Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
 zemion
|
68a7bcf89f | ||
|
zemion
|
673960a5cf | ||
|
zemion
|
33d6cd1cfd | ||
|
zemion
|
d1d4b3f44e | ||
|
zemion
|
11a2c140ce | ||
|
zemion
|
3b1a13b84d | ||
|
zemion
|
cd54847af8 | ||
|
zemion
|
9dbbdb5ed2 | ||
|
zemion
|
f3c634120c | ||
|
zemion
|
ae74d22cde | ||
|
zemion
|
4a664e90eb | ||
|
zemion
|
13af32f535 |
+2
-2
@@ -5,5 +5,5 @@ TRAEFIK_NETWORK=internal
|
|||||||
TRAEFIK_CERT_RESOLVER=netcup
|
TRAEFIK_CERT_RESOLVER=netcup
|
||||||
|
|
||||||
# Keep these two values paired when deploying a newer published toolbox release.
|
# Keep these two values paired when deploying a newer published toolbox release.
|
||||||
TOOLBOX_RELEASE_VERSION=0.20.0
|
TOOLBOX_RELEASE_VERSION=0.20.6
|
||||||
TOOLBOX_RELEASE_SHA256=450618902a1ee87405da463881e6f51f685691c2081259aff9c25a4aa6fe22ed
|
TOOLBOX_RELEASE_SHA256=37ccd887793d7a147ceb3b69933faa969a006c59d6b1fbec775d3622279cedac
|
||||||
|
|||||||
@@ -2,8 +2,8 @@ ARG NGINX_IMAGE=nginxinc/nginx-unprivileged:1.31.3-alpine@sha256:18d67281256ded3
|
|||||||
|
|
||||||
FROM ${NGINX_IMAGE} AS release
|
FROM ${NGINX_IMAGE} AS release
|
||||||
|
|
||||||
ARG TOOLBOX_RELEASE_VERSION=0.20.0
|
ARG TOOLBOX_RELEASE_VERSION=0.20.6
|
||||||
ARG TOOLBOX_RELEASE_SHA256=450618902a1ee87405da463881e6f51f685691c2081259aff9c25a4aa6fe22ed
|
ARG TOOLBOX_RELEASE_SHA256=37ccd887793d7a147ceb3b69933faa969a006c59d6b1fbec775d3622279cedac
|
||||||
ARG TOOLBOX_RELEASE_BASE_URL=https://git.add-ideas.de/lotobo/toolbox-portal/releases/download
|
ARG TOOLBOX_RELEASE_BASE_URL=https://git.add-ideas.de/lotobo/toolbox-portal/releases/download
|
||||||
|
|
||||||
RUN set -eu; \
|
RUN set -eu; \
|
||||||
@@ -43,6 +43,7 @@ RUN set -eu; \
|
|||||||
test -f /tmp/toolbox/apps/diff/toolbox-app.json; \
|
test -f /tmp/toolbox/apps/diff/toolbox-app.json; \
|
||||||
test -f /tmp/toolbox/apps/time/toolbox-app.json; \
|
test -f /tmp/toolbox/apps/time/toolbox-app.json; \
|
||||||
test -f /tmp/toolbox/apps/text/toolbox-app.json; \
|
test -f /tmp/toolbox/apps/text/toolbox-app.json; \
|
||||||
|
test -f /tmp/toolbox/apps/translator/toolbox-app.json; \
|
||||||
test -f /tmp/toolbox/apps/unicode/toolbox-app.json; \
|
test -f /tmp/toolbox/apps/unicode/toolbox-app.json; \
|
||||||
test -f /tmp/toolbox/apps/flow/toolbox-app.json; \
|
test -f /tmp/toolbox/apps/flow/toolbox-app.json; \
|
||||||
test -f /tmp/toolbox/apps/subtitle/toolbox-app.json; \
|
test -f /tmp/toolbox/apps/subtitle/toolbox-app.json; \
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
# add·ideas Toolbox Portal
|
# add·ideas Toolbox Portal
|
||||||
|
|
||||||
`toolbox-portal` is the static launcher and release assembler for the add·ideas
|
`toolbox-portal` is the static launcher and release assembler for the add·ideas
|
||||||
browser toolbox. Version `0.2.23` reads one same-origin catalogue, shows each app
|
browser toolbox. Version `0.2.24` reads one same-origin catalogue, shows each app
|
||||||
as a compact launch tile, and keeps personal pins, drag-and-drop ordering,
|
as a compact launch tile, and keeps personal pins, drag-and-drop ordering,
|
||||||
visibility, and appearance in the current browser. Pinned tools have their own
|
visibility, and appearance in the current browser. Pinned tools have their own
|
||||||
section; search, category, and clickable tag filters stay close to the tool
|
section; search, category, and clickable tag filters stay close to the tool
|
||||||
@@ -80,7 +80,7 @@ privacy and executable-code warning. Light, dark, and system modes are supported
|
|||||||
## Production deployment behind Traefik
|
## Production deployment behind Traefik
|
||||||
|
|
||||||
The committed `compose.yaml` is the shortest production path. Its release
|
The committed `compose.yaml` is the shortest production path. Its release
|
||||||
container downloads the immutable Toolbox 0.20.0 ZIP during the image build,
|
container downloads the immutable Toolbox 0.20.6 ZIP during the image build,
|
||||||
verifies SHA-256 before extracting it, and then copies only the verified static
|
verifies SHA-256 before extracting it, and then copies only the verified static
|
||||||
files into the pinned unprivileged nginx image. Node.js and a local portal
|
files into the pinned unprivileged nginx image. Node.js and a local portal
|
||||||
assembly are not required on the deployment host.
|
assembly are not required on the deployment host.
|
||||||
@@ -99,7 +99,17 @@ Deploy a fresh clone with:
|
|||||||
```sh
|
```sh
|
||||||
git clone https://git.add-ideas.de/lotobo/toolbox-portal.git
|
git clone https://git.add-ideas.de/lotobo/toolbox-portal.git
|
||||||
cd toolbox-portal
|
cd toolbox-portal
|
||||||
docker compose up -d --build
|
./scripts/deploy-update.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
If you prefer the inline command:
|
||||||
|
|
||||||
|
```sh
|
||||||
|
git fetch origin --tags && \
|
||||||
|
git pull --ff-only origin main && \
|
||||||
|
{ TAG="$(git describe --tags --exact-match 2>/dev/null || git describe --tags --abbrev=0 2>/dev/null || true)"; \
|
||||||
|
if [ -n "$TAG" ]; then echo "$TAG"; else echo "warning: no matching tags found"; fi; } && \
|
||||||
|
docker compose up -d --build && \
|
||||||
docker compose ps
|
docker compose ps
|
||||||
```
|
```
|
||||||
|
|
||||||
@@ -111,6 +121,26 @@ release version, and matching checksum can be overridden through environment
|
|||||||
variables; copy `.env.example` to `.env` only when an override is needed. For
|
variables; copy `.env.example` to `.env` only when an override is needed. For
|
||||||
example, set `TOOLBOX_HOST=staging.toolbox.add-ideas.de` for a staging host.
|
example, set `TOOLBOX_HOST=staging.toolbox.add-ideas.de` for a staging host.
|
||||||
|
|
||||||
|
## One-shot release wrapper
|
||||||
|
|
||||||
|
For release assembly and publishing, use the repository-local wrapper:
|
||||||
|
|
||||||
|
```sh
|
||||||
|
./scripts/release.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
That script performs (in order):
|
||||||
|
|
||||||
|
- optional `npm test`
|
||||||
|
- `npm run build`
|
||||||
|
- `npm run assemble` (using the lockfile’s `releaseVersion`)
|
||||||
|
- tag and push (`v<releaseVersion>`)
|
||||||
|
- publish/update a Gitea release and upload
|
||||||
|
`add-ideas-toolbox-<version>.zip` and `.sha256`
|
||||||
|
|
||||||
|
Useful flags include `--skip-tests`, `--skip-git-push`, `--skip-publish`,
|
||||||
|
`--tag`, `--owner`, `--repo`, and `--dry-run`.
|
||||||
|
|
||||||
The same container also exposes only the packaged authentication app at
|
The same container also exposes only the packaged authentication app at
|
||||||
`https://auth.toolbox.add-ideas.de/`. Traefik adds the internal `/apps/auth`
|
`https://auth.toolbox.add-ideas.de/`. Traefik adds the internal `/apps/auth`
|
||||||
prefix while the public URL remains `/`, so assets remain relative and the browser
|
prefix while the public URL remains `/`, so assets remain relative and the browser
|
||||||
@@ -144,10 +174,10 @@ The app release should also publish a matching `.sha256` sidecar. The manifest
|
|||||||
must declare the pinned reverse-DNS id and version. Application and portal
|
must declare the pinned reverse-DNS id and version. Application and portal
|
||||||
versions are independent.
|
versions are independent.
|
||||||
|
|
||||||
`release/toolbox.lock.json` is the reviewed Toolbox v0.20.0 / Portal v0.2.23
|
`release/toolbox.lock.json` is the reviewed Toolbox v0.20.6 / Portal v0.2.24
|
||||||
lock. Its URLs and checksums pin PDF Tools 0.4.4, XSLT Tools 0.4.3, OneNote
|
lock. Its URLs and checksums pin PDF Tools 0.4.4, XSLT Tools 0.4.3, OneNote
|
||||||
Tools 0.3.4, Audio & Video Tools 0.3.0, Regex Tools 0.4.2, OTP & Passkey Tools
|
Tools 0.3.4, Audio & Video Tools 0.3.0, Regex Tools 0.4.2, OTP & Passkey Tools
|
||||||
0.3.1, Sudoku Tools 0.2.1, and the coordinated 0.2.0 releases of SVG, Colour,
|
0.3.2, Translator Tools 0.1.3, Sudoku Tools 0.2.1, and the coordinated 0.2.0 releases of SVG, Colour,
|
||||||
Office, Image, File, EPUB, Archive, Privacy, Crypto, Barcode, Network, Geo,
|
Office, Image, File, EPUB, Archive, Privacy, Crypto, Barcode, Network, Geo,
|
||||||
Helper, Random, Data, Diff, Time, Text, Unicode, Flow, Subtitle, MIDI, 3D,
|
Helper, Random, Data, Diff, Time, Text, Unicode, Flow, Subtitle, MIDI, 3D,
|
||||||
Query, Scan, Package, Label, Font, Fixture, Minimize, Format Lab, Repro, Schema,
|
Query, Scan, Package, Label, Font, Fixture, Minimize, Format Lab, Repro, Schema,
|
||||||
@@ -355,6 +385,16 @@ the exact tag, install with `npm ci`, run the same verification/assembly command
|
|||||||
and upload only the already-created ZIP/checksum and OCI image. The workflow
|
and upload only the already-created ZIP/checksum and OCI image. The workflow
|
||||||
must not re-resolve app versions or substitute a newer release.
|
must not re-resolve app versions or substitute a newer release.
|
||||||
|
|
||||||
|
## Toolbox 0.20.6 token QR display
|
||||||
|
|
||||||
|
Toolbox 0.20.6 bundles OTP & Passkey Tools 0.3.2. Use **Show QR code** in
|
||||||
|
the credential editor or beside an imported token to scan its enrollment code
|
||||||
|
with another device. The large dialog preserves issuer, account, secret,
|
||||||
|
algorithm, digits, period or HOTP counter, and provides a local SVG download.
|
||||||
|
QR codes remain black on white in both themes. Rendering errors are visible,
|
||||||
|
and Escape closes the display. The deployment defaults pin this release and
|
||||||
|
its verified archive checksum; pull `main` and rebuild with Docker Compose.
|
||||||
|
|
||||||
## Toolbox 0.20.0 portfolio expansion
|
## Toolbox 0.20.0 portfolio expansion
|
||||||
|
|
||||||
Toolbox 0.20.0 publishes the coordinated multi-repository depth pass. It adds:
|
Toolbox 0.20.0 publishes the coordinated multi-repository depth pass. It adds:
|
||||||
@@ -383,58 +423,58 @@ exact immutable app archives and checksums.
|
|||||||
|
|
||||||
## Existing tools
|
## Existing tools
|
||||||
|
|
||||||
| Tool | State and boundary | Principal workflows | Important concrete scope | Critical considerations and integrations |
|
| Tool | State and boundary | Principal workflows | Important concrete scope | Critical considerations and integrations |
|
||||||
| -------------------- | ---------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
| -------------------- | ---------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
|
||||||
| **`pdf-tools`** | Existing; dedicated repository | Merge, split, reorder, rotate and export PDF pages | Thumbnail workspace; multi-document operations; ZIP and PDF output; saved local workspace | Workers and IndexedDB; large-document memory control; future signature inspection through `crypto-tools`; metadata and safe-sharing through `privacy-tools` |
|
| **`pdf-tools`** | Existing; dedicated repository | Merge, split, reorder, rotate and export PDF pages | Thumbnail workspace; multi-document operations; ZIP and PDF output; saved local workspace | Workers and IndexedDB; large-document memory control; future signature inspection through `crypto-tools`; metadata and safe-sharing through `privacy-tools` |
|
||||||
| **`xslt-tools`** | Existing; dedicated repository | Develop, test and run XSLT transformations | XML/XSLT editors; transformation results; local files; saved projects; validation and diagnostics | Lazy SaxonJS loading; relocatable assets; useful handoffs to `data-tools`, `schema-tools` and `diff-tools` |
|
| **`xslt-tools`** | Existing; dedicated repository | Develop, test and run XSLT transformations | XML/XSLT editors; transformation results; local files; saved projects; validation and diagnostics | Lazy SaxonJS loading; relocatable assets; useful handoffs to `data-tools`, `schema-tools` and `diff-tools` |
|
||||||
| **`onenote-tools`** | Existing rich-reader release; dedicated repository | Open, browse, inspect and export OneNote sections and packages locally | Desktop/unfragmented FSSHTTPB `.one`/`.onetoc2`; none/LZX/MSZIP/Quantum and multi-cabinet `.onepkg`; trees, rich text, images, tables, ink, attachments and export | Native TypeScript worker with no Wasm; bounded parsing, rendering and export; fragmented FSSHTTP fails safely; no editing or pixel-perfect fidelity |
|
| **`onenote-tools`** | Existing rich-reader release; dedicated repository | Open, browse, inspect and export OneNote sections and packages locally | Desktop/unfragmented FSSHTTPB `.one`/`.onetoc2`; none/LZX/MSZIP/Quantum and multi-cabinet `.onepkg`; trees, rich text, images, tables, ink, attachments and export | Native TypeScript worker with no Wasm; bounded parsing, rendering and export; fragmented FSSHTTP fails safely; no editing or pixel-perfect fidelity |
|
||||||
| **`av-tools`** | Existing local-first v0.3.0 release; dedicated repository | Convert and lightly edit audio and video locally in the browser | Immediate native playback and basic file information; progressive stream inspection on demand; quick conversion; trim, split and crossfade concatenate; crop, resize, normalize, fades, waveform, metadata, chapters, subtitles, scene thumbnails/contact sheets, presets and export | Reviewed ffmpeg.wasm 0.12.10 ST/MT build with verified Opus and bundled label font; bounded queue, temporary storage and resource policy; isolation enables MT with automatic ST fallback; versioned core assets are immutable |
|
| **`av-tools`** | Existing local-first v0.3.0 release; dedicated repository | Convert and lightly edit audio and video locally in the browser | Immediate native playback and basic file information; progressive stream inspection on demand; quick conversion; trim, split and crossfade concatenate; crop, resize, normalize, fades, waveform, metadata, chapters, subtitles, scene thumbnails/contact sheets, presets and export | Reviewed ffmpeg.wasm 0.12.10 ST/MT build with verified Opus and bundled label font; bounded queue, temporary storage and resource policy; isolation enables MT with automatic ST fallback; versioned core assets are immutable |
|
||||||
| **`regex-tools`** | Current local-first v0.4.2 release; dedicated repository | Develop, explain, test and apply JavaScript, PCRE2, PHP, Perl, Python, Ruby, Java, C++, Go, .NET, Rust and Scala/JVM-compatible regular expressions | Deterministic syntax trees; engine-native matching, captures and bounded replacement; stable double-buffered live results; PCRE2 tracing and C17 generation; comparison; corpus apply; tests; risk/growth/benchmark analysis; generated cases; bounded minimization; validated ECMAScript formatting; project import/export and optional local persistence | Open-source regexpp and pinned local WebAssembly runtimes for PCRE2, PHP preg, legacy Perl, CPython, CRuby, TeaVM Java/Scala compatibility, libc++ C++, Go, .NET and Rust in killable workers; explicit source/licence inventories, resource limits and engine-specific offset semantics |
|
| **`regex-tools`** | Current local-first v0.4.2 release; dedicated repository | Develop, explain, test and apply JavaScript, PCRE2, PHP, Perl, Python, Ruby, Java, C++, Go, .NET, Rust and Scala/JVM-compatible regular expressions | Deterministic syntax trees; engine-native matching, captures and bounded replacement; stable double-buffered live results; PCRE2 tracing and C17 generation; comparison; corpus apply; tests; risk/growth/benchmark analysis; generated cases; bounded minimization; validated ECMAScript formatting; project import/export and optional local persistence | Open-source regexpp and pinned local WebAssembly runtimes for PCRE2, PHP preg, legacy Perl, CPython, CRuby, TeaVM Java/Scala compatibility, libc++ C++, Go, .NET and Rust in killable workers; explicit source/licence inventories, resource limits and engine-specific offset semantics |
|
||||||
| **`svg-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect and edit SVG source, structure, geometry, references and accessibility locally | Synchronized source/tree/canvas/inspector; path and transform tools; reference analysis; optimization; app-owned, validated opacity-animation preview; exact, sanitized, raster and project export | Untrusted SVG is sanitized into an opaque-origin sandbox; bounded parsing and decompression, explicit security findings and a URI-scoped controller header exception; later milestone slices remain intentionally tracked in the app repository |
|
| **`svg-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect and edit SVG source, structure, geometry, references and accessibility locally | Synchronized source/tree/canvas/inspector; path and transform tools; reference analysis; optimization; app-owned, validated opacity-animation preview; exact, sanitized, raster and project export | Untrusted SVG is sanitized into an opaque-origin sandbox; bounded parsing and decompression, explicit security findings and a URI-scoped controller header exception; later milestone slices remain intentionally tracked in the app repository |
|
||||||
| **`auth-tools`** | Current local-first v0.3.1 release; dedicated repository | Generate, migrate and diagnose OTP credentials, and inspect, verify and test WebAuthn/passkey ceremonies locally | HOTP/TOTP/OCRA with time travel, resynchronization and rotation planning; QR, Google, Aegis and encrypted PSKC migration; WebAuthn extension experiments and replayable traces; assertion, attestation, signer-chain and historical metadata-policy evaluation | Authentication material remains memory-only unless explicitly exported; redaction is deliberate but not a secrecy guarantee; live ceremonies and camera scanning are enabled only at the exact dedicated `auth.toolbox.add-ideas.de` origin, while the shared Portal path remains inspect-only; v0.3.1 corrects source provenance and cross-timezone artifact reproducibility; no raw CTAP administration |
|
| **`auth-tools`** | Current local-first v0.3.2 release; dedicated repository | Generate, migrate and diagnose OTP credentials, and inspect, verify and test WebAuthn/passkey ceremonies locally | HOTP/TOTP/OCRA with time travel, resynchronization and rotation planning; large per-token enrollment QR display with SVG download; QR, Google, Aegis and encrypted PSKC migration; WebAuthn extension experiments and replayable traces; assertion, attestation, signer-chain and historical metadata-policy evaluation | Authentication material remains memory-only unless explicitly exported; enrollment QR codes contain the token secret; redaction is deliberate but not a secrecy guarantee; live ceremonies and camera scanning are enabled only at the exact dedicated `auth.toolbox.add-ideas.de` origin, while the shared Portal path remains inspect-only; no raw CTAP administration |
|
||||||
| **`sudoku-tools`** | Current local-first v0.2.1 release; dedicated repository | Set, play, generate, analyse and solve classic, Killer and rich variant Sudoku locally | 4×4–16×16 grids; registry-backed constraint packs including cages, lines, dots, XV, inequalities, indexing and Fog of War; staged hints, candidate maintenance, advanced logical techniques, setter quality checks, mixed-variant generation, source-preserving f-puzzles/SudokuPad interoperability, autosave recovery and searchable local projects | Worker-bounded solving, generation and quality analysis; strict inert imported-visual validation; fog-safe play assistance; IndexedDB history with memory fallback; stable workspace geometry, responsive zoom and pan, a 3×3 standard keypad, tap selection, patterned colours, accessibility controls and an offline-capable PWA shell |
|
| **`sudoku-tools`** | Current local-first v0.2.1 release; dedicated repository | Set, play, generate, analyse and solve classic, Killer and rich variant Sudoku locally | 4×4–16×16 grids; registry-backed constraint packs including cages, lines, dots, XV, inequalities, indexing and Fog of War; staged hints, candidate maintenance, advanced logical techniques, setter quality checks, mixed-variant generation, source-preserving f-puzzles/SudokuPad interoperability, autosave recovery and searchable local projects | Worker-bounded solving, generation and quality analysis; strict inert imported-visual validation; fog-safe play assistance; IndexedDB history with memory fallback; stable workspace geometry, responsive zoom and pan, a 3×3 standard keypad, tap selection, patterned colours, accessibility controls and an offline-capable PWA shell |
|
||||||
| **`colour-tools`** | Current local-first v0.2.0 release; dedicated repository | Convert, composite, interpolate, pick, sample, analyse and export colours locally | General colour conversion; arbitrary RGBA compositing; multi-stop colour steps and gradient editing; large visual/native/EyeDropper pickers; local image sampling and palette extraction; contrast, gamut, Delta E and colour-vision analysis; harmonies; DTCG 2025.10 token import/export with local reference resolution; directional contrast matrices; CSS and recipe export | Processing and image access remain local; colour spaces, encoded versus linear-light compositing, interpolation and gamut-mapping assumptions are explicit; mathematical conversion is distinguished from display simulation; integrates with SVG, image and token tools |
|
| **`colour-tools`** | Current local-first v0.2.0 release; dedicated repository | Convert, composite, interpolate, pick, sample, analyse and export colours locally | General colour conversion; arbitrary RGBA compositing; multi-stop colour steps and gradient editing; large visual/native/EyeDropper pickers; local image sampling and palette extraction; contrast, gamut, Delta E and colour-vision analysis; harmonies; DTCG 2025.10 token import/export with local reference resolution; directional contrast matrices; CSS and recipe export | Processing and image access remain local; colour spaces, encoded versus linear-light compositing, interpolation and gamut-mapping assumptions are explicit; mathematical conversion is distinguished from display simulation; integrates with SVG, image and token tools |
|
||||||
| **`office-tools`** | Current local-first v0.2.0 read-only release; dedicated repository | Open, inspect and view word-processing documents, spreadsheets and presentations locally; download exact source copies and bounded ODF semantic exports | DOCX/DOCM/DOTX/DOTM, XLSX/XLSM/XLTX/XLTM and PPTX/PPTM/POTX/POTM/PPSX/PPSM plus ODT/ODS/ODP; search/navigation/zoom; text, tables, images, styles, metadata, cached formula values and notes; exact source-copy plus ODF text/CSV/outline/JSON export | Bounded worker-based inert package and XML parsers never execute macros, scripts, formulas, active content or external resources; legacy binary DOC, XLS and PPT are unsupported; viewing is intentionally read-only and does not promise pixel-perfect Office-suite layout fidelity |
|
| **`office-tools`** | Current local-first v0.2.0 read-only release; dedicated repository | Open, inspect and view word-processing documents, spreadsheets and presentations locally; download exact source copies and bounded ODF semantic exports | DOCX/DOCM/DOTX/DOTM, XLSX/XLSM/XLTX/XLTM and PPTX/PPTM/POTX/POTM/PPSX/PPSM plus ODT/ODS/ODP; search/navigation/zoom; text, tables, images, styles, metadata, cached formula values and notes; exact source-copy plus ODF text/CSV/outline/JSON export | Bounded worker-based inert package and XML parsers never execute macros, scripts, formulas, active content or external resources; legacy binary DOC, XLS and PPT are unsupported; viewing is intentionally read-only and does not promise pixel-perfect Office-suite layout fidelity |
|
||||||
| **`image-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, crop, rotate, resize, preview before/after and batch-convert static raster images locally | Static JPEG/PNG/WebP; bounded pre-decode animation/profile inspection; synchronized 25–400% source/result zoom; pointer/keyboard crop and fit/fill/exact resize; versioned recipes; cancellable batch ZIP with per-image reports; capability-probed PNG/JPEG/WebP export | Animated and multi-picture inputs are inspect-only; canvas re-encoding does not preserve arbitrary metadata, ICC profiles, HDR precision or byte identity |
|
| **`image-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, crop, rotate, resize, preview before/after and batch-convert static raster images locally | Static JPEG/PNG/WebP; bounded pre-decode animation/profile inspection; synchronized 25–400% source/result zoom; pointer/keyboard crop and fit/fill/exact resize; versioned recipes; cancellable batch ZIP with per-image reports; capability-probed PNG/JPEG/WebP export | Animated and multi-picture inputs are inspect-only; canvas re-encoding does not preserve arbitrary metadata, ICC profiles, HDR precision or byte identity |
|
||||||
| **`file-tools`** | Current local-first v0.2.0 release; dedicated repository | Identify, inspect, hash, compare, inventory, rename-copy, split and join local files | Signature and claimed-MIME comparison; paged hex/ASCII and strings; SHA-256/SHA-512; deterministic manifests; duplicate candidates; collision-safe rename/copy plans; byte-exact split/join | Detection and entropy are heuristics rather than validation or malware analysis; rename operations export safe copies and never mutate the source filesystem |
|
| **`file-tools`** | Current local-first v0.2.0 release; dedicated repository | Identify, inspect, hash, compare, inventory, rename-copy, split and join local files | Signature and claimed-MIME comparison; paged hex/ASCII and strings; SHA-256/SHA-512; deterministic manifests; duplicate candidates; collision-safe rename/copy plans; byte-exact split/join | Detection and entropy are heuristics rather than validation or malware analysis; rename operations export safe copies and never mutate the source filesystem |
|
||||||
| **`epub-tools`** | Current local-first v0.2.0 release; dedicated repository | Read, inspect and validate EPUB 2/3 publications; adapt text formats, edit metadata and covers, and rebuild EPUBs locally | EPUB 2/3 package/nav/spine inspection; determinate open progress; sandboxed reflow/fixed-layout reading with packaged CSS/fonts/images/media; bounded HTML/XHTML/Markdown/text adapters; search, bookmarks and annotations; metadata/cover editing; text/Markdown/safe-HTML/chapter/report exports; normalized rebuilds with IDPF font-obfuscation preservation | Strict bounded ZIP and XML handling; active and external content are blocked; DRM is detected but never bypassed; focused preflight is not a complete EPUBCheck implementation |
|
| **`epub-tools`** | Current local-first v0.2.0 release; dedicated repository | Read, inspect and validate EPUB 2/3 publications; adapt text formats, edit metadata and covers, and rebuild EPUBs locally | EPUB 2/3 package/nav/spine inspection; determinate open progress; sandboxed reflow/fixed-layout reading with packaged CSS/fonts/images/media; bounded HTML/XHTML/Markdown/text adapters; search, bookmarks and annotations; metadata/cover editing; text/Markdown/safe-HTML/chapter/report exports; normalized rebuilds with IDPF font-obfuscation preservation | Strict bounded ZIP and XML handling; active and external content are blocked; DRM is detected but never bypassed; focused preflight is not a complete EPUBCheck implementation |
|
||||||
| **`archive-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, create, compare and safely extract archive content | ZIP/ZIP64, TAR/USTAR/PAX, gzip and tar.gz plus bounded structural 7z and RAR4/RAR5 inspection; inert previews; ZipCrypto/WinZip AES read and create; deterministic unencrypted ZIP/TAR/tar.gz; cross-format comparison; selected-file verification and repackaging | Path, entry-count, expanded-size and compression-ratio limits; no direct filesystem restoration or nested expansion; multipart ZIP and 7z/RAR decompression/extraction remain unsupported; links and special entries are inventory-only and blocked from restoration |
|
| **`archive-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, create, compare and safely extract archive content | ZIP/ZIP64, TAR/USTAR/PAX, gzip and tar.gz plus bounded structural 7z and RAR4/RAR5 inspection; inert previews; ZipCrypto/WinZip AES read and create; deterministic unencrypted ZIP/TAR/tar.gz; cross-format comparison; selected-file verification and repackaging | Path, entry-count, expanded-size and compression-ratio limits; no direct filesystem restoration or nested expansion; multipart ZIP and 7z/RAR decompression/extraction remain unsupported; links and special entries are inventory-only and blocked from restoration |
|
||||||
| **`privacy-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect image metadata and make independently verified sharing copies | Deep JPEG/PNG/WebP EXIF/IPTC/XMP/profile/preview/provenance/trailing-data scans; orientation-normalized re-encoding with mandatory output rescan and pixel comparison; source/output hashes; pseudonymized safe-share and detailed JSON/ZIP reports; reusable remove/preserve/review policy evidence | Not an anonymity guarantee; verified re-encoding is limited to complete static JPEG/PNG/WebP scans, while other recognized formats are inventory/inspect-only; re-encoding can change pixels and remove colour, resolution and authenticity information; detailed reports can contain sensitive metadata |
|
| **`privacy-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect image metadata and make independently verified sharing copies | Deep JPEG/PNG/WebP EXIF/IPTC/XMP/profile/preview/provenance/trailing-data scans; orientation-normalized re-encoding with mandatory output rescan and pixel comparison; source/output hashes; pseudonymized safe-share and detailed JSON/ZIP reports; reusable remove/preserve/review policy evidence | Not an anonymity guarantee; verified re-encoding is limited to complete static JPEG/PNG/WebP scans, while other recognized formats are inventory/inspect-only; re-encoding can change pixels and remove colour, resolution and authenticity information; detailed reports can contain sensitive metadata |
|
||||||
| **`crypto-tools`** | Current local-first v0.2.0 inspection and operations release; dedicated repository | Inspect certificates, requests, CRLs, keys, encrypted PKCS #8, PKCS #12/PFX and JWK/JWKS material, and run fixed-profile local cryptographic operations | Bounded X.509/CSR/CRL, PBES2/PBKDF2 PKCS #8 and PKCS #12 inspection/decryption; JWK/JWKS and RFC 7638; explicit certificate-path checks without trust claims; DNS SAN checks; fixed-profile RSA-PSS/PKCS1, ECDSA and browser-supported Ed25519 sign/verify; RSA-OAEP and AES-256-GCM text operations | No browser/OS trust implication, complete RFC 5280 validation, revocation service, issuance, CMS/JWS, legacy PKCS #1/SEC1 conversion, legacy PKCS #12 PBE or general-purpose file cryptography; sensitive inputs remain bounded and memory-only, with documented temporary-buffer wiping |
|
| **`crypto-tools`** | Current local-first v0.2.0 inspection and operations release; dedicated repository | Inspect certificates, requests, CRLs, keys, encrypted PKCS #8, PKCS #12/PFX and JWK/JWKS material, and run fixed-profile local cryptographic operations | Bounded X.509/CSR/CRL, PBES2/PBKDF2 PKCS #8 and PKCS #12 inspection/decryption; JWK/JWKS and RFC 7638; explicit certificate-path checks without trust claims; DNS SAN checks; fixed-profile RSA-PSS/PKCS1, ECDSA and browser-supported Ed25519 sign/verify; RSA-OAEP and AES-256-GCM text operations | No browser/OS trust implication, complete RFC 5280 validation, revocation service, issuance, CMS/JWS, legacy PKCS #1/SEC1 conversion, legacy PKCS #12 PBE or general-purpose file cryptography; sensitive inputs remain bounded and memory-only, with documented temporary-buffer wiping |
|
||||||
| **`barcode-tools`** | Current local-first v0.2.0 release; dedicated repository | Generate and decode QR codes and common barcodes | SVG QR, Data Matrix, PDF417, Aztec and selected linear formats; bounded image or explicit camera decode; escaped structured QR payloads; deterministic CSV batch ZIP; common GS1 AI/FNC1/date/check-digit/decimal validation; GTIN checks; physical/raster planning and print-sized SVG export | Decoded payloads remain inert text and are never opened automatically; camera is path-scoped and user initiated; generated output, GS1 allocation and print quality still require applicable interoperability checks |
|
| **`barcode-tools`** | Current local-first v0.2.0 release; dedicated repository | Generate and decode QR codes and common barcodes | SVG QR, Data Matrix, PDF417, Aztec and selected linear formats; bounded image or explicit camera decode; escaped structured QR payloads; deterministic CSV batch ZIP; common GS1 AI/FNC1/date/check-digit/decimal validation; GTIN checks; physical/raster planning and print-sized SVG export | Decoded payloads remain inert text and are never opened automatically; camera is path-scoped and user initiated; generated output, GS1 allocation and print quality still require applicable interoperability checks |
|
||||||
| **`network-tools`** | Current offline v0.2.0 release; dedicated repository | Calculate IP networks and construct or inspect common network values | IPv4/IPv6 canonicalization and CIDR ranges plus largest-first IPv4 VLSM; URL/query parsing with password-redacted display; DNS-record construction and bounded inert zone-file parsing; CSP and HTTP security-header analysis/builder; offline MIME reference | Performs no DNS, URL, HTTP or scanning request; pasted values remain bounded and inert; results are construction and calculation aids rather than live network observations |
|
| **`network-tools`** | Current offline v0.2.0 release; dedicated repository | Calculate IP networks and construct or inspect common network values | IPv4/IPv6 canonicalization and CIDR ranges plus largest-first IPv4 VLSM; URL/query parsing with password-redacted display; DNS-record construction and bounded inert zone-file parsing; CSP and HTTP security-header analysis/builder; offline MIME reference | Performs no DNS, URL, HTTP or scanning request; pasted values remain bounded and inert; results are construction and calculation aids rather than live network observations |
|
||||||
| **`geo-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, edit, convert, simplify, measure and analyse geospatial files locally | GeoJSON, GPX, KML and coordinate CSV; full Point/MultiPoint/LineString/MultiLineString/Polygon/MultiPolygon/nested GeometryCollection model; bounds, distance, elevation and simplification; validated feature/coordinate edits and line reversal; track inventory; local distance/bearing/midpoint ruler; coordinate-only sketch | Full geometry model retains scalar properties, while GPX/CSV conversion may flatten grouping; no topology repair, CRS transformation, basemap request or survey-grade claim; conversion losses are explicit |
|
| **`geo-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, edit, convert, simplify, measure and analyse geospatial files locally | GeoJSON, GPX, KML and coordinate CSV; full Point/MultiPoint/LineString/MultiLineString/Polygon/MultiPolygon/nested GeometryCollection model; bounds, distance, elevation and simplification; validated feature/coordinate edits and line reversal; track inventory; local distance/bearing/midpoint ruler; coordinate-only sketch | Full geometry model retains scalar properties, while GPX/CSV conversion may flatten grouping; no topology repair, CRS transformation, basemap request or survey-grade claim; conversion losses are explicit |
|
||||||
| **`helper-tools`** | Current v0.2.0 app and reusable package release | Encode, convert, inspect and calculate with shared bounded primitives | Base/byte/text/URL conversion; byte cursors and streams; worker jobs; Unicode and line transforms; exact numbers and units; incremental hashes; CIDR; timestamps; hardened JSON/CSV; random primitives | Framework-free `@add-ideas/toolbox-helpers` 0.2.0 is consumed directly across the Toolbox app set; operations disclose strictness, limits and non-cryptographic seeded boundaries |
|
| **`helper-tools`** | Current v0.2.0 app and reusable package release | Encode, convert, inspect and calculate with shared bounded primitives | Base/byte/text/URL conversion; byte cursors and streams; worker jobs; Unicode and line transforms; exact numbers and units; incremental hashes; CIDR; timestamps; hardened JSON/CSV; random primitives | Framework-free `@add-ideas/toolbox-helpers` 0.2.0 is consumed directly across the Toolbox app set; operations disclose strictness, limits and non-cryptographic seeded boundaries |
|
||||||
| **`rand-tools`** | Local-only v0.2.0 release; dedicated repository | Generate secure or reproducible random values through focused workspaces | Unbiased WebCrypto integers/strings; explicitly seeded deterministic generation; UUIDv4/v7 and ULID; dice, samples, shuffles, passphrases and normal values; local coin/card/date/fraction/spherical draws; exact weighted sampling; versioned executable recipes; domain-separated WebCrypto commit–reveal | Secure local generation never falls back; deterministic output is reproducible rather than secret; the app makes no third-party randomness request and the Portal grants it no external network destination |
|
| **`rand-tools`** | Local-only v0.2.0 release; dedicated repository | Generate secure or reproducible random values through focused workspaces | Unbiased WebCrypto integers/strings; explicitly seeded deterministic generation; UUIDv4/v7 and ULID; dice, samples, shuffles, passphrases and normal values; local coin/card/date/fraction/spherical draws; exact weighted sampling; versioned executable recipes; domain-separated WebCrypto commit–reveal | Secure local generation never falls back; deterministic output is reproducible rather than secret; the app makes no third-party randomness request and the Portal grants it no external network destination |
|
||||||
| **`data-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, format, query, infer schemas, edit, flatten and convert structured data | JSON, YAML 1.2, TOML, XML, CSV, TSV and NDJSON; exact JSON numbers; bounded tree/table/leaf views; JSON Pointer and safe path queries; sample-labelled JSON Schema inference; reviewed immutable RFC 6901 add/replace/remove edits; registry-backed all-format conversion with loss/coercion reports; spreadsheet-formula neutralization | Disposable bounded parser worker; rejects active XML constructs and unsafe object keys; conversions surface information loss and round-trip instability |
|
| **`data-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, format, query, infer schemas, edit, flatten and convert structured data | JSON, YAML 1.2, TOML, XML, CSV, TSV and NDJSON; exact JSON numbers; bounded tree/table/leaf views; JSON Pointer and safe path queries; sample-labelled JSON Schema inference; reviewed immutable RFC 6901 add/replace/remove edits; registry-backed all-format conversion with loss/coercion reports; spreadsheet-formula neutralization | Disposable bounded parser worker; rejects active XML constructs and unsafe object keys; conversions surface information loss and round-trip instability |
|
||||||
| **`diff-tools`** | Current local-first v0.2.0 release; dedicated repository | Compare text and structured files, build directory manifests and perform bounded three-way merges locally | Line/word/code-point/grapheme text diff; exact-number JSON/RFC 6902; namespace-aware XML; keyed CSV/TSV; bounded directory manifests; line-oriented three-way merge; portable reports | Normalization and ignored distinctions remain visible; bounded disposable workers and two-file hash concurrency; directory comparison is manifest-based and merge conflicts remain explicit |
|
| **`diff-tools`** | Current local-first v0.2.0 release; dedicated repository | Compare text and structured files, build directory manifests and perform bounded three-way merges locally | Line/word/code-point/grapheme text diff; exact-number JSON/RFC 6902; namespace-aware XML; keyed CSV/TSV; bounded directory manifests; line-oriented three-way merge; portable reports | Normalization and ignored distinctions remain visible; bounded disposable workers and two-file hash concurrency; directory comparison is manifest-based and merge conflicts remain explicit |
|
||||||
| **`time-tools`** | Current local-first v0.2.0 release; dedicated repository | Convert exact timestamps, plan across IANA zones and inspect calendars, arithmetic and recurrences locally | Signed nanosecond epochs; IANA-zone/DST comparison; wall-clock versus elapsed arithmetic; explicit Unix/Vixie, GitHub Actions, Croner, Quartz and EventBridge cron dialects; RRULE previews; multi-participant meeting planner; business days; bounded ICS import with EXDATE/RDATE and recurrence overrides; escaped UTC ICS export | Uses browser IANA data and does not model leap seconds; holidays are only those supplied; custom VTIMEZONE data is inventoried but not guessed when the browser cannot execute its TZID; URLs and attachments are inert and never fetched |
|
| **`time-tools`** | Current local-first v0.2.0 release; dedicated repository | Convert exact timestamps, plan across IANA zones and inspect calendars, arithmetic and recurrences locally | Signed nanosecond epochs; IANA-zone/DST comparison; wall-clock versus elapsed arithmetic; explicit Unix/Vixie, GitHub Actions, Croner, Quartz and EventBridge cron dialects; RRULE previews; multi-participant meeting planner; business days; bounded ICS import with EXDATE/RDATE and recurrence overrides; escaped UTC ICS export | Uses browser IANA data and does not model leap seconds; holidays are only those supplied; custom VTIMEZONE data is inventoried but not guessed when the browser cannot execute its TZID; URLs and attachments are inert and never fetched |
|
||||||
| **`text-tools`** | Current local-first v0.2.0 release; dedicated repository | Build ordered, inspectable plain-text transformation pipelines | Ordered literal/line transforms; locale case, Unicode normalization and transliteration; strict escape/decode stages; RFC-style quoted CSV column selection; explicit UTF-8, UTF-16LE and Latin-1 file decoding with byte evidence; versioned recipes and paired text/provenance artifacts | Exact source/result and per-step changes stay visible; compatibility normalization, transliteration, narrow encodings and selected transforms may be lossy; artifact evidence is portable, but automatic Toolbox handoff is not enabled in v0.2.0 |
|
| **`text-tools`** | Current local-first v0.2.0 release; dedicated repository | Build ordered, inspectable plain-text transformation pipelines | Ordered literal/line transforms; locale case, Unicode normalization and transliteration; strict escape/decode stages; RFC-style quoted CSV column selection; explicit UTF-8, UTF-16LE and Latin-1 file decoding with byte evidence; versioned recipes and paired text/provenance artifacts | Exact source/result and per-step changes stay visible; compatibility normalization, transliteration, narrow encodings and selected transforms may be lossy; artifact evidence is portable, but automatic Toolbox handoff is not enabled in v0.2.0 |
|
||||||
| **`unicode-tools`** | Current local-first v0.2.0 release; dedicated repository | Search and inspect Unicode characters, emoji, scripts, text and confusables | Checksum-pinned Unicode 17.0 catalogue and virtualized code chart; name/alias/code-point search; emoji and named sequences with bounded variant construction; UTF-8/UTF-16/escape and grapheme inspection; normalization; UTS #39 skeleton, Identifier_Status/Type and restriction evidence; selected Unihan fields; source-identity reports | Official Unicode data is redistributed under Unicode-3.0 and no symbol-site content is scraped; unassigned, private-use, noncharacter and surrogate states remain distinct; constructed emoji do not claim RGI or font support; confusable/mixed-script findings are review signals, not verdicts |
|
| **`unicode-tools`** | Current local-first v0.2.0 release; dedicated repository | Search and inspect Unicode characters, emoji, scripts, text and confusables | Checksum-pinned Unicode 17.0 catalogue and virtualized code chart; name/alias/code-point search; emoji and named sequences with bounded variant construction; UTF-8/UTF-16/escape and grapheme inspection; normalization; UTS #39 skeleton, Identifier_Status/Type and restriction evidence; selected Unihan fields; source-identity reports | Official Unicode data is redistributed under Unicode-3.0 and no symbol-site content is scraped; unassigned, private-use, noncharacter and surrogate states remain distinct; constructed emoji do not claim RGI or font support; confusable/mixed-script findings are review signals, not verdicts |
|
||||||
| **`flow-tools`** | Current local-first v0.2.0 release; dedicated repository | Design and run deterministic structured-data pipelines | Bounded JSON, CSV, NDJSON and XML sources; select, rename, filter, map, sort, group, join, type-format, deduplicate, slice and explode stages; per-stage snapshots, analysis and loss notes; validated recipes plus JSON/CSV and inert pipeline-SVG export | 2 MiB sources, 10,000 input rows, 20,000 expanded rows, 200 fields, 30 stages and 256 KiB recipes; no arbitrary code, eval, plug-in or network stage |
|
| **`flow-tools`** | Current local-first v0.2.0 release; dedicated repository | Design and run deterministic structured-data pipelines | Bounded JSON, CSV, NDJSON and XML sources; select, rename, filter, map, sort, group, join, type-format, deduplicate, slice and explode stages; per-stage snapshots, analysis and loss notes; validated recipes plus JSON/CSV and inert pipeline-SVG export | 2 MiB sources, 10,000 input rows, 20,000 expanded rows, 200 fields, 30 stages and 256 KiB recipes; no arbitrary code, eval, plug-in or network stage |
|
||||||
| **`subtitle-tools`** | Current local-first v0.2.0 release; dedicated repository | Edit, validate, synchronize, compare and convert captions | Bounded SRT, WebVTT, ASS/SSA and flat-profile TTML/DFXP; cue add/duplicate/split/merge/delete and direct editing; shift/stretch, frame-rate conversion and snapping; editorial diagnostics and index-aligned revision comparison; immediate media playback with cancellable waveform extraction and navigation; explicit UTF-8/UTF-16/Latin-1 decoding | Preserves format-specific data where possible and reports conversion loss; TTML regions, styling definitions and inherited timing are inspected but not laid out and export is a flat resource-free profile; no speech recognition, automatic alignment, semantic comparison or pixel-perfect ASS rendering |
|
| **`subtitle-tools`** | Current local-first v0.2.0 release; dedicated repository | Edit, validate, synchronize, compare and convert captions | Bounded SRT, WebVTT, ASS/SSA and flat-profile TTML/DFXP; cue add/duplicate/split/merge/delete and direct editing; shift/stretch, frame-rate conversion and snapping; editorial diagnostics and index-aligned revision comparison; immediate media playback with cancellable waveform extraction and navigation; explicit UTF-8/UTF-16/Latin-1 decoding | Preserves format-specific data where possible and reports conversion loss; TTML regions, styling definitions and inherited timing are inspected but not laid out and export is a flat resource-free profile; no speech recognition, automatic alignment, semantic comparison or pixel-perfect ASS rendering |
|
||||||
| **`midi-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, visualize, edit, audition and export Standard MIDI files | SMF type 0/1 events and metadata; worker-backed edit/export with progress and cancellation; tempo/time/key timelines and piano roll; paired-note editing, transpose, quantize, tempo, crop and channel operations with undo; Web Audio preview and opt-in Web MIDI output; bounded local SF2/SF3 structure inspection; deterministic MIDI/CSV/JSON export | 8 MiB, 256-track and 250,000-event caps; PPQN only; Web MIDI is permission-gated and sends channel-note messages without SysEx; SF2/SF3 is inspection-only; the bounded sine preview is not a General MIDI or SoundFont renderer |
|
| **`midi-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, visualize, edit, audition and export Standard MIDI files | SMF type 0/1 events and metadata; worker-backed edit/export with progress and cancellation; tempo/time/key timelines and piano roll; paired-note editing, transpose, quantize, tempo, crop and channel operations with undo; Web Audio preview and opt-in Web MIDI output; bounded local SF2/SF3 structure inspection; deterministic MIDI/CSV/JSON export | 8 MiB, 256-track and 250,000-event caps; PPQN only; Web MIDI is permission-gated and sends channel-note messages without SysEx; SF2/SF3 is inspection-only; the bounded sine preview is not a General MIDI or SoundFont renderer |
|
||||||
| **`3d-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, preview, repair and export triangle meshes | OBJ, binary/ASCII STL, ASCII/binary little-endian PLY and embedded glTF/GLB 2; selected-scene hierarchy/TRS/matrix and instancing flattening; material, node, bounds, area and degeneracy statistics; worker-backed capped WebGL preview; normal/degeneracy repair and transform baking; normalized OBJ, binary STL and ASCII PLY export | 32 MiB and one-million-vertex/triangle caps; glTF is an embedded FLOAT POSITION/NORMAL TRIANGLES subset with no external assets, sparse accessors, animation, skins, texture or compression decoding; selected-scene transforms and instances are baked into the normalized mesh, but source material graphs are not recreated |
|
| **`3d-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, preview, repair and export triangle meshes | OBJ, binary/ASCII STL, ASCII/binary little-endian PLY and embedded glTF/GLB 2; selected-scene hierarchy/TRS/matrix and instancing flattening; material, node, bounds, area and degeneracy statistics; worker-backed capped WebGL preview; normal/degeneracy repair and transform baking; normalized OBJ, binary STL and ASCII PLY export | 32 MiB and one-million-vertex/triangle caps; glTF is an embedded FLOAT POSITION/NORMAL TRIANGLES subset with no external assets, sparse accessors, animation, skins, texture or compression decoding; selected-scene transforms and instances are baked into the normalized mesh, but source material graphs are not recreated |
|
||||||
| **`query-tools`** | Current local-first v0.2.0 release; dedicated repository | Query structured local data through bounded row and path languages | JSON, CSV, NDJSON and inert XML with raw inference/precision evidence; parsed SQL/path syntax trees; focused SQL-like and JSONPath-like modes; optional bounded read-only DuckDB-WASM SELECT mode; table/tree/JSON views, saved queries and JSON/CSV/NDJSON export | Built-in modes are not full SQL, JSONPath or JMESPath; 2 MiB/10,000-row-or-value/200-field/200,000-node caps; DuckDB is capped at 10,000 input and 1,000 result rows, 128 MiB, 30-second startup and ten-second queries with no files, network, extensions, DDL/DML, COPY or PRAGMA; hosting needs correct WASM MIME/cache and scoped `wasm-unsafe-eval` |
|
| **`query-tools`** | Current local-first v0.2.0 release; dedicated repository | Query structured local data through bounded row and path languages | JSON, CSV, NDJSON and inert XML with raw inference/precision evidence; parsed SQL/path syntax trees; focused SQL-like and JSONPath-like modes; optional bounded read-only DuckDB-WASM SELECT mode; table/tree/JSON views, saved queries and JSON/CSV/NDJSON export | Built-in modes are not full SQL, JSONPath or JMESPath; 2 MiB/10,000-row-or-value/200-field/200,000-node caps; DuckDB is capped at 10,000 input and 1,000 result rows, 128 MiB, 30-second startup and ten-second queries with no files, network, extensions, DDL/DML, COPY or PRAGMA; hosting needs correct WASM MIME/cache and scoped `wasm-unsafe-eval` |
|
||||||
| **`scan-tools`** | Current local-first v0.2.0 release; dedicated repository | Correct photographed pages, run optional OCR and assemble local output | Up to 24 PNG/JPEG/WebP pages; precise four-corner projective correction, rotate/deskew, tonal, grayscale and threshold controls in cancellable workers with bounded fallback; drag reorder; PNG/JPEG and image-only PDF export; bundled same-origin English OCR with word geometry plus text, hOCR, TSV and combined multipage-text export | Camera is exact-path and opt-in; strict pixel/byte/page caps; English-only OCR may use roughly 100–300 MiB transient memory and is not an accuracy guarantee; no PDF input, automatic corners, handwriting guarantee, shadow/finger removal or searchable PDF text layer |
|
| **`scan-tools`** | Current local-first v0.2.0 release; dedicated repository | Correct photographed pages, run optional OCR and assemble local output | Up to 24 PNG/JPEG/WebP pages; precise four-corner projective correction, rotate/deskew, tonal, grayscale and threshold controls in cancellable workers with bounded fallback; drag reorder; PNG/JPEG and image-only PDF export; bundled same-origin English OCR with word geometry plus text, hOCR, TSV and combined multipage-text export | Camera is exact-path and opt-in; strict pixel/byte/page caps; English-only OCR may use roughly 100–300 MiB transient memory and is not an accuracy guarantee; no PDF input, automatic corners, handwriting guarantee, shadow/finger removal or searchable PDF text layer |
|
||||||
| **`package-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect and compare ZIP/ZIP64 compound packages | ZIP/ZIP64 tree and risk diagnostics; EPUB, OOXML, ODF, JAR, APK and WebExtension adapters; relationships, manifests and orphan evidence; signature-material/digest plus dependency/licence inventories; bounded text/media preview and verified entry download/share; decompressed SHA-256 comparison with safe semantic diffs; JSON inventory export | Inspection is not a specialized renderer, APK signing-block decoder, signature/trust verifier, dependency resolver, vulnerability scanner or legal licence interpretation; encrypted, split, unsafe, unsupported and over-budget entries stay inventory-only; an explicitly chosen OS share target may upload an entry even though the app itself does not |
|
| **`package-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect and compare ZIP/ZIP64 compound packages | ZIP/ZIP64 tree and risk diagnostics; EPUB, OOXML, ODF, JAR, APK and WebExtension adapters; relationships, manifests and orphan evidence; signature-material/digest plus dependency/licence inventories; bounded text/media preview and verified entry download/share; decompressed SHA-256 comparison with safe semantic diffs; JSON inventory export | Inspection is not a specialized renderer, APK signing-block decoder, signature/trust verifier, dependency resolver, vulnerability scanner or legal licence interpretation; encrypted, split, unsafe, unsupported and over-budget entries stay inventory-only; an explicitly chosen OS share target may upload an entry even though the app itself does not |
|
||||||
| **`label-tools`** | Current local-first v0.2.0 release; dedicated repository | Merge local records into printable labels, badges and asset tags | CSV/JSON mapping; visual text/image/barcode/shape template designer with drag, keyboard and exact-unit positioning; serial/random values; ten QR/1D/2D barcode formats; stock/custom grids, calibration and marks; template JSON; paginated preview; physical-size SVG, deterministic multi-page ZIP and vector PDF export | 2 MiB/2,000-row/100-field data bounds and bounded images/pages; stock names are geometries, not vendor certification; system fonts are not embedded; vector PDF uses built-in Helvetica/WinAnsi, visibly replaces unsupported characters and omits WebP images, so it is print-dimensioned rather than archival/press quality |
|
| **`label-tools`** | Current local-first v0.2.0 release; dedicated repository | Merge local records into printable labels, badges and asset tags | CSV/JSON mapping; visual text/image/barcode/shape template designer with drag, keyboard and exact-unit positioning; serial/random values; ten QR/1D/2D barcode formats; stock/custom grids, calibration and marks; template JSON; paginated preview; physical-size SVG, deterministic multi-page ZIP and vector PDF export | 2 MiB/2,000-row/100-field data bounds and bounded images/pages; stock names are geometries, not vendor certification; system fonts are not embedded; vector PDF uses built-in Helvetica/WinAnsi, visibly replaces unsupported characters and omits WebP images, so it is print-dimensioned rather than archival/press quality |
|
||||||
| **`font-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, compare, preview and prepare local fonts | TTF, OTF, WOFF, WOFF2, TTC and OTC metadata/tables; Unicode coverage, variable axes, GSUB/GPOS inventories and embedding signals; sandboxed shaping/fallback comparison; safe CSS; validated collection face selection; rights-confirmed static glyf/CFF subset with loss report | Disposable eight-second worker and strict file/table/face/glyph bounds; WOFF2 is decoded locally and TTC/OTC faces are reconstructed only for bounded in-memory preview; WOFF2/collection subset and collection export remain disabled; fsType is technical evidence, variable flattening is unsupported and browser shaping is not a HarfBuzz reference |
|
| **`font-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, compare, preview and prepare local fonts | TTF, OTF, WOFF, WOFF2, TTC and OTC metadata/tables; Unicode coverage, variable axes, GSUB/GPOS inventories and embedding signals; sandboxed shaping/fallback comparison; safe CSS; validated collection face selection; rights-confirmed static glyf/CFF subset with loss report | Disposable eight-second worker and strict file/table/face/glyph bounds; WOFF2 is decoded locally and TTC/OTC faces are reconstructed only for bounded in-memory preview; WOFF2/collection subset and collection export remain disabled; fsType is technical evidence, variable flattening is unsupported and browser shaping is not a HarfBuzz reference |
|
||||||
| **`fixture-tools`** | Current local-first v0.2.0 release; dedicated repository | Generate deterministic synthetic test fixtures | Focused JSON Schema, SQL DDL, XSD, CSV-heading and portable-model import; scalar/composite uniqueness and foreign keys; dependency-topological generation with uniform, sequential, normal and constant distributions; boundary/intentional-negative cases and a violation ledger; coverage matrix; person/network/commerce provider profiles; JSON/CSV/NDJSON/XML/SQL/recipe export | Importers are documented subsets; remote references, schema code, database access, XML entities, unsupported XSD/SQL constructs and cyclic relational recipes are rejected; 2 MiB input, 20 tables, 100 fields/table, 50,000 rows, 100,000 values and 8 MiB/output caps; synthetic data is not anonymization and seeded output is reproducible, not secret |
|
| **`fixture-tools`** | Current local-first v0.2.0 release; dedicated repository | Generate deterministic synthetic test fixtures | Focused JSON Schema, SQL DDL, XSD, CSV-heading and portable-model import; scalar/composite uniqueness and foreign keys; dependency-topological generation with uniform, sequential, normal and constant distributions; boundary/intentional-negative cases and a violation ledger; coverage matrix; person/network/commerce provider profiles; JSON/CSV/NDJSON/XML/SQL/recipe export | Importers are documented subsets; remote references, schema code, database access, XML entities, unsupported XSD/SQL constructs and cyclic relational recipes are rejected; 2 MiB input, 20 tables, 100 fields/table, 50,000 rows, 100,000 values and 8 MiB/output caps; synthetic data is not anonymization and seeded output is reproducible, not secret |
|
||||||
| **`minimize-tools`** | Current local-first v0.2.0 release; dedicated repository | Reduce failing inputs while continuously preserving a selected predicate | Line/token/code-point and structure-aware JSON/XML reduction; literal, syntax, timing, isolated-regex, focused JSON Schema and restricted local-XSLT predicates with failure-signature preservation; single/majority/strict retry voting and flaky evidence; bounded multi-file bundle adapters; budgets, cancellation and deterministic minimized-case/trace/report export | Locally minimal under attempted transformations and budget, not globally shortest; schema/XSLT subsets fail closed; 2 MiB input, 2,000-test/30-second, one-second-regex and 200-XSLT-test caps; bundles are limited to 100 files/4 MiB and adapters neither emulate a filesystem nor execute a target program |
|
| **`minimize-tools`** | Current local-first v0.2.0 release; dedicated repository | Reduce failing inputs while continuously preserving a selected predicate | Line/token/code-point and structure-aware JSON/XML reduction; literal, syntax, timing, isolated-regex, focused JSON Schema and restricted local-XSLT predicates with failure-signature preservation; single/majority/strict retry voting and flaky evidence; bounded multi-file bundle adapters; budgets, cancellation and deterministic minimized-case/trace/report export | Locally minimal under attempted transformations and budget, not globally shortest; schema/XSLT subsets fail closed; 2 MiB input, 2,000-test/30-second, one-second-regex and 200-XSLT-test caps; bundles are limited to 100 files/4 MiB and adapters neither emulate a filesystem nor execute a target program |
|
||||||
| **`format-lab`** | Current local-first v0.2.0 release; dedicated repository | Explore conversion paths and measure representative round-trip loss | Conservative data/image/AV/subtitle format graphs; executable JSON/NDJSON/CSV/typed-XML record conversion; property selection and loss-aware path ranking; measured round trips beside catalogue expectations; versioned evidence envelopes and catalogue export; masked-offset signature catalogue; deterministic edge-case corpus and reports | Media graphs plan handoffs rather than duplicate codecs; executable conversion handles bounded canonical records, not arbitrary documents; catalogue expectations are not file measurements; signature hits suggest likely containers but do not validate safety or format conformance; catalogue-only formats are not claimed executable |
|
| **`format-lab`** | Current local-first v0.2.0 release; dedicated repository | Explore conversion paths and measure representative round-trip loss | Conservative data/image/AV/subtitle format graphs; executable JSON/NDJSON/CSV/typed-XML record conversion; property selection and loss-aware path ranking; measured round trips beside catalogue expectations; versioned evidence envelopes and catalogue export; masked-offset signature catalogue; deterministic edge-case corpus and reports | Media graphs plan handoffs rather than duplicate codecs; executable conversion handles bounded canonical records, not arbitrary documents; catalogue expectations are not file measurements; signature hits suggest likely containers but do not validate safety or format conformance; catalogue-only formats are not claimed executable |
|
||||||
| **`repro-tools`** | Current local-first v0.2.0 release; dedicated repository | Build, compare, sign and package reproducible local file inventories | Cancellable streamed SHA-256/SHA-512 manifests with deterministic paths and JSON/CSV; reference comparison; fixed-metadata ZIP; streaming ZIP-content manifests and compression-independent comparison; CycloneDX/SPDX/npm-lock inventory with portable evidence and explicit non-conformant local provenance; optional memory-only P-256 signature envelope | 64 MiB/file, 256 MiB/selection and 10,000-entry caps; ZIP creation is capped at 128 MiB and inspection at 5,000 entries/256 MiB expanded; signatures prove integrity only relative to an independently authenticated public key and are intentionally not byte-reproducible; provenance makes no SLSA, authority or builder-identity claim |
|
| **`repro-tools`** | Current local-first v0.2.0 release; dedicated repository | Build, compare, sign and package reproducible local file inventories | Cancellable streamed SHA-256/SHA-512 manifests with deterministic paths and JSON/CSV; reference comparison; fixed-metadata ZIP; streaming ZIP-content manifests and compression-independent comparison; CycloneDX/SPDX/npm-lock inventory with portable evidence and explicit non-conformant local provenance; optional memory-only P-256 signature envelope | 64 MiB/file, 256 MiB/selection and 10,000-entry caps; ZIP creation is capped at 128 MiB and inspection at 5,000 entries/256 MiB expanded; signatures prove integrity only relative to an independently authenticated public key and are intentionally not byte-reproducible; provenance makes no SLSA, authority or builder-identity claim |
|
||||||
| **`schema-tools`** | Hardened local-first v0.2.0 release; dedicated repository | Inspect, validate, compare and derive examples from schema workspaces | Local JSON Schema/OpenAPI reference graphs; focused JSON Schema validation; OpenAPI operation/sample/change analysis; XSD, Relax NG and Schematron structure; bounded heuristic XML samples | Remote/escaping references, entities, code and XPath are blocked; JSON Schema/OpenAPI support is a documented subset, while XML languages receive structural inspection rather than complete instance validation; shared work/node/depth/text/output budgets, linear cached traversal and well-formed XML fallbacks are regression-tested |
|
| **`schema-tools`** | Hardened local-first v0.2.0 release; dedicated repository | Inspect, validate, compare and derive examples from schema workspaces | Local JSON Schema/OpenAPI reference graphs; focused JSON Schema validation; OpenAPI operation/sample/change analysis; XSD, Relax NG and Schematron structure; bounded heuristic XML samples | Remote/escaping references, entities, code and XPath are blocked; JSON Schema/OpenAPI support is a documented subset, while XML languages receive structural inspection rather than complete instance validation; shared work/node/depth/text/output budgets, linear cached traversal and well-formed XML fallbacks are regression-tested |
|
||||||
| **`log-tools`** | Current local-first v0.2.0 release; dedicated repository | Stream, inspect, correlate, redact and export large logs | Incremental UTF-8 file scan; plain, JSONL, nginx, syslog and logfmt parsing with configurable Java/.NET/Python/generic multiline assembly; whole-scan aggregates; bounded multi-file temporal merge with trace/span and request-ID correlation; search/filter and deterministic redaction; OTLP/JSON plus CSV/NDJSON/text export, including a complete cancellable second pass with direct-file or bounded-Blob output | Eight-GiB gate and five-million-line stop without whole-file strings; interactive search/redaction uses a 10,000-record/32 MiB preview, while complete single-source export reapplies filters and recipes in a second streaming pass; multi-file correlation uses explicitly bounded retained evidence; parsers and auto/multiline detection are focused heuristics |
|
| **`log-tools`** | Current local-first v0.2.0 release; dedicated repository | Stream, inspect, correlate, redact and export large logs | Incremental UTF-8 file scan; plain, JSONL, nginx, syslog and logfmt parsing with configurable Java/.NET/Python/generic multiline assembly; whole-scan aggregates; bounded multi-file temporal merge with trace/span and request-ID correlation; search/filter and deterministic redaction; OTLP/JSON plus CSV/NDJSON/text export, including a complete cancellable second pass with direct-file or bounded-Blob output | Eight-GiB gate and five-million-line stop without whole-file strings; interactive search/redaction uses a 10,000-record/32 MiB preview, while complete single-source export reapplies filters and recipes in a second streaming pass; multi-file correlation uses explicitly bounded retained evidence; parsers and auto/multiline detection are focused heuristics |
|
||||||
| **`binary-tools`** | Current local-first v0.2.0 release; dedicated repository | Convert, inspect and decode byte-oriented values | Synchronized UTF-8/hex/Base64/Base32/Base58; checked byte insert/replace/delete; exact and wildcard search with isolated-worker deadline; paged byte inspector and endian integer/float/timestamp interpretations; bookmarks and audited PNG/RIFF/ELF templates; CBOR, MessagePack, strict DER and schema-assisted Protocol Buffers | Inert with no requests or evaluation; 1 MiB input/edit/output, depth-64 and 10,000-node bounds; Base58 and search patterns are capped at 4 KiB and large searches use a five-second disposable worker; protobuf groups/full generated runtime and complete template-based format validation are out of scope |
|
| **`binary-tools`** | Current local-first v0.2.0 release; dedicated repository | Convert, inspect and decode byte-oriented values | Synchronized UTF-8/hex/Base64/Base32/Base58; checked byte insert/replace/delete; exact and wildcard search with isolated-worker deadline; paged byte inspector and endian integer/float/timestamp interpretations; bookmarks and audited PNG/RIFF/ELF templates; CBOR, MessagePack, strict DER and schema-assisted Protocol Buffers | Inert with no requests or evaluation; 1 MiB input/edit/output, depth-64 and 10,000-node bounds; Base58 and search patterns are capped at 4 KiB and large searches use a five-second disposable worker; protobuf groups/full generated runtime and complete template-based format validation are out of scope |
|
||||||
| **`git-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect and author Git interchange text without repository access | Unified/git patch inspection and bounded authoring; exact atomic patch apply/reverse against explicit text snapshots with JSON/ZIP export; layered `.gitignore` plus tracked-state explanations; root `.gitattributes` evaluation; SemVer ranges; Conventional Commit build/lint and advisory release plan; changelog normalization | Patch/diff-matrix/snapshot bounds; patch application is exact, atomic and text-only against an explicit local JSON snapshot; ignore analysis models layered supplied global/info/nested sources and tracked state but not command-line excludes or submodule boundaries; attribute macros/nested attribute files are unsupported; no workspace or `.git` access |
|
| **`git-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect and author Git interchange text without repository access | Unified/git patch inspection and bounded authoring; exact atomic patch apply/reverse against explicit text snapshots with JSON/ZIP export; layered `.gitignore` plus tracked-state explanations; root `.gitattributes` evaluation; SemVer ranges; Conventional Commit build/lint and advisory release plan; changelog normalization | Patch/diff-matrix/snapshot bounds; patch application is exact, atomic and text-only against an explicit local JSON snapshot; ignore analysis models layered supplied global/info/nested sources and tracked state but not command-line excludes or submodule boundaries; attribute macros/nested attribute files are unsupported; no workspace or `.git` access |
|
||||||
| **`api-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect and compare HTTP and event API descriptions and check saved HTTP evidence | Bounded JSON/YAML OpenAPI 3.0–3.2 and AsyncAPI 2.0–3.1; local multi-file `$ref`; path/webhook/channel/message navigation; security inventory and focused examples; inert curl/Fetch/Python text; conservative revision comparison; HAR 1.2 coverage and focused contract checks | Never executes HTTP, opens a broker connection, follows URLs, resolves remote references or stores credentials; focused OpenAPI/AsyncAPI/JSON Schema validation, examples and HAR checks are not a complete validator, code generator, HTTP/broker client, proxy or security scanner |
|
| **`api-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect and compare HTTP and event API descriptions and check saved HTTP evidence | Bounded JSON/YAML OpenAPI 3.0–3.2 and AsyncAPI 2.0–3.1; local multi-file `$ref`; path/webhook/channel/message navigation; security inventory and focused examples; inert curl/Fetch/Python text; conservative revision comparison; HAR 1.2 coverage and focused contract checks | Never executes HTTP, opens a broker connection, follows URLs, resolves remote references or stores credentials; focused OpenAPI/AsyncAPI/JSON Schema validation, examples and HAR checks are not a complete validator, code generator, HTTP/broker client, proxy or security scanner |
|
||||||
| **`mail-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, thread, compare, download and redact EML/MIME and mbox content | Original-octet EML/MIME with RFC 2047 and RFC 2231 headers; bounded multipart/nested-message tree; Base64/quoted-printable and byte-safe attachments; mbox/mboxrd threading/search; text and opaque sandboxed HTML with safe local CID images; auth-header diagnostics plus pasted-key RSA/Ed25519 DKIM verification; canonical and deeper redacted export | Remote/active HTML is removed and never loaded; no mail/DNS contact, mailbox client, decryption, sender-identity, malware or anonymity claim; local DKIM verification proves preserved bytes only against the pasted key and cannot establish that key's authenticity or currency; canonical/redacted export does not promise byte identity |
|
| **`mail-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, thread, compare, download and redact EML/MIME and mbox content | Original-octet EML/MIME with RFC 2047 and RFC 2231 headers; bounded multipart/nested-message tree; Base64/quoted-printable and byte-safe attachments; mbox/mboxrd threading/search; text and opaque sandboxed HTML with safe local CID images; auth-header diagnostics plus pasted-key RSA/Ed25519 DKIM verification; canonical and deeper redacted export | Remote/active HTML is removed and never loaded; no mail/DNS contact, mailbox client, decryption, sender-identity, malware or anonymity claim; local DKIM verification proves preserved bytes only against the pasted key and cannot establish that key's authenticity or currency; canonical/redacted export does not promise byte identity |
|
||||||
| **`calendar-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, repair, merge and reconcile iCalendar data | RFC 5545 events, VTODO, VJOURNAL, VFREEBUSY, VALARM, attendees and VTIMEZONE; recurrence preview with moved/cancelled/duration-changing/RANGE=THISANDFUTURE overrides; duplicate/overlap diagnostics and UID/RECURRENCE-ID merge; canonical repair and DST evidence; agenda/month views, bounded event/task authoring and free-slot planning; lossless jCal and focused JSCalendar Event/Task interchange | 4 MiB plus line/component/event and recurrence-horizon caps; browser IANA data and focused recurrence interpretation are evidence, not a calendar-server implementation; JSCalendar is a focused Event/Task adapter with explicit loss warnings |
|
| **`calendar-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, repair, merge and reconcile iCalendar data | RFC 5545 events, VTODO, VJOURNAL, VFREEBUSY, VALARM, attendees and VTIMEZONE; recurrence preview with moved/cancelled/duration-changing/RANGE=THISANDFUTURE overrides; duplicate/overlap diagnostics and UID/RECURRENCE-ID merge; canonical repair and DST evidence; agenda/month views, bounded event/task authoring and free-slot planning; lossless jCal and focused JSCalendar Event/Task interchange | 4 MiB plus line/component/event and recurrence-horizon caps; browser IANA data and focused recurrence interpretation are evidence, not a calendar-server implementation; JSCalendar is a focused Event/Task adapter with explicit loss warnings |
|
||||||
| **`contact-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, edit, convert and reconcile sensitive contacts | vCard 2.1/3/4 parsing, core editing and canonical export; bounded quoted-printable/Base64 decoding plus grouped and unmapped-property preservation; inferred reviewable CSV mapping; jCard and focused JSContact import/export with loss evidence; duplicate candidates, conflict-reporting merge and bounded local vCard QR | 2 MiB, 50,000-line and 2,000-contact caps; encoded properties are capped at 64 KiB and malformed encodings retain raw evidence; JSContact support is focused and unsupported values are surfaced rather than silently lost; no persistence or telemetry |
|
| **`contact-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect, edit, convert and reconcile sensitive contacts | vCard 2.1/3/4 parsing, core editing and canonical export; bounded quoted-printable/Base64 decoding plus grouped and unmapped-property preservation; inferred reviewable CSV mapping; jCard and focused JSContact import/export with loss evidence; duplicate candidates, conflict-reporting merge and bounded local vCard QR | 2 MiB, 50,000-line and 2,000-contact caps; encoded properties are capped at 64 KiB and malformed encodings retain raw evidence; JSContact support is focused and unsupported values are surfaced rather than silently lost; no persistence or telemetry |
|
||||||
| **`diagram-tools`** | Current local-first v0.2.0 release; dedicated repository | Author safe deterministic text diagrams and export accessible graphics | Independent script-free flow/graph, sequence, class, state, entity-relationship, mind-map and timeline grammars; line diagnostics, examples, pan/zoom, normalized JSON, deterministic SVG/2× PNG and accessible textual outline/source export | Not full Mermaid or Graphviz; directives, clicks, styles, scripts, HTML and remote assets are rejected; 50,000-character, 2,000-line, 200-node, 500-edge and 20-megapixel caps |
|
| **`diagram-tools`** | Current local-first v0.2.0 release; dedicated repository | Author safe deterministic text diagrams and export accessible graphics | Independent script-free flow/graph, sequence, class, state, entity-relationship, mind-map and timeline grammars; line diagnostics, examples, pan/zoom, normalized JSON, deterministic SVG/2× PNG and accessible textual outline/source export | Not full Mermaid or Graphviz; directives, clicks, styles, scripts, HTML and remote assets are rejected; 50,000-character, 2,000-line, 200-node, 500-edge and 20-megapixel caps |
|
||||||
| **`token-tools`** | Current local-first v0.2.0 release; dedicated repository | Edit, validate, theme and export design tokens | DTCG-style nested `$type`/`$value` JSON with inherited groups plus local sets/themes/modes; recursive aliases inside composite values with cycle/missing/type diagnostics; colour, dimension, duration, font, Bézier, stroke, border, transition, gradient, typography, shadow and scalar tokens; W3C-style JSON, CSS, Sass, Android and Swift export with collision and loss reports | The `$sets`/`$themes` wrapper is app-specific; 1 MiB, depth-64, 10,000-token and 50,000-node bounds; malformed wrappers, unknown types and token/group conflicts fail explicitly; Android/Swift composite output requires project conventions and unsupported values are reported as losses |
|
| **`token-tools`** | Current local-first v0.2.0 release; dedicated repository | Edit, validate, theme and export design tokens | DTCG-style nested `$type`/`$value` JSON with inherited groups plus local sets/themes/modes; recursive aliases inside composite values with cycle/missing/type diagnostics; colour, dimension, duration, font, Bézier, stroke, border, transition, gradient, typography, shadow and scalar tokens; W3C-style JSON, CSS, Sass, Android and Swift export with collision and loss reports | The `$sets`/`$themes` wrapper is app-specific; 1 MiB, depth-64, 10,000-token and 50,000-node bounds; malformed wrappers, unknown types and token/group conflicts fail explicitly; Android/Swift composite output requires project conventions and unsupported values are reported as losses |
|
||||||
| **`device-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect browser capability evidence without creating a device fingerprint | Passive context/display/input/accessibility/media/storage/PWA/API inventory; individually initiated permission, storage, WebGL/WebGPU, media-device, battery, network, camera, microphone and screen probes; pasted Toolbox-manifest compatibility analysis with required/optional/unknown capability evidence; opt-in MediaCapabilities codec lab; deterministic bucketed JSON/CSV reports | No identifier, uniqueness score, high-entropy report, recording, persistence, canvas/audio fingerprint or passive permission prompt; sensitive probes are exact-path and individually initiated, returned tracks stop immediately, and downloaded reports bucket precision; results are capability evidence, not a reliability guarantee |
|
| **`device-tools`** | Current local-first v0.2.0 release; dedicated repository | Inspect browser capability evidence without creating a device fingerprint | Passive context/display/input/accessibility/media/storage/PWA/API inventory; individually initiated permission, storage, WebGL/WebGPU, media-device, battery, network, camera, microphone and screen probes; pasted Toolbox-manifest compatibility analysis with required/optional/unknown capability evidence; opt-in MediaCapabilities codec lab; deterministic bucketed JSON/CSV reports | No identifier, uniqueness score, high-entropy report, recording, persistence, canvas/audio fingerprint or passive permission prompt; sensitive probes are exact-path and individually initiated, returned tracks stop immediately, and downloaded reports bucket precision; results are capability evidence, not a reliability guarantee |
|
||||||
|
|
||||||
## Planned tools
|
## Planned tools
|
||||||
|
|
||||||
|
|||||||
@@ -3,7 +3,7 @@ services:
|
|||||||
build:
|
build:
|
||||||
context: .
|
context: .
|
||||||
dockerfile: Containerfile
|
dockerfile: Containerfile
|
||||||
image: git.add-ideas.de/lotobo/toolbox:0.20.0
|
image: git.add-ideas.de/lotobo/toolbox:0.20.6
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
read_only: true
|
read_only: true
|
||||||
ports:
|
ports:
|
||||||
|
|||||||
+3
-3
@@ -6,9 +6,9 @@ services:
|
|||||||
context: .
|
context: .
|
||||||
dockerfile: Containerfile.release
|
dockerfile: Containerfile.release
|
||||||
args:
|
args:
|
||||||
TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.20.0}"
|
TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.20.6}"
|
||||||
TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-450618902a1ee87405da463881e6f51f685691c2081259aff9c25a4aa6fe22ed}"
|
TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-37ccd887793d7a147ceb3b69933faa969a006c59d6b1fbec775d3622279cedac}"
|
||||||
image: "git.add-ideas.de/lotobo/toolbox:${TOOLBOX_RELEASE_VERSION:-0.20.0}"
|
image: "git.add-ideas.de/lotobo/toolbox:${TOOLBOX_RELEASE_VERSION:-0.20.6}"
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
read_only: true
|
read_only: true
|
||||||
tmpfs:
|
tmpfs:
|
||||||
|
|||||||
Generated
+2
-2
@@ -1,12 +1,12 @@
|
|||||||
{
|
{
|
||||||
"name": "@add-ideas/toolbox-portal",
|
"name": "@add-ideas/toolbox-portal",
|
||||||
"version": "0.2.23",
|
"version": "0.2.24",
|
||||||
"lockfileVersion": 3,
|
"lockfileVersion": 3,
|
||||||
"requires": true,
|
"requires": true,
|
||||||
"packages": {
|
"packages": {
|
||||||
"": {
|
"": {
|
||||||
"name": "@add-ideas/toolbox-portal",
|
"name": "@add-ideas/toolbox-portal",
|
||||||
"version": "0.2.23",
|
"version": "0.2.24",
|
||||||
"license": "AGPL-3.0-only",
|
"license": "AGPL-3.0-only",
|
||||||
"dependencies": {
|
"dependencies": {
|
||||||
"@add-ideas/toolbox-contract": "^0.3.0",
|
"@add-ideas/toolbox-contract": "^0.3.0",
|
||||||
|
|||||||
+4
-2
@@ -1,6 +1,6 @@
|
|||||||
{
|
{
|
||||||
"name": "@add-ideas/toolbox-portal",
|
"name": "@add-ideas/toolbox-portal",
|
||||||
"version": "0.2.23",
|
"version": "0.2.24",
|
||||||
"license": "AGPL-3.0-only",
|
"license": "AGPL-3.0-only",
|
||||||
"private": true,
|
"private": true,
|
||||||
"type": "module",
|
"type": "module",
|
||||||
@@ -18,7 +18,9 @@
|
|||||||
"check": "npm run format:check && npm run lint && npm run test && npm run build",
|
"check": "npm run format:check && npm run lint && npm run test && npm run build",
|
||||||
"licenses:generate": "node scripts/licenses.mjs",
|
"licenses:generate": "node scripts/licenses.mjs",
|
||||||
"assemble": "node scripts/assemble.mjs",
|
"assemble": "node scripts/assemble.mjs",
|
||||||
"package:static": "node scripts/package-static.mjs"
|
"package:static": "node scripts/package-static.mjs",
|
||||||
|
"release:update": "node scripts/update-release-lock.mjs",
|
||||||
|
"release": "./release.sh"
|
||||||
},
|
},
|
||||||
"dependencies": {
|
"dependencies": {
|
||||||
"@add-ideas/toolbox-contract": "^0.3.0",
|
"@add-ideas/toolbox-contract": "^0.3.0",
|
||||||
|
|||||||
+2
-2
@@ -1,8 +1,8 @@
|
|||||||
# Corresponding source
|
# Corresponding source
|
||||||
|
|
||||||
The source code corresponding to add·ideas Toolbox Portal 0.2.23 is available at:
|
The source code corresponding to add·ideas Toolbox Portal 0.2.24 is available at:
|
||||||
|
|
||||||
https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.20.0
|
https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.20.6
|
||||||
|
|
||||||
Each bundled application contains its own `SOURCE.md`, license, and third-party
|
Each bundled application contains its own `SOURCE.md`, license, and third-party
|
||||||
license materials. The application sources are also linked from the portal.
|
license materials. The application sources are also linked from the portal.
|
||||||
|
|||||||
@@ -109,6 +109,10 @@
|
|||||||
"manifest": "./apps/text/toolbox-app.json",
|
"manifest": "./apps/text/toolbox-app.json",
|
||||||
"enabled": true
|
"enabled": true
|
||||||
},
|
},
|
||||||
|
{
|
||||||
|
"manifest": "./apps/translator/toolbox-app.json",
|
||||||
|
"enabled": true
|
||||||
|
},
|
||||||
{
|
{
|
||||||
"manifest": "./apps/unicode/toolbox-app.json",
|
"manifest": "./apps/unicode/toolbox-app.json",
|
||||||
"enabled": true
|
"enabled": true
|
||||||
|
|||||||
@@ -0,0 +1,6 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||||
|
|
||||||
|
exec "${SCRIPT_DIR}/scripts/release.sh" "$@"
|
||||||
@@ -1,8 +1,8 @@
|
|||||||
{
|
{
|
||||||
"$schema": "./toolbox-release-lock.schema.json",
|
"$schema": "./toolbox-release-lock.schema.json",
|
||||||
"schemaVersion": 1,
|
"schemaVersion": 1,
|
||||||
"releaseVersion": "0.20.0",
|
"releaseVersion": "0.20.6",
|
||||||
"portalVersion": "0.2.23",
|
"portalVersion": "0.2.24",
|
||||||
"catalogue": {
|
"catalogue": {
|
||||||
"id": "de.add-ideas.toolbox",
|
"id": "de.add-ideas.toolbox",
|
||||||
"name": "add·ideas Toolbox",
|
"name": "add·ideas Toolbox",
|
||||||
@@ -57,9 +57,9 @@
|
|||||||
},
|
},
|
||||||
{
|
{
|
||||||
"id": "de.add-ideas.auth-tools",
|
"id": "de.add-ideas.auth-tools",
|
||||||
"version": "0.3.1",
|
"version": "0.3.2",
|
||||||
"artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.3.1/auth-tools-0.3.1.zip",
|
"artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.3.2/auth-tools-0.3.2.zip",
|
||||||
"sha256": "60e90492fb50d2ce23298b3a3af84b1e3be02bbf5dea01d478f889d65eb66f3a",
|
"sha256": "55938731b79f6ac3ec1834b0d1cfa368c671f979a3dad6b01ccaa9498372b40e",
|
||||||
"target": "auth"
|
"target": "auth"
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
@@ -188,6 +188,13 @@
|
|||||||
"sha256": "a1b635278da1baf844051fb0bbfc94022596bb674091c4c39ec164cf34bd5f62",
|
"sha256": "a1b635278da1baf844051fb0bbfc94022596bb674091c4c39ec164cf34bd5f62",
|
||||||
"target": "text"
|
"target": "text"
|
||||||
},
|
},
|
||||||
|
{
|
||||||
|
"id": "de.add-ideas.translator-tools",
|
||||||
|
"version": "0.1.3",
|
||||||
|
"artifact": "https://git.add-ideas.de/lotobo/translator-tools/releases/download/v0.1.3/translator-tools-0.1.3.zip",
|
||||||
|
"sha256": "75482910c8a58e9169845bf4a3699a0385bc5ccff95259eef60004bae6814e22",
|
||||||
|
"target": "translator"
|
||||||
|
},
|
||||||
{
|
{
|
||||||
"id": "de.add-ideas.unicode-tools",
|
"id": "de.add-ideas.unicode-tools",
|
||||||
"version": "0.2.0",
|
"version": "0.2.0",
|
||||||
|
|||||||
@@ -83,7 +83,7 @@ function makeLock(artifact: string, sha256: string) {
|
|||||||
return {
|
return {
|
||||||
schemaVersion: 1,
|
schemaVersion: 1,
|
||||||
releaseVersion: '0.1.0',
|
releaseVersion: '0.1.0',
|
||||||
portalVersion: '0.2.23',
|
portalVersion: '0.2.24',
|
||||||
catalogue: {
|
catalogue: {
|
||||||
id: 'de.add-ideas.toolbox',
|
id: 'de.add-ideas.toolbox',
|
||||||
name: 'Test Toolbox',
|
name: 'Test Toolbox',
|
||||||
|
|||||||
@@ -0,0 +1,23 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||||
|
PROJECT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
|
||||||
|
cd "${PROJECT_DIR}"
|
||||||
|
|
||||||
|
git fetch origin --tags
|
||||||
|
git pull --ff-only origin main
|
||||||
|
|
||||||
|
if ! TAG="$(git describe --tags --exact-match 2>/dev/null)"; then
|
||||||
|
TAG="$(git describe --tags --abbrev=0 2>/dev/null || true)"
|
||||||
|
if [ -z "${TAG}" ]; then
|
||||||
|
echo "warning: current commit is untagged and no tagged ancestor was found"
|
||||||
|
else
|
||||||
|
echo "warning: current commit is untagged; nearest tag is ${TAG}"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
echo "tagged: ${TAG}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
docker compose up -d --build
|
||||||
|
docker compose ps
|
||||||
@@ -53,6 +53,7 @@ const expectedAppTargets = [
|
|||||||
'diff',
|
'diff',
|
||||||
'time',
|
'time',
|
||||||
'text',
|
'text',
|
||||||
|
'translator',
|
||||||
'unicode',
|
'unicode',
|
||||||
'flow',
|
'flow',
|
||||||
'subtitle',
|
'subtitle',
|
||||||
|
|||||||
@@ -0,0 +1,313 @@
|
|||||||
|
#!/usr/bin/env node
|
||||||
|
import path from 'node:path';
|
||||||
|
import { readFile, access } from 'node:fs/promises';
|
||||||
|
import { createHash } from 'node:crypto';
|
||||||
|
|
||||||
|
const SEMVER = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
|
||||||
|
|
||||||
|
function usage() {
|
||||||
|
return `Usage: node scripts/publish-release.mjs [options]
|
||||||
|
|
||||||
|
Uploads prepared release artifacts to a Gitea release.
|
||||||
|
|
||||||
|
Options:
|
||||||
|
--api-base URL Gitea API base (default: https://git.add-ideas.de/api/v1)
|
||||||
|
--owner OWNER Gitea repository owner (default: lotobo)
|
||||||
|
--repo REPO Gitea repository (default: toolbox-portal)
|
||||||
|
--tag TAG Release tag, e.g. v0.20.3 (default: from --lock-file)
|
||||||
|
--target HASH Target commit SHA for release creation
|
||||||
|
--name NAME Release name
|
||||||
|
--body BODY Optional release body
|
||||||
|
--archive PATH Release ZIP path
|
||||||
|
--checksum PATH SHA256 file path
|
||||||
|
--lock-file PATH Release lock file (default: release/toolbox.lock.json)
|
||||||
|
--token TOKEN Gitea API token; defaults to GITEA_TOKEN env
|
||||||
|
--dry-run Print actions without contacting Gitea
|
||||||
|
--help Show this help
|
||||||
|
`;
|
||||||
|
}
|
||||||
|
|
||||||
|
function parseArguments(argv) {
|
||||||
|
if (argv.includes('--help')) {
|
||||||
|
console.log(usage());
|
||||||
|
process.exit(0);
|
||||||
|
}
|
||||||
|
|
||||||
|
const args = new Map();
|
||||||
|
for (let index = 0; index < argv.length; index += 1) {
|
||||||
|
const arg = argv[index];
|
||||||
|
if (!arg.startsWith('--')) throw new Error(`Unknown argument ${arg}`);
|
||||||
|
|
||||||
|
if (arg === '--dry-run') {
|
||||||
|
args.set(arg, true);
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
|
||||||
|
const value = argv[index + 1];
|
||||||
|
if (value === undefined) throw new Error(`Missing value for ${arg}`);
|
||||||
|
args.set(arg, value);
|
||||||
|
index += 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
return {
|
||||||
|
apiBase: args.get('--api-base') ?? 'https://git.add-ideas.de/api/v1',
|
||||||
|
owner: args.get('--owner') ?? 'lotobo',
|
||||||
|
repo: args.get('--repo') ?? 'toolbox-portal',
|
||||||
|
tag: args.get('--tag'),
|
||||||
|
target: args.get('--target'),
|
||||||
|
name: args.get('--name') ?? 'add-ideas Toolbox release',
|
||||||
|
body: args.get('--body'),
|
||||||
|
archive: args.get('--archive'),
|
||||||
|
checksum: args.get('--checksum'),
|
||||||
|
lockFile: args.get('--lock-file') ?? 'release/toolbox.lock.json',
|
||||||
|
token: args.get('--token') ?? process.env.GITEA_TOKEN,
|
||||||
|
dryRun: args.get('--dry-run') === true,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
async function readTokenFromEnvFile() {
|
||||||
|
const xdgConfig = process.env.XDG_CONFIG_HOME;
|
||||||
|
const homeConfig = process.env.HOME
|
||||||
|
? `${process.env.HOME}/.config/gitea/gitea.env`
|
||||||
|
: null;
|
||||||
|
|
||||||
|
const candidates = [];
|
||||||
|
if (xdgConfig) candidates.push(`${xdgConfig}/gitea/gitea.env`);
|
||||||
|
if (homeConfig) candidates.push(homeConfig);
|
||||||
|
|
||||||
|
for (const candidate of candidates) {
|
||||||
|
try {
|
||||||
|
await access(candidate);
|
||||||
|
} catch {
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
|
||||||
|
const fileContent = await readFile(candidate, 'utf8');
|
||||||
|
const tokenLine = fileContent
|
||||||
|
.split('\n')
|
||||||
|
.map((line) => line.trim())
|
||||||
|
.find((line) => line.startsWith('GITEA_TOKEN='));
|
||||||
|
|
||||||
|
if (!tokenLine) continue;
|
||||||
|
|
||||||
|
const token = tokenLine.split('=', 2)[1]?.trim();
|
||||||
|
if (token) return token;
|
||||||
|
}
|
||||||
|
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
|
||||||
|
async function giteaRequest(url, options, { allowNotFound = false } = {}) {
|
||||||
|
const response = await fetch(url, {
|
||||||
|
...options,
|
||||||
|
headers: {
|
||||||
|
Accept: 'application/json',
|
||||||
|
...(options.headers ?? {}),
|
||||||
|
},
|
||||||
|
});
|
||||||
|
|
||||||
|
if (allowNotFound && response.status === 404) {
|
||||||
|
return { notFound: true, status: 404 };
|
||||||
|
}
|
||||||
|
|
||||||
|
const text = await response.text();
|
||||||
|
const payload = text
|
||||||
|
? (() => {
|
||||||
|
try {
|
||||||
|
return JSON.parse(text);
|
||||||
|
} catch {
|
||||||
|
return { raw: text };
|
||||||
|
}
|
||||||
|
})()
|
||||||
|
: null;
|
||||||
|
|
||||||
|
if (!response.ok) {
|
||||||
|
const detail =
|
||||||
|
payload && typeof payload === 'object' && payload.error
|
||||||
|
? payload.error
|
||||||
|
: (payload?.raw ?? text ?? '');
|
||||||
|
throw new Error(
|
||||||
|
`Gitea API request failed (${response.status} ${response.statusText}): ${detail}`
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
return payload;
|
||||||
|
}
|
||||||
|
|
||||||
|
function sha256Digest(content) {
|
||||||
|
return createHash('sha256').update(content).digest('hex');
|
||||||
|
}
|
||||||
|
|
||||||
|
function parseChecksumFile(raw) {
|
||||||
|
const [first] = String(raw).trim().split(/\s+/);
|
||||||
|
return first?.toLowerCase() ?? '';
|
||||||
|
}
|
||||||
|
|
||||||
|
function parseReleaseVersionFromLock(lockJson) {
|
||||||
|
return lockJson.releaseVersion;
|
||||||
|
}
|
||||||
|
|
||||||
|
async function run() {
|
||||||
|
const options = parseArguments(process.argv.slice(2));
|
||||||
|
|
||||||
|
const lock = await readFile(options.lockFile, 'utf8');
|
||||||
|
const lockJson = JSON.parse(lock);
|
||||||
|
if (!SEMVER.test(lockJson.releaseVersion)) {
|
||||||
|
throw new Error(
|
||||||
|
`Invalid releaseVersion in lock: ${lockJson.releaseVersion}`
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
const releaseVersion = parseReleaseVersionFromLock(lockJson);
|
||||||
|
const releaseTag = options.tag ?? `v${releaseVersion}`;
|
||||||
|
const dryRun = options.dryRun === true;
|
||||||
|
|
||||||
|
let token = options.token;
|
||||||
|
if (!token && !dryRun) token = await readTokenFromEnvFile();
|
||||||
|
if (!token && !dryRun) {
|
||||||
|
throw new Error('GITEA_TOKEN is required. Set env or provide --token.');
|
||||||
|
}
|
||||||
|
if (!token && dryRun) token = 'dry-run-token';
|
||||||
|
|
||||||
|
if (!options.archive) {
|
||||||
|
throw new Error('Missing --archive');
|
||||||
|
}
|
||||||
|
if (!options.checksum) {
|
||||||
|
throw new Error('Missing --checksum');
|
||||||
|
}
|
||||||
|
|
||||||
|
const archive = path.resolve(options.archive);
|
||||||
|
const checksumFile = path.resolve(options.checksum);
|
||||||
|
|
||||||
|
const [archiveData, checksumRaw] = await Promise.all([
|
||||||
|
readFile(archive),
|
||||||
|
readFile(checksumFile, 'utf8'),
|
||||||
|
]);
|
||||||
|
|
||||||
|
const expectedChecksum = parseChecksumFile(checksumRaw);
|
||||||
|
const computedChecksum = sha256Digest(archiveData);
|
||||||
|
if (!expectedChecksum) {
|
||||||
|
throw new Error(`Checksum file is empty: ${checksumFile}`);
|
||||||
|
}
|
||||||
|
if (!/^[a-f0-9]{64}$/i.test(expectedChecksum)) {
|
||||||
|
throw new Error(`Invalid checksum format in ${checksumFile}`);
|
||||||
|
}
|
||||||
|
if (expectedChecksum.toLowerCase() !== computedChecksum.toLowerCase()) {
|
||||||
|
throw new Error(
|
||||||
|
`Checksum mismatch for ${options.archive}. computed=${computedChecksum} file=${expectedChecksum}`
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (dryRun) {
|
||||||
|
console.log(
|
||||||
|
`DRY-RUN: would ensure or create release ${releaseTag} on ${options.owner}/${options.repo}.`
|
||||||
|
);
|
||||||
|
console.log(
|
||||||
|
`DRY-RUN: would upload assets ${path.basename(archive)} and ${path.basename(checksumFile)}.`
|
||||||
|
);
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
const apiBase = options.apiBase.replace(/\/+$/, '');
|
||||||
|
const releasePrefix = `${apiBase}/repos/${options.owner}/${options.repo}`;
|
||||||
|
const auth = `token ${token}`;
|
||||||
|
|
||||||
|
const headers = { Authorization: auth };
|
||||||
|
const tagUrl = `${releasePrefix}/releases/tags/${encodeURIComponent(releaseTag)}`;
|
||||||
|
const tagLookup = await giteaRequest(
|
||||||
|
tagUrl,
|
||||||
|
{ method: 'GET', headers },
|
||||||
|
{ allowNotFound: true }
|
||||||
|
);
|
||||||
|
|
||||||
|
let release;
|
||||||
|
if (tagLookup?.notFound) {
|
||||||
|
const body = {
|
||||||
|
tag_name: releaseTag,
|
||||||
|
target_commitish: options.target || 'main',
|
||||||
|
name: options.name,
|
||||||
|
body:
|
||||||
|
options.body ||
|
||||||
|
`Automated release of add-ideas toolbox ${releaseTag} from lock release ${releaseVersion}.`,
|
||||||
|
draft: false,
|
||||||
|
prerelease: false,
|
||||||
|
};
|
||||||
|
if (dryRun) {
|
||||||
|
console.log(
|
||||||
|
`DRY-RUN: would create release ${releaseTag} on ${options.owner}/${options.repo}`
|
||||||
|
);
|
||||||
|
release = { id: '<dry-run>', assets: [] };
|
||||||
|
} else {
|
||||||
|
release = await giteaRequest(`${releasePrefix}/releases`, {
|
||||||
|
method: 'POST',
|
||||||
|
headers: {
|
||||||
|
...headers,
|
||||||
|
'Content-Type': 'application/json',
|
||||||
|
},
|
||||||
|
body: JSON.stringify(body),
|
||||||
|
});
|
||||||
|
console.log(`Created release ${releaseTag} (${release.id})`);
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
release = tagLookup;
|
||||||
|
if (dryRun) {
|
||||||
|
console.log(
|
||||||
|
`DRY-RUN: would reuse existing release ${releaseTag} (${release?.id ?? 'unknown'})`
|
||||||
|
);
|
||||||
|
} else {
|
||||||
|
console.log(`Using existing release ${releaseTag} (${release.id})`);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if (dryRun) {
|
||||||
|
console.log(
|
||||||
|
'DRY-RUN: would upload assets:',
|
||||||
|
options.archive,
|
||||||
|
options.checksum
|
||||||
|
);
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
const existingAssets = release.assets ?? [];
|
||||||
|
const candidateAssets = [
|
||||||
|
{ path: archive, name: path.basename(archive) },
|
||||||
|
{ path: checksumFile, name: path.basename(checksumFile) },
|
||||||
|
];
|
||||||
|
|
||||||
|
for (const asset of candidateAssets) {
|
||||||
|
const duplicate = existingAssets.find((entry) => entry.name === asset.name);
|
||||||
|
if (duplicate) {
|
||||||
|
console.log(
|
||||||
|
`Deleting existing asset ${asset.name} from release ${releaseTag}`
|
||||||
|
);
|
||||||
|
await giteaRequest(
|
||||||
|
`${releasePrefix}/releases/assets/${duplicate.id}`,
|
||||||
|
{ method: 'DELETE', headers },
|
||||||
|
{ allowNotFound: true }
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
const payload = await readFile(asset.path);
|
||||||
|
const form = new FormData();
|
||||||
|
form.set('attachment', new Blob([payload]), asset.name);
|
||||||
|
|
||||||
|
console.log(`Uploading ${asset.name}`);
|
||||||
|
await giteaRequest(
|
||||||
|
`${releasePrefix}/releases/${release.id}/assets?name=${encodeURIComponent(asset.name)}`,
|
||||||
|
{
|
||||||
|
method: 'POST',
|
||||||
|
headers,
|
||||||
|
body: form,
|
||||||
|
}
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
console.log(
|
||||||
|
`Release ${releaseTag} published on ${options.owner}/${options.repo}`
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
run().catch((error) => {
|
||||||
|
console.error(error instanceof Error ? error.message : String(error));
|
||||||
|
process.exit(1);
|
||||||
|
});
|
||||||
@@ -0,0 +1,265 @@
|
|||||||
|
#!/usr/bin/env bash
|
||||||
|
set -euo pipefail
|
||||||
|
|
||||||
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||||||
|
PROJECT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
|
||||||
|
cd "${PROJECT_DIR}"
|
||||||
|
|
||||||
|
usage() {
|
||||||
|
cat <<'USAGE'
|
||||||
|
Usage: scripts/release.sh [options]
|
||||||
|
|
||||||
|
Bundles the current lockfile into a portal archive and publishes the release to Gitea.
|
||||||
|
|
||||||
|
Options:
|
||||||
|
--lock PATH Lock file to use (default: release/toolbox.lock.json)
|
||||||
|
--tag TAG Release tag to create/push (default: v<releaseVersion>)
|
||||||
|
--owner OWNER Gitea owner/org (default: lotobo)
|
||||||
|
--repo REPO Gitea repository (default: toolbox-portal)
|
||||||
|
--api-base URL Gitea API base URL (default: https://git.add-ideas.de/api/v1)
|
||||||
|
--remote REMOTE Git remote used to push the tag (default: origin)
|
||||||
|
--build-dir DIR Build directory (default: build)
|
||||||
|
--output-subdir DIR Assembled output directory under build-dir (default: toolbox)
|
||||||
|
--skip-tests Skip npm test
|
||||||
|
--skip-assemble Skip npm run assemble
|
||||||
|
--skip-build Skip npm run build
|
||||||
|
--skip-tag Skip tagging/push of the release tag
|
||||||
|
--skip-git-push Skip pushing git branch and tag
|
||||||
|
--skip-publish Skip Gitea release publish/upload
|
||||||
|
--force Force overwrite of build outputs
|
||||||
|
--dry-run Print commands without running remote publishing operations
|
||||||
|
--help Show this help
|
||||||
|
|
||||||
|
Environment:
|
||||||
|
GITEA_TOKEN Personal token for Gitea API calls
|
||||||
|
GITEA_API_BASE Optional override for API base URL
|
||||||
|
|
||||||
|
Examples:
|
||||||
|
scripts/release.sh
|
||||||
|
scripts/release.sh --tag v0.20.4 --skip-tests
|
||||||
|
USAGE
|
||||||
|
}
|
||||||
|
|
||||||
|
LOCK_FILE="release/toolbox.lock.json"
|
||||||
|
OWNER="lotobo"
|
||||||
|
REPO="toolbox-portal"
|
||||||
|
API_BASE="${GITEA_API_BASE:-https://git.add-ideas.de/api/v1}"
|
||||||
|
REMOTE="origin"
|
||||||
|
BUILD_DIR="build"
|
||||||
|
OUTPUT_SUBDIR="toolbox"
|
||||||
|
SKIP_TESTS=0
|
||||||
|
SKIP_ASSEMBLE=0
|
||||||
|
SKIP_BUILD=0
|
||||||
|
SKIP_TAG=0
|
||||||
|
SKIP_GIT_PUSH=0
|
||||||
|
SKIP_PUBLISH=0
|
||||||
|
FORCE=0
|
||||||
|
DRY_RUN=0
|
||||||
|
|
||||||
|
while [ "$#" -gt 0 ]; do
|
||||||
|
case "$1" in
|
||||||
|
--lock)
|
||||||
|
LOCK_FILE="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
--tag)
|
||||||
|
TAG_OVERRIDE="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
--owner)
|
||||||
|
OWNER="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
--repo)
|
||||||
|
REPO="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
--api-base)
|
||||||
|
API_BASE="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
--remote)
|
||||||
|
REMOTE="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
--build-dir)
|
||||||
|
BUILD_DIR="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
--output-subdir)
|
||||||
|
OUTPUT_SUBDIR="$2"
|
||||||
|
shift 2
|
||||||
|
;;
|
||||||
|
--skip-tests)
|
||||||
|
SKIP_TESTS=1
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
--skip-assemble)
|
||||||
|
SKIP_ASSEMBLE=1
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
--skip-build)
|
||||||
|
SKIP_BUILD=1
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
--skip-tag)
|
||||||
|
SKIP_TAG=1
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
--skip-git-push)
|
||||||
|
SKIP_GIT_PUSH=1
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
--skip-publish)
|
||||||
|
SKIP_PUBLISH=1
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
--force)
|
||||||
|
FORCE=1
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
--dry-run)
|
||||||
|
DRY_RUN=1
|
||||||
|
shift
|
||||||
|
;;
|
||||||
|
--help|-h)
|
||||||
|
usage
|
||||||
|
exit 0
|
||||||
|
;;
|
||||||
|
*)
|
||||||
|
echo "Unknown argument: $1" >&2
|
||||||
|
usage
|
||||||
|
exit 1
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
done
|
||||||
|
|
||||||
|
run() {
|
||||||
|
if [ "$DRY_RUN" -eq 1 ]; then
|
||||||
|
echo "DRY-RUN: $*"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
"$@"
|
||||||
|
}
|
||||||
|
|
||||||
|
RELEASE_VERSION="$(node -e "const fs=require('fs');const path=process.argv[1];const lock=JSON.parse(fs.readFileSync(path,'utf8'));if(!lock?.releaseVersion){process.exit(1);}console.log(lock.releaseVersion);" "$LOCK_FILE")"
|
||||||
|
if [ -z "$RELEASE_VERSION" ]; then
|
||||||
|
echo "releaseVersion could not be read from ${LOCK_FILE}" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -n "${TAG_OVERRIDE:-}" ]; then
|
||||||
|
RELEASE_TAG="$TAG_OVERRIDE"
|
||||||
|
else
|
||||||
|
RELEASE_TAG="v${RELEASE_VERSION}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
ZIP_FILE="${BUILD_DIR}/add-ideas-toolbox-${RELEASE_VERSION}.zip"
|
||||||
|
CHECKSUM_FILE="${ZIP_FILE}.sha256"
|
||||||
|
TARGET_DIR="${BUILD_DIR}/${OUTPUT_SUBDIR}"
|
||||||
|
|
||||||
|
if [ "$SKIP_TESTS" -eq 0 ]; then
|
||||||
|
run npm test
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$SKIP_BUILD" -eq 0 ]; then
|
||||||
|
run npm run build
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$SKIP_ASSEMBLE" -eq 0 ]; then
|
||||||
|
ASSEMBLE_ARGS=(
|
||||||
|
npm
|
||||||
|
run
|
||||||
|
assemble
|
||||||
|
--
|
||||||
|
--lock
|
||||||
|
"$LOCK_FILE"
|
||||||
|
--portal-dist
|
||||||
|
dist
|
||||||
|
--output
|
||||||
|
"$TARGET_DIR"
|
||||||
|
--archive
|
||||||
|
"$ZIP_FILE"
|
||||||
|
)
|
||||||
|
if [ "$FORCE" -eq 1 ]; then
|
||||||
|
ASSEMBLE_ARGS+=(--force)
|
||||||
|
fi
|
||||||
|
run "${ASSEMBLE_ARGS[@]}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ! -s "$ZIP_FILE" ]; then
|
||||||
|
echo "Release archive missing: $ZIP_FILE" >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ! -s "$CHECKSUM_FILE" ]; then
|
||||||
|
if [ "$DRY_RUN" -eq 1 ]; then
|
||||||
|
echo "DRY-RUN: would create ${CHECKSUM_FILE}"
|
||||||
|
else
|
||||||
|
sha256sum "$ZIP_FILE" > "$CHECKSUM_FILE"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
if [ "$DRY_RUN" -eq 1 ]; then
|
||||||
|
echo "DRY-RUN: would refresh ${CHECKSUM_FILE}"
|
||||||
|
else
|
||||||
|
# ensure checksum always matches the current archive state
|
||||||
|
sha256sum "$ZIP_FILE" > "$CHECKSUM_FILE"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$SKIP_TAG" -eq 0 ]; then
|
||||||
|
if git rev-parse -q --verify "refs/tags/${RELEASE_TAG}" >/dev/null; then
|
||||||
|
CURRENT_COMMIT="$(git rev-parse "${RELEASE_TAG}^{commit}")"
|
||||||
|
HEAD_COMMIT="$(git rev-parse HEAD)"
|
||||||
|
if [ "$CURRENT_COMMIT" != "$HEAD_COMMIT" ]; then
|
||||||
|
echo "Tag ${RELEASE_TAG} already exists at ${CURRENT_COMMIT}, but HEAD is ${HEAD_COMMIT}." >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
echo "Tag exists at HEAD: ${RELEASE_TAG}"
|
||||||
|
else
|
||||||
|
echo "Creating tag ${RELEASE_TAG}"
|
||||||
|
run git tag -a "$RELEASE_TAG" -m "toolbox ${RELEASE_TAG}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$SKIP_GIT_PUSH" -eq 0 ]; then
|
||||||
|
run git push "$REMOTE" HEAD
|
||||||
|
run git push "$REMOTE" "$RELEASE_TAG"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$SKIP_PUBLISH" -eq 0 ]; then
|
||||||
|
TOKEN="${GITEA_TOKEN:-}"
|
||||||
|
if [ -z "$TOKEN" ]; then
|
||||||
|
if [ -f "${HOME}/.config/gitea/gitea.env" ]; then
|
||||||
|
# shellcheck disable=SC1091
|
||||||
|
. "${HOME}/.config/gitea/gitea.env"
|
||||||
|
TOKEN="${GITEA_TOKEN:-}"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$TOKEN" ]; then
|
||||||
|
echo "GITEA_TOKEN is required for publishing (or use --skip-publish)." >&2
|
||||||
|
exit 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
run node scripts/publish-release.mjs \
|
||||||
|
--api-base "$API_BASE" \
|
||||||
|
--owner "$OWNER" \
|
||||||
|
--repo "$REPO" \
|
||||||
|
--tag "$RELEASE_TAG" \
|
||||||
|
--target "$(git rev-parse HEAD)" \
|
||||||
|
--name "Toolbox ${RELEASE_TAG}" \
|
||||||
|
--archive "$ZIP_FILE" \
|
||||||
|
--checksum "$CHECKSUM_FILE" \
|
||||||
|
--lock-file "$LOCK_FILE" \
|
||||||
|
--token "$TOKEN"
|
||||||
|
|
||||||
|
if [ "$DRY_RUN" -eq 1 ]; then
|
||||||
|
echo "Dry run complete. No assets were uploaded."
|
||||||
|
else
|
||||||
|
echo "Published ${RELEASE_TAG} to Gitea."
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
echo "Release wrapper finished for ${RELEASE_TAG}"
|
||||||
@@ -0,0 +1,254 @@
|
|||||||
|
#!/usr/bin/env node
|
||||||
|
import { createHash } from 'node:crypto';
|
||||||
|
import { createReadStream } from 'node:fs';
|
||||||
|
import { access, readFile, writeFile } from 'node:fs/promises';
|
||||||
|
import path from 'node:path';
|
||||||
|
import { spawn } from 'node:child_process';
|
||||||
|
import { parseReleaseLock } from './release-lock.mjs';
|
||||||
|
|
||||||
|
const SEMVER = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
|
||||||
|
const HEX_HASH = /^[a-f0-9]{64}$/;
|
||||||
|
|
||||||
|
function usage() {
|
||||||
|
return `Usage: node scripts/update-release-lock.mjs --app-id ID --app-version VERSION --artifact URL --sha256 HEX --release-version SEMVER [options]
|
||||||
|
|
||||||
|
Options:
|
||||||
|
--lock PATH Path to release lock (default: release/toolbox.lock.json)
|
||||||
|
--portal-version SEMVER Optional portal package override
|
||||||
|
--app-id ID App id in lock (for example de.add-ideas.translator-tools)
|
||||||
|
--app-version VERSION App semantic version
|
||||||
|
--artifact URL Artifact URL/path/file: URL
|
||||||
|
--sha256 HEX Optional artifact checksum; required for remote artifacts
|
||||||
|
--release-version VERSION New toolbox release version
|
||||||
|
--assemble Run npm run build and npm run assemble after patching
|
||||||
|
--force Pass --force to assemble command
|
||||||
|
--help Show this message
|
||||||
|
`;
|
||||||
|
}
|
||||||
|
|
||||||
|
function parseArguments(argv) {
|
||||||
|
if (argv.includes('--help')) {
|
||||||
|
console.log(usage());
|
||||||
|
process.exit(0);
|
||||||
|
}
|
||||||
|
|
||||||
|
const args = new Map();
|
||||||
|
for (let index = 0; index < argv.length; index += 1) {
|
||||||
|
const option = argv[index];
|
||||||
|
if (!option.startsWith('--')) {
|
||||||
|
throw new Error(`Unknown argument: ${option}`);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (option === '--assemble' || option === '--force') {
|
||||||
|
args.set(option, true);
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
|
||||||
|
const value = argv[index + 1];
|
||||||
|
if (value === undefined) {
|
||||||
|
throw new Error(`${option} requires a value.`);
|
||||||
|
}
|
||||||
|
args.set(option, value);
|
||||||
|
index += 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
return {
|
||||||
|
lockFile: args.get('--lock') ?? 'release/toolbox.lock.json',
|
||||||
|
appId: args.get('--app-id'),
|
||||||
|
appVersion: args.get('--app-version'),
|
||||||
|
artifact: args.get('--artifact'),
|
||||||
|
sha256: args.get('--sha256'),
|
||||||
|
releaseVersion: args.get('--release-version'),
|
||||||
|
portalVersion: args.get('--portal-version'),
|
||||||
|
assemble: args.get('--assemble') === true,
|
||||||
|
forceAssemble: args.get('--force') === true,
|
||||||
|
};
|
||||||
|
}
|
||||||
|
|
||||||
|
function bumpPatch(version) {
|
||||||
|
const [major, minor, patchAndSuffix] = version.split('.');
|
||||||
|
const [patch] = patchAndSuffix.split('-');
|
||||||
|
const nextPatch = Number.parseInt(patch, 10) + 1;
|
||||||
|
return `${major}.${minor}.${nextPatch}`;
|
||||||
|
}
|
||||||
|
|
||||||
|
async function sha256ForPath(filePath) {
|
||||||
|
await access(filePath);
|
||||||
|
const hash = createHash('sha256');
|
||||||
|
const input = createReadStream(filePath);
|
||||||
|
await new Promise((resolve, reject) => {
|
||||||
|
input.on('data', (chunk) => hash.update(chunk));
|
||||||
|
input.on('error', reject);
|
||||||
|
input.on('end', resolve);
|
||||||
|
});
|
||||||
|
return hash.digest('hex');
|
||||||
|
}
|
||||||
|
|
||||||
|
async function computeRemoteSha256(url) {
|
||||||
|
const response = await fetch(url);
|
||||||
|
if (!response.ok) {
|
||||||
|
throw new Error(
|
||||||
|
`Unable to download artifact (${response.status} ${response.statusText}).`
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!response.body) {
|
||||||
|
throw new Error('Artifact download did not provide a response body.');
|
||||||
|
}
|
||||||
|
|
||||||
|
const hash = createHash('sha256');
|
||||||
|
const reader = response.body.getReader();
|
||||||
|
for (;;) {
|
||||||
|
const { done, value } = await reader.read();
|
||||||
|
if (done) break;
|
||||||
|
hash.update(Buffer.from(value));
|
||||||
|
}
|
||||||
|
return hash.digest('hex');
|
||||||
|
}
|
||||||
|
|
||||||
|
function resolveArtifactPath(artifact, lockDirectory) {
|
||||||
|
if (/^file:/i.test(artifact)) return new URL(artifact).pathname;
|
||||||
|
if (/^https?:/i.test(artifact)) return null;
|
||||||
|
return path.resolve(lockDirectory, artifact);
|
||||||
|
}
|
||||||
|
|
||||||
|
function toShaIfNeeded(hash) {
|
||||||
|
if (!hash) return null;
|
||||||
|
const normalized = hash.toLowerCase();
|
||||||
|
if (!HEX_HASH.test(normalized)) {
|
||||||
|
throw new Error('Provided --sha256 is not a valid 64 hex hash.');
|
||||||
|
}
|
||||||
|
return normalized;
|
||||||
|
}
|
||||||
|
|
||||||
|
function command(cwd) {
|
||||||
|
return (name, args) =>
|
||||||
|
new Promise((resolve, reject) => {
|
||||||
|
const child = spawn(name, args, {
|
||||||
|
cwd,
|
||||||
|
stdio: 'inherit',
|
||||||
|
shell: true,
|
||||||
|
});
|
||||||
|
|
||||||
|
child.on('error', reject);
|
||||||
|
child.on('exit', (code) =>
|
||||||
|
code === 0
|
||||||
|
? resolve(undefined)
|
||||||
|
: reject(
|
||||||
|
new Error(`${name} ${args.join(' ')} failed with code ${code}`)
|
||||||
|
)
|
||||||
|
);
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
async function run() {
|
||||||
|
const options = parseArguments(process.argv.slice(2));
|
||||||
|
if (
|
||||||
|
!options.appId ||
|
||||||
|
!options.appVersion ||
|
||||||
|
!options.artifact ||
|
||||||
|
!options.releaseVersion
|
||||||
|
) {
|
||||||
|
throw new Error(`Missing required options.
|
||||||
|
|
||||||
|
${usage()}`);
|
||||||
|
}
|
||||||
|
if (!SEMVER.test(options.releaseVersion)) {
|
||||||
|
throw new Error(
|
||||||
|
`--release-version must be semver: ${options.releaseVersion}`
|
||||||
|
);
|
||||||
|
}
|
||||||
|
if (!SEMVER.test(options.appVersion)) {
|
||||||
|
throw new Error(`--app-version must be semver: ${options.appVersion}`);
|
||||||
|
}
|
||||||
|
|
||||||
|
const lockPath = path.resolve(options.lockFile);
|
||||||
|
const lockDir = path.dirname(lockPath);
|
||||||
|
const lockJson = JSON.parse(await readFile(lockPath, 'utf8'));
|
||||||
|
const lock = parseReleaseLock(lockJson);
|
||||||
|
const nextReleaseVersion =
|
||||||
|
options.releaseVersion ?? bumpPatch(lock.releaseVersion);
|
||||||
|
if (!SEMVER.test(nextReleaseVersion)) {
|
||||||
|
throw new Error(`Invalid release version: ${nextReleaseVersion}`);
|
||||||
|
}
|
||||||
|
|
||||||
|
const appIndex = lock.apps.findIndex((app) => app.id === options.appId);
|
||||||
|
if (appIndex < 0) {
|
||||||
|
throw new Error(`App id not found in lock: ${options.appId}`);
|
||||||
|
}
|
||||||
|
|
||||||
|
const artifactPath = resolveArtifactPath(options.artifact, lockDir);
|
||||||
|
let sha256 = toShaIfNeeded(options.sha256);
|
||||||
|
if (!sha256) {
|
||||||
|
if (artifactPath) {
|
||||||
|
sha256 = await sha256ForPath(artifactPath);
|
||||||
|
} else {
|
||||||
|
sha256 = await computeRemoteSha256(options.artifact);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if (!HEX_HASH.test(sha256)) {
|
||||||
|
throw new Error('Computed checksum is malformed.');
|
||||||
|
}
|
||||||
|
|
||||||
|
const updatedApps = [...lock.apps];
|
||||||
|
const previous = updatedApps[appIndex];
|
||||||
|
updatedApps[appIndex] = {
|
||||||
|
...previous,
|
||||||
|
version: options.appVersion,
|
||||||
|
artifact: options.artifact,
|
||||||
|
sha256,
|
||||||
|
};
|
||||||
|
|
||||||
|
const nextLock = {
|
||||||
|
...lock,
|
||||||
|
releaseVersion: nextReleaseVersion,
|
||||||
|
apps: updatedApps,
|
||||||
|
};
|
||||||
|
if (options.portalVersion) {
|
||||||
|
if (!SEMVER.test(options.portalVersion))
|
||||||
|
throw new Error(
|
||||||
|
`--portal-version must be semver: ${options.portalVersion}`
|
||||||
|
);
|
||||||
|
nextLock.portalVersion = options.portalVersion;
|
||||||
|
}
|
||||||
|
|
||||||
|
parseReleaseLock(nextLock);
|
||||||
|
await writeFile(lockPath, `${JSON.stringify(nextLock, null, 2)}\n`, 'utf8');
|
||||||
|
console.log(
|
||||||
|
`Updated ${path.relative(process.cwd(), lockPath)} (${options.appId})`
|
||||||
|
);
|
||||||
|
|
||||||
|
if (!options.assemble) return;
|
||||||
|
const runCommand = command(process.cwd());
|
||||||
|
await runCommand('npm', ['run', 'build']);
|
||||||
|
const archive = `build/add-ideas-toolbox-${nextReleaseVersion}.zip`;
|
||||||
|
const assembleArgs = [
|
||||||
|
'run',
|
||||||
|
'assemble',
|
||||||
|
'--',
|
||||||
|
'--lock',
|
||||||
|
options.lockFile,
|
||||||
|
'--portal-dist',
|
||||||
|
'dist',
|
||||||
|
'--output',
|
||||||
|
'build/toolbox',
|
||||||
|
'--archive',
|
||||||
|
archive,
|
||||||
|
];
|
||||||
|
if (options.forceAssemble) assembleArgs.push('--force');
|
||||||
|
await runCommand('npm', assembleArgs);
|
||||||
|
console.log(`Assembled release -> ${archive}`);
|
||||||
|
const releaseChecksum = `${archive}.sha256`;
|
||||||
|
const releaseSha256 = await sha256ForPath(archive);
|
||||||
|
await writeFile(
|
||||||
|
releaseChecksum,
|
||||||
|
`${releaseSha256} ${path.basename(archive)}\n`,
|
||||||
|
'utf8'
|
||||||
|
);
|
||||||
|
console.log(`Assembled release checksum: ${releaseSha256}`);
|
||||||
|
}
|
||||||
|
|
||||||
|
run().catch((error) => {
|
||||||
|
console.error(error instanceof Error ? error.message : String(error));
|
||||||
|
process.exit(1);
|
||||||
|
});
|
||||||
+2
-2
@@ -489,9 +489,9 @@ export default function App() {
|
|||||||
</span>
|
</span>
|
||||||
</p>
|
</p>
|
||||||
<span>
|
<span>
|
||||||
Portal v0.2.23 ·{' '}
|
Portal v0.2.24 ·{' '}
|
||||||
<a
|
<a
|
||||||
href="https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.20.0"
|
href="https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.20.6"
|
||||||
target="_blank"
|
target="_blank"
|
||||||
rel="noopener noreferrer"
|
rel="noopener noreferrer"
|
||||||
>
|
>
|
||||||
|
|||||||
Reference in New Issue
Block a user