feat(editor): v1.20.0 — Fill & Sign mode with reusable account signatures

Adobe-style Fill & Sign: a toolbar button puts the document in fill mode (form
fields clickable, forms panel -> fill), and a capture dialog inserts a signature
or initials created by Draw (freehand, ink-trimmed), Type (handwriting font) or
Upload, dropped as a movable image element (existing addImage path). Signatures
can be saved to the account once and reused in one click.

Backend (built + adversarially reviewed via workflow):
- Prisma model UserSignature (user_signatures, additive; no FK/relation so
  `prisma db push` stays non-breaking on the shared Alembic DB).
- /api/user/signatures GET/POST/DELETE, all requireSession() + ownership-scoped
  (GET where userId; DELETE deleteMany{id,userId}) => no IDOR. Validation: base64
  raster png/jpeg/webp only, decoded <=1.5MB + Content-Length pre-check <=3MB,
  dims positive int <=4000. Resilient to the not-yet-created table (P2021 ->
  GET []/POST 503). dataUrl never logged. 20 vitest cases.

Integration: Tool union += 'fill_sign'; toolbar buttons (Fill & Sign + Insert
signature) + i18n fr/en; page.tsx wiring (fill mode + placement + save).

NOTE: account-save needs a one-time additive `prisma db push` on the server to
create user_signatures; until then sign+insert works and saving degrades gracefully.

Author: ronylicha

CHANGELOG.md

@@ -5,6 +5,25 @@ All notable changes to GigaPDF are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.20.0] - 2026-07-02
+
+### Added — "Fill & Sign" mode with reusable signatures (Adobe-style)
+
+- **A new "Fill & Sign" toolbar button** puts the document in fill mode — the form
+  fields become clickable and the forms panel switches to filling — so you can
+  complete a form without leaving the page.
+- **Insert a signature or initials** from a capture dialog offering three ways to
+  create one, exactly like Adobe: **Draw** (freehand, trimmed to the ink),
+  **Type** (a handwriting font), or **Upload** an image. The signature drops onto
+  the page as a movable, resizable stamp.
+- **Save signatures to your account, once.** A "Save to my account" option stores
+  the signature (or initials) so it appears in the dialog for one-click reuse on
+  any future document; each saved item can be deleted. Stored per user, isolated
+  from other accounts.
+- All saved-signature endpoints authenticate the caller and are ownership-scoped
+  (you can only ever see or delete your own). The image is validated (raster PNG/
+  JPEG/WebP, size-capped) and never logged.
+
 ## [1.19.3] - 2026-07-02
 
 ### Fixed — document fills the canvas on open; form-field names accept spaces

apps/web/messages/en.json

@@ -1904,6 +1904,26 @@
       "appliedTitle": "Document signed",
       "appliedDescription": "The digital signature has been applied to the document."
     },
+    "signature": {
+      "title": "Add a signature",
+      "subtitle": "Draw, type or upload your signature, then insert it into the document.",
+      "kindSignature": "Signature",
+      "kindInitials": "Initials",
+      "tabDraw": "Draw",
+      "tabType": "Type",
+      "tabUpload": "Upload",
+      "clear": "Clear",
+      "typePlaceholder": "Type your name",
+      "uploadHint": "PNG, JPEG or SVG, 3 MB maximum.",
+      "uploadTooLarge": "The image exceeds the 3 MB limit.",
+      "saveToAccount": "Save to my account",
+      "savedTitle": "Saved signatures",
+      "savedEmpty": "No saved signatures yet.",
+      "delete": "Delete",
+      "insert": "Insert",
+      "cancel": "Cancel",
+      "drawHint": "Draw your signature in the box below."
+    },
     "compress": {
       "title": "Compress PDF",
       "currentSize": "Current size: {size}",
@@ -2046,6 +2066,8 @@
       "save": "Save",
       "undo": "Undo",
       "redo": "Redo",
+      "fillSign": "Fill & Sign",
+      "insertSignature": "Insert a signature or initials",
       "zoomIn": "Zoom in",
       "zoomOut": "Zoom out",
       "fitWidth": "Fit width",

apps/web/messages/fr.json

@@ -1904,6 +1904,26 @@
       "appliedTitle": "Document signé",
       "appliedDescription": "La signature numérique a été appliquée au document."
     },
+    "signature": {
+      "title": "Ajouter une signature",
+      "subtitle": "Dessinez, saisissez ou importez votre signature, puis insérez-la dans le document.",
+      "kindSignature": "Signature",
+      "kindInitials": "Initiales",
+      "tabDraw": "Dessiner",
+      "tabType": "Saisir",
+      "tabUpload": "Importer",
+      "clear": "Effacer",
+      "typePlaceholder": "Saisissez votre nom",
+      "uploadHint": "PNG, JPEG ou SVG, 3 Mo maximum.",
+      "uploadTooLarge": "L'image dépasse la limite de 3 Mo.",
+      "saveToAccount": "Enregistrer dans mon compte",
+      "savedTitle": "Signatures enregistrées",
+      "savedEmpty": "Aucune signature enregistrée pour le moment.",
+      "delete": "Supprimer",
+      "insert": "Insérer",
+      "cancel": "Annuler",
+      "drawHint": "Dessinez votre signature dans le cadre ci-dessous."
+    },
     "compress": {
       "title": "Compresser le PDF",
       "currentSize": "Taille actuelle : {size}",
@@ -2046,6 +2066,8 @@
       "save": "Enregistrer",
       "undo": "Annuler",
       "redo": "Rétablir",
+      "fillSign": "Remplir et signer",
+      "insertSignature": "Insérer une signature ou un paraphe",
       "zoomIn": "Zoom avant",
       "zoomOut": "Zoom arrière",
       "fitWidth": "Ajuster à la largeur",

apps/web/prisma/schema.prisma

@@ -506,3 +506,26 @@ model font_cache {
 
   @@index([last_used_at], map: "idx_font_cache_last_used")
 }
+
+// ─────────────────────────────────────────────────────────────────────────────
+// Saved signatures — reusable "Fill & Sign" stamps (signature + initials)
+//
+// Each user keeps a small set of hand-drawn / typed signature images, stored as
+// data: URLs so they can be dropped straight onto a page without a round-trip to
+// object storage. Rows are scoped per user (bare `user_id`, matching the
+// text-based owner_id convention used across the app — no FK to `users` so this
+// table can be added additively via `prisma db push` without touching auth).
+// ─────────────────────────────────────────────────────────────────────────────
+model UserSignature {
+  id        String   @id @default(uuid())
+  userId    String   @map("user_id")
+  kind      String   @default("signature")
+  dataUrl   String   @map("data_url")
+  width     Int
+  height    Int
+  createdAt DateTime @default(now()) @map("created_at") @db.Timestamptz(6)
+  updatedAt DateTime @default(now()) @updatedAt @map("updated_at") @db.Timestamptz(6)
+
+  @@index([userId], map: "idx_user_signatures_user_id")
+  @@map("user_signatures")
+}

apps/web/src/app/(app)/editor/[id]/page.tsx

@@ -199,6 +199,7 @@ import {
 import { bakeOutline } from "@/components/editor/lib/outline-bake";
 import { ResizePageDialog } from "@/components/editor/resize-page-dialog";
 import { RedactPiiDialog } from "@/components/editor/redact-pii-dialog";
+import { SignatureCaptureDialog } from "@/components/editor/signature-capture-dialog";
 import type { ExportFormat } from "@/components/editor/lib/export-formats";
 import type { HeaderFooterSpec } from "@qrcommunication/gigapdf-lib";
 import { clientLogger } from "@/lib/client-logger";
@@ -4172,6 +4173,8 @@ export default function EditorPage() {
 
   // --- PII auto-detect redaction --------------------------------------------
   const [showRedactPiiDialog, setShowRedactPiiDialog] = useState(false);
+  // Fill & Sign — signature/initials capture dialog visibility.
+  const [signatureDialogOpen, setSignatureDialogOpen] = useState(false);
 
   // Redact every auto-detected PII region (whole text runs) across the whole
   // document. Reuses the manual redaction baking path: build per-page geometry,
@@ -4658,6 +4661,35 @@ export default function EditorPage() {
     fileInputRef.current?.click();
   }, []);
 
+  // Fill & Sign (mode Adobe) : passe le document en mode remplissage — le panneau
+  // formulaire bascule en « fill » et l'overlay des champs devient cliquable.
+  const handleFillSign = useCallback(() => {
+    setFormsMode("fill");
+    if (!showFormsPanel) toggleFormsPanel();
+  }, [setFormsMode, showFormsPanel, toggleFormsPanel]);
+
+  // Ouvre le dialog de capture (dessin / texte / import) signature ou paraphe.
+  const handleInsertSignature = useCallback(() => {
+    setSignatureDialogOpen(true);
+  }, []);
+
+  // Insère la signature/paraphe capturé comme élément image, déplaçable et
+  // redimensionnable, exactement comme un ajout d'image (même chemin de save).
+  const handleSignatureInsert = useCallback(
+    (sig: {
+      dataUrl: string;
+      width: number;
+      height: number;
+      kind: "signature" | "initials";
+    }) => {
+      canvasHandle?.addImage(sig.dataUrl, sig.width, sig.height);
+      setSignatureDialogOpen(false);
+      setDirty(true);
+      saveWithPriority("immediate");
+    },
+    [canvasHandle, setDirty, saveWithPriority],
+  );
+
   // Handler pour le chargement de l'image
   const handleImageFileChange = useCallback(
     (event: React.ChangeEvent<HTMLInputElement>) => {
@@ -5288,6 +5320,8 @@ export default function EditorPage() {
         onBringToFront={handleBringToFront}
         onSendToBack={handleSendToBack}
         onAddImage={handleAddImage}
+        onFillSign={handleFillSign}
+        onInsertSignature={handleInsertSignature}
         onInsertTable={handleInsertTable}
         onInsertLink={handleInsertLink}
         onRemoveLink={handleRemoveLink}
@@ -5733,6 +5767,13 @@ export default function EditorPage() {
         onConfirm={handleRedactPiiAuto}
       />
 
+      {/* Remplir & Signer — capture (dessin / texte / import) + signatures du compte */}
+      <SignatureCaptureDialog
+        open={signatureDialogOpen}
+        onClose={() => setSignatureDialogOpen(false)}
+        onInsert={handleSignatureInsert}
+      />
+
       {/* Status bar */}
       <footer className="flex items-center justify-between border-t px-4 py-1.5 text-xs text-muted-foreground">
         <div className="flex items-center gap-4">

apps/web/src/app/(site)/[locale]/(legal)/changelog/changelog-content.tsx

@@ -14,6 +14,16 @@ interface ChangelogEntry {
 }
 
 const changelog: ChangelogEntry[] = [
+  {
+    version: "1.20.0",
+    date: "2026-07-02",
+    type: "minor",
+    changes: [
+      { type: "feature", description: "Fill & Sign mode (Adobe-style): a new toolbar button puts the document in fill mode — form fields become clickable — so you can complete a form in place." },
+      { type: "feature", description: "Insert a signature or initials from a capture dialog with three ways to create one: Draw (freehand, trimmed to the ink), Type (a handwriting font), or Upload an image. It drops onto the page as a movable, resizable stamp." },
+      { type: "feature", description: "Save signatures to your account once: a saved signature or initials reappears in the dialog for one-click reuse on any future document, and can be deleted. Stored per user, isolated from other accounts, image validated and never logged." },
+    ],
+  },
   {
     version: "1.19.3",
     date: "2026-07-02",