nexPDF v1.0.2

nexPDF v1.0.2

中文

nexPDF 首个正式版本（v1.0.0 与 v1.0.1 两个标签均在发布前被自家安装器验证门槛拦下（分别因验证脚本无法捕获 GUI 程序输出、以及卸载后文件句柄释放需等待），按纪律这些标签保留为失败历史、均未产生 Release；本版本修正验证后发布）：本地、隐私优先的跨平台 PDF 查看与实用编辑器（C++20 / Qt 6.11.2 / MuPDF 1.28.2，AGPL-3.0-or-later）。

核心能力：连续滚动查看、缩放（Ctrl+滚轮/适合宽度）、页码导航、文本搜索与页面高亮、按内容指纹的阅读位置记忆、护眼模式、中英双语界面；AES-256/AES-128 加密与正确密码解密；页面与批注实用编辑（文字/图片拖拽放置、高亮、图形、手绘）；两阶段永久涂黑；可精确恢复原对象的水印添加与移除；MuPDF journal 撤销重做；临时文件校验后原子替换的事务式保存。无遥测、不上传文档、不执行 PDF JavaScript。

安全加固：独占深拷贝并清零的密码类型、按操作校验的 PDF 权限、涂黑后水印快照失效、POSIX 保存耐久性（fsync 文件与目录）、LGPLv3 运行库许可证文本随包分发。安装器按用户安装（无需管理员）、只在"打开方式"和系统默认应用设置中注册候选，绝不抢占 .pdf 默认关联。

发布验证范围（如实说明）：三平台构建、测试与 qpdf/Poppler 独立交叉验证由 CI 在每次发布执行；Windows 界面验收由电脑控制完成并留存截图（高 DPI 清晰度、搜索高亮、拖拽放置、损坏 xref 修复、AES-256 解锁、图层、透明度、大图）；性能实测渲染 P50 2.6ms / 吞吐 330 页/秒 / 50 轮内存稳定 +0.6MiB；Linux 在真实 Ubuntu 24.04 + WSLg 完成图形验证；Windows 安装器在 CI 干净 runner 上执行安装→版本→关联→卸载全周期验证。macOS 仅有 CI 验证（构建、测试、冒烟、双架构 lipo），未在真机硬件上抽查 DMG；如遇 Gatekeeper 或渲染问题请提 issue，我们将及时发布补丁版。

发布包不含代码签名：Windows 可能显示 SmartScreen，macOS 可能显示 Gatekeeper 警告。下载后请核对 GitHub 显示的 SHA-256 摘要，保留原始 PDF 备份，并只处理您拥有权利或已获授权的文件。本项目大量使用 AI 辅助开发，按原样提供、不附带任何担保。nexPDF 与其他同名或近似名称产品无关联。

English

The first stable release of nexPDF. (The v1.0.0 and v1.0.1 tags were each blocked before publication by the project's own installer-verification gate (first a harness bug capturing GUI-app stdout, then an uninstall file-handle race with antivirus scanning). Per release discipline those tags remain as failed history with no Release; this version fixes the harness and ships.): a local, privacy-first, cross-platform PDF viewer and practical editor (C++20 / Qt 6.11.2 / MuPDF 1.28.2, AGPL-3.0-or-later).

Core capabilities: continuous scrolling, zoom (Ctrl+wheel / fit-width), page navigation, text search with on-page highlighting, per-document reading positions by content fingerprint, eye-care mode, and a bilingual UI; AES-256/AES-128 encryption and correct-password decryption; practical page and annotation editing (drag-to-place text/images, highlights, shapes, ink); two-stage permanent redaction; watermark add/remove with exact object-level restore; MuPDF-journal undo/redo; transactional saving via a validated temporary file with atomic replacement. No telemetry, no document upload, no PDF JavaScript execution.

Security hardening: an exclusively-owned zeroized password type, per-operation PDF permission checks, redaction-invalidated watermark snapshots, POSIX save durability (file and directory fsync), and LGPLv3 runtime license texts shipped with every binary package. The installer is per-user (no administrator required) and registers only an "Open with" candidate plus a Default-apps entry — never the .pdf default.

Verification scope, stated honestly: three-platform builds, tests, and independent qpdf/Poppler cross-validation run in CI for every release; the Windows UI acceptance was agent-driven with screenshots (high-DPI sharpness, search highlighting, drag placement, damaged-xref repair, AES-256 unlock, layers, transparency, large images); measured performance: render P50 2.6 ms, throughput 330 pages/s, 50-cycle memory stability +0.6 MiB; Linux passed a graphical check on real Ubuntu 24.04 under WSLg; the Windows installer runs a full install→version→association→uninstall cycle on a clean CI runner. macOS is CI-verified only (build, tests, smoke, dual-architecture lipo) and was not spot-checked on physical hardware; if you hit Gatekeeper or rendering issues, please open an issue and a patch release will follow.

Packages are not code-signed: Windows SmartScreen and macOS Gatekeeper may warn. Verify the SHA-256 digest shown by GitHub, keep original PDF backups, and only process files you own or are authorized to modify. This project was developed with substantial AI assistance and is provided as-is, without warranty. nexPDF is not affiliated with similarly named products.