lotobo/toolbox-portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 32 Wiki Activity

feat: publish Toolbox 0.14.0 with Sudoku Tools

Browse Source
This commit is contained in:
zemion
2026-08-30 14:27:22 +02:00
parent 8d68557d5e
commit 2309c9e520
19 changed files with 129 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.env.example
+2 -2
View File
@@ -5,5 +5,5 @@ TRAEFIK_NETWORK=internal
TRAEFIK_CERT_RESOLVER=netcup
# Keep these two values paired when deploying a newer published toolbox release.
TOOLBOX_RELEASE_VERSION=0.13.0
TOOLBOX_RELEASE_SHA256=ae8d96906ad6794c1c387863dbd0d6d31e1c5deeef7640362f8a479dbf3f3891
TOOLBOX_RELEASE_VERSION=0.14.0
TOOLBOX_RELEASE_SHA256=e79f4aadfce3222855a3829805e72ebe399ce863df5e2b57ea0bd606139c2d6d
Containerfile.release
+3 -2
View File
@@ -2,8 +2,8 @@ ARG NGINX_IMAGE=nginxinc/nginx-unprivileged:1.31.3-alpine@sha256:18d67281256ded3
FROM ${NGINX_IMAGE} AS release
ARG TOOLBOX_RELEASE_VERSION=0.13.0
ARG TOOLBOX_RELEASE_SHA256=ae8d96906ad6794c1c387863dbd0d6d31e1c5deeef7640362f8a479dbf3f3891
ARG TOOLBOX_RELEASE_VERSION=0.14.0
ARG TOOLBOX_RELEASE_SHA256=e79f4aadfce3222855a3829805e72ebe399ce863df5e2b57ea0bd606139c2d6d
ARG TOOLBOX_RELEASE_BASE_URL=https://git.add-ideas.de/lotobo/toolbox-portal/releases/download
RUN set -eu; \
@@ -25,6 +25,7 @@ RUN set -eu; \
test -f /tmp/toolbox/apps/regex/toolbox-app.json; \
test -f /tmp/toolbox/apps/svg/toolbox-app.json; \
test -f /tmp/toolbox/apps/auth/toolbox-app.json; \
test -f /tmp/toolbox/apps/sudoku/toolbox-app.json; \
rm "/tmp/${archive}"
FROM ${NGINX_IMAGE}
README.md
+20 -18
View File
@@ -1,7 +1,7 @@
# add·ideas Toolbox Portal
`toolbox-portal` is the static launcher and release assembler for the add·ideas
browser toolbox. Version `0.2.15` reads one same-origin catalogue, shows each app
browser toolbox. Version `0.2.16` reads one same-origin catalogue, shows each app
as a compact launch tile, and keeps personal pins, drag-and-drop ordering,
visibility, and appearance in the current browser. Pinned tools have their own
section; search, category, and clickable tag filters stay close to the tool
@@ -37,7 +37,7 @@ the SDK and portal together.
Vite uses `base: './'`, so the built portal works at `/` or a nested static path.
The development catalogue at `public/toolbox.catalog.json` points to assembled
paths (`./apps/pdf/`, `./apps/xslt/`, `./apps/onenote/`, `./apps/av/`,
`./apps/regex/`, `./apps/svg/`, and `./apps/auth/`).
`./apps/regex/`, `./apps/svg/`, `./apps/auth/`, and `./apps/sudoku/`).
Those manifests will correctly appear as unavailable until an assembled release
is being served.
@@ -69,7 +69,7 @@ privacy and executable-code warning. Light, dark, and system modes are supported
## Production deployment behind Traefik
The committed `compose.yaml` is the shortest production path. Its release
container downloads the immutable Toolbox 0.13.0 ZIP during the image build,
container downloads the immutable Toolbox 0.14.0 ZIP during the image build,
verifies SHA-256 before extracting it, and then copies only the verified static
files into the pinned unprivileged nginx image. Node.js and a local portal
assembly are not required on the deployment host.
@@ -133,10 +133,10 @@ The app release should also publish a matching `.sha256` sidecar. The manifest
must declare the pinned reverse-DNS id and version. Application and portal
versions are independent.
`release/toolbox.lock.json` is the reviewed v0.13.0 lock. Its URLs and checksums
`release/toolbox.lock.json` is the reviewed v0.14.0 lock. Its URLs and checksums
pin the published PDF Tools 0.4.4, XSLT Tools 0.4.3, OneNote Tools 0.3.4,
Audio & Video Tools 0.3.0, Regex Tools 0.4.2, SVG Tools 0.1.0, and OTP & Passkey
Tools 0.3.0 release bytes. Use
Audio & Video Tools 0.3.0, Regex Tools 0.4.2, SVG Tools 0.1.0, OTP & Passkey
Tools 0.3.0, and Sudoku Tools 0.1.0 release bytes. Use
`release/toolbox.lock.example.json` as the template for a future release and
verify every downloaded asset before committing updated values. Artifacts may be:
@@ -157,7 +157,7 @@ npm run assemble -- \
--lock release/toolbox.lock.json \
--portal-dist dist \
--output build/toolbox \
--archive build/add-ideas-toolbox-0.13.0.zip
--archive build/add-ideas-toolbox-0.14.0.zip
```
Existing output is refused. Pass `--force` only when replacing those exact
@@ -179,10 +179,11 @@ build/toolbox/
├── av/
├── regex/
├── svg/
└── auth/
├── auth/
└── sudoku/
build/add-ideas-toolbox-0.13.0.zip
build/add-ideas-toolbox-0.13.0.zip.sha256
build/add-ideas-toolbox-0.14.0.zip
build/add-ideas-toolbox-0.14.0.zip.sha256
```
The assembler verifies SHA-256 before opening an artifact, validates every app
@@ -203,7 +204,7 @@ directory separately:
```sh
npm run package:static -- \
--input build/toolbox \
--output artifacts/add-ideas-toolbox-0.13.0.zip
--output artifacts/add-ideas-toolbox-0.14.0.zip
```
This also emits a `.sha256` sidecar.
@@ -231,9 +232,9 @@ normal local XML/XSLT transformations do not require that permission.
```sh
podman build -f Containerfile \
-t git.add-ideas.de/lotobo/toolbox:0.13.0 .
-t git.add-ideas.de/lotobo/toolbox:0.14.0 .
podman run --rm -p 8080:8080 \
git.add-ideas.de/lotobo/toolbox:0.13.0
git.add-ideas.de/lotobo/toolbox:0.14.0
```
For a direct-port local deployment after assembly, use the separate example:
@@ -250,8 +251,8 @@ docker login git.add-ideas.de
docker buildx build \
--platform linux/amd64,linux/arm64 \
--file Containerfile.release \
--tag git.add-ideas.de/lotobo/toolbox:0.13.0 \
--tag git.add-ideas.de/lotobo/toolbox:0.13 \
--tag git.add-ideas.de/lotobo/toolbox:0.14.0 \
--tag git.add-ideas.de/lotobo/toolbox:0.14 \
--push .
```
@@ -273,11 +274,11 @@ needs permission to push code, releases, and container packages to
3. Verify downloaded app assets with `sha256sum -c <asset>.sha256`; copy those
exact values into a reviewed toolbox lock.
4. Run the assembler and serve `build/toolbox` from a nested test path. Open
all seven apps, switch between them, and confirm the encoded `toolbox`
all eight apps, switch between them, and confirm the encoded `toolbox`
context.
5. Verify the distribution with
`(cd build && sha256sum -c add-ideas-toolbox-0.13.0.zip.sha256)`.
6. Commit the reviewed lock, tag the toolbox release (for example `v0.13.0`), and
`(cd build && sha256sum -c add-ideas-toolbox-0.14.0.zip.sha256)`.
6. Commit the reviewed lock, tag the toolbox release (for example `v0.14.0`), and
push the branch and tag to Gitea.
7. In Gitea, open **Releases → New release**, select the tag, and upload the
static ZIP plus its `.sha256` file. Do not use a mutable “latest” URL in a
@@ -301,6 +302,7 @@ must not re-resolve app versions or substitute a newer release.
| **`regex-tools`** | Current local-first v0.4.2 release; dedicated repository | Develop, explain, test and apply JavaScript, PCRE2, PHP, Perl, Python, Ruby, Java, C++, Go, .NET, Rust and Scala/JVM-compatible regular expressions | Deterministic syntax trees; engine-native matching, captures and bounded replacement; stable double-buffered live results; PCRE2 tracing and C17 generation; comparison; corpus apply; tests; risk/growth/benchmark analysis; generated cases; bounded minimization; validated ECMAScript formatting; project import/export and optional local persistence | Open-source regexpp and pinned local WebAssembly runtimes for PCRE2, PHP preg, legacy Perl, CPython, CRuby, TeaVM Java/Scala compatibility, libc++ C++, Go, .NET and Rust in killable workers; explicit source/licence inventories, resource limits and engine-specific offset semantics |
| **`svg-tools`** | Initial local-first v0.1.0 release; dedicated repository | Inspect and edit SVG source, structure, geometry, references and accessibility locally | Synchronized source/tree/canvas/inspector; path and transform tools; reference analysis; optimization; CSS animation preview; exact, sanitized, raster and project export | Untrusted SVG is sanitized into an opaque-origin sandbox; bounded parsing and decompression, explicit security findings and a URI-scoped controller header exception; later milestone slices remain intentionally tracked in the app repository |
| **`auth-tools`** | Current local-first v0.3.0 release; dedicated repository | Generate, migrate and diagnose OTP credentials, and inspect, verify and test WebAuthn/passkey ceremonies locally | HOTP/TOTP/OCRA with time travel, resynchronization and rotation planning; QR, Google, Aegis and encrypted PSKC migration; WebAuthn extension experiments and replayable traces; assertion, attestation, signer-chain and historical metadata-policy evaluation | Authentication material remains memory-only unless explicitly exported; redaction is deliberate but not a secrecy guarantee; live ceremonies and camera scanning are enabled only at the exact dedicated `auth.toolbox.add-ideas.de` origin, while the shared Portal path remains inspect-only; no raw CTAP administration |
| **`sudoku-tools`** | Initial local-first v0.1.0 release; dedicated repository | Set, play, generate, analyse and solve classic, Killer and common variant Sudoku locally | 4×4–16×16 grids; givens and custom regions; cages, diagonals, thermos, arrows, Kropki, XV, inequalities, renban and palindrome lines; notes, colours, history, timer, exact uniqueness checks, explained logic, focused calculators, local projects and bounded import/export | Worker-bounded solving and generation; IndexedDB with memory fallback; self-contained links and supported f-puzzles fields stay local; unsupported foreign rules stop explicitly instead of being silently discarded |
## Planned tools
compose.example.yaml
+1 -1
View File
@@ -3,7 +3,7 @@ services:
build:
context: .
dockerfile: Containerfile
image: git.add-ideas.de/lotobo/toolbox:0.13.0
image: git.add-ideas.de/lotobo/toolbox:0.14.0
restart: unless-stopped
read_only: true
ports:
compose.yaml
+3 -3
View File
@@ -6,9 +6,9 @@ services:
context: .
dockerfile: Containerfile.release
args:
TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.13.0}"
TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-ae8d96906ad6794c1c387863dbd0d6d31e1c5deeef7640362f8a479dbf3f3891}"
image: "git.add-ideas.de/lotobo/toolbox:${TOOLBOX_RELEASE_VERSION:-0.13.0}"
TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.14.0}"
TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-e79f4aadfce3222855a3829805e72ebe399ce863df5e2b57ea0bd606139c2d6d}"
image: "git.add-ideas.de/lotobo/toolbox:${TOOLBOX_RELEASE_VERSION:-0.14.0}"
restart: unless-stopped
read_only: true
tmpfs:
package-lock.json
Generated
+2 -2
View File
@@ -1,12 +1,12 @@
{
"name": "@add-ideas/toolbox-portal",
"version": "0.2.15",
"version": "0.2.16",
"lockfileVersion": 3,
"requires": true,
"packages": {
"": {
"name": "@add-ideas/toolbox-portal",
"version": "0.2.15",
"version": "0.2.16",
"license": "AGPL-3.0-only",
"dependencies": {
"@add-ideas/toolbox-contract": "^0.2.3",
package.json
+1 -1
View File
@@ -1,6 +1,6 @@
{
"name": "@add-ideas/toolbox-portal",
"version": "0.2.15",
"version": "0.2.16",
"license": "AGPL-3.0-only",
"private": true,
"type": "module",
public/SOURCE.md
+2 -2
View File
@@ -1,8 +1,8 @@
# Corresponding source
The source code corresponding to add·ideas Toolbox Portal 0.2.15 is available at:
The source code corresponding to add·ideas Toolbox Portal 0.2.16 is available at:
https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.13.0
https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.14.0
Each bundled application contains its own `SOURCE.md`, license, and third-party
license materials. The application sources are also linked from the portal.
public/toolbox.catalog.json
+4
View File
@@ -36,6 +36,10 @@
{
"manifest": "./apps/auth/toolbox-app.json",
"enabled": true
},
{
"manifest": "./apps/sudoku/toolbox-app.json",
"enabled": true
}
]
}
release/toolbox.lock.example.json
+9 -2
View File
@@ -1,8 +1,8 @@
{
"$schema": "./toolbox-release-lock.schema.json",
"schemaVersion": 1,
"releaseVersion": "0.13.0",
"portalVersion": "0.2.15",
"releaseVersion": "0.14.0",
"portalVersion": "0.2.16",
"catalogue": {
"id": "de.add-ideas.toolbox",
"name": "add·ideas Toolbox",
@@ -61,6 +61,13 @@
"artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.3.0/auth-tools-0.3.0.zip",
"sha256": "ac80a711a0fc00d554505e6278aa3557eca4248b6da2ac9e2bae74bc0b26e58e",
"target": "auth"
},
{
"id": "de.add-ideas.sudoku-tools",
"version": "0.1.0",
"artifact": "https://git.add-ideas.de/lotobo/sudoku-tools/releases/download/v0.1.0/sudoku-tools-0.1.0.zip",
"sha256": "bc277791dc50d5fdb39f5abd098d81ea7d84b8a9bc43ca86214de7ee335abf61",
"target": "sudoku"
}
]
}
release/toolbox.lock.json
+9 -2
View File
@@ -1,8 +1,8 @@
{
"$schema": "./toolbox-release-lock.schema.json",
"schemaVersion": 1,
"releaseVersion": "0.13.0",
"portalVersion": "0.2.15",
"releaseVersion": "0.14.0",
"portalVersion": "0.2.16",
"catalogue": {
"id": "de.add-ideas.toolbox",
"name": "add·ideas Toolbox",
@@ -61,6 +61,13 @@
"artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.3.0/auth-tools-0.3.0.zip",
"sha256": "ac80a711a0fc00d554505e6278aa3557eca4248b6da2ac9e2bae74bc0b26e58e",
"target": "auth"
},
{
"id": "de.add-ideas.sudoku-tools",
"version": "0.1.0",
"artifact": "https://git.add-ideas.de/lotobo/sudoku-tools/releases/download/v0.1.0/sudoku-tools-0.1.0.zip",
"sha256": "bc277791dc50d5fdb39f5abd098d81ea7d84b8a9bc43ca86214de7ee335abf61",
"target": "sudoku"
}
]
}
scripts/assembler.test.ts
+1 -1
View File
@@ -83,7 +83,7 @@ function makeLock(artifact: string, sha256: string) {
return {
schemaVersion: 1,
releaseVersion: '0.1.0',
portalVersion: '0.2.15',
portalVersion: '0.2.16',
catalogue: {
id: 'de.add-ideas.toolbox',
name: 'Test Toolbox',
scripts/deployment.test.ts
+1
View File
@@ -93,6 +93,7 @@ describe('production deployment', () => {
'regex',
'svg',
'auth',
'sudoku',
]) {
expect(containerfile).toContain(
`test -f /tmp/toolbox/apps/${app}/toolbox-app.json`
src/App.test.tsx
+6 -3
View File
@@ -335,12 +335,12 @@ describe('portal UI', () => {
expect(
screen.getByRole('heading', {
level: 2,
name: 'Your document tools, in one calm place.',
name: 'Your local tools, in one calm place.',
})
).toBeInTheDocument();
expect(
screen.getAllByRole('heading', {
name: 'Your document tools, in one calm place.',
name: 'Your local tools, in one calm place.',
})
).toHaveLength(1);
@@ -415,6 +415,7 @@ describe('portal UI', () => {
'de.add-ideas.onenote-tools',
'de.add-ideas.svg-tools',
'de.add-ideas.auth-tools',
'de.add-ideas.sudoku-tools',
],
hidden: [],
theme: 'light',
@@ -434,6 +435,7 @@ describe('portal UI', () => {
screen.getByTestId('app-card-de.add-ideas.onenote-tools'),
screen.getByTestId('app-card-de.add-ideas.svg-tools'),
screen.getByTestId('app-card-de.add-ideas.auth-tools'),
screen.getByTestId('app-card-de.add-ideas.sudoku-tools'),
];
cards.forEach((card, index) => {
const rect = {
@@ -464,7 +466,7 @@ describe('portal UI', () => {
within(tools)
.getAllByRole('heading', { level: 3 })
.map((heading) => heading.textContent)
).toEqual(['XSLT', 'PDF', 'OneNote', 'SVG', 'OTP & Passkeys']);
).toEqual(['XSLT', 'PDF', 'OneNote', 'SVG', 'OTP & Passkeys', 'Sudoku']);
});
expect(
JSON.parse(localStorage.getItem(PREFERENCES_KEY) ?? '{}').order
@@ -474,6 +476,7 @@ describe('portal UI', () => {
'de.add-ideas.onenote-tools',
'de.add-ideas.svg-tools',
'de.add-ideas.auth-tools',
'de.add-ideas.sudoku-tools',
]);
});
src/App.tsx
+3 -3
View File
@@ -297,7 +297,7 @@ export default function App() {
Privacy details up front · useful by default
</p>
<h2 id="page-title">
Your document tools,
Your local tools,
<br /> <span>in one calm place.</span>
</h2>
<p className="hero-copy">
@@ -489,9 +489,9 @@ export default function App() {
</span>
</p>
<span>
Portal v0.2.15 ·{' '}
Portal v0.2.16 ·{' '}
<a
href="https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.13.0"
href="https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.14.0"
target="_blank"
rel="noopener noreferrer"
>
src/catalogue.test.ts
+2 -1
View File
@@ -10,7 +10,7 @@ describe('catalogue loading', () => {
const loaded = await loadCatalogue('/toolbox.catalog.json');
expect(loaded.catalogue.name).toBe('add·ideas Toolbox');
expect(loaded.homeUrl).toBe('http://localhost:3000/');
expect(loaded.apps).toHaveLength(5);
expect(loaded.apps).toHaveLength(6);
expect(loaded.apps[0]).toMatchObject({
id: 'de.add-ideas.pdf-tools',
name: 'PDF Workbench',
@@ -42,6 +42,7 @@ describe('catalogue loading', () => {
'de.add-ideas.onenote-tools',
'de.add-ideas.svg-tools',
'de.add-ideas.auth-tools',
'de.add-ideas.sudoku-tools',
]);
expect(loaded.unavailable).toHaveLength(1);
expect(loaded.unavailable[0]?.reason).toMatch(/HTTP 404/);
src/test/fixtures.ts
+45
View File
@@ -160,6 +160,48 @@ export const authManifest: ToolboxAppManifest = {
},
};
export const sudokuManifest: ToolboxAppManifest = {
schemaVersion: 1,
id: 'de.add-ideas.sudoku-tools',
name: 'Sudoku Tools',
version: '0.1.0',
description:
'Set, play, solve and analyse Sudoku puzzles locally in the browser.',
entry: './',
icon: './favicon.svg',
categories: ['games', 'puzzles', 'logic'],
tags: ['sudoku', 'killer', 'solver', 'setter', 'generator', 'candidates'],
integration: {
contextVersion: 1,
launchModes: ['navigate', 'new-tab'],
embedding: 'unsupported',
},
requirements: {
secureContext: false,
workers: true,
indexedDb: true,
crossOriginIsolated: false,
topLevelContext: false,
},
privacy: {
processing: 'local',
fileUploads: false,
telemetry: false,
label: 'Puzzles and progress stay in this browser; nothing is uploaded.',
},
source: {
repository: 'https://git.add-ideas.de/lotobo/sudoku-tools',
license: 'GPL-3.0-or-later',
},
actions: [
{
id: 'source',
label: 'Source',
url: 'https://git.add-ideas.de/lotobo/sudoku-tools',
},
],
};
export const catalogue: ToolboxCatalog = {
schemaVersion: 1,
id: 'de.add-ideas.toolbox',
@@ -172,6 +214,7 @@ export const catalogue: ToolboxCatalog = {
{ manifest: './apps/onenote/toolbox-app.json', enabled: true },
{ manifest: './apps/svg/toolbox-app.json', enabled: true },
{ manifest: './apps/auth/toolbox-app.json', enabled: true },
{ manifest: './apps/sudoku/toolbox-app.json', enabled: true },
],
};
@@ -197,6 +240,8 @@ export function catalogueFetch(overrides: Record<string, Response> = {}) {
return Response.json(svgManifest);
if (url.pathname.endsWith('/apps/auth/toolbox-app.json'))
return Response.json(authManifest);
if (url.pathname.endsWith('/apps/sudoku/toolbox-app.json'))
return Response.json(sudokuManifest);
return new Response('Not found', { status: 404 });
};
}
src/toolPresentation.test.ts
+11
View File
@@ -52,4 +52,15 @@ describe('compact tool presentation', () => {
'Inspect and test authentication locally.'
);
});
it('uses the compact Sudoku tile copy', () => {
const sudoku = app(
'de.add-ideas.sudoku-tools',
'Sudoku Tools',
'Set, play, solve and analyse Sudoku puzzles locally in the browser.'
);
expect(shortToolTitle(sudoku)).toBe('Sudoku');
expect(shortToolDescription(sudoku)).toBe('Set, play and solve locally.');
});
});
src/toolPresentation.ts
+4
View File
@@ -29,6 +29,10 @@ const PRESENTATION: Record<string, { title: string; description: string }> = {
title: 'OTP & Passkeys',
description: 'Inspect and test authentication locally.',
},
'de.add-ideas.sudoku-tools': {
title: 'Sudoku',
description: 'Set, play and solve locally.',
},
};
export function shortToolTitle(app: ResolvedApp): string {