# PDFEditorZone — Website Starter

Responsive product website starter for PDFEditorZone with the 49-tool catalog, searchable categories, responsive layout, brand icon, and an interactive tool workflow.

## Run locally
1. Extract the ZIP.
2. Open `index.html` in a modern browser, or serve the directory with any static HTTP server.
3. Internet connection is needed to load the PDF-lib CDN dependency. The static interface and catalog load without a build step.

## Current implementation status
The catalog includes all **49 planned tools**. This package is an implementation starter, **not a finished production service**.

### Working browser-side operations in this build
- Merge PDF
- Rotate PDF
- Extract PDF pages
- Delete PDF pages
- Add page numbers
- Add text watermark
- JPG / PNG / multiple images to PDF
- Remove common PDF metadata fields

PDF-lib is loaded from jsDelivr. Some inputs such as encrypted/unsupported PDFs may fail. The starter uses a 100 MB per-file limit. Test with copies and verify outputs.

### Listed but not complete
Compress, repair, flatten, Office and HTML conversions, full PDF-to-image conversion, true existing text editing, full text extraction, advanced forms, secure redaction, cryptographic signing/verification, OCR, smart/table extraction, compare, and AI features require additional engines and/or service integration. These are not represented as functional in this starter. Tool cards clearly mark the current status.

## Important technical notes
- This is not a production deployment and has not had a security audit.
- No backend, database, telemetry, authentication, upload API, OCR service, AI provider, office converter, signing service, or hosting configuration is included.
- Avoid uploading sensitive files to prototypes until the processing and data-handling model is reviewed.
- Visual whiteout is not secure redaction. Secure redaction must remove hidden text/content and be independently verified.
- A visual signature is not the same as a cryptographic digital signature.
- Before commercial deployment, review library and service licenses, CSP, dependency pinning/SBOM, abuse controls, worker isolation, output validation, privacy retention, accessibility, and all processing claims.
- This starter does not include Protect PDF or Unlock PDF, by design.

## Structure
- `index.html` — homepage and tool dialog
- `styles.css` — responsive UI
- `app.js` — tool catalog, UI logic and currently supported operations
- `tools.json` — grouped inventory
- `assets/logo.svg` — brand icon
- `PRIVACY.md`, `TERMS.md` — draft policy notes

## Next development sequence
1. Add automated tests and PDF.js integration.
2. Complete and test baseline conversion/annotation features.
3. Add dedicated backend workers for OCR, Office, advanced repair/edit, signatures and secure redaction.
4. Add AI pipeline with data controls, grounding, page provenance, prompt-injection defenses, and user-facing disclosures.
5. Security review, performance testing, accessibility checks, and deployment hardening.

## Cloudflare deployment
See [`CLOUDFLARE_DEPLOYMENT.md`](./CLOUDFLARE_DEPLOYMENT.md) for a step-by-step Pages deployment and launch blockers. A minimal Pages Functions scaffold is included:
- `GET /api/health` — scaffold health response only
- `POST /api/tools/:tool` — intentionally returns HTTP 501 until a secure processor is implemented

**Do not call this full production-ready:** the 49-tool catalog is not 49 functioning processors. See the deployment runbook and feature status above.

## Cloudflare deployment
See [`CLOUDFLARE_DEPLOYMENT.md`](./CLOUDFLARE_DEPLOYMENT.md) for setup steps and production blockers. A minimal Pages Functions scaffold is included:
- `GET /api/health` — scaffold response only
- `POST /api/tools/:tool` — intentionally returns HTTP 501 until a secure processor is implemented

**This is not a full production service:** the 49-tool catalog does not mean 49 functioning processors. Review feature status and deployment runbook before launch.