lotobo/toolbox-portal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 16 Wiki Activity

feat: publish Toolbox 0.7.0

Browse Source
This commit is contained in:
Albrecht Degering
2026-07-27 01:16:20 +02:00
parent 5c052bc6d1
commit 470ee49ca2
15 changed files with 147 additions and 576 deletions
Download Patch File Download Diff File Expand all files Collapse all files

51
README.md
View File

@@ -1,7 +1,7 @@
# add·ideas Toolbox Portal
`toolbox-portal` is the static launcher and release assembler for the add·ideas
browser toolbox. Version `0.2.5` reads one same-origin catalogue, shows each app
browser toolbox. Version `0.2.6` reads one same-origin catalogue, shows each app
as a compact launch tile, and keeps personal pins, drag-and-drop ordering,
visibility, and appearance in the current browser. Pinned tools have their own
section; search, category, and clickable tag filters stay close to the tool
@@ -69,7 +69,7 @@ privacy and executable-code warning. Light, dark, and system modes are supported
## Production deployment behind Traefik
The committed `compose.yaml` is the shortest production path. Its release
container downloads the immutable Toolbox 0.6.0 ZIP during the image build,
container downloads the immutable Toolbox 0.7.0 ZIP during the image build,
verifies SHA-256 before extracting it, and then copies only the verified static
files into the pinned unprivileged nginx image. Node.js and a local portal
assembly are not required on the deployment host.
@@ -78,7 +78,7 @@ Prerequisites:
- Docker with the Compose plugin;
- Traefik attached to the existing external Docker network `internal`;
- a Traefik HTTPS entrypoint named `websecure`;
- Traefik HTTP and HTTPS entrypoints named `web` and `websecure`;
- a certificate resolver named `netcup`;
- DNS for `toolbox.add-ideas.de` pointing to that Traefik instance; and
- outbound HTTPS access to `git.add-ideas.de` while the image is built.
@@ -92,8 +92,9 @@ docker compose up -d --build
docker compose ps
```
No host port is published. Traefik routes
`https://toolbox.add-ideas.de` to nginx on the shared network at port 8080 and
No host port is published. Traefik permanently redirects
`http://toolbox.add-ideas.de` to HTTPS, routes
`https://toolbox.add-ideas.de` to nginx on the shared network at port 8080, and
obtains its TLS certificate through `netcup`. The hostname, network, resolver,
release version, and matching checksum can be overridden through environment
variables; copy `.env.example` to `.env` only when an override is needed. For
@@ -120,11 +121,9 @@ The app release should also publish a matching `.sha256` sidecar. The manifest
must declare the pinned reverse-DNS id and version. Application and portal
versions are independent.
`release/toolbox.lock.json` is the reviewed v0.6.0 lock. Its URLs and checksums
`release/toolbox.lock.json` is the reviewed v0.7.0 lock. Its URLs and checksums
pin the published PDF Tools 0.4.3, XSLT Tools 0.4.2, OneNote Tools 0.3.3, and
Audio & Video Tools 0.1.0 and Regex Tools 0.1.0 release bytes. Regex Tools
v0.1.0 is the open-source, ECMAScript-only first flavour; later regex flavours
remain separate roadmap work. Use
Audio & Video Tools 0.2.0 and Regex Tools 0.2.0 release bytes. Use
`release/toolbox.lock.example.json` as the template for a future release and
verify every downloaded asset before committing updated values. Artifacts may be:
@@ -145,7 +144,7 @@ npm run assemble -- \
--lock release/toolbox.lock.json \
--portal-dist dist \
--output build/toolbox \
--archive build/add-ideas-toolbox-0.6.0.zip
--archive build/add-ideas-toolbox-0.7.0.zip
```
Existing output is refused. Pass `--force` only when replacing those exact
@@ -167,8 +166,8 @@ build/toolbox/
├── av/
└── regex/
build/add-ideas-toolbox-0.6.0.zip
build/add-ideas-toolbox-0.6.0.zip.sha256
build/add-ideas-toolbox-0.7.0.zip
build/add-ideas-toolbox-0.7.0.zip.sha256
```
The assembler verifies SHA-256 before opening an artifact, validates every app
@@ -189,7 +188,7 @@ directory separately:
```sh
npm run package:static -- \
--input build/toolbox \
--output artifacts/add-ideas-toolbox-0.6.0.zip
--output artifacts/add-ideas-toolbox-0.7.0.zip
```
This also emits a `.sha256` sidecar.
@@ -207,9 +206,9 @@ normal local XML/XSLT transformations do not require that permission.
```sh
podman build -f Containerfile \
-t git.add-ideas.de/zemion/toolbox:0.6.0 .
-t git.add-ideas.de/zemion/toolbox:0.7.0 .
podman run --rm -p 8080:8080 \
git.add-ideas.de/zemion/toolbox:0.6.0
git.add-ideas.de/zemion/toolbox:0.7.0
```
For a direct-port local deployment after assembly, use the separate example:
@@ -226,8 +225,8 @@ docker login git.add-ideas.de
docker buildx build \
--platform linux/amd64,linux/arm64 \
--file Containerfile.release \
--tag git.add-ideas.de/zemion/toolbox:0.6.0 \
--tag git.add-ideas.de/zemion/toolbox:0.6 \
--tag git.add-ideas.de/zemion/toolbox:0.7.0 \
--tag git.add-ideas.de/zemion/toolbox:0.7 \
--push .
```
@@ -252,8 +251,8 @@ needs permission to push code, releases, and container packages to
all five apps, switch between them, and confirm the encoded `toolbox`
context.
5. Verify the distribution with
`(cd build && sha256sum -c add-ideas-toolbox-0.6.0.zip.sha256)`.
6. Commit the reviewed lock, tag the toolbox release (for example `v0.6.0`), and
`(cd build && sha256sum -c add-ideas-toolbox-0.7.0.zip.sha256)`.
6. Commit the reviewed lock, tag the toolbox release (for example `v0.7.0`), and
push the branch and tag to Gitea.
7. In Gitea, open **Releases → New release**, select the tag, and upload the
static ZIP plus its `.sha256` file. Do not use a mutable “latest” URL in a
@@ -268,13 +267,13 @@ must not re-resolve app versions or substitute a newer release.
## Existing tools
| Tool | State and boundary | Principal workflows | Important concrete scope | Critical considerations and integrations |
| ------------------- | --------------------------------------------------------- | ---------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **`pdf-tools`** | Existing; dedicated repository | Merge, split, reorder, rotate and export PDF pages | Thumbnail workspace; multi-document operations; ZIP and PDF output; saved local workspace | Workers and IndexedDB; large-document memory control; future signature inspection through `crypto-tools`; metadata and safe-sharing through `privacy-tools` |
| **`xslt-tools`** | Existing; dedicated repository | Develop, test and run XSLT transformations | XML/XSLT editors; transformation results; local files; saved projects; validation and diagnostics | Lazy SaxonJS loading; relocatable assets; useful handoffs to `data-tools`, `schema-tools` and `diff-tools` |
| **`onenote-tools`** | Existing rich-reader release; dedicated repository | Open, browse, inspect and export OneNote sections and packages locally | Desktop/unfragmented FSSHTTPB `.one`/`.onetoc2`; none/LZX/MSZIP/Quantum and multi-cabinet `.onepkg`; trees, rich text, images, tables, ink, attachments and export | Native TypeScript worker with no Wasm; bounded parsing, rendering and export; fragmented FSSHTTP fails safely; no editing or pixel-perfect fidelity |
| **`av-tools`** | Existing local-first v0.1.0 release; dedicated repository | Convert and lightly edit audio and video locally in the browser | Quick conversion; trim, split and concatenate; crop, resize, normalize, fades, waveform, metadata, chapters, subtitles, thumbnails, contact sheets, presets and export | Self-hosted ffmpeg.wasm 0.12.10 ST/MT cores; bounded queue, temporary storage and resource policy; isolation enables MT with automatic ST fallback; semver-versioned core assets are immutable |
| **`regex-tools`** | Existing local-first v0.1.0 release; dedicated repository | Develop, explain, test and apply ECMAScript regular expressions | Deterministic syntax tree; native matching and exact captures; replacement and list previews; unit-test suites; project import, export and optional local persistence | Open-source regexpp parser and native browser engine in killable workers; explicit resource/presentation limits; ECMAScript-only first flavour; later engines remain roadmap work |
| Tool | State and boundary | Principal workflows | Important concrete scope | Critical considerations and integrations |
| ------------------- | --------------------------------------------------------- | ------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **`pdf-tools`** | Existing; dedicated repository | Merge, split, reorder, rotate and export PDF pages | Thumbnail workspace; multi-document operations; ZIP and PDF output; saved local workspace | Workers and IndexedDB; large-document memory control; future signature inspection through `crypto-tools`; metadata and safe-sharing through `privacy-tools` |
| **`xslt-tools`** | Existing; dedicated repository | Develop, test and run XSLT transformations | XML/XSLT editors; transformation results; local files; saved projects; validation and diagnostics | Lazy SaxonJS loading; relocatable assets; useful handoffs to `data-tools`, `schema-tools` and `diff-tools` |
| **`onenote-tools`** | Existing rich-reader release; dedicated repository | Open, browse, inspect and export OneNote sections and packages locally | Desktop/unfragmented FSSHTTPB `.one`/`.onetoc2`; none/LZX/MSZIP/Quantum and multi-cabinet `.onepkg`; trees, rich text, images, tables, ink, attachments and export | Native TypeScript worker with no Wasm; bounded parsing, rendering and export; fragmented FSSHTTP fails safely; no editing or pixel-perfect fidelity |
| **`av-tools`** | Existing local-first v0.2.0 release; dedicated repository | Convert and lightly edit audio and video locally in the browser | Quick conversion; trim, split and crossfade concatenate; crop, resize, normalize, fades, waveform, metadata, chapters, subtitles, scene thumbnails/contact sheets, presets and export | Reviewed ffmpeg.wasm 0.12.10 ST/MT build with verified Opus and bundled label font; bounded queue, temporary storage and resource policy; isolation enables MT with automatic ST fallback; versioned core assets are immutable |
| **`regex-tools`** | Existing local-first v0.2.0 release; dedicated repository | Develop, explain, test and apply ECMAScript and PCRE2 regular expressions | Deterministic syntax tree; native matching/tracing and exact captures; comparison, PCRE2 C17 generation, corpus apply, replacement/list previews, tests, risk/growth/benchmark analysis, deterministic generated cases, bounded minimization, validated ECMAScript formatting, project import/export and optional local persistence | Open-source regexpp plus pinned PCRE2 10.47 WASM in killable workers; explicit resource/presentation limits and honest flavour boundaries; more engines remain roadmap work |
## Planned tools