RedoSan-Authenticity Files

What's New in v1.6

MPA (Multi-Page Architecture)

• 20 standalone HTML pages — one per tool, each with its own direct URL (\Style/pages/{name}/index.html)
• AJAX navigation — sidebar clicks fetch content without full page reload, music persists seamlessly
• SPA backward compatible — hash-based routing in \index.html\ still works unchanged
• Audio persistence — music playback state saved/restored across page transitions via sessionStorage

Document Watermark (New Tool)

• Embed/extract hidden messages in TXT, DOCX, and PDF files
• 5 algorithms: Whitespace encoding, Zero-Width characters, Synonym replacement, Line-Shift, Word-Shift
• Password-protected payload with capacity estimation
• Full CLI support (\ edosan document-watermark)

Audio Watermark

• 8 algorithms: LSB, Phase Coding, Echo Hiding, DSSS, QIM, DWT Haar, Patchwork, DCT
• Auto Detect mode, dual extract (fingerprint + DID)
• Capacity estimation per algorithm

Decentralized Identity (DID)

• W3C DID Core compliant — \did:key:z…\ (base58btc)
• Ed25519, ECDSA P-256, RSA-2048/RSA-4096 key generation
• DID Document creation, message signing & verification
• CLI commands: \ edosan did generate/sign/verify\

C2PA Provenance

• Sign JPEG/PNG with ECDSA P-256 digital signatures
• Read and verify C2PA manifests (JPEG APP11 / PNG \c2pa\ chunk)
• Multi-format download (JSON/CSV/TXT/XML/PDF/DOCX/HTML)

Digital Certificate

• Generate PDF, DOCX, and EPUB certificates
• QR code verification, identity fields, social/music links
• Embed tool results and authenticity proof

File Converter

• Browser-side image (8 formats), audio (11 formats), video→audio, document, subtitle conversion
• Canvas-based + ffmpeg.wasm fallback

Help Cards for All Tools

• Collapsible help cards on all 14 professional tool pages with i18n support
• Embed/extract guidance translated into all 8 languages

i18n & Translation

• 8 languages: Arabic, German, Spanish, French, English, Japanese, Korean, Chinese
• Auto-sync workflow: translation bot writes JSON → script flattens to JS files automatically
• RTL scrolling fix for Arabic (\overflow-x: clip\ on \ody)

Testing

• 35 test files, 277+ tests — core unit tests + E2E Playwright suite
• 16 E2E test suites covering all tools, navigation, and edge cases
• CI on Node 22/24

CI/CD (40+ Workflows)

• Security: Semgrep SAST, CodeQL, TruffleHog, ClamAV, OpenSSF Scorecard, supply chain audit
• Quality: Pa11y + axe-core a11y, Lighthouse CI (performance/a11y/seo), DOM review, dead CSS
• Maintenance: Broken link checker, auto-translate PR, stale issue manager, spell check
• PR Management: Conventional Commits lint, auto-assign, size labels, branch lint, file budget
• AI Review: OpenRouter code review, Gemini analysis, monthly codebase audit

Bug Fixes

• DCT/DFT/DWT/Hybrid round-trip fixes (guaranteed gap ≥20, step-2 embedding)
• Pixel injection event listener re-attachment after MPA content load
• Music player: immediate resume on page load, disabled in MPA standalone
• Music player: re-init after mode selection (SPA) / professional mode entry (MPA)
• i18n: \ ranslatePage\ defined as alias for \pplyLang\ to fix MPA nav translation
• ESLint: remove duplicate i18n keys, fix unicorn/prefer-node-protocol and prefer-string-raw
• E2E: flaky metadata/DOCX download tests fixed (networkidle, waitForEvent)
• CI: zizrom persist-credentials fix, dependabot overrides (0 vulnerabilities)
• Security: XSS fix in assistant.js, path validation in dev-server.js