diff --git a/.env.example b/.env.example index ff71a61..b2e0db5 100644 --- a/.env.example +++ b/.env.example @@ -5,5 +5,5 @@ TRAEFIK_NETWORK=internal TRAEFIK_CERT_RESOLVER=netcup # Keep these two values paired when deploying a newer published toolbox release. -TOOLBOX_RELEASE_VERSION=0.13.0 -TOOLBOX_RELEASE_SHA256=ae8d96906ad6794c1c387863dbd0d6d31e1c5deeef7640362f8a479dbf3f3891 +TOOLBOX_RELEASE_VERSION=0.14.0 +TOOLBOX_RELEASE_SHA256=e79f4aadfce3222855a3829805e72ebe399ce863df5e2b57ea0bd606139c2d6d diff --git a/Containerfile.release b/Containerfile.release index 9a1e3ee..3d577ab 100644 --- a/Containerfile.release +++ b/Containerfile.release @@ -2,8 +2,8 @@ ARG NGINX_IMAGE=nginxinc/nginx-unprivileged:1.31.3-alpine@sha256:18d67281256ded3 FROM ${NGINX_IMAGE} AS release -ARG TOOLBOX_RELEASE_VERSION=0.13.0 -ARG TOOLBOX_RELEASE_SHA256=ae8d96906ad6794c1c387863dbd0d6d31e1c5deeef7640362f8a479dbf3f3891 +ARG TOOLBOX_RELEASE_VERSION=0.14.0 +ARG TOOLBOX_RELEASE_SHA256=e79f4aadfce3222855a3829805e72ebe399ce863df5e2b57ea0bd606139c2d6d ARG TOOLBOX_RELEASE_BASE_URL=https://git.add-ideas.de/lotobo/toolbox-portal/releases/download RUN set -eu; \ @@ -25,6 +25,7 @@ RUN set -eu; \ test -f /tmp/toolbox/apps/regex/toolbox-app.json; \ test -f /tmp/toolbox/apps/svg/toolbox-app.json; \ test -f /tmp/toolbox/apps/auth/toolbox-app.json; \ + test -f /tmp/toolbox/apps/sudoku/toolbox-app.json; \ rm "/tmp/${archive}" FROM ${NGINX_IMAGE} diff --git a/README.md b/README.md index fe808b7..3a6a697 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ # add·ideas Toolbox Portal `toolbox-portal` is the static launcher and release assembler for the add·ideas -browser toolbox. Version `0.2.15` reads one same-origin catalogue, shows each app +browser toolbox. Version `0.2.16` reads one same-origin catalogue, shows each app as a compact launch tile, and keeps personal pins, drag-and-drop ordering, visibility, and appearance in the current browser. Pinned tools have their own section; search, category, and clickable tag filters stay close to the tool @@ -37,7 +37,7 @@ the SDK and portal together. Vite uses `base: './'`, so the built portal works at `/` or a nested static path. The development catalogue at `public/toolbox.catalog.json` points to assembled paths (`./apps/pdf/`, `./apps/xslt/`, `./apps/onenote/`, `./apps/av/`, -`./apps/regex/`, `./apps/svg/`, and `./apps/auth/`). +`./apps/regex/`, `./apps/svg/`, `./apps/auth/`, and `./apps/sudoku/`). Those manifests will correctly appear as unavailable until an assembled release is being served. @@ -69,7 +69,7 @@ privacy and executable-code warning. Light, dark, and system modes are supported ## Production deployment behind Traefik The committed `compose.yaml` is the shortest production path. Its release -container downloads the immutable Toolbox 0.13.0 ZIP during the image build, +container downloads the immutable Toolbox 0.14.0 ZIP during the image build, verifies SHA-256 before extracting it, and then copies only the verified static files into the pinned unprivileged nginx image. Node.js and a local portal assembly are not required on the deployment host. @@ -133,10 +133,10 @@ The app release should also publish a matching `.sha256` sidecar. The manifest must declare the pinned reverse-DNS id and version. Application and portal versions are independent. -`release/toolbox.lock.json` is the reviewed v0.13.0 lock. Its URLs and checksums +`release/toolbox.lock.json` is the reviewed v0.14.0 lock. Its URLs and checksums pin the published PDF Tools 0.4.4, XSLT Tools 0.4.3, OneNote Tools 0.3.4, -Audio & Video Tools 0.3.0, Regex Tools 0.4.2, SVG Tools 0.1.0, and OTP & Passkey -Tools 0.3.0 release bytes. Use +Audio & Video Tools 0.3.0, Regex Tools 0.4.2, SVG Tools 0.1.0, OTP & Passkey +Tools 0.3.0, and Sudoku Tools 0.1.0 release bytes. Use `release/toolbox.lock.example.json` as the template for a future release and verify every downloaded asset before committing updated values. Artifacts may be: @@ -157,7 +157,7 @@ npm run assemble -- \ --lock release/toolbox.lock.json \ --portal-dist dist \ --output build/toolbox \ - --archive build/add-ideas-toolbox-0.13.0.zip + --archive build/add-ideas-toolbox-0.14.0.zip ``` Existing output is refused. Pass `--force` only when replacing those exact @@ -179,10 +179,11 @@ build/toolbox/ ├── av/ ├── regex/ ├── svg/ - └── auth/ + ├── auth/ + └── sudoku/ -build/add-ideas-toolbox-0.13.0.zip -build/add-ideas-toolbox-0.13.0.zip.sha256 +build/add-ideas-toolbox-0.14.0.zip +build/add-ideas-toolbox-0.14.0.zip.sha256 ``` The assembler verifies SHA-256 before opening an artifact, validates every app @@ -203,7 +204,7 @@ directory separately: ```sh npm run package:static -- \ --input build/toolbox \ - --output artifacts/add-ideas-toolbox-0.13.0.zip + --output artifacts/add-ideas-toolbox-0.14.0.zip ``` This also emits a `.sha256` sidecar. @@ -231,9 +232,9 @@ normal local XML/XSLT transformations do not require that permission. ```sh podman build -f Containerfile \ - -t git.add-ideas.de/lotobo/toolbox:0.13.0 . + -t git.add-ideas.de/lotobo/toolbox:0.14.0 . podman run --rm -p 8080:8080 \ - git.add-ideas.de/lotobo/toolbox:0.13.0 + git.add-ideas.de/lotobo/toolbox:0.14.0 ``` For a direct-port local deployment after assembly, use the separate example: @@ -250,8 +251,8 @@ docker login git.add-ideas.de docker buildx build \ --platform linux/amd64,linux/arm64 \ --file Containerfile.release \ - --tag git.add-ideas.de/lotobo/toolbox:0.13.0 \ - --tag git.add-ideas.de/lotobo/toolbox:0.13 \ + --tag git.add-ideas.de/lotobo/toolbox:0.14.0 \ + --tag git.add-ideas.de/lotobo/toolbox:0.14 \ --push . ``` @@ -273,11 +274,11 @@ needs permission to push code, releases, and container packages to 3. Verify downloaded app assets with `sha256sum -c .sha256`; copy those exact values into a reviewed toolbox lock. 4. Run the assembler and serve `build/toolbox` from a nested test path. Open - all seven apps, switch between them, and confirm the encoded `toolbox` + all eight apps, switch between them, and confirm the encoded `toolbox` context. 5. Verify the distribution with - `(cd build && sha256sum -c add-ideas-toolbox-0.13.0.zip.sha256)`. -6. Commit the reviewed lock, tag the toolbox release (for example `v0.13.0`), and + `(cd build && sha256sum -c add-ideas-toolbox-0.14.0.zip.sha256)`. +6. Commit the reviewed lock, tag the toolbox release (for example `v0.14.0`), and push the branch and tag to Gitea. 7. In Gitea, open **Releases → New release**, select the tag, and upload the static ZIP plus its `.sha256` file. Do not use a mutable “latest” URL in a @@ -301,6 +302,7 @@ must not re-resolve app versions or substitute a newer release. | **`regex-tools`** | Current local-first v0.4.2 release; dedicated repository | Develop, explain, test and apply JavaScript, PCRE2, PHP, Perl, Python, Ruby, Java, C++, Go, .NET, Rust and Scala/JVM-compatible regular expressions | Deterministic syntax trees; engine-native matching, captures and bounded replacement; stable double-buffered live results; PCRE2 tracing and C17 generation; comparison; corpus apply; tests; risk/growth/benchmark analysis; generated cases; bounded minimization; validated ECMAScript formatting; project import/export and optional local persistence | Open-source regexpp and pinned local WebAssembly runtimes for PCRE2, PHP preg, legacy Perl, CPython, CRuby, TeaVM Java/Scala compatibility, libc++ C++, Go, .NET and Rust in killable workers; explicit source/licence inventories, resource limits and engine-specific offset semantics | | **`svg-tools`** | Initial local-first v0.1.0 release; dedicated repository | Inspect and edit SVG source, structure, geometry, references and accessibility locally | Synchronized source/tree/canvas/inspector; path and transform tools; reference analysis; optimization; CSS animation preview; exact, sanitized, raster and project export | Untrusted SVG is sanitized into an opaque-origin sandbox; bounded parsing and decompression, explicit security findings and a URI-scoped controller header exception; later milestone slices remain intentionally tracked in the app repository | | **`auth-tools`** | Current local-first v0.3.0 release; dedicated repository | Generate, migrate and diagnose OTP credentials, and inspect, verify and test WebAuthn/passkey ceremonies locally | HOTP/TOTP/OCRA with time travel, resynchronization and rotation planning; QR, Google, Aegis and encrypted PSKC migration; WebAuthn extension experiments and replayable traces; assertion, attestation, signer-chain and historical metadata-policy evaluation | Authentication material remains memory-only unless explicitly exported; redaction is deliberate but not a secrecy guarantee; live ceremonies and camera scanning are enabled only at the exact dedicated `auth.toolbox.add-ideas.de` origin, while the shared Portal path remains inspect-only; no raw CTAP administration | +| **`sudoku-tools`** | Initial local-first v0.1.0 release; dedicated repository | Set, play, generate, analyse and solve classic, Killer and common variant Sudoku locally | 4×4–16×16 grids; givens and custom regions; cages, diagonals, thermos, arrows, Kropki, XV, inequalities, renban and palindrome lines; notes, colours, history, timer, exact uniqueness checks, explained logic, focused calculators, local projects and bounded import/export | Worker-bounded solving and generation; IndexedDB with memory fallback; self-contained links and supported f-puzzles fields stay local; unsupported foreign rules stop explicitly instead of being silently discarded | ## Planned tools diff --git a/compose.example.yaml b/compose.example.yaml index e5ebd21..a37427c 100644 --- a/compose.example.yaml +++ b/compose.example.yaml @@ -3,7 +3,7 @@ services: build: context: . dockerfile: Containerfile - image: git.add-ideas.de/lotobo/toolbox:0.13.0 + image: git.add-ideas.de/lotobo/toolbox:0.14.0 restart: unless-stopped read_only: true ports: diff --git a/compose.yaml b/compose.yaml index 7612a1a..904de85 100644 --- a/compose.yaml +++ b/compose.yaml @@ -6,9 +6,9 @@ services: context: . dockerfile: Containerfile.release args: - TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.13.0}" - TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-ae8d96906ad6794c1c387863dbd0d6d31e1c5deeef7640362f8a479dbf3f3891}" - image: "git.add-ideas.de/lotobo/toolbox:${TOOLBOX_RELEASE_VERSION:-0.13.0}" + TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.14.0}" + TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-e79f4aadfce3222855a3829805e72ebe399ce863df5e2b57ea0bd606139c2d6d}" + image: "git.add-ideas.de/lotobo/toolbox:${TOOLBOX_RELEASE_VERSION:-0.14.0}" restart: unless-stopped read_only: true tmpfs: diff --git a/package-lock.json b/package-lock.json index c7754a6..32831ef 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "@add-ideas/toolbox-portal", - "version": "0.2.15", + "version": "0.2.16", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@add-ideas/toolbox-portal", - "version": "0.2.15", + "version": "0.2.16", "license": "AGPL-3.0-only", "dependencies": { "@add-ideas/toolbox-contract": "^0.2.3", diff --git a/package.json b/package.json index f8d730c..c20a9f7 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@add-ideas/toolbox-portal", - "version": "0.2.15", + "version": "0.2.16", "license": "AGPL-3.0-only", "private": true, "type": "module", diff --git a/public/SOURCE.md b/public/SOURCE.md index 311ce74..6153fcb 100644 --- a/public/SOURCE.md +++ b/public/SOURCE.md @@ -1,8 +1,8 @@ # Corresponding source -The source code corresponding to add·ideas Toolbox Portal 0.2.15 is available at: +The source code corresponding to add·ideas Toolbox Portal 0.2.16 is available at: -https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.13.0 +https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.14.0 Each bundled application contains its own `SOURCE.md`, license, and third-party license materials. The application sources are also linked from the portal. diff --git a/public/toolbox.catalog.json b/public/toolbox.catalog.json index c8d22ed..f91513d 100644 --- a/public/toolbox.catalog.json +++ b/public/toolbox.catalog.json @@ -36,6 +36,10 @@ { "manifest": "./apps/auth/toolbox-app.json", "enabled": true + }, + { + "manifest": "./apps/sudoku/toolbox-app.json", + "enabled": true } ] } diff --git a/release/toolbox.lock.example.json b/release/toolbox.lock.example.json index bf8f169..713f96d 100644 --- a/release/toolbox.lock.example.json +++ b/release/toolbox.lock.example.json @@ -1,8 +1,8 @@ { "$schema": "./toolbox-release-lock.schema.json", "schemaVersion": 1, - "releaseVersion": "0.13.0", - "portalVersion": "0.2.15", + "releaseVersion": "0.14.0", + "portalVersion": "0.2.16", "catalogue": { "id": "de.add-ideas.toolbox", "name": "add·ideas Toolbox", @@ -61,6 +61,13 @@ "artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.3.0/auth-tools-0.3.0.zip", "sha256": "ac80a711a0fc00d554505e6278aa3557eca4248b6da2ac9e2bae74bc0b26e58e", "target": "auth" + }, + { + "id": "de.add-ideas.sudoku-tools", + "version": "0.1.0", + "artifact": "https://git.add-ideas.de/lotobo/sudoku-tools/releases/download/v0.1.0/sudoku-tools-0.1.0.zip", + "sha256": "bc277791dc50d5fdb39f5abd098d81ea7d84b8a9bc43ca86214de7ee335abf61", + "target": "sudoku" } ] } diff --git a/release/toolbox.lock.json b/release/toolbox.lock.json index bf8f169..713f96d 100644 --- a/release/toolbox.lock.json +++ b/release/toolbox.lock.json @@ -1,8 +1,8 @@ { "$schema": "./toolbox-release-lock.schema.json", "schemaVersion": 1, - "releaseVersion": "0.13.0", - "portalVersion": "0.2.15", + "releaseVersion": "0.14.0", + "portalVersion": "0.2.16", "catalogue": { "id": "de.add-ideas.toolbox", "name": "add·ideas Toolbox", @@ -61,6 +61,13 @@ "artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.3.0/auth-tools-0.3.0.zip", "sha256": "ac80a711a0fc00d554505e6278aa3557eca4248b6da2ac9e2bae74bc0b26e58e", "target": "auth" + }, + { + "id": "de.add-ideas.sudoku-tools", + "version": "0.1.0", + "artifact": "https://git.add-ideas.de/lotobo/sudoku-tools/releases/download/v0.1.0/sudoku-tools-0.1.0.zip", + "sha256": "bc277791dc50d5fdb39f5abd098d81ea7d84b8a9bc43ca86214de7ee335abf61", + "target": "sudoku" } ] } diff --git a/scripts/assembler.test.ts b/scripts/assembler.test.ts index f1ac9dd..ddb9be8 100644 --- a/scripts/assembler.test.ts +++ b/scripts/assembler.test.ts @@ -83,7 +83,7 @@ function makeLock(artifact: string, sha256: string) { return { schemaVersion: 1, releaseVersion: '0.1.0', - portalVersion: '0.2.15', + portalVersion: '0.2.16', catalogue: { id: 'de.add-ideas.toolbox', name: 'Test Toolbox', diff --git a/scripts/deployment.test.ts b/scripts/deployment.test.ts index cef9d30..d38cf58 100644 --- a/scripts/deployment.test.ts +++ b/scripts/deployment.test.ts @@ -93,6 +93,7 @@ describe('production deployment', () => { 'regex', 'svg', 'auth', + 'sudoku', ]) { expect(containerfile).toContain( `test -f /tmp/toolbox/apps/${app}/toolbox-app.json` diff --git a/src/App.test.tsx b/src/App.test.tsx index bfe2e09..1a5de34 100644 --- a/src/App.test.tsx +++ b/src/App.test.tsx @@ -335,12 +335,12 @@ describe('portal UI', () => { expect( screen.getByRole('heading', { level: 2, - name: 'Your document tools, in one calm place.', + name: 'Your local tools, in one calm place.', }) ).toBeInTheDocument(); expect( screen.getAllByRole('heading', { - name: 'Your document tools, in one calm place.', + name: 'Your local tools, in one calm place.', }) ).toHaveLength(1); @@ -415,6 +415,7 @@ describe('portal UI', () => { 'de.add-ideas.onenote-tools', 'de.add-ideas.svg-tools', 'de.add-ideas.auth-tools', + 'de.add-ideas.sudoku-tools', ], hidden: [], theme: 'light', @@ -434,6 +435,7 @@ describe('portal UI', () => { screen.getByTestId('app-card-de.add-ideas.onenote-tools'), screen.getByTestId('app-card-de.add-ideas.svg-tools'), screen.getByTestId('app-card-de.add-ideas.auth-tools'), + screen.getByTestId('app-card-de.add-ideas.sudoku-tools'), ]; cards.forEach((card, index) => { const rect = { @@ -464,7 +466,7 @@ describe('portal UI', () => { within(tools) .getAllByRole('heading', { level: 3 }) .map((heading) => heading.textContent) - ).toEqual(['XSLT', 'PDF', 'OneNote', 'SVG', 'OTP & Passkeys']); + ).toEqual(['XSLT', 'PDF', 'OneNote', 'SVG', 'OTP & Passkeys', 'Sudoku']); }); expect( JSON.parse(localStorage.getItem(PREFERENCES_KEY) ?? '{}').order @@ -474,6 +476,7 @@ describe('portal UI', () => { 'de.add-ideas.onenote-tools', 'de.add-ideas.svg-tools', 'de.add-ideas.auth-tools', + 'de.add-ideas.sudoku-tools', ]); }); diff --git a/src/App.tsx b/src/App.tsx index 2521459..ec48f5f 100644 --- a/src/App.tsx +++ b/src/App.tsx @@ -297,7 +297,7 @@ export default function App() { Privacy details up front · useful by default

- Your document tools, + Your local tools,
in one calm place.

@@ -489,9 +489,9 @@ export default function App() {

- Portal v0.2.15 ·{' '} + Portal v0.2.16 ·{' '} diff --git a/src/catalogue.test.ts b/src/catalogue.test.ts index a23d3f6..4ef21ba 100644 --- a/src/catalogue.test.ts +++ b/src/catalogue.test.ts @@ -10,7 +10,7 @@ describe('catalogue loading', () => { const loaded = await loadCatalogue('/toolbox.catalog.json'); expect(loaded.catalogue.name).toBe('add·ideas Toolbox'); expect(loaded.homeUrl).toBe('http://localhost:3000/'); - expect(loaded.apps).toHaveLength(5); + expect(loaded.apps).toHaveLength(6); expect(loaded.apps[0]).toMatchObject({ id: 'de.add-ideas.pdf-tools', name: 'PDF Workbench', @@ -42,6 +42,7 @@ describe('catalogue loading', () => { 'de.add-ideas.onenote-tools', 'de.add-ideas.svg-tools', 'de.add-ideas.auth-tools', + 'de.add-ideas.sudoku-tools', ]); expect(loaded.unavailable).toHaveLength(1); expect(loaded.unavailable[0]?.reason).toMatch(/HTTP 404/); diff --git a/src/test/fixtures.ts b/src/test/fixtures.ts index 33e26f7..ebed81b 100644 --- a/src/test/fixtures.ts +++ b/src/test/fixtures.ts @@ -160,6 +160,48 @@ export const authManifest: ToolboxAppManifest = { }, }; +export const sudokuManifest: ToolboxAppManifest = { + schemaVersion: 1, + id: 'de.add-ideas.sudoku-tools', + name: 'Sudoku Tools', + version: '0.1.0', + description: + 'Set, play, solve and analyse Sudoku puzzles locally in the browser.', + entry: './', + icon: './favicon.svg', + categories: ['games', 'puzzles', 'logic'], + tags: ['sudoku', 'killer', 'solver', 'setter', 'generator', 'candidates'], + integration: { + contextVersion: 1, + launchModes: ['navigate', 'new-tab'], + embedding: 'unsupported', + }, + requirements: { + secureContext: false, + workers: true, + indexedDb: true, + crossOriginIsolated: false, + topLevelContext: false, + }, + privacy: { + processing: 'local', + fileUploads: false, + telemetry: false, + label: 'Puzzles and progress stay in this browser; nothing is uploaded.', + }, + source: { + repository: 'https://git.add-ideas.de/lotobo/sudoku-tools', + license: 'GPL-3.0-or-later', + }, + actions: [ + { + id: 'source', + label: 'Source', + url: 'https://git.add-ideas.de/lotobo/sudoku-tools', + }, + ], +}; + export const catalogue: ToolboxCatalog = { schemaVersion: 1, id: 'de.add-ideas.toolbox', @@ -172,6 +214,7 @@ export const catalogue: ToolboxCatalog = { { manifest: './apps/onenote/toolbox-app.json', enabled: true }, { manifest: './apps/svg/toolbox-app.json', enabled: true }, { manifest: './apps/auth/toolbox-app.json', enabled: true }, + { manifest: './apps/sudoku/toolbox-app.json', enabled: true }, ], }; @@ -197,6 +240,8 @@ export function catalogueFetch(overrides: Record = {}) { return Response.json(svgManifest); if (url.pathname.endsWith('/apps/auth/toolbox-app.json')) return Response.json(authManifest); + if (url.pathname.endsWith('/apps/sudoku/toolbox-app.json')) + return Response.json(sudokuManifest); return new Response('Not found', { status: 404 }); }; } diff --git a/src/toolPresentation.test.ts b/src/toolPresentation.test.ts index 718009f..70e835c 100644 --- a/src/toolPresentation.test.ts +++ b/src/toolPresentation.test.ts @@ -52,4 +52,15 @@ describe('compact tool presentation', () => { 'Inspect and test authentication locally.' ); }); + + it('uses the compact Sudoku tile copy', () => { + const sudoku = app( + 'de.add-ideas.sudoku-tools', + 'Sudoku Tools', + 'Set, play, solve and analyse Sudoku puzzles locally in the browser.' + ); + + expect(shortToolTitle(sudoku)).toBe('Sudoku'); + expect(shortToolDescription(sudoku)).toBe('Set, play and solve locally.'); + }); }); diff --git a/src/toolPresentation.ts b/src/toolPresentation.ts index ac4500d..5af001d 100644 --- a/src/toolPresentation.ts +++ b/src/toolPresentation.ts @@ -29,6 +29,10 @@ const PRESENTATION: Record = { title: 'OTP & Passkeys', description: 'Inspect and test authentication locally.', }, + 'de.add-ideas.sudoku-tools': { + title: 'Sudoku', + description: 'Set, play and solve locally.', + }, }; export function shortToolTitle(app: ResolvedApp): string {