feat: publish Toolbox 0.6.0 with regex-tools

This commit is contained in:
2026-07-24 18:14:47 +02:00
parent a9c31c8986
commit 5c052bc6d1
17 changed files with 117 additions and 39 deletions

View File

@@ -1,7 +1,7 @@
# add·ideas Toolbox Portal
`toolbox-portal` is the static launcher and release assembler for the add·ideas
browser toolbox. Version `0.2.4` reads one same-origin catalogue, shows each app
browser toolbox. Version `0.2.5` reads one same-origin catalogue, shows each app
as a compact launch tile, and keeps personal pins, drag-and-drop ordering,
visibility, and appearance in the current browser. Pinned tools have their own
section; search, category, and clickable tag filters stay close to the tool
@@ -36,7 +36,8 @@ the SDK and portal together.
Vite uses `base: './'`, so the built portal works at `/` or a nested static path.
The development catalogue at `public/toolbox.catalog.json` points to assembled
paths (`./apps/pdf/`, `./apps/xslt/`, `./apps/onenote/`, and `./apps/av/`).
paths (`./apps/pdf/`, `./apps/xslt/`, `./apps/onenote/`, `./apps/av/`, and
`./apps/regex/`).
Those manifests will correctly appear as unavailable until an assembled release
is being served.
@@ -68,7 +69,7 @@ privacy and executable-code warning. Light, dark, and system modes are supported
## Production deployment behind Traefik
The committed `compose.yaml` is the shortest production path. Its release
container downloads the immutable Toolbox 0.5.0 ZIP during the image build,
container downloads the immutable Toolbox 0.6.0 ZIP during the image build,
verifies SHA-256 before extracting it, and then copies only the verified static
files into the pinned unprivileged nginx image. Node.js and a local portal
assembly are not required on the deployment host.
@@ -119,9 +120,11 @@ The app release should also publish a matching `.sha256` sidecar. The manifest
must declare the pinned reverse-DNS id and version. Application and portal
versions are independent.
`release/toolbox.lock.json` is the reviewed v0.5.0 lock. Its URLs and checksums
`release/toolbox.lock.json` is the reviewed v0.6.0 lock. Its URLs and checksums
pin the published PDF Tools 0.4.3, XSLT Tools 0.4.2, OneNote Tools 0.3.3, and
Audio & Video Tools 0.1.0 release bytes. Use
Audio & Video Tools 0.1.0 and Regex Tools 0.1.0 release bytes. Regex Tools
v0.1.0 is the open-source, ECMAScript-only first flavour; later regex flavours
remain separate roadmap work. Use
`release/toolbox.lock.example.json` as the template for a future release and
verify every downloaded asset before committing updated values. Artifacts may be:
@@ -142,7 +145,7 @@ npm run assemble -- \
--lock release/toolbox.lock.json \
--portal-dist dist \
--output build/toolbox \
--archive build/add-ideas-toolbox-0.5.0.zip
--archive build/add-ideas-toolbox-0.6.0.zip
```
Existing output is refused. Pass `--force` only when replacing those exact
@@ -161,10 +164,11 @@ build/toolbox/
├── pdf/
├── xslt/
├── onenote/
── av/
── av/
└── regex/
build/add-ideas-toolbox-0.5.0.zip
build/add-ideas-toolbox-0.5.0.zip.sha256
build/add-ideas-toolbox-0.6.0.zip
build/add-ideas-toolbox-0.6.0.zip.sha256
```
The assembler verifies SHA-256 before opening an artifact, validates every app
@@ -185,7 +189,7 @@ directory separately:
```sh
npm run package:static -- \
--input build/toolbox \
--output artifacts/add-ideas-toolbox-0.5.0.zip
--output artifacts/add-ideas-toolbox-0.6.0.zip
```
This also emits a `.sha256` sidecar.
@@ -203,9 +207,9 @@ normal local XML/XSLT transformations do not require that permission.
```sh
podman build -f Containerfile \
-t git.add-ideas.de/zemion/toolbox:0.5.0 .
-t git.add-ideas.de/zemion/toolbox:0.6.0 .
podman run --rm -p 8080:8080 \
git.add-ideas.de/zemion/toolbox:0.5.0
git.add-ideas.de/zemion/toolbox:0.6.0
```
For a direct-port local deployment after assembly, use the separate example:
@@ -222,8 +226,8 @@ docker login git.add-ideas.de
docker buildx build \
--platform linux/amd64,linux/arm64 \
--file Containerfile.release \
--tag git.add-ideas.de/zemion/toolbox:0.5.0 \
--tag git.add-ideas.de/zemion/toolbox:0.5 \
--tag git.add-ideas.de/zemion/toolbox:0.6.0 \
--tag git.add-ideas.de/zemion/toolbox:0.6 \
--push .
```
@@ -245,11 +249,11 @@ needs permission to push code, releases, and container packages to
3. Verify downloaded app assets with `sha256sum -c <asset>.sha256`; copy those
exact values into a reviewed toolbox lock.
4. Run the assembler and serve `build/toolbox` from a nested test path. Open
all four apps, switch between them, and confirm the encoded `toolbox`
all five apps, switch between them, and confirm the encoded `toolbox`
context.
5. Verify the distribution with
`(cd build && sha256sum -c add-ideas-toolbox-0.5.0.zip.sha256)`.
6. Commit the reviewed lock, tag the toolbox release (for example `v0.5.0`), and
`(cd build && sha256sum -c add-ideas-toolbox-0.6.0.zip.sha256)`.
6. Commit the reviewed lock, tag the toolbox release (for example `v0.6.0`), and
push the branch and tag to Gitea.
7. In Gitea, open **Releases → New release**, select the tag, and upload the
static ZIP plus its `.sha256` file. Do not use a mutable “latest” URL in a
@@ -270,6 +274,7 @@ must not re-resolve app versions or substitute a newer release.
| **`xslt-tools`** | Existing; dedicated repository | Develop, test and run XSLT transformations | XML/XSLT editors; transformation results; local files; saved projects; validation and diagnostics | Lazy SaxonJS loading; relocatable assets; useful handoffs to `data-tools`, `schema-tools` and `diff-tools` |
| **`onenote-tools`** | Existing rich-reader release; dedicated repository | Open, browse, inspect and export OneNote sections and packages locally | Desktop/unfragmented FSSHTTPB `.one`/`.onetoc2`; none/LZX/MSZIP/Quantum and multi-cabinet `.onepkg`; trees, rich text, images, tables, ink, attachments and export | Native TypeScript worker with no Wasm; bounded parsing, rendering and export; fragmented FSSHTTP fails safely; no editing or pixel-perfect fidelity |
| **`av-tools`** | Existing local-first v0.1.0 release; dedicated repository | Convert and lightly edit audio and video locally in the browser | Quick conversion; trim, split and concatenate; crop, resize, normalize, fades, waveform, metadata, chapters, subtitles, thumbnails, contact sheets, presets and export | Self-hosted ffmpeg.wasm 0.12.10 ST/MT cores; bounded queue, temporary storage and resource policy; isolation enables MT with automatic ST fallback; semver-versioned core assets are immutable |
| **`regex-tools`** | Existing local-first v0.1.0 release; dedicated repository | Develop, explain, test and apply ECMAScript regular expressions | Deterministic syntax tree; native matching and exact captures; replacement and list previews; unit-test suites; project import, export and optional local persistence | Open-source regexpp parser and native browser engine in killable workers; explicit resource/presentation limits; ECMAScript-only first flavour; later engines remain roadmap work |
## Planned tools
@@ -283,7 +288,6 @@ must not re-resolve app versions or substitute a newer release.
| **`midi-tools`** | Medium specialist app | MIDI event inspection and editing; transpose, quantize, tempo maps and controller data; device access should remain optional | |
| **`3d-tools`** | Large specialist app | Inspect STL, OBJ and glTF; dimensions, bounding boxes, mesh simplification and common geometry defects; worker/GPU use and file limits | |
| **`query-tools`** | High-value but large; dedicated repository | Analyse local tabular and relational data with SQL | CSV, JSON, NDJSON, Parquet and SQLite; schema inference; joins; aggregation; pivots; charts; export to common data formats | WASM memory and streaming; distinguish this analytical product from document-oriented `data-tools`; query work must remain local |
| **`regex-tools`** | Planned; dedicated repository | Develop, test and apply regular expressions | Corpus mode; replacement preview; capture table; flavour comparison; performance visualization; generated test cases; failing-input minimization | Never claim exact equivalence across regex engines without qualification; bound execution; integrate with `text-tools`, `log-tools` and `minimize-tools` |
| **`epub-tools`** | Medium app | EPUB inspection, metadata and cover editing, link validation, chapter extraction and structural repair; sanitize embedded HTML and SVG | |
| **`scan-tools`** | Large app | Camera/document correction; crop, deskew and threshold; page assembly; local OCR; PDF output; model downloads and memory use must be explicit | |
| **`office-tools`** | Medium-to-large app | Inspect rather than reproduce an office suite: package structure, relationships, metadata, comments, embedded images and basic repairs | |