# Portal requirements

Regex Tools 0.1.0 is a static nested-path-safe application.

Required delivery behavior:

- JavaScript workers use a JavaScript MIME type.
- `toolbox-app.json`, HTML and legal/source documents should remain
  revalidation/no-cache resources.
- Hashed Vite assets may use immutable long-term caching.
- CSP must allow `worker-src 'self' blob:`.
- No WebAssembly MIME rule or `wasm-unsafe-eval` is required by v0.1.0.

The Portal must consume the immutable release ZIP, verify its SHA-256, verify
manifest ID `de.add-ideas.regex-tools` and version `0.1.0`, and mount it at a
relative target such as `apps/regex/`.

When PCRE2 ships later, the smallest additional change will be
`application/wasm` delivery and `script-src 'self' 'wasm-unsafe-eval'`.