?;
@@ -667,6 +945,9 @@ impl Interp<'_> {
        if !xf.as_coeffs().iter().all(|v| v.is_finite()) || xf.determinant().abs() < 1e-12 {
            return Ok(());
        }
+        if self.g.null {
+            return Ok(());
+        }
        let Some(rgba) = image::RgbaImage::from_raw(img.w, img.h, img.rgba) else { return Ok(()) };
        let mut png = vec![];
        if rgba.write_to(&mut std::io::Cursor::new(&mut png), image::ImageFormat::Png).is_err() {
@@ -700,6 +981,65 @@ struct Spec {
    stencil: Option<bool>,
 }

+impl Spec {
+    /// Bytes a row of `n` components takes.
+    fn row_bytes(&self, n: usize) -> usize {
+        (self.w * n * usize::from(self.bpc)).div_ceil(8)
+    }
+}
+
+/// Data of an ImageType 3 interleaved by row, split into the mask's and the image's: the one
+/// with fewer rows gives one row before each run of the other's (`(row bytes, rows)` each).
+fn by_rows(raw: &[u8], (mrow, mh): (usize, usize), (drow, dh): (usize, usize)) -> (Vec<u8>, Vec<u8>) {
+    let room = |row: usize, rows: usize| row.saturating_mul(rows).min(raw.len());
+    let (mut mask, mut data) = (Vec::with_capacity(room(mrow, mh)), Vec::with_capacity(room(drow, dh)));
+    let mut at = 0;
+    let mut take = |into: &mut Vec<u8>, n: usize| {
+        into.extend_from_slice(raw.get(at..at + n).unwrap_or_default());
+        at += n;
+    };
+    let (blocks, masks, rows) = if mh >= dh { (dh, mh / dh.max(1), 1) } else { (mh, 1, dh / mh.max(1)) };
+    for _ in 0..blocks {
+        for _ in 0..masks {
+            take(&mut mask, mrow);
+        }
+        for _ in 0..rows {
+            take(&mut data, drow);
+        }
+    }
+    (mask, data)
+}
+
+/// Data of an ImageType 3 interleaved by sample (the mask's value first, then `n` colour
+/// components, `bpc` bits each, rows from whole bytes), split into the mask's and the image's.
+fn by_samples(raw: &[u8], w: usize, h: usize, n: usize, bpc: u8) -> (Vec<u8>, Vec<u8>) {
+    let bpc = usize::from(bpc);
+    let bit = |at: usize| raw.get(at / 8).is_some_and(|b| b & (0x80 >> (at % 8)) != 0);
+    let (mrow, drow, row) = ((w * bpc).div_ceil(8), (w * n * bpc).div_ceil(8), (w * (n + 1) * bpc).div_ceil(8));
+    let (mut mask, mut data) = (vec![0u8; mrow * h], vec![0u8; drow * h]);
+    let put = |into: &mut [u8], at: usize| {
+        if let Some(b) = into.get_mut(at / 8) {
+            *b |= 0x80 >> (at % 8);
+        }
+    };
+    for y in 0..h {
+        for x in 0..w {
+            let from = y * row * 8 + x * (n + 1) * bpc;
+            for k in 0..bpc {
+                if bit(from + k) {
+                    put(&mut mask, y * mrow * 8 + x * bpc + k);
+                }
+            }
+            for k in 0..n * bpc {
+                if bit(from + bpc + k) {
+                    put(&mut data, y * drow * 8 + x * n * bpc + k);
+                }
+            }
+        }
+    }
+    (mask, data)
+}
+
 /// Decoded pixels.
 struct Pixels {
    w: u32,
@@ -8,11 +8,12 @@ use kurbo::{PathEl, Shape};
 use vectorcraft_color::swatch::REGISTRATION;
 use vectorcraft_color::{Color, Gradient, GradientGeom, GradientKind, GradientPaint, GradientStop, Paint};
 use vectorcraft_doc::clipnest::{Clip, Drawn, MAX_NEST, deep_clips};
+use vectorcraft_doc::pattern::PatternDef;
 use vectorcraft_doc::{Appearance, AppearanceItem, Dash, Document, FillLayer, LineCap, LineJoin, Node, NodeId, NodeKind, StrokeLayer};
 use vectorcraft_geom::{Affine, BezPath, FillRule, PathData, Point, Rect, Vec2};

 use super::interp::{Interp, MAX_GSAVE, matrix_obj};
-use super::obj::{DictRef, Key, Obj, Op, PsError, Res, ps_err};
+use super::obj::{DictRef, Key, Obj, Op, PsError, Res, Shared, ps_err};

 /// Most objects one file makes.
 const MAX_NODES: usize = 1 << 20;
@@ -21,6 +22,10 @@ const MAX_NODES: usize = 1 << 20;
 const LIMIT: f64 = 1e6;
 /// Width of a zero-width line (the thinnest a device draws), points.
 const HAIRLINE: f64 = 0.25;
+/// Most inks a `DeviceN` space has (PostScript's own limit).
+const MAX_INKS: usize = 32;
+/// Most dashes `strokepath` makes of a path (more and it outlines the path undashed).
+const MAX_DASHES: f64 = 1e5;
 /// Most entries an indexed colour space's table has.
 const MAX_HIVAL: usize = 4095;
 /// Most elements the current path may have.
@@ -32,8 +37,11 @@ const SHADING_SAMPLES: usize = 32;

 const FAR_AWAY: &str = "objects far outside the page were left out";
 const TOO_MUCH: &str = "the file draws more than VectorCraft reads: the rest was left out";
-const TILING_PATTERNS: &str = "pattern fills are filled with mid-grey";
-const SAMPLED_FUNCTIONS: &str = "shadings whose colours come from sampled functions are filled with their middle colour";
+const NESTED_PATTERNS: &str = "patterns nested too deeply are filled with mid-grey";
+/// Deepest patterns and glyph procedures drawn inside each other's art.
+pub(crate) const MAX_APART: u32 = 8;
+const UNKNOWN_FUNCTIONS: &str = "shadings whose functions are of an unknown type are filled with their middle colour";
+const UNKNOWN_SHADINGS: &str = "shadings of an unknown type were left out";

 /// A colour space.
 #[derive(Clone, Debug)]
@@ -51,14 +59,15 @@ pub(crate) enum Space {
        base: Rc<Space>,
        table: Rc<Vec<f64>>,
    },
-    Pattern,
+    /// Patterns; an uncoloured one paints in a colour of the underlying space.
+    Pattern(Option<Rc<Space>>),
 }

 impl Space {
    /// Components a colour has in it.
    pub fn n(&self) -> usize {
        match self {
-            Self::Gray | Self::Indexed { .. } | Self::Pattern => 1,
+            Self::Gray | Self::Indexed { .. } | Self::Pattern(_) => 1,
            Self::Rgb => 3,
            Self::Cmyk => 4,
            Self::Inks { names, .. } => names.len().max(1),
@@ -110,6 +119,11 @@ pub(crate) struct GState {
    pub saved_clips: Vec<Rc<[Arc<Clip>]>>,
    pub overprint: bool,
    pub font: Option<DictRef>,
+    /// `nulldevice`: painting draws nothing.
+    pub null: bool,
+    /// The colour is a shading pattern whose shading is a mesh: a fill paints it (the shading
+    /// and pattern space → the document).
+    pub mesh: Option<(DictRef, Affine)>,
 }

 impl Default for GState {
@@ -133,6 +147,8 @@ impl Default for GState {
            saved_clips: vec![],
            overprint: false,
            font: None,
+            null: false,
+            mesh: None,
        }
    }
 }
@@ -165,6 +181,12 @@ pub(crate) struct Out {
    /// Rectangles painted with a shading (`shfill`): a clipping group of one is the clip path
    /// filled with it.
    pub shadings: Vec<NodeId>,
+    /// Tiling patterns made into pattern swatches: the pattern's `PaintProc` (a pattern made
+    /// again with `makepattern` shares it) and cell, the colour an uncoloured one painted in, and
+    /// the swatch's name.
+    tilings: Vec<(Shared<Obj>, Rect, Option<Paint>, String)>,
+    /// How deep art drawn apart (a pattern's cell, a Type 3 glyph) is nested.
+    pub apart: u32,
 }

 fn sane(r: Rect) -> bool {
@@ -188,6 +210,8 @@ impl Out {
            rgb: 0,
            spots: vec![],
            shadings: vec![],
+            tilings: vec![],
+            apart: 0,
        }
    }

@@ -219,7 +243,7 @@ impl Out {

    /// The chain an object drawn under `clips` is drawn in: the clips and the groups open, in the
    /// order they opened.
-    fn chain(&self, clips: &[Arc<Clip>]) -> Vec<Arc<Clip>> {
+    pub fn chain(&self, clips: &[Arc<Clip>]) -> Vec<Arc<Clip>> {
        if self.groups.is_empty() {
            return clips.to_vec();
        }
@@ -486,18 +510,36 @@ impl Interp<'_> {

    // ---------- painting ----------

-    fn fill_path(&mut self, bp: BezPath, rule: FillRule) {
-        if bp.elements().is_empty() || self.g.paint.is_none() {
-            return;
+    fn fill_path(&mut self, bp: BezPath, rule: FillRule) -> Res {
+        if bp.elements().is_empty() || self.g.null {
+            return Ok(());
+        }
+        // A mesh pattern paints its shading inside the path.
+        if let Some((sh, m)) = self.g.mesh.clone() {
+            let clips = self.g.clips.clone();
+            self.clip_with(bp, rule);
+            let r = self.mesh_fill(&sh, m);
+            self.g.clips = clips;
+            return r;
+        }
+        if self.g.paint.is_none() {
+            return Ok(());
        }
        let (paint, overprint) = (self.g.paint.clone(), self.g.overprint);
        self.out.fill(bp, rule, paint, overprint, &self.g.clips);
+        Ok(())
    }

    fn stroke_path(&mut self, bp: BezPath) {
-        if bp.elements().is_empty() || self.g.paint.is_none() {
+        if bp.elements().is_empty() || self.g.paint.is_none() || self.g.null {
            return;
        }
+        let st = self.stroke_layer();
+        self.out.stroke(bp, st, &self.g.clips);
+    }
+
+    /// The stroke the graphics state draws, in document space.
+    fn stroke_layer(&self) -> StrokeLayer {
        let k = self.scale();
        let w = self.g.width * k;
        let mut st = StrokeLayer::new(self.g.paint.clone(), if w > 0.0 && w.is_finite() { w } else { HAIRLINE });
@@ -508,10 +550,171 @@ impl Interp<'_> {
        let pattern: Vec<f64> = self.g.dash.iter().map(|d| d * k).collect();
        let dash = Dash { pattern, offset: self.g.dash_offset * k, align_corners: false };
        st.dash = dash.is_dashed().then_some(dash);
-        self.out.stroke(bp, st, &self.g.clips);
+        st
    }

-    fn take_path(&mut self) -> BezPath {
+    /// The current path in user space, each element as its operator and points (quadratic
+    /// segments as cubic ones).
+    fn user_elements(&self) -> Res<Vec<(Op, Vec<Point>)>> {
+        let xf = self.xf();
+        if xf.determinant().abs() < 1e-12 {
+            return ps_err("undefinedresult", "");
+        }
+        let inv = xf.inverse();
+        let mut last = Point::ZERO;
+        let mut out = Vec::with_capacity(self.g.path.elements().len());
+        for el in self.g.path.elements() {
+            let (op, pts) = match *el {
+                PathEl::MoveTo(p) => (Op::MoveTo, vec![p]),
+                PathEl::LineTo(p) => (Op::LineTo, vec![p]),
+                PathEl::QuadTo(a, p) => (Op::CurveTo, vec![last + (a - last) * (2.0 / 3.0), p + (a - p) * (2.0 / 3.0), p]),
+                PathEl::CurveTo(a, b, p) => (Op::CurveTo, vec![a, b, p]),
+                PathEl::ClosePath => (Op::ClosePath, vec![]),
+            };
+            last = pts.last().copied().unwrap_or(last);
+            out.push((op, pts.into_iter().map(|p| inv * p).collect()));
+        }
+        Ok(out)
+    }
+
+    /// `pathforall`: the current path in user space, each element through its procedure.
+    fn path_for_all(&mut self) -> Res {
+        let close = self.pop_proc()?;
+        let curve = self.pop_proc()?;
+        let line = self.pop_proc()?;
+        let mv = self.pop_proc()?;
+        for (op, pts) in self.user_elements()? {
+            for p in pts {
+                self.push_num(p.x)?;
+                self.push_num(p.y)?;
+            }
+            let proc = match op {
+                Op::MoveTo => &mv,
+                Op::LineTo => &line,
+                Op::CurveTo => &curve,
+                _ => &close,
+            };
+            if !self.body(proc)? {
+                break;
+            }
+        }
+        Ok(())
+    }
+
+    /// Append user path `up` to the current path: a procedure of path operators, or the encoded
+    /// form (numbers and a string of operator codes).
+    fn user_path(&mut self, up: Obj) -> Res {
+        let items = up.items().cloned().ok_or(PsError::Ps("typecheck", "a user path".into()))?;
+        let encoded = match (items.get(0), items.get(1), items.len()) {
+            (Some(nums @ (Obj::Array { .. } | Obj::Str(_))), Some(Obj::Str(ops)), 2) => Some((nums, ops.to_vec())),
+            _ => None,
+        };
+        let Some((nums, ops)) = encoded else { return self.call(Obj::Array { items, exec: true }) };
+        // The operators by code, with how many operands each takes.
+        const OPS: [(Op, usize); 12] = [
+            (Op::SetBBox, 4),
+            (Op::MoveTo, 2),
+            (Op::RMoveTo, 2),
+            (Op::LineTo, 2),
+            (Op::RLineTo, 2),
+            (Op::CurveTo, 6),
+            (Op::RCurveTo, 6),
+            (Op::Arc, 5),
+            (Op::Arcn, 5),
+            (Op::Arct, 5),
+            (Op::ClosePath, 0),
+            (Op::UCache, 0),
+        ];
+        let nums: Vec<f64> = match nums {
+            Obj::Array { items, .. } => items.borrow().iter().filter_map(Obj::as_num).collect(),
+            _ => return ps_err("typecheck", "an encoded user path"),
+        };
+        let mut next = nums.into_iter();
+        let mut repeat = 1usize;
+        for code in ops {
+            if code >= 32 {
+                repeat = usize::from(code - 32);
+                continue;
+            }
+            let &(op, n) = OPS.get(usize::from(code)).ok_or(PsError::Ps("rangecheck", "a user path".into()))?;
+            for _ in 0..std::mem::replace(&mut repeat, 1) {
+                for _ in 0..n {
+                    let v = next.next().ok_or(PsError::Ps("rangecheck", "a user path".into()))?;
+                    self.push_num(v)?;
+                }
+                self.op(op)?;
+            }
+        }
+        Ok(())
+    }
+
+    /// `ufill`, `ueofill`, `ustroke` (with an optional matrix): paint a user path, keeping the
+    /// current path.
+    fn paint_user_path(&mut self, op: Op) -> Res {
+        let m = match (op, self.stack.last()) {
+            (Op::UStroke, Some(Obj::Array { items, exec: false })) if items.len() == 6 && self.stack.len() >= 2 => Some(self.pop_matrix()?),
+            _ => None,
+        };
+        let up = self.pop()?;
+        self.gsave()?;
+        let depth = self.saved.len();
+        self.take_path();
+        let r = self.user_path(up).and_then(|()| {
+            if let Some(m) = m {
+                self.g.ctm *= m;
+            }
+            let bp = self.take_path();
+            match op {
+                Op::UStroke => {
+                    self.stroke_path(bp);
+                    Ok(())
+                }
+                _ => self.fill_path(bp, if op == Op::UEoFill { FillRule::EvenOdd } else { FillRule::NonZero }),
+            }
+        });
+        self.saved.truncate(depth);
+        self.grestore();
+        r
+    }
+
+    /// `upath`: the current path as a user path (a procedure, in user space).
+    fn upath(&mut self) -> Res {
+        self.pop_bool()?;
+        let elements = self.user_elements()?;
+        let b = self.xf().inverse().transform_rect_bbox(self.g.path.bounding_box());
+        let mut items: Vec<Obj> = [b.x0, b.y0, b.x1, b.y1].into_iter().map(Obj::Real).collect();
+        items.push(Obj::Op(Op::SetBBox));
+        for (op, pts) in elements {
+            items.extend(pts.iter().flat_map(|p| [Obj::Real(p.x), Obj::Real(p.y)]));
+            items.push(Obj::Op(op));
+        }
+        self.alloc(items.len() * std::mem::size_of::<Obj>())?;
+        self.push(Obj::proc(items))
+    }
+
+    /// `execform`: the form's `PaintProc` run with its matrix, clipped to its box.
+    fn exec_form(&mut self) -> Res {
+        let d = self.pop_dict()?;
+        let get = |k: &str| d.borrow().get(&Key::name(k)).cloned();
+        let m = get("Matrix").and_then(|o| o.items().and_then(|i| super::interp::matrix_of(&i.borrow()))).unwrap_or(Affine::IDENTITY);
+        let bbox: Vec<f64> = get("BBox").and_then(|o| o.items().map(|i| i.borrow().iter().filter_map(Obj::as_num).collect())).unwrap_or_default();
+        let paint = get("PaintProc").ok_or(PsError::Ps("undefined", "PaintProc".into()))?;
+        self.gsave()?;
+        let depth = self.saved.len();
+        self.g.ctm *= m;
+        if let [x0, y0, x1, y1] = bbox[..] {
+            let bp = self.rect_path(x0, y0, x1 - x0, y1 - y0);
+            self.take_path();
+            self.clip_with(bp, FillRule::NonZero);
+        }
+        self.push(Obj::Dict(d))?;
+        let r = self.call(paint);
+        self.saved.truncate(depth);
+        self.grestore();
+        r
+    }
+
+    pub(super) fn take_path(&mut self) -> BezPath {
        self.g.cur = None;
        self.g.start = None;
        std::mem::take(&mut self.g.path)
@@ -534,7 +737,7 @@ impl Interp<'_> {
    // ---------- colour ----------

    /// A colour space operand.
-    fn space_of(&mut self, o: &Obj, depth: u32) -> Res<Space> {
+    pub(super) fn space_of(&mut self, o: &Obj, depth: u32) -> Res<Space> {
        if depth > 4 {
            return ps_err("limitcheck", "setcolorspace");
        }
@@ -552,7 +755,10 @@ impl Interp<'_> {
            "DeviceGray" | "CIEBasedA" | "CalGray" => Space::Gray,
            "DeviceRGB" | "CIEBasedABC" | "CalRGB" | "Lab" | "CIEBasedDEF" => Space::Rgb,
            "DeviceCMYK" | "CIEBasedDEFG" => Space::Cmyk,
-            "Pattern" => Space::Pattern,
+            "Pattern" => Space::Pattern(match items.get(1) {
+                Some(base) => Some(Rc::new(self.space_of(base, depth + 1)?)),
+                None => None,
+            }),
            "ICCBased" => match arg(1)? {
                Obj::Dict(d) => match d.borrow().get(&Key::name("N")).and_then(Obj::as_num) {
                    Some(1.0) => Space::Gray,
@@ -566,6 +772,9 @@ impl Interp<'_> {
                    Obj::Array { items, .. } => items.borrow().iter().filter_map(Obj::text).collect(),
                    o => o.text().into_iter().collect(),
                };
+                if names.len() > MAX_INKS {
+                    return ps_err("limitcheck", "DeviceN");
+                }
                let alt = self.space_of(&arg(2)?, depth + 1)?;
                Space::Inks { names, alt: Rc::new(alt), tint: arg(3)? }
            }
@@ -608,6 +817,7 @@ impl Interp<'_> {
    /// Set the colour to `comps` in the current space.
    fn set_comps(&mut self, comps: Vec<f64>) -> Res {
        let space = self.g.space.clone();
+        self.g.mesh = None;
        self.g.paint = self.paint_of(&space, &comps)?;
        self.g.comps = comps;
        Ok(())
@@ -650,7 +860,7 @@ impl Interp<'_> {
                let c = table.get(i * n..i * n + n).ok_or(PsError::Ps("rangecheck", "setcolor".into()))?.to_vec();
                Paint::solid(process(base, &c).unwrap_or(Color::BLACK))
            }
-            Space::Pattern => Paint::None,
+            Space::Pattern(_) => Paint::None,
            s => Paint::solid(process(s, comps).unwrap_or(Color::BLACK)),
        })
    }
@@ -674,29 +884,119 @@ impl Interp<'_> {
        self.g.paint.color().map_or([0.0; 3], |c| c.to_rgb_uncalibrated())
    }

-    /// A pattern colour: a shading pattern's gradient (others mid-grey).
-    fn pattern_paint(&mut self, d: &DictRef) -> Res<Paint> {
+    /// `setcolor` in a pattern space: the pattern operand, and before it an uncoloured
+    /// pattern's colour in the underlying space.
+    fn set_pattern(&mut self, base: Option<Rc<Space>>) -> Res {
+        let Obj::Dict(d) = self.pop()? else { return ps_err("typecheck", "") };
+        let uncoloured = d.borrow().get(&Key::name("PaintType")).and_then(Obj::as_num) == Some(2.0);
+        let under = match base.filter(|_| uncoloured) {
+            Some(base) => {
+                let mut c = vec![0.0; base.n()];
+                for slot in c.iter_mut().rev() {
+                    *slot = self.pop_num()?;
+                }
+                Some(self.paint_of(&base, &c)?)
+            }
+            None => None,
+        };
+        self.g.mesh = None;
+        self.g.paint = self.pattern_paint(&d, under)?;
+        Ok(())
+    }
+
+    /// A pattern colour: a shading pattern's gradient, a tiling pattern's swatch (`under`: the
+    /// colour an uncoloured one paints in).
+    fn pattern_paint(&mut self, d: &DictRef, under: Option<Paint>) -> Res<Paint> {
        let kind = d.borrow().get(&Key::name("PatternType")).and_then(Obj::as_num);
        let sh = d.borrow().get(&Key::name("Shading")).cloned();
+        let m = d.borrow().get(&Key::name("VCMatrix")).and_then(|o| o.items().and_then(|i| super::interp::matrix_of(&i.borrow())));
+        // Pattern space → the document.
+        let m = self.out.page * m.unwrap_or(self.g.ctm);
        match (kind, sh) {
-            (Some(2.0), Some(Obj::Dict(sh))) => {
-                let m = d.borrow().get(&Key::name("VCMatrix")).and_then(|o| o.items().and_then(|i| super::interp::matrix_of(&i.borrow())));
-                let m = self.out.page * m.unwrap_or(self.g.ctm);
-                Ok(self.gradient(&sh, m)?.map_or(Paint::None, |g| Paint::Gradient(Box::new(g))))
-            }
-            _ => {
-                self.out.warn(TILING_PATTERNS);
-                Ok(Paint::solid(Color::gray(0.5)))
+            (Some(2.0), Some(Obj::Dict(sh))) if is_mesh(&sh) => {
+                self.g.mesh = Some((sh, m));
+                Ok(Paint::None)
            }
+            (Some(2.0), Some(Obj::Dict(sh))) => Ok(self.gradient(&sh, m)?.map_or(Paint::None, |g| Paint::Gradient(Box::new(g)))),
+            (Some(2.0), _) => ps_err("typecheck", "Shading"),
+            _ => self.tiling(d, under, m),
        }
    }

+    /// A tiling pattern as a pattern swatch (made the first time): its `PaintProc` drawn in
+    /// pattern space, one cell of `XStep` × `YStep` from the corner of its `BBox`; `m` maps pattern
+    /// space onto the document.
+    fn tiling(&mut self, d: &DictRef, under: Option<Paint>, m: Affine) -> Res<Paint> {
+        let get = |k: &str| d.borrow().get(&Key::name(k)).cloned();
+        let bbox: Vec<f64> = get("BBox").and_then(|o| o.items().map(|i| i.borrow().iter().filter_map(Obj::as_num).collect())).unwrap_or_default();
+        let [x0, y0, x1, y1] = bbox[..] else { return ps_err("rangecheck", "BBox") };
+        let step = |k: &str| get(k).and_then(|o| o.as_num()).map(f64::abs).filter(|v| v.is_finite() && *v > 1e-9 && *v < LIMIT);
+        let (Some(xs), Some(ys)) = (step("XStep"), step("YStep")) else { return ps_err("rangecheck", "XStep") };
+        let tile = Rect::from_origin_size((x0.min(x1), y0.min(y1)), (xs, ys));
+        let xf = m * Affine::translate(tile.origin().to_vec2());
+        let proc = get("PaintProc").ok_or(PsError::Ps("undefined", "PaintProc".into()))?;
+        let key = proc.items().cloned().ok_or(PsError::Ps("typecheck", "PaintProc".into()))?;
+        if let Some((.., name)) = self.out.tilings.iter().find(|(p, t, u, _)| p.same(&key) && *t == tile && *u == under) {
+            return Ok(Paint::Pattern { pattern: name.clone(), xf });
+        }
+        if self.out.apart >= MAX_APART {
+            self.out.warn(NESTED_PATTERNS);
+            return Ok(Paint::solid(Color::gray(0.5)));
+        }
+        let paint = under.clone();
+        let art = self.draw_apart(Rect::new(x0, y0, x1, y1).abs(), |it| {
+            if let Some(p) = paint {
+                it.g.paint = p;
+            }
+            it.push(Obj::Dict(d.clone()))?;
+            it.call(proc)
+        })?;
+        if art.is_empty() {
+            return Ok(Paint::None);
+        }
+        let name =
+            (self.out.doc.patterns.len() + 1..).map(|i| format!("Pattern {i}")).find(|n| self.out.doc.pattern(n).is_none()).unwrap_or_default();
+        let mut def = PatternDef::new(&name, art);
+        def.tile = tile;
+        self.out.doc.patterns.push(def);
+        self.out.tilings.push((key, tile, under, name.clone()));
+        Ok(Paint::Pattern { pattern: name, xf })
+    }
+
+    /// The art `draw` draws on its own, in its own space (user space is the document's, the page
+    /// `frame`), from a fresh graphics state with the current font: a pattern's cell, a glyph.
+    pub fn draw_apart(&mut self, frame: Rect, draw: impl FnOnce(&mut Self) -> Res) -> Res<Vec<Arc<Node>>> {
+        let fresh = GState { font: self.g.font.clone(), ..GState::default() };
+        let g = std::mem::replace(&mut self.g, fresh);
+        let saved = std::mem::take(&mut self.saved);
+        let drawn = std::mem::take(&mut self.out.drawn);
+        let page = std::mem::replace(&mut self.out.page, Affine::IDENTITY);
+        let frame = std::mem::replace(&mut self.out.frame, frame);
+        let merge = self.out.merge.take();
+        // The art isn't in the groups open around it.
+        let groups = std::mem::take(&mut self.out.groups);
+        let too_deep = std::mem::take(&mut self.out.too_deep);
+        self.out.apart += 1;
+        let r = draw(self);
+        self.out.apart -= 1;
+        let art = std::mem::replace(&mut self.out.drawn, drawn);
+        (self.out.page, self.out.frame, self.out.merge) = (page, frame, merge);
+        (self.out.groups, self.out.too_deep) = (groups, too_deep);
+        (self.g, self.saved) = (g, saved);
+        r?;
+        let mut nodes = vectorcraft_doc::clipnest::nest(&mut self.out.doc, art);
+        if !self.out.shadings.is_empty() {
+            collapse(&mut nodes, &self.out.shadings);
+        }
+        Ok(nodes)
+    }
+
    /// An axial or radial shading as a gradient, `m` mapping its space onto the document.
    fn gradient(&mut self, sh: &DictRef, m: Affine) -> Res<Option<GradientPaint>> {
        let get = |k: &str| sh.borrow().get(&Key::name(k)).cloned();
        let kind = get("ShadingType").and_then(|o| o.as_num()).unwrap_or(0.0);
-        if kind != 2.0 && kind != 3.0 {
-            self.out.warn("shadings other than axial and radial ones (meshes, functions) were left out");
+        if !is_gradient(sh) {
+            self.out.warn(UNKNOWN_SHADINGS);
            return Ok(None);
        }
        let space = self.space_of(&get("ColorSpace").ok_or(PsError::Ps("undefined", "ColorSpace".into()))?, 0)?;
@@ -723,7 +1023,7 @@ impl Interp<'_> {
        let (r0, r1) = (c(2).max(0.0), c(5).max(1e-6));
        let mut stops = Vec::with_capacity(ts.len());
        for t in ts {
-            let comps = self.eval(&f, d0 + (d1 - d0) * t, 0)?;
+            let comps = self.eval(&f, &[d0 + (d1 - d0) * t], 0)?;
            let paint = self.paint_of(&space, &comps)?;
            let offset = if radial { (r0 + (r1 - r0) * t) / r1 } else { t };
            let stop = match paint {
@@ -746,8 +1046,9 @@ impl Interp<'_> {
        Ok(Some(g))
    }

-    /// A function (types 2 and 3; an array of them, one per component) at `t`.
-    fn eval(&mut self, f: &Obj, t: f64, depth: u32) -> Res<Vec<f64>> {
+    /// A function (types 0, 2 and 3; an array of them, one per component) at `x` (types 2 and 3
+    /// take one input).
+    pub fn eval(&mut self, f: &Obj, x: &[f64], depth: u32) -> Res<Vec<f64>> {
        if depth > 8 {
            return ps_err("limitcheck", "Function");
        }
@@ -757,7 +1058,7 @@ impl Interp<'_> {
                let fs = items.to_vec();
                let mut out = vec![];
                for g in &fs {
-                    out.extend(self.eval(g, t, depth + 1)?.first().copied());
+                    out.extend(self.eval(g, x, depth + 1)?.first().copied());
                }
                return Ok(out);
            }
@@ -768,11 +1069,13 @@ impl Interp<'_> {
            o.and_then(|o| o.items().map(|i| i.borrow().iter().filter_map(Obj::as_num).collect())).unwrap_or_default()
        };
        let domain = nums(get("Domain"));
+        let t = x.first().copied().unwrap_or(0.0);
        let t = match domain.as_slice() {
            [a, b, ..] => t.clamp(a.min(*b), a.max(*b)),
            _ => t,
        };
        match get("FunctionType").and_then(|o| o.as_num()) {
+            Some(0.0) => self.sampled(&d, x),
            Some(2.0) => {
                let c0 = nums(get("C0"));
                let c1 = nums(get("C1"));
@@ -792,10 +1095,10 @@ impl Interp<'_> {
                let (e0, e1) = (encode.get(2 * k).copied().unwrap_or(0.0), encode.get(2 * k + 1).copied().unwrap_or(1.0));
                let u = if b != a { e0 + (t - a) / (b - a) * (e1 - e0) } else { e0 };
                let g = fs.get(k).cloned().ok_or(PsError::Ps("rangecheck", "Functions".into()))?;
-                self.eval(&g, u, depth + 1)
+                self.eval(&g, &[u], depth + 1)
            }
            _ => {
-                self.out.warn(SAMPLED_FUNCTIONS);
+                self.out.warn(UNKNOWN_FUNCTIONS);
                let r = nums(get("Range"));
                Ok(r.chunks(2).map(|p| p.iter().sum::<f64>() / 2.0).collect())
            }
@@ -817,7 +1120,82 @@ impl Interp<'_> {
            }
            InitGraphics => {
                let font = self.g.font.take();
-                self.g = GState { font, ..GState::default() };
+                self.g = GState { font, null: self.g.null, ..GState::default() };
+            }
+            NullDevice => {
+                self.g.null = true;
+                self.g.ctm = Affine::IDENTITY;
+                self.g.clips.clear();
+            }
+            ExecForm => self.exec_form()?,
+            StrokePath => {
+                let bp = self.take_path();
+                let mut st = self.stroke_layer();
+                // A dash pattern far finer than the path would make countless pieces.
+                let period: f64 = st.dash.as_ref().map_or(0.0, |d| d.pattern.iter().sum());
+                if st.dash.is_some() && !(period > 0.0 && bp.perimeter(1e-3) / period < MAX_DASHES) {
+                    st.dash = None;
+                }
+                let tol = (0.01 / self.scale().max(1e-9)).clamp(1e-4, 1.0);
+                let outline = vectorcraft_effects::stroke::line_outline(&bp, &st, st.width, tol);
+                if outline.elements().len() >= MAX_PATH {
+                    return Err(PsError::Limit("a path has too many points"));
+                }
+                self.g.cur = outline.elements().iter().rev().find_map(|e| e.end_point());
+                self.g.start = self.g.cur;
+                self.g.path = outline;
+            }
+            PathForAll => self.path_for_all()?,
+            UFill | UEoFill | UStroke => self.paint_user_path(op)?,
+            UAppend => {
+                let up = self.pop()?;
+                self.user_path(up)?;
+            }
+            UPath => self.upath()?,
+            SetBBox => {
+                self.nums::<4>()?;
+            }
+            CurrentHsbColor => {
+                let [r, g, b] = self.current_rgb();
+                let (max, min) = (r.max(g).max(b), r.min(g).min(b));
+                let d = max - min;
+                let h = if d <= 0.0 {
+                    0.0
+                } else if max == r {
+                    ((g - b) / d).rem_euclid(6.0) / 6.0
+                } else if max == g {
+                    ((b - r) / d + 2.0) / 6.0
+                } else {
+                    ((r - g) / d + 4.0) / 6.0
+                };
+                let s = if max > 0.0 { d / max } else { 0.0 };
+                for v in [h, s, max] {
+                    self.push_num(f64::from(v))?;
+                }
+            }
+            CurrentColorRendering => {
+                let d = super::obj::Dict::from([(Key::name("ColorRenderingType"), Obj::Int(1))]);
+                self.push(Obj::dict(d))?;
+            }
+            FindColorRendering => {
+                self.pop()?;
+                self.push(Obj::name("DefaultColorRendering"))?;
+                self.push(Obj::Bool(false))?;
+            }
+            CurrentColorScreen => {
+                for _ in 0..4 {
+                    self.push(Obj::Real(60.0))?;
+                    self.push(Obj::Real(45.0))?;
+                    self.push(Obj::proc(vec![]))?;
+                }
+            }
+            CurrentSmoothness => self.push(Obj::Real(0.02))?,
+            SetHalftonePhase => {
+                self.nums::<2>()?;
+            }
+            CurrentHalftonePhase => {
+                self.push(Obj::Int(0))?;
+                self.push(Obj::Int(0))?;
            }
            GStateNew => self.push(Obj::GState(Rc::new(self.g.clone())))?,
            CurrentGState => {
@@ -905,9 +1283,8 @@ impl Interp<'_> {
                self.push(o)?;
            }
            SetColor => {
-                if matches!(*self.g.space, Space::Pattern) {
-                    let Obj::Dict(d) = self.pop()? else { return ps_err("typecheck", "") };
-                    self.g.paint = self.pattern_paint(&d)?;
+                if let Space::Pattern(base) = &*self.g.space {
+                    self.set_pattern(base.clone())?;
                } else {
                    let n = self.g.space.n();
                    let mut c = vec![0.0; n];
@@ -922,11 +1299,14 @@ impl Interp<'_> {
                    self.push_num(v)?;
                }
            }
+            // `[/Pattern <current space>] setcolorspace setcolor`, unless in a pattern space already.
            SetPattern => {
-                let Obj::Dict(d) = self.pop()? else { return ps_err("typecheck", "") };
-                self.g.space = Rc::new(Space::Pattern);
-                self.g.space_obj = Obj::name("Pattern");
-                self.g.paint = self.pattern_paint(&d)?;
+                if !matches!(*self.g.space, Space::Pattern(_)) {
+                    self.g.space = Rc::new(Space::Pattern(Some(self.g.space.clone())));
+                    self.g.space_obj = Obj::array(vec![Obj::name("Pattern"), self.g.space_obj.clone()]);
+                }
+                let Space::Pattern(base) = &*self.g.space else { return ps_err("typecheck", "") };
+                self.set_pattern(base.clone())?;
            }
            MakePattern => {
                let m = self.pop_matrix()?;
@@ -1181,7 +1561,7 @@ impl Interp<'_> {
            }
            Fill | EoFill => {
                let bp = self.take_path();
-                self.fill_path(bp, if op == EoFill { FillRule::EvenOdd } else { FillRule::NonZero });
+                self.fill_path(bp, if op == EoFill { FillRule::EvenOdd } else { FillRule::NonZero })?;
            }
            Stroke => {
                let bp = self.take_path();
@@ -1189,7 +1569,7 @@ impl Interp<'_> {
            }
            RectFill => {
                let bp = self.rects()?;
-                self.fill_path(bp, FillRule::NonZero);
+                self.fill_path(bp, FillRule::NonZero)?;
            }
            RectStroke => {
                let m = match self.stack.last() {
@@ -1205,6 +1585,13 @@ impl Interp<'_> {
            }
            ShFill => {
                let d = self.pop_dict()?;
+                if self.g.null {
+                    return Ok(());
+                }
+                if is_mesh(&d) {
+                    let m = self.xf();
+                    return self.mesh_fill(&d, m);
+                }
                let m = self.xf();
                if let Some(g) = self.gradient(&d, m)? {
                    let area = self.clip_bounds();
@@ -1223,6 +1610,16 @@ impl Interp<'_> {
    }
 }

+/// Is shading `sh` axial or radial (a gradient)?
+fn is_gradient(sh: &DictRef) -> bool {
+    matches!(sh.borrow().get(&Key::name("ShadingType")).and_then(Obj::as_num), Some(2.0 | 3.0))
+}
+
+/// Is shading `sh` one [`Interp::mesh_fill`] paints?
+fn is_mesh(sh: &DictRef) -> bool {
+    matches!(sh.borrow().get(&Key::name("ShadingType")).and_then(Obj::as_num), Some(1.0 | 4.0 | 5.0 | 6.0 | 7.0))
+}
+
 /// Where a stitched function of linear interpolations changes slope (its bounds), when it is
 /// one; `None` for functions that must be sampled.
 fn linear_points(f: &Obj) -> Option<Vec<f64>> {
@@ -10,7 +10,7 @@ use std::rc::Rc;
 use vectorcraft_geom::Affine;

 use super::graphics::{GState, Out};
-use super::lex::Lexer;
+use super::lex::{IMMEDIATE, Lexer};
 use super::obj::{Dict, DictRef, Key, Obj, Op, PsError, Res, Shared, ps_err};

 /// Most operations one file may run.
@@ -49,6 +49,10 @@ pub(crate) struct Interp<'a> {
    /// Bytes asked for so far (see [`MAX_MEMORY`]).
    allocated: usize,
    seed: u32,
+    /// Where the error that is unwinding was raised (see [`Fault`]).
+    pub fault: Option<Fault>,
+    /// The width a Type 3 glyph procedure gave (`setcachedevice`, `setcharwidth`).
+    pub glyph_width: Option<[f64; 2]>,
    pub g: GState,
    pub saved: Vec<GState>,
    pub out: Out,
@@ -57,6 +61,17 @@ pub(crate) struct Interp<'a> {
    pub illustrator: bool,
 }

+/// Where a PostScript error was raised: the operator that raised it (none for an unknown name)
+/// and the named procedures it ran in, innermost first, so the user and we can see the cause.
+#[derive(Clone, Debug, Default, PartialEq)]
+pub(crate) struct Fault {
+    pub op: Option<&'static str>,
+    pub procs: Vec<Rc<str>>,
+}
+
+/// Most procedure names a [`Fault`] keeps.
+const FAULT_PROCS: usize = 3;
+
 fn new_dict() -> DictRef {
    Rc::new(RefCell::new(Dict::new()))
 }
@@ -128,6 +143,8 @@ impl<'a> Interp<'a> {
            ops: 0,
            allocated: 0,
            seed: 1,
+            fault: None,
+            glyph_width: None,
            g,
            saved: vec![],
            out,
@@ -139,6 +156,7 @@ impl<'a> Interp<'a> {
    pub fn run(&mut self) -> Res {
        loop {
            let Some(o) = self.lex.next()? else { return Ok(()) };
+            let o = self.scanned(o, self.lex.immediate)?;
            // An Illustrator group begins before its `u` runs (`Some(true)`) and ends after its `U`
            // has (`Some(false)`).
            let group = match &o {
@@ -242,7 +260,7 @@ impl<'a> Interp<'a> {

    pub fn pop_str(&mut self) -> Res<Shared<u8>> {
        match self.pop()? {
-            Obj::Str(s) => Ok(s),
+            Obj::Str(s) | Obj::ExecStr(s) => Ok(s),
            _ => ps_err("typecheck", "a string"),
        }
    }
@@ -273,8 +291,12 @@ impl<'a> Interp<'a> {

    /// The value of name `name` on the dictionary stack.
    pub fn lookup(&self, name: &Rc<str>) -> Option<Obj> {
-        let key = Key::Name(name.clone());
-        self.dicts.iter().rev().find_map(|d| d.borrow().get(&key).cloned())
+        self.lookup_key(&Key::Name(name.clone()))
+    }
+
+    /// The value of any key (`load` takes numbers too) on the dictionary stack.
+    fn lookup_key(&self, key: &Key) -> Option<Obj> {
+        self.dicts.iter().rev().find_map(|d| d.borrow().get(key).cloned())
    }

    /// Count `bytes` the program makes against [`MAX_MEMORY`].
@@ -306,10 +328,24 @@ impl<'a> Interp<'a> {
        self.tick()?;
        match o {
            Obj::Exec(name) => {
-                let v = self.lookup(&name).ok_or_else(|| PsError::Ps("undefined", name.to_string()))?;
-                self.call(v)
+                let Some(v) = self.lookup(&name) else {
+                    self.fault.get_or_insert_default();
+                    return ps_err("undefined", &name);
+                };
+                let proc = matches!(v, Obj::Array { exec: true, .. });
+                let r = self.call(v);
+                if proc
+                    && matches!(r, Err(PsError::Ps(..)))
+                    && let Some(f) = self.fault.as_mut()
+                    && f.procs.len() < FAULT_PROCS
+                {
+                    f.procs.push(name);
+                }
+                r
            }
            Obj::Op(op) => self.op(op),
+            // An executable string runs, as an operator does (procedures are pushed).
+            s @ Obj::ExecStr(_) => self.call(s),
            o => self.push(o),
        }
    }
@@ -319,7 +355,11 @@ impl<'a> Interp<'a> {
    pub fn call(&mut self, v: Obj) -> Res {
        match v {
            Obj::Array { items, exec: true } => self.run_proc(&items),
-            Obj::File { stream, exec: true } => self.run_file(&stream),
+            Obj::File { stream, exec: true } => match self.program_of(&stream)? {
+                Some(program) => self.run_program(&program),
+                None => Ok(()),
+            },
+            Obj::ExecStr(s) => self.run_program(&s.to_vec()),
            Obj::Op(op) => self.op(op),
            Obj::Exec(name) => {
                self.enter()?;
@@ -349,15 +389,14 @@ impl<'a> Interp<'a> {
        r
    }

-    /// Run what is left of an executable file as a program, token by token.
-    fn run_file(&mut self, f: &Rc<RefCell<super::data::Stream>>) -> Res {
-        let Some(program) = self.program_of(f)? else { return Ok(()) };
+    /// Run `program` (what is left of an executable file, an executable string), token by token.
+    fn run_program(&mut self, program: &[u8]) -> Res {
        self.enter()?;
-        let mut lex = Lexer::new(&program);
+        let mut lex = Lexer::new(program);
        let r = loop {
            match lex.next() {
                Ok(Some(o)) => {
-                    if let Err(e) = self.exec_token(o) {
+                    if let Err(e) = self.scanned(o, lex.immediate).and_then(|o| self.exec_token(o)) {
                        break Err(e);
                    }
                }
@@ -369,6 +408,32 @@ impl<'a> Interp<'a> {
        r
    }

+    /// An object as the scanner gives it: with `immediate`, its `//name`s replaced by their
+    /// values (down through procedures), as they are when read.
+    pub fn scanned(&self, o: Obj, immediate: bool) -> Res<Obj> {
+        if immediate { self.resolve(o, 0) } else { Ok(o) }
+    }
+
+    fn resolve(&self, o: Obj, depth: usize) -> Res<Obj> {
+        match o {
+            Obj::Exec(n) if n.starts_with(IMMEDIATE) => {
+                let name = n.get(IMMEDIATE.len()..).unwrap_or_default();
+                self.lookup(&Rc::from(name)).ok_or_else(|| PsError::Ps("undefined", name.to_string()))
+            }
+            Obj::Array { items, exec: true } if depth < MAX_DEPTH as usize => {
+                for i in 0..items.len() {
+                    let Some(item) = items.get(i) else { break };
+                    if matches!(&item, Obj::Exec(n) if n.starts_with(IMMEDIATE)) || matches!(&item, Obj::Array { exec: true, .. }) {
+                        // A procedure the scanner just made: nothing else reads it.
+                        items.write(i, &[self.resolve(item, depth + 1)?]);
+                    }
+                }
+                Ok(Obj::Array { items, exec: true })
+            }
+            o => Ok(o),
+        }
+    }
+
    fn run_items(&mut self, items: &Shared<Obj>) -> Res {
        let mut i = 0;
        loop {
@@ -401,7 +466,11 @@ impl<'a> Interp<'a> {

    pub fn op(&mut self, op: Op) -> Res {
        self.op_inner(op).map_err(|e| match e {
-            PsError::Ps(name, at) if at.is_empty() => PsError::Ps(name, op.name().to_string()),
+            PsError::Ps(name, at) => {
+                // The innermost operator raised it (`exec` running a procedure doesn't).
+                self.fault.get_or_insert(Fault { op: Some(op.name()), procs: vec![] });
+                PsError::Ps(name, if at.is_empty() { op.name().to_string() } else { at })
+            }
            e => e,
        })
    }
@@ -683,6 +752,7 @@ impl<'a> Interp<'a> {
                    Ok(()) => self.push(Obj::Bool(false))?,
                    Err(PsError::Ps(..) | PsError::Stop | PsError::Exit) => {
                        self.depth = depth;
+                        self.fault = None;
                        self.push(Obj::Bool(true))?;
                    }
                    Err(e) => return Err(e),
@@ -699,6 +769,7 @@ impl<'a> Interp<'a> {
                let o = match self.pop()? {
                    Obj::Array { items, .. } => Obj::Array { items, exec: true },
                    Obj::File { stream, .. } => Obj::File { stream, exec: true },
+                    Obj::Str(s) => Obj::ExecStr(s),
                    Obj::Name(n) => Obj::Exec(n),
                    o => o,
                };
@@ -708,6 +779,7 @@ impl<'a> Interp<'a> {
                let o = match self.pop()? {
                    Obj::Array { items, .. } => Obj::Array { items, exec: false },
                    Obj::File { stream, .. } => Obj::File { stream, exec: false },
+                    Obj::ExecStr(s) => Obj::Str(s),
                    Obj::Exec(n) => Obj::Name(n),
                    o => o,
                };
@@ -715,7 +787,10 @@ impl<'a> Interp<'a> {
            }
            Xcheck => {
                let o = self.pop()?;
-                self.push(Obj::Bool(matches!(o, Obj::Array { exec: true, .. } | Obj::File { exec: true, .. } | Obj::Exec(_) | Obj::Op(_))))?;
+                self.push(Obj::Bool(matches!(
+                    o,
+                    Obj::Array { exec: true, .. } | Obj::File { exec: true, .. } | Obj::ExecStr(_) | Obj::Exec(_) | Obj::Op(_)
+                )))?;
            }
            Cvn => {
                let s = self.pop_str()?;
@@ -768,7 +843,7 @@ impl<'a> Interp<'a> {
            Length => {
                let n = match self.pop()? {
                    Obj::Array { items, .. } => items.len(),
-                    Obj::Str(s) => s.len(),
+                    Obj::Str(s) | Obj::ExecStr(s) => s.len(),
                    Obj::Dict(d) => d.borrow().len(),
                    Obj::Name(n) | Obj::Exec(n) => n.len(),
                    _ => return ps_err("typecheck", ""),
@@ -784,7 +859,7 @@ impl<'a> Interp<'a> {
                let k = self.pop()?;
                let o = match self.pop()? {
                    Obj::Array { items, .. } => items.get(index(&k)?).ok_or(PsError::Ps("rangecheck", String::new()))?,
-                    Obj::Str(s) => Obj::Int(i64::from(s.get(index(&k)?).ok_or(PsError::Ps("rangecheck", String::new()))?)),
+                    Obj::Str(s) | Obj::ExecStr(s) => Obj::Int(i64::from(s.get(index(&k)?).ok_or(PsError::Ps("rangecheck", String::new()))?)),
                    Obj::Dict(d) => {
                        let key = k.key().ok_or(PsError::Ps("typecheck", String::new()))?;
                        let v = d.borrow().get(&key).cloned();
@@ -897,8 +972,8 @@ impl<'a> Interp<'a> {
            }
            Load => {
                let k = self.pop()?;
-                let name = k.text().ok_or(PsError::Ps("typecheck", String::new()))?;
-                let v = self.lookup(&name).ok_or_else(|| PsError::Ps("undefined", name.to_string()))?;
+                let key = k.key().ok_or(PsError::Ps("typecheck", String::new()))?;
+                let v = self.lookup_key(&key).ok_or_else(|| PsError::Ps("undefined", show_text(&k)))?;
                self.push(v)?;
            }
            Store => {
@@ -973,12 +1048,60 @@ impl<'a> Interp<'a> {
                }
            }
            Version => self.push(Obj::string(b"3010".to_vec()))?,
+            Revision => self.push(Obj::Int(1))?,
+            SerialNumber => self.push(Obj::Int(0))?,
            Product => self.push(Obj::string(b"VectorCraft".to_vec()))?,
            RealTime | UserTime => self.push(Obj::Int(0))?,
            Print | EqPrint | EqEqPrint => {
                self.pop()?;
            }
            Pstack | Stack | Flush => {}
+            // What every interpreter (not only a distiller) answers, as Ghostscript does: the marks
+            // are dropped.
+            PdfMark => {
+                self.pop_to_mark()?;
+            }
+            Gcheck | Scheck => {
+                self.pop()?;
+                self.push(Obj::Bool(false))?;
+            }
+            CurrentShared => self.push(Obj::Bool(false))?,
+            SetShared | SetVmThreshold | VmReclaim | Echo => {
+                self.pop()?;
+            }
+            ClearDictStack => self.dicts.truncate(3),
+            ExecStack => {
+                let items = self.pop_array()?;
+                self.push_interval(Obj::Array { items, exec: false }, 0, 0)?;
+            }
+            SetCacheParams => {
+                self.pop_to_mark()?;
+            }
+            CurrentCacheParams | UCacheStatus => {
+                self.push(Obj::Mark)?;
+                for _ in 0..if op == UCacheStatus { 5 } else { 2 } {
+                    self.push(Obj::Int(1 << 20))?;
+                }
+            }
+            CacheStatus => {
+                for _ in 0..7 {
+                    self.push(Obj::Int(0))?;
+                }
+            }
+            StartJob => {
+                self.pop()?;
+                self.pop()?;
+                self.push(Obj::Bool(false))?;
+            }
+            CurrentObjectFormat => self.push(Obj::Int(0))?,
+            SetDevParams => {
+                self.pop_dict()?;
+                self.pop()?;
+            }
+            CurrentDevParams => {
+                self.pop()?;
+                self.push(Obj::dict(Dict::new()))?;
+            }
            _ => self.graphics_op(op)?,
        }
        Ok(())
@@ -1034,6 +1157,7 @@ impl<'a> Interp<'a> {
        let r = match o {
            Obj::Array { items, exec } => Obj::Array { items: items.sub(at, n).ok_or_else(range)?, exec },
            Obj::Str(s) => Obj::Str(s.sub(at, n).ok_or_else(range)?),
+            Obj::ExecStr(s) => Obj::ExecStr(s.sub(at, n).ok_or_else(range)?),
            _ => return ps_err("typecheck", "getinterval"),
        };
        self.push(r)
@@ -1052,7 +1176,7 @@ impl<'a> Interp<'a> {
                    }
                }
            }
-            Obj::Str(s) => {
+            Obj::Str(s) | Obj::ExecStr(s) => {
                for b in s.to_vec() {
                    self.push(Obj::Int(i64::from(b)))?;
                    if !self.body(&p)? {
@@ -1212,7 +1336,7 @@ fn show_text(o: &Obj) -> String {
        }
        Obj::Bool(b) => b.to_string(),
        Obj::Name(n) | Obj::Exec(n) => n.to_string(),
-        Obj::Str(s) => String::from_utf8_lossy(&s.borrow()).into_owned(),
+        Obj::Str(s) | Obj::ExecStr(s) => String::from_utf8_lossy(&s.borrow()).into_owned(),
        Obj::Op(op) => op.name().to_string(),
        _ => "--nostringval--".into(),
    }
@@ -15,8 +15,14 @@ pub(crate) struct Lexer<'a> {
    /// The whitespace character that ended the last token is still unread (data the program
    /// reads from itself starts after it).
    fresh: bool,
+    /// The last object read has immediately evaluated names (`//name`) in it, read as executable
+    /// names starting with [`IMMEDIATE`] for the interpreter to replace by their values.
+    pub immediate: bool,
 }

+/// How an immediately evaluated name (`//name`) is read, until the interpreter replaces it.
+pub(crate) const IMMEDIATE: &str = "//";
+
 fn is_space(b: u8) -> bool {
    matches!(b, b' ' | b'\t' | b'\r' | b'\n' | b'\x0c' | b'\0')
 }
@@ -31,7 +37,7 @@ fn syntax<T>(what: &str) -> Res<T> {

 impl<'a> Lexer<'a> {
    pub fn new(src: &'a [u8]) -> Self {
-        Self { src, pos: 0, fresh: false }
+        Self { src, pos: 0, fresh: false, immediate: false }
    }

    /// What is left to read.
@@ -86,6 +92,7 @@ impl<'a> Lexer<'a> {

    /// The next object at the top level (`None` at the end of the file).
    pub fn next(&mut self) -> Res<Option<Obj>> {
+        self.immediate = false;
        let t = self.token(0);
        self.fresh = true;
        t
@@ -140,13 +147,14 @@ impl<'a> Lexer<'a> {
            }
            b'}' | b')' => return syntax(&char::from(b).to_string()),
            b'/' => {
-                // `//name` is looked up when run (rather than when read).
+                // `//name` stands for the name's value when it is read.
                let immediate = self.peek() == Some(b'/');
                if immediate {
                    self.pos += 1;
+                    self.immediate = true;
                }
                let name = self.word();
-                if immediate { Obj::Exec(Rc::from(name.as_str())) } else { Obj::Name(Rc::from(name.as_str())) }
+                if immediate { Obj::Exec(Rc::from(format!("{IMMEDIATE}{name}").as_str())) } else { Obj::Name(Rc::from(name.as_str())) }
            }
            _ => {
                self.pos -= 1;
@@ -4,10 +4,12 @@
 //! - `lex`: the scanner; `obj`: objects, operators and errors; `interp`: the stacks, running
 //!   procedures, and the operators that don't draw.
 //! - `graphics`: the graphics state, coordinates, paths, colours (grey, RGB, CMYK, spot inks as
-//!   spot swatches at a tint, indexed), painting, clipping, and axial and radial shadings as
-//!   gradients.
+//!   spot swatches at a tint, indexed, patterns), painting, clipping, axial and radial shadings as
+//!   gradients and tiling patterns as pattern swatches.
+//! - `shading`: function-based and mesh shadings as gradient meshes, sampled functions.
 //! - `data`: data the program reads from itself through decoding filters, and images.
-//! - `text`: fonts by name and type as point type.
+//! - `text`: fonts by name and type as point type; Type 3 fonts' glyphs drawn by their procedures.
+//! - `preview`: the previews a file carries, for when its PostScript can't be read.
 //!
 //! Clipped art comes in as clipping groups. In an Illustrator file (Illustrator 3–8, written with
 //! the prolog that defines its operators), the groups it writes (`u` … `U`, nested) come in as
@@ -15,15 +17,18 @@
 //!
 //! The page is the file's `%%BoundingBox` (`%%HiResBoundingBox` when it has one), the first page
 //! of a PostScript file without one. A file whose program can't be read (an operator the
-//! interpreter doesn't know, an error, a limit reached) or that draws nothing comes in as its TIFF
-//! preview, with a warning; without a preview, what was drawn before the error is kept (with a
-//! warning), else the file is refused.
+//! interpreter doesn't know, an error, a limit reached) or that draws nothing comes in as its
+//! preview (a TIFF image, a Windows metafile or an EPSI bitmap), with a warning that names the
+//! error, the operator and the procedures it ran in; without a preview, what was drawn before the
+//! error is kept (with that warning), else the file is refused.

 mod data;
 mod graphics;
 mod interp;
 mod lex;
 mod obj;
+mod preview;
+mod shading;
 mod text;

 #[cfg(test)]
@@ -31,17 +36,19 @@ mod tests;
 #[cfg(test)]
 mod tests_fontnames;
 #[cfg(test)]
+mod tests_generators;
+#[cfg(test)]
 mod tests_illustrator;

 use std::sync::Arc;

 use vectorcraft_color::Paint;
 use vectorcraft_color::swatch::Swatch;
-use vectorcraft_doc::{ColorMode, Document, ImageBlob, ImageObject, LayerColor, Node, NodeKind};
+use vectorcraft_doc::{ColorMode, Document, LayerColor, Node};
 use vectorcraft_geom::{Affine, Rect};

 use graphics::{GState, Out};
-use interp::Interp;
+use interp::{Fault, Interp};
 use obj::PsError;

 pub use text::family_style;
@@ -123,21 +130,33 @@ impl Dsc {
    }
 }

-/// What went wrong, for the user.
-fn reason(e: &PsError) -> String {
-    match e {
+/// What went wrong, for the user (and for us, reading a report): the PostScript error, the
+/// operator that raised it and the procedure it ran in (`fault`).
+fn reason(e: &PsError, fault: Option<&Fault>) -> String {
+    let what = match e {
        PsError::Ps("undefined", at) => format!("it uses `{at}`, which VectorCraft's PostScript reader doesn't know"),
-        PsError::Ps(name, at) if at.is_empty() => format!("a PostScript error ({name})"),
-        PsError::Ps(name, at) => format!("a PostScript error ({name} in `{at}`)"),
-        PsError::Limit(what) => what.to_string(),
-        PsError::Exit | PsError::Stop => "the program stopped with an error".into(),
-        PsError::Quit => "the program ended early".into(),
+        PsError::Ps(name, at) => match fault.and_then(|f| f.op) {
+            Some(op) if at.is_empty() || at == op => format!("a PostScript error ({name} in `{op}`)"),
+            Some(op) => format!("a PostScript error ({name} in `{op}`: {at})"),
+            None if at.is_empty() => format!("a PostScript error ({name})"),
+            None => format!("a PostScript error ({name} in `{at}`)"),
+        },
+        PsError::Limit(what) => return what.to_string(),
+        PsError::Exit | PsError::Stop => return "the program stopped with an error".into(),
+        PsError::Quit => return "the program ended early".into(),
+    };
+    match fault.map(|f| f.procs.as_slice()).unwrap_or_default() {
+        [] => what,
+        procs => {
+            let names: Vec<String> = procs.iter().map(|p| format!("`{p}`")).collect();
+            format!("{what}, in {}", names.join(" in "))
+        }
    }
 }

 /// Read an EPS or PostScript file (its first page).
 pub fn import(bytes: &[u8]) -> Result<Imported, String> {
-    let (ps, tiff) = crate::sections(bytes).ok_or("the file's preview header points outside the file")?;
+    let (ps, _) = crate::sections(bytes).ok_or("the file's preview header points outside the file")?;
    if !ps.starts_with(b"%!") {
        return Err("this is not a PostScript file".into());
    }
@@ -151,6 +170,7 @@ pub fn import(bytes: &[u8]) -> Result<Imported, String> {
    it.illustrator = dsc.illustrator;
    let result = it.run();
    it.release();
+    let fault = it.fault.take();
    let mut out = it.out;
    if let Some(n) = dsc.pages.filter(|n| *n > 1) {
        out.warn(&format!("only the first of the file's {n} pages was read"));
@@ -159,11 +179,11 @@ pub fn import(bytes: &[u8]) -> Result<Imported, String> {
    let why = match (&result, drew) {
        (Ok(()), true) => return Ok(finish(out)),
        (Ok(()), false) => "it draws nothing VectorCraft's PostScript reader can show".to_string(),
-        (Err(e), _) => reason(e),
+        (Err(e), _) => reason(e, fault.as_ref()),
    };
-    if let Some(doc) = tiff.and_then(|t| preview(t, frame)) {
-        let warnings = vec![format!("this file's PostScript couldn't be read ({why}): its preview was placed instead, at screen resolution")];
-        return Ok(Imported { document: doc, warnings, preview: true });
+    if let Some(p) = preview::preview(bytes, ps, frame) {
+        let warnings = vec![format!("this file's PostScript couldn't be read ({why}): {}", p.what)];
+        return Ok(Imported { document: p.document, warnings, preview: true });
    }
    if drew {
        out.warnings.insert(0, format!("the file was read up to an error ({why}): what follows it was left out"));
@@ -174,7 +194,7 @@ pub fn import(bytes: &[u8]) -> Result<Imported, String> {
            out.warn("the file draws nothing");
            Ok(finish(out))
        }
-        Err(e) => Err(format!("this PostScript file can't be read ({}): save it as PDF or SVG in the app that made it", reason(&e))),
+        Err(e) => Err(format!("this PostScript file can't be read ({}): save it as PDF or SVG in the app that made it", reason(&e, fault.as_ref()))),
    }
 }

@@ -196,6 +216,12 @@ fn finish(mut out: Out) -> Imported {
            doc.swatches.push(Swatch { name, paint: Paint::solid(color), global: true, spot: true });
        }
    }
+    // Tiling patterns are pattern swatches.
+    for name in doc.patterns.iter().map(|p| p.name.clone()).collect::<Vec<_>>() {
+        if doc.swatch(&name).is_none() {
+            doc.swatches.push(Swatch { paint: Paint::Pattern { pattern: name.clone(), xf: Affine::IDENTITY }, name, global: false, spot: false });
+        }
+    }
    let mut layer = Node::layer(doc.alloc_id(), "Layer 1", LayerColor::Preset(0));
    if let Some(c) = layer.children_mut() {
        *c = children;
@@ -203,27 +229,3 @@ fn finish(mut out: Out) -> Imported {
    doc.layers = vec![Arc::new(layer)];
    Imported { document: doc, warnings: out.warnings, preview: false }
 }
-
-/// A document of `frame`'s size showing TIFF preview `tiff` stretched over it.
-fn preview(tiff: &[u8], frame: Rect) -> Option<Document> {
-    let img = match image::load_from_memory_with_format(tiff, image::ImageFormat::Tiff) {
-        Ok(img) => img.to_rgba8(),
-        Err(_) => crate::tiff::palette_rgba(tiff)?,
-    };
-    let (w, h) = img.dimensions();
-    if w == 0 || h == 0 {
-        return None;
-    }
-    let mut png = vec![];
-    img.write_to(&mut std::io::Cursor::new(&mut png), image::ImageFormat::Png).ok()?;
-    let mut doc = Document::new(frame.width(), frame.height());
-    let blob = ImageBlob::new("image/png", png);
-    let key = blob.content_key();
-    doc.images.insert(key.clone(), blob);
-    let xf = Affine::scale_non_uniform(frame.width() / f64::from(w), frame.height() / f64::from(h));
-    let mut n = Node::new(doc.alloc_id(), NodeKind::Image(ImageObject { key, width: w, height: h, xf, link: None, placement: Default::default() }));
-    n.name = Some("Preview".into());
-    let layer = doc.layers.first().map(|l| l.id)?;
-    doc.insert(Some(layer), 0, n).ok()?;
-    Some(doc)
-}
@@ -32,6 +32,8 @@ pub(crate) enum Obj {
    /// An executable name: looked up and run.
    Exec(Rc<str>),
    Str(Shared<u8>),
+    /// An executable string (`cvx`): run, it runs its text as a program.
+    ExecStr(Shared<u8>),
    /// An array; executable ones are procedures.
    Array {
        items: Shared<Obj>,
@@ -85,7 +87,7 @@ impl Obj {
    pub fn text(&self) -> Option<Rc<str>> {
        match self {
            Self::Name(n) | Self::Exec(n) => Some(n.clone()),
-            Self::Str(s) => Some(Rc::from(String::from_utf8_lossy(&s.borrow()).as_ref())),
+            Self::Str(s) | Self::ExecStr(s) => Some(Rc::from(String::from_utf8_lossy(&s.borrow()).as_ref())),
            _ => None,
        }
    }
@@ -117,7 +119,7 @@ impl Obj {
            Self::Int(_) => "integertype",
            Self::Real(_) => "realtype",
            Self::Name(_) | Self::Exec(_) => "nametype",
-            Self::Str(_) => "stringtype",
+            Self::Str(_) | Self::ExecStr(_) => "stringtype",
            Self::Array { .. } => "arraytype",
            Self::Dict(_) => "dicttype",
            Self::Op(_) => "operatortype",
@@ -326,5 +328,21 @@ ops! {
    ResourceForAll = "resourceforall", Show = "show", AShow = "ashow",
    WidthShow = "widthshow", AWidthShow = "awidthshow", XShow = "xshow", YShow = "yshow", XYShow = "xyshow",
    KShow = "kshow", CShow = "cshow", GlyphShow = "glyphshow", StringWidth = "stringwidth", CharPath = "charpath",
-    SetCacheDevice = "setcachedevice", SetCharWidth = "setcharwidth",
+    SetCacheDevice = "setcachedevice", SetCharWidth = "setcharwidth", SetCacheDevice2 = "setcachedevice2", RootFont = "rootfont",
+    // Forms, devices and files programs probe (no output device or file system here).
+    ExecForm = "execform", NullDevice = "nulldevice", PdfMark = "pdfmark", Status = "status", Token = "token",
+    BytesAvailable = "bytesavailable", ResetFile = "resetfile", Write = "write", WriteString = "writestring",
+    WriteHexString = "writehexstring", Echo = "echo", StrokePath = "strokepath", PathForAll = "pathforall",
+    // Queries and settings without an effect on the art.
+    CurrentHsbColor = "currenthsbcolor", CurrentColorRendering = "currentcolorrendering",
+    FindColorRendering = "findcolorrendering", CurrentColorScreen = "currentcolorscreen", CurrentSmoothness = "currentsmoothness",
+    SetHalftonePhase = "sethalftonephase", CurrentHalftonePhase = "currenthalftonephase", SetDevParams = "setdevparams",
+    CurrentDevParams = "currentdevparams", Gcheck = "gcheck", Scheck = "scheck", CurrentShared = "currentshared",
+    SetShared = "setshared", ClearDictStack = "cleardictstack", ExecStack = "execstack", SetCacheParams = "setcacheparams",
+    CurrentCacheParams = "currentcacheparams", CacheStatus = "cachestatus", UCacheStatus = "ucachestatus",
+    SetVmThreshold = "setvmthreshold", VmReclaim = "vmreclaim", StartJob = "startjob", CurrentObjectFormat = "currentobjectformat",
+    Revision = "revision", SerialNumber = "serialnumber", Read = "read", FilePosition = "fileposition",
+    SetFilePosition = "setfileposition", DeleteFile = "deletefile", RenameFile = "renamefile", Run = "run",
+    // User paths.
+    UFill = "ufill", UEoFill = "ueofill", UStroke = "ustroke", UAppend = "uappend", UPath = "upath", SetBBox = "setbbox",
 }
@@ -0,0 +1,110 @@
+//! The previews an EPS file carries for apps that don't read PostScript, opened when its
+//! PostScript can't be: a TIFF image or a Windows metafile behind the binary header, or an EPSI
+//! bitmap in comments, stretched over the page.
+
+use vectorcraft_doc::{Document, ImageBlob, ImageObject, Node, NodeKind};
+use vectorcraft_geom::{Affine, Rect};
+
+/// Largest EPSI bitmap side read (pixels).
+const MAX_EPSI: usize = 8192;
+
+/// A preview's document and how the user is told about it.
+pub(super) struct Preview {
+    pub document: Document,
+    /// What was opened instead ("its preview was placed instead, …").
+    pub what: &'static str,
+}
+
+/// The best preview of `bytes` (the whole file; `ps` its PostScript) over `frame`: the TIFF
+/// image, else the metafile's vectors, else the EPSI bitmap.
+pub(super) fn preview(bytes: &[u8], ps: &[u8], frame: Rect) -> Option<Preview> {
+    const IMAGE: &str = "its preview was placed instead, at screen resolution";
+    if let Some(document) = crate::sections(bytes).and_then(|(_, tiff)| tiff).and_then(tiff_rgba).and_then(|img| image_doc(img, frame)) {
+        return Some(Preview { document, what: IMAGE });
+    }
+    if let Some(document) = crate::metafile_preview(bytes).and_then(|wmf| metafile_doc(wmf, frame)) {
+        return Some(Preview { document, what: "its Windows metafile preview was opened instead, which may simplify the art" });
+    }
+    epsi(ps).and_then(|img| image_doc(img, frame)).map(|document| Preview { document, what: IMAGE })
+}
+
+fn tiff_rgba(tiff: &[u8]) -> Option<image::RgbaImage> {
+    match image::load_from_memory_with_format(tiff, image::ImageFormat::Tiff) {
+        Ok(img) => Some(img.to_rgba8()),
+        Err(_) => crate::tiff::palette_rgba(tiff),
+    }
+}
+
+/// A document of `frame`'s size showing `img` stretched over it.
+fn image_doc(img: image::RgbaImage, frame: Rect) -> Option<Document> {
+    let (w, h) = img.dimensions();
+    if w == 0 || h == 0 {
+        return None;
+    }
+    let mut png = vec![];
+    img.write_to(&mut std::io::Cursor::new(&mut png), image::ImageFormat::Png).ok()?;
+    let mut doc = Document::new(frame.width(), frame.height());
+    let blob = ImageBlob::new("image/png", png);
+    let key = blob.content_key();
+    doc.images.insert(key.clone(), blob);
+    let xf = Affine::scale_non_uniform(frame.width() / f64::from(w), frame.height() / f64::from(h));
+    let mut n = Node::new(doc.alloc_id(), NodeKind::Image(ImageObject { key, width: w, height: h, xf, link: None, placement: Default::default() }));
+    n.name = Some("Preview".into());
+    let layer = doc.layers.first().map(|l| l.id)?;
+    doc.insert(Some(layer), 0, n).ok()?;
+    Some(doc)
+}
+
+/// A document of `frame`'s size with the metafile's art stretched from its picture frame over it.
+fn metafile_doc(wmf: &[u8], frame: Rect) -> Option<Document> {
+    let mut doc = vectorcraft_metafile::import(wmf).ok()?.document;
+    let from = doc.artboards.first()?.rect;
+    if from.width() <= 0.0 || from.height() <= 0.0 {
+        return None;
+    }
+    let a = Affine::translate(frame.origin().to_vec2())
+        * Affine::scale_non_uniform(frame.width() / from.width(), frame.height() / from.height())
+        * Affine::translate(-from.origin().to_vec2());
+    for layer in &mut doc.layers {
+        let layer = std::sync::Arc::make_mut(layer);
+        for n in layer.children_mut().into_iter().flatten() {
+            std::sync::Arc::make_mut(n).transform(a, true);
+        }
+    }
+    if let Some(board) = doc.artboards.first_mut() {
+        board.rect = frame;
+    }
+    doc.layers.iter().any(|l| l.children().is_some_and(|c| !c.is_empty())).then_some(doc)
+}
+
+/// The EPSI preview in `ps`'s comments (`%%BeginPreview: width height depth lines`, hex rows,
+/// 0 white and the largest value black).
+fn epsi(ps: &[u8]) -> Option<image::RgbaImage> {
+    let text = String::from_utf8_lossy(ps);
+    let mut lines = text.lines();
+    let head = lines.find_map(|l| l.strip_prefix("%%BeginPreview:"))?;
+    let n: Vec<usize> = head.split_whitespace().map_while(|w| w.parse().ok()).collect();
+    let [w, h, depth, ..] = n[..] else { return None };
+    if !(1..=MAX_EPSI).contains(&w) || !(1..=MAX_EPSI).contains(&h) || ![1, 2, 4, 8].contains(&depth) {
+        return None;
+    }
+    let row = (w * depth).div_ceil(8);
+    let mut hex = Vec::with_capacity((row * h * 2).min(ps.len()));
+    for l in lines {
+        if l.starts_with("%%EndPreview") || hex.len() >= row * h * 2 {
+            break;
+        }
+        hex.extend(l.strip_prefix('%')?.bytes().filter(u8::is_ascii_hexdigit));
+    }
+    let bytes = super::lex::hex_decode(&hex)?;
+    let max = (1u32 << depth) - 1;
+    let mut img = image::RgbaImage::new(w as u32, h as u32);
+    for (x, y, px) in img.enumerate_pixels_mut() {
+        let bit = y as usize * row * 8 + x as usize * depth;
+        let byte = u32::from(bytes.get(bit / 8).copied().unwrap_or(0));
+        let v = (byte >> (8 - depth - bit % 8)) & max;
+        let grey = (255 - v * 255 / max) as u8;
+        *px = image::Rgba([grey, grey, grey, 255]);
+    }
+    Some(img)
+}
@@ -0,0 +1,376 @@
+//! Shadings that aren't gradients, as gradient meshes: function-based ones (type 1) sampled on a
+//! grid, free-form and lattice triangle meshes (types 4 and 5) and Coons and tensor patch meshes
+//! (types 6 and 7), their vertices read from an array or packed in a string or file; and sampled
+//! functions (type 0) that shadings and tint transforms use.
+
+use std::sync::Arc;
+
+use vectorcraft_color::{Color, Paint};
+use vectorcraft_doc::live::GradientMesh;
+use vectorcraft_doc::{Node, NodeId, NodeKind};
+use vectorcraft_geom::{Affine, Point};
+
+use super::graphics::Space;
+use super::interp::{Interp, matrix_of};
+use super::obj::{DictRef, Key, Obj, PsError, Res, ps_err};
+
+/// Most patches (or triangles) one shading makes: past it, it is left out with a warning.
+const MAX_PATCHES: usize = 4096;
+/// Rows and columns of the mesh a function-based shading is sampled on.
+const FUNCTION_GRID: u32 = 16;
+/// Most samples a sampled function has.
+const MAX_SAMPLES: usize = 1 << 24;
+/// Most outputs (colour components) a sampled function has.
+const MAX_OUTPUTS: usize = 32;
+/// Work one patch costs against the operation budget.
+const PATCH_OPS: u64 = 64;
+
+const TOO_MANY_PATCHES: &str = "shadings of more than 4096 patches or triangles were left out";
+
+/// The numbers of a shading's vertices: from an array, or packed in bits ([`Packed`]).
+enum Vertices {
+    Nums(Vec<f64>, usize),
+    Packed(Packed),
+}
+
+/// Vertex data packed in bits: flags, coordinates and colour components, each its own width and
+/// mapped through `Decode`.
+struct Packed {
+    bytes: Vec<u8>,
+    /// The next bit.
+    at: usize,
+    flag: u32,
+    coord: u32,
+    comp: u32,
+    decode: Vec<f64>,
+}
+
+impl Packed {
+    fn bits(&mut self, n: u32) -> Option<u64> {
+        if n == 0 || n > 32 || self.at.checked_add(n as usize)? > self.bytes.len() * 8 {
+            return None;
+        }
+        let mut v = 0u64;
+        for _ in 0..n {
+            let byte = *self.bytes.get(self.at / 8)?;
+            v = v << 1 | u64::from(byte >> (7 - self.at % 8) & 1);
+            self.at += 1;
+        }
+        Some(v)
+    }
+
+    /// A value of `n` bits through decode range `i` (`[min max]` pairs).
+    fn value(&mut self, n: u32, i: usize) -> Option<f64> {
+        let raw = self.bits(n)? as f64;
+        let max = ((1u64 << n) - 1) as f64;
+        let (lo, hi) = (self.decode.get(2 * i).copied().unwrap_or(0.0), self.decode.get(2 * i + 1).copied().unwrap_or(1.0));
+        Some(lo + raw * (hi - lo) / max)
+    }
+}
+
+impl Vertices {
+    fn flag(&mut self) -> Option<u32> {
+        match self {
+            Self::Nums(v, at) => {
+                let f = *v.get(*at)?;
+                *at += 1;
+                Some(f.max(0.0) as u32)
+            }
+            Self::Packed(p) => p.bits(p.flag).map(|f| f as u32),
+        }
+    }
+
+    fn num(&mut self, comp: bool, i: usize) -> Option<f64> {
+        match self {
+            Self::Nums(v, at) => {
+                let f = *v.get(*at)?;
+                *at += 1;
+                f.is_finite().then_some(f)
+            }
+            Self::Packed(p) => p.value(if comp { p.comp } else { p.coord }, i),
+        }
+    }
+
+    fn point(&mut self) -> Option<Point> {
+        Some(Point::new(self.num(false, 0)?, self.num(false, 1)?))
+    }
+
+    /// A vertex colour's `n` values (components, or the function's input).
+    fn color(&mut self, n: usize) -> Option<Vec<f64>> {
+        (0..n).map(|i| self.num(true, 2 + i)).collect()
+    }
+
+    /// Packed vertices start at a byte (triangle meshes).
+    fn align(&mut self) {
+        if let Self::Packed(p) = self {
+            p.at = p.at.div_ceil(8) * 8;
+        }
+    }
+}
+
+impl Interp<'_> {
+    /// Paint shading `sh` (types 1, 4–7) as gradient meshes, `m` mapping shading space onto the
+    /// document, under the current clip.
+    pub fn mesh_fill(&mut self, sh: &DictRef, m: Affine) -> Res {
+        let get = |k: &str| sh.borrow().get(&Key::name(k)).cloned();
+        let kind = get("ShadingType").and_then(|o| o.as_num()).unwrap_or(0.0);
+        let space = self.space_of(&get("ColorSpace").ok_or(PsError::Ps("undefined", "ColorSpace".into()))?, 0)?;
+        let function = get("Function");
+        let meshes = if kind == 1.0 { self.function_mesh(sh, &space, m)? } else { self.patch_mesh(sh, kind, &space, function.as_ref(), m)? };
+        let Some(meshes) = meshes else {
+            self.out.warn(TOO_MANY_PATCHES);
+            return Ok(());
+        };
+        let mut nodes: Vec<Node> = meshes.into_iter().map(|g| Node::new(NodeId(0), NodeKind::Mesh(g))).collect();
+        let node = match nodes.len() {
+            0 => return Ok(()),
+            1 => nodes.swap_remove(0),
+            _ => {
+                let children = nodes
+                    .into_iter()
+                    .map(|mut n| {
+                        n.id = self.out.doc.alloc_id();
+                        Arc::new(n)
+                    })
+                    .collect();
+                Node::group(NodeId(0), children)
+            }
+        };
+        let clips = self.g.clips.clone();
+        self.out.push(node, &clips);
+        Ok(())
+    }
+
+    /// The colour of a vertex's values `v`: through the shading's function when it has one.
+    fn vertex_color(&mut self, space: &Space, function: Option<&Obj>, v: &[f64]) -> Res<Color> {
+        let comps = match function {
+            Some(f) => self.eval(f, v, 0)?,
+            None => v.to_vec(),
+        };
+        Ok(match self.paint_of(space, &comps)? {
+            Paint::Solid { color, .. } => color,
+            _ => Color::BLACK,
+        })
+    }
+
+    /// A function-based shading (type 1) sampled on a grid over its domain.
+    fn function_mesh(&mut self, sh: &DictRef, space: &Space, m: Affine) -> Res<Option<Vec<GradientMesh>>> {
+        let get = |k: &str| sh.borrow().get(&Key::name(k)).cloned();
+        let domain: Vec<f64> = get("Domain").and_then(|o| o.items().map(|i| i.borrow().iter().filter_map(Obj::as_num).collect())).unwrap_or_default();
+        let [x0, x1, y0, y1] = <[f64; 4]>::try_from(domain).unwrap_or([0.0, 1.0, 0.0, 1.0]);
+        let f = get("Function").ok_or(PsError::Ps("undefined", "Function".into()))?;
+        let matrix = get("Matrix").and_then(|o| o.items().and_then(|i| matrix_of(&i.borrow()))).unwrap_or(Affine::IDENTITY);
+        let n = FUNCTION_GRID as usize;
+        let at = |i: usize, lo: f64, hi: f64| lo + (hi - lo) * i as f64 / n as f64;
+        let mut colors = Vec::with_capacity((n + 1) * (n + 1));
+        for r in 0..=n {
+            for c in 0..=n {
+                self.spend(PATCH_OPS)?;
+                colors.push(self.vertex_color(space, Some(&f), &[at(c, x0, x1), at(r, y0, y1)])?);
+            }
+        }
+        let xf = m * matrix;
+        let surface = |u: f64, v: f64| xf * Point::new(x0 + (x1 - x0) * u, y0 + (y1 - y0) * v);
+        let color = |u: f64, v: f64| {
+            let (c, r) = ((u * n as f64).round() as usize, (v * n as f64).round() as usize);
+            colors.get(r * (n + 1) + c).copied().unwrap_or(Color::BLACK)
+        };
+        Ok(Some(vec![GradientMesh::from_surface(FUNCTION_GRID, FUNCTION_GRID, &surface, &color)]))
+    }
+
+    /// The vertices of a mesh shading's `DataSource`.
+    fn vertices(&mut self, sh: &DictRef, flags: bool) -> Res<Vertices> {
+        let get = |k: &str| sh.borrow().get(&Key::name(k)).cloned();
+        let bytes = match get("DataSource").ok_or(PsError::Ps("undefined", "DataSource".into()))? {
+            Obj::Array { items, .. } => {
+                let v: Option<Vec<f64>> = items.borrow().iter().map(Obj::as_num).collect();
+                return Ok(Vertices::Nums(v.ok_or(PsError::Ps("typecheck", "DataSource".into()))?, 0));
+            }
+            Obj::Str(s) => s.to_vec(),
+            Obj::File { stream, .. } => self.peek_all(&stream)?,
+            _ => return ps_err("typecheck", "DataSource"),
+        };
+        let bits = |k: &str| get(k).and_then(|o| o.as_num()).filter(|v| (1.0..=32.0).contains(v)).map(|v| v as u32);
+        let (Some(coord), Some(comp)) = (bits("BitsPerCoordinate"), bits("BitsPerComponent")) else {
+            return ps_err("rangecheck", "BitsPerCoordinate");
+        };
+        let flag = if flags { bits("BitsPerFlag").ok_or(PsError::Ps("rangecheck", "BitsPerFlag".into()))? } else { 0 };
+        let decode: Vec<f64> = get("Decode").and_then(|o| o.items().map(|i| i.borrow().iter().filter_map(Obj::as_num).collect())).unwrap_or_default();
+        Ok(Vertices::Packed(Packed { bytes, at: 0, flag, coord, comp, decode }))
+    }
+
+    /// A triangle (types 4, 5) or patch (6, 7) mesh in the document (`m`); `None` past
+    /// [`MAX_PATCHES`].
+    fn patch_mesh(&mut self, sh: &DictRef, kind: f64, space: &Space, function: Option<&Obj>, m: Affine) -> Res<Option<Vec<GradientMesh>>> {
+        let n = if function.is_some() { 1 } else { space.n() };
+        let mut v = self.vertices(sh, kind != 5.0)?;
+        let mut corner = |it: &mut Self, v: &mut Vertices| -> Res<Option<Color>> {
+            match v.color(n) {
+                Some(c) => it.vertex_color(space, function, &c).map(Some),
+                None => Ok(None),
+            }
+        };
+        if kind == 6.0 || kind == 7.0 {
+            return self.patches(&mut v, kind == 7.0, m, &mut corner);
+        }
+        let per_row = sh.borrow().get(&Key::name("VerticesPerRow")).and_then(Obj::as_num).filter(|r| (2.0..=1e6).contains(r)).map(|r| r as usize);
+        let lattice = kind == 5.0;
+        let mut pts: Vec<(Point, Color)> = vec![];
+        let mut tris: Vec<[usize; 3]> = vec![];
+        // Free-form: vertices still to come of the triangle being made.
+        let mut left = 0;
+        loop {
+            let flag = if lattice { 0 } else { v.flag().unwrap_or(u32::MAX) };
+            let Some(p) = v.point().filter(|_| flag != u32::MAX) else { break };
+            let Some(color) = corner(self, &mut v)? else { break };
+            if !lattice {
+                v.align();
+            }
+            self.spend(PATCH_OPS)?;
+            pts.push((m * p, color));
+            let i = pts.len() - 1;
+            if lattice {
+                // Each cell between two rows is two triangles.
+                if let Some(w) = per_row
+                    && i >= w
+                    && !i.is_multiple_of(w)
+                {
+                    tris.push([i - w - 1, i - w, i - 1]);
+                    tris.push([i - w, i - 1, i]);
+                }
+            } else if left > 0 {
+                // A vertex ending a triangle begun with flag 0.
+                left -= 1;
+                if left == 0 && i >= 2 {
+                    tris.push([i - 2, i - 1, i]);
+                }
+            } else {
+                // A triangle on the last one's edge (flag 1: its second and third vertices, 2: its
+                // first and third), or the first vertex of a new one.
+                match (flag, tris.last().copied()) {
+                    (1, Some([_, b, c])) => tris.push([b, c, i]),
+                    (2, Some([a, _, c])) => tris.push([a, c, i]),
+                    _ => left = 2,
+                }
+            }
+            if tris.len() > MAX_PATCHES {
+                return Ok(None);
+            }
+        }
+        let at = |i: usize| pts.get(i).copied().unwrap_or((Point::ZERO, Color::BLACK));
+        Ok(Some(tris.iter().filter_map(|t| GradientMesh::triangle(t.map(at))).collect()))
+    }
+
+    /// Coons (`tensor`: tensor-product) patches: twelve boundary points (a tensor patch's four
+    /// inner ones are read and left out), four corner colours; a patch on the last one's edge
+    /// (flag 1–3) takes that edge's four points and two colours from it.
+    fn patches(
+        &mut self,
+        v: &mut Vertices,
+        tensor: bool,
+        m: Affine,
+        corner: &mut impl FnMut(&mut Self, &mut Vertices) -> Res<Option<Color>>,
+    ) -> Res<Option<Vec<GradientMesh>>> {
+        let mut out = vec![];
+        let mut prev: Option<([Point; 12], [Color; 4])> = None;
+        while let Some(flag) = v.flag() {
+            let shared = match (flag, &prev) {
+                (0, _) => None,
+                (1, Some((p, c))) => Some(([p[3], p[4], p[5], p[6]], [c[1], c[2]])),
+                (2, Some((p, c))) => Some(([p[6], p[7], p[8], p[9]], [c[2], c[3]])),
+                (3, Some((p, c))) => Some(([p[9], p[10], p[11], p[0]], [c[3], c[0]])),
+                _ => return ps_err("rangecheck", "a patch flag"),
+            };
+            let mut cp = [Point::ZERO; 12];
+            let mut colors = [Color::BLACK; 4];
+            let (first_point, first_color) = match shared {
+                Some((pts, cs)) => {
+                    cp[..4].copy_from_slice(&pts);
+                    colors[..2].copy_from_slice(&cs);
+                    (4, 2)
+                }
+                None => (0, 0),
+            };
+            for slot in cp.iter_mut().skip(first_point) {
+                let Some(p) = v.point() else { return Ok(Some(out)) };
+                *slot = m * p;
+            }
+            if tensor && (0..4).any(|_| v.point().is_none()) {
+                return Ok(Some(out));
+            }
+            for slot in colors.iter_mut().skip(first_color) {
+                let Some(c) = corner(self, v)? else { return Ok(Some(out)) };
+                *slot = c;
+            }
+            self.spend(PATCH_OPS)?;
+            if out.len() >= MAX_PATCHES {
+                return Ok(None);
+            }
+            out.extend(GradientMesh::coons(&cp, colors));
+            prev = Some((cp, colors));
+        }
+        Ok(Some(out))
+    }
+
+    /// A sampled function (type 0) at `x`: the samples around it, interpolated linearly for
+    /// one input, the nearest one for more.
+    pub(super) fn sampled(&mut self, f: &DictRef, x: &[f64]) -> Res<Vec<f64>> {
+        let get = |k: &str| f.borrow().get(&Key::name(k)).cloned();
+        let nums =
+            |k: &str| -> Vec<f64> { get(k).and_then(|o| o.items().map(|i| i.borrow().iter().filter_map(Obj::as_num).collect())).unwrap_or_default() };
+        let (domain, range, size) = (nums("Domain"), nums("Range"), nums("Size"));
+        let m = domain.len() / 2;
+        let outs = range.len() / 2;
+        if m == 0 || outs == 0 || outs > MAX_OUTPUTS || size.len() < m || size.iter().any(|s| !(1.0..=MAX_SAMPLES as f64).contains(s)) {
+            return ps_err("rangecheck", "a sampled function");
+        }
+        let bps =
+            get("BitsPerSample").and_then(|o| o.as_num()).filter(|b| [1.0, 2.0, 4.0, 8.0, 12.0, 16.0, 24.0, 32.0].contains(b)).map(|b| b as usize);
+        let bps = bps.ok_or(PsError::Ps("rangecheck", "BitsPerSample".into()))?;
+        if size.iter().take(m).try_fold(1usize, |acc, s| acc.checked_mul(*s as usize)).is_none_or(|t| t > MAX_SAMPLES) {
+            return ps_err("limitcheck", "Size");
+        }
+        let bytes = match get("DataSource") {
+            Some(Obj::Str(s)) => s.to_vec(),
+            Some(Obj::File { stream, .. }) => self.peek_all(&stream)?,
+            _ => return ps_err("typecheck", "DataSource"),
+        };
+        let (encode, decode) = (nums("Encode"), nums("Decode"));
+        let max = ((1u64 << bps) - 1) as f64;
+        let sample = |index: usize, j: usize| -> f64 {
+            let bit = (index as u64 * outs as u64 + j as u64) * bps as u64;
+            let raw = (0..bps as u64).fold(0u64, |v, k| {
+                let b = usize::try_from((bit + k) / 8).ok().and_then(|i| bytes.get(i)).copied().unwrap_or(0);
+                v << 1 | u64::from(b >> (7 - (bit + k) % 8) & 1)
+            }) as f64;
+            let (d0, d1) = (
+                decode.get(2 * j).or(range.get(2 * j)).copied().unwrap_or(0.0),
+                decode.get(2 * j + 1).or(range.get(2 * j + 1)).copied().unwrap_or(1.0),
+            );
+            let (r0, r1) = (range.get(2 * j).copied().unwrap_or(0.0), range.get(2 * j + 1).copied().unwrap_or(1.0));
+            (d0 + raw * (d1 - d0) / max).clamp(r0.min(r1), r0.max(r1))
+        };
+        // Each input into sample space.
+        let mut pos = Vec::with_capacity(m);
+        for i in 0..m {
+            let (a, b) = (domain.get(2 * i).copied().unwrap_or(0.0), domain.get(2 * i + 1).copied().unwrap_or(1.0));
+            let s = size.get(i).copied().unwrap_or(1.0);
+            let (e0, e1) = (encode.get(2 * i).copied().unwrap_or(0.0), encode.get(2 * i + 1).copied().unwrap_or(s - 1.0));
+            let xi = x.get(i).copied().unwrap_or(a).clamp(a.min(b), a.max(b));
+            let e = if b != a { e0 + (xi - a) * (e1 - e0) / (b - a) } else { e0 };
+            pos.push(e.clamp(0.0, s - 1.0));
+        }
+        if let ([p], Some(s)) = (pos.as_slice(), size.first()) {
+            let (lo, hi) = (p.floor() as usize, (p.ceil() as usize).min(*s as usize - 1));
+            let t = p - p.floor();
+            return Ok((0..outs).map(|j| sample(lo, j) * (1.0 - t) + sample(hi, j) * t).collect());
+        }
+        let mut index = 0;
+        let mut stride = 1;
+        for (i, p) in pos.iter().enumerate() {
+            index += p.round() as usize * stride;
+            stride *= size.get(i).copied().unwrap_or(1.0) as usize;
+        }
+        Ok((0..outs).map(|j| sample(index, j)).collect())
+    }
+}
@@ -11,21 +11,21 @@ use crate::import::{Dsc, import};
 use crate::{EpsOptions, Level, Preview, Raster};

 /// `body` as an EPS file with a 100 × 100 pt bounding box.
-fn eps(body: &str) -> Vec<u8> {
+pub(super) fn eps(body: &str) -> Vec<u8> {
    format!("%!PS-Adobe-3.0 EPSF-3.0\n%%BoundingBox: 0 0 100 100\n%%EndComments\n{body}\nshowpage\n%%EOF\n").into_bytes()
 }

-fn read(body: &str) -> crate::Imported {
+pub(super) fn read(body: &str) -> crate::Imported {
    import(&eps(body)).unwrap()
 }

 /// The objects of the document's layer.
-fn objects(d: &Document) -> Vec<Arc<Node>> {
+pub(super) fn objects(d: &Document) -> Vec<Arc<Node>> {
    d.layers[0].children().unwrap().clone()
 }

 /// Every object, down through groups, in order.
-fn all(d: &Document) -> Vec<Arc<Node>> {
+pub(super) fn all(d: &Document) -> Vec<Arc<Node>> {
    fn walk(n: &Arc<Node>, out: &mut Vec<Arc<Node>>) {
        out.push(n.clone());
        for c in n.children().into_iter().flatten() {
@@ -39,25 +39,25 @@ fn all(d: &Document) -> Vec<Arc<Node>> {
    out
 }

-fn fill(n: &Node) -> Option<&Paint> {
+pub(super) fn fill(n: &Node) -> Option<&Paint> {
    n.appearance.items.iter().find_map(|i| match i {
        AppearanceItem::Fill(f) => Some(&f.paint),
        _ => None,
    })
 }

-fn stroke(n: &Node) -> Option<&vectorcraft_doc::StrokeLayer> {
+pub(super) fn stroke(n: &Node) -> Option<&vectorcraft_doc::StrokeLayer> {
    n.appearance.items.iter().find_map(|i| match i {
        AppearanceItem::Stroke(s) => Some(s),
        _ => None,
    })
 }

-fn bounds(n: &Node) -> Rect {
+pub(super) fn bounds(n: &Node) -> Rect {
    n.geometric_bounds().unwrap()
 }

-fn near(a: Rect, b: Rect) -> bool {
+pub(super) fn near(a: Rect, b: Rect) -> bool {
    [(a.x0, b.x0), (a.y0, b.y0), (a.x1, b.x1), (a.y1, b.y1)].iter().all(|(x, y)| (x - y).abs() < 0.05)
 }

@@ -477,7 +477,7 @@ fn blue(body: &str) {
 }

 /// Check that PostScript `cond` leaves `true`.
-fn check(cond: &str) {
+pub(super) fn check(cond: &str) {
    blue(&format!("{cond} {{ 0 0 1 setrgbcolor }} {{ 1 0 0 setrgbcolor }} ifelse"));
 }

@@ -0,0 +1,993 @@
+//! EPS as other apps write it: for each common generator, a short hand-written program with the
+//! constructs its files typically use (its prolog's kind of procedures, how it sets colour, fills
+//! with gradients and patterns, places images and sets type), each read as vectors without a
+//! fallback to the preview. No generator's files or prologs are copied: these reproduce the
+//! PostScript constructs only.
+
+use vectorcraft_color::{Color, Paint};
+use vectorcraft_doc::{ColorMode, Document, Node, NodeKind};
+use vectorcraft_geom::{FillRule, Point, Rect};
+
+use super::tests::{all, bounds, fill, near, objects, read, stroke};
+use crate::import::{Imported, import};
+use crate::ps::{ascii85, deflate};
+
+/// An EPS file of a 200 × 150 pt page made by `creator`.
+fn file(creator: &str, program: &str) -> Vec<u8> {
+    format!("%!PS-Adobe-3.0 EPSF-3.0\n%%Creator: {creator}\n%%BoundingBox: 0 0 200 150\n%%LanguageLevel: 3\n%%EndComments\n{program}\n%%EOF\n")
+        .into_bytes()
+}
+
+/// `r` came in as vectors, without a warning of an error or of art left out.
+fn clean(r: &Imported) {
+    assert!(!r.preview, "{:?}", r.warnings);
+    let bad = ["error", "couldn't", "left out", "mid-grey", "middle colour", "unknown"];
+    assert!(r.warnings.iter().all(|w| !bad.iter().any(|b| w.contains(b))), "{:?}", r.warnings);
+}
+
+fn open(creator: &str, program: &str) -> Imported {
+    let r = import(&file(creator, program)).unwrap();
+    clean(&r);
+    r
+}
+
+/// The objects of `kind` (`Node::kind_label`), down through groups.
+fn of_kind(d: &Document, kind: &str) -> Vec<std::sync::Arc<Node>> {
+    all(d).into_iter().filter(|n| n.kind_label() == kind).collect()
+}
+
+/// ASCII85 of Flate-compressed `data`, as inline data after an operator.
+fn a85_flate(data: &[u8]) -> String {
+    ascii85(&deflate(data))
+}
+
+/// Pixel `(x, y)` (straight RGBA) of the first image in `d`.
+fn pixel(d: &Document, x: u32, y: u32) -> [u8; 4] {
+    let im = all(d)
+        .into_iter()
+        .find_map(|n| match &n.kind {
+            NodeKind::Image(im) => Some(im.key.clone()),
+            _ => None,
+        })
+        .unwrap();
+    let img = image::load_from_memory(&d.images[&im].bytes).unwrap().to_rgba8();
+    img.get_pixel(x, y).0
+}
+
+/// A Coons or tensor patch (type 7: sixteen points) in the packed form of a mesh shading with
+/// 8-bit flags, 32-bit coordinates over `[0 200 0 150]` and 16-bit colour components.
+fn patch(points: &[(f64, f64)], colors: &[[f64; 3]]) -> Vec<u8> {
+    let mut v = vec![0u8];
+    for (x, y) in points {
+        v.extend(((x / 200.0 * f64::from(u32::MAX)).round() as u32).to_be_bytes());
+        v.extend(((y / 150.0 * f64::from(u32::MAX)).round() as u32).to_be_bytes());
+    }
+    for c in colors {
+        for k in c {
+            v.extend(((k * 65535.0).round() as u16).to_be_bytes());
+        }
+    }
+    v
+}
+
+/// The twelve boundary points of the square patch `(x0, y0)`–`(x1, y1)` in shading order (up its
+/// left side, along its top, down its right side, back along its bottom).
+fn square(x0: f64, y0: f64, x1: f64, y1: f64) -> Vec<(f64, f64)> {
+    let (dx, dy) = ((x1 - x0) / 3.0, (y1 - y0) / 3.0);
+    vec![
+        (x0, y0),
+        (x0, y0 + dy),
+        (x0, y0 + 2.0 * dy),
+        (x0, y1),
+        (x0 + dx, y1),
+        (x0 + 2.0 * dx, y1),
+        (x1, y1),
+        (x1, y0 + 2.0 * dy),
+        (x1, y0 + dy),
+        (x1, y0),
+        (x0 + 2.0 * dx, y0),
+        (x0 + dx, y0),
+    ]
+}
+
+/// cairo (Inkscape's EPS and PostScript export, and other GTK apps): a prolog of PDF-like
+/// operator procedures, `rectclip` and `cm`, gradients as `shfill` with stitched functions whose
+/// `Encode` a loop builds, tiling patterns, a Type 42 font with text set through `Tm`/`Tf`/`Tj`,
+/// images with a 1-bit mask interleaved by row (`ImageType 3`), stencil masks, images flushed with
+/// `status`/`flushfile`, and mesh gradients from a reusable stream.
+#[test]
+fn cairo_files_read_as_vectors() {
+    // Mask rows (1: paint, `Decode [1 0]`) before each image row.
+    let image = a85_flate(&[0b1000_0000, 255, 0, 0, 0, 255, 0, 0b0100_0000, 0, 0, 255, 255, 255, 255]);
+    let mut points = square(150.0, 10.0, 190.0, 50.0);
+    points.extend([(160.0, 20.0), (160.0, 40.0), (180.0, 40.0), (180.0, 20.0)]);
+    let mesh = a85_flate(&patch(&points, &[[1.0, 0.0, 0.0], [0.0, 1.0, 0.0], [0.0, 0.0, 1.0], [1.0, 1.0, 0.0]]));
+    let program = format!(
+        r##"%%BeginProlog
+50 dict begin
+/q {{ gsave }} bind def /Q {{ grestore }} bind def
+/cm {{ 6 array astore concat }} bind def
+/w {{ setlinewidth }} bind def /J {{ setlinecap }} bind def /j {{ setlinejoin }} bind def
+/M {{ setmiterlimit }} bind def /d {{ setdash }} bind def
+/m {{ moveto }} bind def /l {{ lineto }} bind def /c {{ curveto }} bind def /h {{ closepath }} bind def
+/re {{ 4 2 roll moveto 1 index 0 rlineto 0 exch rlineto neg 0 rlineto closepath }} bind def
+/S {{ stroke }} bind def /f {{ fill }} bind def /f* {{ eofill }} bind def /n {{ newpath }} bind def
+/W {{ clip }} bind def /W* {{ eoclip }} bind def /BT {{ }} bind def /ET {{ }} bind def
+/BDC {{ mark 3 1 roll /BDC pdfmark }} bind def /EMC {{ mark /EMC pdfmark }} bind def
+/cairo_store_point {{ /cairo_point_y exch def /cairo_point_x exch def }} def
+/Tj {{ show currentpoint cairo_store_point }} bind def
+/cairo_selectfont {{ cairo_font_matrix aload pop pop pop 0 0 6 array astore
+  cairo_font exch selectfont cairo_point_x cairo_point_y moveto }} bind def
+/Tf {{ pop /cairo_font exch def /cairo_font_matrix where {{ pop cairo_selectfont }} if }} bind def
+/Tm {{ 2 copy 8 2 roll 6 array astore /cairo_font_matrix exch def cairo_store_point
+  /cairo_font where {{ pop cairo_selectfont }} if }} bind def
+/g {{ setgray }} bind def /rg {{ setrgbcolor }} bind def /d1 {{ setcachedevice }} bind def
+/cairo_flush_ascii85_file {{ cairo_ascii85_file status {{ cairo_ascii85_file flushfile }} if }} def
+/cairo_image {{ image cairo_flush_ascii85_file }} def
+/cairo_imagemask {{ imagemask cairo_flush_ascii85_file }} def
+%%EndProlog
+%%BeginSetup
+11 dict begin
+/FontType 42 def /FontName /DejaVuSans def /PaintType 0 def
+/FontMatrix [ 1 0 0 1 0 0 ] def /FontBBox [ 0 0 0 0 ] def
+/Encoding 256 array def 0 1 255 {{ Encoding exch /.notdef put }} for
+Encoding 72 /H put Encoding 105 /i put
+/CharStrings 3 dict dup begin /.notdef 0 def /H 1 def /i 2 def end readonly def
+/sfnts [ <00010000000100000000000000> ] def
+/f-0-0 currentdict end definefont pop
+%%EndSetup
+%%Page: 1 1
+q 0 0 200 150 rectclip
+1 0 0 -1 0 150 cm q
+0.8 0.2 0.2 rg 10 10 40 30 re f
+0 g 1.5 w 1 J 0 j [ 4 2] 0 d 10 60 m 40 45 60 90 90 60 c S [] 0.0 d
+/BDC where {{ pop /Artifact << >> BDC EMC }} if
+q 100 10 60 30 re W n
+/CairoFunction << /FunctionType 3 /Domain [ 0 1 ] /Functions [
+  << /FunctionType 2 /Domain [ 0 1 ] /C0 [ 1 0 0 ] /C1 [ 0 1 0 ] /N 1 >>
+  << /FunctionType 2 /Domain [ 0 1 ] /C0 [ 0 1 0 ] /C1 [ 0 0 1 ] /N 1 >> ]
+  /Bounds [ 0.5 ] /Encode [ 1 1 2 {{ pop 0 1 }} for ] >> def
+<< /ShadingType 2 /ColorSpace /DeviceRGB /Coords [ 100 0 160 0 ] /Extend [ true true ] /Function CairoFunction >> shfill
+Q
+/CairoPattern {{ q 0 0 10 10 rectclip q 0.8 0 0.8 rg 0 0 5 5 re f Q Q }} bind def
+<< /PatternType 1 /PaintType 1 /TilingType 1 /XStep 10 /YStep 10 /BBox [0 0 10 10]
+   /PaintProc {{ pop CairoPattern }} >> [ 1 0 0 1 0 0 ] makepattern setpattern
+10 90 40 40 re f
+0 0.2 0.4 rg BT 12 0 0 -12 60 140 Tm /f-0-0 1 Tf (Hi)Tj ET
+q [ 20 0 0 -20 110 110 ] concat
+/cairo_ascii85_file currentfile /ASCII85Decode filter def
+/DeviceRGB setcolorspace
+<< /ImageType 3 /InterleaveType 2
+  /DataDict << /ImageType 1 /Width 2 /Height 2 /Interpolate false /BitsPerComponent 8
+    /Decode [ 0 1 0 1 0 1 ] /DataSource cairo_ascii85_file /FlateDecode filter /ImageMatrix [ 2 0 0 -2 0 2 ] >>
+  /MaskDict << /ImageType 1 /Width 2 /Height 2 /BitsPerComponent 1 /Decode [ 1 0 ] /ImageMatrix [ 2 0 0 -2 0 2 ] >>
+>> cairo_image
+{image}
+Q
+q 0 0 1 rg [ 20 0 0 -10 150 140 ] concat
+/cairo_ascii85_file currentfile /ASCII85Decode filter def
+8 1 true [ 8 0 0 -1 0 1 ] cairo_ascii85_file cairo_imagemask
+{mask}
+Q
+q currentfile /ASCII85Decode filter /FlateDecode filter /ReusableStreamDecode filter
+{mesh}
+/CairoData exch def
+<< /ShadingType 7 /ColorSpace /DeviceRGB /DataSource CairoData /BitsPerCoordinate 32
+   /BitsPerComponent 16 /BitsPerFlag 8 /Decode [ 0 200 0 150 0 1 0 1 0 1 ] >> shfill
+currentdict /CairoData undef
+Q
+Q Q
+showpage
+%%Trailer
+end"##,
+        mask = ascii85(&[0xF0]),
+    );
+    let r = open("cairo 1.18.4 (https://cairographics.org)", &program);
+    let d = &r.document;
+    // The tiling pattern is a pattern swatch of its cell.
+    assert_eq!(d.patterns.len(), 1);
+    let pat = &d.patterns[0];
+    assert!(near(pat.tile, Rect::new(0.0, 0.0, 10.0, 10.0)), "{:?}", pat.tile);
+    assert!(d.swatch(&pat.name).is_some_and(|s| matches!(s.paint, Paint::Pattern { .. })));
+    assert!(all(d).iter().any(|n| matches!(fill(n), Some(Paint::Pattern { .. }))));
+    // The stitched gradient, the dashed curve, the type, the masked image, the stencil and the mesh.
+    assert!(all(d).iter().any(|n| matches!(fill(n), Some(Paint::Gradient(_)))));
+    assert!(all(d).iter().any(|n| stroke(n).is_some_and(|s| s.dash.is_some())));
+    assert_eq!(of_kind(d, "Type").len(), 1);
+    assert_eq!(of_kind(d, "Image").len(), 2);
+    let im = all(d).into_iter().find(|n| matches!(&n.kind, NodeKind::Image(im) if im.width == 2)).unwrap();
+    let NodeKind::Image(im) = &im.kind else { panic!() };
+    let img = image::load_from_memory(&d.images[&im.key].bytes).unwrap().to_rgba8();
+    // Painted where the mask is 1, transparent where it is 0.
+    assert_eq!([img.get_pixel(0, 0).0, img.get_pixel(1, 0).0], [[255, 0, 0, 255], [0, 255, 0, 0]]);
+    assert_eq!([img.get_pixel(0, 1).0, img.get_pixel(1, 1).0], [[0, 0, 255, 0], [255, 255, 255, 255]]);
+    let mesh = of_kind(d, "Mesh");
+    assert_eq!(mesh.len(), 1);
+    // `cm` turned user space y down, as the document is.
+    assert!(near(bounds(&mesh[0]), Rect::new(150.0, 10.0, 190.0, 50.0)), "{:?}", bounds(&mesh[0]));
+}
+
+/// cairo's Type 3 fonts (fonts it can't embed otherwise): glyph procedures in an array, picked
+/// through `CharStrings` by `BuildGlyph`, widths from `d1`: the glyphs are drawn as their
+/// outlines, one group per string.
+#[test]
+fn type3_fonts_draw_their_glyph_procedures() {
+    let program = r##"/d1 { setcachedevice } bind def
+8 dict begin
+/FontType 3 def
+/FontMatrix [ 0.001 0 0 0.001 0 0 ] def
+/FontBBox [ 0 0 1000 1000 ] def
+/Encoding 256 array def 0 1 255 { Encoding exch /.notdef put } for
+Encoding 65 /g1 put
+/Glyphs [ { } { 600 0 0 0 500 700 d1 0 0 moveto 500 0 lineto 250 700 lineto closepath fill } ] def
+/CharStrings 2 dict dup begin /.notdef 0 def /g1 1 def end readonly def
+/BuildGlyph { exch dup /Glyphs get exch /CharStrings get 3 -1 roll 2 copy known not { pop /.notdef } if get get exec } bind def
+/BuildChar { 1 index /Encoding get exch get 1 index /BuildGlyph get exec } bind def
+currentdict end /f-1-0 exch definefont pop
+1 0 0 setrgbcolor
+/f-1-0 findfont 20 scalefont setfont 10 10 moveto (AA) show
+currentpoint 2 copy translate
+% `stringwidth` measures them without drawing.
+(A) stringwidth pop 12 eq { 0 0 1 setrgbcolor } if 0 0 moveto 3 0 65 2 0 (AA) awidthshow
+showpage"##;
+    let r = open("cairo", program);
+    let d = &r.document;
+    let groups = of_kind(d, "Group");
+    assert_eq!(groups.len(), 2, "{:?}", all(d).iter().map(|n| n.kind_label()).collect::<Vec<_>>());
+    assert_eq!(groups[0].name.as_deref(), Some("AA"));
+    let glyphs: Vec<Rect> = groups[0].children().unwrap().iter().map(|n| bounds(n)).collect();
+    // 500 × 700 units at 20 pt (0.02 pt a unit) on the baseline 10 pt up the page; the second glyph
+    // after the first one's width (600 units).
+    assert!(near(glyphs[0], Rect::new(10.0, 126.0, 20.0, 140.0)), "{glyphs:?}");
+    assert!(near(glyphs[1], Rect::new(22.0, 126.0, 32.0, 140.0)), "{glyphs:?}");
+    assert_eq!(fill(&groups[0].children().unwrap()[0]).and_then(Paint::color), Some(Color::rgb(1.0, 0.0, 0.0)));
+    // `awidthshow` spaces them (2 more, 3 more after an "A"), in blue: the width measured right.
+    let second: Vec<Rect> = groups[1].children().unwrap().iter().map(|n| bounds(n)).collect();
+    assert!((second[1].x0 - second[0].x0 - 17.0).abs() < 1e-6, "{second:?}");
+    assert_eq!(fill(&groups[1].children().unwrap()[0]).and_then(Paint::color), Some(Color::rgb(0.0, 0.0, 1.0)));
+}
+
+/// matplotlib's PostScript backend: a `mpldict` of short procedures defined with `_d`, Type 3
+/// fonts converted from TrueType (`CharStrings` of glyph procedures with `sc`, `BuildGlyph` and
+/// `BuildChar`) shown glyph by glyph with `glyphshow`, `clipbox`, marker procedures, and images as
+/// `colorimage` reading hexadecimal data with `readhexstring`.
+#[test]
+fn matplotlib_files_read_as_vectors() {
+    let program = r##"%%BeginProlog
+/mpldict 11 dict def
+mpldict begin
+/_d { bind def } bind def
+/m { moveto } _d
+/l { lineto } _d
+/r { rlineto } _d
+/c { curveto } _d
+/cl { closepath } _d
+/ce { closepath eofill } _d
+/box { m 1 index 0 r 0 exch r neg 0 r cl } _d
+/clipbox { box clip newpath } _d
+/sc { setcachedevice } _d
+%!PS-Adobe-3.0 Resource-Font
+10 dict begin
+/FontName /DejaVuSans def
+/PaintType 0 def
+/FontMatrix [ 0.00048828125 0 0 0.00048828125 0 0 ] def
+/FontBBox [ -2090 -948 3673 2524 ] def
+/FontType 3 def
+/Encoding [ /A /V ] def
+/CharStrings 3 dict dup begin
+/.notdef 0 def
+/A { 1401 0 16 0 1384 1493 sc 16 0 m 700 1493 l 1384 0 l ce } _d
+/V { 1401 0 16 0 1384 1493 sc 16 1493 m 700 0 l 1384 1493 l ce } _d
+end readonly def
+/BuildGlyph { exch begin CharStrings exch 2 copy known not { pop /.notdef } if get exec end } _d
+/BuildChar { 1 index /Encoding get exch get 1 index /BuildGlyph get exec } _d
+FontName currentdict end definefont pop
+end
+%%EndProlog
+mpldict begin
+0 0 translate
+0 0 200 150 rectclip
+gsave
+0 0 m 200 0 l 200 150 l 0 150 l cl
+1 setgray fill
+grestore
+gsave
+10 10 180 130 clipbox
+0.122 0.467 0.706 setrgbcolor 1.5 setlinewidth 1 setlinejoin 2 setlinecap [] 0 setdash
+newpath 10 10 m 50 60 l 90 30 l stroke
+/o { gsave newpath translate 3 0 m 0 0 3 0 360 arc cl gsave 1 0 0 setrgbcolor fill grestore stroke grestore } bind def
+10 10 o 50 60 o
+grestore
+0 setgray
+gsave 20 100 translate 0 rotate
+/DejaVuSans 20.0 selectfont 0 0 m /A glyphshow 13.68 0 m /V glyphshow
+grestore
+gsave 120 20 translate 40 40 scale
+/DataString 6 string def
+2 2 8 [ 2 0 0 -2 0 2 ] { currentfile DataString readhexstring pop } bind false 3 colorimage
+ff000000ff00
+0000ffffffff
+grestore
+end
+showpage"##;
+    let r = open("Matplotlib v3.9.0, https://matplotlib.org/", program);
+    let d = &r.document;
+    // The two glyphs are their outlines (even-odd, as `ce` fills them), at 20 pt.
+    let glyphs: Vec<_> = all(d).into_iter().filter(|n| matches!(n.kind, NodeKind::Path { rule: FillRule::EvenOdd, .. })).collect();
+    assert_eq!(glyphs.len(), 2);
+    let a = bounds(&glyphs[0]);
+    assert!(near(a, Rect::new(20.16, 150.0 - 100.0 - 14.58, 33.52, 50.0)), "{a:?}");
+    // Each marker is one object, filled and stroked; the image is its four pixels.
+    let markers = all(d).into_iter().filter(|n| fill(n).is_some() && stroke(n).is_some()).count();
+    assert_eq!(markers, 2);
+    assert_eq!([pixel(d, 0, 0), pixel(d, 1, 0), pixel(d, 0, 1)], [[255, 0, 0, 255], [0, 255, 0, 255], [0, 0, 255, 255]]);
+}
+
+/// CorelDRAW: a `wCorel…Dict` procset of `@` procedures defined with `bd`, `ld` and `xd`,
+/// `currentscreen` kept and `setscreen` replaced, CMYK colour kept in `$c $m $y $k`, a document
+/// in `save`/`restore` blocks, `showpage` redefined, fonts reencoded by copying their dictionary
+/// without its `FID`, and type set with `ashow` through `makefont`.
+#[test]
+fn coreldraw_files_read_as_vectors() {
+    let program = r##"%%BeginProlog
+%%BeginResource: procset wCorel3Dict 3.0 0
+/wCorel3Dict 300 dict def wCorel3Dict begin
+/bd{bind def}bind def/ld{load def}bd/xd{exch def}bd/_ null def/rp{{pop}repeat}bd
+/@cp/closepath ld/@gs/gsave ld/@gr/grestore ld/@np/newpath ld/Tl/translate ld
+/$sv 0 def/@sv{/$sv save def}bd/@rs{$sv restore}bd/spg/showpage ld/showpage{}bd
+currentscreen/@dsp xd/$dsp/@dsp def/$dsa xd/$dsf xd/$sdf false def/$SDF false def
+/$Scra 0 def/SetScr/setscreen ld/@ss{2 index 0 eq{$dsf 3 1 roll 4 -1 roll pop}if exch $Scra add exch SetScr}bd
+/$c 0 def/$m 0 def/$y 0 def/$k 0 def/$t 1 def/$n _ def/$o 0 def/$fil 0 def/$fm 0 def
+/$ctm matrix currentmatrix def/$ptm matrix def
+/L2? false/languagelevel where{pop languagelevel 2 ge{pop true}if}if def
+/@BeginSysCorelDict{systemdict/Corel30Dict known{systemdict/Corel30Dict get exec}if}bd
+/@EndSysCorelDict{systemdict/Corel30Dict known{systemdict/Corel30Dict get exec}if}bd
+/@sm{/$ctm $ctm currentmatrix def}bd/@rm{$ctm setmatrix}bd
+/k{/$k xd/$y xd/$m xd/$c xd/$n _ def}bd
+/@k{$c $m $y $k L2?{setcmykcolor}{4 rp 0 setgray}ifelse}bd
+/m/moveto ld/L/lineto ld/C/curveto ld/@c/closepath ld
+/F{@gs @k $fil 0 eq{fill}{eofill}ifelse @gr @np}bd
+/S{@k stroke}bd/@w{setlinewidth}bd
+/CorelDrawReencodeVect[16#80/Euro 16#e9/eacute]def
+/@reencode{findfont dup length dict begin{1 index/FID ne{def}{pop pop}ifelse}forall
+/Encoding Encoding 256 array copy def CorelDrawReencodeVect aload length 2 idiv{Encoding 3 1 roll put}repeat
+currentdict end definefont pop}bd
+/@F{/$fm xd findfont $fm makefont setfont}bd
+end
+%%EndResource
+%%EndProlog
+%%BeginSetup
+wCorel3Dict begin
+@BeginSysCorelDict
+2.6131 setmiterlimit 1.00 setflat
+/$fst 128 def
+0 45 {dup mul exch dup mul add 1 exch sub} @ss
+/_Helvetica/Helvetica @reencode
+%%EndSetup
+%%Page: 1 1
+@sv
+@sm
+@sv
+0 1 1 0 k
+10 10 m 90 10 L 90 60 L 10 60 L 10 10 L @c
+F
+@rs
+@sv
+1 @w 1 0 0 0 k
+10 70 m 50 90 70 90 90 70 C
+S
+@rs
+@sv
+0 0 0 1 k @k
+/_Helvetica [12 0 0 12 0 0] @F
+10 120 m 1 0 (Corel) ashow
+@rs
+@rs
+@EndSysCorelDict
+end
+showpage
+spg"##;
+    let r = open("CorelDRAW 2024", program);
+    let d = &r.document;
+    assert_eq!(d.color_mode, ColorMode::Cmyk);
+    let rect = all(d).into_iter().find(|n| fill(n).and_then(Paint::color) == Some(Color::cmyk(0.0, 1.0, 1.0, 0.0))).unwrap();
+    assert!(near(bounds(&rect), Rect::new(10.0, 90.0, 90.0, 140.0)), "{:?}", bounds(&rect));
+    assert!(all(d).iter().any(|n| stroke(n).is_some_and(|s| s.paint.color() == Some(Color::cmyk(1.0, 0.0, 0.0, 0.0)))));
+    let NodeKind::Text(t) = &of_kind(d, "Type")[0].kind else { panic!() };
+    assert!(t.plain_text().starts_with("Corel"));
+}
+
+/// Affinity Designer (and other PDF-engine exporters): PDF-like procedures, gradients as shading
+/// patterns (`makepattern setpattern`) with sampled functions, spot colours (`Separation`) and
+/// `DeviceN` inks with tint transforms, and images compressed with Flate and a PNG predictor.
+#[test]
+fn affinity_files_read_as_vectors() {
+    // Two rows of two RGB pixels, PNG-filtered: Sub, then Up.
+    let rows = [[1u8, 255, 0, 0, 1, 255, 0], [2, 0, 0, 255, 0, 0, 255]];
+    let image = a85_flate(&rows.concat());
+    let program = format!(
+        r##"%%BeginProlog
+/AFDict 40 dict def AFDict begin
+/languagelevel where {{ pop languagelevel }} {{ 1 }} ifelse 3 lt {{ (This file needs PostScript Level 3) print quit }} if
+/bd {{ bind def }} bind def
+/q {{ gsave }} bd /Q {{ grestore }} bd /cm {{ [ 7 1 roll ] concat }} bd
+/re {{ 4 2 roll moveto 1 index 0 rlineto 0 exch rlineto neg 0 rlineto closepath }} bd
+/f {{ fill }} bd /f* {{ eofill }} bd /W {{ clip }} bd /n {{ newpath }} bd
+/rg {{ setrgbcolor }} bd /k {{ setcmykcolor }} bd
+end
+%%EndProlog
+%%BeginSetup
+/setpagedevice where {{ pop << /PageSize [ 200 150 ] >> setpagedevice }} if
+%%EndSetup
+%%Page: 1 1
+AFDict begin
+q
+<< /PatternType 2 /Shading << /ShadingType 2 /ColorSpace /DeviceRGB /Coords [ 0 0 100 0 ]
+  /Function << /FunctionType 0 /Domain [ 0 1 ] /Range [ 0 1 0 1 0 1 ] /Size [ 3 ] /BitsPerSample 8
+    /DataSource <ff000000ff000000ff> >> /Extend [ true true ] >> >> matrix makepattern setpattern
+10 10 100 40 re f
+[ /Separation (PANTONE 185 C) /DeviceCMYK {{ dup 0.91 mul exch 0.76 mul 0 exch 0 4 1 roll }} ] setcolorspace
+0.5 setcolor 10 60 40 40 re f
+[ /DeviceN [ /Cyan /Magenta ] /DeviceCMYK {{ 0 0 }} ] setcolorspace
+0.3 0.7 setcolor 60 60 40 40 re f
+q 40 0 0 40 120 60 cm /DeviceRGB setcolorspace
+<< /ImageType 1 /Width 2 /Height 2 /BitsPerComponent 8 /Decode [ 0 1 0 1 0 1 ] /ImageMatrix [ 2 0 0 -2 0 2 ]
+   /DataSource currentfile /ASCII85Decode filter << /Predictor 15 /Colors 3 /Columns 2 /BitsPerComponent 8 >> /FlateDecode filter >> image
+{image}
+Q
+Q
+end
+showpage"##
+    );
+    let r = open("Affinity Designer 2", &program);
+    let d = &r.document;
+    let Some(Paint::Gradient(g)) = all(d).into_iter().find_map(|n| fill(&n).cloned()) else { panic!("no gradient") };
+    // The sampled function's colours, not its middle one: red, green, blue.
+    let at = |t: f32| g.gradient.stops.iter().find(|s| (s.offset - t).abs() < 1e-3).map(|s| s.color.to_rgb_uncalibrated());
+    assert_eq!([at(0.0), at(0.5), at(1.0)], [Some([1.0, 0.0, 0.0]), Some([0.0, 1.0, 0.0]), Some([0.0, 0.0, 1.0])]);
+    assert!(d.swatch("PANTONE 185 C").is_some_and(|s| s.spot));
+    assert!(all(d).iter().any(|n| matches!(fill(n), Some(Paint::Solid { swatch: Some(s), .. }) if s == "PANTONE 185 C")));
+    assert!(all(d).iter().any(|n| fill(n).and_then(Paint::color) == Some(Color::cmyk(0.3, 0.7, 0.0, 0.0))));
+    assert_eq!(
+        [pixel(d, 0, 0), pixel(d, 1, 0), pixel(d, 0, 1), pixel(d, 1, 1)],
+        [[255, 0, 0, 255], [0, 255, 0, 255], [255, 0, 255, 255], [0, 255, 255, 255]]
+    );
+}
+
+/// LibreOffice and OpenOffice: a prolog that keeps the operand and dictionary stack depths and a
+/// `save` to restore at the end, coordinates negated in its procedures, fonts reencoded to
+/// ISO Latin-1 and defined again under one name, and type stretched to a width with
+/// `stringwidth`.
+#[test]
+fn libreoffice_files_read_as_vectors() {
+    let program = r##"%%BeginProlog
+%%BeginResource: procset SDRes-Prolog 1.0 0
+/b4_inc_state save def
+/dict_count countdictstack def
+/op_count count 1 sub def
+userdict begin
+0 setgray 0 setlinecap 1 setlinewidth 0 setlinejoin 10 setmiterlimit [] 0 setdash newpath
+/languagelevel where {pop languagelevel 1 ne {false setstrokeadjust false setoverprint} if} if
+/bdef {bind def} bind def
+/c {setrgbcolor} bdef
+/l {neg lineto} bdef
+/rl {neg rlineto} bdef
+/lw {setlinewidth} bdef
+/m {neg moveto} bdef
+/ct {6 2 roll neg 6 2 roll neg 6 2 roll neg curveto} bdef
+/t {neg translate} bdef
+/s {scale} bdef
+/gs {gsave} bdef
+/gr {grestore} bdef
+/f {findfont dup length dict begin {1 index /FID ne {def} {pop pop} ifelse} forall /Encoding ISOLatin1Encoding def
+currentdict end /NFont exch definefont pop /NFont findfont} bdef
+/p {closepath} bdef
+/sf {scalefont setfont} bdef
+/ef {eofill} bdef
+/ps {stroke} bdef
+/pum {matrix currentmatrix} bdef
+/pom {setmatrix} bdef
+/bs {/aString exch def /nXOfs exch def /nWidth exch def currentpoint nXOfs 0 rmoveto pum nWidth aString stringwidth pop div 1 scale aString show pom moveto} bdef
+%%EndResource
+%%EndProlog
+%%BeginSetup
+%%EndSetup
+%%Page: 1 1
+%%BeginPageSetup
+%%EndPageSetup
+pum
+0.1 0.1 s
+0 -1500 t
+/tm matrix currentmatrix def
+gs
+tm setmatrix
+0.2 0.4 0.8 c 100 100 m 900 100 l 900 600 l 100 600 l 100 100 l p ef
+gr
+gs
+tm setmatrix
+10 lw 0 0 0 c 100 800 m 400 700 600 900 900 800 ct ps
+gr
+gs
+tm setmatrix
+/Helvetica f 120 sf 0 0 0 c 100 1300 m 800 0 (Office) bs
+gr
+pom
+count op_count sub {pop} repeat countdictstack dict_count sub {end} repeat b4_inc_state restore
+%%PageTrailer
+%%Trailer
+showpage"##;
+    let r = open("LibreOffice 24.2", program);
+    let d = &r.document;
+    let rect = all(d).into_iter().find(|n| fill(n).and_then(Paint::color) == Some(Color::rgb(0.2, 0.4, 0.8))).unwrap();
+    assert!(near(bounds(&rect), Rect::new(10.0, 10.0, 90.0, 60.0)), "{:?}", bounds(&rect));
+    assert!(all(d).iter().any(|n| stroke(n).is_some_and(|s| (s.width - 1.0).abs() < 1e-9)));
+    let NodeKind::Text(t) = &of_kind(d, "Type")[0].kind else { panic!() };
+    assert_eq!(t.plain_text(), "Office");
+}
+
+/// Ghostscript's `ps2write` and `eps2write`: a procset that captures dictionaries with `//name`
+/// (resolved when read, used after their dictionary is gone), probes the interpreter (`gcheck`,
+/// `currentglobal`, `/currentdistillerparams where`, an unguarded `pdfmark`), defines resources,
+/// and runs page content kept between `stream` and `endstream` through `SubFileDecode`, with
+/// `selectfont`, `xshow`, `rectfill`, `execform`, half-tone dictionaries and a triangle mesh.
+#[test]
+fn ghostscript_files_read_as_vectors() {
+    let program = r##"%%BeginProlog
+save
+countdictstack
+mark
+newpath
+/showpage {} def
+/setpagedevice {pop} def
+%%EndProlog
+%%Page: 1 1
+%%BeginProlog
+10 dict begin
+/this currentdict def
+/ebuf 200 string def
+/prnt { //ebuf cvs pop } bind def
+/knownget { 2 copy known { get true } { pop pop false } ifelse } bind def
+end
+20 dict begin
+/PDFR_GLOBAL false def
+/cp2g { dup gcheck not { dup type /dicttype eq { dup length dict copy } if } if } bind def
+/DefaultSwitch { dup where { pop pop } { false def } ifelse } bind def
+/PDFR_DEBUG DefaultSwitch
+/currentdistillerparams where { pop currentdistillerparams /CoreDistVersion get 5000 lt } { true } ifelse
+{ /setdistillerparams {pop} def } if
+[ /Title (gs) /DOCINFO pdfmark
+currentglobal true setglobal
+/PDFReader 10 dict def
+setglobal
+/OPDF << /Run { cvx exec } >> /ProcSet defineresource pop
+/q { gsave } bind def /Q { grestore } bind def
+/cm { [ 7 1 roll ] concat } bind def
+/rg { setrgbcolor } bind def
+/re { rectfill } bind def
+/Tf { selectfont } bind def
+/Td { moveto } bind def
+/stream { currentfile 0 (endstream) /SubFileDecode filter /OPDF /ProcSet findresource /Run get exec } bind def
+%%EndProlog
+<< /HalftoneType 1 /Frequency 60 /Angle 45 /SpotFunction { dup mul exch dup mul add 1 exch sub } >> sethalftone
+/Form1 << /FormType 1 /BBox [ 0 0 20 20 ] /Matrix [ 1 0 0 1 0 0 ] /PaintProc { pop 0 0 1 rg 0 0 20 20 re } >> def
+stream
+q 1 0 0 rg 10 10 80 40 re
+Q /Helvetica 50 Tf 20 100 Td (gs) [ 25 0 ] xshow
+endstream
+q 120 100 translate Form1 execform Q
+<< /ShadingType 4 /ColorSpace /DeviceRGB /DataSource [ 0 120 10 1 0 0  0 180 10 0 1 0  0 150 60 0 0 1  1 190 60 1 1 0 ] >> shfill
+end
+cleartomark countdictstack exch sub { end } repeat restore
+showpage"##;
+    let r = open("GPL Ghostscript 10.04.0 (eps2write)", program);
+    let d = &r.document;
+    let red = all(d).into_iter().find(|n| fill(n).and_then(Paint::color) == Some(Color::rgb(1.0, 0.0, 0.0))).unwrap();
+    assert!(near(bounds(&red), Rect::new(10.0, 100.0, 90.0, 140.0)), "{:?}", bounds(&red));
+    let form = all(d).into_iter().find(|n| fill(n).and_then(Paint::color) == Some(Color::rgb(0.0, 0.0, 1.0))).unwrap();
+    assert!(near(bounds(&form), Rect::new(120.0, 30.0, 140.0, 50.0)), "{:?}", bounds(&form));
+    assert_eq!(of_kind(d, "Type").len(), 1);
+    // Two triangles of a free-form mesh, the second on the first one's edge.
+    let meshes = of_kind(d, "Mesh");
+    assert_eq!(meshes.len(), 2);
+    assert!(near(bounds(&meshes[1]), Rect::new(150.0, 90.0, 190.0, 140.0)), "{:?}", bounds(&meshes[1]));
+}
+
+/// Illustrator's EPS (CS and later, through 2026): procsets that define helpers with
+/// `bdf`/`ndf`/`ddf`, probe the level and version (`{version cvr} stopped`), switch VM with
+/// `currentglobal`/`setglobal`, save and restore the whole graphics state through
+/// `currentcolorrendering`, `rootfont`, the colour transfers, half-tone and flatness, set up
+/// categories and keep fonts by VM (`gcheck`), while the art is drawn with procedures of their own.
+#[test]
+fn illustrator_procsets_read_as_vectors() {
+    let program = r##"%%BeginProlog
+%%BeginResource: procset Adobe_AGM_Utils 1.0 0
+systemdict /setpacking known { currentpacking true setpacking } if
+userdict /Adobe_AGM_Utils 75 dict dup begin put
+/bdf { bind def } bind def
+/nd { null def } bdf
+/xdf { exch def } bdf
+/ddf { put } bdf
+/xddf { 3 -1 roll put } bdf
+/ndf { exch dup where { pop pop pop } { xdf } ifelse } def
+/gx { get exec } bdf
+/ps_level /languagelevel where { pop systemdict /languagelevel gx } { 1 } ifelse def
+/level2 ps_level 2 ge def
+/level3 ps_level 3 ge def
+/ps_version { version cvr } stopped { -1 } if def
+/set_gvm { currentglobal exch setglobal } bdf
+/reset_gvm { setglobal } bdf
+/makereadonlyarray { /packedarray where { pop packedarray } { array astore readonly } ifelse } bdf
+/GSTATE 22 dict def
+/get_gstate {
+  GSTATE begin
+  /clr_spc currentcolorspace def
+  mark currentcolor counttomark array astore /clr_comps xdf pop
+  /fnt rootfont def
+  /lw currentlinewidth def /lc currentlinecap def /lj currentlinejoin def /ml currentmiterlimit def
+  currentdash /dsh_o xdf /dsh_a xdf
+  /sa currentstrokeadjust def
+  /crd currentcolorrendering def
+  /op currentoverprint def
+  /bg currentblackgeneration cvlit def
+  /ucr currentundercolorremoval cvlit def
+  currentcolortransfer cvlit /gy_x xdf cvlit /b_x xdf cvlit /g_x xdf cvlit /r_x xdf
+  /ht currenthalftone def
+  /flt currentflat def
+  end
+} def
+/set_gstate {
+  GSTATE begin
+  clr_spc setcolorspace clr_comps aload pop setcolor
+  fnt setfont lw setlinewidth lc setlinecap lj setlinejoin ml setmiterlimit dsh_a dsh_o setdash
+  sa setstrokeadjust crd setcolorrendering op setoverprint
+  bg cvx setblackgeneration ucr cvx setundercolorremoval
+  r_x cvx g_x cvx b_x cvx gy_x cvx setcolortransfer
+  ht /HalftoneType get dup 9 eq exch 100 eq or { ht sethalftone } if
+  flt setflat
+  end
+} def
+/ct_tst { 1183615869 internaldict pop } stopped pop
+currentdict readonly pop
+end
+systemdict /setpacking known { setpacking } if
+%%EndResource
+%%BeginResource: procset Adobe_AGM_Core 2.0 0
+userdict /Adobe_AGM_Core 200 dict dup begin put
+/AGMCORE_str256 256 string def
+/AGMCORE_deviceDPI 72 0 matrix defaultmatrix dtransform dup mul exch dup mul add sqrt def
+/AGMCORE_distilling /product where { pop systemdict /setdistillerparams known product (Adobe PostScript Parser) ne and } { false } ifelse def
+/AGMCORE_producing_seps currentpagedevice /Separations 2 copy known { get } { pop pop false } ifelse def
+/AGMCORE_page_size currentpagedevice /PageSize get def
+/Generic /Category findresource dup length dict copy /Category defineresource pop
+/AGMCORE_mo { moveto } def /AGMCORE_li { lineto } def /AGMCORE_cv { curveto } def /AGMCORE_cp { closepath } def
+/AGMCORE_rgb { setrgbcolor } def /AGMCORE_cmyk { setcmykcolor } def
+/doc_setup { Adobe_AGM_Utils begin get_gstate end } def
+/page_setup { Adobe_AGM_Utils begin set_gstate end } def
+end
+%%EndResource
+%%BeginResource: procset Adobe_CoolType_Core 2.31 0
+userdict /CT_Core 20 dict dup begin put
+/GVMFonts 10 dict def /LVMFonts 10 dict def
+/VMDictPut { dup gcheck { GVMFonts } { LVMFonts } ifelse 3 1 roll put } bind def
+/copyfont { currentglobal exch dup gcheck setglobal dup length dict copy exch setglobal } bind def
+end
+%%EndResource
+%%EndProlog
+%%BeginSetup
+Adobe_AGM_Core /doc_setup get exec
+CT_Core begin /Body /Helvetica findfont copyfont VMDictPut end
+%%EndSetup
+%%Page: 1 1
+%%BeginPageSetup
+Adobe_AGM_Core /page_setup get exec
+%%EndPageSetup
+Adobe_AGM_Core begin
+/mo { AGMCORE_mo } def /li { AGMCORE_li } def /cv { AGMCORE_cv } def /cp { AGMCORE_cp } def
+0 0.94 0.94 0.12 AGMCORE_cmyk
+10 140 mo 90 140 li 90 90 li 10 90 li cp fill
+0.2 0.4 0.8 AGMCORE_rgb
+100 20 mo 150 80 180 0 190 60 cv 2 setlinewidth stroke
+0 setgray CT_Core /LVMFonts get /Body get 12 scalefont setfont 10 30 moveto (Art) show
+end
+showpage"##;
+    let r = open("Adobe Illustrator(R) 30.0", program);
+    let d = &r.document;
+    let rect = all(d).into_iter().find(|n| fill(n).and_then(Paint::color) == Some(Color::cmyk(0.0, 0.94, 0.94, 0.12))).unwrap();
+    assert!(near(bounds(&rect), Rect::new(10.0, 10.0, 90.0, 60.0)), "{:?}", bounds(&rect));
+    assert!(all(d).iter().any(|n| stroke(n).is_some_and(|s| s.width == 2.0)));
+    assert_eq!(of_kind(d, "Type").len(), 1);
+}
+
+/// Shadings other apps paint with: function-based ones (type 1) over a sampled two-input
+/// function, free-form triangles packed in bits (type 4), lattices (type 5), Coons patches sharing
+/// an edge (type 6), and a mesh as a shading pattern's fill; all as gradient meshes.
+#[test]
+fn mesh_and_function_shadings_become_gradient_meshes() {
+    // Type 1: a 2 × 2 sampled function, red to green across, to blue down.
+    let r = read(
+        "<< /ShadingType 1 /ColorSpace /DeviceRGB /Domain [0 1 0 1] /Matrix [50 0 0 50 10 10] \
+         /Function << /FunctionType 0 /Domain [0 1 0 1] /Range [0 1 0 1 0 1] /Size [2 2] /BitsPerSample 8 \
+         /DataSource <ff000000ff000000ff000000> >> >> shfill",
+    );
+    clean(&r);
+    let m = &of_kind(&r.document, "Mesh")[0];
+    assert!(near(bounds(m), Rect::new(10.0, 40.0, 60.0, 90.0)), "{:?}", bounds(m));
+    let NodeKind::Mesh(g) = &m.kind else { panic!() };
+    // Its first corner (the domain's origin) is the first sample.
+    assert_eq!(g.points[0].color, Color::rgb(1.0, 0.0, 0.0));
+
+    // Type 4 packed: 8-bit flags, coordinates and components; a triangle and one on its edge.
+    let tri = [[0u8, 0, 0, 255, 0, 0], [0, 255, 0, 0, 255, 0], [0, 0, 255, 0, 0, 255], [1, 255, 255, 255, 255, 0]].concat();
+    let r = read(&format!(
+        "<< /ShadingType 4 /ColorSpace /DeviceRGB /BitsPerCoordinate 8 /BitsPerComponent 8 /BitsPerFlag 8 \
+         /Decode [0 255 0 255 0 1 0 1 0 1] /DataSource <{}> >> [0.2 0 0 0.2 0 0] concat shfill",
+        tri.iter().map(|b| format!("{b:02x}")).collect::<String>()
+    ));
+    clean(&r);
+    assert_eq!(of_kind(&r.document, "Mesh").len(), 2);
+
+    // Type 5: a 2 × 2 lattice is two triangles.
+    let r = read(
+        "<< /ShadingType 5 /ColorSpace /DeviceGray /VerticesPerRow 2 \
+         /DataSource [10 10 0  50 10 1  10 50 0.5  50 50 1] >> shfill",
+    );
+    clean(&r);
+    assert_eq!(of_kind(&r.document, "Mesh").len(), 2);
+
+    // Type 6: a patch, then one sharing its right side (flag 2).
+    let first: Vec<String> = square(10.0, 10.0, 40.0, 40.0).iter().map(|(x, y)| format!("{x} {y}")).collect();
+    let right = "40 40 50 40 60 40 70 40 70 30 70 20 70 10 60 10 50 10";
+    let r = read(&format!(
+        "<< /ShadingType 6 /ColorSpace /DeviceRGB /DataSource [0 {} 1 0 0 0 1 0 0 0 1 1 1 0  2 {right} 1 0 1 0 1 1] >> shfill",
+        first.join(" ")
+    ));
+    clean(&r);
+    let patches = of_kind(&r.document, "Mesh");
+    assert_eq!(patches.len(), 2);
+    assert!(near(bounds(&patches[1]), Rect::new(40.0, 60.0, 70.0, 90.0)), "{:?}", bounds(&patches[1]));
+
+    // A mesh through a shading pattern fills the path it paints, clipped to it.
+    let r = read(
+        "<< /PatternType 2 /Shading << /ShadingType 5 /ColorSpace /DeviceGray /VerticesPerRow 2 \
+         /DataSource [0 0 0  100 0 1  0 100 0.5  100 100 1] >> >> matrix makepattern setpattern \
+         newpath 20 20 30 0 360 arc fill",
+    );
+    clean(&r);
+    let o = objects(&r.document);
+    assert!(matches!(o[0].kind, NodeKind::Group { clip: true, .. }), "{:?}", o[0].kind_label());
+    assert_eq!(of_kind(&r.document, "Mesh").len(), 2);
+}
+
+/// Images with a mask (`ImageType 3`) interleaved by sample, and with the mask in its own source.
+#[test]
+fn masked_images_in_every_interleaving() {
+    // By sample: mask bit, then three colour bits, 1 bit each (two pixels a row, padded).
+    let r = read(
+        "/DeviceRGB setcolorspace 20 20 scale << /ImageType 3 /InterleaveType 1 \
+         /DataDict << /ImageType 1 /Width 2 /Height 1 /BitsPerComponent 1 /Decode [0 1 0 1 0 1] /ImageMatrix [2 0 0 1 0 0] \
+         /DataSource <c600> >> /MaskDict << /ImageType 1 /Width 2 /Height 1 /BitsPerComponent 1 /Decode [1 0] /ImageMatrix [2 0 0 1 0 0] >> >> image",
+    );
+    clean(&r);
+    // 1100 0110: painted red, then masked out.
+    assert_eq!((pixel(&r.document, 0, 0), pixel(&r.document, 1, 0)[3]), ([255, 0, 0, 255], 0));
+    // Separate sources, the mask at twice the resolution.
+    let r = read(
+        "/DeviceGray setcolorspace 20 20 scale << /ImageType 3 /InterleaveType 3 \
+         /DataDict << /ImageType 1 /Width 1 /Height 1 /BitsPerComponent 8 /Decode [0 1] /ImageMatrix [1 0 0 1 0 0] /DataSource <80> >> \
+         /MaskDict << /ImageType 1 /Width 2 /Height 2 /BitsPerComponent 1 /Decode [0 1] /ImageMatrix [2 0 0 2 0 0] /DataSource <4000> >> >> image",
+    );
+    clean(&r);
+    assert_eq!(pixel(&r.document, 0, 0), [128, 128, 128, 255]);
+}
+
+/// The warning for a file read only up to an error names the error, the operator that raised it
+/// and the procedures it ran in, innermost first; an error a program catches with `stopped` is
+/// not reported.
+#[test]
+fn errors_name_the_operator_and_the_procedures() {
+    let r = read("{ 1 (a) add } stopped pop 0 0 10 10 rectfill /inner { 1 (a) add } def /outer { inner } def outer");
+    assert!(r.warnings[0].contains("(typecheck in `add`), in `inner` in `outer`"), "{:?}", r.warnings);
+    let r = read("0 0 10 10 rectfill /p { frobnicate } def p");
+    assert!(r.warnings[0].contains("it uses `frobnicate`, which VectorCraft's PostScript reader doesn't know, in `p`"), "{:?}", r.warnings);
+    let r = read("0 0 10 10 rectfill 0 0 moveto (x) cvn moveto");
+    assert!(r.warnings[0].contains("typecheck in `moveto`: a number"), "{:?}", r.warnings);
+}
+
+/// Operators programs use to probe the interpreter or measure things: file `status`, `token`,
+/// `bytesavailable`, `pathforall`, `strokepath`, `nulldevice`, `currenthsbcolor`, the cache and
+/// device parameter queries.
+#[test]
+fn probing_operators_answer() {
+    super::tests::check("currentfile status (no such file) status not and");
+    super::tests::check("(12 /x {a}) token { 12 eq exch (/x {a}) eq and } { false } ifelse");
+    super::tests::check("() token not");
+    super::tests::check(
+        "/n 0 def 0 0 moveto 10 0 lineto { pop pop /n n 1 add def } { pop pop /n n 2 add def } { 6 { pop } repeat } {} pathforall n 3 eq",
+    );
+    super::tests::check("1 0 0 setrgbcolor currenthsbcolor 1 eq exch 1 eq and exch 0 eq and");
+    super::tests::check("currentcacheparams counttomark 2 eq exch pop exch pop exch pop");
+    super::tests::check("cachestatus 7 { pop } repeat true");
+    super::tests::check("currentcolorrendering /ColorRenderingType known");
+    super::tests::check("[ (x) /y ] gcheck not");
+    // `strokepath` makes the stroke's outline the path; `nulldevice` paints nothing.
+    let r = read("4 setlinewidth 10 50 moveto 90 50 lineto strokepath fill gsave nulldevice 0 0 100 100 rectfill grestore");
+    clean(&r);
+    let o = objects(&r.document);
+    assert_eq!(o.len(), 1);
+    assert!(near(bounds(&o[0]), Rect::new(10.0, 48.0, 90.0, 52.0)), "{:?}", bounds(&o[0]));
+}
+
+/// A file whose PostScript can't be read opens its Windows metafile preview (vectors) when its
+/// binary header has one, else its EPSI bitmap preview.
+#[test]
+fn metafile_and_epsi_previews_stand_in() {
+    let ps = super::tests::eps("0 0 10 10 rectfill frobnicate");
+    // A placeable metafile of one red rectangle over its 1000-unit frame.
+    let wmf = wmf_rectangle();
+    let mut bytes = vec![0xC5, 0xD0, 0xD3, 0xC6];
+    let words = [30u32, ps.len() as u32, 30 + ps.len() as u32, wmf.len() as u32, 0, 0];
+    for w in words {
+        bytes.extend(w.to_le_bytes());
+    }
+    bytes.extend(0xFFFFu16.to_le_bytes());
+    bytes.extend(&ps);
+    bytes.extend(&wmf);
+    let r = import(&bytes).unwrap();
+    assert!(r.preview);
+    assert!(r.warnings[0].contains("frobnicate") && r.warnings[0].contains("metafile"), "{:?}", r.warnings);
+    let paths: Vec<_> = all(&r.document).into_iter().filter(|n| n.kind_label() == "Path").collect();
+    assert!(!paths.is_empty());
+    assert!(near(bounds(&paths[0]), Rect::new(10.0, 10.0, 90.0, 90.0)), "{:?}", bounds(&paths[0]));
+
+    // An EPSI preview: 4 × 2 pixels, 1 bit, black on the left.
+    let epsi = "%!PS-Adobe-3.0 EPSF-3.0\n%%BoundingBox: 0 0 100 100\n%%EndComments\n%%BeginPreview: 4 2 1 2\n% C0\n% C0\n%%EndPreview\nfrobnicate\n";
+    let r = import(epsi.as_bytes()).unwrap();
+    assert!(r.preview, "{:?}", r.warnings);
+    assert_eq!([pixel(&r.document, 0, 0), pixel(&r.document, 3, 1)], [[0, 0, 0, 255], [255, 255, 255, 255]]);
+}
+
+/// A placeable Windows metafile (1000 units an inch) of a red rectangle from (100, 100) to
+/// (900, 900) on a frame of 1000 × 1000 units.
+fn wmf_rectangle() -> Vec<u8> {
+    let mut v = vec![];
+    let w16 = |v: &mut Vec<u8>, x: u16| v.extend(x.to_le_bytes());
+    let w32 = |v: &mut Vec<u8>, x: u32| v.extend(x.to_le_bytes());
+    w32(&mut v, 0x9AC6_CDD7);
+    for x in [0u16, 0, 0, 1000, 1000, 1000] {
+        w16(&mut v, x);
+    }
+    w32(&mut v, 0);
+    let sum = v.chunks(2).fold(0u16, |a, c| a ^ u16::from_le_bytes([c[0], c[1]]));
+    w16(&mut v, sum);
+    let records: Vec<Vec<u16>> = vec![
+        vec![0x020B, 0, 0],               // SetWindowOrg
+        vec![0x020C, 1000, 1000],         // SetWindowExt
+        vec![0x02FC, 0, 0x00FF, 0, 0],    // CreateBrushIndirect: solid red
+        vec![0x012D, 0],                  // SelectObject
+        vec![0x041B, 900, 900, 100, 100], // Rectangle (bottom, right, top, left)
+        vec![0x0000],                     // EOF
+    ];
+    let size: usize = 9 + records.iter().map(|r| r.len() + 2).sum::<usize>();
+    for x in [1u16, 9, 0x0300] {
+        w16(&mut v, x);
+    }
+    w32(&mut v, size as u32);
+    w16(&mut v, 1);
+    w32(&mut v, 7);
+    w16(&mut v, 0);
+    for r in records {
+        w32(&mut v, r.len() as u32 + 2);
+        for x in r {
+            w16(&mut v, x);
+        }
+    }
+    v
+}
+
+/// Immediately evaluated names (`//name`) are their values when read: inside a procedure that
+/// runs after the dictionary that defined them is gone, and as an operand at the top.
+#[test]
+fn immediately_evaluated_names_are_read_as_their_values() {
+    super::tests::check("2 dict begin /v 7 def /p { //v } def currentdict end /d exch def d /p get exec 7 eq");
+    super::tests::check("/w 3 def //w 3 eq");
+    let r = read("/p { 0 0 10 10 } def //p rectfill");
+    clean(&r);
+    let r = read("0 0 10 10 rectfill /q { //nosuchname } def");
+    assert!(r.warnings[0].contains("nosuchname"), "{:?}", r.warnings);
+    let _ = Point::ZERO;
+}
+
+/// User paths (`ufill`, `ustroke`, `uappend`, `upath`, as procedures and in the encoded form),
+/// and reading a file byte by byte (`read`) with its position.
+#[test]
+fn user_paths_and_file_reads() {
+    let r = read(
+        "{ 0 0 50 50 setbbox 10 10 moveto 40 10 lineto 40 40 lineto closepath } ufill \
+         [ [0 0 50 50 60 60 90 60 90 90] <00010303> ] ustroke \
+         newpath 0 0 moveto 5 5 lineto",
+    );
+    clean(&r);
+    let o = objects(&r.document);
+    assert_eq!(o.len(), 2);
+    assert!(near(bounds(&o[0]), Rect::new(10.0, 60.0, 40.0, 90.0)), "{:?}", bounds(&o[0]));
+    assert!(stroke(&o[1]).is_some() && near(bounds(&o[1]), Rect::new(60.0, 10.0, 90.0, 40.0)), "{:?}", bounds(&o[1]));
+    super::tests::check(
+        "(ab) /ASCIIHexDecode filter pop (4142) /ASCIIHexDecode filter dup read pop 65 eq exch dup 0 setfileposition read pop 65 eq and",
+    );
+    super::tests::check("{ (x) deletefile } stopped revision 1 eq and");
+    // The bounding box, then each point with its operator.
+    super::tests::check("newpath 0 0 moveto 5 5 lineto false upath length 11 eq");
+}
+
+/// Programs that would run away through what this reader adds end at its limits: a pattern
+/// whose cell paints with itself, a Type 3 glyph that shows itself, a sampled function or mesh
+/// too large, a dash pattern too fine for `strokepath`.
+#[test]
+fn hostile_patterns_glyphs_and_shadings_end() {
+    let r = read(
+        "/P << /PatternType 1 /PaintType 1 /XStep 5 /YStep 5 /BBox [0 0 5 5] \
+         /PaintProc { pop P setpattern 0 0 5 5 rectfill } >> matrix makepattern def \
+         P setpattern 0 0 50 50 rectfill",
+    );
+    assert!(!r.preview && r.warnings.iter().any(|w| w.contains("nested too deeply")), "{:?}", r.warnings);
+    let r = import(&super::tests::eps(
+        "0 0 1 1 rectfill /T << /FontType 3 /FontMatrix [1 0 0 1 0 0] /Encoding [/a] \
+         /BuildChar { pop pop 0 0 moveto (a) show } >> definefont setfont 0 0 moveto (a) show",
+    ))
+    .unwrap();
+    assert!(r.warnings[0].contains("error"), "{:?}", r.warnings);
+    let r = read(
+        "0 0 1 1 rectfill << /ShadingType 2 /ColorSpace /DeviceGray /Coords [0 0 1 0] \
+         /Function << /FunctionType 0 /Domain [0 1] /Range [0 1] /Size [99999999] /BitsPerSample 8 /DataSource () >> >> shfill",
+    );
+    assert!(r.warnings[0].contains("rangecheck in `shfill`: a sampled function"), "{:?}", r.warnings);
+    // Procedures nesting through operators that run them end at the nesting limit.
+    for body in ["/f { { f } exec } def f", "/f { true { f } if } def f", "/f { 1 { f } repeat } def f", "/f { { f } stopped } def f"] {
+        assert!(import(&super::tests::eps(body)).is_err(), "{body}");
+    }
+    let r = read("[1e-9] 0 setdash 0 0 moveto 1000 1000 lineto strokepath fill");
+    clean(&r);
+    assert_eq!(objects(&r.document).len(), 1);
+}
+
+/// Illustrator 8 EPS (what stock art often comes as, #474): its gradient procset builds shading
+/// dictionaries with `bd` … `ed`, where `ed` is an executable string (`(>>) cvx`, or a Level 1
+/// dictionary builder), and its `discard` runs procedures it `load`s by integer keys.
+#[test]
+fn illustrator_8_gradients_and_executable_strings() {
+    let program = r##"%%BeginProlog
+userdict /AGM_Gradient 20 dict dup begin put
+/AGM_Gradient_private 201 dict def
+/initialize {
+  AGM_Gradient begin AGM_Gradient_private begin
+  /bd systemdict /mark get def
+  /ed /languagelevel where { pop languagelevel 2 ge } { false } ifelse
+    { (>>) } { (counttomark 2 idiv dup dict begin {def} repeat pop currentdict end) } ifelse cvx def
+  /ed1 (counttomark 2 idiv dup dict begin {def} repeat pop currentdict end) cvx def
+  end end
+} def
+userdict /discardDict 4 dict dup begin put
+0 { 0 1 0 setrgbcolor } def
+2 { 0 0 1 setrgbcolor } def
+end
+/gt38? false def
+/discard { discardDict begin /endString exch def gt38? { 2 add } if load stopped pop end } bind def
+%%EndProlog
+initialize
+AGM_Gradient begin AGM_Gradient_private begin
+bd /ShadingType 3 /ColorSpace /DeviceRGB
+  /Function bd /FunctionType 2 /Domain [0 1] /C0 [1 1 0] /C1 [0 0.5 0] /N 1 ed
+  /Extend [true true] /Coords [50 50 0 50 50 40] ed
+gsave 10 10 80 80 rectclip shfill grestore
+bd /Width 3 ed1 /Width get 3 eq { 0 (%AI5_EndPalette) discard 10 10 20 20 rectfill } if
+end end
+(x) cvx xcheck (x) cvx cvlit xcheck not and { 50 50 10 10 rectfill } if
+showpage"##;
+    let r = open("Adobe Illustrator(R) 8.0", program);
+    let d = &r.document;
+    let Some(Paint::Gradient(g)) = all(d).into_iter().find_map(|n| fill(&n).cloned()) else { panic!("no gradient") };
+    assert_eq!(g.gradient.kind, vectorcraft_color::GradientKind::Radial);
+    // `discard` ran the procedure under key 0 (green), not the one under 2.
+    assert!(all(d).iter().any(|n| fill(n).and_then(Paint::color) == Some(Color::rgb(0.0, 1.0, 0.0))));
+    assert_eq!(objects(d).len(), 3);
+}
@@ -4,11 +4,14 @@

 use std::rc::Rc;

+use std::sync::Arc;
 use vectorcraft_color::Paint;
+
 use vectorcraft_doc::{CharStyle, Node, NodeId, NodeKind, TextObject};
 use vectorcraft_geom::{Affine, Point, Vec2};
 use vectorcraft_text::TextLayout;

+use super::graphics::MAX_APART;
 use super::interp::{Interp, matrix_obj, matrix_of};
 use super::obj::{Dict, DictRef, Key, Obj, Op, PsError, Res, ps_err};

@@ -133,44 +136,19 @@ impl Interp<'_> {
                self.push(Obj::Bool(known))?;
            }
            ResourceForAll => self.resource_for_all()?,
-            Show => {
-                let s = self.pop_str()?.to_vec();
-                self.show(&s)?;
-            }
-            AShow => {
-                let s = self.pop_str()?.to_vec();
-                self.nums::<2>()?;
-                self.show(&s)?;
-            }
-            WidthShow => {
-                let s = self.pop_str()?.to_vec();
-                self.pop()?;
-                self.nums::<2>()?;
-                self.show(&s)?;
-            }
-            AWidthShow => {
-                let s = self.pop_str()?.to_vec();
-                self.nums::<2>()?;
-                self.pop()?;
-                self.nums::<2>()?;
-                self.show(&s)?;
-            }
-            XShow | YShow | XYShow => {
-                self.pop()?;
-                let s = self.pop_str()?.to_vec();
-                self.show(&s)?;
-            }
-            KShow => {
-                let s = self.pop_str()?.to_vec();
-                self.pop()?;
-                self.show(&s)?;
+            Show | AShow | WidthShow | AWidthShow | XShow | YShow | XYShow | KShow => {
+                let (s, spacing) = self.show_operands(op)?;
+                match self.type3_font() {
+                    Some(font) => self.show_type3(&font, &s, &spacing)?,
+                    None => self.show(&s)?,
+                }
            }
            CShow => {
                // The procedure shows or places each character: it gets its code and width.
                let s = self.pop_str()?.to_vec();
                let proc = self.pop_proc()?;
                for b in s {
-                    let (_, _, v) = self.set_type(&[b], Point::ZERO)?;
+                    let v = self.width_of(&[b])?;
                    self.push(Obj::Int(i64::from(b)))?;
                    self.push_num(v.x)?;
                    self.push_num(v.y)?;
@@ -181,12 +159,23 @@ impl Interp<'_> {
            }
            GlyphShow => {
                let name = self.pop()?.text().unwrap_or_else(|| Rc::from(""));
-                let ch = glyph_char(&name);
-                self.show(ch.encode_utf8(&mut [0; 4]).as_bytes())?;
+                match self.type3_font() {
+                    Some(font) => {
+                        let start = self.out.drawn.len();
+                        let at = self.user_point()?;
+                        let w = self.type3_glyph(&font, Glyph::Name(name.clone()), at, true)?;
+                        self.g.cur = Some(self.xf() * (at + w));
+                        self.group_glyphs(start, &name);
+                    }
+                    None => {
+                        let ch = glyph_char(&name);
+                        self.show(ch.encode_utf8(&mut [0; 4]).as_bytes())?;
+                    }
+                }
            }
            StringWidth => {
                let s = self.pop_str()?.to_vec();
-                let (_, _, v) = self.set_type(&s, Point::ZERO)?;
+                let v = self.width_of(&s)?;
                self.push_num(v.x)?;
                self.push_num(v.y)?;
            }
@@ -195,17 +184,169 @@ impl Interp<'_> {
                let s = self.pop_str()?.to_vec();
                self.char_path(&s)?;
            }
-            SetCacheDevice => {
-                self.nums::<6>()?;
-            }
-            SetCharWidth => {
-                self.nums::<2>()?;
+            // A glyph procedure gives its width (`w0x w0y` first).
+            SetCacheDevice => self.glyph_width = Some(self.nums::<6>()?[..2].try_into().unwrap_or_default()),
+            SetCharWidth => self.glyph_width = Some(self.nums::<2>()?),
+            SetCacheDevice2 => self.glyph_width = Some(self.nums::<10>()?[..2].try_into().unwrap_or_default()),
+            RootFont => {
+                let font = match self.g.font.clone() {
+                    Some(f) => f,
+                    None => self.find_font(&Obj::name(DEFAULT_FONT))?,
+                };
+                self.push(Obj::Dict(font))?;
            }
            _ => return ps_err("undefined", op.name()),
        }
        Ok(())
    }

+    /// The string of a show operator and how it spaces its glyphs.
+    fn show_operands(&mut self, op: Op) -> Res<(Vec<u8>, Spacing)> {
+        use Op::*;
+        let num_vec = |[x, y]: [f64; 2]| Vec2::new(x, y);
+        if matches!(op, XShow | YShow | XYShow) {
+            // A number array (an encoded number string spaces glyphs by their widths).
+            let widths = match self.pop()? {
+                Obj::Array { items, .. } => items.borrow().iter().filter_map(Obj::as_num).collect(),
+                _ => vec![],
+            };
+            let s = self.pop_str()?.to_vec();
+            return Ok((s, Spacing::Widths(widths, op)));
+        }
+        let s = self.pop_str()?.to_vec();
+        let spacing = match op {
+            AShow => Spacing::Add(num_vec(self.nums()?), None),
+            WidthShow => {
+                let ch = self.pop_int()?;
+                Spacing::Add(Vec2::ZERO, Some((ch, num_vec(self.nums()?))))
+            }
+            AWidthShow => {
+                let a = num_vec(self.nums()?);
+                let ch = self.pop_int()?;
+                Spacing::Add(a, Some((ch, num_vec(self.nums()?))))
+            }
+            KShow => Spacing::Kern(self.pop_proc()?),
+            _ => Spacing::Plain,
+        };
+        Ok((s, spacing))
+    }
+
+    /// The current font when it is a Type 3 font: its glyphs are drawn by its own procedures.
+    fn type3_font(&self) -> Option<DictRef> {
+        let font = self.g.font.clone()?;
+        let f = font.borrow();
+        let builds = f.contains_key(&Key::name("BuildGlyph")) || f.contains_key(&Key::name("BuildChar"));
+        let type3 = f.get(&Key::name("FontType")).and_then(Obj::as_num) == Some(3.0) && builds;
+        drop(f);
+        type3.then_some(font)
+    }
+
+    /// How far `s` moves the current point (user space).
+    fn width_of(&mut self, s: &[u8]) -> Res<Vec2> {
+        let Some(font) = self.type3_font() else { return Ok(self.set_type(s, Point::ZERO)?.2) };
+        let mut w = Vec2::ZERO;
+        for &code in s {
+            w += self.type3_glyph(&font, Glyph::Code(code), Point::new(w.x, w.y), false)?;
+        }
+        Ok(w)
+    }
+
+    /// `s` shown in Type 3 font `font`, glyph by glyph, spaced as `spacing` says.
+    fn show_type3(&mut self, font: &DictRef, s: &[u8], spacing: &Spacing) -> Res {
+        let start = self.out.drawn.len();
+        for (i, &code) in s.iter().enumerate() {
+            let at = self.user_point()?;
+            let w = self.type3_glyph(font, Glyph::Code(code), at, true)?;
+            let d = match spacing {
+                Spacing::Plain | Spacing::Kern(_) => w,
+                Spacing::Add(a, c) => w + *a + c.filter(|(ch, _)| *ch == i64::from(code)).map_or(Vec2::ZERO, |(_, v)| v),
+                Spacing::Widths(v, op) => {
+                    let n = |k: usize| v.get(k).copied();
+                    match op {
+                        Op::XShow => n(i).map(|x| Vec2::new(x, 0.0)),
+                        Op::YShow => n(i).map(|y| Vec2::new(0.0, y)),
+                        _ => n(2 * i).zip(n(2 * i + 1)).map(|(x, y)| Vec2::new(x, y)),
+                    }
+                    .unwrap_or(w)
+                }
+            };
+            self.g.cur = Some(self.xf() * (at + d));
+            if let (Spacing::Kern(p), Some(next)) = (spacing, s.get(i + 1)) {
+                self.push(Obj::Int(i64::from(code)))?;
+                self.push(Obj::Int(i64::from(*next)))?;
+                self.call(p.clone())?;
+            }
+        }
+        let text: String = s.iter().map(|b| char::from(*b)).filter(|c| !c.is_control()).collect();
+        self.group_glyphs(start, &text);
+        Ok(())
+    }
+
+    /// Glyph `glyph` of Type 3 font `font` drawn by its `BuildGlyph` (or `BuildChar`) procedure at
+    /// user point `at` (only measured unless `paint`) → its width (user space).
+    fn type3_glyph(&mut self, font: &DictRef, glyph: Glyph, at: Point, paint: bool) -> Res<Vec2> {
+        let (fm, build_glyph, build_char, encoding) = {
+            let f = font.borrow();
+            let get = |k: &str| f.get(&Key::name(k)).cloned();
+            let fm = get("FontMatrix").and_then(|o| o.items().and_then(|i| matrix_of(&i.borrow()))).unwrap_or(Affine::scale(0.001));
+            (fm, get("BuildGlyph"), get("BuildChar"), get("Encoding"))
+        };
+        let code_of = |name: &str| -> Option<u8> {
+            let items = encoding.as_ref()?.items()?.to_vec();
+            items.iter().position(|o| o.text().as_deref() == Some(name)).and_then(|i| u8::try_from(i).ok())
+        };
+        let (name, code) = match glyph {
+            Glyph::Code(c) => {
+                let name = encoding.as_ref().and_then(|e| e.items()?.get(usize::from(c))).and_then(|o| o.text());
+                (name.unwrap_or_else(|| Rc::from(".notdef")), Some(c))
+            }
+            Glyph::Name(n) => {
+                let code = code_of(&n);
+                (n, code)
+            }
+        };
+        let arg = match (build_glyph, build_char, code) {
+            (Some(p), ..) => Some((p, Obj::Name(name))),
+            (None, Some(p), Some(c)) => Some((p, Obj::Int(i64::from(c)))),
+            _ => None,
+        };
+        let Some((proc, arg)) = arg else { return Ok(Vec2::ZERO) };
+        // A glyph that shows type in its own font would draw itself without end.
+        if self.out.apart >= MAX_APART {
+            return ps_err("limitcheck", "a Type 3 glyph");
+        }
+        self.gsave()?;
+        let depth = self.saved.len();
+        self.g.ctm = self.g.ctm * Affine::translate(at.to_vec2()) * fm;
+        self.take_path();
+        self.g.null |= !paint;
+        self.glyph_width = None;
+        self.out.apart += 1;
+        let r = self.push(Obj::Dict(font.clone())).and_then(|()| self.push(arg)).and_then(|()| self.call(proc));
+        self.out.apart -= 1;
+        let [wx, wy] = self.glyph_width.take().unwrap_or_default();
+        self.saved.truncate(depth);
+        self.grestore();
+        r?;
+        Ok(fm * Point::new(wx, wy) - fm * Point::ZERO)
+    }
+
+    /// The objects drawn since `start` (one show's glyphs) as one group named `text`, when they
+    /// are several under the same clips.
+    fn group_glyphs(&mut self, start: usize, text: &str) {
+        let here = self.out.chain(&self.g.clips);
+        let Some(drawn) = self.out.drawn.get(start..) else { return };
+        let same = drawn.iter().all(|(c, _)| c.iter().map(|c| c.id).eq(here.iter().map(|c| c.id)));
+        if drawn.len() < 2 || !same {
+            return;
+        }
+        let children: Vec<Arc<Node>> = self.out.drawn.drain(start..).map(|(_, n)| Arc::new(n)).collect();
+        let mut group = Node::group(NodeId(0), children);
+        group.name = Some(text.chars().take(64).collect());
+        let clips = self.g.clips.clone();
+        self.out.push(group, &clips);
+    }
+
    /// The font named `k`: one the program defined, else a font of that name.
    fn find_font(&mut self, k: &Obj) -> Res<DictRef> {
        let key = k.key().ok_or(PsError::Ps("typecheck", "findfont".into()))?;
@@ -290,6 +431,26 @@ impl Interp<'_> {
    }
 }

+/// How a show operator spaces its glyphs (Type 3 fonts; type in other fonts is laid out as point
+/// type).
+enum Spacing {
+    /// By their widths.
+    Plain,
+    /// `ashow`, `widthshow`, `awidthshow`: by their widths plus a displacement, and another for one
+    /// character code.
+    Add(Vec2, Option<(i64, Vec2)>),
+    /// `xshow`, `yshow`, `xyshow` (the operator): by the numbers given.
+    Widths(Vec<f64>, Op),
+    /// `kshow`: by their widths, the procedure run between each two.
+    Kern(Obj),
+}
+
+/// A glyph of a Type 3 font, by character code or by name (`glyphshow`).
+enum Glyph {
+    Code(u8),
+    Name(Rc<str>),
+}
+
 /// A font scaled or transformed by `m` (`scalefont`, `makefont`).
 fn transformed(font: &DictRef, m: Affine) -> DictRef {
    let mut d = font.borrow().clone();
@@ -377,6 +377,19 @@ pub fn sections(bytes: &[u8]) -> Option<(&[u8], Option<&[u8]>)> {
    Some((ps, tiff))
 }

+/// The Windows metafile preview behind an EPS file's binary header, if it has one.
+pub fn metafile_preview(bytes: &[u8]) -> Option<&[u8]> {
+    if !bytes.starts_with(&DOS_MAGIC) {
+        return None;
+    }
+    let word = |at: usize| bytes.get(at..at + 4).and_then(|b| <[u8; 4]>::try_from(b).ok()).map(|b| u32::from_le_bytes(b) as usize);
+    let (start, len) = (word(12)?, word(16)?);
+    if start == 0 || len == 0 {
+        return None;
+    }
+    bytes.get(start..start.checked_add(len)?)
+}
+
 /// The native document an EPS file written by [`export`] carries, if any.
 pub fn native(bytes: &[u8]) -> Option<Vec<u8>> {
    let (ps, _) = sections(bytes)?;
@@ -262,7 +262,7 @@ pub fn tool_definitions() -> Vec<Value> {
            "open_file",
            "Open file",
            &format!(
-                "Open a file as a new, active document: .{} (see run_command document.formats). Templates (.ait, native templates) open as a new untitled document.",
+                "Open a file as a new, active document: .{} (see run_command document.formats). Templates (.ait, native templates) open as a new untitled document. The reply's `warnings` say what didn't come in as it was (an EPS shown as its preview image says why its PostScript couldn't be read).",
                OPEN_EXTS.join(", .")
            ),
            obj(json!({"path": string("File path")}), &["path"]),
@@ -9,7 +9,7 @@ use hayro_interpret::pattern::ShadingPattern;
 use hayro_interpret::shading::{ShadingFunction, ShadingType};
 use kurbo::{BezPath, Circle, Point, Rect, Shape, Vec2};
 use vectorcraft_color::{Color, Gradient, GradientGeom, GradientKind, GradientPaint, GradientStop, Paint};
-use vectorcraft_doc::live::{GradientMesh, H_DOWN, H_LEFT, H_RIGHT, H_UP, MeshPoint, lerp_color};
+use vectorcraft_doc::live::{GradientMesh, lerp_color};
 use vectorcraft_doc::{Node, NodeKind, OpacityMask};

 use crate::import::round3;
@@ -150,40 +150,6 @@ fn mesh_color(v: &[f32], function: Option<&ShadingFunction>, sp: &ShadingPattern
    })
 }

-/// A 1×1 gradient mesh from a patch's four corners (bottom-left, top-left, top-right,
-/// bottom-right in the patch's u/v order), each with its handles towards its neighbours.
-fn patch_mesh(corners: [(Point, [Vec2; 4], Color); 4]) -> GradientMesh {
-    let point = |(p, handles, color): (Point, [Vec2; 4], Color)| MeshPoint { p, color, opacity: 1.0, handles };
-    let [a, b, c, d] = corners;
-    // Row 0 is v = 0 (corners a, d), row 1 is v = 1 (b, c); columns follow u.
-    GradientMesh { rows: 1, cols: 1, points: vec![point(a), point(d), point(b), point(c)] }
-}
-
-/// Handles of a mesh corner: right, left, down, up (unused ones stay at the point).
-fn handles(right: Vec2, left: Vec2, down: Vec2, up: Vec2) -> [Vec2; 4] {
-    let mut h = [Vec2::ZERO; 4];
-    (h[H_RIGHT], h[H_LEFT], h[H_DOWN], h[H_UP]) = (right, left, down, up);
-    h
-}
-
-/// A 1×1 mesh from a patch's twelve boundary points (in the PDF's order: u runs cp0 → cp9 along
-/// cp11 and cp10, v runs cp0 → cp3 along cp1 and cp2) and its corner colours (at cp0, cp3, cp6,
-/// cp9); `None` if a point isn't finite.
-fn boundary_mesh(cp: &[Point], colors: [Color; 4]) -> Option<GradientMesh> {
-    let cp: &[Point; 12] = cp.get(..12)?.try_into().ok()?;
-    if !cp.iter().all(|p| p.is_finite()) {
-        return None;
-    }
-    let h = |a: usize, b: usize| cp[b] - cp[a];
-    let [c0, c1, c2, c3] = colors;
-    Some(patch_mesh([
-        (cp[0], handles(h(0, 11), Vec2::ZERO, h(0, 1), Vec2::ZERO), c0),
-        (cp[3], handles(h(3, 4), Vec2::ZERO, Vec2::ZERO, h(3, 2)), c1),
-        (cp[6], handles(Vec2::ZERO, h(6, 5), Vec2::ZERO, h(6, 7)), c2),
-        (cp[9], handles(Vec2::ZERO, h(9, 10), h(9, 8), Vec2::ZERO), c3),
-    ]))
-}
-
 /// A patch mesh or triangle mesh shading as gradient meshes in document space (one per patch;
 /// a triangle is a patch with two corners together). `None`: not a mesh, or too big.
 pub(crate) fn mesh_shading(sp: &ShadingPattern, colors: &mut Colors<'_>) -> Option<Vec<GradientMesh>> {
@@ -196,7 +162,7 @@ pub(crate) fn mesh_shading(sp: &ShadingPattern, colors: &mut Colors<'_>) -> Opti
            }
            for p in patches {
                let colors = [0, 1, 2, 3].map(|i| mesh_color(p.colors.get(i).map_or(&[][..], |c| c.as_slice()), function.as_ref(), sp, colors));
-                out.extend(boundary_mesh(&p.control_points.map(|q| m * q), colors));
+                out.extend(GradientMesh::coons(&p.control_points.map(|q| m * q), colors));
            }
        }
        // A tensor patch's boundary is a Coons patch's (its four inner points are dropped).
@@ -206,7 +172,7 @@ pub(crate) fn mesh_shading(sp: &ShadingPattern, colors: &mut Colors<'_>) -> Opti
            }
            for p in patches {
                let colors = [0, 1, 2, 3].map(|i| mesh_color(p.colors.get(i).map_or(&[][..], |c| c.as_slice()), function.as_ref(), sp, colors));
-                out.extend(boundary_mesh(&p.control_points.map(|q| m * q), colors));
+                out.extend(p.control_points.map(|q| m * q).first_chunk::<12>().and_then(|cp| GradientMesh::coons(cp, colors)));
            }
        }
        ShadingType::TriangleMesh { triangles, function } => {
@@ -215,16 +181,7 @@ pub(crate) fn mesh_shading(sp: &ShadingPattern, colors: &mut Colors<'_>) -> Opti
            }
            for t in triangles {
                let v = [&t.p0, &t.p1, &t.p2].map(|v| (m * v.point, mesh_color(v.colors.as_slice(), function.as_ref(), sp, colors)));
-                if !v.iter().all(|(p, _)| p.is_finite()) {
-                    continue;
-                }
-                let [a, b, c] = v;
-                out.push(patch_mesh([
-                    (a.0, [Vec2::ZERO; 4], a.1),
-                    (b.0, [Vec2::ZERO; 4], b.1),
-                    (c.0, [Vec2::ZERO; 4], c.1),
-                    (c.0, [Vec2::ZERO; 4], c.1),
-                ]));
+                out.extend(GradientMesh::triangle(v));
            }
        }
        _ => return None,
@@ -158,6 +158,18 @@ impl TextLayout {
    pub fn physical_point(&self, p: Point) -> Point {
        if self.vertical { self.line_xf * p } else { p }
    }
+    /// Each line's baseline in text space, start to end (a vertical column's centre line), for
+    /// the lines that hold characters; none for type on a path, which its path stands for.
+    pub fn baselines(&self) -> Vec<(Point, Point)> {
+        if self.on_path {
+            return vec![];
+        }
+        let line = |l: &LineInfo| {
+            let y = if self.vertical { l.baseline + (l.descent - l.ascent) / 2.0 } else { l.baseline };
+            (self.physical_point(Point::new(l.x0, y)), self.physical_point(Point::new(l.x1, y)))
+        };
+        self.lines.iter().filter(|l| l.x1 > l.x0).map(line).collect()
+    }
    /// All glyph outlines combined (e.g. for Create Outlines).
    pub fn to_bezpath(&self) -> BezPath {
        let mut p = BezPath::new();
@@ -73,6 +73,41 @@ fn area_type_starts_at_the_right_edge_and_wraps_to_the_left() {
    assert!(l.glyphs.iter().all(|g| g.outline.bounding_box().y1 <= 105.0 + 1e-6), "inside the frame");
 }

+/// `baselines`: one per line that holds characters, along it for horizontal type and down the
+/// column's centre line for vertical type (where point type's anchor is); none on a path.
+#[test]
+fn baselines_run_along_lines_and_down_column_centres() {
+    let h = layout(
+        FontDb::global(),
+        &TextObject::point(
+            Point::ZERO,
+            "§§
+
+§",
+            CharStyle { size: 20.0, ..CharStyle::default() },
+        ),
+    );
+    let hb = h.baselines();
+    assert_eq!(hb.len(), 2, "the empty line has none: {hb:?}");
+    assert!(hb[0].0 == Point::ZERO && hb[0].1.y == 0.0 && hb[0].1.x > 15.0, "the first baseline runs from the anchor: {hb:?}");
+    assert!(hb[1].0.y > 40.0 && hb[1].0.y == hb[1].1.y && hb[1].1.x > hb[1].0.x, "the third line's, lower: {hb:?}");
+    let v = layout(
+        FontDb::global(),
+        &vertical(
+            "§§
+§",
+        ),
+    );
+    let vb = v.baselines();
+    let (a, c) = (ink(&v, 0), ink(&v, 2));
+    assert_eq!(vb.len(), 2, "{vb:?}");
+    assert!(vb[0].0.x.abs() < 4.0 && vb[0].0.x == vb[0].1.x && vb[0].1.y > vb[0].0.y + 30.0, "down the first column's centre: {vb:?}");
+    assert!((vb[0].0.x - a.center().x).abs() < 4.0 && (vb[1].0.x - c.center().x).abs() < 4.0, "through the glyphs: {vb:?} {a:?} {c:?}");
+    let mut on_path = vertical("ab");
+    on_path.kind = TextKind::OnPath { path: PathData::from_bezpath(&kurbo::Line::new((0.0, 0.0), (100.0, 0.0)).to_path(0.1)), start: 0.0, end: None };
+    assert!(layout(FontDb::global(), &on_path).baselines().is_empty());
+}
+
 #[test]
 fn type_on_a_path_stays_horizontal() {
    let mut t = vertical("ab");
@@ -273,6 +273,9 @@ pub struct ToolContext<'a> {
    /// Selection & Anchor Display → Object Selection by Path Only: a click inside a filled path
    /// doesn't pick it, only one on its path does.
    pub path_only: bool,
+    /// Type → Type Object Selection by Path Only: type is picked on its type path only (point
+    /// type's baseline, area type's frame, type on a path's path), not anywhere in its bounds.
+    pub type_path_only: bool,
    /// General → Double Click To Isolate: a double-click on a group with the Selection tool
    /// isolates it.
    pub double_click_isolate: bool,
@@ -352,7 +355,12 @@ impl ToolContext<'_> {
        self.tol(self.selection_tolerance)
    }
    pub fn hit_options(&self) -> vectorcraft_doc::hit::HitOptions {
-        vectorcraft_doc::hit::HitOptions { tol: self.pick_tol(), outline: self.outline, path_only: self.path_only }
+        vectorcraft_doc::hit::HitOptions {
+            tol: self.pick_tol(),
+            outline: self.outline,
+            path_only: self.path_only,
+            type_path_only: self.type_path_only,
+        }
    }
 }

@@ -650,6 +658,7 @@ pub(crate) mod testutil {
            auto_add_delete: true,
            selection_tolerance: 3.0,
            path_only: false,
+            type_path_only: false,
            double_click_isolate: true,
            select_behind: true,
            highlight_anchors: true,
@@ -230,7 +230,7 @@ impl TypeTool {

    /// Path under `p` for the Area Type / Type on a Path tools.
    fn path_at(cx: &ToolContext, p: Point, closed: bool) -> Option<NodeId> {
-        let h = hit_test(cx.doc, p, vectorcraft_doc::hit::HitOptions { tol: cx.tol(4.0), outline: true, path_only: false })?;
+        let h = hit_test(cx.doc, p, vectorcraft_doc::hit::HitOptions { tol: cx.tol(4.0), outline: true, ..Default::default() })?;
        match &cx.doc.node(h.leaf)?.kind {
            NodeKind::Path { path, .. } if !closed || path.is_closed() => Some(h.leaf),
            _ => None,
@@ -238,9 +238,10 @@ impl TypeTool {
    }

    /// Start editing the type under `p` with the caret there → the actions (ending the previous
-    /// edit, selecting the type); None when no type is under `p`.
+    /// edit, selecting the type); None when no type is under `p`. A click among the characters
+    /// edits them, whatever Type Object Selection by Path Only says.
    fn edit_at(&mut self, cx: &ToolContext, p: Point) -> Option<Vec<Action>> {
-        let h = hit_test(cx.doc, p, cx.hit_options())?;
+        let h = hit_test(cx.doc, p, vectorcraft_doc::hit::HitOptions { type_path_only: false, ..cx.hit_options() })?;
        let Some(NodeKind::Text(t)) = cx.doc.node(h.leaf).map(|n| &n.kind) else { return None };
        let lay = self.layout(t);
        let byte = vectorcraft_text::hit_byte(&lay, t.xf.inverse() * p);
@@ -70,7 +70,9 @@ impl Tool for EyedropperTool {
        if ev.kind != PointerKind::Down {
            return vec![];
        }
-        let opts = vectorcraft_doc::hit::HitOptions { path_only: false, ..cx.hit_options() };
+        // A click inside a fill or among characters samples it too, whatever Object and Type
+        // Object Selection by Path Only say.
+        let opts = vectorcraft_doc::hit::HitOptions { path_only: false, type_path_only: false, ..cx.hit_options() };
        let Some(h) = hit_test(cx.doc, ev.pos, opts) else { return vec![] };
        let src = paint_owner(cx.doc, h.leaf);
        let Some(n) = cx.doc.node(src) else { return vec![] };
@@ -91,6 +91,10 @@ fn drag_id() -> egui::Id {
 fn temp_tool_id() -> egui::Id {
    egui::Id::new("canvas-temp-tool")
 }
+/// Where the pointer was last seen during a press on the canvas.
+fn drag_pos_id() -> egui::Id {
+    egui::Id::new("canvas-drag-pos")
+}

 /// Selection, Direct Selection and Group Selection: the tools Cmd switches to for a drag.
 pub(crate) fn is_selection_tool(id: &str) -> bool {
@@ -232,6 +236,7 @@ pub fn show(app: &mut VectorcraftApp, ui: &mut Ui) {
        ppp,
        hidden: vec![],
        rot: v.rotation,
+        anti_alias: app.session.prefs.anti_aliased_artwork,
    };
    if !app.canvas.worker_started {
        app.canvas.worker_started = true;
@@ -264,6 +269,9 @@ pub fn show(app: &mut VectorcraftApp, ui: &mut Ui) {
            }),
            mask_view,
            highlight_substitutions: true,
+            // General › Anti-aliased Artwork: off, edges are hard on screen (raster effects and
+            // pattern tiles stay smooth), as in Illustrator.
+            anti_alias: if app.session.prefs.anti_aliased_artwork { vectorcraft_render::AntiAlias::Art } else { vectorcraft_render::AntiAlias::None },
            ..opts
        };
        // Light documents render synchronously (no lag vs overlays); heavy ones go to the worker.
@@ -296,6 +304,11 @@ pub fn show(app: &mut VectorcraftApp, ui: &mut Ui) {
    if let Some(look) = grid_look.filter(|_| !grids_in_back) {
        grid(&painter, &xf, doc.grid.spacing, doc.grid.subdivisions, look);
    }
+    // The pixel grid (Guides & Grid › Show Pixel Grid (Above 600% Zoom)): in Pixel Preview from
+    // 600% zoom, a line at every document pixel over the art, so the pixels it rasterizes to show.
+    if app.ui.view.pixel_preview && v.zoom >= PIXEL_GRID_ZOOM && app.session.prefs.show_pixel_grid {
+        grid(&painter, &xf, 1.0, 1, LineLook { color: PIXEL_GRID, dots: false });
+    }
    // Artboard edges and names.
    let active_ab = 0;
    for (i, ab) in doc.artboards.iter().enumerate() {
@@ -456,6 +469,10 @@ fn handle_input(app: &mut VectorcraftApp, ui: &Ui, resp: &egui::Response, rect:
    let v = *app.view().unwrap_or(&View::default());
    let xf = Xf::new(rect, &v);
    let hover = pointer.hover_pos().filter(|p| rect.contains(*p));
+    // A lifted pen or finger takes the pointer away in the frame it lifts (egui's `PointerGone`),
+    // so a tap whose press and lift come in one frame has no hover position: it presses (and
+    // double-taps) where it was seen last (#491).
+    let at = hover.or_else(|| pointer.interact_pos().filter(|p| rect.contains(*p)));
    app.hover_doc = hover.map(|p| xf.to_doc(p));
    let view = app.view_info();
    let drag: Option<Drag> = ui.data(|d| d.get_temp(drag_id()));
@@ -497,7 +514,7 @@ fn handle_input(app: &mut VectorcraftApp, ui: &Ui, resp: &egui::Response, rect:
    if pointer.primary_pressed()
        && resp.hovered()
        && !middle_pan
-        && let Some(p) = hover
+        && let Some(p) = at
    {
        ui.ctx().memory_mut(|mem| mem.stop_text_input());
        app.ui.flyout = None;
@@ -523,7 +540,10 @@ fn handle_input(app: &mut VectorcraftApp, ui: &Ui, resp: &egui::Response, rect:
            dispatch(app, &ev, view);
            kind
        };
-        ui.data_mut(|dd| dd.insert_temp(drag_id(), d));
+        ui.data_mut(|dd| {
+            dd.insert_temp(drag_id(), d);
+            dd.insert_temp(drag_pos_id(), p);
+        });
    } else if drag.is_none()
        && resp.hovered()
        && pointer.button_pressed(egui::PointerButton::Middle)
@@ -532,9 +552,11 @@ fn handle_input(app: &mut VectorcraftApp, ui: &Ui, resp: &egui::Response, rect:
        // Middle-button drag pans the view whatever the tool.
        ui.data_mut(|dd| dd.insert_temp(drag_id(), Drag::Pan { start, center: v.center, middle: true }));
    } else if let Some(d) = drag {
-        let p = pointer.interact_pos().unwrap_or(rect.center());
+        // The pointer gone (a pen lifted with its press), the drag ends where it was last seen.
+        let p = pointer.interact_pos().or_else(|| ui.data(|dd| dd.get_temp(drag_pos_id()))).unwrap_or(rect.center());
        let held = if middle_pan { pointer.button_down(egui::PointerButton::Middle) } else { pointer.primary_down() };
        if held {
+            ui.data_mut(|dd| dd.insert_temp(drag_pos_id(), p));
            match d {
                Drag::Pan { start, center, .. } => {
                    let d = xf.delta_to_doc(p - start);
@@ -572,7 +594,10 @@ fn handle_input(app: &mut VectorcraftApp, ui: &Ui, resp: &egui::Response, rect:
                }
            }
        } else {
-            ui.data_mut(|dd| dd.remove::<Drag>(drag_id()));
+            ui.data_mut(|dd| {
+                dd.remove::<Drag>(drag_id());
+                dd.remove::<Pos2>(drag_pos_id());
+            });
            match d {
                Drag::ZoomBox { start } => {
                    let r = egui::Rect::from_two_pos(start, p);
@@ -611,7 +636,7 @@ fn handle_input(app: &mut VectorcraftApp, ui: &Ui, resp: &egui::Response, rect:
        dispatch(app, &ev, view);
    }
    if resp.double_clicked()
-        && let Some(p) = hover
+        && let Some(p) = at
    {
        let ev = PointerEvent { kind: PointerKind::DoubleClick, pos: xf.to_doc(p), mods: mods(m, space), pressure: 1.0 };
        let before = app.session.tool_id().to_string();
@@ -763,6 +788,11 @@ fn checker(p: &egui::Painter, quad: &[Pos2], ab: Rect, zoom: f64, tex: egui::Tex
    p.add(Shape::mesh(mesh));
 }

+/// The zoom the pixel grid shows from in Pixel Preview (600%), and its colour: a translucent grey,
+/// so the art's pixels read through it.
+const PIXEL_GRID_ZOOM: f64 = 6.0;
+const PIXEL_GRID: Color32 = Color32::from_rgba_premultiplied(64, 64, 64, 96);
+
 /// The look of the grid or of the guides (Preferences › Guides & Grid › Color and Style).
 #[derive(Clone, Copy)]
 struct LineLook {
@@ -799,8 +829,10 @@ fn pref_color(hex: &str, fallback: Color32) -> Color32 {
 /// subdivisions instead.
 fn grid(p: &egui::Painter, xf: &Xf, spacing: f64, subdiv: u32, look: LineLook) {
    let r = xf.rect;
-    let a = xf.to_doc(r.min);
-    let b = xf.to_doc(r.max);
+    // The view in document space: the box round the canvas's corners (the view may be rotated;
+    // the painter clips to the canvas).
+    let corners = [r.left_top(), r.right_top(), r.right_bottom(), r.left_bottom()].map(|c| xf.to_doc(c));
+    let view = corners.iter().fold(Rect::from_points(corners[0], corners[0]), |b, c| b.union_pt(*c));
    let sub = spacing / subdiv.max(1) as f64;
    let step = if sub * xf.zoom >= 6.0 { sub } else { spacing };
    // Dots crowd sooner than lines.
@@ -808,25 +840,16 @@ fn grid(p: &egui::Painter, xf: &Xf, spacing: f64, subdiv: u32, look: LineLook) {
        return;
    }
    let major = |v: f64| (v / spacing - (v / spacing).round()).abs() < 1e-6;
-    // The lines across the view, on screen, each with whether it is a gridline.
-    let lines = |from: f64, to: f64, screen: &dyn Fn(f64) -> f32| {
-        let mut v = (from / step).floor() * step;
-        let mut out = vec![];
-        while v <= to {
-            out.push((screen(v), major(v)));
-            v += step;
-        }
-        out
+    // The lines across the view (where along their axis), at least 4 px apart (and capped).
+    let lines = |from: f64, to: f64| {
+        let first = (from / step).floor();
+        (0..10_000u32).map(move |i| (first + f64::from(i)) * step).take_while(move |v| *v <= to)
    };
-    let xs = lines(a.x, b.x, &|x| xf.to_screen(Point::new(x, 0.0)).x);
-    let ys = lines(a.y, b.y, &|y| xf.to_screen(Point::new(0.0, y)).y);
    if look.dots {
        let mut mesh = egui::Mesh::default();
-        for &(x, mx) in &xs {
-            for &(y, my) in &ys {
-                if mx || my {
-                    mesh.add_colored_rect(egui::Rect::from_center_size(pos2(x, y), vec2(1.5, 1.5)), look.color);
-                }
+        for x in lines(view.x0, view.x1) {
+            for y in lines(view.y0, view.y1).filter(|y| major(x) || major(*y)) {
+                mesh.add_colored_rect(egui::Rect::from_center_size(xf.to_screen(Point::new(x, y)), vec2(1.5, 1.5)), look.color);
            }
        }
        p.add(Shape::mesh(mesh));
@@ -834,11 +857,11 @@ fn grid(p: &egui::Painter, xf: &Xf, spacing: f64, subdiv: u32, look: LineLook) {
    }
    let minor = look.color.gamma_multiply(0.4);
    let stroke = |major: bool| Stroke::new(1.0, if major { look.color } else { minor });
-    for (x, m) in xs {
-        p.line_segment([pos2(x, r.top()), pos2(x, r.bottom())], stroke(m));
+    for x in lines(view.x0, view.x1) {
+        p.line_segment([xf.to_screen(Point::new(x, view.y0)), xf.to_screen(Point::new(x, view.y1))], stroke(major(x)));
    }
-    for (y, m) in ys {
-        p.line_segment([pos2(r.left(), y), pos2(r.right(), y)], stroke(m));
+    for y in lines(view.y0, view.y1) {
+        p.line_segment([xf.to_screen(Point::new(view.x0, y)), xf.to_screen(Point::new(view.x1, y))], stroke(major(y)));
    }
 }

@@ -1043,13 +1066,15 @@ fn walk_drawn<'a>(n: &'a Node, f: &mut impl FnMut(&'a Node)) {
 }

 /// The topmost editable object under document point `p` at `zoom`, as the selection tools pick it
-/// (Selection & Anchor Display › Tolerance and Object Selection by Path Only).
+/// (Selection & Anchor Display › Tolerance and Object Selection by Path Only, Type › Type Object
+/// Selection by Path Only).
 fn hit_at(app: &VectorcraftApp, p: Point, zoom: f64) -> Option<vectorcraft_doc::hit::Hit> {
    let prefs = &app.session.prefs;
    let opt = vectorcraft_doc::hit::HitOptions {
        tol: prefs.selection_tolerance / zoom,
        outline: app.ui.view.outline,
        path_only: prefs.object_selection_by_path_only,
+        type_path_only: prefs.type_selection_by_path_only,
    };
    vectorcraft_doc::hit::hit_test(&app.session.active()?.doc, p, opt)
 }
@@ -1939,6 +1964,14 @@ mod tests {

    /// One headless canvas frame → the shapes drawn, `Shape::Vec`s flattened.
    fn shapes(app: &mut VectorcraftApp, ctx: &egui::Context) -> Vec<Shape> {
+        let (shapes, mut delta) = frame_output(app, ctx);
+        delta.clear();
+        shapes
+    }
+
+    /// One headless canvas frame → the shapes drawn (`Shape::Vec`s flattened) and the textures
+    /// uploaded by it (the art's raster among them, when it was re-rendered).
+    fn frame_output(app: &mut VectorcraftApp, ctx: &egui::Context) -> (Vec<Shape>, egui::TexturesDelta) {
        fn flat(s: Shape, out: &mut Vec<Shape>) {
            match s {
                Shape::Vec(v) => v.into_iter().for_each(|s| flat(s, out)),
@@ -1946,11 +1979,93 @@ mod tests {
            }
        }
        let raw = egui::RawInput { screen_rect: Some(egui::Rect::from_min_size(Pos2::ZERO, vec2(800.0, 600.0))), ..Default::default() };
-        let mut out = ctx.run_ui(raw, |ui| show(app, ui));
-        out.textures_delta.clear();
+        let out = ctx.run_ui(raw, |ui| show(app, ui));
        let mut v = vec![];
        out.shapes.into_iter().for_each(|c| flat(c.shape, &mut v));
-        v
+        (v, out.textures_delta)
+    }
+
+    /// General › Anti-aliased Artwork (#394): on (the default), the art's edges are smoothed on
+    /// screen; off, every pixel is either painted or not, and turning it either way re-renders.
+    #[test]
+    fn anti_aliased_artwork_preference_smooths_the_canvas() {
+        let mut app = VectorcraftApp::new(Session::new(), Default::default());
+        app.session.execute("file.new", &json!({"width": 400, "height": 300})).unwrap();
+        // Render on this thread: the worker's frame would land later than the test looks.
+        app.canvas.worker_started = true;
+        // A disc: its edge crosses pixels at every angle.
+        app.session.execute("shape.ellipse", &json!({"x": 100, "y": 50, "width": 200, "height": 200})).unwrap();
+        let ctx = egui::Context::default();
+        // The alphas of the art's raster uploaded by one frame, None when it was not re-rendered.
+        let alphas = |app: &mut VectorcraftApp| -> Option<Vec<u8>> {
+            let (_, mut delta) = frame_output(app, &ctx);
+            let art = app.canvas.texture.as_ref().unwrap().id();
+            let alphas = delta.set.iter().find(|e| e.0.eq(&art)).and_then(|e| e.1.last()).map(|d| {
+                let egui::ImageData::Color(img) = &d.image;
+                img.pixels.iter().map(|c| c.a()).collect()
+            });
+            delta.clear();
+            alphas
+        };
+        let partial = |a: &[u8]| a.iter().filter(|&&a| a != 0 && a != 255).count();
+        let on = alphas(&mut app).expect("the first frame renders the art");
+        assert!(partial(&on) > 50, "anti-aliased: edge pixels partly covered ({} of them)", partial(&on));
+        assert!(alphas(&mut app).is_none(), "nothing changed: no re-render");
+        app.session.execute("prefs.set", &json!({"key": "antiAliasedArtwork", "value": false})).unwrap();
+        let off = alphas(&mut app).expect("the preference change re-renders");
+        assert_eq!(partial(&off), 0, "hard edges: every pixel painted or not");
+        assert!(off.iter().filter(|&&a| a == 255).count() > 1000, "the disc is still painted");
+        app.session.execute("prefs.set", &json!({"key": "antiAliasedArtwork", "value": true})).unwrap();
+        assert!(partial(&alphas(&mut app).expect("re-rendered")) > 50, "smooth again");
+    }
+
+    /// Guides & Grid › Show Pixel Grid (Above 600% Zoom) (#394): in Pixel Preview at 600% zoom and
+    /// above, a line at every document pixel over the art; none below 600%, out of Pixel Preview,
+    /// or with the option off.
+    #[test]
+    fn pixel_grid_shows_in_pixel_preview_from_600_percent() {
+        let mut app = VectorcraftApp::new(Session::new(), Default::default());
+        app.session.execute("file.new", &json!({"width": 400, "height": 300})).unwrap();
+        app.session.execute("shape.rectangle", &json!({"x": 100, "y": 50, "width": 200, "height": 200})).unwrap();
+        app.canvas.worker_started = true; // render on this thread
+        let ctx = egui::Context::default();
+        shapes(&mut app, &ctx); // the first frame fits the view to the artboard
+        // → (the pixel grid's lines, whether the first of them is drawn over the art).
+        let pixel_lines = |app: &mut VectorcraftApp| {
+            let s = shapes(app, &ctx);
+            let art = app.canvas.texture.as_ref().unwrap().id();
+            let image = s.iter().position(|s| matches!(s, Shape::Mesh(m) if m.texture_id == art)).expect("the art");
+            let is_line = |s: &Shape| matches!(s, Shape::LineSegment { stroke, .. } if stroke.color == PIXEL_GRID);
+            let lines: Vec<usize> = s.iter().enumerate().filter(|(_, s)| is_line(s)).map(|(i, _)| i).collect();
+            (lines.len(), lines.first().is_some_and(|&i| i > image))
+        };
+        app.ui.view.pixel_preview = true;
+        app.view_mut().unwrap().zoom = 8.0;
+        let (n, over) = pixel_lines(&mut app);
+        assert!(n >= 150, "a line every 8 px across the 800 × 600 canvas: {n}");
+        assert!(over, "over the art");
+        app.view_mut().unwrap().zoom = 5.0;
+        assert_eq!(pixel_lines(&mut app).0, 0, "below 600%: none");
+        app.view_mut().unwrap().zoom = 6.0;
+        assert!(pixel_lines(&mut app).0 >= 200, "from 600%");
+        app.ui.view.pixel_preview = false;
+        assert_eq!(pixel_lines(&mut app).0, 0, "out of Pixel Preview: none");
+        app.ui.view.pixel_preview = true;
+        app.session.execute("prefs.set", &json!({"key": "showPixelGrid", "value": false})).unwrap();
+        assert_eq!(pixel_lines(&mut app).0, 0, "the option off: none");
+        // A rotated view: the lines turn with the pixels, across the whole canvas.
+        app.session.execute("prefs.set", &json!({"key": "showPixelGrid", "value": true})).unwrap();
+        app.view_mut().unwrap().rotation = 30.0;
+        let s = shapes(&mut app, &ctx);
+        let turned: Vec<_> = s
+            .iter()
+            .filter_map(|s| match s {
+                Shape::LineSegment { points: [a, b], stroke } if stroke.color == PIXEL_GRID => Some((b.x - a.x).atan2(b.y - a.y).to_degrees().abs()),
+                _ => None,
+            })
+            .collect();
+        assert!(turned.len() >= 200, "{}", turned.len());
+        assert!(turned.iter().all(|a| [30.0, 60.0, 120.0, 150.0].iter().any(|t| (a - t).abs() < 0.5)), "turned 30°: {turned:?}");
    }

    /// Guides & Grid (#394): the grid in Grid Color, behind the art or, with Grids In Back off,
@@ -2625,4 +2740,76 @@ mod tests {
        assert!(!app.take_ime_discard());
        assert_eq!(plain(&app, id), "雅がくらくか");
    }
+
+    /// The events eframe's winit integration sends for a pen (Windows Ink) or a finger: a touch
+    /// with its pressure, and the mouse it stands in for (#491).
+    fn pen(phase: egui::TouchPhase, pos: Pos2, force: f32) -> Vec<egui::Event> {
+        let touch = egui::Event::Touch { device_id: egui::TouchDeviceId(1), id: egui::TouchId(1), phase, pos, force: Some(force) };
+        let button = |pressed| egui::Event::PointerButton { pos, button: egui::PointerButton::Primary, pressed, modifiers: Default::default() };
+        match phase {
+            egui::TouchPhase::Start => vec![touch, egui::Event::PointerMoved(pos), button(true)],
+            egui::TouchPhase::Move => vec![touch, egui::Event::PointerMoved(pos)],
+            egui::TouchPhase::End | egui::TouchPhase::Cancel => vec![touch, button(false), egui::Event::PointerGone],
+        }
+    }
+
+    /// A pen stroke across `pts` (document points), one frame per sample, with its pressures.
+    fn pen_stroke(app: &mut VectorcraftApp, ctx: &egui::Context, pts: &[(f64, f64, f32)]) {
+        let xf = Xf::new(app.canvas_rect.unwrap(), app.view().unwrap());
+        let last = pts.len() - 1;
+        for (i, &(x, y, force)) in pts.iter().enumerate() {
+            let phase = if i == 0 { egui::TouchPhase::Start } else { egui::TouchPhase::Move };
+            frame(app, ctx, pen(phase, xf.to_screen(Point::new(x, y)), force));
+            if i == last {
+                frame(app, ctx, pen(egui::TouchPhase::End, xf.to_screen(Point::new(x, y)), force));
+            }
+        }
+    }
+
+    /// #491: a pen or a finger draws as the mouse does, and its pressure reaches the tools that
+    /// use it; the pointer leaving with the lift doesn't move the stroke's end.
+    #[test]
+    fn pen_and_touch_input_drive_the_tools_with_their_pressure() {
+        let mut app = VectorcraftApp::new(Session::new(), Default::default());
+        app.session.execute("file.new", &json!({"width": 800, "height": 600})).unwrap();
+        let ctx = egui::Context::default();
+        frame(&mut app, &ctx, vec![]);
+        app.select_tool("pencil");
+        pen_stroke(&mut app, &ctx, &[(100.0, 100.0, 0.5), (140.0, 120.0, 0.6), (180.0, 150.0, 0.7), (220.0, 200.0, 0.4)]);
+        let b = app.session.active().unwrap().doc.art_bounds().expect("the pen drew a path");
+        assert!(b.x0 > 90.0 && b.y0 > 90.0 && b.x1 < 230.0 && b.y1 < 210.0 && b.x1 > 200.0, "the stroke stays where the pen went: {b:?}");
+
+        // Bloat with Use Pressure Pen: each sample carries the pen's pressure.
+        app.session.execute("shape.rectangle", &json!({"x": 300, "y": 300, "width": 200, "height": 200})).unwrap();
+        app.select_tool("bloat");
+        app.session.set_tool_option("usePressure", &json!(true));
+        pen_stroke(&mut app, &ctx, &[(500.0, 350.0, 0.2), (500.0, 400.0, 0.5), (500.0, 420.0, 0.8)]);
+        let (cmd, p) = app.session.journal.last().unwrap().clone();
+        assert_eq!(cmd, "object.liquify");
+        let pressures: Vec<f64> = p["points"].as_array().unwrap().iter().map(|s| (s[2].as_f64().unwrap() * 100.0).round() / 100.0).collect();
+        assert_eq!(pressures.first(), Some(&0.2), "the press's own pressure: {pressures:?}");
+        assert!(pressures.contains(&0.5) && pressures.contains(&0.8), "{pressures:?}");
+    }
+
+    /// #491: a pen tap whose press and lift come in one frame selects what it tapped, and the
+    /// lift (the pointer gone with it) doesn't drag the selection to the canvas's centre.
+    #[test]
+    fn a_pen_tap_within_one_frame_clicks_where_it_tapped() {
+        let mut app = VectorcraftApp::new(Session::new(), Default::default());
+        app.session.execute("file.new", &json!({"width": 800, "height": 600})).unwrap();
+        let id = app.session.execute("shape.rectangle", &json!({"x": 100, "y": 100, "width": 100, "height": 100})).unwrap()["id"].as_u64().unwrap();
+        app.session.execute("select.none", &json!({})).unwrap();
+        let ctx = egui::Context::default();
+        frame(&mut app, &ctx, vec![]);
+        app.select_tool("selection");
+        let before = app.session.active().unwrap().doc.art_bounds();
+        let at = Xf::new(app.canvas_rect.unwrap(), app.view().unwrap()).to_screen(Point::new(150.0, 150.0));
+        let mut tap = pen(egui::TouchPhase::Start, at, 0.5);
+        tap.extend(pen(egui::TouchPhase::End, at, 0.5));
+        frame(&mut app, &ctx, tap);
+        frame(&mut app, &ctx, vec![]);
+        let doc = app.session.active().unwrap();
+        assert_eq!(doc.selection.objects, vec![vectorcraft_doc::NodeId(id)]);
+        assert_eq!(doc.doc.art_bounds(), before, "the tap moved nothing");
+    }
 }
@@ -112,7 +112,7 @@ fn confirm(app: &mut VectorcraftApp, d: &Dialog) -> Result<Value, String> {
        crate::place::run(app, &p).map(|_| ())
    } else {
        let path = d.fields.get("path").and_then(Value::as_str).map(str::to_string);
-        io::open_document(app, &d.str("name"), &file.bytes, path, &json!({ "dxf": dxf }))
+        io::open_document(app, &d.str("name"), &file.bytes, path, &json!({ "dxf": dxf })).map(|_| ())
    };
    match r {
        Ok(()) => {
@@ -203,7 +203,7 @@ fn confirm(app: &mut VectorcraftApp, d: &Dialog) -> Result<Value, String> {
        if !d.bool("allPages") && !range.trim().is_empty() {
            p["pages"] = json!(range);
        }
-        io::open_document(app, &name, &file.bytes, path, &p)
+        io::open_document(app, &name, &file.bytes, path, &p).map(|_| ())
    };
    match r {
        Ok(()) => {
@@ -73,3 +73,22 @@ fn the_eps_options_dialog_needs_a_document() {
    assert!(app.run("ui.epsOptionsDialog", json!({})).is_err());
    assert!(!crate::menus::enabled(&app, "ui.epsOptionsDialog"));
 }
+
+/// Opening an EPS file whose PostScript reads only partly says why, in the status bar and in
+/// `file.open`'s result (what `app.open` and MCP's `open_file` return): the error, the operator
+/// and the procedure it ran in.
+#[test]
+fn opening_an_eps_that_reads_partly_says_why() {
+    let dir = std::env::temp_dir().join(format!("vc-eps-open-{}", std::process::id()));
+    std::fs::create_dir_all(&dir).unwrap();
+    let path = dir.join("partial.eps");
+    std::fs::write(&path, "%!PS-Adobe-3.0 EPSF-3.0\n%%BoundingBox: 0 0 100 100\n%%EndComments\n0 0 10 10 rectfill /p { frobnicate } def p\n%%EOF\n")
+        .unwrap();
+    let mut app = VectorcraftApp::new(vectorcraft_engine::Session::new(), Default::default());
+    app.services.read = Some(Box::new(|p: &str| std::fs::read(p).map_err(|e| e.to_string())));
+    let r = app.run("file.open", json!({"path": path.to_string_lossy()})).unwrap();
+    let w = r["warnings"][0].as_str().unwrap();
+    assert!(w.contains("`frobnicate`") && w.contains("in `p`"), "{r}");
+    assert!(app.ui.status.contains("Opened with 1 note(s)") && app.ui.status.contains("frobnicate"), "{}", app.ui.status);
+    std::fs::remove_dir_all(dir).ok();
+}
@@ -3158,6 +3158,11 @@ axis	Both	Ambos
@msg	`{tool}` isn't a Liquify tool	`{tool}` no es una herramienta de Licuar
@msg	`{tool}` isn't a freehand tool	`{tool}` no es una herramienta de dibujo a mano alzada
@msg	`{to}` is not an available name	`{to}` no es un nombre disponible
+@msg	a PostScript error ({name} in `{op}`)	un error de PostScript ({name} en `{op}`)
+@msg	a PostScript error ({name} in `{op}`), in {procs}	un error de PostScript ({name} en `{op}`), en {procs}
+@msg	a PostScript error ({name} in `{op}`: {at})	un error de PostScript ({name} en `{op}`: {at})
+@msg	a PostScript error ({name} in `{op}`: {at}), in {procs}	un error de PostScript ({name} en `{op}`: {at}), en {procs}
+@msg	a PostScript error ({name})	un error de PostScript ({name})
@msg	a bitmap is empty	un mapa de bits está vacío
@msg	a bitmap is too large to read	un mapa de bits es demasiado grande para leerlo
@msg	a colour index is 0 to {_1}, not {n}	un índice de color va de 0 a {_1}, no {n}
@@ -3239,6 +3244,10 @@ axis	Both	Ambos
@msg	invalid image data for `{0}`	datos de imagen no válidos para `{0}`
@msg	invalid parameters for `{cmd}`: {msg}	parámetros no válidos para `{cmd}`: {msg}
@msg	is not an image VectorCraft reads	no es una imagen que VectorCraft pueda leer
+@msg	it uses `{at}`, which VectorCraft's PostScript reader doesn't know	usa `{at}`, que el lector de PostScript de VectorCraft no conoce
+@msg	it uses `{at}`, which VectorCraft's PostScript reader doesn't know, in {procs}	usa `{at}`, que el lector de PostScript de VectorCraft no conoce, en {procs}
+@msg	its Windows metafile preview was opened instead, which may simplify the art	en su lugar se abrió su previsualización de metarchivo de Windows, que puede simplificar la ilustración
+@msg	its preview was placed instead, at screen resolution	en su lugar se colocó su previsualización, a resolución de pantalla
@msg	join needs open paths	unir necesita trazados abiertos
@msg	lang must be one of {_1}	lang debe ser uno de estos: {_1}
@msg	layers can't be wrap objects	las capas no pueden ser objetos para ceñir
@@ -3366,6 +3375,7 @@ axis	Both	Ambos
@msg	paths contain invalid coordinates	los trazados contienen coordenadas no válidas
@msg	paths: give at least one file	paths: indica al menos un archivo
@msg	pattern missing	falta el motivo
+@msg	patterns nested too deeply are filled with mid-grey	los motivos anidados a demasiada profundidad se rellenan de gris medio
@msg	percent must be above 0 and at most 6400, not {p}	el porcentaje debe ser mayor que 0 y como máximo 6400, no {p}
@msg	pick a colour, gradient or pattern to save as a swatch	elige un color, degradado o motivo para guardarlo como muestra
@msg	plane must be left, right or ground	plane debe ser left, right o ground
@@ -3411,6 +3421,9 @@ axis	Both	Ambos
@msg	select two or more graphic styles to merge	selecciona dos o más estilos gráficos para combinarlos
@msg	select type in perspective	selecciona texto en perspectiva
@msg	selection has no bounds	la selección no tiene límites
+@msg	shadings of an unknown type were left out	se omitieron los sombreados de tipo desconocido
+@msg	shadings of more than 4096 patches or triangles were left out	se omitieron los sombreados de más de 4096 parches o triángulos
+@msg	shadings whose functions are of an unknown type are filled with their middle colour	los sombreados cuyas funciones son de tipo desconocido se rellenan con su color intermedio
@msg	shortcut for `{k}` must be a string	el atajo de `{k}` debe ser un texto
@msg	stop {i} needs `offset`	la parada {i} necesita `offset`
@msg	stop {i} needs a valid `color`	la parada {i} necesita un `color` válido
@@ -3442,6 +3455,7 @@ axis	Both	Ambos
@msg	the export returned unreadable data	la exportación devolvió datos ilegibles
@msg	the export wrote no file	la exportación no escribió ningún archivo
@msg	the file holds only a placeholder page, not its art (it was saved without PDF compatibility): save it again with PDF compatibility on, or as PDF or SVG	el archivo solo contiene una página provisional, no su ilustración (se guardó sin compatibilidad con PDF): vuelve a guardarlo con la compatibilidad con PDF activada, o como PDF o SVG
+@msg	the file was read up to an error ({why}): what follows it was left out	el archivo se leyó hasta un error ({why}): se omitió lo que sigue
@msg	the file's preview header points outside the file	el encabezado de previsualización del archivo apunta fuera del archivo
@msg	the image's pixels don't match its size	los píxeles de la imagen no coinciden con su tamaño
@msg	the layer has no objects to clip by	la capa no tiene objetos con los que recortar
@@ -3471,6 +3485,7 @@ axis	Both	Ambos
@msg	there are no objects to release	no hay objetos que soltar
@msg	there are no printer settings to open here	aquí no hay ajustes de impresora que abrir
@msg	this PostScript file can't be read ({_1}): save it as PDF or SVG in the app that made it	no se puede leer este archivo PostScript ({_1}): guárdalo como PDF o SVG en la aplicación que lo creó
+@msg	this file's PostScript couldn't be read ({why}): {what}	no se pudo leer el PostScript de este archivo ({why}): {what}
@msg	this format holds one artboard: export several as PDF or with document.exportForScreens	este formato admite una sola mesa de trabajo: exporta varias como PDF o con document.exportForScreens
@msg	this is a DWG drawing, which can't be read: save it from the CAD app as an ASCII DXF and open that	este es un dibujo DWG, que no se puede leer: guárdalo desde la aplicación de CAD como DXF ASCII y abre ese archivo
@msg	this is a PostScript file (an .ai saved in an older format or without PDF compatibility, or an EPS file), which can't be opened yet: save it as PDF, PDF-compatible .ai or SVG	este es un archivo PostScript (un .ai guardado en un formato antiguo o sin compatibilidad con PDF, o un archivo EPS), que todavía no se puede abrir: guárdalo como PDF, .ai compatible con PDF o SVG
@@ -16,15 +16,16 @@ const TEMPLATE_EXTS: &[&str] = &["vctemplate", "ait", "vectorcraft", "drawcraft"

 /// Open bytes of any readable format as a new document (templates open untitled); swatch and
 /// graphic style library files open in the library panel and flattener, PDF, print and perspective
-/// grid presets files are imported.
-pub fn open_bytes(app: &mut VectorcraftApp, name: &str, bytes: &[u8], path: Option<String>) -> Result<(), String> {
+/// grid presets files are imported. → `document.open`'s result for a document opened now (its
+/// `warnings` say what didn't come in as it was), else null.
+pub fn open_bytes(app: &mut VectorcraftApp, name: &str, bytes: &[u8], path: Option<String>) -> Result<Value, String> {
    let ext = fileio::extension(name);
    // A WebAssembly plug-in is installed.
    if vectorcraft_engine::cmd::plugin::EXTS.contains(&ext.as_str()) {
        let r =
            app.run("plugin.install", json!({"dataBase64": vectorcraft_format::base64_encode(bytes), "name": path.as_deref().unwrap_or(name)}))?;
        app.status(format!("Installed plug-in {}", r["name"].as_str().unwrap_or(name)));
-        return Ok(());
+        return Ok(Value::Null);
    }
    let presets = [
        (vectorcraft_engine::cmd::flatten::PRESET_EXTS, "flattener.presets.import", "flattener presets"),
@@ -36,7 +37,7 @@ pub fn open_bytes(app: &mut VectorcraftApp, name: &str, bytes: &[u8], path: Opti
        let r = app.run(import, serde_json::json!({"data": String::from_utf8_lossy(bytes)}))?;
        let names: Vec<&str> = r["imported"].as_array().into_iter().flatten().filter_map(Value::as_str).collect();
        app.status(format!("Imported {what}: {}", names.join(", ")));
-        return Ok(());
+        return Ok(Value::Null);
    }
    let swatches = vectorcraft_engine::cmd::swatchlib::LIBRARY_EXTS.contains(&ext.as_str());
    if swatches || ext == vectorcraft_doc::style_libs::STYLES_EXT {
@@ -45,27 +46,28 @@ pub fn open_bytes(app: &mut VectorcraftApp, name: &str, bytes: &[u8], path: Opti
            None => serde_json::json!({"name": name, "data": String::from_utf8_lossy(bytes)}),
        };
        let load = if swatches { crate::panels::swatches::load_library } else { crate::panels::graphic_styles::load_library };
-        return load(app, p).map(|_| ());
+        return load(app, p).map(|_| Value::Null);
    }
    // A PDF with several pages or a password asks first (the Import PDF dialog), and so does a
    // DXF drawing (DXF Import Options).
    if crate::dialogs::import_pdf::offer(app, name, bytes, path.clone(), None)
        || crate::dialogs::dxf_import::offer(app, name, bytes, path.clone(), None)
    {
-        return Ok(());
+        return Ok(Value::Null);
    }
    open_document(app, name, bytes, path, &Value::Null)
 }

-/// Open a document through the engine loader with the `document.open` options in `p`.
-pub fn open_document(app: &mut VectorcraftApp, name: &str, bytes: &[u8], path: Option<String>, p: &Value) -> Result<(), String> {
+/// Open a document through the engine loader with the `document.open` options in `p` →
+/// `document.open`'s result.
+pub fn open_document(app: &mut VectorcraftApp, name: &str, bytes: &[u8], path: Option<String>, p: &Value) -> Result<Value, String> {
    let r = fileio::open_bytes_with(&mut app.session, name, bytes, path, p).map_err(|e| e.to_string())?;
    app.sync_views();
    if let Some(w) = r["warnings"].as_array().filter(|w| !w.is_empty()) {
        app.status(format!("Opened with {} note(s): {}", w.len(), w[0].as_str().unwrap_or_default()));
    }
    crate::dialogs::missing_links::after_open(app, &r);
-    Ok(())
+    Ok(r)
 }

 /// A path from the open dialog, or "cancelled".
@@ -93,18 +95,19 @@ pub fn open_dialog(app: &mut VectorcraftApp) -> Result<(), String> {
        return Ok(());
    }
    let path = pick_open(app, &FilePick { filters: fileio::open_filters().collect(), ..Default::default() })?;
-    open_path(app, &path)
+    open_path(app, &path).map(|_| ())
 }

 fn read(app: &VectorcraftApp, path: &str) -> Result<Vec<u8>, String> {
    app.services.read.as_ref().ok_or("no file reader")?(path)
 }

-pub fn open_path(app: &mut VectorcraftApp, path: &str) -> Result<(), String> {
+/// Open the file at `path` (see [`open_bytes`]) → `document.open`'s result, or null.
+pub fn open_path(app: &mut VectorcraftApp, path: &str) -> Result<Value, String> {
    let bytes = read(app, path)?;
-    open_bytes(app, path, &bytes, Some(path.to_string()))?;
+    let r = open_bytes(app, path, &bytes, Some(path.to_string()))?;
    note_recent(app, path);
-    Ok(())
+    Ok(r)
 }

 /// File → New from Template…: a template (or any readable file) as a new untitled document. Without
@@ -260,6 +260,8 @@ pub struct CacheKey {
    pub ppp: f32,
    pub hidden: Vec<u64>,
    pub rot: f64,
+    /// General › Anti-aliased Artwork.
+    pub anti_alias: bool,
 }

 #[derive(Clone, Copy, Debug, Default)]
@@ -56,7 +56,12 @@ pub const UI_COMMANDS: &[(&str, &str, &str, &str)] = &[
        "",
        "{lang: auto|<code>} the interface language, persisted as the `interfaceLanguage` preference (`auto` follows the system locale; codes: prefs.list › interfaceLanguage, e.g. en, ja, cs, es, zh-hant)",
    ),
-    ("file.open", "Open…", "Cmd+O", "{path?}"),
+    (
+        "file.open",
+        "Open…",
+        "Cmd+O",
+        "{path?} → with a path, document.open's result {index, title, format, warnings, …} (null when a dialog asks first or a library loads)",
+    ),
    (
        "file.save",
        "Save",
@@ -800,7 +805,7 @@ pub fn run_ui_command(app: &mut VectorcraftApp, id: &str, p: &Value) -> Option<R
            Ok(Value::Null)
        }
        "file.open" => match s("path") {
-            Some(path) => io::open_path(app, &path).map(|_| Value::Null),
+            Some(path) => io::open_path(app, &path),
            None => io::open_dialog(app).map(|_| Value::Null),
        },
        // Saves write through the app (save panel, download); with no path known the panel and the
@@ -817,7 +822,7 @@ pub fn run_ui_command(app: &mut VectorcraftApp, id: &str, p: &Value) -> Option<R
        "file.revert" if p.get("confirmed").and_then(Value::as_bool) != Some(true) => io::ask_revert(app),
        "file.reveal" => io::reveal(app),
        id if id.starts_with("file.openRecent") => match recent_slot(app, id).cloned() {
-            Some(path) => io::open_path(app, &path).map(|_| Value::Null),
+            Some(path) => io::open_path(app, &path),
            None => Err("no such recent file".into()),
        },
        "type.findFont" => {
@@ -515,11 +515,12 @@ pub fn show(app: &mut VectorcraftApp, ctx: &egui::Context) {
    let mut ok = false;
    let mut cancel = false;
    let recording = d.str("__recording");
-    // Record a chord (before widgets see the keys).
+    // Record a chord (before widgets see the keys). Modifiers held down are part of the next key's
+    // chord, not a chord of their own.
    if !recording.is_empty() {
        let ev = ctx.input(|i| {
            i.events.iter().find_map(|e| match e {
-                egui::Event::Key { key, pressed: true, modifiers, .. } => Some((*key, *modifiers)),
+                egui::Event::Key { key, pressed: true, modifiers, .. } if !crate::shortcuts::is_modifier(*key) => Some((*key, *modifiers)),
                _ => None,
            })
        });
@@ -789,6 +790,39 @@ mod tests {
        assert_eq!(chord_from_event(Key::K, Modifiers::COMMAND | Modifiers::SHIFT).as_deref(), Some("Cmd+Shift+K"));
        assert_eq!(chord_from_event(Key::P, Modifiers::NONE).as_deref(), Some("P"));
        assert_eq!(chord_from_event(Key::Escape, Modifiers::NONE), None);
+        // A modifier's own key press is no chord (#487).
+        assert_eq!(chord_from_event(Key::ShiftLeft, Modifiers::SHIFT), None);
+        assert!(normalize("ShiftLeft").is_none() && normalize("Cmd+ControlRight").is_none());
+    }
+
+    #[test]
+    fn a_modifier_pressed_while_recording_waits_for_the_key() {
+        let mut app = VectorcraftApp::new(vectorcraft_engine::Session::new(), Default::default());
+        open(&mut app);
+        app.ui.dialog.as_mut().unwrap().fields.insert("__recording".into(), json!("tool:groupSelection"));
+        let ctx = egui::Context::default();
+        theme::install_fonts(&ctx);
+        let mut press = |key, modifiers| {
+            let events = vec![egui::Event::Key { key, physical_key: None, pressed: true, repeat: false, modifiers }];
+            let mut out = ctx.run_ui(egui::RawInput { events, ..Default::default() }, |ui| show(&mut app, ui.ctx()));
+            out.textures_delta.clear();
+            app.ui.dialog.clone().unwrap()
+        };
+        // egui reports Shift's own key press first (#487): the recording goes on.
+        assert_eq!(press(Key::ShiftLeft, Modifiers::SHIFT).str("__recording"), "tool:groupSelection");
+        let d = press(Key::A, Modifiers::SHIFT);
+        assert_eq!(d.str("__recording"), "");
+        assert_eq!(dialog_overrides(&d).get("tool:groupSelection").map(String::as_str), Some("Shift+A"));
+    }
+
+    #[test]
+    fn saved_modifier_only_overrides_give_the_default_back() {
+        let mut ui = UiState::default();
+        ui.shortcut_overrides.insert("tool:groupSelection".into(), "Shift+ShiftLeft".into());
+        ui.shortcut_overrides.insert("edit.preferences".into(), String::new());
+        let ui = ui.sanitized();
+        assert!(!ui.shortcut_overrides.contains_key("tool:groupSelection"));
+        assert_eq!(ui.shortcut_overrides.get("edit.preferences").map(String::as_str), Some(""));
    }

    #[test]
@@ -40,11 +40,20 @@ pub fn parse(s: &str) -> Option<KeyboardShortcut> {
        "Backspace" => Key::Backspace,
        "Tab" => Key::Tab,
        "~" => Key::Backtick,
-        k => Key::from_name(k)?,
+        // A modifier alone is never a chord's key: it couldn't fire (#487).
+        k => Key::from_name(k).filter(|k| !is_modifier(*k))?,
    };
    Some(KeyboardShortcut::new(m, key))
 }

+/// The modifier keys, which egui also reports as key presses of their own.
+pub(crate) fn is_modifier(key: Key) -> bool {
+    matches!(
+        key,
+        Key::ShiftLeft | Key::ShiftRight | Key::ControlLeft | Key::ControlRight | Key::AltLeft | Key::AltRight | Key::SuperLeft | Key::SuperRight
+    )
+}
+
 /// Every command shortcut in effect (user overrides from Edit → Keyboard Shortcuts win), with the
 /// command's params: `{}`, or `{panel}` for the panel shortcuts (`window.panel`).
 pub(crate) fn all_shortcuts() -> Vec<(KeyboardShortcut, &'static str, serde_json::Value)> {
@@ -407,6 +407,9 @@ impl UiState {
            f.tools.retain(|id| vectorcraft_tools::tool_info(id).is_some());
            f.tools.first().is_some_and(|k| seen.insert(k.clone()))
        });
+        // Overrides that can't fire (modifier-only chords recorded by older versions, #487) give
+        // the default back.
+        self.shortcut_overrides.retain(|_, c| c.is_empty() || crate::shortcut_editor::normalize(c).is_some());
        self
    }
 }
@@ -30,7 +30,7 @@ so only enable it while you use it. Transport: `apps/vectorcraft/src/control_ser
 | `ui.screenshot` | `{path?}` | capture the window (PNG). Needs a presented frame: with the screen locked or the window minimized/covered it fails after ~8 s with an explanatory error |
 | `ui.render` | `{path?, scale?}` | render the artboard headlessly (PNG) |
 | `ui.resize` / `ui.focus` | | |
-| `app.open` / `app.save` / `app.export` / `app.quit` | `{path}` / `{path?}` / `{path?, format?, artboard?, range?, scale?, …}` | `app.open` reads every format `document.open` reads (see `document.formats`). `app.export` encodes through the engine's `document.export` (same options; the document keeps its path) and writes `path` through the host; without `path` it returns `{dataBase64, format, bytes}`, as headless mode does. `app.quit`, `file.close` and `file.closeAll` first open a `saveChanges` dialog for each modified document (they return `{"pending": "saveChanges"}`): `ui.dialog.confirm` saves, `ui.dialog.set {field: "discard", value: true}` then confirm discards, `ui.dialog.cancel` cancels the whole close or quit |
+| `app.open` / `app.save` / `app.export` / `app.quit` | `{path}` / `{path?}` / `{path?, format?, artboard?, range?, scale?, …}` | `app.open` reads every format `document.open` reads (see `document.formats`) and returns its result (`{index, title, format, warnings, …}`; `warnings` say what didn't come in as it was, such as an EPS shown as its preview image and why its PostScript couldn't be read), or null when a dialog asks first or a library loads. `app.export` encodes through the engine's `document.export` (same options; the document keeps its path) and writes `path` through the host; without `path` it returns `{dataBase64, format, bytes}`, as headless mode does. `app.quit`, `file.close` and `file.closeAll` first open a `saveChanges` dialog for each modified document (they return `{"pending": "saveChanges"}`): `ui.dialog.confirm` saves, `ui.dialog.set {field: "discard", value: true}` then confirm discards, `ui.dialog.cancel` cancels the whole close or quit |
 | `app.export` with `useArtboards` | `{path, useArtboards: true, range? \| artboards?, …}` | Export As: PNG, JPEG and WebP write one file per chosen artboard (default all; SVG does so for a `range`), `<path stem>-<artboard>.<ext>`, and return `{path, files: [path…]}`; a PDF keeps them as pages of `path`. `useArtboards: false` covers the bounds of the visible art. The menu's Export As… is `file.exportAs`: the `exportAs` dialog (`format`, `useArtboards`, `all`, `range`), then a save dialog and the format's options: `pngOptions` / `jpgOptions` / `webpOptions`, `svgOptions`, or `savePdf` for a PDF with Use Artboards |
 | `ui.dialog.*` on `gradientStop` | `{field: "color" \| "opacity" \| "location", value}` | double-clicking a stop on the Gradient tool's annotator opens its popover (fields `index`, `x`, `y`, `tab`); set `color` (hex), `opacity` or `location` (percentages) and `ui.dialog.confirm` to apply them to the selected stop. `gradient.selectStop {index}` picks the stop the annotator, the panels and Delete/←/→ (`ui.key`) act on |
 | `engine.execute` `ui.savePdfDialog` | `{path?, preset?, range?, …document.exportPdf options}` | opens the Save PDF dialog (`file.export.pdf` with no params opens it too). Its fields are the `document.exportPdf` options: set `compatibility` with `ui.dialog.set {field: "compatibility", value: "1.5"}`, a whole section with `{field: "compression", value: {…}}`, the artboards with `__allArtboards: false` and `range`, the visible section with `__section` (General, Compression, Marks and Bleeds, Output, Advanced, Security, Summary). `ui.dialog.confirm` writes `path` (else asks for one), returns `{path, bytes, warnings}` and opens the file when `viewAfterSaving` is set |
@@ -64,6 +64,7 @@ The window runs natively on Wayland (eframe's `wayland` feature) and on X11. The
 - **Clipboard:** under Wayland arboard talks to the compositor through the data-control protocol (wlroots compositors such as Sway and Hyprland, KDE Plasma), so bitmaps (`image/png`), SVG markup and text copied in any app paste (#398). Where the compositor lacks the protocol (GNOME's Mutter, [arboard#223](https://github.com/1Password/arboard/issues/223)), arboard falls back to the X11 clipboard through XWayland, which only holds what X11 apps copied. egui's own text paste into fields goes through smithay-clipboard and works either way.
 - **Copied files:** files copied in a file manager (`text/uri-list`; `CF_HDROP` on Windows, file URLs on macOS) paste as the first one that is art (SVG, PDF, EMF/WMF or a bitmap), before the clipboard's other formats (which include the files' paths as text).
 - **Dropping files on the window does not work under Wayland:** winit 0.30, which eframe 0.36 runs on, has no Wayland drag and drop ([winit#1881](https://github.com/rust-windowing/winit/issues/1881), added in winit 0.31; [egui#1563](https://github.com/emilk/egui/issues/1563)), so no `dropped_files` arrive. Until eframe moves to winit 0.31: copy the files in the file manager and paste them, use File › Place or Open, or run the app under XWayland, where drops work (`WAYLAND_DISPLAY= vectorcraft`).
+- **Pens and pen displays under Wayland (#491):** winit 0.30 doesn't bind the Wayland tablet protocol (`zwp_tablet_v2`; tablet input arrives in winit 0.31, [winit#4318](https://github.com/rust-windowing/winit/pull/4318), [egui#7731](https://github.com/emilk/egui/pull/7731)). Since Plasma 6.3, KWin no longer turns tablet input into pointer input for such apps ([kwin!6336](https://invent.kde.org/plasma/kwin/-/merge_requests/6336)): the pen moves the compositor's cursor over the window, but the app gets no motion or presses and shows none of its own cursors. Until eframe moves to winit 0.31, either run the app under XWayland, which supports the tablet protocol and hands the pen to X11 apps as a pointer (`WAYLAND_DISPLAY= vectorcraft`, or `env -u WAYLAND_DISPLAY vectorcraft`; for a desktop launcher, put `env WAYLAND_DISPLAY=` before the command in its `Exec=` line), or turn KWin's deprecated emulation back on for the whole session by setting `KWIN_WAYLAND_EMULATE_TABLET=1` in KWin's environment (for example in a file under `~/.config/environment.d/` or in `/etc/environment`) and logging in again. The pen then works as a mouse, without pressure: winit 0.30 reads pen pressure on Windows only (Windows Ink, which reaches the Liquify tools' Use Pressure Pen). Other compositors that don't emulate a pointer for tablets behave the same way.

 ## Fonts: craft-fonts (optional build input)

@@ -178,7 +178,7 @@ objects' fills or strokes differ (`fillMixed` / `strokeMixed`, drawn as a "?" pr
 | `invoke_menu` | `{command, params?}` | Invokes a menu item by command id. Includes UI commands such as `view.*` and `window.*` in remote mode. |
 | `open_panel` | `{panel}` | Remote only. `panel` is a panel id (`layers`, `swatches`, `colorGuide`, …, as `window.panel` takes) or its display label (`"Color Guide"`), in any case. |
 | `screenshot` | `{path?, scale?, artboard?, window?}` | Returns MCP image content (`image/png`, base64) plus a text block. Renders the artboard; `window:true` captures the app window (remote only). |
-| `open_file` | `{path}` | Opens any readable file as a new active document: `.vectorcraft`/`.drawcraft`, `.vctemplate`, `.svg`/`.svgz`, `.pdf`/`.ai`, `.ait`, `.eps`, `.dxf`, `.emf`, `.wmf`, PNG, JPEG, GIF, WebP, TIFF, BMP (an image opens as a document of its pixel size). Templates (`.vctemplate`, `.ait`) open as a new untitled document. PDF, `.ai` and SVG files saved with Preserve Editing reopen as the document they carry. `run_command document.formats` lists the formats. |
+| `open_file` | `{path}` | Opens any readable file as a new active document: `.vectorcraft`/`.drawcraft`, `.vctemplate`, `.svg`/`.svgz`, `.pdf`/`.ai`, `.ait`, `.eps`, `.dxf`, `.emf`, `.wmf`, PNG, JPEG, GIF, WebP, TIFF, BMP (an image opens as a document of its pixel size). Templates (`.vctemplate`, `.ait`) open as a new untitled document. PDF, `.ai` and SVG files saved with Preserve Editing reopen as the document they carry. The reply is `document.open`'s: its `warnings` say what didn't come in as it was (an EPS whose PostScript can't be read opens as its preview, and the warning names the PostScript error, the operator and the procedure). `run_command document.formats` lists the formats. |
 | `save_file` | `{path?}` | Runs `document.save`: the document's own file in its own format (native `.vectorcraft` unless it was opened from or saved as SVG, PDF or a restorable `.ai`; then `warnings` say what that format loses). A path's extension picks the format (`.vectorcraft`, `.vctemplate`, `.pdf`, `.svg`, `.svgz`, `.ai`: a PDF carrying the native document, which reopens editable). |
 | `export` | `{path?, format?, scale?, artboard?, range?, selection?, outlineText?, options?}` | `svg`, `svgz`, `pdf`, `eps`, `dxf`, `emf`, `wmf`, `png`, `jpg`, `webp`, `gif`, `png8` (an indexed `.png`), `tiff`, `bmp`, `tga`, `psd` (layered), `txt` (the document's text), `vectorcraft` or `template` (a native template). The tool's `format` enum and `document.formats` list them, generated from the engine's format table. When `format` is omitted, it comes from the path's extension. PDF writes one page per artboard: all of them, or `artboard` (0-based) / `range` (`"1-3, 5"`, 1-based); the other formats write one artboard. `options` carries more format options (e.g. `{"quality": 80}` for JPEG). `selection: true` exports the selected objects cropped to their bounds (the reply adds their `bounds`, and reports `format` and the encoder's `warnings` as a whole-document export does); `outlineText: true` writes SVG text as paths. Template layers are left out, live effects are kept, and exporting `vectorcraft` never changes the document's path. Without `path` the bytes come back as `dataBase64`. Both backends run the same `document.export` call. |
 | `add_text` | `{text, x?, y?, width?, height?, path?, mode?, pathEffect?, size?, font?, color?}` | Point type at (x, y); area type with `width`/`height`; or `path` + `mode` (`area`/`onPath`) to flow text in or along a path, with `pathEffect` (`rainbow`, `skew`, `3dRibbon`, `stairStep`, `gravity`). |
@@ -1176,7 +1176,11 @@ The Selection & Anchor Display and General preferences apply to `pointer_gesture
 The preferences for the view need the desktop app (`vectorcraft-cli mcp --connect`): `zoomWithMouseWheel` (the
 wheel zooms about the pointer, Shift-wheel scrolls up and down, Cmd/Ctrl-wheel sideways; the control channel's
 `ui.wheel` turns the wheel), `zoomToSelection` (on: Zoom In and Zoom Out centre the selection), `showToolTips`,
-`anchorSize` (1–7), `gridColor`, `gridStyle`, `gridsInBack`, `guideColor`, `guideStyle`, `recentFontsCount` and
+`anchorSize` (1–7), `gridColor`, `gridStyle`, `gridsInBack`, `guideColor`, `guideStyle`, `showPixelGrid` (on by
+default: in View › Pixel Preview at 600% zoom and above, a line at every document pixel over the art),
+`recentFontsCount`, `antiAliasedArtwork` (on by default; off, the canvas draws the art with hard edges — a pixel is
+painted when the art covers at least half of it — while raster effects and pattern tiles stay smooth; exports keep
+their own Anti-aliasing option) and
 `scrubNumericFields` (on: a horizontal drag on a numeric field's label steps the field, one undo step per drag; the
 control channel's `ui.drag` scrubs).

@@ -1211,6 +1215,11 @@ Not read yet: Construction Guides and their Angles, and Spacing Guides (the tool
  selection (←/→), leading (↑/↓) and baseline shift (Shift+↑/↓), five steps with Cmd/Ctrl too.
 - `missingGlyphProtection` (on by default): `text.setStyle` and `text.setRangeStyle` changing the font leave the
  characters the new font has no glyph for in the font that had one.
+- `typeSelectionByPathOnly` (off by default): on, the Selection tools (`pointer_gesture` with `selection`, and the
+  mouse) pick type on its type path only — the baseline of each of its lines (a vertical column's centre line), area
+  type's frame, type on a path's path — within `selectionTolerance`; a click among the glyphs, between the lines or
+  inside the frame selects nothing. Off, anywhere in the type's bounds selects it. Marquee selection is unchanged, and
+  the Type tools (a click among the characters edits them) and the Eyedropper (`eyedropper`) are not affected.

 ```json
 {"name":"run_command","arguments":{"command":"prefs.set","params":{"values":{"typeSizeIncrement":4,"trackingIncrement":50}}}}
@@ -66,9 +66,16 @@ pub const TABLE: &[(&str, Class)] = &[
 /// The L0 foundation is a small chain: `raster` builds on `color` and
 /// `geom`, which the §3 diagram draws on one line. The GPU backend (`gpu`)
 /// reuses the CPU reference (`compose`) for LUTs and parity tests. EPS previews use the renderer's
-/// TIFF writer. Live effects run effect plug-ins.
-pub const INTRA_LAYER_ORDER: &[&[&str]] =
-    &[&["geom", "color"], &["pathops", "effects"], &["pathops", "trace"], &["text", "effects"], &["render", "eps"], &["plugins", "effects"]];
+/// TIFF writer and open Windows metafile previews. Live effects run effect plug-ins.
+pub const INTRA_LAYER_ORDER: &[&[&str]] = &[
+    &["geom", "color"],
+    &["pathops", "effects"],
+    &["pathops", "trace"],
+    &["text", "effects"],
+    &["render", "eps"],
+    &["metafile", "eps"],
+    &["plugins", "effects"],
+];

 fn intra_layer_allowed(from: &str, to: &str) -> bool {
    let (from, to) = (short_name(from), short_name(to));
Author	SHA1	Message	Date
bflatasticandClaude Opus 5.5	744edddaea	Part of #491 : pen taps click where they tap; Linux note for tablet pens on Wayland Pens on KDE Plasma 6.3+ under Wayland don't reach the app: winit 0.30 binds no Wayland tablet protocol (zwp_tablet_v2), and since Plasma 6.3 KWin no longer emulates pointer input for such clients (kwin!6336), so the pen moves KWin's own cursor while the window gets no motion or presses. The fix is upstream (winit 0.31's tablet input, winit#4318, once eframe moves to it). docs/development.md and the README give the workarounds: run under XWayland (WAYLAND_DISPLAY=), or set KWIN_WAYLAND_EMULATE_TABLET=1 for the session. On our side, a pen or finger (winit Touch, emulated as a mouse by egui-winit) lifts with an egui PointerGone in the same frame. A tap whose press and lift arrived in one frame had no hover position, so the canvas ignored it, and a drag ending without a pointer position ended at the canvas's centre. The press and double-tap now fall back to the interact position, and the release to the last position seen during the drag. Headless frame tests replay the events a pen produces: a stroke with pressure reaching Use Pressure Pen, and a one-frame tap that selects without moving (fails without the fix). ROADMAP: Last updated, the Platforms row, the hardening gap and the graphics processor/input bullet (pen pressure reaches the tools on Windows only). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-08 20:14:18 +07:00
Brandon ThomasandClaude Opus 5.5	d9fc3b6505	Bump version to 0.5.0 (from 0.4.0) for release Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-08 08:13:01 -04:00
BFlat	c61683bfd6	Merge pull request #478 from wstock/fix/issue-394-pixel-grid Part of #394: Show Pixel Grid (Above 600% Zoom)	2026-10-08 19:10:19 +07:00
BFlat	21c3581282	Merge pull request #477 from wstock/fix/issue-394-anti-aliased-artwork Part of #394: Anti-aliased Artwork	2026-10-08 19:08:05 +07:00
BFlat	c877607676	Merge pull request #475 from wstock/fix/issue-394-type-path-only Part of #394: Type Object Selection by Path Only	2026-10-08 19:07:03 +07:00
bflatasticandClaude Opus 5.5	7578787392	Canvas grid: turn with a rotated view, no per-frame vectors (review of #478 ) The pixel grid draws through the document grid's `grid()`, which assumed an unrotated view: with Rotate View its lines stayed upright on screen, in the wrong places, or vanished. It now spans the box round the canvas's corners in document space and draws each line through the view, so the pixel grid and the document grid (lines and dots) turn with the art. The lines are iterated rather than collected, capped, and computed by multiplication instead of accumulating a step. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-08 19:00:03 +07:00
wstockandClaude Fable 5.1	aa8e77d09a	Part of #394 : Show Pixel Grid (Above 600% Zoom) Preferences › Guides & Grid › Show Pixel Grid (Above 600% Zoom) was stored and never read. On (the default), in View › Pixel Preview at 600% zoom and above the canvas draws a translucent line at every document pixel over the art, so the pixels the art rasterizes to can be seen; nothing below 600%, out of Pixel Preview, or with the option off. Drawn by the same `grid()` as the document grid, at a 1 pt spacing. A headless frame test counts the pixel grid's lines at 800%, 500% and 600%, in and out of Pixel Preview and with the option off, and checks they are drawn over the art. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-10-08 19:00:03 +07:00
wstockandClaude Fable 5.1	349e1eac3c	Part of #394 : Anti-aliased Artwork Preferences › General › Anti-aliased Artwork was stored and never read. Off, the canvas renders the art with `AntiAlias::None` — a pixel is painted when the art covers at least half of it, raster effects and pattern tiles staying smooth — and on (the default) with `AntiAlias::Art`, as before. The preference is part of the canvas's cache key, so changing it re-renders. Exports keep their own Anti-aliasing option. A headless frame test reads the art's raster back out of the frame's texture upload: edge pixels partly covered with the option on, none off, and smooth again once it is back on. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-10-08 18:59:51 +07:00
bflatasticandClaude Opus 5.5	afb438367d	Type Object Selection by Path Only: every baseline, Type tool and Eyedropper (review of #475 ) - Type is picked on the baseline of any of its lines (point type and area type, besides area type's frame), as in Illustrator, not only the first one: the layout's baselines are cached with its bounds (`TextObject::cached_baselines`, from `TextLayout::baselines`), with the first one across the bounds as the fallback. Vertical type's runs down each column's centre line. - Type in perspective is picked where it is drawn (through its projection). - The bounds rule type out before its path is built, so hovering stays free of allocations away from type. - The Type tools still edit type clicked among its characters (they made new type there with the preference on), and the Eyedropper still samples it there, as it does inside fills with Object Selection by Path Only. - Tests for all of it; docs/mcp.md and ROADMAP say so. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-08 18:59:47 +07:00
wstockandClaude Fable 5.1	beea693ee1	Part of #394 : Type Object Selection by Path Only Preferences › Type › Type Object Selection by Path Only was stored and never read. On, the Selection tools pick type on its type path only — point type's baseline (the line the selection marks under it, across its layout's width), area type's frame, type on a path's path — within the selection tolerance; a click among the glyphs or inside the frame selects nothing. Off (the default), anywhere in the type's bounds selects it, as before. `HitOptions` gains `type_path_only`, set by the tools' context (`hit_options()`) and the canvas's `hit_at` from the preference, so the Selection tools, Cmd-click behind, object highlighting and the context menu agree. Tests at the hit-test level (point, area and on-path type) and through the Selection tool with `prefs.set`. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-10-08 18:59:47 +07:00
BFlat	40d6975b02	Merge pull request #489 from storytold/fix/issue-487 Fix #487: Keyboard Shortcuts records chords with modifiers	2026-10-08 18:58:11 +07:00
bflatasticandClaude Opus 5.5	6dc6b8600b	Fix #487 : Keyboard Shortcuts records chords with modifiers egui reports a modifier's own key press (ShiftLeft, ControlLeft…) as a key event, and the recorder took the first key press it saw, so pressing Shift+A saved `ShiftLeft` as the chord: a shortcut that can never fire. The recorder now skips modifier key presses, so the chord completes on the first other key with the modifiers held (Esc still cancels). A modifier is never a chord's key in the shortcut parser either, so `shortcuts.set` refuses one, and overrides saved that way by older versions are dropped on start, giving the default back. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-08 18:55:02 +07:00
BFlat	4974d658e5	Merge pull request #481 from storytold/fix/eps-vector-import EPS import: other apps' EPS open as vectors, a preview that stands in says why	2026-10-08 18:31:59 +07:00
bflatasticandClaude Opus 5.5	4827780f03	Fix #474 : Illustrator 8 EPS gradients open (executable strings, `load` by integer keys) Stock EPS files saved in the Illustrator 8 format failed with "typecheck in `a dictionary`": its gradient procset builds shading dictionaries with `bd` … `ed`, where `ed` is `(>>) cvx` (or a Level 1 dictionary builder as a string), and `cvx` left a string literal, so `shfill` got a string. Its `discard` procedure also `load`s procedures by integer keys, which `load` refused. - Executable strings: `cvx` makes a string executable (`xcheck` true, `cvlit` back, still a `stringtype` for `length`/`get`/`forall`/ `getinterval`); run by name or met in a procedure, it runs its text as a program, every time (an executable file shares the same runner). - `load` takes any key (integers, booleans), as `where` already did. - Test: an Illustrator 8-style gradient procset with both `ed` forms and `discard`; the import fuzz vocabulary has executable strings and integer keys. An Illustrator 2026 file saved in the Illustrator 8 format (made here, not committed) now opens as vectors with its radial gradient. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-08 18:24:05 +07:00
bflatasticandClaude Opus 5.5	9f3b992ecc	EPS import: other apps' EPS open as vectors, a preview that stands in says why Discord feedback: "EPS files are always rasterized: they open as bitmaps, in other programs as vectors". Every EPS saved by Illustrator 2026 fell back to its TIFF preview (`gcheck` was unknown), and cairo/Inkscape files stopped at their first image (`status`), dropped masked images (ImageType 3) and failed on mesh gradients; the warning didn't say where the program failed. Fallback never silent: - The warning names the PostScript error, the operator that raised it and the named procedures it ran in, innermost first ("a PostScript error (typecheck in `add`), in `inner` in `outer`"); errors caught by `stopped` aren't reported. It reaches the status bar, document.open, app.open and file.open (which now return document.open's result, so MCP's open_file over the control channel gets it), and `vectorcraft-cli info` ("warnings"). - A file whose PostScript can't be read opens as its TIFF preview, else its Windows metafile preview (as vectors, scaled to the bounding box), else its EPSI bitmap. es @msg rows for the new messages. Interpreter: - Operators programs probe or use: gcheck/scheck, rootfont, currentcolorrendering, currenthsbcolor, status, token, read, bytesavailable, fileposition/setfileposition, resetfile, write*, pdfmark (marks dropped, as Ghostscript does), execform, nulldevice, strokepath, pathforall, user paths (ufill/ueofill/ustroke/uappend/upath/setbbox, the encoded form too), setcachedevice2, findcolorrendering, cache, device and VM queries, revision; (%stdout) (w) file gives a sink. - `//name` is replaced by its value when read, inside procedures too. - Tiling patterns become pattern swatches (their PaintProc drawn in pattern space, one cell; uncoloured ones in the colour under them; makepattern copies share one swatch); nested patterns stop at 8 levels. - Type 3 fonts draw their glyphs (BuildGlyph/BuildChar, widths from setcachedevice/setcharwidth) as outlines grouped per string, spaced by ashow/widthshow/awidthshow/xshow/yshow/xyshow/kshow; glyphshow and stringwidth/cshow use them. - Shadings of types 1 and 4-7 become gradient meshes (data from arrays, strings or files, packed or not, flags sharing edges), as fills through a shading pattern too; sampled functions (type 0) are evaluated; GradientMesh::coons/triangle are shared with PDF import. - ImageType 3 masked images, interleaved by sample, by row or in separate sources; ReusableStreamDecode reads its data when made; Flate/LZW PNG and TIFF predictors. - Bounded: DeviceN at 32 inks, sampled functions at 2^24 samples and 32 outputs, 4096 patches a shading, strokepath ignores dashes finer than 1e5 pieces, Type 3 glyphs nest 8 deep (a glyph that shows itself overflowed the stack before the limit), 64-bit index maths for 32-bit targets. Tests: a synthetic program per generator (cairo/Inkscape, its Type 3 fonts, matplotlib, CorelDRAW, Affinity, LibreOffice, Ghostscript eps2write, Illustrator procsets), meshes and function shadings, masked images, fault messages, probing operators, metafile/EPSI previews, `//name`, user paths, hostile patterns/glyphs/shadings (run against main, 12 of the 14 generator and feature tests fail; CorelDRAW- and LibreOffice-style programs already read there). The import fuzz vocabulary covers the new operators. Checked against real files made here with Inkscape 1.4 (cairo) and Illustrator 2026 (its own format and the CS-to-CC compatibility formats; all fell back or stopped early on main and open as vectors now; its Illustrator 8 format needs the next commit); those files aren't committed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-08 18:23:36 +07:00
BFlat	690e770c92	Merge pull request #480 from storytold/fix/issue-479 Fix #479: Add/Delete Anchor Point tool icons drawn from the Pen tool's	2026-10-08 18:22:47 +07:00