Sign a PDF (PAdES, incremental update) and return the signed file; earlier content and signatures stay valid.
Use describe("pdf.transform.sign") when your code needs the complete live JSON Schemas.
At a glance
| Property | Value |
|---|---|
| Package | @runstamp/registry |
| Domain / verb | pdf / transform |
| Customer jobs | transform |
| Deterministic | No |
| Side effects | none |
Availability
| Local | SDK | CLI | MCP | Managed API |
|---|---|---|---|---|
| public ga | public ga | public ga | public ga | public ga |
Managed API route: POST /api/v2/operations/pdf/transform/sign. Managed execution requires a free-trial workspace or an active Platform or Enterprise workspace, and an environment-bound API key.
Input and result
| Schema | Required fields | Optional fields |
|---|---|---|
| Input | none | none |
| Options | none | operation, deterministic, deterministicSeed, timeoutMs, locale, lossPolicy, limits, field, page, rect, name, reason, location |
| Result value | bytes, mediaType, extension, byteLength, hash | none |
Every success also carries losses, diagnostics, and a hash-bound receipt.
Defaults, limits, and format constraints
Defaults
| Path | Default |
|---|---|
$.deterministic | default=true |
$.lossPolicy | default="collect" |
Formats and profiles
No separate format selector is declared. Accepted artifacts are bounded by the exact input schema.
Other limits
| Path | Constraint |
|---|---|
$.timeoutMs | minimum=1 |
$.field | minLength=1maxLength=256 |
$.page | minimum=0 |
$.rect | minItems=4maxItems=4 |
$.name | maxLength=256 |
$.reason | maxLength=512 |
$.location | maxLength=256 |
Invoke
const input = await fetch("https://runstamp.com/demo-evidence/operation-evidence/pdf/pdf.transform.sign/input.json").then((response) => response.json());
const result = await runstamp.run("pdf.transform.sign", input);
if (!result.ok) throw new Error(`${result.error.code}: ${result.error.remediation}`);
console.log(result.value, result.losses, result.diagnostics, result.receipt);curl -fsS https://runstamp.com/demo-evidence/operation-evidence/pdf/pdf.transform.sign/input.json -o input.json
npx -p @runstamp/sdk runstamp ops invoke pdf.transform.sign --input input.json{
"tool": "runstamp_invoke_operation",
"arguments": {
"operation": "pdf.transform.sign",
"input": "<JSON from https://runstamp.com/demo-evidence/operation-evidence/pdf/pdf.transform.sign/input.json>",
"execution_mode": "local"
}
}Errors and losses
Declared errors (7)
common/SCHEMA_REJECTEDcommon/CONTRACT_VIOLATIONcommon/OPERATION_CANCELLEDcommon/OPERATION_TIMEOUTcommon/RESOURCE_LIMIT_EXCEEDEDpdf/SIGNING_FAILEDpdf/INVALID_INPUT
Declared losses (0)
- None.
SDK AbortSignal, CLI exit 130, and MCP cancellation return the typed common/OPERATION_CANCELLED failure envelope.
Verified example and exact contract
- Fixture:
icp-workflow(Employee onboarding EMP-2027-00418). - Example input — SHA-256
84f276fa37ff7ba970657435744972371938b411d005a9386e8a186d49562e31. - Example result — SHA-256
13c1665425173e7869766e971cebbdef4cb4403f1e5b5d551b63b5152f5246df. - Verified result SHA-256:
763fe5ebb79fa7ee24363d8cf0aa69188e512ca6fd94375067625c97ea09fcfb. - Qualification lane:
11-pdf-xlsx.
Contract fingerprints
- Descriptor:
dd81e688d731b5dbf4ad614688e5f0ac6880d777a4395cf6cf14d1661ee38258. - Input schema:
862106739c7360a1f6f1513712f1fa453d315c205829370d9cd536df88f6ffb0. - Options schema:
f513adce2d46ed0e5d621f710eb764ba4384ec782b78e85f9d644758154a8c94. - Result value schema:
e7e0bc52bf866264c04c0cc2a2d2d788751a82a731f6a8bc31b2efb72d06d08c.
The machine-readable operation reference publishes the complete schemas, qualification results, and evidence bindings for every operation.