History

jedarden 7566ab0f0f feat(pdftract-36wlt): implement verify-receipt subcommand + verifier protocol Implement the pdftract verify-receipt subcommand and the underlying verifier protocol. The verifier validates receipts against original PDFs by checking: (1) PDF fingerprint matches, (2) at least one span has bbox overlap >= 90% IoU, (3) that span's NFC-normalized SHA-256 equals the receipt's content_hash. Modules: - crates/pdftract-core/src/receipts/verifier.rs: verifier protocol logic - crates/pdftract-cli/src/verify_receipt.rs: CLI integration - crates/pdftract-core/src/document.rs: PDF parsing helpers Exit codes: - 0: success - 10: fingerprint mismatch - 11: bbox mismatch (no span meets 90% IoU threshold) - 12: content hash mismatch - 1: extraction failed Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>		2026-05-23 04:00:15 -04:00
..
examples	feat(pdftract-mcp): add MCP server implementation changes	2026-05-23 03:09:56 -04:00
proptest-regressions/parser/lexer	feat(pdftract-29z7b): implement unified diagnostic system + CLI commands	2026-05-22 22:38:31 -04:00
src	feat(pdftract-36wlt): implement verify-receipt subcommand + verifier protocol	2026-05-23 04:00:15 -04:00
tests	fix(pdftract-2a6rk): fix xref.rs u64 literal overflow in proptest	2026-05-22 17:26:27 -04:00
Cargo.toml	feat(pdftract-36wlt): implement verify-receipt subcommand + verifier protocol	2026-05-23 04:00:15 -04:00
pdftract-core.cdx.json	feat(pdftract-67tm8): implement MCP stdio transport with integration tests	2026-05-23 00:16:42 -04:00
README.md	docs(pdftract-49f8): establish Cargo.lock policy and documentation	2026-05-20 18:13:14 -04:00

README.md

pdftract-core

The core Rust library for PDF text extraction. This crate provides the parsing, layout analysis, font encoding recovery, and text extraction primitives used by the CLI (pdftract-cli) and Python bindings (pdftract-py).

Cargo.lock Policy

This workspace checks in Cargo.lock at the repository root. This is unconventional for library crates—the Cargo Book historically suggested that only binary crates should check in lockfiles, allowing library consumers to resolve their own dependency versions.

pdftract departs from this convention for release reproducibility:

SLSA Level 3 provenance requires that every milestone tag produces byte-identical artifacts across builds. Without a checked-in lockfile, two runs of cargo build on the same commit can resolve different transitive dependency versions, producing different binary hashes.
Multi-output artifacts—this workspace produces Rust crates (pdftract-core, pdftract-cli), Python wheels (pdftract-py), and Docker images. All must be built from the same dependency tree.
Supply-chain security—the lockfile pins checksums for all transitive dependencies, enabling cargo audit to detect yanked or compromised crates.
Downstream consumers can still ignore the lockfile if needed. Cargo allows cargo build --frozen with a local lockfile override, or consumers can vendor the crate with their own dependency resolution.

The tradeoff—occasional merge conflicts when PRs update overlapping dependencies—is worth the guarantee of reproducible releases. See CONTRIBUTING.md for the lockfile-update workflow.

Modules

parser: PDF spec parsing (xref, trailer, object streams, indirect references)
font: Font encoding recovery, glyph name lookup, fingerprinting
layout: Page layout analysis, region segmentation, reading order
extract: Text extraction with provenance (bounding boxes, confidence scores)
ocr: Tesseract integration for raster pages

Usage

use pdftract_core::{extract_text, ExtractOptions};

let options = ExtractOptions::default();
let result = extract_text("document.pdf", &options)?;
println!("{}", result.text);