Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
 zemion
|
01f6c59adf | ||
|
zemion
|
bc07e13e3b | ||
|
zemion
|
7bd34371a9 | ||
|
zemion
|
8d68557d5e | ||
|
zemion
|
7ba733d9f2 |
+2
-2
@@ -5,5 +5,5 @@ TRAEFIK_NETWORK=internal
|
||||
TRAEFIK_CERT_RESOLVER=netcup
|
||||
|
||||
# Keep these two values paired when deploying a newer published toolbox release.
|
||||
TOOLBOX_RELEASE_VERSION=0.11.0
|
||||
TOOLBOX_RELEASE_SHA256=752c91606ba4249da8eb0a6d2d062b9dfe10fec988f16d428ba1c9b899ba4771
|
||||
TOOLBOX_RELEASE_VERSION=0.16.0
|
||||
TOOLBOX_RELEASE_SHA256=2ae120dd54196428893420a236b32ee260a08af3e0d390362da3457d85110f4e
|
||||
|
||||
@@ -2,8 +2,8 @@ ARG NGINX_IMAGE=nginxinc/nginx-unprivileged:1.31.3-alpine@sha256:18d67281256ded3
|
||||
|
||||
FROM ${NGINX_IMAGE} AS release
|
||||
|
||||
ARG TOOLBOX_RELEASE_VERSION=0.11.0
|
||||
ARG TOOLBOX_RELEASE_SHA256=752c91606ba4249da8eb0a6d2d062b9dfe10fec988f16d428ba1c9b899ba4771
|
||||
ARG TOOLBOX_RELEASE_VERSION=0.16.0
|
||||
ARG TOOLBOX_RELEASE_SHA256=2ae120dd54196428893420a236b32ee260a08af3e0d390362da3457d85110f4e
|
||||
ARG TOOLBOX_RELEASE_BASE_URL=https://git.add-ideas.de/lotobo/toolbox-portal/releases/download
|
||||
|
||||
RUN set -eu; \
|
||||
@@ -25,6 +25,7 @@ RUN set -eu; \
|
||||
test -f /tmp/toolbox/apps/regex/toolbox-app.json; \
|
||||
test -f /tmp/toolbox/apps/svg/toolbox-app.json; \
|
||||
test -f /tmp/toolbox/apps/auth/toolbox-app.json; \
|
||||
test -f /tmp/toolbox/apps/sudoku/toolbox-app.json; \
|
||||
rm "/tmp/${archive}"
|
||||
|
||||
FROM ${NGINX_IMAGE}
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
# add·ideas Toolbox Portal
|
||||
|
||||
`toolbox-portal` is the static launcher and release assembler for the add·ideas
|
||||
browser toolbox. Version `0.2.13` reads one same-origin catalogue, shows each app
|
||||
browser toolbox. Version `0.2.18` reads one same-origin catalogue, shows each app
|
||||
as a compact launch tile, and keeps personal pins, drag-and-drop ordering,
|
||||
visibility, and appearance in the current browser. Pinned tools have their own
|
||||
section; search, category, and clickable tag filters stay close to the tool
|
||||
@@ -37,7 +37,7 @@ the SDK and portal together.
|
||||
Vite uses `base: './'`, so the built portal works at `/` or a nested static path.
|
||||
The development catalogue at `public/toolbox.catalog.json` points to assembled
|
||||
paths (`./apps/pdf/`, `./apps/xslt/`, `./apps/onenote/`, `./apps/av/`,
|
||||
`./apps/regex/`, `./apps/svg/`, and `./apps/auth/`).
|
||||
`./apps/regex/`, `./apps/svg/`, `./apps/auth/`, and `./apps/sudoku/`).
|
||||
Those manifests will correctly appear as unavailable until an assembled release
|
||||
is being served.
|
||||
|
||||
@@ -69,7 +69,7 @@ privacy and executable-code warning. Light, dark, and system modes are supported
|
||||
## Production deployment behind Traefik
|
||||
|
||||
The committed `compose.yaml` is the shortest production path. Its release
|
||||
container downloads the immutable Toolbox 0.11.0 ZIP during the image build,
|
||||
container downloads the immutable Toolbox 0.16.0 ZIP during the image build,
|
||||
verifies SHA-256 before extracting it, and then copies only the verified static
|
||||
files into the pinned unprivileged nginx image. Node.js and a local portal
|
||||
assembly are not required on the deployment host.
|
||||
@@ -106,9 +106,11 @@ prefix while the public URL remains `/`, so assets remain relative and the brows
|
||||
binds WebAuthn credentials to the dedicated `auth.toolbox.add-ideas.de` RP ID.
|
||||
The main Toolbox copy at `/apps/auth/` remains useful for offline inspection but
|
||||
disables live ceremonies because all Portal apps share that origin. The router
|
||||
hostname can be overridden with `AUTH_TOOLS_HOST`, but auth-tools 0.1.0 enables
|
||||
live ceremonies only on its pinned production host (or localhost); other hosts
|
||||
remain inspect-only. Never widen the RP ID to `add-ideas.de`.
|
||||
hostname can be overridden with `AUTH_TOOLS_HOST`, but the bundled Auth Tools
|
||||
release enables live ceremonies only on its pinned production host (or
|
||||
localhost); other hosts remain inspect-only. A different production host
|
||||
therefore also requires rebuilding Auth Tools with the new exact host. Never
|
||||
widen the RP ID to `add-ideas.de`.
|
||||
|
||||
The external network is deliberately not created by this project. Creating a
|
||||
private project-local network would prevent an independently managed Traefik
|
||||
@@ -131,10 +133,10 @@ The app release should also publish a matching `.sha256` sidecar. The manifest
|
||||
must declare the pinned reverse-DNS id and version. Application and portal
|
||||
versions are independent.
|
||||
|
||||
`release/toolbox.lock.json` is the reviewed v0.11.0 lock. Its URLs and checksums
|
||||
`release/toolbox.lock.json` is the reviewed v0.16.0 lock. Its URLs and checksums
|
||||
pin the published PDF Tools 0.4.4, XSLT Tools 0.4.3, OneNote Tools 0.3.4,
|
||||
Audio & Video Tools 0.3.0, Regex Tools 0.4.2, SVG Tools 0.1.0, and OTP & Passkey
|
||||
Tools 0.1.0 release bytes. Use
|
||||
Audio & Video Tools 0.3.0, Regex Tools 0.4.2, SVG Tools 0.1.0, OTP & Passkey
|
||||
Tools 0.3.0, and Sudoku Tools 0.2.1 release bytes. Use
|
||||
`release/toolbox.lock.example.json` as the template for a future release and
|
||||
verify every downloaded asset before committing updated values. Artifacts may be:
|
||||
|
||||
@@ -155,7 +157,7 @@ npm run assemble -- \
|
||||
--lock release/toolbox.lock.json \
|
||||
--portal-dist dist \
|
||||
--output build/toolbox \
|
||||
--archive build/add-ideas-toolbox-0.11.0.zip
|
||||
--archive build/add-ideas-toolbox-0.16.0.zip
|
||||
```
|
||||
|
||||
Existing output is refused. Pass `--force` only when replacing those exact
|
||||
@@ -177,10 +179,11 @@ build/toolbox/
|
||||
├── av/
|
||||
├── regex/
|
||||
├── svg/
|
||||
└── auth/
|
||||
├── auth/
|
||||
└── sudoku/
|
||||
|
||||
build/add-ideas-toolbox-0.11.0.zip
|
||||
build/add-ideas-toolbox-0.11.0.zip.sha256
|
||||
build/add-ideas-toolbox-0.16.0.zip
|
||||
build/add-ideas-toolbox-0.16.0.zip.sha256
|
||||
```
|
||||
|
||||
The assembler verifies SHA-256 before opening an artifact, validates every app
|
||||
@@ -201,7 +204,7 @@ directory separately:
|
||||
```sh
|
||||
npm run package:static -- \
|
||||
--input build/toolbox \
|
||||
--output artifacts/add-ideas-toolbox-0.11.0.zip
|
||||
--output artifacts/add-ideas-toolbox-0.16.0.zip
|
||||
```
|
||||
|
||||
This also emits a `.sha256` sidecar.
|
||||
@@ -214,7 +217,14 @@ immutable caching only for Vite-hashed assets and narrowly matched
|
||||
semver-versioned FFmpeg core files, and revalidation for all other files. The
|
||||
opaque-origin SVG preview iframe loads its packaged controller with a URI-exact
|
||||
CORS and cross-origin resource-policy exception; all other files retain the
|
||||
same-origin policy and every normal security header. Assemble first, then:
|
||||
same-origin policy and every normal security header. Camera access is denied on
|
||||
the shared Toolbox host and granted only to the dedicated
|
||||
`auth.toolbox.add-ideas.de` origin, where Auth Tools still requests it only
|
||||
after an explicit user action. If `AUTH_TOOLS_HOST` is customized, update the
|
||||
exact host entry in `deploy/nginx.conf` and Auth Tools' pinned WebAuthn host at
|
||||
the same time; the default-deny fallback deliberately does not infer camera
|
||||
grants from request paths.
|
||||
Assemble first, then:
|
||||
|
||||
The packaged policy intentionally does not grant CSP `unsafe-eval`. SaxonJS's
|
||||
`ixsl:eval()` extension is therefore unsupported in this deployment profile;
|
||||
@@ -222,9 +232,9 @@ normal local XML/XSLT transformations do not require that permission.
|
||||
|
||||
```sh
|
||||
podman build -f Containerfile \
|
||||
-t git.add-ideas.de/lotobo/toolbox:0.11.0 .
|
||||
-t git.add-ideas.de/lotobo/toolbox:0.16.0 .
|
||||
podman run --rm -p 8080:8080 \
|
||||
git.add-ideas.de/lotobo/toolbox:0.11.0
|
||||
git.add-ideas.de/lotobo/toolbox:0.16.0
|
||||
```
|
||||
|
||||
For a direct-port local deployment after assembly, use the separate example:
|
||||
@@ -241,8 +251,8 @@ docker login git.add-ideas.de
|
||||
docker buildx build \
|
||||
--platform linux/amd64,linux/arm64 \
|
||||
--file Containerfile.release \
|
||||
--tag git.add-ideas.de/lotobo/toolbox:0.11.0 \
|
||||
--tag git.add-ideas.de/lotobo/toolbox:0.11 \
|
||||
--tag git.add-ideas.de/lotobo/toolbox:0.16.0 \
|
||||
--tag git.add-ideas.de/lotobo/toolbox:0.16 \
|
||||
--push .
|
||||
```
|
||||
|
||||
@@ -264,11 +274,11 @@ needs permission to push code, releases, and container packages to
|
||||
3. Verify downloaded app assets with `sha256sum -c <asset>.sha256`; copy those
|
||||
exact values into a reviewed toolbox lock.
|
||||
4. Run the assembler and serve `build/toolbox` from a nested test path. Open
|
||||
all seven apps, switch between them, and confirm the encoded `toolbox`
|
||||
all eight apps, switch between them, and confirm the encoded `toolbox`
|
||||
context.
|
||||
5. Verify the distribution with
|
||||
`(cd build && sha256sum -c add-ideas-toolbox-0.11.0.zip.sha256)`.
|
||||
6. Commit the reviewed lock, tag the toolbox release (for example `v0.11.0`), and
|
||||
`(cd build && sha256sum -c add-ideas-toolbox-0.16.0.zip.sha256)`.
|
||||
6. Commit the reviewed lock, tag the toolbox release (for example `v0.16.0`), and
|
||||
push the branch and tag to Gitea.
|
||||
7. In Gitea, open **Releases → New release**, select the tag, and upload the
|
||||
static ZIP plus its `.sha256` file. Do not use a mutable “latest” URL in a
|
||||
@@ -283,15 +293,16 @@ must not re-resolve app versions or substitute a newer release.
|
||||
|
||||
## Existing tools
|
||||
|
||||
| Tool | State and boundary | Principal workflows | Important concrete scope | Critical considerations and integrations |
|
||||
| ------------------- | --------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
||||
| **`pdf-tools`** | Existing; dedicated repository | Merge, split, reorder, rotate and export PDF pages | Thumbnail workspace; multi-document operations; ZIP and PDF output; saved local workspace | Workers and IndexedDB; large-document memory control; future signature inspection through `crypto-tools`; metadata and safe-sharing through `privacy-tools` |
|
||||
| **`xslt-tools`** | Existing; dedicated repository | Develop, test and run XSLT transformations | XML/XSLT editors; transformation results; local files; saved projects; validation and diagnostics | Lazy SaxonJS loading; relocatable assets; useful handoffs to `data-tools`, `schema-tools` and `diff-tools` |
|
||||
| **`onenote-tools`** | Existing rich-reader release; dedicated repository | Open, browse, inspect and export OneNote sections and packages locally | Desktop/unfragmented FSSHTTPB `.one`/`.onetoc2`; none/LZX/MSZIP/Quantum and multi-cabinet `.onepkg`; trees, rich text, images, tables, ink, attachments and export | Native TypeScript worker with no Wasm; bounded parsing, rendering and export; fragmented FSSHTTP fails safely; no editing or pixel-perfect fidelity |
|
||||
| **`av-tools`** | Existing local-first v0.3.0 release; dedicated repository | Convert and lightly edit audio and video locally in the browser | Immediate native playback and basic file information; progressive stream inspection on demand; quick conversion; trim, split and crossfade concatenate; crop, resize, normalize, fades, waveform, metadata, chapters, subtitles, scene thumbnails/contact sheets, presets and export | Reviewed ffmpeg.wasm 0.12.10 ST/MT build with verified Opus and bundled label font; bounded queue, temporary storage and resource policy; isolation enables MT with automatic ST fallback; versioned core assets are immutable |
|
||||
| **`regex-tools`** | Current local-first v0.4.2 release; dedicated repository | Develop, explain, test and apply JavaScript, PCRE2, PHP, Perl, Python, Ruby, Java, C++, Go, .NET, Rust and Scala/JVM-compatible regular expressions | Deterministic syntax trees; engine-native matching, captures and bounded replacement; stable double-buffered live results; PCRE2 tracing and C17 generation; comparison; corpus apply; tests; risk/growth/benchmark analysis; generated cases; bounded minimization; validated ECMAScript formatting; project import/export and optional local persistence | Open-source regexpp and pinned local WebAssembly runtimes for PCRE2, PHP preg, legacy Perl, CPython, CRuby, TeaVM Java/Scala compatibility, libc++ C++, Go, .NET and Rust in killable workers; explicit source/licence inventories, resource limits and engine-specific offset semantics |
|
||||
| **`svg-tools`** | Initial local-first v0.1.0 release; dedicated repository | Inspect and edit SVG source, structure, geometry, references and accessibility locally | Synchronized source/tree/canvas/inspector; path and transform tools; reference analysis; optimization; CSS animation preview; exact, sanitized, raster and project export | Untrusted SVG is sanitized into an opaque-origin sandbox; bounded parsing and decompression, explicit security findings and a URI-scoped controller header exception; later milestone slices remain intentionally tracked in the app repository |
|
||||
| **`auth-tools`** | Initial local-first v0.1.0 release; dedicated repository | Generate, inspect and verify OTP credentials, and inspect, verify and test WebAuthn/passkey ceremonies locally | HOTP, TOTP and OCRA; strict provisioning URIs; QR, CSV, Google migration and plain PSKC import; bounded CBOR/authenticator-data inspection; assertion verification; an ephemeral browser ceremony lab | OTP material remains memory-only; attestation trust is not claimed; live ceremonies are enabled only at the exact dedicated `auth.toolbox.add-ideas.de` origin (or localhost), while the Portal path remains inspect-only; no raw CTAP or token administration |
|
||||
| Tool | State and boundary | Principal workflows | Important concrete scope | Critical considerations and integrations |
|
||||
| ------------------- | --------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
||||
| **`pdf-tools`** | Existing; dedicated repository | Merge, split, reorder, rotate and export PDF pages | Thumbnail workspace; multi-document operations; ZIP and PDF output; saved local workspace | Workers and IndexedDB; large-document memory control; future signature inspection through `crypto-tools`; metadata and safe-sharing through `privacy-tools` |
|
||||
| **`xslt-tools`** | Existing; dedicated repository | Develop, test and run XSLT transformations | XML/XSLT editors; transformation results; local files; saved projects; validation and diagnostics | Lazy SaxonJS loading; relocatable assets; useful handoffs to `data-tools`, `schema-tools` and `diff-tools` |
|
||||
| **`onenote-tools`** | Existing rich-reader release; dedicated repository | Open, browse, inspect and export OneNote sections and packages locally | Desktop/unfragmented FSSHTTPB `.one`/`.onetoc2`; none/LZX/MSZIP/Quantum and multi-cabinet `.onepkg`; trees, rich text, images, tables, ink, attachments and export | Native TypeScript worker with no Wasm; bounded parsing, rendering and export; fragmented FSSHTTP fails safely; no editing or pixel-perfect fidelity |
|
||||
| **`av-tools`** | Existing local-first v0.3.0 release; dedicated repository | Convert and lightly edit audio and video locally in the browser | Immediate native playback and basic file information; progressive stream inspection on demand; quick conversion; trim, split and crossfade concatenate; crop, resize, normalize, fades, waveform, metadata, chapters, subtitles, scene thumbnails/contact sheets, presets and export | Reviewed ffmpeg.wasm 0.12.10 ST/MT build with verified Opus and bundled label font; bounded queue, temporary storage and resource policy; isolation enables MT with automatic ST fallback; versioned core assets are immutable |
|
||||
| **`regex-tools`** | Current local-first v0.4.2 release; dedicated repository | Develop, explain, test and apply JavaScript, PCRE2, PHP, Perl, Python, Ruby, Java, C++, Go, .NET, Rust and Scala/JVM-compatible regular expressions | Deterministic syntax trees; engine-native matching, captures and bounded replacement; stable double-buffered live results; PCRE2 tracing and C17 generation; comparison; corpus apply; tests; risk/growth/benchmark analysis; generated cases; bounded minimization; validated ECMAScript formatting; project import/export and optional local persistence | Open-source regexpp and pinned local WebAssembly runtimes for PCRE2, PHP preg, legacy Perl, CPython, CRuby, TeaVM Java/Scala compatibility, libc++ C++, Go, .NET and Rust in killable workers; explicit source/licence inventories, resource limits and engine-specific offset semantics |
|
||||
| **`svg-tools`** | Initial local-first v0.1.0 release; dedicated repository | Inspect and edit SVG source, structure, geometry, references and accessibility locally | Synchronized source/tree/canvas/inspector; path and transform tools; reference analysis; optimization; CSS animation preview; exact, sanitized, raster and project export | Untrusted SVG is sanitized into an opaque-origin sandbox; bounded parsing and decompression, explicit security findings and a URI-scoped controller header exception; later milestone slices remain intentionally tracked in the app repository |
|
||||
| **`auth-tools`** | Current local-first v0.3.0 release; dedicated repository | Generate, migrate and diagnose OTP credentials, and inspect, verify and test WebAuthn/passkey ceremonies locally | HOTP/TOTP/OCRA with time travel, resynchronization and rotation planning; QR, Google, Aegis and encrypted PSKC migration; WebAuthn extension experiments and replayable traces; assertion, attestation, signer-chain and historical metadata-policy evaluation | Authentication material remains memory-only unless explicitly exported; redaction is deliberate but not a secrecy guarantee; live ceremonies and camera scanning are enabled only at the exact dedicated `auth.toolbox.add-ideas.de` origin, while the shared Portal path remains inspect-only; no raw CTAP administration |
|
||||
| **`sudoku-tools`** | Current local-first v0.2.1 release; dedicated repository | Set, play, generate, analyse and solve classic, Killer and rich variant Sudoku locally | 4×4–16×16 grids; registry-backed constraint packs including cages, lines, dots, XV, inequalities, indexing and Fog of War; staged hints, candidate maintenance, advanced logical techniques, setter quality checks, mixed-variant generation, source-preserving f-puzzles/SudokuPad interoperability, autosave recovery and searchable local projects | Worker-bounded solving, generation and quality analysis; strict inert imported-visual validation; fog-safe play assistance; IndexedDB history with memory fallback; stable workspace geometry, responsive zoom and pan, a 3×3 standard keypad, tap selection, patterned colours, accessibility controls and an offline-capable PWA shell |
|
||||
|
||||
## Planned tools
|
||||
|
||||
|
||||
@@ -3,7 +3,7 @@ services:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: Containerfile
|
||||
image: git.add-ideas.de/lotobo/toolbox:0.11.0
|
||||
image: git.add-ideas.de/lotobo/toolbox:0.16.0
|
||||
restart: unless-stopped
|
||||
read_only: true
|
||||
ports:
|
||||
|
||||
+3
-3
@@ -6,9 +6,9 @@ services:
|
||||
context: .
|
||||
dockerfile: Containerfile.release
|
||||
args:
|
||||
TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.11.0}"
|
||||
TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-752c91606ba4249da8eb0a6d2d062b9dfe10fec988f16d428ba1c9b899ba4771}"
|
||||
image: "git.add-ideas.de/lotobo/toolbox:${TOOLBOX_RELEASE_VERSION:-0.11.0}"
|
||||
TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.16.0}"
|
||||
TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-2ae120dd54196428893420a236b32ee260a08af3e0d390362da3457d85110f4e}"
|
||||
image: "git.add-ideas.de/lotobo/toolbox:${TOOLBOX_RELEASE_VERSION:-0.16.0}"
|
||||
restart: unless-stopped
|
||||
read_only: true
|
||||
tmpfs:
|
||||
|
||||
+6
-1
@@ -14,6 +14,11 @@ map $uri $toolbox_access_control_allow_origin {
|
||||
"/apps/svg/canvas-frame-controller.js" "*";
|
||||
}
|
||||
|
||||
map $host $toolbox_permissions_policy {
|
||||
default "camera=(), microphone=(), geolocation=(), payment=(), usb=()";
|
||||
"auth.toolbox.add-ideas.de" "camera=(self), microphone=(), geolocation=(), payment=(), usb=()";
|
||||
}
|
||||
|
||||
server {
|
||||
listen 8080;
|
||||
listen [::]:8080;
|
||||
@@ -31,7 +36,7 @@ server {
|
||||
add_header Cross-Origin-Embedder-Policy "require-corp" always;
|
||||
add_header Cross-Origin-Resource-Policy $toolbox_resource_policy always;
|
||||
add_header Access-Control-Allow-Origin $toolbox_access_control_allow_origin always;
|
||||
add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=(), usb=()" always;
|
||||
add_header Permissions-Policy $toolbox_permissions_policy always;
|
||||
add_header Content-Security-Policy "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob:; font-src 'self' data:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self'" always;
|
||||
add_header Cache-Control $toolbox_cache_control always;
|
||||
|
||||
|
||||
Generated
+2
-2
@@ -1,12 +1,12 @@
|
||||
{
|
||||
"name": "@add-ideas/toolbox-portal",
|
||||
"version": "0.2.13",
|
||||
"version": "0.2.18",
|
||||
"lockfileVersion": 3,
|
||||
"requires": true,
|
||||
"packages": {
|
||||
"": {
|
||||
"name": "@add-ideas/toolbox-portal",
|
||||
"version": "0.2.13",
|
||||
"version": "0.2.18",
|
||||
"license": "AGPL-3.0-only",
|
||||
"dependencies": {
|
||||
"@add-ideas/toolbox-contract": "^0.2.3",
|
||||
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "@add-ideas/toolbox-portal",
|
||||
"version": "0.2.13",
|
||||
"version": "0.2.18",
|
||||
"license": "AGPL-3.0-only",
|
||||
"private": true,
|
||||
"type": "module",
|
||||
|
||||
+2
-2
@@ -1,8 +1,8 @@
|
||||
# Corresponding source
|
||||
|
||||
The source code corresponding to add·ideas Toolbox Portal 0.2.13 is available at:
|
||||
The source code corresponding to add·ideas Toolbox Portal 0.2.18 is available at:
|
||||
|
||||
https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.11.0
|
||||
https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.16.0
|
||||
|
||||
Each bundled application contains its own `SOURCE.md`, license, and third-party
|
||||
license materials. The application sources are also linked from the portal.
|
||||
|
||||
@@ -36,6 +36,10 @@
|
||||
{
|
||||
"manifest": "./apps/auth/toolbox-app.json",
|
||||
"enabled": true
|
||||
},
|
||||
{
|
||||
"manifest": "./apps/sudoku/toolbox-app.json",
|
||||
"enabled": true
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -1,8 +1,8 @@
|
||||
{
|
||||
"$schema": "./toolbox-release-lock.schema.json",
|
||||
"schemaVersion": 1,
|
||||
"releaseVersion": "0.11.0",
|
||||
"portalVersion": "0.2.13",
|
||||
"releaseVersion": "0.16.0",
|
||||
"portalVersion": "0.2.18",
|
||||
"catalogue": {
|
||||
"id": "de.add-ideas.toolbox",
|
||||
"name": "add·ideas Toolbox",
|
||||
@@ -57,10 +57,17 @@
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.auth-tools",
|
||||
"version": "0.1.0",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.1.0/auth-tools-0.1.0.zip",
|
||||
"sha256": "1f65f07e2d89c1ff115ae276542f406277fc01c85e8845648522708a9c8f3f18",
|
||||
"version": "0.3.0",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.3.0/auth-tools-0.3.0.zip",
|
||||
"sha256": "ac80a711a0fc00d554505e6278aa3557eca4248b6da2ac9e2bae74bc0b26e58e",
|
||||
"target": "auth"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.sudoku-tools",
|
||||
"version": "0.2.1",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/sudoku-tools/releases/download/v0.2.1/sudoku-tools-0.2.1.zip",
|
||||
"sha256": "3987813a3bcd24056b9ca9607ba5d74a094d54c15b0e8a7966df7373e87df67a",
|
||||
"target": "sudoku"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -1,8 +1,8 @@
|
||||
{
|
||||
"$schema": "./toolbox-release-lock.schema.json",
|
||||
"schemaVersion": 1,
|
||||
"releaseVersion": "0.11.0",
|
||||
"portalVersion": "0.2.13",
|
||||
"releaseVersion": "0.16.0",
|
||||
"portalVersion": "0.2.18",
|
||||
"catalogue": {
|
||||
"id": "de.add-ideas.toolbox",
|
||||
"name": "add·ideas Toolbox",
|
||||
@@ -57,10 +57,17 @@
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.auth-tools",
|
||||
"version": "0.1.0",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.1.0/auth-tools-0.1.0.zip",
|
||||
"sha256": "1f65f07e2d89c1ff115ae276542f406277fc01c85e8845648522708a9c8f3f18",
|
||||
"version": "0.3.0",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.3.0/auth-tools-0.3.0.zip",
|
||||
"sha256": "ac80a711a0fc00d554505e6278aa3557eca4248b6da2ac9e2bae74bc0b26e58e",
|
||||
"target": "auth"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.sudoku-tools",
|
||||
"version": "0.2.1",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/sudoku-tools/releases/download/v0.2.1/sudoku-tools-0.2.1.zip",
|
||||
"sha256": "3987813a3bcd24056b9ca9607ba5d74a094d54c15b0e8a7966df7373e87df67a",
|
||||
"target": "sudoku"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -83,7 +83,7 @@ function makeLock(artifact: string, sha256: string) {
|
||||
return {
|
||||
schemaVersion: 1,
|
||||
releaseVersion: '0.1.0',
|
||||
portalVersion: '0.2.13',
|
||||
portalVersion: '0.2.18',
|
||||
catalogue: {
|
||||
id: 'de.add-ideas.toolbox',
|
||||
name: 'Test Toolbox',
|
||||
|
||||
@@ -93,6 +93,7 @@ describe('production deployment', () => {
|
||||
'regex',
|
||||
'svg',
|
||||
'auth',
|
||||
'sudoku',
|
||||
]) {
|
||||
expect(containerfile).toContain(
|
||||
`test -f /tmp/toolbox/apps/${app}/toolbox-app.json`
|
||||
@@ -166,6 +167,18 @@ describe('production deployment', () => {
|
||||
expect(compose).not.toContain('addideas-auth-stripprefix');
|
||||
});
|
||||
|
||||
it('grants camera capture only to the isolated authentication hostname', () => {
|
||||
expect(nginxConfig).toMatch(
|
||||
/map \$host \$toolbox_permissions_policy\s*\{\s*default "camera=\(\), microphone=\(\), geolocation=\(\), payment=\(\), usb=\(\)";\s*"auth\.toolbox\.add-ideas\.de" "camera=\(self\), microphone=\(\), geolocation=\(\), payment=\(\), usb=\(\)";\s*\}/mu
|
||||
);
|
||||
expect(nginxConfig).toContain(
|
||||
'add_header Permissions-Policy $toolbox_permissions_policy always;'
|
||||
);
|
||||
expect(
|
||||
nginxConfig.match(/^\s*add_header Permissions-Policy /gmu)
|
||||
).toHaveLength(1);
|
||||
});
|
||||
|
||||
it('quotes nginx regular expressions that contain brace quantifiers', () => {
|
||||
expect(nginxConfig).toContain(
|
||||
'"~^/(?:.*/)?assets/.*-[A-Za-z0-9_-]{8,}\\.[^/]+$"'
|
||||
|
||||
+6
-3
@@ -335,12 +335,12 @@ describe('portal UI', () => {
|
||||
expect(
|
||||
screen.getByRole('heading', {
|
||||
level: 2,
|
||||
name: 'Your document tools, in one calm place.',
|
||||
name: 'Your local tools, in one calm place.',
|
||||
})
|
||||
).toBeInTheDocument();
|
||||
expect(
|
||||
screen.getAllByRole('heading', {
|
||||
name: 'Your document tools, in one calm place.',
|
||||
name: 'Your local tools, in one calm place.',
|
||||
})
|
||||
).toHaveLength(1);
|
||||
|
||||
@@ -415,6 +415,7 @@ describe('portal UI', () => {
|
||||
'de.add-ideas.onenote-tools',
|
||||
'de.add-ideas.svg-tools',
|
||||
'de.add-ideas.auth-tools',
|
||||
'de.add-ideas.sudoku-tools',
|
||||
],
|
||||
hidden: [],
|
||||
theme: 'light',
|
||||
@@ -434,6 +435,7 @@ describe('portal UI', () => {
|
||||
screen.getByTestId('app-card-de.add-ideas.onenote-tools'),
|
||||
screen.getByTestId('app-card-de.add-ideas.svg-tools'),
|
||||
screen.getByTestId('app-card-de.add-ideas.auth-tools'),
|
||||
screen.getByTestId('app-card-de.add-ideas.sudoku-tools'),
|
||||
];
|
||||
cards.forEach((card, index) => {
|
||||
const rect = {
|
||||
@@ -464,7 +466,7 @@ describe('portal UI', () => {
|
||||
within(tools)
|
||||
.getAllByRole('heading', { level: 3 })
|
||||
.map((heading) => heading.textContent)
|
||||
).toEqual(['XSLT', 'PDF', 'OneNote', 'SVG', 'OTP & Passkeys']);
|
||||
).toEqual(['XSLT', 'PDF', 'OneNote', 'SVG', 'OTP & Passkeys', 'Sudoku']);
|
||||
});
|
||||
expect(
|
||||
JSON.parse(localStorage.getItem(PREFERENCES_KEY) ?? '{}').order
|
||||
@@ -474,6 +476,7 @@ describe('portal UI', () => {
|
||||
'de.add-ideas.onenote-tools',
|
||||
'de.add-ideas.svg-tools',
|
||||
'de.add-ideas.auth-tools',
|
||||
'de.add-ideas.sudoku-tools',
|
||||
]);
|
||||
});
|
||||
|
||||
|
||||
+3
-3
@@ -297,7 +297,7 @@ export default function App() {
|
||||
Privacy details up front · useful by default
|
||||
</p>
|
||||
<h2 id="page-title">
|
||||
Your document tools,
|
||||
Your local tools,
|
||||
<br /> <span>in one calm place.</span>
|
||||
</h2>
|
||||
<p className="hero-copy">
|
||||
@@ -489,9 +489,9 @@ export default function App() {
|
||||
</span>
|
||||
</p>
|
||||
<span>
|
||||
Portal v0.2.13 ·{' '}
|
||||
Portal v0.2.18 ·{' '}
|
||||
<a
|
||||
href="https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.11.0"
|
||||
href="https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.16.0"
|
||||
target="_blank"
|
||||
rel="noopener noreferrer"
|
||||
>
|
||||
|
||||
@@ -10,7 +10,7 @@ describe('catalogue loading', () => {
|
||||
const loaded = await loadCatalogue('/toolbox.catalog.json');
|
||||
expect(loaded.catalogue.name).toBe('add·ideas Toolbox');
|
||||
expect(loaded.homeUrl).toBe('http://localhost:3000/');
|
||||
expect(loaded.apps).toHaveLength(5);
|
||||
expect(loaded.apps).toHaveLength(6);
|
||||
expect(loaded.apps[0]).toMatchObject({
|
||||
id: 'de.add-ideas.pdf-tools',
|
||||
name: 'PDF Workbench',
|
||||
@@ -42,6 +42,7 @@ describe('catalogue loading', () => {
|
||||
'de.add-ideas.onenote-tools',
|
||||
'de.add-ideas.svg-tools',
|
||||
'de.add-ideas.auth-tools',
|
||||
'de.add-ideas.sudoku-tools',
|
||||
]);
|
||||
expect(loaded.unavailable).toHaveLength(1);
|
||||
expect(loaded.unavailable[0]?.reason).toMatch(/HTTP 404/);
|
||||
|
||||
@@ -160,6 +160,48 @@ export const authManifest: ToolboxAppManifest = {
|
||||
},
|
||||
};
|
||||
|
||||
export const sudokuManifest: ToolboxAppManifest = {
|
||||
schemaVersion: 1,
|
||||
id: 'de.add-ideas.sudoku-tools',
|
||||
name: 'Sudoku Tools',
|
||||
version: '0.1.0',
|
||||
description:
|
||||
'Set, play, solve and analyse Sudoku puzzles locally in the browser.',
|
||||
entry: './',
|
||||
icon: './favicon.svg',
|
||||
categories: ['games', 'puzzles', 'logic'],
|
||||
tags: ['sudoku', 'killer', 'solver', 'setter', 'generator', 'candidates'],
|
||||
integration: {
|
||||
contextVersion: 1,
|
||||
launchModes: ['navigate', 'new-tab'],
|
||||
embedding: 'unsupported',
|
||||
},
|
||||
requirements: {
|
||||
secureContext: false,
|
||||
workers: true,
|
||||
indexedDb: true,
|
||||
crossOriginIsolated: false,
|
||||
topLevelContext: false,
|
||||
},
|
||||
privacy: {
|
||||
processing: 'local',
|
||||
fileUploads: false,
|
||||
telemetry: false,
|
||||
label: 'Puzzles and progress stay in this browser; nothing is uploaded.',
|
||||
},
|
||||
source: {
|
||||
repository: 'https://git.add-ideas.de/lotobo/sudoku-tools',
|
||||
license: 'GPL-3.0-or-later',
|
||||
},
|
||||
actions: [
|
||||
{
|
||||
id: 'source',
|
||||
label: 'Source',
|
||||
url: 'https://git.add-ideas.de/lotobo/sudoku-tools',
|
||||
},
|
||||
],
|
||||
};
|
||||
|
||||
export const catalogue: ToolboxCatalog = {
|
||||
schemaVersion: 1,
|
||||
id: 'de.add-ideas.toolbox',
|
||||
@@ -172,6 +214,7 @@ export const catalogue: ToolboxCatalog = {
|
||||
{ manifest: './apps/onenote/toolbox-app.json', enabled: true },
|
||||
{ manifest: './apps/svg/toolbox-app.json', enabled: true },
|
||||
{ manifest: './apps/auth/toolbox-app.json', enabled: true },
|
||||
{ manifest: './apps/sudoku/toolbox-app.json', enabled: true },
|
||||
],
|
||||
};
|
||||
|
||||
@@ -197,6 +240,8 @@ export function catalogueFetch(overrides: Record<string, Response> = {}) {
|
||||
return Response.json(svgManifest);
|
||||
if (url.pathname.endsWith('/apps/auth/toolbox-app.json'))
|
||||
return Response.json(authManifest);
|
||||
if (url.pathname.endsWith('/apps/sudoku/toolbox-app.json'))
|
||||
return Response.json(sudokuManifest);
|
||||
return new Response('Not found', { status: 404 });
|
||||
};
|
||||
}
|
||||
|
||||
@@ -52,4 +52,15 @@ describe('compact tool presentation', () => {
|
||||
'Inspect and test authentication locally.'
|
||||
);
|
||||
});
|
||||
|
||||
it('uses the compact Sudoku tile copy', () => {
|
||||
const sudoku = app(
|
||||
'de.add-ideas.sudoku-tools',
|
||||
'Sudoku Tools',
|
||||
'Set, play, solve and analyse Sudoku puzzles locally in the browser.'
|
||||
);
|
||||
|
||||
expect(shortToolTitle(sudoku)).toBe('Sudoku');
|
||||
expect(shortToolDescription(sudoku)).toBe('Set, play and solve locally.');
|
||||
});
|
||||
});
|
||||
|
||||
@@ -29,6 +29,10 @@ const PRESENTATION: Record<string, { title: string; description: string }> = {
|
||||
title: 'OTP & Passkeys',
|
||||
description: 'Inspect and test authentication locally.',
|
||||
},
|
||||
'de.add-ideas.sudoku-tools': {
|
||||
title: 'Sudoku',
|
||||
description: 'Set, play and solve locally.',
|
||||
},
|
||||
};
|
||||
|
||||
export function shortToolTitle(app: ResolvedApp): string {
|
||||
|
||||
Reference in New Issue
Block a user