bullet: integrated work for human review #25

Merged

EduarD3V merged 8 commits from bullet-develop into main

2026-10-14 14:27:42 +02:00

EduarD3V commented

2026-10-14 14:19:40 +02:00

Owner

Rolling PR. All bullet work lands on bullet-develop via per-issue PRs (auto-merged after review + gates). Merge this single PR into main when satisfied.

Integrated issues:

PR #23 — Use case: PAdES B-B PDF signing (pdf-lib + WebCrypto)
PR #24 — Use case: load signing cert from P12/PFX in browser

Automated by bullet: implemented → reviewed (independent model) → gates green → auto-merged into bullet-develop. Trunk is human territory; this PR is the one button the human presses.

**Rolling PR.** All bullet work lands on `bullet-develop` via per-issue PRs (auto-merged after review + gates). Merge this single PR into `main` when satisfied. Integrated issues: - PR #23 — Use case: PAdES B-B PDF signing (pdf-lib + WebCrypto) - PR #24 — Use case: load signing cert from P12/PFX in browser Automated by bullet: implemented → reviewed (independent model) → gates green → auto-merged into bullet-develop. Trunk is human territory; this PR is the one button the human presses.

EduarD3V added 8 commits

2026-10-14 14:19:40 +02:00

web: PAdES B-B engine — CMS SignedData over a real PDF incremental update (Refs #11 ) 854a996bb2

web: PAdES golden fixture with openssl-verified RSA/ECDSA/visible tests (Refs #11 ) 30eadce7a1

docs: README — PAdES B-B module, fixture and verification (Refs #11 ) a2b07f6e4d

docs: record third-party verification commands (pdfsig, qpdf --check) for PAdES output (Refs #11 ) c8393e89b8

review: PAdES — UTF-16 text strings and WinAnsi appearance for accented signer text (Refs #11 ) 72ab9bad97

fix(review): pin accented /Reason and /Location dict strings in the regression test (Refs #11 ) cd09070e3a

Merge branch 'issue/11-use-case-pades-b-b-pdf-signing' into bullet-develop 16cb1169f6

Reconciliation (Refs #11). Trunk `main` (159a710) is already contained in `bullet-develop`
(442624f, whose parents are 0e0bb1e + 159a710): the trunk merge was a no-op, so nothing on the
trunk side had to be judged or preserved.

The blocked merge was PR #23 (`issue/11` -> `bullet-develop`), which the forge refused with
HTTP 405 ("mergeable": false). Conflicts, all textual, are resolved here:

- web/README.md — kept the integration side's file table and body (verify flow #8, CAdES #6,
  XAdES #7, batch #9, status); added the PAdES B-B section and its two table rows from the
  issue side, plus a status sentence for the new module.
- web/package.json — dependency union: `fflate` (#9) and `pdf-lib` (#11).
- web/pnpm-lock.yaml — importer union for both dependencies; re-validated by `pnpm install`
  ("Lockfile is up to date"), no other entry touched.

Source files from either side did not overlap: `der.ts`, `pades.ts`, its tests and fixtures are
new files from the issue branch; `App.svelte`, `i18n.ts`, `sign.ts` are the integration side's
versions (the issue branch does not touch them).