Release Toolbox v0.19.0

.env.example

@@ -1,8 +1,9 @@
 # Optional overrides for compose.yaml. Its defaults already match production.
 TOOLBOX_HOST=toolbox.add-ideas.de
+AUTH_TOOLS_HOST=auth.toolbox.add-ideas.de
 TRAEFIK_NETWORK=internal
 TRAEFIK_CERT_RESOLVER=netcup
 
 # Keep these two values paired when deploying a newer published toolbox release.
-TOOLBOX_RELEASE_VERSION=0.4.3
+TOOLBOX_RELEASE_VERSION=0.19.0
-TOOLBOX_RELEASE_SHA256=0c26315c987f7ef6d025c66c21e25999786ede3e971b66495c856117e0b7c522
+TOOLBOX_RELEASE_SHA256=b6003d8b3eee8a13032527b014a381d832ba46108c35d0aee9e1cfa6a1b281e2

.npmrc

@@ -1 +1 @@
-@add-ideas:registry=https://git.add-ideas.de/api/packages/zemion/npm/
+@add-ideas:registry=https://git.add-ideas.de/api/packages/lotobo/npm/

Containerfile.release

@@ -2,9 +2,9 @@ ARG NGINX_IMAGE=nginxinc/nginx-unprivileged:1.31.3-alpine@sha256:18d67281256ded3
 
 FROM ${NGINX_IMAGE} AS release
 
-ARG TOOLBOX_RELEASE_VERSION=0.4.3
+ARG TOOLBOX_RELEASE_VERSION=0.19.0
-ARG TOOLBOX_RELEASE_SHA256=0c26315c987f7ef6d025c66c21e25999786ede3e971b66495c856117e0b7c522
+ARG TOOLBOX_RELEASE_SHA256=b6003d8b3eee8a13032527b014a381d832ba46108c35d0aee9e1cfa6a1b281e2
-ARG TOOLBOX_RELEASE_BASE_URL=https://git.add-ideas.de/zemion/toolbox-portal/releases/download
+ARG TOOLBOX_RELEASE_BASE_URL=https://git.add-ideas.de/lotobo/toolbox-portal/releases/download
 
 RUN set -eu; \
     archive="add-ideas-toolbox-${TOOLBOX_RELEASE_VERSION}.zip"; \
@@ -21,6 +21,53 @@ RUN set -eu; \
     test -f /tmp/toolbox/apps/pdf/toolbox-app.json; \
     test -f /tmp/toolbox/apps/xslt/toolbox-app.json; \
     test -f /tmp/toolbox/apps/onenote/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/av/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/regex/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/svg/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/auth/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/sudoku/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/colour/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/office/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/image/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/file/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/epub/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/archive/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/privacy/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/crypto/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/barcode/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/network/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/geo/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/helper/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/rand/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/data/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/diff/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/time/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/text/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/unicode/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/flow/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/subtitle/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/midi/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/3d/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/query/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/scan/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/package/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/label/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/font/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/fixture/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/minimize/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/format-lab/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/repro/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/schema/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/log/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/binary/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/git/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/api/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/mail/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/calendar/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/contact/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/diagram/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/token/toolbox-app.json; \
+    test -f /tmp/toolbox/apps/device/toolbox-app.json; \
     rm "/tmp/${archive}"
 
 FROM ${NGINX_IMAGE}

README.md

@@ -1,7 +1,7 @@
 # add·ideas Toolbox Portal
 
 `toolbox-portal` is the static launcher and release assembler for the add·ideas
-browser toolbox. Version `0.2.3` reads one same-origin catalogue, shows each app
+browser toolbox. Version `0.2.22` reads one same-origin catalogue, shows each app
 as a compact launch tile, and keeps personal pins, drag-and-drop ordering,
 visibility, and appearance in the current browser. Pinned tools have their own
 section; search, category, and clickable tag filters stay close to the tool
@@ -30,15 +30,27 @@ npm run build
 npm run dev
 ```
 
-The package lock resolves the `^0.2.2` SDK ranges to the published `0.2.2`
+The package lock resolves the `^0.2.3` SDK ranges to the published `0.2.3`
 packages. A sibling SDK checkout is only needed when intentionally developing
 the SDK and portal together.
 
 Vite uses `base: './'`, so the built portal works at `/` or a nested static path.
 The development catalogue at `public/toolbox.catalog.json` points to assembled
-paths (`./apps/pdf/`, `./apps/xslt/`, and `./apps/onenote/`). Those manifests
+paths (`./apps/pdf/`, `./apps/xslt/`, `./apps/onenote/`, `./apps/av/`,
-will correctly appear as unavailable until an assembled release is being
+`./apps/regex/`, `./apps/svg/`, `./apps/auth/`, `./apps/sudoku/`,
-served.
+`./apps/colour/`, `./apps/office/`, `./apps/image/`, `./apps/file/`,
+`./apps/epub/`, `./apps/archive/`, `./apps/privacy/`, `./apps/crypto/`,
+`./apps/barcode/`, `./apps/network/`, `./apps/geo/`, `./apps/helper/`,
+`./apps/rand/`, `./apps/data/`, `./apps/diff/`, `./apps/time/`,
+`./apps/text/`, `./apps/unicode/`, `./apps/flow/`, `./apps/subtitle/`,
+`./apps/midi/`, `./apps/3d/`, `./apps/query/`, `./apps/scan/`,
+`./apps/package/`, `./apps/label/`, `./apps/font/`, `./apps/fixture/`,
+`./apps/minimize/`, `./apps/format-lab/`, `./apps/repro/`, `./apps/schema/`,
+`./apps/log/`, `./apps/binary/`, `./apps/git/`, `./apps/api/`, `./apps/mail/`,
+`./apps/calendar/`, `./apps/contact/`, `./apps/diagram/`, `./apps/token/`, and
+`./apps/device/`).
+Those manifests will correctly appear as unavailable until an assembled release
+is being served.
 
 ## Catalogue and launches
 
@@ -68,7 +80,7 @@ privacy and executable-code warning. Light, dark, and system modes are supported
 ## Production deployment behind Traefik
 
 The committed `compose.yaml` is the shortest production path. Its release
-container downloads the immutable Toolbox 0.4.3 ZIP during the image build,
+container downloads the immutable Toolbox 0.19.0 ZIP during the image build,
 verifies SHA-256 before extracting it, and then copies only the verified static
 files into the pinned unprivileged nginx image. Node.js and a local portal
 assembly are not required on the deployment host.
@@ -77,27 +89,40 @@ Prerequisites:
 
 - Docker with the Compose plugin;
 - Traefik attached to the existing external Docker network `internal`;
-- a Traefik HTTPS entrypoint named `websecure`;
+- Traefik HTTP and HTTPS entrypoints named `web` and `websecure`;
 - a certificate resolver named `netcup`;
-- DNS for `toolbox.add-ideas.de` pointing to that Traefik instance; and
+- DNS for `toolbox.add-ideas.de` and `auth.toolbox.add-ideas.de` pointing to that Traefik instance; and
 - outbound HTTPS access to `git.add-ideas.de` while the image is built.
 
 Deploy a fresh clone with:
 
 ```sh
-git clone https://git.add-ideas.de/zemion/toolbox-portal.git
+git clone https://git.add-ideas.de/lotobo/toolbox-portal.git
 cd toolbox-portal
 docker compose up -d --build
 docker compose ps
 ```
 
-No host port is published. Traefik routes
+No host port is published. Traefik permanently redirects
-`https://toolbox.add-ideas.de` to nginx on the shared network at port 8080 and
+`http://toolbox.add-ideas.de` to HTTPS, routes
+`https://toolbox.add-ideas.de` to nginx on the shared network at port 8080, and
 obtains its TLS certificate through `netcup`. The hostname, network, resolver,
 release version, and matching checksum can be overridden through environment
 variables; copy `.env.example` to `.env` only when an override is needed. For
 example, set `TOOLBOX_HOST=staging.toolbox.add-ideas.de` for a staging host.
 
+The same container also exposes only the packaged authentication app at
+`https://auth.toolbox.add-ideas.de/`. Traefik adds the internal `/apps/auth`
+prefix while the public URL remains `/`, so assets remain relative and the browser
+binds WebAuthn credentials to the dedicated `auth.toolbox.add-ideas.de` RP ID.
+The main Toolbox copy at `/apps/auth/` remains useful for offline inspection but
+disables live ceremonies because all Portal apps share that origin. The router
+hostname can be overridden with `AUTH_TOOLS_HOST`, but the bundled Auth Tools
+release enables live ceremonies only on its pinned production host (or
+localhost); other hosts remain inspect-only. A different production host
+therefore also requires rebuilding Auth Tools with the new exact host. Never
+widen the RP ID to `add-ideas.de`.
+
 The external network is deliberately not created by this project. Creating a
 private project-local network would prevent an independently managed Traefik
 container from reaching the service.
@@ -119,9 +144,18 @@ The app release should also publish a matching `.sha256` sidecar. The manifest
 must declare the pinned reverse-DNS id and version. Application and portal
 versions are independent.
 
-`release/toolbox.lock.json` is the reviewed v0.4.3 lock. Its URLs and checksums
+`release/toolbox.lock.json` is the reviewed Toolbox v0.19.0 / Portal v0.2.22
-pin the published PDF Tools 0.4.3, XSLT Tools 0.4.2, and OneNote Tools 0.3.3
+lock. Its URLs and checksums pin the published PDF Tools 0.4.4, XSLT Tools
-release bytes. Use
+0.4.3, OneNote Tools 0.3.4,
+Audio & Video Tools 0.3.0, Regex Tools 0.4.2, SVG Tools 0.1.0, OTP & Passkey
+Tools 0.3.1, Sudoku Tools 0.2.1, Colour Tools 0.1.0, Office Tools 0.1.0,
+Random Tools 0.1.1, and the 0.1.0 releases of Image, File, EPUB, Archive,
+Privacy, Crypto, Barcode, Network, Geo, Helper, Data, Diff, Time, Text, Unicode,
+Flow, Subtitle, MIDI, 3D, Query, Scan, Package, Label, Font, Fixture, Minimize,
+Format Lab, Repro, Log, Binary, Git, API, Mail, Calendar, Contact,
+Diagram, Token, and Device Tools.
+Schema Tools is pinned at its hardened v0.1.2 release.
+Use
 `release/toolbox.lock.example.json` as the template for a future release and
 verify every downloaded asset before committing updated values. Artifacts may be:
 
@@ -142,7 +176,7 @@ npm run assemble -- \
   --lock release/toolbox.lock.json \
   --portal-dist dist \
   --output build/toolbox \
-  --archive build/add-ideas-toolbox-0.4.3.zip
+  --archive build/add-ideas-toolbox-0.19.0.zip
 ```
 
 Existing output is refused. Pass `--force` only when replacing those exact
@@ -160,10 +194,57 @@ build/toolbox/
 └── apps/
     ├── pdf/
     ├── xslt/
-    └── onenote/
+    ├── onenote/
+    ├── av/
+    ├── regex/
+    ├── svg/
+    ├── auth/
+    ├── sudoku/
+    ├── colour/
+    ├── office/
+    ├── image/
+    ├── file/
+    ├── epub/
+    ├── archive/
+    ├── privacy/
+    ├── crypto/
+    ├── barcode/
+    ├── network/
+    ├── geo/
+    ├── helper/
+    ├── rand/
+    ├── data/
+    ├── diff/
+    ├── time/
+    ├── text/
+    ├── unicode/
+    ├── flow/
+    ├── subtitle/
+    ├── midi/
+    ├── 3d/
+    ├── query/
+    ├── scan/
+    ├── package/
+    ├── label/
+    ├── font/
+    ├── fixture/
+    ├── minimize/
+    ├── format-lab/
+    ├── repro/
+    ├── schema/
+    ├── log/
+    ├── binary/
+    ├── git/
+    ├── api/
+    ├── mail/
+    ├── calendar/
+    ├── contact/
+    ├── diagram/
+    ├── token/
+    └── device/
 
-build/add-ideas-toolbox-0.4.3.zip
+build/add-ideas-toolbox-0.19.0.zip
-build/add-ideas-toolbox-0.4.3.zip.sha256
+build/add-ideas-toolbox-0.19.0.zip.sha256
 ```
 
 The assembler verifies SHA-256 before opening an artifact, validates every app
@@ -184,26 +265,42 @@ directory separately:
 ```sh
 npm run package:static -- \
   --input build/toolbox \
-  --output artifacts/add-ideas-toolbox-0.4.3.zip
+  --output artifacts/add-ideas-toolbox-0.19.0.zip
 ```
 
 This also emits a `.sha256` sidecar.
 
 ## Local assembled container and publication
 
-`Containerfile` serves only the assembled files with unprivileged nginx on port 8080. It adds restrictive browser headers, same-origin isolation, immutable
+`Containerfile` serves only the assembled files with unprivileged nginx on port 8080. It adds restrictive browser headers, same-origin isolation, explicit
-caching only for Vite-hashed assets, and revalidation for all other files.
+`application/javascript` for `.mjs` engine modules, `application/wasm`, and
-Assemble first, then:
+`application/gzip` for the bundled Scan OCR language model,
+immutable caching only for Vite-hashed assets and narrowly matched
+semver-versioned FFmpeg core files, and revalidation for all other files. The
+opaque-origin SVG preview iframe loads its packaged controller with a URI-exact
+CORS and cross-origin resource-policy exception; all other files retain the
+same-origin policy and every normal security header. Camera access is denied by
+default. It is granted to the dedicated `auth.toolbox.add-ideas.de` origin and,
+on the shared Toolbox host, only to `/apps/barcode/`, `/apps/scan/`, and
+`/apps/device/`. Device Tools alone additionally receives microphone and screen-
+capture policy at its exact path; every probe remains explicitly user initiated.
+If `AUTH_TOOLS_HOST` is customized, update
+the exact host entry in `deploy/nginx.conf` and Auth Tools' pinned WebAuthn host
+at the same time. Every Toolbox app, including Random Tools, is constrained to
+same-origin connections. Random Tools implements its random generators locally
+with browser APIs and never calls a third-party randomness service.
 
 The packaged policy intentionally does not grant CSP `unsafe-eval`. SaxonJS's
 `ixsl:eval()` extension is therefore unsupported in this deployment profile;
 normal local XML/XSLT transformations do not require that permission.
 
+Assemble first, then:
+
 ```sh
 podman build -f Containerfile \
-  -t git.add-ideas.de/zemion/toolbox:0.4.3 .
+  -t git.add-ideas.de/lotobo/toolbox:0.19.0 .
 podman run --rm -p 8080:8080 \
-  git.add-ideas.de/zemion/toolbox:0.4.3
+  git.add-ideas.de/lotobo/toolbox:0.19.0
 ```
 
 For a direct-port local deployment after assembly, use the separate example:
@@ -220,8 +317,8 @@ docker login git.add-ideas.de
 docker buildx build \
   --platform linux/amd64,linux/arm64 \
   --file Containerfile.release \
-  --tag git.add-ideas.de/zemion/toolbox:0.4.3 \
+  --tag git.add-ideas.de/lotobo/toolbox:0.19.0 \
-  --tag git.add-ideas.de/zemion/toolbox:0.4 \
+  --tag git.add-ideas.de/lotobo/toolbox:0.19 \
   --push .
 ```
 
@@ -232,9 +329,9 @@ notes.
 
 ## Manual Gitea publication checklist
 
-No credentials belong in this repository. Before the first release, create the
+No credentials belong in this repository. The publishing workstation or runner
-`zemion/toolbox-portal` Gitea repository and grant the workstation or runner
+needs permission to push code, releases, and container packages to
-permission to push code, releases, and container packages.
+`lotobo/toolbox-portal`.
 
 1. Run `npm ci`, `npm test`, `npm run lint`, and `npm run build` from a clean
    checkout of the intended portal tag.
@@ -243,11 +340,11 @@ permission to push code, releases, and container packages.
 3. Verify downloaded app assets with `sha256sum -c <asset>.sha256`; copy those
    exact values into a reviewed toolbox lock.
 4. Run the assembler and serve `build/toolbox` from a nested test path. Open
-   all three apps, switch between them, and confirm the encoded `toolbox`
+   all 50 apps, switch between them, and confirm the encoded `toolbox`
    context.
 5. Verify the distribution with
-   `(cd build && sha256sum -c add-ideas-toolbox-0.4.3.zip.sha256)`.
+   `(cd build && sha256sum -c add-ideas-toolbox-0.19.0.zip.sha256)`.
-6. Commit the reviewed lock, tag the toolbox release (for example `v0.4.3`), and
+6. Commit the reviewed lock, tag the toolbox release (for example `v0.19.0`), and
    push the branch and tag to Gitea.
 7. In Gitea, open **Releases → New release**, select the tag, and upload the
    static ZIP plus its `.sha256` file. Do not use a mutable “latest” URL in a
@@ -262,60 +359,64 @@ must not re-resolve app versions or substitute a newer release.
 
 ## Existing tools
 
-| Tool                | State and boundary                                 | Principal workflows                                                    | Important concrete scope                                                                                                                                           | Critical considerations and integrations                                                                                                                    |
+| Tool                 | State and boundary                                                  | Principal workflows                                                                                                                                 | Important concrete scope                                                                                                                                                                                                                                                                                                                                   | Critical considerations and integrations                                                                                                                                                                                                                                                                                                                                                                  |
-| ------------------- | -------------------------------------------------- | ---------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| -------------------- | ------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| **`pdf-tools`**     | Existing; dedicated repository                     | Merge, split, reorder, rotate and export PDF pages                     | Thumbnail workspace; multi-document operations; ZIP and PDF output; saved local workspace                                                                          | Workers and IndexedDB; large-document memory control; future signature inspection through `crypto-tools`; metadata and safe-sharing through `privacy-tools` |
+| **`pdf-tools`**      | Existing; dedicated repository                                      | Merge, split, reorder, rotate and export PDF pages                                                                                                  | Thumbnail workspace; multi-document operations; ZIP and PDF output; saved local workspace                                                                                                                                                                                                                                                                  | Workers and IndexedDB; large-document memory control; future signature inspection through `crypto-tools`; metadata and safe-sharing through `privacy-tools`                                                                                                                                                                                                                                               |
-| **`xslt-tools`**    | Existing; dedicated repository                     | Develop, test and run XSLT transformations                             | XML/XSLT editors; transformation results; local files; saved projects; validation and diagnostics                                                                  | Lazy SaxonJS loading; relocatable assets; useful handoffs to `data-tools`, `schema-tools` and `diff-tools`                                                  |
+| **`xslt-tools`**     | Existing; dedicated repository                                      | Develop, test and run XSLT transformations                                                                                                          | XML/XSLT editors; transformation results; local files; saved projects; validation and diagnostics                                                                                                                                                                                                                                                          | Lazy SaxonJS loading; relocatable assets; useful handoffs to `data-tools`, `schema-tools` and `diff-tools`                                                                                                                                                                                                                                                                                                |
-| **`onenote-tools`** | Existing rich-reader release; dedicated repository | Open, browse, inspect and export OneNote sections and packages locally | Desktop/unfragmented FSSHTTPB `.one`/`.onetoc2`; none/LZX/MSZIP/Quantum and multi-cabinet `.onepkg`; trees, rich text, images, tables, ink, attachments and export | Native TypeScript worker with no Wasm; bounded parsing, rendering and export; fragmented FSSHTTP fails safely; no editing or pixel-perfect fidelity         |
+| **`onenote-tools`**  | Existing rich-reader release; dedicated repository                  | Open, browse, inspect and export OneNote sections and packages locally                                                                              | Desktop/unfragmented FSSHTTPB `.one`/`.onetoc2`; none/LZX/MSZIP/Quantum and multi-cabinet `.onepkg`; trees, rich text, images, tables, ink, attachments and export                                                                                                                                                                                         | Native TypeScript worker with no Wasm; bounded parsing, rendering and export; fragmented FSSHTTP fails safely; no editing or pixel-perfect fidelity                                                                                                                                                                                                                                                       |
+| **`av-tools`**       | Existing local-first v0.3.0 release; dedicated repository           | Convert and lightly edit audio and video locally in the browser                                                                                     | Immediate native playback and basic file information; progressive stream inspection on demand; quick conversion; trim, split and crossfade concatenate; crop, resize, normalize, fades, waveform, metadata, chapters, subtitles, scene thumbnails/contact sheets, presets and export                                                                       | Reviewed ffmpeg.wasm 0.12.10 ST/MT build with verified Opus and bundled label font; bounded queue, temporary storage and resource policy; isolation enables MT with automatic ST fallback; versioned core assets are immutable                                                                                                                                                                            |
+| **`regex-tools`**    | Current local-first v0.4.2 release; dedicated repository            | Develop, explain, test and apply JavaScript, PCRE2, PHP, Perl, Python, Ruby, Java, C++, Go, .NET, Rust and Scala/JVM-compatible regular expressions | Deterministic syntax trees; engine-native matching, captures and bounded replacement; stable double-buffered live results; PCRE2 tracing and C17 generation; comparison; corpus apply; tests; risk/growth/benchmark analysis; generated cases; bounded minimization; validated ECMAScript formatting; project import/export and optional local persistence | Open-source regexpp and pinned local WebAssembly runtimes for PCRE2, PHP preg, legacy Perl, CPython, CRuby, TeaVM Java/Scala compatibility, libc++ C++, Go, .NET and Rust in killable workers; explicit source/licence inventories, resource limits and engine-specific offset semantics                                                                                                                  |
+| **`svg-tools`**      | Initial local-first v0.1.0 release; dedicated repository            | Inspect and edit SVG source, structure, geometry, references and accessibility locally                                                              | Synchronized source/tree/canvas/inspector; path and transform tools; reference analysis; optimization; CSS animation preview; exact, sanitized, raster and project export                                                                                                                                                                                  | Untrusted SVG is sanitized into an opaque-origin sandbox; bounded parsing and decompression, explicit security findings and a URI-scoped controller header exception; later milestone slices remain intentionally tracked in the app repository                                                                                                                                                           |
+| **`auth-tools`**     | Current local-first v0.3.1 release; dedicated repository            | Generate, migrate and diagnose OTP credentials, and inspect, verify and test WebAuthn/passkey ceremonies locally                                    | HOTP/TOTP/OCRA with time travel, resynchronization and rotation planning; QR, Google, Aegis and encrypted PSKC migration; WebAuthn extension experiments and replayable traces; assertion, attestation, signer-chain and historical metadata-policy evaluation                                                                                             | Authentication material remains memory-only unless explicitly exported; redaction is deliberate but not a secrecy guarantee; live ceremonies and camera scanning are enabled only at the exact dedicated `auth.toolbox.add-ideas.de` origin, while the shared Portal path remains inspect-only; v0.3.1 corrects source provenance and cross-timezone artifact reproducibility; no raw CTAP administration |
+| **`sudoku-tools`**   | Current local-first v0.2.1 release; dedicated repository            | Set, play, generate, analyse and solve classic, Killer and rich variant Sudoku locally                                                              | 4×4–16×16 grids; registry-backed constraint packs including cages, lines, dots, XV, inequalities, indexing and Fog of War; staged hints, candidate maintenance, advanced logical techniques, setter quality checks, mixed-variant generation, source-preserving f-puzzles/SudokuPad interoperability, autosave recovery and searchable local projects      | Worker-bounded solving, generation and quality analysis; strict inert imported-visual validation; fog-safe play assistance; IndexedDB history with memory fallback; stable workspace geometry, responsive zoom and pan, a 3×3 standard keypad, tap selection, patterned colours, accessibility controls and an offline-capable PWA shell                                                                  |
+| **`colour-tools`**   | Initial local-first v0.1.0 release; dedicated repository            | Convert, composite, interpolate, pick, sample, analyse and export colours locally                                                                   | General colour conversion; arbitrary RGBA compositing; multi-stop colour steps; large visual and native pickers; local image sampling and palette extraction; contrast, gamut and colour-vision-deficiency analysis; harmonies and design-token export                                                                                                     | Processing and image access remain local; colour spaces, encoded versus linear-light compositing, interpolation and gamut-mapping assumptions are explicit; mathematical conversion is distinguished from display simulation; integrates with SVG, image and token tools                                                                                                                                  |
+| **`office-tools`**   | Initial local-first v0.1.0 read-only release; dedicated repository  | Open and view word-processing documents, spreadsheets and presentations locally                                                                     | DOCX, XLSX and PPTX plus ODT, ODS and ODP; document, sheet and slide views with search, outline or thumbnail navigation and zoom; text, tables, images, styles, metadata, cached formula values and presentation notes                                                                                                                                     | Bounded worker-based inert package and XML parsers never execute macros, scripts, formulas, active content or external resources; legacy binary DOC, XLS and PPT are unsupported; viewing is intentionally read-only and does not promise pixel-perfect Office-suite layout fidelity                                                                                                                      |
+| **`image-tools`**    | Initial local-first v0.1.0 release; dedicated repository            | Inspect, crop, rotate, resize, compare and batch-convert raster images locally                                                                      | Static JPEG, PNG and WebP; bounded queues; aspect presets; fit/fill/exact resize; PNG/JPEG/WebP export; per-result operation reports                                                                                                                                                                                                                       | Animated and multi-picture inputs are inspect-only; canvas re-encoding does not preserve arbitrary metadata, ICC profiles, HDR precision or byte identity                                                                                                                                                                                                                                                 |
+| **`file-tools`**     | Initial local-first v0.1.0 release; dedicated repository            | Identify, inspect, hash and inventory local files                                                                                                   | Signature and claimed-MIME comparison; paged hex/ASCII and string views; SHA-256/SHA-512; deterministic JSON/CSV manifests; duplicate candidates                                                                                                                                                                                                           | Detection and entropy are heuristics rather than validation or malware analysis; v0.1 intentionally does not mutate, split, join or rename files                                                                                                                                                                                                                                                          |
+| **`epub-tools`**     | Initial local-first v0.1.0 release; dedicated repository            | Read, inspect, validate and repair EPUB 2/3 publications                                                                                            | Package, metadata, spine, EPUB 3 nav and EPUB 2 NCX views; sandboxed reading; link checks; metadata and cover editing; text/chapter/report export; normalized rebuilds                                                                                                                                                                                     | Strict bounded ZIP and XML handling; active and external content are blocked; DRM is detected but never bypassed; focused preflight is not a complete EPUBCheck implementation                                                                                                                                                                                                                            |
+| **`archive-tools`**  | Initial local-first v0.1.0 release; dedicated repository            | Inspect, create, compare and safely extract archive content                                                                                         | ZIP/ZIP64, TAR/USTAR/PAX, gzip and tar.gz; inert previews; deterministic ZIP/TAR output; cross-format inventory comparison; selected-file repackaging                                                                                                                                                                                                      | Path, entry-count, expanded-size and compression-ratio limits; no direct filesystem restoration, nested expansion, encrypted or multipart ZIP support; links and special entries are blocked                                                                                                                                                                                                              |
+| **`privacy-tools`**  | Initial local-first v0.1.0 release; dedicated repository            | Inspect image metadata and make independently verified sharing copies                                                                               | Deep JPEG, PNG and WebP scans for EXIF/IPTC/XMP/profiles/previews/provenance and trailing data; orientation-normalized pixel re-encoding; source/output hashes; JSON and ZIP reports                                                                                                                                                                       | Not an anonymity guarantee; static supported images only; re-encoding can change pixels and remove colour, resolution and authenticity information; reports can themselves contain sensitive metadata                                                                                                                                                                                                     |
+| **`crypto-tools`**   | Initial local-first v0.1.0 inspection release; dedicated repository | Inspect certificate, request, revocation-list, key and JWK material                                                                                 | Bounded PEM/DER X.509, CSR and CRL inspection; public/private key identification; JWK/JWKS warnings and RFC 7638 thumbprints; explicit issuer-signature links; DNS SAN hostname checks                                                                                                                                                                     | No browser/OS trust implication, complete RFC 5280 path validation, revocation service, issuance, key generation, private-key decryption or general signature verification                                                                                                                                                                                                                                |
+| **`barcode-tools`**  | Initial local-first v0.1.0 release; dedicated repository            | Generate and decode QR codes and common barcodes                                                                                                    | SVG QR, Data Matrix, PDF417, Aztec and selected linear formats; bounded image or opt-in camera decode; structured QR payloads; CSV batch ZIP; GTIN and quiet-zone assistance                                                                                                                                                                               | Decoded payloads remain inert text and are never opened automatically; camera is path-scoped and user initiated; generated output, GS1 allocation and print quality still require applicable interoperability checks                                                                                                                                                                                      |
+| **`network-tools`**  | Initial offline v0.1.0 release; dedicated repository                | Calculate IP networks and construct or inspect common network values                                                                                | IPv4/IPv6 canonicalization and CIDR ranges; URL/query parsing without navigation; DNS-record construction; response-header inspection; CSP builder; MIME reference                                                                                                                                                                                         | Performs no DNS, URL, HTTP or scanning request; pasted values remain bounded and inert; results are construction and calculation aids rather than live network observations                                                                                                                                                                                                                               |
+| **`geo-tools`**      | Initial local-first v0.1.0 release; dedicated repository            | Inspect, convert, simplify and analyse geospatial files                                                                                             | GeoJSON, GPX, KML and coordinate CSV; WGS 84 bounds, distance and elevation; Douglas–Peucker simplification; decimal/DMS conversion; coordinate-only sketch                                                                                                                                                                                                | Small Point/LineString/Polygon model with scalar properties; conversion losses are explicit; no CRS transformation, basemap request or survey-grade claim                                                                                                                                                                                                                                                 |
+| **`helper-tools`**   | Initial v0.1.0 app and reusable package release                     | Encode, convert, inspect and calculate with shared bounded primitives                                                                               | Base/byte/text/URL conversion; Unicode and line transforms; exact number and unit conversion; hashes; CIDR; timestamps; hardened JSON/CSV; secure and seeded random primitives; deep-linked calculator workspaces                                                                                                                                          | Framework-free `@add-ideas/toolbox-helpers` package is consumed directly by eleven v0.1 apps; operations disclose strictness, limits and non-cryptographic seeded boundaries                                                                                                                                                                                                                              |
+| **`rand-tools`**     | Local-only v0.1.1 release; dedicated repository                     | Generate secure or reproducible random values through focused workspaces                                                                            | Unbiased WebCrypto integers/strings; seeded reproducible generation; UUIDv4/v7 and ULID; dice; sampling, shuffle, passphrases and normal distribution; all generators run entirely in the browser                                                                                                                                                          | Secure local generation never falls back; deterministic output is reproducible rather than secret; the app makes no third-party randomness request and the Portal grants it no external network destination                                                                                                                                                                                               |
+| **`data-tools`**     | Initial local-first v0.1.0 release; dedicated repository            | Inspect, format, query, flatten and convert structured data                                                                                         | JSON, YAML 1.2, TOML, XML, CSV, TSV and NDJSON; exact JSON numbers; bounded tree/table/leaf views; JSON Pointer and safe path queries; all-format conversion with loss/coercion reports; spreadsheet-formula neutralization                                                                                                                                | Disposable bounded parser worker; rejects active XML constructs and unsafe object keys; conversions surface information loss and round-trip instability                                                                                                                                                                                                                                                   |
+| **`diff-tools`**     | Initial local-first v0.1.0 release; dedicated repository            | Compare text, JSON, XML and delimited data semantically                                                                                             | Line/word/code-point/grapheme text diff; exact newline state; object-aware exact-number JSON and RFC 6902; namespace-aware XML rules; keyed CSV/TSV; unified/side-by-side views and portable reports                                                                                                                                                       | Normalization settings and ignored distinctions remain visible; bounded disposable worker; v0.1 intentionally excludes images, binary documents, directories and archives                                                                                                                                                                                                                                 |
+| **`time-tools`**     | Initial local-first v0.1.0 release; dedicated repository            | Convert timestamps and explore zones, arithmetic and recurrence                                                                                     | Exact signed nanosecond epochs; IANA-zone comparisons and DST ambiguity; wall-clock versus elapsed arithmetic; bounded cron and RRULE previews; business days; escaped UTC ICS export                                                                                                                                                                      | Uses the browser's IANA data and does not model leap seconds; regional holidays are never inferred; recurrence and skipped/ambiguous local-time choices are explicit                                                                                                                                                                                                                                      |
+| **`text-tools`**     | Initial local-first v0.1.0 release; dedicated repository            | Build ordered, inspectable plain-text transformation pipelines                                                                                      | Line endings, trimming, whitespace, sort/deduplicate, locale case, Unicode normalization, transliteration, escapes, wrapping, columns, explicit file decoding and versioned recipes                                                                                                                                                                        | Exact source/result and per-step changes stay visible; compatibility normalization, transliteration, narrow encodings and selected transforms warn when they may be lossy                                                                                                                                                                                                                                 |
+| **`unicode-tools`**  | Initial local-first v0.1.0 release; dedicated repository            | Search and inspect Unicode characters, emoji, scripts, text and confusables                                                                         | Checksum-pinned Unicode 17.0 catalogue; character/alias/code-point search; emoji and named sequences; UTF-8/UTF-16/escape inspection; grapheme segmentation; normalization; UTS #39 skeleton; selected Unihan fields; symbol collections                                                                                                                   | Official Unicode data is redistributed under Unicode-3.0 and is not scraped from symbol sites; private-use and surrogate ranges are not misrepresented as assigned characters; confusable and mixed-script results are review signals, not security verdicts                                                                                                                                              |
+| **`flow-tools`**     | Initial local-first v0.1.0 release; dedicated repository            | Design and run deterministic structured-data pipelines                                                                                              | Bounded JSON, CSV, NDJSON and XML sources; select, rename, filter, map, sort, group, join, format and export stages; inspectable snapshot and loss notes at every stage; portable validated recipes                                                                                                                                                        | 2 MiB sources, 10,000 input rows, 20,000 join rows, 200 fields and 30 stages; no arbitrary code, eval, plug-in or network stage                                                                                                                                                                                                                                                                           |
+| **`subtitle-tools`** | Initial local-first v0.1.0 release; dedicated repository            | Edit, validate, synchronize, compare and convert captions                                                                                           | Bounded SRT, WebVTT and ASS/SSA; cue editing, shift/stretch and frame-rate conversion; editorial diagnostics; revision comparison; local media playback and waveform peaks                                                                                                                                                                                 | Preserves format-specific information where possible and reports cross-format loss; no speech recognition, automatic alignment, semantic comparison or pixel-perfect ASS rendering                                                                                                                                                                                                                        |
+| **`midi-tools`**     | Initial local-first v0.1.0 release; dedicated repository            | Inspect, visualize, edit, audition and export Standard MIDI files                                                                                   | SMF type 0/1 events, tempo/time/key timelines, piano roll; transpose, quantize, tempo, crop and channel operations; deterministic MIDI/CSV/JSON export; Web Audio sine preview                                                                                                                                                                             | 8 MiB, 256-track and 250,000-event caps; PPQN only; bounded preview is not a General MIDI instrument or soundfont renderer; editing semantics are explicit                                                                                                                                                                                                                                                |
+| **`3d-tools`**       | Initial local-first v0.1.0 release; dedicated repository            | Inspect, preview, repair and export triangle meshes                                                                                                 | OBJ, binary/ASCII STL, ASCII/binary little-endian PLY and glTF/GLB 2; mesh statistics; capped WebGL preview; normal repair and transform baking; normalized OBJ/STL export                                                                                                                                                                                 | 32 MiB and one-million-vertex/triangle caps; glTF is an embedded, static TRIANGLES subset with no external assets, sparse accessors, animation, skins, texture or compression decoding; source material graphs and node transforms are not recreated                                                                                                                                                      |
+| **`query-tools`**    | Initial local-first v0.1.0 release; dedicated repository            | Query structured local data through bounded row and path languages                                                                                  | JSON, CSV, NDJSON and inert XML; focused SQL-like select/filter/group/aggregate/sort/limit; JSONPath-like property/index/wildcard/filter paths; table, tree and JSON results; saved queries and export                                                                                                                                                     | Not full SQL, JSONPath or JMESPath compatibility; 2 MiB, 10,000-row/value, 200-field and 200,000-node caps; XML DTD/entities and code evaluation are rejected                                                                                                                                                                                                                                             |
+| **`scan-tools`**     | Initial local-first v0.1.0 release; dedicated repository            | Correct photographed pages, run optional OCR and assemble local output                                                                              | Up to 24 PNG/JPEG/WebP pages; perspective correction, rotate/deskew, tonal and threshold controls; reorder; image and PDF export; bundled same-origin English Tesseract model                                                                                                                                                                              | Camera is exact-path and opt-in; strict pixel/byte/page caps; OCR is memory-heavy and not an accuracy guarantee; no PDF input, automatic corners, handwriting guarantee, shadow/finger removal or searchable PDF text layer                                                                                                                                                                               |
+| **`package-tools`**  | Initial local-first v0.1.0 release; dedicated repository            | Inspect and compare ZIP/ZIP64 compound packages                                                                                                     | Package trees and ZIP risk diagnostics; EPUB, OOXML, ODF, JAR, APK and WebExtension adapters; relationships/manifests; media preview/download; signature-material inventory; inventory comparison/export                                                                                                                                                   | Inspection does not render specialized formats, decode APK signing blocks or establish signature validity/trust; encrypted, split, unsafe, unsupported or over-budget entries remain inventory-only                                                                                                                                                                                                       |
+| **`label-tools`**    | Initial local-first v0.1.0 release; dedicated repository            | Merge local records into printable labels, badges and asset tags                                                                                    | CSV/JSON mapping; serial/random values; local raster assets; QR and common 1D/2D barcodes; mm/in/pt stock and custom grids; calibration/marks; paginated preview; SVG, ZIP and 144-DPI PDF export                                                                                                                                                          | 2 MiB/2,000-row/100-field data bounds and bounded images/pages; stock names are geometries, not vendor certification; system fonts are not embedded and PDF is rasterized, not archival/press quality                                                                                                                                                                                                     |
+| **`font-tools`**     | Initial local-first v0.1.0 release; dedicated repository            | Inspect, compare, preview and prepare local fonts                                                                                                   | TTF, OTF and WOFF metadata/tables, Unicode coverage, variable axes, fallbacks and embedding signals; arbitrary-text sandbox; safe CSS; rights-confirmed static glyf/CFF subset with loss report                                                                                                                                                            | Disposable worker and strict file/table/glyph bounds; WOFF2/TTC unsupported; fsType is a technical signal, not legal advice; no variable flattening or shaping/composite closure, and subsetting discards advanced tables                                                                                                                                                                                 |
+| **`fixture-tools`**  | Initial local-first v0.1.0 release; dedicated repository            | Generate deterministic synthetic test fixtures                                                                                                      | Focused JSON Schema, SQL DDL, XSD, CSV-heading and portable-model import; relationships, distributions, boundaries and deliberate violations; JSON/CSV/NDJSON/XML/SQL/recipe export                                                                                                                                                                        | Importers are documented subsets; 2 MiB input, 20 tables, 100 fields/table, 50,000 rows and bounded output; synthetic data is not anonymization and seeded output is reproducible, not secret                                                                                                                                                                                                             |
+| **`minimize-tools`** | Initial local-first v0.1.0 release; dedicated repository            | Reduce failing inputs while continuously preserving a selected predicate                                                                            | Line/token/code-point and structure-aware JSON/XML reduction; literal, invalid syntax, regex, focused JSON Schema and local XSLT predicates; budgets, cancellation, trace and report export                                                                                                                                                                | Produces a locally minimal attempted case, not a globally shortest one; focused schema/XSLT subsets fail closed; 2 MiB, 2,000-test and 30-second caps, with a disposable one-second regex worker                                                                                                                                                                                                          |
+| **`format-lab`**     | Initial local-first v0.1.0 release; dedicated repository            | Explore conversion paths and measure representative round-trip loss                                                                                 | Conservative data/image/AV/subtitle format graphs; executable JSON/NDJSON/CSV/typed-XML record conversion; property selection, path ranking, round-trip evidence and deterministic reports                                                                                                                                                                 | Media graphs plan handoffs rather than duplicate codecs; executable lab handles bounded records, not arbitrary documents; catalogue expectations are not file measurements and untested properties remain explicit                                                                                                                                                                                        |
+| **`repro-tools`**    | Initial local-first v0.1.0 release; dedicated repository            | Build, compare, sign and package reproducible local file inventories                                                                                | SHA-256/SHA-512 manifests; deterministic path ordering and JSON/CSV; reference comparison; fixed-metadata ZIP; optional memory-only P-256 signature envelope                                                                                                                                                                                               | 64 MiB/file, 256 MiB/selection and 10,000-entry caps; ZIP is capped at 128 MiB; signatures prove integrity relative to an independently authenticated public key and are intentionally not byte-reproducible                                                                                                                                                                                              |
+| **`schema-tools`**   | Hardened local-first v0.1.2 release; dedicated repository           | Inspect, validate, compare and derive examples from schema workspaces                                                                               | Local JSON Schema/OpenAPI reference graphs; focused JSON Schema validation; OpenAPI operation/sample/change analysis; XSD, Relax NG and Schematron structure; bounded heuristic XML samples                                                                                                                                                                | Remote/escaping references, entities, code and XPath are blocked; JSON Schema/OpenAPI support is a documented subset, while XML languages receive structural inspection rather than complete instance validation; shared work/node/depth/text/output budgets, linear cached traversal and well-formed XML fallbacks are regression-tested                                                                 |
+| **`log-tools`**      | Initial local-first v0.1.0 release; dedicated repository            | Stream, inspect, correlate, redact and export large logs                                                                                            | Incremental UTF-8 file scan; plain, JSONL, nginx, syslog and logfmt parsing; normalized fields, aggregation, search/filter; deterministic redaction recipes; CSV/NDJSON/text export                                                                                                                                                                        | Eight-GiB gate and five-million-line stop without whole-file strings; only a bounded 10,000-record/32 MiB preview supports search, redaction and export; parsers and autodetection are focused/heuristic                                                                                                                                                                                                  |
+| **`binary-tools`**   | Initial local-first v0.1.0 release; dedicated repository            | Convert, inspect and decode byte-oriented values                                                                                                    | Synchronized UTF-8/hex/Base64/Base32/Base58; paged byte inspector; CBOR and MessagePack; strict DER tree; Protocol Buffers wire view with optional scalar/nested schema                                                                                                                                                                                    | Inert, no requests or evaluation; 1 MiB, depth-64 and 10,000-node bounds; Base58 capped at 4 KiB; protobuf groups and a complete generated runtime are out of scope                                                                                                                                                                                                                                       |
+| **`git-tools`**      | Initial local-first v0.1.0 release; dedicated repository            | Inspect and author Git interchange text without repository access                                                                                   | Unified/git patch parse, stats and bounded before/after authoring; root `.gitignore` matcher with explanations; SemVer compare/ranges; Conventional Commit builder/lint; changelog normalization                                                                                                                                                           | Patch/matrix/count bounds; ignore matching covers one root file, not nested/global/index state; SemVer and changelog behavior is intentionally focused; no workspace or `.git` access                                                                                                                                                                                                                     |
+| **`api-tools`**      | Initial local-first v0.1.0 release; dedicated repository            | Inspect and compare OpenAPI descriptions and saved HTTP evidence                                                                                    | Bounded JSON/YAML OpenAPI 3.0/3.1; local multi-file `$ref`; navigation, samples, examples and security inventory; inert curl/Fetch/Python text; conservative change report; HAR/exchange summaries                                                                                                                                                         | Never executes HTTP, follows URLs, resolves remote references or stores credentials; focused validation/sample generation is not a complete validator, code generator, client, proxy or security scanner                                                                                                                                                                                                  |
+| **`mail-tools`**     | Initial local-first v0.1.0 release; dedicated repository            | Inspect, compare, download and redact EML/MIME content                                                                                              | Folded/RFC 2047 headers; bounded multipart/nested-message tree; Base64/quoted-printable; text and opaque sandboxed sanitized HTML; attachment inventory/download; auth-header diagnostics; canonical/redacted export                                                                                                                                       | Remote and active HTML content is removed and never loaded; no mailbox, server, decryption, DKIM verification, identity, malware or anonymity claim; bounded normalization does not promise byte identity                                                                                                                                                                                                 |
+| **`calendar-tools`** | Initial local-first v0.1.0 release; dedicated repository            | Inspect, repair, merge and reconcile iCalendar data                                                                                                 | RFC 5545 events/metadata/attendees/timezones; bounded recurrence preview; duplicate/overlap diagnostics; UID/RECURRENCE-ID merge; conservative canonical repair; DST transition/gap/overlap evidence                                                                                                                                                       | 4 MiB, line/component/event and recurrence-horizon caps; browser IANA data and focused recurrence interpretation are evidence rather than a complete calendar-server implementation                                                                                                                                                                                                                       |
+| **`contact-tools`**  | Initial local-first v0.1.0 release; dedicated repository            | Inspect, edit, convert and reconcile sensitive contacts                                                                                             | vCard 3/4 parsing/editing/export; inferred reviewable CSV mapping; duplicate candidates and conflict-reporting merge; bounded local vCard QR; masked overview and memory clearing                                                                                                                                                                          | 2 MiB, 50,000-line and 2,000-contact caps; binary/quoted-printable values are diagnosed rather than decoded and unsupported properties are not silently round-tripped; no persistence or telemetry                                                                                                                                                                                                        |
+| **`diagram-tools`**  | Initial local-first v0.1.0 release; dedicated repository            | Author safe deterministic text diagrams and export accessible graphics                                                                              | Independent Mermaid-like flow/graph, sequence, class and state subset; diagnostics, pan/zoom, SVG/2× PNG and textual outline                                                                                                                                                                                                                               | Not full Mermaid or Graphviz; directives, clicks, styles, scripts, HTML and remote assets are rejected; 50,000-character, 2,000-line, 200-node, 500-edge and 20-megapixel caps                                                                                                                                                                                                                            |
+| **`token-tools`**    | Initial local-first v0.1.0 release; dedicated repository            | Edit, validate, theme and export design tokens                                                                                                      | W3C-style nested JSON plus local sets/themes; alias resolution and cycle/type diagnostics; colour, dimension, typography, shadow and scalar values; JSON, CSS, Sass, Android and Swift export with loss report                                                                                                                                             | The set/theme wrapper is app-specific; 1 MiB, depth-64 and 10,000-token bounds; unknown/conflicting shapes fail explicitly and platform composite losses are never silently omitted                                                                                                                                                                                                                       |
+| **`device-tools`**   | Initial local-first v0.1.0 release; dedicated repository            | Inspect browser capability evidence without creating a device fingerprint                                                                           | Passive context/display/input/accessibility/media/storage/PWA/API inventory; opt-in permission, storage, WebGL/WebGPU, media, battery, network, camera, microphone and screen probes; redacted reports                                                                                                                                                     | No identifier, score, high-entropy report, recording, persistence or passive prompt; sensitive probes are exact-path, individually initiated and immediately stop returned tracks; results are capability evidence, not a reliability guarantee                                                                                                                                                           |
 
 ## Planned tools
 
-| Tool                 | State and boundary                                           | Principal workflows                                                                                                                                                                       | Important concrete scope                                                                                                                                                          | Critical considerations and integrations                                                                                                                                                                          |
+No unreleased applications are currently listed here. New ideas should be added
-| -------------------- | ------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+only after their intended local-processing boundary and first honest release
-| **`svg-tools`**      | Planned; dedicated repository                                | Source and visual SVG editing                                                                                                                                                             | Synchronized DOM tree, code and canvas; optimization; path simplification; symbols; accessibility; animation; sanitization                                                        | SVG is potentially active content; previews require sanitization or sandboxing; integrate with `colour-tools`, `token-tools`, `image-tools` and `label-tools`                                                     |
+scope are documented; shipped applications remain in the Existing tools table.
-| **`regex-tools`**    | Planned; dedicated repository                                | Develop, test and apply regular expressions                                                                                                                                               | Corpus mode; replacement preview; capture table; flavour comparison; performance visualization; generated test cases; failing-input minimization                                  | Never claim exact equivalence across regex engines without qualification; bound execution; integrate with `text-tools`, `log-tools` and `minimize-tools`                                                          |
-| **`colour-tools`**   | Planned; small-to-medium dedicated repository                | Colour conversion, calculation and palette work                                                                                                                                           | sRGB, Display P3, Lab, LCH, OKLab and OKLCH; gamut mapping; contrast; colour-vision simulation; gradients; palette extraction; design-token export                                | Make colour-space assumptions explicit; distinguish mathematical conversion from display simulation; integrate with SVG, image and token tools                                                                    |
-| **`rand-tools`**     | Planned; small dedicated repository                          | Generate random numbers, strings, identifiers and samples                                                                                                                                 | Cryptographically secure generation; deterministic seeded generation; UUIDs, ULIDs, passphrases, dice notation, distributions, weighted selection and shuffling                   | Clearly separate secure randomness from reproducible pseudorandomness; no misleading “strength” claims; natural foundation for `fixture-tools`                                                                    |
-| **`barcode-tools`**  | Planned; dedicated repository                                | Generate, inspect and decode QR and barcodes                                                                                                                                              | QR, common one- and two-dimensional codes; camera/image decoding; GS1 assistance; CSV batch generation; quiet-zone and print-size checks; structured payload builders             | Treat decoded payloads as untrusted; never open links automatically; camera permission must be optional; integrate with `label-tools`, `contact-tools` and `crypto-tools`                                         |
-| **`av-tools`**       | Planned; large dedicated repository                          | Light audio and video editing and transcoding                                                                                                                                             | Trim, split, concatenate, crop, resize, normalize, fades, waveform, metadata, chapters, subtitles, thumbnail/contact-sheet generation and export presets                          | Heavy WASM and worker workloads; temporary-file storage; configurable memory limits; possibly special cross-origin-isolation headers; integrate with `subtitle-tools` and `image-tools`                           |
-| **`crypto-tools`**   | Planned; dedicated repository                                | Inspect keys, certificates and signatures; validate chains                                                                                                                                | X.509 PEM/DER, CSR, CRL, PKCS #8, encrypted PKCS #8, PKCS #12/PFX, JWK/JWKS; key/certificate matching; path construction; hostname, purpose and time checks; CMS/JWS later        | Inspection-first; explicit trust anchors; no implication that browser/OS trust stores are used; no private-key persistence; offline revocation first; network checks opt-in; restrictive CSP and worker isolation |
-| **`data-tools`**     | High priority; dedicated repository                          | Inspect, edit, validate, query and convert structured data                                                                                                                                | JSON, YAML, TOML, XML, CSV and NDJSON; tree/table/source views; schema inference; flattening; filtering; field mapping; JSONPath-style queries; conversion recipes                | Every conversion should disclose information loss, coercion and round-trip instability; XML-specialist workflows hand off to `xslt-tools`                                                                         |
-| **`image-tools`**    | High priority; dedicated repository                          | Edit and batch-process raster images                                                                                                                                                      | Crop, resize, rotate, compress, convert, contact sheets, sprites, responsive sets, favicon generation, metadata removal and visual quality comparison                             | Use workers and off-main-thread rendering; preserve or deliberately remove colour profiles; integrate with colour, SVG, PDF and privacy tools                                                                     |
-| **`diff-tools`**     | High priority; dedicated repository or shared engine plus UI | Compare documents and files semantically                                                                                                                                                  | Text; JSON object-aware comparison; XML normalization; CSV keyed comparison; images with overlay/heatmap; archives and directories; PDF pages; optional audio waveform comparison | Normalization and ignored properties must be visible; produce portable reports and standard patch formats where possible                                                                                          |
-| **`file-tools`**     | High priority; dedicated repository                          | Identify, inspect and organize local files                                                                                                                                                | Magic-byte detection; hex view; decoded strings; checksums; directory manifests; split/join; duplicate detection; trailing-data detection; batch-rename preview                   | All inputs are untrusted; format inspectors require strict size and nesting limits; natural entry point to archive, privacy, crypto and package tools                                                             |
-| **`archive-tools`**  | Medium-to-high priority; dedicated repository                | Inspect, create, compare and extract archives                                                                                                                                             | ZIP, TAR, gzip and selected additional formats; selective extraction; content preview; deterministic archives; timestamp normalization; archive comparison                        | Expansion-ratio, entry-count and total-size limits; traversal-safe extraction; never execute extracted files                                                                                                      |
-| **`text-tools`**     | Medium priority; one app with deep-linked panels             | Transform and normalize plain text                                                                                                                                                        | Unicode normalization; line-ending conversion; encoding; sorting; deduplication; case changes; transliteration; escaping; column operations; transformation pipelines             | Preserve exact input/output visibility; warn about lossy encodings and Unicode confusables; integrate regex operations                                                                                            |
-| **`query-tools`**    | High-value but large; dedicated repository                   | Analyse local tabular and relational data with SQL                                                                                                                                        | CSV, JSON, NDJSON, Parquet and SQLite; schema inference; joins; aggregation; pivots; charts; export to common data formats                                                        | WASM memory and streaming; distinguish this analytical product from document-oriented `data-tools`; query work must remain local                                                                                  |
-| **`privacy-tools`**  | High priority; dedicated repository                          | Inspect and remove metadata before sharing                                                                                                                                                | EXIF and GPS; document author/comments; embedded thumbnails; PDF metadata and attachments; hidden package entries; AV tags; personal filenames; structured safe-sharing report    | Never promise absolute anonymity; explicitly state inspected, removed, preserved and unsupported structures; integrate with most file-oriented apps                                                               |
-| **`time-tools`**     | Medium priority; small dedicated app or helper family        | Work with dates, timestamps, time zones and recurrences                                                                                                                                   | Unix timestamps; date arithmetic; durations; ISO 8601; timezone comparison; cron; RRULE; ICS generation; business days; DST-transition visualization                              | Visualize actual recurrence instances and ambiguous/skipped local times; do not rely on simplified fixed-offset calculations                                                                                      |
-| **`subtitle-tools`** | Medium priority; dedicated repository                        | Edit, validate and synchronize captions                                                                                                                                                   | SRT, WebVTT and ASS; timing shifts; stretching; frame-rate conversion; overlap and reading-speed checks; waveform synchronization; revision comparison                            | Direct integration with `av-tools`; preserve style information when supported and disclose conversion losses                                                                                                      |
-| **`font-tools`**     | Medium priority; dedicated repository                        | Inspect, preview and prepare fonts                                                                                                                                                        | Glyph coverage; variable axes; metadata; fallback comparison; subsetting; CSS generation; arbitrary-text previews                                                                 | Font licensing and embedding restrictions must be visible; use untrusted-font isolation and strict parser limits                                                                                                  |
-| **`label-tools`**    | Medium priority; dedicated repository                        | Generate labels and badges from templates and data                                                                                                                                        | CSV/JSON merge into SVG templates; QR/barcode fields; serial numbers; A4 label sheets; badges; asset tags; cut marks; calibration                                                 | Strong suite demonstration linking data, SVG, barcode, random and PDF capabilities; print dimensions must be explicit and testable                                                                                |
-| **`flow-tools`**     | Later platform layer                                         | Compose local processing operations across tools                                                                                                                                          | Example: CSV → filter → QR generation → SVG template → PDF → ZIP; reusable recipes; typed inputs and outputs; progress and cancellation                                           | Do not load complete React applications into one runtime; expose separate worker-safe operation packages only after several apps have stable operations                                                           |
-| **`fixture-tools`**  | Medium priority                                              | Generate deterministic test data                                                                                                                                                          | JSON Schema, XSD, SQL DDL, CSV headings or interactive models to JSON, CSV, XML, SQL and NDJSON; foreign keys; distributions; boundary and invalid cases                          | Seeded reproducibility; uniqueness constraints; privacy-safe synthetic data; natural extension of `rand-tools`                                                                                                    |
-| **`minimize-tools`** | Distinctive specialist tool                                  | Reduce a failing input while preserving a failure                                                                                                                                         | Minimize XML triggering an XSLT error; shortest regex pathological input; smallest JSON schema failure; selectable failure predicates                                             | Expensive repeated execution must be bounded and cancellable; record the exact predicate and transformation versions                                                                                              |
-| **`format-lab`**     | Later, distinctive product                                   | Explore conversion paths and information loss                                                                                                                                             | Format graph; round-trip tests; property preservation; type coercion; metadata loss; recommended path selection across data, image, AV and subtitle formats                       | No conversion should be described as lossless without testing relevant properties                                                                                                                                 |
-| **`repro-tools`**    | Medium-to-later                                              | Create manifests and provenance records                                                                                                                                                   | File hashes; directory manifests; operation history; tool/version/parameter records; deterministic package creation; verification reports                                         | Useful foundation for reproducible workflows and signed manifests; integrates with crypto, archive and flow tools                                                                                                 |
-| **`package-tools`**  | Medium priority                                              | Inspect compound and package-based formats                                                                                                                                                | EPUB; DOCX/XLSX/PPTX; ODF; JAR; APK; browser extensions; package trees; manifests; relationships; embedded media; signatures; orphaned parts                                      | Generic container inspector with format adapters; complements rather than replaces `onenote-tools`, `epub-tools` and `office-tools`                                                                               |
-| **`schema-tools`**   | Dedicated specialist app                                     | Validate, inspect and generate examples for JSON Schema, XSD, Relax NG, Schematron and OpenAPI; visualize references and incompatibilities                                                |                                                                                                                                                                                   |
-| **`log-tools`**      | Dedicated app                                                | Stream and filter large logs; parse common formats; correlate records; build timelines; extract fields; anonymize values; avoid loading the complete file into memory                     |                                                                                                                                                                                   |
-| **`network-tools`**  | Helper family or small app                                   | IPv4/IPv6 subnetting; CIDR ranges; URL and query parsing; DNS-record construction; HTTP headers; CSP generation; MIME lookup; avoid turning it into an intrusive scanner                  |                                                                                                                                                                                   |
-| **`binary-tools`**   | Dedicated specialist app                                     | Base64, hexadecimal, CBOR, MessagePack, ASN.1 and Protocol Buffers; schema-assisted decoding; byte-range highlighting; strict depth and size limits                                       |                                                                                                                                                                                   |
-| **`git-tools`**      | Small-to-medium app                                          | Patch inspection and editing; `.gitignore` testing; semantic-version comparison; conventional commits; changelog normalization; no repository-hosting dependency                          |                                                                                                                                                                                   |
-| **`api-tools`**      | Medium app                                                   | OpenAPI validation; request and response examples; curl and client-command generation; saved HTTP-exchange inspection; direct browser requests remain subject to CORS                     |                                                                                                                                                                                   |
-| **`calendar-tools`** | Small-to-medium app                                          | ICS inspection, merging, deduplication, repair, recurrence visualization and timezone diagnostics                                                                                         |                                                                                                                                                                                   |
-| **`contact-tools`**  | Small-to-medium app                                          | vCard inspection and editing; CSV mapping; deduplication; contact QR generation; treat all contact data as sensitive                                                                      |                                                                                                                                                                                   |
-| **`mail-tools`**     | Medium app                                                   | EML and MIME inspection; header analysis; attachment extraction; body-part comparison; HTML mail must be heavily sandboxed                                                                |                                                                                                                                                                                   |
-| **`epub-tools`**     | Medium app                                                   | EPUB inspection, metadata and cover editing, link validation, chapter extraction and structural repair; sanitize embedded HTML and SVG                                                    |                                                                                                                                                                                   |
-| **`scan-tools`**     | Large app                                                    | Camera/document correction; crop, deskew and threshold; page assembly; local OCR; PDF output; model downloads and memory use must be explicit                                             |                                                                                                                                                                                   |
-| **`office-tools`**   | Medium-to-large app                                          | Inspect rather than reproduce an office suite: package structure, relationships, metadata, comments, embedded images and basic repairs                                                    |                                                                                                                                                                                   |
-| **`geo-tools`**      | Medium app                                                   | GeoJSON, GPX, KML and coordinate CSV; format conversion; track simplification; distance/elevation analysis; coordinate-reference assumptions must be explicit                             |                                                                                                                                                                                   |
-| **`diagram-tools`**  | Medium app                                                   | Code and visual editing for Mermaid, Graphviz and related representations; renderers require sanitization and sandboxing                                                                  |                                                                                                                                                                                   |
-| **`token-tools`**    | Small-to-medium app                                          | Design-token editing and conversion between JSON, CSS custom properties, Sass, Android and iOS forms; integrate with colour and SVG tools                                                 |                                                                                                                                                                                   |
-| **`3d-tools`**       | Large specialist app                                         | Inspect STL, OBJ and glTF; dimensions, bounding boxes, mesh simplification and common geometry defects; worker/GPU use and file limits                                                    |                                                                                                                                                                                   |
-| **`midi-tools`**     | Medium specialist app                                        | MIDI event inspection and editing; transpose, quantize, tempo maps and controller data; device access should remain optional                                                              |                                                                                                                                                                                   |
-| **`device-tools`**   | Specialist app                                               | Serial terminal, sensor logger, microcontroller console and controlled firmware installation; explicit permission and browser-capability checks                                           |                                                                                                                                                                                   |
-| **`helpers-tools`**  | One shared artifact with deep links                          | Stateless Base64, URL encoding, case conversion, number bases, Unicode code points, unit conversion, small checksums, subnet and timestamp calculators; avoid a repository per calculator |                                                                                                                                                                                   |
 
 ## Licensing
 

compose.example.yaml

@@ -3,7 +3,7 @@ services:
     build:
       context: .
       dockerfile: Containerfile
-    image: git.add-ideas.de/zemion/toolbox:0.4.3
+    image: git.add-ideas.de/lotobo/toolbox:0.19.0
     restart: unless-stopped
     read_only: true
     ports:

compose.yaml

@@ -6,9 +6,9 @@ services:
       context: .
       dockerfile: Containerfile.release
       args:
-        TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.4.3}"
+        TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.19.0}"
-        TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-0c26315c987f7ef6d025c66c21e25999786ede3e971b66495c856117e0b7c522}"
+        TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-b6003d8b3eee8a13032527b014a381d832ba46108c35d0aee9e1cfa6a1b281e2}"
-    image: "git.add-ideas.de/zemion/toolbox:${TOOLBOX_RELEASE_VERSION:-0.4.3}"
+    image: "git.add-ideas.de/lotobo/toolbox:${TOOLBOX_RELEASE_VERSION:-0.19.0}"
     restart: unless-stopped
     read_only: true
     tmpfs:
@@ -30,7 +30,27 @@ services:
       traefik.http.routers.addideas-toolbox.tls: "true"
       traefik.http.routers.addideas-toolbox.tls.certresolver: "${TRAEFIK_CERT_RESOLVER:-netcup}"
       traefik.http.routers.addideas-toolbox.service: addideas-toolbox
+      traefik.http.routers.addideas-toolbox-http.rule: "Host(`${TOOLBOX_HOST:-toolbox.add-ideas.de}`)"
+      traefik.http.routers.addideas-toolbox-http.priority: 900
+      traefik.http.routers.addideas-toolbox-http.entrypoints: web
+      traefik.http.routers.addideas-toolbox-http.middlewares: addideas-toolbox-https-redirect
+      traefik.http.routers.addideas-toolbox-http.service: addideas-toolbox
+      traefik.http.middlewares.addideas-toolbox-https-redirect.redirectscheme.scheme: https
+      traefik.http.middlewares.addideas-toolbox-https-redirect.redirectscheme.permanent: "true"
       traefik.http.services.addideas-toolbox.loadbalancer.server.port: "8080"
+      traefik.http.routers.addideas-auth.rule: "Host(`${AUTH_TOOLS_HOST:-auth.toolbox.add-ideas.de}`)"
+      traefik.http.routers.addideas-auth.priority: 1000
+      traefik.http.routers.addideas-auth.entrypoints: websecure
+      traefik.http.routers.addideas-auth.tls: "true"
+      traefik.http.routers.addideas-auth.tls.certresolver: "${TRAEFIK_CERT_RESOLVER:-netcup}"
+      traefik.http.routers.addideas-auth.middlewares: addideas-auth-prefix
+      traefik.http.routers.addideas-auth.service: addideas-toolbox
+      traefik.http.routers.addideas-auth-http.rule: "Host(`${AUTH_TOOLS_HOST:-auth.toolbox.add-ideas.de}`)"
+      traefik.http.routers.addideas-auth-http.priority: 1000
+      traefik.http.routers.addideas-auth-http.entrypoints: web
+      traefik.http.routers.addideas-auth-http.middlewares: addideas-toolbox-https-redirect
+      traefik.http.routers.addideas-auth-http.service: addideas-toolbox
+      traefik.http.middlewares.addideas-auth-prefix.addprefix.prefix: /apps/auth
 
 networks:
   internal:

deploy/nginx.conf

@@ -1,6 +1,25 @@
 map $uri $toolbox_cache_control {
   default "no-cache";
   "~^/(?:.*/)?assets/.*-[A-Za-z0-9_-]{8,}\.[^/]+$" "public, max-age=31536000, immutable";
+  "~^/apps/[a-z0-9][a-z0-9-]*/vendor/ffmpeg/(?:(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)|0\.12\.10-reviewed-stack5m\.1)/(?:version\.json|(?:st|mt)/ffmpeg-core\.(?:js|wasm)|mt/ffmpeg-core\.worker\.js)$" "public, max-age=31536000, immutable";
+}
+
+map $uri $toolbox_resource_policy {
+  default "same-origin";
+  "/apps/svg/canvas-frame-controller.js" "cross-origin";
+}
+
+map $uri $toolbox_access_control_allow_origin {
+  default "";
+  "/apps/svg/canvas-frame-controller.js" "*";
+}
+
+map "$host:$uri" $toolbox_permissions_policy {
+  default "camera=(), microphone=(), display-capture=(), geolocation=(), payment=(), usb=()";
+  "~^auth\.toolbox\.add-ideas\.de:" "camera=(self), microphone=(), display-capture=(), geolocation=(), payment=(), usb=()";
+  "~^[^:]+:/apps/barcode(?:/|$)" "camera=(self), microphone=(), display-capture=(), geolocation=(), payment=(), usb=()";
+  "~^[^:]+:/apps/scan(?:/|$)" "camera=(self), microphone=(), display-capture=(), geolocation=(), payment=(), usb=()";
+  "~^[^:]+:/apps/device(?:/|$)" "camera=(self), microphone=(self), display-capture=(self), geolocation=(), payment=(), usb=()";
 }
 
 server {
@@ -18,9 +37,10 @@ server {
   add_header X-Frame-Options "DENY" always;
   add_header Cross-Origin-Opener-Policy "same-origin" always;
   add_header Cross-Origin-Embedder-Policy "require-corp" always;
-  add_header Cross-Origin-Resource-Policy "same-origin" always;
+  add_header Cross-Origin-Resource-Policy $toolbox_resource_policy always;
-  add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=(), usb=()" always;
+  add_header Access-Control-Allow-Origin $toolbox_access_control_allow_origin always;
-  add_header Content-Security-Policy "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self'" always;
+  add_header Permissions-Policy $toolbox_permissions_policy always;
+  add_header Content-Security-Policy "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob:; font-src 'self' data: blob:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self'" always;
   add_header Cache-Control $toolbox_cache_control always;
 
   gzip on;
@@ -32,7 +52,28 @@ server {
     try_files $uri =404;
   }
 
-  location ~* \.(?:css|js|mjs|wasm|woff2?|png|jpe?g|gif|webp|svg|ico|webmanifest)$ {
+  location ~* \.wasm$ {
+    types {
+      application/wasm wasm;
+    }
+    try_files $uri =404;
+  }
+
+  location ~* \.mjs$ {
+    types {
+      application/javascript mjs;
+    }
+    try_files $uri =404;
+  }
+
+  location ~* ^/apps/scan/ocr/lang/[a-z0-9_-]+\.traineddata\.gz$ {
+    types {
+      application/gzip gz;
+    }
+    try_files $uri =404;
+  }
+
+  location ~* \.(?:css|js|mjs|woff2?|png|jpe?g|gif|webp|svg|ico|webmanifest)$ {
     try_files $uri =404;
   }
 

package-lock.json

@@ -1,16 +1,16 @@
 {
   "name": "@add-ideas/toolbox-portal",
-  "version": "0.2.3",
+  "version": "0.2.22",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@add-ideas/toolbox-portal",
-      "version": "0.2.3",
+      "version": "0.2.22",
       "license": "AGPL-3.0-only",
       "dependencies": {
-        "@add-ideas/toolbox-contract": "^0.2.2",
+        "@add-ideas/toolbox-contract": "^0.2.3",
-        "@add-ideas/toolbox-shell-react": "^0.2.2",
+        "@add-ideas/toolbox-shell-react": "^0.2.3",
         "@dnd-kit/core": "^6.3.1",
         "@dnd-kit/sortable": "^10.0.0",
         "@dnd-kit/utilities": "^3.2.2",
@@ -26,7 +26,7 @@
         "@types/react": "^19.2.14",
         "@types/react-dom": "^19.2.3",
         "@vitejs/plugin-react": "^6.0.2",
-        "archiver": "^7.0.1",
+        "archiver": "^8.0.0",
         "eslint": "^10.4.0",
         "eslint-plugin-react-hooks": "^7.1.1",
         "eslint-plugin-react-refresh": "^0.5.2",
@@ -44,18 +44,18 @@
       }
     },
     "node_modules/@add-ideas/toolbox-contract": {
-      "version": "0.2.2",
+      "version": "0.2.3",
-      "resolved": "https://git.add-ideas.de/api/packages/zemion/npm/%40add-ideas%2Ftoolbox-contract/-/0.2.2/toolbox-contract-0.2.2.tgz",
+      "resolved": "https://git.add-ideas.de/api/packages/lotobo/npm/%40add-ideas%2Ftoolbox-contract/-/0.2.3/toolbox-contract-0.2.3.tgz",
-      "integrity": "sha512-VcZ8j4O2PgFaIYgxs6r9u0uPxA+hHKwhCW+omfeVCtbjAAYhH2KhRlBGm0ERVVYcK5kchyzZLXrC4LKWRotVzg==",
+      "integrity": "sha512-T0PVSuMT40GjTDfQJhEEY3ZawQq8zz1/ry95JdKI6W39CdLacaRXdGnEpDCMHt+jUbf1Jz7Nat/M5dFCgKVM9A==",
       "license": "Apache-2.0"
     },
     "node_modules/@add-ideas/toolbox-shell-react": {
-      "version": "0.2.2",
+      "version": "0.2.3",
-      "resolved": "https://git.add-ideas.de/api/packages/zemion/npm/%40add-ideas%2Ftoolbox-shell-react/-/0.2.2/toolbox-shell-react-0.2.2.tgz",
+      "resolved": "https://git.add-ideas.de/api/packages/lotobo/npm/%40add-ideas%2Ftoolbox-shell-react/-/0.2.3/toolbox-shell-react-0.2.3.tgz",
-      "integrity": "sha512-w/xbLCd50a2Jq7vQ9Z9ygUOuqlOCRkIYlk4vSJx0mf4REJNeMYi3PE2MbaLUC4DkQWyrmatsa5HNT89o0l91BA==",
+      "integrity": "sha512-DT5lQDH48BFkFcmFLZnQh7+Cm73JzBPcmp5WzUXypfkUXpEyDYHzaXgmW4kZ0edSwh4RK4sPmx+JPtK0X4aKCQ==",
       "license": "Apache-2.0",
       "dependencies": {
-        "@add-ideas/toolbox-contract": "0.2.2"
+        "@add-ideas/toolbox-contract": "0.2.3"
       },
       "peerDependencies": {
         "react": ">=18 <20",
@@ -822,24 +822,6 @@
         "url": "https://github.com/sponsors/nzakas"
       }
     },
-    "node_modules/@isaacs/cliui": {
-      "version": "8.0.2",
-      "resolved": "https://registry.npmjs.org/@isaacs/cliui/-/cliui-8.0.2.tgz",
-      "integrity": "sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "string-width": "^5.1.2",
-        "string-width-cjs": "npm:string-width@^4.2.0",
-        "strip-ansi": "^7.0.1",
-        "strip-ansi-cjs": "npm:strip-ansi@^6.0.1",
-        "wrap-ansi": "^8.1.0",
-        "wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0"
-      },
-      "engines": {
-        "node": ">=12"
-      }
-    },
     "node_modules/@jridgewell/gen-mapping": {
       "version": "0.3.13",
       "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
@@ -919,17 +901,6 @@
         "url": "https://github.com/sponsors/Boshen"
       }
     },
-    "node_modules/@pkgjs/parseargs": {
-      "version": "0.11.0",
-      "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
-      "integrity": "sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==",
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "engines": {
-        "node": ">=14"
-      }
-    },
     "node_modules/@rolldown/binding-android-arm64": {
       "version": "1.1.5",
       "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.1.5.tgz",
@@ -1838,6 +1809,7 @@
       "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "engines": {
         "node": ">=8"
       }
@@ -1857,41 +1829,24 @@
       }
     },
     "node_modules/archiver": {
-      "version": "7.0.1",
+      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/archiver/-/archiver-7.0.1.tgz",
+      "resolved": "https://registry.npmjs.org/archiver/-/archiver-8.0.0.tgz",
-      "integrity": "sha512-ZcbTaIqJOfCc03QwD468Unz/5Ir8ATtvAHsK+FdXbDIbGfihqh9mrvdcYunQzqn4HrvWWaFyaxJhGZagaJJpPQ==",
+      "integrity": "sha512-fV1orZfsnPn9BaSByR/qE67rJCLJEy2Ox5bq7nJh+jquWaNh6Sfec75kJ2T6PtdGUbPQlrVoSVCEOa5SdiTQ1g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "archiver-utils": "^5.0.2",
         "async": "^3.2.4",
         "buffer-crc32": "^1.0.0",
-        "readable-stream": "^4.0.0",
+        "is-stream": "^4.0.0",
-        "readdir-glob": "^1.1.2",
-        "tar-stream": "^3.0.0",
-        "zip-stream": "^6.0.1"
-      },
-      "engines": {
-        "node": ">= 14"
-      }
-    },
-    "node_modules/archiver-utils": {
-      "version": "5.0.2",
-      "resolved": "https://registry.npmjs.org/archiver-utils/-/archiver-utils-5.0.2.tgz",
-      "integrity": "sha512-wuLJMmIBQYCsGZgYLTy5FIB2pF6Lfb6cXMSF8Qywwk3t20zWnAi7zLcQFdKQmIB8wyZpY5ER38x08GbwtR2cLA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "glob": "^10.0.0",
-        "graceful-fs": "^4.2.0",
-        "is-stream": "^2.0.1",
         "lazystream": "^1.0.0",
-        "lodash": "^4.17.15",
         "normalize-path": "^3.0.0",
-        "readable-stream": "^4.0.0"
+        "readable-stream": "^4.0.0",
+        "readdir-glob": "^3.0.0",
+        "tar-stream": "^3.0.0",
+        "zip-stream": "^7.0.2"
       },
       "engines": {
-        "node": ">= 14"
+        "node": ">=18"
       }
     },
     "node_modules/aria-query": {
@@ -2076,16 +2031,16 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.7",
+      "version": "5.0.9",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.7.tgz",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
-      "integrity": "sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==",
+      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^4.0.2"
       },
       "engines": {
-        "node": "18 || 20 || >=22"
+        "node": "20 || >=22"
       }
     },
     "node_modules/browserslist": {
@@ -2188,41 +2143,21 @@
         "node": ">=18"
       }
     },
-    "node_modules/color-convert": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
-      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "color-name": "~1.1.4"
-      },
-      "engines": {
-        "node": ">=7.0.0"
-      }
-    },
-    "node_modules/color-name": {
-      "version": "1.1.4",
-      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
-      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/compress-commons": {
-      "version": "6.0.2",
+      "version": "7.0.1",
-      "resolved": "https://registry.npmjs.org/compress-commons/-/compress-commons-6.0.2.tgz",
+      "resolved": "https://registry.npmjs.org/compress-commons/-/compress-commons-7.0.1.tgz",
-      "integrity": "sha512-6FqVXeETqWPoGcfzrXb37E50NP0LXT8kAMu5ooZayhWWdgEY4lBEEcbQNXtkuKQsGduxiIcI4gOTsxTmuq/bSg==",
+      "integrity": "sha512-g0S8KAD8qf4+V//pr3BfB1aBnARLXNz2Gx+jmHU0LEriUuoQUOPOulVquHKTJ8+EAIIO7fhseNDr9wK5Q9FKBQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "crc-32": "^1.2.0",
-        "crc32-stream": "^6.0.0",
+        "crc32-stream": "^7.0.1",
-        "is-stream": "^2.0.1",
+        "is-stream": "^4.0.0",
         "normalize-path": "^3.0.0",
         "readable-stream": "^4.0.0"
       },
       "engines": {
-        "node": ">= 14"
+        "node": ">=18"
       }
     },
     "node_modules/convert-source-map": {
@@ -2253,9 +2188,9 @@
       }
     },
     "node_modules/crc32-stream": {
-      "version": "6.0.0",
+      "version": "7.0.1",
-      "resolved": "https://registry.npmjs.org/crc32-stream/-/crc32-stream-6.0.0.tgz",
+      "resolved": "https://registry.npmjs.org/crc32-stream/-/crc32-stream-7.0.1.tgz",
-      "integrity": "sha512-piICUB6ei4IlTv1+653yq5+KoqfBYmj9bw6LqXoOneTMDXk5nM1qt12mFW1caG3LlJXEKW1Bp0WggEmIfQB34g==",
+      "integrity": "sha512-IBWsY8xznyQrcHn8h4bC8/4ErNke5elzgG8GcqF4RFPw6aHkWWRc7Tgw6upjaTX/CT/yQgqYENkxYsTYN+hW2g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2263,7 +2198,7 @@
         "readable-stream": "^4.0.0"
       },
       "engines": {
-        "node": ">= 14"
+        "node": ">=18"
       }
     },
     "node_modules/cross-spawn": {
@@ -2383,13 +2318,6 @@
       "license": "MIT",
       "peer": true
     },
-    "node_modules/eastasianwidth": {
-      "version": "0.2.0",
-      "resolved": "https://registry.npmjs.org/eastasianwidth/-/eastasianwidth-0.2.0.tgz",
-      "integrity": "sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/electron-to-chromium": {
       "version": "1.5.393",
       "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.393.tgz",
@@ -2397,13 +2325,6 @@
       "dev": true,
       "license": "ISC"
     },
-    "node_modules/emoji-regex": {
-      "version": "9.2.2",
-      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-9.2.2.tgz",
-      "integrity": "sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/entities": {
       "version": "8.0.0",
       "resolved": "https://registry.npmjs.org/entities/-/entities-8.0.0.tgz",
@@ -2779,23 +2700,6 @@
       "dev": true,
       "license": "ISC"
     },
-    "node_modules/foreground-child": {
-      "version": "3.3.1",
-      "resolved": "https://registry.npmjs.org/foreground-child/-/foreground-child-3.3.1.tgz",
-      "integrity": "sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "cross-spawn": "^7.0.6",
-        "signal-exit": "^4.0.1"
-      },
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/fsevents": {
       "version": "2.3.3",
       "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
@@ -2821,28 +2725,6 @@
         "node": ">=6.9.0"
       }
     },
-    "node_modules/glob": {
-      "version": "10.5.0",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz",
-      "integrity": "sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==",
-      "deprecated": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "foreground-child": "^3.1.0",
-        "jackspeak": "^3.1.2",
-        "minimatch": "^9.0.4",
-        "minipass": "^7.1.2",
-        "package-json-from-dist": "^1.0.0",
-        "path-scurry": "^1.11.1"
-      },
-      "bin": {
-        "glob": "dist/esm/bin.mjs"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/glob-parent": {
       "version": "6.0.2",
       "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz",
@@ -2856,39 +2738,6 @@
         "node": ">=10.13.0"
       }
     },
-    "node_modules/glob/node_modules/balanced-match": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
-      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/glob/node_modules/brace-expansion": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.2.tgz",
-      "integrity": "sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "balanced-match": "^1.0.0"
-      }
-    },
-    "node_modules/glob/node_modules/minimatch": {
-      "version": "9.0.9",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz",
-      "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "brace-expansion": "^2.0.2"
-      },
-      "engines": {
-        "node": ">=16 || 14 >=14.17"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/globals": {
       "version": "17.7.0",
       "resolved": "https://registry.npmjs.org/globals/-/globals-17.7.0.tgz",
@@ -2902,13 +2751,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/graceful-fs": {
-      "version": "4.2.11",
-      "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
-      "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==",
-      "dev": true,
-      "license": "ISC"
-    },
     "node_modules/hermes-estree": {
       "version": "0.25.1",
       "resolved": "https://registry.npmjs.org/hermes-estree/-/hermes-estree-0.25.1.tgz",
@@ -3007,16 +2849,6 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/is-fullwidth-code-point": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
-      "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/is-glob": {
       "version": "4.0.3",
       "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz",
@@ -3038,13 +2870,13 @@
       "license": "MIT"
     },
     "node_modules/is-stream": {
-      "version": "2.0.1",
+      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-2.0.1.tgz",
+      "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-4.0.1.tgz",
-      "integrity": "sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==",
+      "integrity": "sha512-Dnz92NInDqYckGEUJv689RbRiTSEHCQ7wOVeALbkOz999YpqT46yMRIGtSNl2iCL1waAZSx40+h59NV/EwzV/A==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">=8"
+        "node": ">=18"
       },
       "funding": {
         "url": "https://github.com/sponsors/sindresorhus"
@@ -3064,22 +2896,6 @@
       "dev": true,
       "license": "ISC"
     },
-    "node_modules/jackspeak": {
-      "version": "3.4.3",
-      "resolved": "https://registry.npmjs.org/jackspeak/-/jackspeak-3.4.3.tgz",
-      "integrity": "sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==",
-      "dev": true,
-      "license": "BlueOak-1.0.0",
-      "dependencies": {
-        "@isaacs/cliui": "^8.0.2"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      },
-      "optionalDependencies": {
-        "@pkgjs/parseargs": "^0.11.0"
-      }
-    },
     "node_modules/js-tokens": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
@@ -3544,13 +3360,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/lodash": {
-      "version": "4.18.1",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
-      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/lru-cache": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz",
@@ -3615,16 +3424,6 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
-    "node_modules/minipass": {
-      "version": "7.1.3",
-      "resolved": "https://registry.npmjs.org/minipass/-/minipass-7.1.3.tgz",
-      "integrity": "sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==",
-      "dev": true,
-      "license": "BlueOak-1.0.0",
-      "engines": {
-        "node": ">=16 || 14 >=14.17"
-      }
-    },
     "node_modules/ms": {
       "version": "2.1.3",
       "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
@@ -3633,9 +3432,9 @@
       "license": "MIT"
     },
     "node_modules/nanoid": {
-      "version": "3.3.16",
+      "version": "3.3.18",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
-      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
       "dev": true,
       "funding": [
         {
@@ -3742,13 +3541,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "node_modules/package-json-from-dist": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/package-json-from-dist/-/package-json-from-dist-1.0.1.tgz",
-      "integrity": "sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==",
-      "dev": true,
-      "license": "BlueOak-1.0.0"
-    },
     "node_modules/parse5": {
       "version": "8.0.1",
       "resolved": "https://registry.npmjs.org/parse5/-/parse5-8.0.1.tgz",
@@ -3782,30 +3574,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/path-scurry": {
-      "version": "1.11.1",
-      "resolved": "https://registry.npmjs.org/path-scurry/-/path-scurry-1.11.1.tgz",
-      "integrity": "sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==",
-      "dev": true,
-      "license": "BlueOak-1.0.0",
-      "dependencies": {
-        "lru-cache": "^10.2.0",
-        "minipass": "^5.0.0 || ^6.0.2 || ^7.0.0"
-      },
-      "engines": {
-        "node": ">=16 || 14 >=14.18"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
-    "node_modules/path-scurry/node_modules/lru-cache": {
-      "version": "10.4.3",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz",
-      "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==",
-      "dev": true,
-      "license": "ISC"
-    },
     "node_modules/pathe": {
       "version": "2.0.3",
       "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
@@ -3841,9 +3609,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.20",
+      "version": "8.5.26",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.20.tgz",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.26.tgz",
-      "integrity": "sha512-lW616l85ucIQL+FocMmL7pQFPqBmwejrCMg+iPxyImlrANNJG9NHq/RkyCZopDhd8C3LA03PHRJDjkbGu8vvug==",
+      "integrity": "sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==",
       "dev": true,
       "funding": [
         {
@@ -3861,7 +3629,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.16",
+        "nanoid": "^3.3.17",
         "picocolors": "^1.1.1",
         "source-map-js": "^1.2.1"
       },
@@ -3985,43 +3753,19 @@
       }
     },
     "node_modules/readdir-glob": {
-      "version": "1.1.3",
+      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/readdir-glob/-/readdir-glob-1.1.3.tgz",
+      "resolved": "https://registry.npmjs.org/readdir-glob/-/readdir-glob-3.0.0.tgz",
-      "integrity": "sha512-v05I2k7xN8zXvPD9N+z/uhXPaj0sUFCe2rcWZIpBsqxfP7xXFQ0tipAd/wjj1YxWyWtUS5IDJpOG82JKt2EAVA==",
+      "integrity": "sha512-AhNB2KgKeVJr16nK9LLZbJNWnYoT23ZrumNKFDebHBdkC8KHSqWo871JAUhoWC/RtjEVdqNMFpM6qrwRbaUqpw==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "minimatch": "^5.1.0"
+        "minimatch": "^10.2.2"
-      }
-    },
-    "node_modules/readdir-glob/node_modules/balanced-match": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
-      "integrity": "sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/readdir-glob/node_modules/brace-expansion": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.2.tgz",
-      "integrity": "sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "balanced-match": "^1.0.0"
-      }
-    },
-    "node_modules/readdir-glob/node_modules/minimatch": {
-      "version": "5.1.9",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-5.1.9.tgz",
-      "integrity": "sha512-7o1wEA2RyMP7Iu7GNba9vc0RWWGACJOCZBJX2GJWip0ikV+wcOsgVuY9uE8CPiyQhkGFSlhuSkZPavN7u1c2Fw==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "brace-expansion": "^2.0.1"
       },
       "engines": {
-        "node": ">=10"
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/yqnn"
       }
     },
     "node_modules/redent": {
@@ -4162,19 +3906,6 @@
       "dev": true,
       "license": "ISC"
     },
-    "node_modules/signal-exit": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.1.0.tgz",
-      "integrity": "sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==",
-      "dev": true,
-      "license": "ISC",
-      "engines": {
-        "node": ">=14"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/source-map-js": {
       "version": "1.2.1",
       "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
@@ -4221,103 +3952,6 @@
         "safe-buffer": "~5.2.0"
       }
     },
-    "node_modules/string-width": {
-      "version": "5.1.2",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-5.1.2.tgz",
-      "integrity": "sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "eastasianwidth": "^0.2.0",
-        "emoji-regex": "^9.2.2",
-        "strip-ansi": "^7.0.1"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/string-width-cjs": {
-      "name": "string-width",
-      "version": "4.2.3",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
-      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "emoji-regex": "^8.0.0",
-        "is-fullwidth-code-point": "^3.0.0",
-        "strip-ansi": "^6.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/string-width-cjs/node_modules/emoji-regex": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
-      "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/string-width-cjs/node_modules/strip-ansi": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
-      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ansi-regex": "^5.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/strip-ansi": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-7.2.0.tgz",
-      "integrity": "sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ansi-regex": "^6.2.2"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/strip-ansi?sponsor=1"
-      }
-    },
-    "node_modules/strip-ansi-cjs": {
-      "name": "strip-ansi",
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
-      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ansi-regex": "^5.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/strip-ansi/node_modules/ansi-regex": {
-      "version": "6.2.2",
-      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-6.2.2.tgz",
-      "integrity": "sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-regex?sponsor=1"
-      }
-    },
     "node_modules/strip-indent": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/strip-indent/-/strip-indent-3.0.0.tgz",
@@ -4532,9 +4166,9 @@
       }
     },
     "node_modules/undici": {
-      "version": "7.28.0",
+      "version": "7.29.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.28.0.tgz",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz",
-      "integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==",
+      "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -4855,107 +4489,6 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/wrap-ansi": {
-      "version": "8.1.0",
-      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-8.1.0.tgz",
-      "integrity": "sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ansi-styles": "^6.1.0",
-        "string-width": "^5.0.1",
-        "strip-ansi": "^7.0.1"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
-      }
-    },
-    "node_modules/wrap-ansi-cjs": {
-      "name": "wrap-ansi",
-      "version": "7.0.0",
-      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz",
-      "integrity": "sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ansi-styles": "^4.0.0",
-        "string-width": "^4.1.0",
-        "strip-ansi": "^6.0.0"
-      },
-      "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/wrap-ansi?sponsor=1"
-      }
-    },
-    "node_modules/wrap-ansi-cjs/node_modules/ansi-styles": {
-      "version": "4.3.0",
-      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
-      "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "color-convert": "^2.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
-      }
-    },
-    "node_modules/wrap-ansi-cjs/node_modules/emoji-regex": {
-      "version": "8.0.0",
-      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
-      "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/wrap-ansi-cjs/node_modules/string-width": {
-      "version": "4.2.3",
-      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
-      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "emoji-regex": "^8.0.0",
-        "is-fullwidth-code-point": "^3.0.0",
-        "strip-ansi": "^6.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/wrap-ansi-cjs/node_modules/strip-ansi": {
-      "version": "6.0.1",
-      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
-      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "ansi-regex": "^5.0.1"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/wrap-ansi/node_modules/ansi-styles": {
-      "version": "6.2.3",
-      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-6.2.3.tgz",
-      "integrity": "sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
-      }
-    },
     "node_modules/xml-name-validator": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-5.0.0.tgz",
@@ -5007,18 +4540,18 @@
       }
     },
     "node_modules/zip-stream": {
-      "version": "6.0.1",
+      "version": "7.0.5",
-      "resolved": "https://registry.npmjs.org/zip-stream/-/zip-stream-6.0.1.tgz",
+      "resolved": "https://registry.npmjs.org/zip-stream/-/zip-stream-7.0.5.tgz",
-      "integrity": "sha512-zK7YHHz4ZXpW89AHXUPbQVGKI7uvkd3hzusTdotCg1UxyaVtg0zFJSTfW/Dq5f7OBBVnq6cZIaC8Ti4hb6dtCA==",
+      "integrity": "sha512-dSvYKdvLsAHCDqPOhIwk/q5CvuWtTB3Dgpoe0uVEFjTzIOAmsQpprX25InCvrvJsirEbu1OHyy67n/kAj1Sw/w==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "archiver-utils": "^5.0.0",
+        "compress-commons": "^7.0.0",
-        "compress-commons": "^6.0.2",
+        "normalize-path": "^3.0.0",
         "readable-stream": "^4.0.0"
       },
       "engines": {
-        "node": ">= 14"
+        "node": ">=18"
       }
     },
     "node_modules/zod": {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@add-ideas/toolbox-portal",
-  "version": "0.2.3",
+  "version": "0.2.22",
   "license": "AGPL-3.0-only",
   "private": true,
   "type": "module",
@@ -21,8 +21,8 @@
     "package:static": "node scripts/package-static.mjs"
   },
   "dependencies": {
-    "@add-ideas/toolbox-contract": "^0.2.2",
+    "@add-ideas/toolbox-contract": "^0.2.3",
-    "@add-ideas/toolbox-shell-react": "^0.2.2",
+    "@add-ideas/toolbox-shell-react": "^0.2.3",
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/sortable": "^10.0.0",
     "@dnd-kit/utilities": "^3.2.2",
@@ -38,7 +38,7 @@
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "^6.0.2",
-    "archiver": "^7.0.1",
+    "archiver": "^8.0.0",
     "eslint": "^10.4.0",
     "eslint-plugin-react-hooks": "^7.1.1",
     "eslint-plugin-react-refresh": "^0.5.2",
@@ -53,5 +53,13 @@
   },
   "engines": {
     "node": ">=22"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://git.add-ideas.de/lotobo/toolbox-portal.git"
+  },
+  "homepage": "https://git.add-ideas.de/lotobo/toolbox-portal",
+  "bugs": {
+    "url": "https://git.add-ideas.de/lotobo/toolbox-portal/issues"
   }
 }

public/SOURCE.md

@@ -1,8 +1,8 @@
 # Corresponding source
 
-The source code corresponding to add·ideas Toolbox Portal 0.2.3 is available at:
+The source code corresponding to add·ideas Toolbox Portal 0.2.22 is available at:
 
-https://git.add-ideas.de/zemion/toolbox-portal/src/tag/v0.4.3
+https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.19.0
 
 Each bundled application contains its own `SOURCE.md`, license, and third-party
 license materials. The application sources are also linked from the portal.

public/toolbox.catalog.json

@@ -1,5 +1,5 @@
 {
-  "$schema": "https://git.add-ideas.de/zemion/toolbox-sdk/raw/branch/main/schemas/toolbox-catalog.v1.schema.json",
+  "$schema": "https://git.add-ideas.de/lotobo/toolbox-sdk/raw/branch/main/schemas/toolbox-catalog.v1.schema.json",
   "schemaVersion": 1,
   "id": "de.add-ideas.toolbox",
   "name": "add·ideas Toolbox",
@@ -20,6 +20,194 @@
     {
       "manifest": "./apps/onenote/toolbox-app.json",
       "enabled": true
+    },
+    {
+      "manifest": "./apps/av/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/regex/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/svg/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/auth/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/sudoku/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/colour/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/office/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/image/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/file/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/epub/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/archive/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/privacy/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/crypto/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/barcode/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/network/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/geo/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/helper/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/rand/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/data/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/diff/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/time/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/text/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/unicode/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/flow/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/subtitle/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/midi/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/3d/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/query/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/scan/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/package/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/label/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/font/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/fixture/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/minimize/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/format-lab/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/repro/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/schema/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/log/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/binary/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/git/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/api/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/mail/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/calendar/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/contact/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/diagram/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/token/toolbox-app.json",
+      "enabled": true
+    },
+    {
+      "manifest": "./apps/device/toolbox-app.json",
+      "enabled": true
     }
   ]
 }

release/toolbox-release-lock.schema.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://git.add-ideas.de/zemion/toolbox-portal/raw/branch/main/release/toolbox-release-lock.schema.json",
+  "$id": "https://git.add-ideas.de/lotobo/toolbox-portal/raw/branch/main/release/toolbox-release-lock.schema.json",
   "title": "add·ideas Toolbox release lock v1",
   "description": "Pins the exact portal and checksummed application archives used to assemble one static toolbox release.",
   "type": "object",

release/toolbox.lock.example.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./toolbox-release-lock.schema.json",
   "schemaVersion": 1,
-  "releaseVersion": "0.4.3",
+  "releaseVersion": "0.19.0",
-  "portalVersion": "0.2.3",
+  "portalVersion": "0.2.22",
   "catalogue": {
     "id": "de.add-ideas.toolbox",
     "name": "add·ideas Toolbox",
@@ -15,24 +15,353 @@
   "apps": [
     {
       "id": "de.add-ideas.pdf-tools",
-      "version": "0.4.3",
+      "version": "0.4.4",
-      "artifact": "https://git.add-ideas.de/zemion/pdf-tools/releases/download/v0.4.3/pdf-tools-0.4.3.zip",
+      "artifact": "https://git.add-ideas.de/lotobo/pdf-tools/releases/download/v0.4.4/pdf-tools-0.4.4.zip",
-      "sha256": "f2dfd3bade49a4b8be9c0c54c6c2bf1bbb153fc0505a38af14de5ab52d5183cf",
+      "sha256": "fa93c4c004be74d6a1f68f62a0f64f44c99218f387441ca3630a7f5af3c09d7d",
       "target": "pdf"
     },
     {
       "id": "de.add-ideas.xslt-tools",
-      "version": "0.4.2",
+      "version": "0.4.3",
-      "artifact": "https://git.add-ideas.de/zemion/xslt-tools/releases/download/v0.4.2/xslt-tools-0.4.2.zip",
+      "artifact": "https://git.add-ideas.de/lotobo/xslt-tools/releases/download/v0.4.3/xslt-tools-0.4.3.zip",
-      "sha256": "daaa821c10c6c6285f97128ba3d923e48efa24449f1fb0a21bf478abaf27499f",
+      "sha256": "e44012af214d24e3d97d10a6017fa3d9dbf063de36673ab04dd15a0a8643afcc",
       "target": "xslt"
     },
     {
       "id": "de.add-ideas.onenote-tools",
-      "version": "0.3.3",
+      "version": "0.3.4",
-      "artifact": "https://git.add-ideas.de/zemion/onenote-tools/releases/download/v0.3.3/onenote-tools-0.3.3.zip",
+      "artifact": "https://git.add-ideas.de/lotobo/onenote-tools/releases/download/v0.3.4/onenote-tools-0.3.4.zip",
-      "sha256": "37c0ef7cdc7f435d0d4f5a341523f4e522118d5b258c374b5a7ef7b8e6c27cec",
+      "sha256": "c0ed791d1ae64fdf6a90bceebf97a7a3252989f2434204d009f87f5a2d1cc341",
       "target": "onenote"
+    },
+    {
+      "id": "de.add-ideas.av-tools",
+      "version": "0.3.0",
+      "artifact": "https://git.add-ideas.de/lotobo/av-tools/releases/download/v0.3.0/av-tools-0.3.0.zip",
+      "sha256": "3476c5d43ae43ce66b5aeebe8c11334f7cd4d153586348b72f10bfbdbada9be7",
+      "target": "av"
+    },
+    {
+      "id": "de.add-ideas.regex-tools",
+      "version": "0.4.2",
+      "artifact": "https://git.add-ideas.de/lotobo/regex-tools/releases/download/v0.4.2/regex-tools-0.4.2.zip",
+      "sha256": "a3e7342d1f0746aa9c88e6568e7fbc04ab429c94604ba5fb1094ffdb096a54fe",
+      "target": "regex"
+    },
+    {
+      "id": "de.add-ideas.svg-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/svg-tools/releases/download/v0.1.0/svg-tools-0.1.0.zip",
+      "sha256": "364f14c88c4934d9c847bf76de70b89dcf564a405afd58c6703363a95fbfb6ae",
+      "target": "svg"
+    },
+    {
+      "id": "de.add-ideas.auth-tools",
+      "version": "0.3.1",
+      "artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.3.1/auth-tools-0.3.1.zip",
+      "sha256": "60e90492fb50d2ce23298b3a3af84b1e3be02bbf5dea01d478f889d65eb66f3a",
+      "target": "auth"
+    },
+    {
+      "id": "de.add-ideas.sudoku-tools",
+      "version": "0.2.1",
+      "artifact": "https://git.add-ideas.de/lotobo/sudoku-tools/releases/download/v0.2.1/sudoku-tools-0.2.1.zip",
+      "sha256": "3987813a3bcd24056b9ca9607ba5d74a094d54c15b0e8a7966df7373e87df67a",
+      "target": "sudoku"
+    },
+    {
+      "id": "de.add-ideas.colour-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/colour-tools/releases/download/v0.1.0/colour-tools-0.1.0.zip",
+      "sha256": "c933f506362709a031a5cd830657604510b8e4ccb1800be77d40d0eee256490b",
+      "target": "colour"
+    },
+    {
+      "id": "de.add-ideas.office-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/office-tools/releases/download/v0.1.0/office-tools-0.1.0.zip",
+      "sha256": "3f950a413c74bae3b8f190954272fd91c9b141aab4fa50c936d5ad3741539aaf",
+      "target": "office"
+    },
+    {
+      "id": "de.add-ideas.image-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/image-tools/releases/download/v0.1.0/image-tools-0.1.0.zip",
+      "sha256": "8aa67d0c3cfd1060c261e9be108fb443384aaec95f82d3c1b96b63b2d07963e1",
+      "target": "image"
+    },
+    {
+      "id": "de.add-ideas.file-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/file-tools/releases/download/v0.1.0/file-tools-0.1.0.zip",
+      "sha256": "9225ff60c639d563bb514ac390b5b2cbad4b8030a070e6398e7c200763c5f89e",
+      "target": "file"
+    },
+    {
+      "id": "de.add-ideas.epub-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/epub-tools/releases/download/v0.1.0/epub-tools-0.1.0.zip",
+      "sha256": "834512494bbfba9918a9d8131efd512a09619a150823591e2d13ea385ced00e9",
+      "target": "epub"
+    },
+    {
+      "id": "de.add-ideas.archive-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/archive-tools/releases/download/v0.1.0/archive-tools-0.1.0.zip",
+      "sha256": "88a8efb39129bb813c97fb4d80257ee339bbfcec2a73b080a0a89dc76cdd2958",
+      "target": "archive"
+    },
+    {
+      "id": "de.add-ideas.privacy-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/privacy-tools/releases/download/v0.1.0/privacy-tools-0.1.0.zip",
+      "sha256": "0d6c071837b8ce705e456d44888378f3a7f9427a352f0bd4b60512f6c41465d4",
+      "target": "privacy"
+    },
+    {
+      "id": "de.add-ideas.crypto-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/crypto-tools/releases/download/v0.1.0/crypto-tools-0.1.0.zip",
+      "sha256": "bfced32f44918214ffd31c5d4730aee7bffd75e7952e9a6d16b6eb7eb68fed35",
+      "target": "crypto"
+    },
+    {
+      "id": "de.add-ideas.barcode-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/barcode-tools/releases/download/v0.1.0/barcode-tools-0.1.0.zip",
+      "sha256": "22cede58d279f15419b342862bf6545cace831d1e02c0634fbd01aeab3bd3e63",
+      "target": "barcode"
+    },
+    {
+      "id": "de.add-ideas.network-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/network-tools/releases/download/v0.1.0/network-tools-0.1.0.zip",
+      "sha256": "7e493a0aed643c712c38057bcd67c360bc6712d5d31ea82c222bf780464ff4a1",
+      "target": "network"
+    },
+    {
+      "id": "de.add-ideas.geo-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/geo-tools/releases/download/v0.1.0/geo-tools-0.1.0.zip",
+      "sha256": "88a46a56f3d3b5b61dc9bbb8795764b59aae1635da95120a0e499e33ef652e8f",
+      "target": "geo"
+    },
+    {
+      "id": "de.add-ideas.helper-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/helper-tools/releases/download/v0.1.0/helper-tools-0.1.0.zip",
+      "sha256": "bcdbd2ffc721ed1a2e9432eea1f90d7b4526d86934c3b5de6f522fd8bd58fd77",
+      "target": "helper"
+    },
+    {
+      "id": "de.add-ideas.rand-tools",
+      "version": "0.1.1",
+      "artifact": "https://git.add-ideas.de/lotobo/rand-tools/releases/download/v0.1.1/rand-tools-0.1.1.zip",
+      "sha256": "02dffcbbf1c3ff65236a83466aa750c3848777e4a69ac389fe24da02abfc0e77",
+      "target": "rand"
+    },
+    {
+      "id": "de.add-ideas.data-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/data-tools/releases/download/v0.1.0/data-tools-0.1.0.zip",
+      "sha256": "83ab02c9827d122c83b05c230e62c0ee87b330604acfff4990c58310f7956a1f",
+      "target": "data"
+    },
+    {
+      "id": "de.add-ideas.diff-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/diff-tools/releases/download/v0.1.0/diff-tools-0.1.0.zip",
+      "sha256": "023311343152aac11bfc00d58029b24ef0efe5ee4113aeb2a9d000ebe2460d72",
+      "target": "diff"
+    },
+    {
+      "id": "de.add-ideas.time-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/time-tools/releases/download/v0.1.0/time-tools-0.1.0.zip",
+      "sha256": "9a5545a3e684a207d7b2d6663d42a117cb5bb3303f35dc889a2651b67bfcf08f",
+      "target": "time"
+    },
+    {
+      "id": "de.add-ideas.text-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/text-tools/releases/download/v0.1.0/text-tools-0.1.0.zip",
+      "sha256": "242eb15005a18e0f13ba03544c633834416707e2629585868bfcd6f0c1cc5aec",
+      "target": "text"
+    },
+    {
+      "id": "de.add-ideas.unicode-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/unicode-tools/releases/download/v0.1.0/unicode-tools-0.1.0.zip",
+      "sha256": "1cf557d3ace9a41c7fa72cb5c1b149e669203a682174939f2e3aa376e1c6f22a",
+      "target": "unicode"
+    },
+    {
+      "id": "de.add-ideas.flow-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/flow-tools/releases/download/v0.1.0/flow-tools-0.1.0.zip",
+      "sha256": "abc8c50c95509484afa27606e6dc88087409fd0a8609fea6e99915cac703d2d5",
+      "target": "flow"
+    },
+    {
+      "id": "de.add-ideas.subtitle-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/subtitle-tools/releases/download/v0.1.0/subtitle-tools-0.1.0.zip",
+      "sha256": "be251beb06fe62da6b2dde79799e48d28148dc81cba84998ba51ced328509fc6",
+      "target": "subtitle"
+    },
+    {
+      "id": "de.add-ideas.midi-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/midi-tools/releases/download/v0.1.0/midi-tools-0.1.0.zip",
+      "sha256": "5f55fe448720d989aaf93cd25c18644b99df97bd3a32b297e1dc6f3d04777536",
+      "target": "midi"
+    },
+    {
+      "id": "de.add-ideas.3d-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/3d-tools/releases/download/v0.1.0/3d-tools-0.1.0.zip",
+      "sha256": "63d7c028e5fb8e0644855720d2088a23623b73f9e7f656485c1340b6e51dca1a",
+      "target": "3d"
+    },
+    {
+      "id": "de.add-ideas.query-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/query-tools/releases/download/v0.1.0/query-tools-0.1.0.zip",
+      "sha256": "c28fa57a266f32339f5f83c1082920ce3d601167c86a40516fe2e33d867545d6",
+      "target": "query"
+    },
+    {
+      "id": "de.add-ideas.scan-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/scan-tools/releases/download/v0.1.0/scan-tools-0.1.0.zip",
+      "sha256": "f741257053355ed0e2c46261d650c1bfdd70de9cc4355af526fb65bedf6a6096",
+      "target": "scan"
+    },
+    {
+      "id": "de.add-ideas.package-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/package-tools/releases/download/v0.1.0/package-tools-0.1.0.zip",
+      "sha256": "bbbba42319f77fc85ca38a87bef2317f8500326c9c781462561abafa37de2c97",
+      "target": "package"
+    },
+    {
+      "id": "de.add-ideas.label-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/label-tools/releases/download/v0.1.0/label-tools-0.1.0.zip",
+      "sha256": "0e658518da0eb9df204cc19bf07ef84e5e84c38d62604403a23e76938ecc8dd1",
+      "target": "label"
+    },
+    {
+      "id": "de.add-ideas.font-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/font-tools/releases/download/v0.1.0/font-tools-0.1.0.zip",
+      "sha256": "ee0b51e2ec63f38ae5fd2e9be8968f58f27e8cc243c429a3fc057e8cbfc3b582",
+      "target": "font"
+    },
+    {
+      "id": "de.add-ideas.fixture-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/fixture-tools/releases/download/v0.1.0/fixture-tools-0.1.0.zip",
+      "sha256": "9d41d63d33430bd8390ca9ddacdc14062205640a7ff8ed259192af943b430541",
+      "target": "fixture"
+    },
+    {
+      "id": "de.add-ideas.minimize-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/minimize-tools/releases/download/v0.1.0/minimize-tools-0.1.0.zip",
+      "sha256": "2e67cfdd8d0d4569729279da834b8c5bfa8ddd659068cfd7013a96f0031ecc05",
+      "target": "minimize"
+    },
+    {
+      "id": "de.add-ideas.format-lab",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/format-lab/releases/download/v0.1.0/format-lab-0.1.0.zip",
+      "sha256": "3fc0037bcdc4c7e58cc7de4a09a69c775ecc2605e820c3cdb5106cbc87de008c",
+      "target": "format-lab"
+    },
+    {
+      "id": "de.add-ideas.repro-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/repro-tools/releases/download/v0.1.0/repro-tools-0.1.0.zip",
+      "sha256": "c5c0dc7874bdeb241894d2475f2fde313e93231f3513205c5122336548c9c758",
+      "target": "repro"
+    },
+    {
+      "id": "de.add-ideas.schema-tools",
+      "version": "0.1.2",
+      "artifact": "https://git.add-ideas.de/lotobo/schema-tools/releases/download/v0.1.2/schema-tools-0.1.2.zip",
+      "sha256": "038f369ca19601a1a497d5435f3cee596946f93216cd796864d3e04a8d7bf3c7",
+      "target": "schema"
+    },
+    {
+      "id": "de.add-ideas.log-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/log-tools/releases/download/v0.1.0/log-tools-0.1.0.zip",
+      "sha256": "f16829d6e0a00981c92fa8704897da9aaeb4fcfc9af4ad8e45165e9dd35c2fdd",
+      "target": "log"
+    },
+    {
+      "id": "de.add-ideas.binary-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/binary-tools/releases/download/v0.1.0/binary-tools-0.1.0.zip",
+      "sha256": "6a9fdfa6ca87617151a49f9efde4edaca62d547756ed98459b1b355a7d05ac9d",
+      "target": "binary"
+    },
+    {
+      "id": "de.add-ideas.git-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/git-tools/releases/download/v0.1.0/git-tools-0.1.0.zip",
+      "sha256": "b71026de7feac68a4b2b66c40dd4b9c79201549a07cb204640e6923cf2a93678",
+      "target": "git"
+    },
+    {
+      "id": "de.add-ideas.api-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/api-tools/releases/download/v0.1.0/api-tools-0.1.0.zip",
+      "sha256": "fa544b99b1bf3e92beb95f77fadfaceb55fbadaf35dc3290603b110e6fb965e5",
+      "target": "api"
+    },
+    {
+      "id": "de.add-ideas.mail-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/mail-tools/releases/download/v0.1.0/mail-tools-0.1.0.zip",
+      "sha256": "81cf378ef7c63969fc2f13a872ff6b97313f13124623f457461b69111a1f3d12",
+      "target": "mail"
+    },
+    {
+      "id": "de.add-ideas.calendar-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/calendar-tools/releases/download/v0.1.0/calendar-tools-0.1.0.zip",
+      "sha256": "f37871322b60d3ef522350634360b8ec5304ecb63ebd342bec2145a29156d8cc",
+      "target": "calendar"
+    },
+    {
+      "id": "de.add-ideas.contact-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/contact-tools/releases/download/v0.1.0/contact-tools-0.1.0.zip",
+      "sha256": "7afa6daedabd9553c01c03b735cfc95265cfc862094d82e3e65a840a4c0ed1d2",
+      "target": "contact"
+    },
+    {
+      "id": "de.add-ideas.diagram-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/diagram-tools/releases/download/v0.1.0/diagram-tools-0.1.0.zip",
+      "sha256": "c19313d3a5ef1461bcbe719591cc0f5b27069bd2294f11a4b14c075cfd703929",
+      "target": "diagram"
+    },
+    {
+      "id": "de.add-ideas.token-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/token-tools/releases/download/v0.1.0/token-tools-0.1.0.zip",
+      "sha256": "c3800519f023b40868849a83fbe2631fd78be1b47884f85aee3de98fc72f884f",
+      "target": "token"
+    },
+    {
+      "id": "de.add-ideas.device-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/device-tools/releases/download/v0.1.0/device-tools-0.1.0.zip",
+      "sha256": "6d5c587ee991efb291633f12e5e626a1580d18afcee1d1f296451f6fc2c60feb",
+      "target": "device"
     }
   ]
 }

release/toolbox.lock.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./toolbox-release-lock.schema.json",
   "schemaVersion": 1,
-  "releaseVersion": "0.4.3",
+  "releaseVersion": "0.19.0",
-  "portalVersion": "0.2.3",
+  "portalVersion": "0.2.22",
   "catalogue": {
     "id": "de.add-ideas.toolbox",
     "name": "add·ideas Toolbox",
@@ -15,24 +15,353 @@
   "apps": [
     {
       "id": "de.add-ideas.pdf-tools",
-      "version": "0.4.3",
+      "version": "0.4.4",
-      "artifact": "https://git.add-ideas.de/zemion/pdf-tools/releases/download/v0.4.3/pdf-tools-0.4.3.zip",
+      "artifact": "https://git.add-ideas.de/lotobo/pdf-tools/releases/download/v0.4.4/pdf-tools-0.4.4.zip",
-      "sha256": "f2dfd3bade49a4b8be9c0c54c6c2bf1bbb153fc0505a38af14de5ab52d5183cf",
+      "sha256": "fa93c4c004be74d6a1f68f62a0f64f44c99218f387441ca3630a7f5af3c09d7d",
       "target": "pdf"
     },
     {
       "id": "de.add-ideas.xslt-tools",
-      "version": "0.4.2",
+      "version": "0.4.3",
-      "artifact": "https://git.add-ideas.de/zemion/xslt-tools/releases/download/v0.4.2/xslt-tools-0.4.2.zip",
+      "artifact": "https://git.add-ideas.de/lotobo/xslt-tools/releases/download/v0.4.3/xslt-tools-0.4.3.zip",
-      "sha256": "daaa821c10c6c6285f97128ba3d923e48efa24449f1fb0a21bf478abaf27499f",
+      "sha256": "e44012af214d24e3d97d10a6017fa3d9dbf063de36673ab04dd15a0a8643afcc",
       "target": "xslt"
     },
     {
       "id": "de.add-ideas.onenote-tools",
-      "version": "0.3.3",
+      "version": "0.3.4",
-      "artifact": "https://git.add-ideas.de/zemion/onenote-tools/releases/download/v0.3.3/onenote-tools-0.3.3.zip",
+      "artifact": "https://git.add-ideas.de/lotobo/onenote-tools/releases/download/v0.3.4/onenote-tools-0.3.4.zip",
-      "sha256": "37c0ef7cdc7f435d0d4f5a341523f4e522118d5b258c374b5a7ef7b8e6c27cec",
+      "sha256": "c0ed791d1ae64fdf6a90bceebf97a7a3252989f2434204d009f87f5a2d1cc341",
       "target": "onenote"
+    },
+    {
+      "id": "de.add-ideas.av-tools",
+      "version": "0.3.0",
+      "artifact": "https://git.add-ideas.de/lotobo/av-tools/releases/download/v0.3.0/av-tools-0.3.0.zip",
+      "sha256": "3476c5d43ae43ce66b5aeebe8c11334f7cd4d153586348b72f10bfbdbada9be7",
+      "target": "av"
+    },
+    {
+      "id": "de.add-ideas.regex-tools",
+      "version": "0.4.2",
+      "artifact": "https://git.add-ideas.de/lotobo/regex-tools/releases/download/v0.4.2/regex-tools-0.4.2.zip",
+      "sha256": "a3e7342d1f0746aa9c88e6568e7fbc04ab429c94604ba5fb1094ffdb096a54fe",
+      "target": "regex"
+    },
+    {
+      "id": "de.add-ideas.svg-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/svg-tools/releases/download/v0.1.0/svg-tools-0.1.0.zip",
+      "sha256": "364f14c88c4934d9c847bf76de70b89dcf564a405afd58c6703363a95fbfb6ae",
+      "target": "svg"
+    },
+    {
+      "id": "de.add-ideas.auth-tools",
+      "version": "0.3.1",
+      "artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.3.1/auth-tools-0.3.1.zip",
+      "sha256": "60e90492fb50d2ce23298b3a3af84b1e3be02bbf5dea01d478f889d65eb66f3a",
+      "target": "auth"
+    },
+    {
+      "id": "de.add-ideas.sudoku-tools",
+      "version": "0.2.1",
+      "artifact": "https://git.add-ideas.de/lotobo/sudoku-tools/releases/download/v0.2.1/sudoku-tools-0.2.1.zip",
+      "sha256": "3987813a3bcd24056b9ca9607ba5d74a094d54c15b0e8a7966df7373e87df67a",
+      "target": "sudoku"
+    },
+    {
+      "id": "de.add-ideas.colour-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/colour-tools/releases/download/v0.1.0/colour-tools-0.1.0.zip",
+      "sha256": "c933f506362709a031a5cd830657604510b8e4ccb1800be77d40d0eee256490b",
+      "target": "colour"
+    },
+    {
+      "id": "de.add-ideas.office-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/office-tools/releases/download/v0.1.0/office-tools-0.1.0.zip",
+      "sha256": "3f950a413c74bae3b8f190954272fd91c9b141aab4fa50c936d5ad3741539aaf",
+      "target": "office"
+    },
+    {
+      "id": "de.add-ideas.image-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/image-tools/releases/download/v0.1.0/image-tools-0.1.0.zip",
+      "sha256": "8aa67d0c3cfd1060c261e9be108fb443384aaec95f82d3c1b96b63b2d07963e1",
+      "target": "image"
+    },
+    {
+      "id": "de.add-ideas.file-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/file-tools/releases/download/v0.1.0/file-tools-0.1.0.zip",
+      "sha256": "9225ff60c639d563bb514ac390b5b2cbad4b8030a070e6398e7c200763c5f89e",
+      "target": "file"
+    },
+    {
+      "id": "de.add-ideas.epub-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/epub-tools/releases/download/v0.1.0/epub-tools-0.1.0.zip",
+      "sha256": "834512494bbfba9918a9d8131efd512a09619a150823591e2d13ea385ced00e9",
+      "target": "epub"
+    },
+    {
+      "id": "de.add-ideas.archive-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/archive-tools/releases/download/v0.1.0/archive-tools-0.1.0.zip",
+      "sha256": "88a8efb39129bb813c97fb4d80257ee339bbfcec2a73b080a0a89dc76cdd2958",
+      "target": "archive"
+    },
+    {
+      "id": "de.add-ideas.privacy-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/privacy-tools/releases/download/v0.1.0/privacy-tools-0.1.0.zip",
+      "sha256": "0d6c071837b8ce705e456d44888378f3a7f9427a352f0bd4b60512f6c41465d4",
+      "target": "privacy"
+    },
+    {
+      "id": "de.add-ideas.crypto-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/crypto-tools/releases/download/v0.1.0/crypto-tools-0.1.0.zip",
+      "sha256": "bfced32f44918214ffd31c5d4730aee7bffd75e7952e9a6d16b6eb7eb68fed35",
+      "target": "crypto"
+    },
+    {
+      "id": "de.add-ideas.barcode-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/barcode-tools/releases/download/v0.1.0/barcode-tools-0.1.0.zip",
+      "sha256": "22cede58d279f15419b342862bf6545cace831d1e02c0634fbd01aeab3bd3e63",
+      "target": "barcode"
+    },
+    {
+      "id": "de.add-ideas.network-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/network-tools/releases/download/v0.1.0/network-tools-0.1.0.zip",
+      "sha256": "7e493a0aed643c712c38057bcd67c360bc6712d5d31ea82c222bf780464ff4a1",
+      "target": "network"
+    },
+    {
+      "id": "de.add-ideas.geo-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/geo-tools/releases/download/v0.1.0/geo-tools-0.1.0.zip",
+      "sha256": "88a46a56f3d3b5b61dc9bbb8795764b59aae1635da95120a0e499e33ef652e8f",
+      "target": "geo"
+    },
+    {
+      "id": "de.add-ideas.helper-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/helper-tools/releases/download/v0.1.0/helper-tools-0.1.0.zip",
+      "sha256": "bcdbd2ffc721ed1a2e9432eea1f90d7b4526d86934c3b5de6f522fd8bd58fd77",
+      "target": "helper"
+    },
+    {
+      "id": "de.add-ideas.rand-tools",
+      "version": "0.1.1",
+      "artifact": "https://git.add-ideas.de/lotobo/rand-tools/releases/download/v0.1.1/rand-tools-0.1.1.zip",
+      "sha256": "02dffcbbf1c3ff65236a83466aa750c3848777e4a69ac389fe24da02abfc0e77",
+      "target": "rand"
+    },
+    {
+      "id": "de.add-ideas.data-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/data-tools/releases/download/v0.1.0/data-tools-0.1.0.zip",
+      "sha256": "83ab02c9827d122c83b05c230e62c0ee87b330604acfff4990c58310f7956a1f",
+      "target": "data"
+    },
+    {
+      "id": "de.add-ideas.diff-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/diff-tools/releases/download/v0.1.0/diff-tools-0.1.0.zip",
+      "sha256": "023311343152aac11bfc00d58029b24ef0efe5ee4113aeb2a9d000ebe2460d72",
+      "target": "diff"
+    },
+    {
+      "id": "de.add-ideas.time-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/time-tools/releases/download/v0.1.0/time-tools-0.1.0.zip",
+      "sha256": "9a5545a3e684a207d7b2d6663d42a117cb5bb3303f35dc889a2651b67bfcf08f",
+      "target": "time"
+    },
+    {
+      "id": "de.add-ideas.text-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/text-tools/releases/download/v0.1.0/text-tools-0.1.0.zip",
+      "sha256": "242eb15005a18e0f13ba03544c633834416707e2629585868bfcd6f0c1cc5aec",
+      "target": "text"
+    },
+    {
+      "id": "de.add-ideas.unicode-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/unicode-tools/releases/download/v0.1.0/unicode-tools-0.1.0.zip",
+      "sha256": "1cf557d3ace9a41c7fa72cb5c1b149e669203a682174939f2e3aa376e1c6f22a",
+      "target": "unicode"
+    },
+    {
+      "id": "de.add-ideas.flow-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/flow-tools/releases/download/v0.1.0/flow-tools-0.1.0.zip",
+      "sha256": "abc8c50c95509484afa27606e6dc88087409fd0a8609fea6e99915cac703d2d5",
+      "target": "flow"
+    },
+    {
+      "id": "de.add-ideas.subtitle-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/subtitle-tools/releases/download/v0.1.0/subtitle-tools-0.1.0.zip",
+      "sha256": "be251beb06fe62da6b2dde79799e48d28148dc81cba84998ba51ced328509fc6",
+      "target": "subtitle"
+    },
+    {
+      "id": "de.add-ideas.midi-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/midi-tools/releases/download/v0.1.0/midi-tools-0.1.0.zip",
+      "sha256": "5f55fe448720d989aaf93cd25c18644b99df97bd3a32b297e1dc6f3d04777536",
+      "target": "midi"
+    },
+    {
+      "id": "de.add-ideas.3d-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/3d-tools/releases/download/v0.1.0/3d-tools-0.1.0.zip",
+      "sha256": "63d7c028e5fb8e0644855720d2088a23623b73f9e7f656485c1340b6e51dca1a",
+      "target": "3d"
+    },
+    {
+      "id": "de.add-ideas.query-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/query-tools/releases/download/v0.1.0/query-tools-0.1.0.zip",
+      "sha256": "c28fa57a266f32339f5f83c1082920ce3d601167c86a40516fe2e33d867545d6",
+      "target": "query"
+    },
+    {
+      "id": "de.add-ideas.scan-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/scan-tools/releases/download/v0.1.0/scan-tools-0.1.0.zip",
+      "sha256": "f741257053355ed0e2c46261d650c1bfdd70de9cc4355af526fb65bedf6a6096",
+      "target": "scan"
+    },
+    {
+      "id": "de.add-ideas.package-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/package-tools/releases/download/v0.1.0/package-tools-0.1.0.zip",
+      "sha256": "bbbba42319f77fc85ca38a87bef2317f8500326c9c781462561abafa37de2c97",
+      "target": "package"
+    },
+    {
+      "id": "de.add-ideas.label-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/label-tools/releases/download/v0.1.0/label-tools-0.1.0.zip",
+      "sha256": "0e658518da0eb9df204cc19bf07ef84e5e84c38d62604403a23e76938ecc8dd1",
+      "target": "label"
+    },
+    {
+      "id": "de.add-ideas.font-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/font-tools/releases/download/v0.1.0/font-tools-0.1.0.zip",
+      "sha256": "ee0b51e2ec63f38ae5fd2e9be8968f58f27e8cc243c429a3fc057e8cbfc3b582",
+      "target": "font"
+    },
+    {
+      "id": "de.add-ideas.fixture-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/fixture-tools/releases/download/v0.1.0/fixture-tools-0.1.0.zip",
+      "sha256": "9d41d63d33430bd8390ca9ddacdc14062205640a7ff8ed259192af943b430541",
+      "target": "fixture"
+    },
+    {
+      "id": "de.add-ideas.minimize-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/minimize-tools/releases/download/v0.1.0/minimize-tools-0.1.0.zip",
+      "sha256": "2e67cfdd8d0d4569729279da834b8c5bfa8ddd659068cfd7013a96f0031ecc05",
+      "target": "minimize"
+    },
+    {
+      "id": "de.add-ideas.format-lab",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/format-lab/releases/download/v0.1.0/format-lab-0.1.0.zip",
+      "sha256": "3fc0037bcdc4c7e58cc7de4a09a69c775ecc2605e820c3cdb5106cbc87de008c",
+      "target": "format-lab"
+    },
+    {
+      "id": "de.add-ideas.repro-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/repro-tools/releases/download/v0.1.0/repro-tools-0.1.0.zip",
+      "sha256": "c5c0dc7874bdeb241894d2475f2fde313e93231f3513205c5122336548c9c758",
+      "target": "repro"
+    },
+    {
+      "id": "de.add-ideas.schema-tools",
+      "version": "0.1.2",
+      "artifact": "https://git.add-ideas.de/lotobo/schema-tools/releases/download/v0.1.2/schema-tools-0.1.2.zip",
+      "sha256": "038f369ca19601a1a497d5435f3cee596946f93216cd796864d3e04a8d7bf3c7",
+      "target": "schema"
+    },
+    {
+      "id": "de.add-ideas.log-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/log-tools/releases/download/v0.1.0/log-tools-0.1.0.zip",
+      "sha256": "f16829d6e0a00981c92fa8704897da9aaeb4fcfc9af4ad8e45165e9dd35c2fdd",
+      "target": "log"
+    },
+    {
+      "id": "de.add-ideas.binary-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/binary-tools/releases/download/v0.1.0/binary-tools-0.1.0.zip",
+      "sha256": "6a9fdfa6ca87617151a49f9efde4edaca62d547756ed98459b1b355a7d05ac9d",
+      "target": "binary"
+    },
+    {
+      "id": "de.add-ideas.git-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/git-tools/releases/download/v0.1.0/git-tools-0.1.0.zip",
+      "sha256": "b71026de7feac68a4b2b66c40dd4b9c79201549a07cb204640e6923cf2a93678",
+      "target": "git"
+    },
+    {
+      "id": "de.add-ideas.api-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/api-tools/releases/download/v0.1.0/api-tools-0.1.0.zip",
+      "sha256": "fa544b99b1bf3e92beb95f77fadfaceb55fbadaf35dc3290603b110e6fb965e5",
+      "target": "api"
+    },
+    {
+      "id": "de.add-ideas.mail-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/mail-tools/releases/download/v0.1.0/mail-tools-0.1.0.zip",
+      "sha256": "81cf378ef7c63969fc2f13a872ff6b97313f13124623f457461b69111a1f3d12",
+      "target": "mail"
+    },
+    {
+      "id": "de.add-ideas.calendar-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/calendar-tools/releases/download/v0.1.0/calendar-tools-0.1.0.zip",
+      "sha256": "f37871322b60d3ef522350634360b8ec5304ecb63ebd342bec2145a29156d8cc",
+      "target": "calendar"
+    },
+    {
+      "id": "de.add-ideas.contact-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/contact-tools/releases/download/v0.1.0/contact-tools-0.1.0.zip",
+      "sha256": "7afa6daedabd9553c01c03b735cfc95265cfc862094d82e3e65a840a4c0ed1d2",
+      "target": "contact"
+    },
+    {
+      "id": "de.add-ideas.diagram-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/diagram-tools/releases/download/v0.1.0/diagram-tools-0.1.0.zip",
+      "sha256": "c19313d3a5ef1461bcbe719591cc0f5b27069bd2294f11a4b14c075cfd703929",
+      "target": "diagram"
+    },
+    {
+      "id": "de.add-ideas.token-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/token-tools/releases/download/v0.1.0/token-tools-0.1.0.zip",
+      "sha256": "c3800519f023b40868849a83fbe2631fd78be1b47884f85aee3de98fc72f884f",
+      "target": "token"
+    },
+    {
+      "id": "de.add-ideas.device-tools",
+      "version": "0.1.0",
+      "artifact": "https://git.add-ideas.de/lotobo/device-tools/releases/download/v0.1.0/device-tools-0.1.0.zip",
+      "sha256": "6d5c587ee991efb291633f12e5e626a1580d18afcee1d1f296451f6fc2c60feb",
+      "target": "device"
     }
   ]
 }

scripts/archive.mjs

@@ -2,7 +2,7 @@ import { createReadStream, createWriteStream } from 'node:fs';
 import { mkdir, readdir, stat } from 'node:fs/promises';
 import path from 'node:path';
 import { pipeline } from 'node:stream/promises';
-import archiver from 'archiver';
+import { ZipArchive } from 'archiver';
 import {
   canonicalExistingPath,
   canonicalPathsOverlap,
@@ -56,7 +56,7 @@ export async function createStaticArchive(inputDirectory, outputFile) {
     throw new Error(`Archive input is not a directory: ${source}`);
   await mkdir(path.dirname(output), { recursive: true });
 
-  const archive = archiver('zip', { zlib: { level: 9 } });
+  const archive = new ZipArchive({ zlib: { level: 9 } });
   const destination = createWriteStream(output, { flags: 'wx' });
   archive.on('warning', (error) => {
     if (error.code !== 'ENOENT') destination.destroy(error);

scripts/assembler.test.ts

@@ -14,7 +14,7 @@ import os from 'node:os';
 import path from 'node:path';
 import { pipeline } from 'node:stream/promises';
 import { pathToFileURL } from 'node:url';
-import archiver from 'archiver';
+import { ZipArchive } from 'archiver';
 import { afterEach, describe, expect, it, vi } from 'vitest';
 import { assembleRelease } from './assemble.mjs';
 import { createStaticArchive } from './archive.mjs';
@@ -46,7 +46,7 @@ async function zipEntries(
   output: string,
   entries: Array<{ name: string; content: string }>
 ) {
-  const archive = archiver('zip', { zlib: { level: 9 } });
+  const archive = new ZipArchive({ zlib: { level: 9 } });
   const writing = pipeline(archive, createWriteStream(output, { flags: 'wx' }));
   for (const entry of entries)
     archive.append(entry.content, { name: entry.name });
@@ -83,7 +83,7 @@ function makeLock(artifact: string, sha256: string) {
   return {
     schemaVersion: 1,
     releaseVersion: '0.1.0',
-    portalVersion: '0.2.3',
+    portalVersion: '0.2.22',
     catalogue: {
       id: 'de.add-ideas.toolbox',
       name: 'Test Toolbox',
@@ -238,7 +238,7 @@ describe('release assembly integrity', () => {
   it('blocks symbolic links before extraction', async () => {
     const directory = await temporaryDirectory();
     const artifact = path.join(directory, 'symlink.zip');
-    const archive = archiver('zip', { zlib: { level: 9 } });
+    const archive = new ZipArchive({ zlib: { level: 9 } });
     const writing = pipeline(
       archive,
       createWriteStream(artifact, { flags: 'wx' })
@@ -290,7 +290,7 @@ describe('release assembly integrity', () => {
     expect(await sha256File(utcArchive)).toBe(
       await sha256File(honoluluArchive)
     );
-  });
+  }, 30_000);
 
   it('rejects a valid archive whose manifest identity is not the lock identity', async () => {
     const directory = await temporaryDirectory();

scripts/deployment.test.ts

@@ -4,17 +4,98 @@ import { describe, expect, it } from 'vitest';
 
 const projectRoot = process.cwd();
 const compose = readFileSync(path.join(projectRoot, 'compose.yaml'), 'utf8');
+const composeExample = readFileSync(
+  path.join(projectRoot, 'compose.example.yaml'),
+  'utf8'
+);
 const containerfile = readFileSync(
   path.join(projectRoot, 'Containerfile.release'),
   'utf8'
 );
+const environmentExample = readFileSync(
+  path.join(projectRoot, '.env.example'),
+  'utf8'
+);
 const nginxConfig = readFileSync(
   path.join(projectRoot, 'deploy', 'nginx.conf'),
   'utf8'
 );
 const releaseLock = JSON.parse(
   readFileSync(path.join(projectRoot, 'release', 'toolbox.lock.json'), 'utf8')
-) as { releaseVersion: string };
+) as { releaseVersion: string; apps: Array<{ target: string }> };
+const developmentCatalogue = JSON.parse(
+  readFileSync(path.join(projectRoot, 'public', 'toolbox.catalog.json'), 'utf8')
+) as { apps: Array<{ manifest: string; enabled: boolean }> };
+
+const expectedAppTargets = [
+  'pdf',
+  'xslt',
+  'onenote',
+  'av',
+  'regex',
+  'svg',
+  'auth',
+  'sudoku',
+  'colour',
+  'office',
+  'image',
+  'file',
+  'epub',
+  'archive',
+  'privacy',
+  'crypto',
+  'barcode',
+  'network',
+  'geo',
+  'helper',
+  'rand',
+  'data',
+  'diff',
+  'time',
+  'text',
+  'unicode',
+  'flow',
+  'subtitle',
+  'midi',
+  '3d',
+  'query',
+  'scan',
+  'package',
+  'label',
+  'font',
+  'fixture',
+  'minimize',
+  'format-lab',
+  'repro',
+  'schema',
+  'log',
+  'binary',
+  'git',
+  'api',
+  'mail',
+  'calendar',
+  'contact',
+  'diagram',
+  'token',
+  'device',
+] as const;
+
+const immutableCacheControl = 'public, max-age=31536000, immutable';
+const immutableUriPatterns = Array.from(
+  nginxConfig.matchAll(
+    new RegExp(
+      `^\\s*"~([^"]+)"\\s+"${immutableCacheControl.replaceAll(
+        ', ',
+        ',\\s+'
+      )}";$`,
+      'gmu'
+    )
+  ),
+  (match) => new RegExp(match[1], 'u')
+);
+
+const isImmutable = (uri: string): boolean =>
+  immutableUriPatterns.some((pattern) => pattern.test(uri));
 
 describe('production deployment', () => {
   it('keeps the release version and checksum pins synchronized', () => {
@@ -30,10 +111,25 @@ describe('production deployment', () => {
     const composeChecksum = compose.match(
       /\$\{TOOLBOX_RELEASE_SHA256:-([a-f0-9]{64})\}/u
     )?.[1];
+    const environmentVersion = environmentExample.match(
+      /^TOOLBOX_RELEASE_VERSION=(\S+)$/mu
+    )?.[1];
+    const environmentChecksum = environmentExample.match(
+      /^TOOLBOX_RELEASE_SHA256=([a-f0-9]{64})$/mu
+    )?.[1];
+    const localImageVersion = composeExample.match(
+      /^\s+image: git\.add-ideas\.de\/lotobo\/toolbox:(\S+)$/mu
+    )?.[1];
 
     expect(containerVersion).toBe(releaseLock.releaseVersion);
     expect(composeVersion).toBe(containerVersion);
+    expect(containerChecksum).toMatch(/^[a-f0-9]{64}$/u);
+    expect(composeChecksum).toMatch(/^[a-f0-9]{64}$/u);
+    expect(environmentChecksum).toMatch(/^[a-f0-9]{64}$/u);
     expect(composeChecksum).toBe(containerChecksum);
+    expect(environmentVersion).toBe(containerVersion);
+    expect(environmentChecksum).toBe(containerChecksum);
+    expect(localImageVersion).toBe(containerVersion);
   });
 
   it('verifies the release before extraction and retains a rootless final image', () => {
@@ -45,10 +141,27 @@ describe('production deployment', () => {
     expect(containerfile).toContain(
       'COPY --from=release --chown=101:101 /tmp/toolbox/'
     );
+    for (const app of expectedAppTargets) {
+      expect(containerfile).toContain(
+        `test -f /tmp/toolbox/apps/${app}/toolbox-app.json`
+      );
+    }
     expect(containerfile).toMatch(/\nUSER 101:101\nEXPOSE 8080\n/u);
   });
 
-  it('uses only the requested external Traefik network and HTTPS router', () => {
+  it('keeps the development catalogue aligned with all release targets', () => {
+    expect(releaseLock.apps.map(({ target }) => target)).toEqual(
+      expectedAppTargets
+    );
+    expect(developmentCatalogue.apps).toEqual(
+      expectedAppTargets.map((target) => ({
+        manifest: `./apps/${target}/toolbox-app.json`,
+        enabled: true,
+      }))
+    );
+  });
+
+  it('uses only the requested external Traefik network and redirects HTTP to HTTPS', () => {
     expect(compose).toContain('dockerfile: Containerfile.release');
     expect(compose).toContain('traefik.enable: "true"');
     expect(compose).toContain(
@@ -63,14 +176,201 @@ describe('production deployment', () => {
     expect(compose).toContain(
       'traefik.http.routers.addideas-toolbox.tls.certresolver: "${TRAEFIK_CERT_RESOLVER:-netcup}"'
     );
+    expect(compose).toContain(
+      'traefik.http.routers.addideas-toolbox-http.rule: "Host(`${TOOLBOX_HOST:-toolbox.add-ideas.de}`)"'
+    );
+    expect(compose).toContain(
+      'traefik.http.routers.addideas-toolbox-http.entrypoints: web'
+    );
+    expect(compose).toContain(
+      'traefik.http.routers.addideas-toolbox-http.priority: 900'
+    );
+    expect(compose).toContain(
+      'traefik.http.routers.addideas-toolbox-http.middlewares: addideas-toolbox-https-redirect'
+    );
+    expect(compose).toContain(
+      'traefik.http.routers.addideas-toolbox-http.service: addideas-toolbox'
+    );
+    expect(compose).toContain(
+      'traefik.http.middlewares.addideas-toolbox-https-redirect.redirectscheme.scheme: https'
+    );
+    expect(compose).toContain(
+      'traefik.http.middlewares.addideas-toolbox-https-redirect.redirectscheme.permanent: "true"'
+    );
     expect(compose).toContain('external: true');
     expect(compose).not.toMatch(/^\s+ports:/mu);
   });
 
+  it('isolates live WebAuthn behind a dedicated hostname and path prefix', () => {
+    expect(environmentExample).toContain(
+      'AUTH_TOOLS_HOST=auth.toolbox.add-ideas.de'
+    );
+    expect(compose).toContain(
+      'traefik.http.routers.addideas-auth.rule: "Host(`${AUTH_TOOLS_HOST:-auth.toolbox.add-ideas.de}`)"'
+    );
+    expect(compose).toContain(
+      'traefik.http.routers.addideas-auth.entrypoints: websecure'
+    );
+    expect(compose).toContain(
+      'traefik.http.routers.addideas-auth.tls.certresolver: "${TRAEFIK_CERT_RESOLVER:-netcup}"'
+    );
+    expect(compose).toContain(
+      'traefik.http.routers.addideas-auth.middlewares: addideas-auth-prefix'
+    );
+    expect(compose).toContain(
+      'traefik.http.middlewares.addideas-auth-prefix.addprefix.prefix: /apps/auth'
+    );
+    expect(compose).toContain(
+      'traefik.http.routers.addideas-auth-http.middlewares: addideas-toolbox-https-redirect'
+    );
+    expect(compose).not.toContain('addideas-auth-stripprefix');
+  });
+
+  it('scopes camera and device probes while denying sensitive features by default', () => {
+    expect(nginxConfig).toContain(
+      'default "camera=(), microphone=(), display-capture=(), geolocation=(), payment=(), usb=()";'
+    );
+    expect(nginxConfig).toContain(
+      '"~^auth\\.toolbox\\.add-ideas\\.de:" "camera=(self), microphone=(), display-capture=(), geolocation=(), payment=(), usb=()";'
+    );
+    expect(nginxConfig).toContain(
+      '"~^[^:]+:/apps/barcode(?:/|$)" "camera=(self), microphone=(), display-capture=(), geolocation=(), payment=(), usb=()";'
+    );
+    expect(nginxConfig).toContain(
+      '"~^[^:]+:/apps/scan(?:/|$)" "camera=(self), microphone=(), display-capture=(), geolocation=(), payment=(), usb=()";'
+    );
+    expect(nginxConfig).toContain(
+      '"~^[^:]+:/apps/device(?:/|$)" "camera=(self), microphone=(self), display-capture=(self), geolocation=(), payment=(), usb=()";'
+    );
+    expect(nginxConfig).toContain(
+      'add_header Permissions-Policy $toolbox_permissions_policy always;'
+    );
+    expect(
+      nginxConfig.match(/^\s*add_header Permissions-Policy /gmu)
+    ).toHaveLength(1);
+  });
+
+  it('keeps application network connections same-origin', () => {
+    expect(nginxConfig).toMatch(
+      /^\s*add_header Content-Security-Policy "[^"]*connect-src 'self';[^"]*" always;$/mu
+    );
+    expect(nginxConfig).not.toContain('$toolbox_connect_sources');
+    expect(nginxConfig).not.toMatch(/https?:\/\//u);
+  });
+
   it('quotes nginx regular expressions that contain brace quantifiers', () => {
     expect(nginxConfig).toContain(
       '"~^/(?:.*/)?assets/.*-[A-Za-z0-9_-]{8,}\\.[^/]+$"'
     );
     expect(nginxConfig).not.toMatch(/^\s*~[^\n]*\{\d/mu);
   });
+
+  it('caches only hashed assets and the versioned FFmpeg runtime immutably', () => {
+    expect(immutableUriPatterns).toHaveLength(2);
+
+    for (const uri of [
+      '/assets/index-Bp9nK_3a.js',
+      '/apps/av/vendor/ffmpeg/0.12.10/version.json',
+      '/apps/av/vendor/ffmpeg/0.12.10/st/ffmpeg-core.js',
+      '/apps/av/vendor/ffmpeg/0.12.10/st/ffmpeg-core.wasm',
+      '/apps/av/vendor/ffmpeg/0.12.10/mt/ffmpeg-core.js',
+      '/apps/av/vendor/ffmpeg/0.12.10/mt/ffmpeg-core.wasm',
+      '/apps/av/vendor/ffmpeg/0.12.10/mt/ffmpeg-core.worker.js',
+      '/apps/av/vendor/ffmpeg/0.12.10-reviewed-stack5m.1/version.json',
+      '/apps/av/vendor/ffmpeg/0.12.10-reviewed-stack5m.1/st/ffmpeg-core.js',
+      '/apps/av/vendor/ffmpeg/0.12.10-reviewed-stack5m.1/st/ffmpeg-core.wasm',
+      '/apps/av/vendor/ffmpeg/0.12.10-reviewed-stack5m.1/mt/ffmpeg-core.js',
+      '/apps/av/vendor/ffmpeg/0.12.10-reviewed-stack5m.1/mt/ffmpeg-core.wasm',
+      '/apps/av/vendor/ffmpeg/0.12.10-reviewed-stack5m.1/mt/ffmpeg-core.worker.js',
+    ]) {
+      expect(isImmutable(uri), uri).toBe(true);
+    }
+
+    for (const uri of [
+      '/',
+      '/index.html',
+      '/SOURCE.md',
+      '/LICENSE',
+      '/toolbox.catalog.json',
+      '/toolbox.release.json',
+      '/apps/av/toolbox-app.json',
+      '/apps/av/THIRD_PARTY_NOTICES.md',
+      '/apps/av/vendor/ffmpeg/version.json',
+      '/apps/av/vendor/ffmpeg/latest/st/ffmpeg-core.wasm',
+      '/apps/av/vendor/ffmpeg/0.12/st/ffmpeg-core.wasm',
+      '/apps/av/vendor/ffmpeg/01.2.3/st/ffmpeg-core.wasm',
+      '/apps/av/vendor/ffmpeg/0.12.10/st/other.wasm',
+      '/apps/av/vendor/ffmpeg/0.12.10/mt/ffmpeg-core.worker.wasm',
+      '/apps/av/vendor/ffmpeg/0.12.10/ffmpeg-core.wasm',
+      '/apps/av/vendor/ffmpeg/0.12.10-/st/ffmpeg-core.wasm',
+      '/apps/av/vendor/ffmpeg/0.12.10-reviewed_/st/ffmpeg-core.wasm',
+      '/apps/av/vendor/ffmpeg/0.12.10-latest/st/ffmpeg-core.wasm',
+      '/apps/av/vendor/ffmpeg/0.12.10-SNAPSHOT/st/ffmpeg-core.wasm',
+      '/apps/av/vendor/ffmpeg/0.12.10-reviewed-stack5m.2/st/ffmpeg-core.wasm',
+    ]) {
+      expect(isImmutable(uri), uri).toBe(false);
+    }
+  });
+
+  it('serves WebAssembly through an explicit MIME-mapped location', () => {
+    expect(nginxConfig).toMatch(
+      /location ~\* \\\.wasm\$\s*\{\s*types\s*\{\s*application\/wasm wasm;\s*\}\s*try_files \$uri =404;\s*\}/mu
+    );
+    expect(nginxConfig).not.toMatch(
+      /location ~\* [^\n]*\(\?:[^\n|)]*\bwasm\b[^\n)]*\)/u
+    );
+  });
+
+  it('serves ES modules as JavaScript before the broad static location', () => {
+    const moduleLocation =
+      /location ~\* \\\.mjs\$\s*\{\s*types\s*\{\s*application\/javascript mjs;\s*\}\s*try_files \$uri =404;\s*\}/mu;
+    const moduleLocationIndex = nginxConfig.search(moduleLocation);
+    const staticLocationIndex = nginxConfig.search(
+      /location ~\* \\\.\(\?:css\|js\|mjs\|/u
+    );
+
+    expect(moduleLocationIndex).toBeGreaterThanOrEqual(0);
+    expect(staticLocationIndex).toBeGreaterThan(moduleLocationIndex);
+  });
+
+  it('serves bundled Scan OCR language data as gzip without widening the static route', () => {
+    const languageLocation =
+      /location ~\* \^\/apps\/scan\/ocr\/lang\/\[a-z0-9_-\]\+\\\.traineddata\\\.gz\$\s*\{\s*types\s*\{\s*application\/gzip gz;\s*\}\s*try_files \$uri =404;\s*\}/mu;
+    expect(nginxConfig).toMatch(languageLocation);
+    expect(nginxConfig).not.toMatch(
+      /location ~\* \\.\(\?:[^\n)]*\bgz\b[^\n)]*\)/u
+    );
+  });
+
+  it('allows same-origin WebAssembly workers and local blob media previews', () => {
+    expect(nginxConfig).toContain("script-src 'self' 'wasm-unsafe-eval'");
+    expect(nginxConfig).toContain("worker-src 'self' blob:");
+    expect(nginxConfig).toContain("media-src 'self' blob:");
+    expect(nginxConfig).toContain("font-src 'self' data: blob:");
+    expect(nginxConfig).not.toContain("'unsafe-eval'");
+  });
+
+  it('grants only the sandboxed SVG canvas controller cross-origin loading headers', () => {
+    expect(nginxConfig).toMatch(
+      /map \$uri \$toolbox_resource_policy\s*\{\s*default "same-origin";\s*"\/apps\/svg\/canvas-frame-controller\.js" "cross-origin";\s*\}/mu
+    );
+    expect(nginxConfig).toMatch(
+      /map \$uri \$toolbox_access_control_allow_origin\s*\{\s*default "";\s*"\/apps\/svg\/canvas-frame-controller\.js" "\*";\s*\}/mu
+    );
+    expect(nginxConfig).toContain(
+      'add_header Cross-Origin-Resource-Policy $toolbox_resource_policy always;'
+    );
+    expect(nginxConfig).toContain(
+      'add_header Access-Control-Allow-Origin $toolbox_access_control_allow_origin always;'
+    );
+    expect(nginxConfig).not.toMatch(
+      /location[^\n{]*canvas-frame-controller[^\n{]*\{/u
+    );
+    expect(
+      nginxConfig.match(/^\s*add_header X-Content-Type-Options /gmu)
+    ).toHaveLength(1);
+    expect(
+      nginxConfig.match(/^\s*add_header Content-Security-Policy /gmu)
+    ).toHaveLength(1);
+  });
 });

scripts/release-lock.mjs

@@ -131,7 +131,7 @@ export function buildCatalogue(lock) {
   };
   return {
     $schema:
-      'https://git.add-ideas.de/zemion/toolbox-sdk/raw/branch/main/schemas/toolbox-catalog.v1.schema.json',
+      'https://git.add-ideas.de/lotobo/toolbox-sdk/raw/branch/main/schemas/toolbox-catalog.v1.schema.json',
     ...parseToolboxCatalog(catalogue),
   };
 }

src/App.test.tsx

@@ -42,6 +42,18 @@ describe('portal UI', () => {
     expect(
       screen.getByTestId('app-card-de.add-ideas.onenote-tools')
     ).toHaveTextContent('OneNote');
+    expect(
+      screen.getByTestId('app-card-de.add-ideas.svg-tools')
+    ).toHaveTextContent('SVG');
+    expect(
+      screen.getByTestId('app-card-de.add-ideas.auth-tools')
+    ).toHaveTextContent('OTP & Passkeys');
+    expect(
+      screen.getByTestId('app-card-de.add-ideas.colour-tools')
+    ).toHaveTextContent('Colour');
+    expect(
+      screen.getByTestId('app-card-de.add-ideas.office-tools')
+    ).toHaveTextContent('Office');
     expect(
       screen.queryByText(
         'Page-level PDF operations performed locally in the browser.'
@@ -121,6 +133,31 @@ describe('portal UI', () => {
     );
   });
 
+  it('uses the compact Regex presentation for the released tool', async () => {
+    vi.stubGlobal(
+      'fetch',
+      vi.fn(
+        catalogueFetch({
+          '/toolbox.catalog.json': Response.json({
+            ...catalogue,
+            apps: [
+              ...catalogue.apps,
+              { manifest: './apps/regex/toolbox-app.json', enabled: true },
+            ],
+          }),
+        })
+      )
+    );
+    render(<App />);
+
+    await findToolLink();
+    const card = screen.getByTestId('app-card-de.add-ideas.regex-tools');
+    expect(within(card).getByRole('heading', { level: 3 })).toHaveTextContent(
+      'Regex'
+    );
+    expect(within(card).getByText('Explain and test locally.')).toBeVisible();
+  });
+
   it('moves the full disclosure into an accessible modal', async () => {
     vi.stubGlobal('fetch', vi.fn(catalogueFetch()));
     const user = userEvent.setup();
@@ -154,7 +191,7 @@ describe('portal UI', () => {
     });
     expect(sourceLink).toHaveAttribute(
       'href',
-      'https://git.add-ideas.de/zemion/pdf-tools'
+      'https://git.add-ideas.de/lotobo/pdf-tools'
     );
     expect(sourceLink).toHaveAttribute('rel', 'noopener noreferrer');
     expect(
@@ -304,12 +341,12 @@ describe('portal UI', () => {
     expect(
       screen.getByRole('heading', {
         level: 2,
-        name: 'Your document tools, in one calm place.',
+        name: 'Your local tools, in one calm place.',
       })
     ).toBeInTheDocument();
     expect(
       screen.getAllByRole('heading', {
-        name: 'Your document tools, in one calm place.',
+        name: 'Your local tools, in one calm place.',
       })
     ).toHaveLength(1);
 
@@ -382,6 +419,11 @@ describe('portal UI', () => {
             'de.add-ideas.pdf-tools',
             'de.add-ideas.xslt-tools',
             'de.add-ideas.onenote-tools',
+            'de.add-ideas.svg-tools',
+            'de.add-ideas.auth-tools',
+            'de.add-ideas.sudoku-tools',
+            'de.add-ideas.colour-tools',
+            'de.add-ideas.office-tools',
           ],
           hidden: [],
           theme: 'light',
@@ -399,6 +441,11 @@ describe('portal UI', () => {
       screen.getByTestId('app-card-de.add-ideas.pdf-tools'),
       screen.getByTestId('app-card-de.add-ideas.xslt-tools'),
       screen.getByTestId('app-card-de.add-ideas.onenote-tools'),
+      screen.getByTestId('app-card-de.add-ideas.svg-tools'),
+      screen.getByTestId('app-card-de.add-ideas.auth-tools'),
+      screen.getByTestId('app-card-de.add-ideas.sudoku-tools'),
+      screen.getByTestId('app-card-de.add-ideas.colour-tools'),
+      screen.getByTestId('app-card-de.add-ideas.office-tools'),
     ];
     cards.forEach((card, index) => {
       const rect = {
@@ -429,7 +476,16 @@ describe('portal UI', () => {
         within(tools)
           .getAllByRole('heading', { level: 3 })
           .map((heading) => heading.textContent)
-      ).toEqual(['XSLT', 'PDF', 'OneNote']);
+      ).toEqual([
+        'XSLT',
+        'PDF',
+        'OneNote',
+        'SVG',
+        'OTP & Passkeys',
+        'Sudoku',
+        'Colour',
+        'Office',
+      ]);
     });
     expect(
       JSON.parse(localStorage.getItem(PREFERENCES_KEY) ?? '{}').order
@@ -437,6 +493,11 @@ describe('portal UI', () => {
       'de.add-ideas.xslt-tools',
       'de.add-ideas.pdf-tools',
       'de.add-ideas.onenote-tools',
+      'de.add-ideas.svg-tools',
+      'de.add-ideas.auth-tools',
+      'de.add-ideas.sudoku-tools',
+      'de.add-ideas.colour-tools',
+      'de.add-ideas.office-tools',
     ]);
   });
 

src/App.tsx

@@ -28,7 +28,7 @@ import type { LoadedCatalogue, ResolvedApp } from './types';
 import { usePreferences } from './usePreferences';
 
 const CATALOGUE_HREF = './toolbox.catalog.json';
-const PORTAL_SOURCE = 'https://git.add-ideas.de/zemion/toolbox-portal';
+const PORTAL_SOURCE = 'https://git.add-ideas.de/lotobo/toolbox-portal';
 
 type LoadState =
   | { status: 'loading' }
@@ -297,7 +297,7 @@ export default function App() {
                 Privacy details up front · useful by default
               </p>
               <h2 id="page-title">
-                Your document tools,
+                Your local tools,
                 <br /> <span>in one calm place.</span>
               </h2>
               <p className="hero-copy">
@@ -305,67 +305,67 @@ export default function App() {
                 tool. Choose one and keep your work moving.
               </p>
             </div>
-
-            {loaded && (
-              <section className="tool-controls" aria-label="Find a tool">
-                <label className="search-field">
-                  <span className="visually-hidden">Search tools</span>
-                  <span aria-hidden="true">⌕</span>
-                  <input
-                    value={query}
-                    onChange={(event) => setQuery(event.target.value)}
-                    placeholder="Search tools"
-                    type="search"
-                  />
-                </label>
-                <label className="category-field">
-                  <span className="visually-hidden">Filter by category</span>
-                  <select
-                    value={category}
-                    onChange={(event) => setCategory(event.target.value)}
-                  >
-                    <option value="">All categories</option>
-                    {categories.map((item) => (
-                      <option value={item} key={item}>
-                        {item}
-                      </option>
-                    ))}
-                  </select>
-                </label>
-                {activeTag && (
-                  <button
-                    className="active-filter"
-                    type="button"
-                    onClick={() => setActiveTag('')}
-                  >
-                    #{activeTag} <span aria-hidden="true">×</span>
-                    <span className="visually-hidden">Clear tag filter</span>
-                  </button>
-                )}
-                <label
-                  className={`hidden-toggle${
-                    preferences.hidden.length === 0
-                      ? ' hidden-toggle--disabled'
-                      : ''
-                  }`}
-                >
-                  <input
-                    ref={hiddenToggle}
-                    type="checkbox"
-                    checked={showHidden}
-                    disabled={preferences.hidden.length === 0}
-                    onChange={(event) =>
-                      setShownHiddenIds(
-                        event.target.checked ? [...preferences.hidden] : null
-                      )
-                    }
-                  />
-                  Show hidden ({preferences.hidden.length})
-                </label>
-              </section>
-            )}
           </section>
 
+          {loaded && (
+            <section className="tool-controls" aria-label="Find a tool">
+              <label className="search-field">
+                <span className="visually-hidden">Search tools</span>
+                <span aria-hidden="true">⌕</span>
+                <input
+                  value={query}
+                  onChange={(event) => setQuery(event.target.value)}
+                  placeholder="Search tools"
+                  type="search"
+                />
+              </label>
+              <label className="category-field">
+                <span className="visually-hidden">Filter by category</span>
+                <select
+                  value={category}
+                  onChange={(event) => setCategory(event.target.value)}
+                >
+                  <option value="">All categories</option>
+                  {categories.map((item) => (
+                    <option value={item} key={item}>
+                      {item}
+                    </option>
+                  ))}
+                </select>
+              </label>
+              {activeTag && (
+                <button
+                  className="active-filter"
+                  type="button"
+                  onClick={() => setActiveTag('')}
+                >
+                  #{activeTag} <span aria-hidden="true">×</span>
+                  <span className="visually-hidden">Clear tag filter</span>
+                </button>
+              )}
+              <label
+                className={`hidden-toggle${
+                  preferences.hidden.length === 0
+                    ? ' hidden-toggle--disabled'
+                    : ''
+                }`}
+              >
+                <input
+                  ref={hiddenToggle}
+                  type="checkbox"
+                  checked={showHidden}
+                  disabled={preferences.hidden.length === 0}
+                  onChange={(event) =>
+                    setShownHiddenIds(
+                      event.target.checked ? [...preferences.hidden] : null
+                    )
+                  }
+                />
+                Show hidden ({preferences.hidden.length})
+              </label>
+            </section>
+          )}
+
           {loadState.status === 'loading' && (
             <section className="state-card" aria-live="polite">
               <div className="loader" aria-hidden="true" />
@@ -489,9 +489,9 @@ export default function App() {
             </span>
           </p>
           <span>
-            Portal v0.2.3 ·{' '}
+            Portal v0.2.22 ·{' '}
             <a
-              href="https://git.add-ideas.de/zemion/toolbox-portal/src/tag/v0.4.3"
+              href="https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.19.0"
               target="_blank"
               rel="noopener noreferrer"
             >

src/catalogue.test.ts

@@ -10,12 +10,12 @@ describe('catalogue loading', () => {
     const loaded = await loadCatalogue('/toolbox.catalog.json');
     expect(loaded.catalogue.name).toBe('add·ideas Toolbox');
     expect(loaded.homeUrl).toBe('http://localhost:3000/');
-    expect(loaded.apps).toHaveLength(3);
+    expect(loaded.apps).toHaveLength(8);
     expect(loaded.apps[0]).toMatchObject({
       id: 'de.add-ideas.pdf-tools',
       name: 'PDF Workbench',
       entryUrl: 'http://localhost:3000/apps/pdf/',
-      sourceUrl: 'https://git.add-ideas.de/zemion/pdf-tools',
+      sourceUrl: 'https://git.add-ideas.de/lotobo/pdf-tools',
     });
   });
 
@@ -40,6 +40,11 @@ describe('catalogue loading', () => {
       'de.add-ideas.pdf-tools',
       'de.add-ideas.xslt-tools',
       'de.add-ideas.onenote-tools',
+      'de.add-ideas.svg-tools',
+      'de.add-ideas.auth-tools',
+      'de.add-ideas.sudoku-tools',
+      'de.add-ideas.colour-tools',
+      'de.add-ideas.office-tools',
     ]);
     expect(loaded.unavailable).toHaveLength(1);
     expect(loaded.unavailable[0]?.reason).toMatch(/HTTP 404/);

src/components/AppCard.tsx

@@ -17,13 +17,37 @@ interface AppCardProps {
 
 function MoveIcon() {
   return (
-    <svg viewBox="0 0 20 20" aria-hidden="true">
+    <svg viewBox="0 0 20 80" aria-hidden="true">
       <circle cx="7" cy="5" r="1.2" />
       <circle cx="13" cy="5" r="1.2" />
       <circle cx="7" cy="10" r="1.2" />
       <circle cx="13" cy="10" r="1.2" />
       <circle cx="7" cy="15" r="1.2" />
       <circle cx="13" cy="15" r="1.2" />
+      <circle cx="7" cy="20" r="1.2" />
+      <circle cx="13" cy="20" r="1.2" />
+      <circle cx="7" cy="25" r="1.2" />
+      <circle cx="13" cy="25" r="1.2" />
+      <circle cx="7" cy="30" r="1.2" />
+      <circle cx="13" cy="30" r="1.2" />
+      <circle cx="7" cy="35" r="1.2" />
+      <circle cx="13" cy="35" r="1.2" />
+      <circle cx="7" cy="40" r="1.2" />
+      <circle cx="13" cy="40" r="1.2" />
+      <circle cx="7" cy="45" r="1.2" />
+      <circle cx="13" cy="45" r="1.2" />
+      <circle cx="7" cy="50" r="1.2" />
+      <circle cx="13" cy="50" r="1.2" />
+      <circle cx="7" cy="55" r="1.2" />
+      <circle cx="13" cy="55" r="1.2" />
+      <circle cx="7" cy="60" r="1.2" />
+      <circle cx="13" cy="60" r="1.2" />
+      <circle cx="7" cy="65" r="1.2" />
+      <circle cx="13" cy="65" r="1.2" />
+      <circle cx="7" cy="70" r="1.2" />
+      <circle cx="13" cy="70" r="1.2" />
+      <circle cx="7" cy="75" r="1.2" />
+      <circle cx="13" cy="75" r="1.2" />
     </svg>
   );
 }

src/styles.css

@@ -151,14 +151,14 @@ main {
 
 .hero {
   display: grid;
-  grid-template-columns: minmax(0, 1fr) minmax(19rem, 26rem);
+  grid-template-columns: 1fr;
   align-items: end;
   gap: clamp(2rem, 6vw, 5rem);
   padding: clamp(3.5rem, 7vw, 6.8rem) 0 clamp(2.5rem, 5vw, 4.2rem);
 }
 
 .hero-intro {
-  max-width: 750px;
+  max-width: 100%;
 }
 
 .eyebrow {
@@ -403,8 +403,8 @@ main {
   z-index: 2;
   top: 50%;
   left: 0.35rem;
-  width: 1.7rem;
+  width: 1rem;
-  height: 2.25rem;
+  height: 5rem;
   display: grid;
   place-items: center;
   padding: 0;
@@ -440,8 +440,8 @@ main {
 }
 
 .drag-handle svg {
-  width: 1rem;
+  width: calc(1rem - 2px);
-  height: 1rem;
+  height: 4rem;
   fill: currentColor;
 }
 
@@ -1018,7 +1018,7 @@ main {
 
 @media (min-width: 701px) and (max-width: 960px) {
   .hero {
-    grid-template-columns: minmax(0, 1fr) minmax(17rem, 21rem);
+    grid-template-columns: 1fr;
   }
 }
 

src/test/fixtures.ts

@@ -30,7 +30,7 @@ export const pdfManifest: ToolboxAppManifest = {
     telemetry: false,
   },
   source: {
-    repository: 'https://git.add-ideas.de/zemion/pdf-tools',
+    repository: 'https://git.add-ideas.de/lotobo/pdf-tools',
     license: 'AGPL-3.0-only',
   },
 };
@@ -45,7 +45,7 @@ export const xsltManifest: ToolboxAppManifest = {
   categories: ['documents', 'developer'],
   tags: ['transform', 'xml'],
   source: {
-    repository: 'https://git.add-ideas.de/zemion/xslt-tools',
+    repository: 'https://git.add-ideas.de/lotobo/xslt-tools',
     license: 'AGPL-3.0-only',
   },
 };
@@ -60,11 +60,218 @@ export const onenoteManifest: ToolboxAppManifest = {
   categories: ['documents', 'notes'],
   tags: ['onepkg', 'import'],
   source: {
-    repository: 'https://git.add-ideas.de/zemion/onenote-tools',
+    repository: 'https://git.add-ideas.de/lotobo/onenote-tools',
     license: 'AGPL-3.0-only',
   },
 };
 
+export const regexManifest: ToolboxAppManifest = {
+  ...pdfManifest,
+  id: 'de.add-ideas.regex-tools',
+  name: 'Regex Tools',
+  version: '0.4.1',
+  description:
+    'Develop, explain, test and apply regular expressions locally in the browser.',
+  icon: './regex.svg',
+  categories: ['developer', 'text', 'regex'],
+  tags: ['regular-expression', 'match', 'replace', 'explain', 'test'],
+  requirements: {
+    secureContext: false,
+    workers: true,
+    indexedDb: true,
+    crossOriginIsolated: false,
+  },
+  source: {
+    repository: 'https://git.add-ideas.de/lotobo/regex-tools',
+    license: 'GPL-3.0-or-later',
+  },
+};
+
+export const svgManifest: ToolboxAppManifest = {
+  ...pdfManifest,
+  id: 'de.add-ideas.svg-tools',
+  name: 'SVG Tools',
+  version: '0.1.0',
+  description:
+    'Inspect, edit, optimize and transform SVG documents locally in the browser.',
+  icon: './favicon.svg',
+  categories: ['graphics', 'design', 'developer'],
+  tags: [
+    'svg',
+    'vector',
+    'path',
+    'xml',
+    'transform',
+    'optimize',
+    'accessibility',
+  ],
+  requirements: {
+    secureContext: false,
+    workers: true,
+    indexedDb: false,
+    crossOriginIsolated: false,
+    topLevelContext: false,
+  },
+  source: {
+    repository: 'https://git.add-ideas.de/lotobo/svg-tools',
+    license: 'GPL-3.0-or-later',
+  },
+  assets: ['./canvas-frame-controller.js'],
+};
+
+export const authManifest: ToolboxAppManifest = {
+  ...pdfManifest,
+  id: 'de.add-ideas.auth-tools',
+  name: 'OTP & Passkey Tools',
+  version: '0.1.0',
+  description:
+    'Generate, inspect and verify OTP credentials and test WebAuthn/passkey ceremonies locally in the browser.',
+  icon: './favicon.svg',
+  categories: ['security', 'authentication', 'developer'],
+  tags: [
+    'otp',
+    'hotp',
+    'totp',
+    'ocra',
+    'oath',
+    'webauthn',
+    'fido2',
+    'passkey',
+    'attestation',
+    'assertion',
+  ],
+  requirements: {
+    secureContext: true,
+    workers: false,
+    indexedDb: false,
+    crossOriginIsolated: false,
+    topLevelContext: true,
+  },
+  privacy: {
+    processing: 'local',
+    fileUploads: false,
+    telemetry: false,
+    label:
+      'Authentication material stays in this tab; nothing is uploaded or saved unless you explicitly export it.',
+  },
+  source: {
+    repository: 'https://git.add-ideas.de/lotobo/auth-tools',
+    license: 'GPL-3.0-or-later',
+  },
+};
+
+export const sudokuManifest: ToolboxAppManifest = {
+  schemaVersion: 1,
+  id: 'de.add-ideas.sudoku-tools',
+  name: 'Sudoku Tools',
+  version: '0.1.0',
+  description:
+    'Set, play, solve and analyse Sudoku puzzles locally in the browser.',
+  entry: './',
+  icon: './favicon.svg',
+  categories: ['games', 'puzzles', 'logic'],
+  tags: ['sudoku', 'killer', 'solver', 'setter', 'generator', 'candidates'],
+  integration: {
+    contextVersion: 1,
+    launchModes: ['navigate', 'new-tab'],
+    embedding: 'unsupported',
+  },
+  requirements: {
+    secureContext: false,
+    workers: true,
+    indexedDb: true,
+    crossOriginIsolated: false,
+    topLevelContext: false,
+  },
+  privacy: {
+    processing: 'local',
+    fileUploads: false,
+    telemetry: false,
+    label: 'Puzzles and progress stay in this browser; nothing is uploaded.',
+  },
+  source: {
+    repository: 'https://git.add-ideas.de/lotobo/sudoku-tools',
+    license: 'GPL-3.0-or-later',
+  },
+  actions: [
+    {
+      id: 'source',
+      label: 'Source',
+      url: 'https://git.add-ideas.de/lotobo/sudoku-tools',
+    },
+  ],
+};
+
+export const colourManifest: ToolboxAppManifest = {
+  ...sudokuManifest,
+  id: 'de.add-ideas.colour-tools',
+  name: 'Colour Tools',
+  version: '0.1.0',
+  description:
+    'Convert, composite, compare and build colours locally in the browser.',
+  categories: ['graphics', 'design', 'developer'],
+  tags: ['colour', 'rgba', 'oklch', 'palette', 'gradient', 'contrast'],
+  requirements: {
+    secureContext: false,
+    workers: true,
+    indexedDb: false,
+    crossOriginIsolated: false,
+    topLevelContext: false,
+  },
+  privacy: {
+    processing: 'local',
+    fileUploads: false,
+    telemetry: false,
+    label: 'Colours and images stay in this browser; nothing is uploaded.',
+  },
+  source: {
+    repository: 'https://git.add-ideas.de/lotobo/colour-tools',
+    license: 'GPL-3.0-or-later',
+  },
+  actions: [
+    {
+      id: 'source',
+      label: 'Source',
+      url: 'https://git.add-ideas.de/lotobo/colour-tools',
+    },
+  ],
+};
+
+export const officeManifest: ToolboxAppManifest = {
+  ...sudokuManifest,
+  id: 'de.add-ideas.office-tools',
+  name: 'Office Tools',
+  version: '0.1.0',
+  description:
+    'Open and inspect documents, spreadsheets and presentations locally in the browser.',
+  categories: ['documents', 'office', 'productivity'],
+  tags: ['document', 'spreadsheet', 'presentation', 'docx', 'xlsx', 'pptx'],
+  requirements: {
+    secureContext: false,
+    workers: true,
+    indexedDb: false,
+    crossOriginIsolated: false,
+    topLevelContext: false,
+  },
+  privacy: {
+    processing: 'local',
+    fileUploads: false,
+    telemetry: false,
+    label: 'Office files stay in this browser; nothing is uploaded.',
+  },
+  source: {
+    repository: 'https://git.add-ideas.de/lotobo/office-tools',
+    license: 'GPL-3.0-or-later',
+  },
+  actions: [
+    {
+      id: 'source',
+      label: 'Source',
+      url: 'https://git.add-ideas.de/lotobo/office-tools',
+    },
+  ],
+};
+
 export const catalogue: ToolboxCatalog = {
   schemaVersion: 1,
   id: 'de.add-ideas.toolbox',
@@ -75,6 +282,11 @@ export const catalogue: ToolboxCatalog = {
     { manifest: './apps/pdf/toolbox-app.json', enabled: true },
     { manifest: './apps/xslt/toolbox-app.json', enabled: true },
     { manifest: './apps/onenote/toolbox-app.json', enabled: true },
+    { manifest: './apps/svg/toolbox-app.json', enabled: true },
+    { manifest: './apps/auth/toolbox-app.json', enabled: true },
+    { manifest: './apps/sudoku/toolbox-app.json', enabled: true },
+    { manifest: './apps/colour/toolbox-app.json', enabled: true },
+    { manifest: './apps/office/toolbox-app.json', enabled: true },
   ],
 };
 
@@ -94,6 +306,18 @@ export function catalogueFetch(overrides: Record<string, Response> = {}) {
       return Response.json(xsltManifest);
     if (url.pathname.endsWith('/apps/onenote/toolbox-app.json'))
       return Response.json(onenoteManifest);
+    if (url.pathname.endsWith('/apps/regex/toolbox-app.json'))
+      return Response.json(regexManifest);
+    if (url.pathname.endsWith('/apps/svg/toolbox-app.json'))
+      return Response.json(svgManifest);
+    if (url.pathname.endsWith('/apps/auth/toolbox-app.json'))
+      return Response.json(authManifest);
+    if (url.pathname.endsWith('/apps/sudoku/toolbox-app.json'))
+      return Response.json(sudokuManifest);
+    if (url.pathname.endsWith('/apps/colour/toolbox-app.json'))
+      return Response.json(colourManifest);
+    if (url.pathname.endsWith('/apps/office/toolbox-app.json'))
+      return Response.json(officeManifest);
     return new Response('Not found', { status: 404 });
   };
 }

src/toolPresentation.test.ts

@@ -0,0 +1,90 @@
+import { describe, expect, it } from 'vitest';
+import { shortToolDescription, shortToolTitle } from './toolPresentation';
+import type { ResolvedApp } from './types';
+
+function app(id: string, name: string, description: string): ResolvedApp {
+  return { id, name, description } as ResolvedApp;
+}
+
+describe('compact tool presentation', () => {
+  it('uses the requested Audio & Video tile copy', () => {
+    const audioVideo = app(
+      'de.add-ideas.av-tools',
+      'Audio & Video Tools',
+      'Convert and lightly edit audio and video locally in the browser.'
+    );
+
+    expect(shortToolTitle(audioVideo)).toBe('Audio & Video');
+    expect(shortToolDescription(audioVideo)).toBe('Convert and edit locally.');
+  });
+
+  it('uses the requested Regex tile copy', () => {
+    const regex = app(
+      'de.add-ideas.regex-tools',
+      'Regex Tools',
+      'Develop, explain, test and apply regular expressions locally in the browser.'
+    );
+
+    expect(shortToolTitle(regex)).toBe('Regex');
+    expect(shortToolDescription(regex)).toBe('Explain and test locally.');
+  });
+
+  it('uses the compact SVG tile copy', () => {
+    const svg = app(
+      'de.add-ideas.svg-tools',
+      'SVG Tools',
+      'Inspect, edit, optimize and transform SVG documents locally in the browser.'
+    );
+
+    expect(shortToolTitle(svg)).toBe('SVG');
+    expect(shortToolDescription(svg)).toBe('Inspect and edit vectors locally.');
+  });
+
+  it('uses the compact authentication tile copy', () => {
+    const auth = app(
+      'de.add-ideas.auth-tools',
+      'OTP & Passkey Tools',
+      'Generate, inspect and verify OTP credentials and test WebAuthn/passkey ceremonies locally in the browser.'
+    );
+
+    expect(shortToolTitle(auth)).toBe('OTP & Passkeys');
+    expect(shortToolDescription(auth)).toBe(
+      'Inspect and test authentication locally.'
+    );
+  });
+
+  it('uses the compact Sudoku tile copy', () => {
+    const sudoku = app(
+      'de.add-ideas.sudoku-tools',
+      'Sudoku Tools',
+      'Set, play, solve and analyse Sudoku puzzles locally in the browser.'
+    );
+
+    expect(shortToolTitle(sudoku)).toBe('Sudoku');
+    expect(shortToolDescription(sudoku)).toBe('Set, play and solve locally.');
+  });
+
+  it('uses the compact Colour tile copy', () => {
+    const colour = app(
+      'de.add-ideas.colour-tools',
+      'Colour Tools',
+      'Convert, composite, compare and build colours locally in the browser.'
+    );
+
+    expect(shortToolTitle(colour)).toBe('Colour');
+    expect(shortToolDescription(colour)).toBe(
+      'Convert and build colours locally.'
+    );
+  });
+
+  it('uses the compact Office tile copy', () => {
+    const office = app(
+      'de.add-ideas.office-tools',
+      'Office Tools',
+      'Open and inspect documents, spreadsheets and presentations locally in the browser.'
+    );
+
+    expect(shortToolTitle(office)).toBe('Office');
+    expect(shortToolDescription(office)).toBe('Open office files locally.');
+  });
+});

src/toolPresentation.ts

@@ -13,6 +13,34 @@ const PRESENTATION: Record<string, { title: string; description: string }> = {
     title: 'OneNote',
     description: 'Open OneNote files locally.',
   },
+  'de.add-ideas.av-tools': {
+    title: 'Audio & Video',
+    description: 'Convert and edit locally.',
+  },
+  'de.add-ideas.regex-tools': {
+    title: 'Regex',
+    description: 'Explain and test locally.',
+  },
+  'de.add-ideas.svg-tools': {
+    title: 'SVG',
+    description: 'Inspect and edit vectors locally.',
+  },
+  'de.add-ideas.auth-tools': {
+    title: 'OTP & Passkeys',
+    description: 'Inspect and test authentication locally.',
+  },
+  'de.add-ideas.sudoku-tools': {
+    title: 'Sudoku',
+    description: 'Set, play and solve locally.',
+  },
+  'de.add-ideas.colour-tools': {
+    title: 'Colour',
+    description: 'Convert and build colours locally.',
+  },
+  'de.add-ideas.office-tools': {
+    title: 'Office',
+    description: 'Open office files locally.',
+  },
 };
 
 export function shortToolTitle(app: ResolvedApp): string {

vite.config.ts

@@ -10,5 +10,7 @@ export default defineConfig({
     setupFiles: './src/test/setup.ts',
     css: true,
     restoreMocks: true,
+    pool: 'threads',
+    maxWorkers: 1,
   },
 });