Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
 zemion
|
0baeda8be8 | ||
|
zemion
|
5ed7134d42 | ||
|
zemion
|
55b2b12434 | ||
|
zemion
|
f0b2ce34e4 | ||
|
zemion
|
43670a5824 | ||
|
zemion
|
a50944e7cb | ||
|
zemion
|
9347554324 |
+3
-2
@@ -1,8 +1,9 @@
|
||||
# Optional overrides for compose.yaml. Its defaults already match production.
|
||||
TOOLBOX_HOST=toolbox.add-ideas.de
|
||||
AUTH_TOOLS_HOST=auth.toolbox.add-ideas.de
|
||||
TRAEFIK_NETWORK=internal
|
||||
TRAEFIK_CERT_RESOLVER=netcup
|
||||
|
||||
# Keep these two values paired when deploying a newer published toolbox release.
|
||||
TOOLBOX_RELEASE_VERSION=0.7.0
|
||||
TOOLBOX_RELEASE_SHA256=505a1ff1fa10d8831a6110eb52bb1eff7be58ca495ce50f7d67977c893a36e99
|
||||
TOOLBOX_RELEASE_VERSION=0.11.0
|
||||
TOOLBOX_RELEASE_SHA256=752c91606ba4249da8eb0a6d2d062b9dfe10fec988f16d428ba1c9b899ba4771
|
||||
|
||||
@@ -1 +1 @@
|
||||
@add-ideas:registry=https://git.add-ideas.de/api/packages/zemion/npm/
|
||||
@add-ideas:registry=https://git.add-ideas.de/api/packages/lotobo/npm/
|
||||
|
||||
@@ -2,9 +2,9 @@ ARG NGINX_IMAGE=nginxinc/nginx-unprivileged:1.31.3-alpine@sha256:18d67281256ded3
|
||||
|
||||
FROM ${NGINX_IMAGE} AS release
|
||||
|
||||
ARG TOOLBOX_RELEASE_VERSION=0.7.0
|
||||
ARG TOOLBOX_RELEASE_SHA256=505a1ff1fa10d8831a6110eb52bb1eff7be58ca495ce50f7d67977c893a36e99
|
||||
ARG TOOLBOX_RELEASE_BASE_URL=https://git.add-ideas.de/zemion/toolbox-portal/releases/download
|
||||
ARG TOOLBOX_RELEASE_VERSION=0.11.0
|
||||
ARG TOOLBOX_RELEASE_SHA256=752c91606ba4249da8eb0a6d2d062b9dfe10fec988f16d428ba1c9b899ba4771
|
||||
ARG TOOLBOX_RELEASE_BASE_URL=https://git.add-ideas.de/lotobo/toolbox-portal/releases/download
|
||||
|
||||
RUN set -eu; \
|
||||
archive="add-ideas-toolbox-${TOOLBOX_RELEASE_VERSION}.zip"; \
|
||||
@@ -23,6 +23,8 @@ RUN set -eu; \
|
||||
test -f /tmp/toolbox/apps/onenote/toolbox-app.json; \
|
||||
test -f /tmp/toolbox/apps/av/toolbox-app.json; \
|
||||
test -f /tmp/toolbox/apps/regex/toolbox-app.json; \
|
||||
test -f /tmp/toolbox/apps/svg/toolbox-app.json; \
|
||||
test -f /tmp/toolbox/apps/auth/toolbox-app.json; \
|
||||
rm "/tmp/${archive}"
|
||||
|
||||
FROM ${NGINX_IMAGE}
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
# add·ideas Toolbox Portal
|
||||
|
||||
`toolbox-portal` is the static launcher and release assembler for the add·ideas
|
||||
browser toolbox. Version `0.2.6` reads one same-origin catalogue, shows each app
|
||||
browser toolbox. Version `0.2.13` reads one same-origin catalogue, shows each app
|
||||
as a compact launch tile, and keeps personal pins, drag-and-drop ordering,
|
||||
visibility, and appearance in the current browser. Pinned tools have their own
|
||||
section; search, category, and clickable tag filters stay close to the tool
|
||||
@@ -30,14 +30,14 @@ npm run build
|
||||
npm run dev
|
||||
```
|
||||
|
||||
The package lock resolves the `^0.2.2` SDK ranges to the published `0.2.2`
|
||||
The package lock resolves the `^0.2.3` SDK ranges to the published `0.2.3`
|
||||
packages. A sibling SDK checkout is only needed when intentionally developing
|
||||
the SDK and portal together.
|
||||
|
||||
Vite uses `base: './'`, so the built portal works at `/` or a nested static path.
|
||||
The development catalogue at `public/toolbox.catalog.json` points to assembled
|
||||
paths (`./apps/pdf/`, `./apps/xslt/`, `./apps/onenote/`, `./apps/av/`, and
|
||||
`./apps/regex/`).
|
||||
paths (`./apps/pdf/`, `./apps/xslt/`, `./apps/onenote/`, `./apps/av/`,
|
||||
`./apps/regex/`, `./apps/svg/`, and `./apps/auth/`).
|
||||
Those manifests will correctly appear as unavailable until an assembled release
|
||||
is being served.
|
||||
|
||||
@@ -69,7 +69,7 @@ privacy and executable-code warning. Light, dark, and system modes are supported
|
||||
## Production deployment behind Traefik
|
||||
|
||||
The committed `compose.yaml` is the shortest production path. Its release
|
||||
container downloads the immutable Toolbox 0.7.0 ZIP during the image build,
|
||||
container downloads the immutable Toolbox 0.11.0 ZIP during the image build,
|
||||
verifies SHA-256 before extracting it, and then copies only the verified static
|
||||
files into the pinned unprivileged nginx image. Node.js and a local portal
|
||||
assembly are not required on the deployment host.
|
||||
@@ -80,13 +80,13 @@ Prerequisites:
|
||||
- Traefik attached to the existing external Docker network `internal`;
|
||||
- Traefik HTTP and HTTPS entrypoints named `web` and `websecure`;
|
||||
- a certificate resolver named `netcup`;
|
||||
- DNS for `toolbox.add-ideas.de` pointing to that Traefik instance; and
|
||||
- DNS for `toolbox.add-ideas.de` and `auth.toolbox.add-ideas.de` pointing to that Traefik instance; and
|
||||
- outbound HTTPS access to `git.add-ideas.de` while the image is built.
|
||||
|
||||
Deploy a fresh clone with:
|
||||
|
||||
```sh
|
||||
git clone https://git.add-ideas.de/zemion/toolbox-portal.git
|
||||
git clone https://git.add-ideas.de/lotobo/toolbox-portal.git
|
||||
cd toolbox-portal
|
||||
docker compose up -d --build
|
||||
docker compose ps
|
||||
@@ -100,6 +100,16 @@ release version, and matching checksum can be overridden through environment
|
||||
variables; copy `.env.example` to `.env` only when an override is needed. For
|
||||
example, set `TOOLBOX_HOST=staging.toolbox.add-ideas.de` for a staging host.
|
||||
|
||||
The same container also exposes only the packaged authentication app at
|
||||
`https://auth.toolbox.add-ideas.de/`. Traefik adds the internal `/apps/auth`
|
||||
prefix while the public URL remains `/`, so assets remain relative and the browser
|
||||
binds WebAuthn credentials to the dedicated `auth.toolbox.add-ideas.de` RP ID.
|
||||
The main Toolbox copy at `/apps/auth/` remains useful for offline inspection but
|
||||
disables live ceremonies because all Portal apps share that origin. The router
|
||||
hostname can be overridden with `AUTH_TOOLS_HOST`, but auth-tools 0.1.0 enables
|
||||
live ceremonies only on its pinned production host (or localhost); other hosts
|
||||
remain inspect-only. Never widen the RP ID to `add-ideas.de`.
|
||||
|
||||
The external network is deliberately not created by this project. Creating a
|
||||
private project-local network would prevent an independently managed Traefik
|
||||
container from reaching the service.
|
||||
@@ -121,9 +131,10 @@ The app release should also publish a matching `.sha256` sidecar. The manifest
|
||||
must declare the pinned reverse-DNS id and version. Application and portal
|
||||
versions are independent.
|
||||
|
||||
`release/toolbox.lock.json` is the reviewed v0.7.0 lock. Its URLs and checksums
|
||||
pin the published PDF Tools 0.4.3, XSLT Tools 0.4.2, OneNote Tools 0.3.3, and
|
||||
Audio & Video Tools 0.2.0 and Regex Tools 0.2.0 release bytes. Use
|
||||
`release/toolbox.lock.json` is the reviewed v0.11.0 lock. Its URLs and checksums
|
||||
pin the published PDF Tools 0.4.4, XSLT Tools 0.4.3, OneNote Tools 0.3.4,
|
||||
Audio & Video Tools 0.3.0, Regex Tools 0.4.2, SVG Tools 0.1.0, and OTP & Passkey
|
||||
Tools 0.1.0 release bytes. Use
|
||||
`release/toolbox.lock.example.json` as the template for a future release and
|
||||
verify every downloaded asset before committing updated values. Artifacts may be:
|
||||
|
||||
@@ -144,7 +155,7 @@ npm run assemble -- \
|
||||
--lock release/toolbox.lock.json \
|
||||
--portal-dist dist \
|
||||
--output build/toolbox \
|
||||
--archive build/add-ideas-toolbox-0.7.0.zip
|
||||
--archive build/add-ideas-toolbox-0.11.0.zip
|
||||
```
|
||||
|
||||
Existing output is refused. Pass `--force` only when replacing those exact
|
||||
@@ -164,10 +175,12 @@ build/toolbox/
|
||||
├── xslt/
|
||||
├── onenote/
|
||||
├── av/
|
||||
└── regex/
|
||||
├── regex/
|
||||
├── svg/
|
||||
└── auth/
|
||||
|
||||
build/add-ideas-toolbox-0.7.0.zip
|
||||
build/add-ideas-toolbox-0.7.0.zip.sha256
|
||||
build/add-ideas-toolbox-0.11.0.zip
|
||||
build/add-ideas-toolbox-0.11.0.zip.sha256
|
||||
```
|
||||
|
||||
The assembler verifies SHA-256 before opening an artifact, validates every app
|
||||
@@ -188,7 +201,7 @@ directory separately:
|
||||
```sh
|
||||
npm run package:static -- \
|
||||
--input build/toolbox \
|
||||
--output artifacts/add-ideas-toolbox-0.7.0.zip
|
||||
--output artifacts/add-ideas-toolbox-0.11.0.zip
|
||||
```
|
||||
|
||||
This also emits a `.sha256` sidecar.
|
||||
@@ -196,9 +209,12 @@ This also emits a `.sha256` sidecar.
|
||||
## Local assembled container and publication
|
||||
|
||||
`Containerfile` serves only the assembled files with unprivileged nginx on port 8080. It adds restrictive browser headers, same-origin isolation, explicit
|
||||
`application/wasm`, immutable caching only for Vite-hashed assets and narrowly
|
||||
matched semver-versioned FFmpeg core files, and revalidation for all other
|
||||
files. Assemble first, then:
|
||||
`application/javascript` for `.mjs` engine modules and `application/wasm`,
|
||||
immutable caching only for Vite-hashed assets and narrowly matched
|
||||
semver-versioned FFmpeg core files, and revalidation for all other files. The
|
||||
opaque-origin SVG preview iframe loads its packaged controller with a URI-exact
|
||||
CORS and cross-origin resource-policy exception; all other files retain the
|
||||
same-origin policy and every normal security header. Assemble first, then:
|
||||
|
||||
The packaged policy intentionally does not grant CSP `unsafe-eval`. SaxonJS's
|
||||
`ixsl:eval()` extension is therefore unsupported in this deployment profile;
|
||||
@@ -206,9 +222,9 @@ normal local XML/XSLT transformations do not require that permission.
|
||||
|
||||
```sh
|
||||
podman build -f Containerfile \
|
||||
-t git.add-ideas.de/zemion/toolbox:0.7.0 .
|
||||
-t git.add-ideas.de/lotobo/toolbox:0.11.0 .
|
||||
podman run --rm -p 8080:8080 \
|
||||
git.add-ideas.de/zemion/toolbox:0.7.0
|
||||
git.add-ideas.de/lotobo/toolbox:0.11.0
|
||||
```
|
||||
|
||||
For a direct-port local deployment after assembly, use the separate example:
|
||||
@@ -225,8 +241,8 @@ docker login git.add-ideas.de
|
||||
docker buildx build \
|
||||
--platform linux/amd64,linux/arm64 \
|
||||
--file Containerfile.release \
|
||||
--tag git.add-ideas.de/zemion/toolbox:0.7.0 \
|
||||
--tag git.add-ideas.de/zemion/toolbox:0.7 \
|
||||
--tag git.add-ideas.de/lotobo/toolbox:0.11.0 \
|
||||
--tag git.add-ideas.de/lotobo/toolbox:0.11 \
|
||||
--push .
|
||||
```
|
||||
|
||||
@@ -239,7 +255,7 @@ notes.
|
||||
|
||||
No credentials belong in this repository. The publishing workstation or runner
|
||||
needs permission to push code, releases, and container packages to
|
||||
`zemion/toolbox-portal`.
|
||||
`lotobo/toolbox-portal`.
|
||||
|
||||
1. Run `npm ci`, `npm test`, `npm run lint`, and `npm run build` from a clean
|
||||
checkout of the intended portal tag.
|
||||
@@ -248,11 +264,11 @@ needs permission to push code, releases, and container packages to
|
||||
3. Verify downloaded app assets with `sha256sum -c <asset>.sha256`; copy those
|
||||
exact values into a reviewed toolbox lock.
|
||||
4. Run the assembler and serve `build/toolbox` from a nested test path. Open
|
||||
all five apps, switch between them, and confirm the encoded `toolbox`
|
||||
all seven apps, switch between them, and confirm the encoded `toolbox`
|
||||
context.
|
||||
5. Verify the distribution with
|
||||
`(cd build && sha256sum -c add-ideas-toolbox-0.7.0.zip.sha256)`.
|
||||
6. Commit the reviewed lock, tag the toolbox release (for example `v0.7.0`), and
|
||||
`(cd build && sha256sum -c add-ideas-toolbox-0.11.0.zip.sha256)`.
|
||||
6. Commit the reviewed lock, tag the toolbox release (for example `v0.11.0`), and
|
||||
push the branch and tag to Gitea.
|
||||
7. In Gitea, open **Releases → New release**, select the tag, and upload the
|
||||
static ZIP plus its `.sha256` file. Do not use a mutable “latest” URL in a
|
||||
@@ -267,13 +283,15 @@ must not re-resolve app versions or substitute a newer release.
|
||||
|
||||
## Existing tools
|
||||
|
||||
| Tool | State and boundary | Principal workflows | Important concrete scope | Critical considerations and integrations |
|
||||
| ------------------- | --------------------------------------------------------- | ------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
|
||||
| **`pdf-tools`** | Existing; dedicated repository | Merge, split, reorder, rotate and export PDF pages | Thumbnail workspace; multi-document operations; ZIP and PDF output; saved local workspace | Workers and IndexedDB; large-document memory control; future signature inspection through `crypto-tools`; metadata and safe-sharing through `privacy-tools` |
|
||||
| **`xslt-tools`** | Existing; dedicated repository | Develop, test and run XSLT transformations | XML/XSLT editors; transformation results; local files; saved projects; validation and diagnostics | Lazy SaxonJS loading; relocatable assets; useful handoffs to `data-tools`, `schema-tools` and `diff-tools` |
|
||||
| **`onenote-tools`** | Existing rich-reader release; dedicated repository | Open, browse, inspect and export OneNote sections and packages locally | Desktop/unfragmented FSSHTTPB `.one`/`.onetoc2`; none/LZX/MSZIP/Quantum and multi-cabinet `.onepkg`; trees, rich text, images, tables, ink, attachments and export | Native TypeScript worker with no Wasm; bounded parsing, rendering and export; fragmented FSSHTTP fails safely; no editing or pixel-perfect fidelity |
|
||||
| **`av-tools`** | Existing local-first v0.2.0 release; dedicated repository | Convert and lightly edit audio and video locally in the browser | Quick conversion; trim, split and crossfade concatenate; crop, resize, normalize, fades, waveform, metadata, chapters, subtitles, scene thumbnails/contact sheets, presets and export | Reviewed ffmpeg.wasm 0.12.10 ST/MT build with verified Opus and bundled label font; bounded queue, temporary storage and resource policy; isolation enables MT with automatic ST fallback; versioned core assets are immutable |
|
||||
| **`regex-tools`** | Existing local-first v0.2.0 release; dedicated repository | Develop, explain, test and apply ECMAScript and PCRE2 regular expressions | Deterministic syntax tree; native matching/tracing and exact captures; comparison, PCRE2 C17 generation, corpus apply, replacement/list previews, tests, risk/growth/benchmark analysis, deterministic generated cases, bounded minimization, validated ECMAScript formatting, project import/export and optional local persistence | Open-source regexpp plus pinned PCRE2 10.47 WASM in killable workers; explicit resource/presentation limits and honest flavour boundaries; more engines remain roadmap work |
|
||||
| Tool | State and boundary | Principal workflows | Important concrete scope | Critical considerations and integrations |
|
||||
| ------------------- | --------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
||||
| **`pdf-tools`** | Existing; dedicated repository | Merge, split, reorder, rotate and export PDF pages | Thumbnail workspace; multi-document operations; ZIP and PDF output; saved local workspace | Workers and IndexedDB; large-document memory control; future signature inspection through `crypto-tools`; metadata and safe-sharing through `privacy-tools` |
|
||||
| **`xslt-tools`** | Existing; dedicated repository | Develop, test and run XSLT transformations | XML/XSLT editors; transformation results; local files; saved projects; validation and diagnostics | Lazy SaxonJS loading; relocatable assets; useful handoffs to `data-tools`, `schema-tools` and `diff-tools` |
|
||||
| **`onenote-tools`** | Existing rich-reader release; dedicated repository | Open, browse, inspect and export OneNote sections and packages locally | Desktop/unfragmented FSSHTTPB `.one`/`.onetoc2`; none/LZX/MSZIP/Quantum and multi-cabinet `.onepkg`; trees, rich text, images, tables, ink, attachments and export | Native TypeScript worker with no Wasm; bounded parsing, rendering and export; fragmented FSSHTTP fails safely; no editing or pixel-perfect fidelity |
|
||||
| **`av-tools`** | Existing local-first v0.3.0 release; dedicated repository | Convert and lightly edit audio and video locally in the browser | Immediate native playback and basic file information; progressive stream inspection on demand; quick conversion; trim, split and crossfade concatenate; crop, resize, normalize, fades, waveform, metadata, chapters, subtitles, scene thumbnails/contact sheets, presets and export | Reviewed ffmpeg.wasm 0.12.10 ST/MT build with verified Opus and bundled label font; bounded queue, temporary storage and resource policy; isolation enables MT with automatic ST fallback; versioned core assets are immutable |
|
||||
| **`regex-tools`** | Current local-first v0.4.2 release; dedicated repository | Develop, explain, test and apply JavaScript, PCRE2, PHP, Perl, Python, Ruby, Java, C++, Go, .NET, Rust and Scala/JVM-compatible regular expressions | Deterministic syntax trees; engine-native matching, captures and bounded replacement; stable double-buffered live results; PCRE2 tracing and C17 generation; comparison; corpus apply; tests; risk/growth/benchmark analysis; generated cases; bounded minimization; validated ECMAScript formatting; project import/export and optional local persistence | Open-source regexpp and pinned local WebAssembly runtimes for PCRE2, PHP preg, legacy Perl, CPython, CRuby, TeaVM Java/Scala compatibility, libc++ C++, Go, .NET and Rust in killable workers; explicit source/licence inventories, resource limits and engine-specific offset semantics |
|
||||
| **`svg-tools`** | Initial local-first v0.1.0 release; dedicated repository | Inspect and edit SVG source, structure, geometry, references and accessibility locally | Synchronized source/tree/canvas/inspector; path and transform tools; reference analysis; optimization; CSS animation preview; exact, sanitized, raster and project export | Untrusted SVG is sanitized into an opaque-origin sandbox; bounded parsing and decompression, explicit security findings and a URI-scoped controller header exception; later milestone slices remain intentionally tracked in the app repository |
|
||||
| **`auth-tools`** | Initial local-first v0.1.0 release; dedicated repository | Generate, inspect and verify OTP credentials, and inspect, verify and test WebAuthn/passkey ceremonies locally | HOTP, TOTP and OCRA; strict provisioning URIs; QR, CSV, Google migration and plain PSKC import; bounded CBOR/authenticator-data inspection; assertion verification; an ephemeral browser ceremony lab | OTP material remains memory-only; attestation trust is not claimed; live ceremonies are enabled only at the exact dedicated `auth.toolbox.add-ideas.de` origin (or localhost), while the Portal path remains inspect-only; no raw CTAP or token administration |
|
||||
|
||||
## Planned tools
|
||||
|
||||
@@ -281,7 +299,6 @@ must not re-resolve app versions or substitute a newer release.
|
||||
| -------------------- | --------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|
||||
| **`flow-tools`** | Later platform layer | Compose local processing operations across tools | Example: CSV → filter → QR generation → SVG template → PDF → ZIP; reusable recipes; typed inputs and outputs; progress and cancellation | Do not load complete React applications into one runtime; expose separate worker-safe operation packages only after several apps have stable operations |
|
||||
| **`file-tools`** | High priority; dedicated repository | Identify, inspect and organize local files | Magic-byte detection; hex view; decoded strings; checksums; directory manifests; split/join; duplicate detection; trailing-data detection; batch-rename preview | All inputs are untrusted; format inspectors require strict size and nesting limits; natural entry point to archive, privacy, crypto and package tools |
|
||||
| **`svg-tools`** | Planned; dedicated repository | Source and visual SVG editing | Synchronized DOM tree, code and canvas; optimization; path simplification; symbols; accessibility; animation; sanitization | SVG is potentially active content; previews require sanitization or sandboxing; integrate with `colour-tools`, `token-tools`, `image-tools` and `label-tools` |
|
||||
| **`image-tools`** | High priority; dedicated repository | Edit and batch-process raster images | Crop, resize, rotate, compress, convert, contact sheets, sprites, responsive sets, favicon generation, metadata removal and visual quality comparison | Use workers and off-main-thread rendering; preserve or deliberately remove colour profiles; integrate with colour, SVG, PDF and privacy tools |
|
||||
| **`subtitle-tools`** | Medium priority; dedicated repository | Edit, validate and synchronize captions | SRT, WebVTT and ASS; timing shifts; stretching; frame-rate conversion; overlap and reading-speed checks; waveform synchronization; revision comparison | Direct integration with `av-tools`; preserve style information when supported and disclose conversion losses |
|
||||
| **`midi-tools`** | Medium specialist app | MIDI event inspection and editing; transpose, quantize, tempo maps and controller data; device access should remain optional | |
|
||||
|
||||
@@ -3,7 +3,7 @@ services:
|
||||
build:
|
||||
context: .
|
||||
dockerfile: Containerfile
|
||||
image: git.add-ideas.de/zemion/toolbox:0.7.0
|
||||
image: git.add-ideas.de/lotobo/toolbox:0.11.0
|
||||
restart: unless-stopped
|
||||
read_only: true
|
||||
ports:
|
||||
|
||||
+16
-3
@@ -6,9 +6,9 @@ services:
|
||||
context: .
|
||||
dockerfile: Containerfile.release
|
||||
args:
|
||||
TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.7.0}"
|
||||
TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-505a1ff1fa10d8831a6110eb52bb1eff7be58ca495ce50f7d67977c893a36e99}"
|
||||
image: "git.add-ideas.de/zemion/toolbox:${TOOLBOX_RELEASE_VERSION:-0.7.0}"
|
||||
TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.11.0}"
|
||||
TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-752c91606ba4249da8eb0a6d2d062b9dfe10fec988f16d428ba1c9b899ba4771}"
|
||||
image: "git.add-ideas.de/lotobo/toolbox:${TOOLBOX_RELEASE_VERSION:-0.11.0}"
|
||||
restart: unless-stopped
|
||||
read_only: true
|
||||
tmpfs:
|
||||
@@ -38,6 +38,19 @@ services:
|
||||
traefik.http.middlewares.addideas-toolbox-https-redirect.redirectscheme.scheme: https
|
||||
traefik.http.middlewares.addideas-toolbox-https-redirect.redirectscheme.permanent: "true"
|
||||
traefik.http.services.addideas-toolbox.loadbalancer.server.port: "8080"
|
||||
traefik.http.routers.addideas-auth.rule: "Host(`${AUTH_TOOLS_HOST:-auth.toolbox.add-ideas.de}`)"
|
||||
traefik.http.routers.addideas-auth.priority: 1000
|
||||
traefik.http.routers.addideas-auth.entrypoints: websecure
|
||||
traefik.http.routers.addideas-auth.tls: "true"
|
||||
traefik.http.routers.addideas-auth.tls.certresolver: "${TRAEFIK_CERT_RESOLVER:-netcup}"
|
||||
traefik.http.routers.addideas-auth.middlewares: addideas-auth-prefix
|
||||
traefik.http.routers.addideas-auth.service: addideas-toolbox
|
||||
traefik.http.routers.addideas-auth-http.rule: "Host(`${AUTH_TOOLS_HOST:-auth.toolbox.add-ideas.de}`)"
|
||||
traefik.http.routers.addideas-auth-http.priority: 1000
|
||||
traefik.http.routers.addideas-auth-http.entrypoints: web
|
||||
traefik.http.routers.addideas-auth-http.middlewares: addideas-toolbox-https-redirect
|
||||
traefik.http.routers.addideas-auth-http.service: addideas-toolbox
|
||||
traefik.http.middlewares.addideas-auth-prefix.addprefix.prefix: /apps/auth
|
||||
|
||||
networks:
|
||||
internal:
|
||||
|
||||
+19
-1
@@ -4,6 +4,16 @@ map $uri $toolbox_cache_control {
|
||||
"~^/apps/[a-z0-9][a-z0-9-]*/vendor/ffmpeg/(?:(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)|0\.12\.10-reviewed-stack5m\.1)/(?:version\.json|(?:st|mt)/ffmpeg-core\.(?:js|wasm)|mt/ffmpeg-core\.worker\.js)$" "public, max-age=31536000, immutable";
|
||||
}
|
||||
|
||||
map $uri $toolbox_resource_policy {
|
||||
default "same-origin";
|
||||
"/apps/svg/canvas-frame-controller.js" "cross-origin";
|
||||
}
|
||||
|
||||
map $uri $toolbox_access_control_allow_origin {
|
||||
default "";
|
||||
"/apps/svg/canvas-frame-controller.js" "*";
|
||||
}
|
||||
|
||||
server {
|
||||
listen 8080;
|
||||
listen [::]:8080;
|
||||
@@ -19,7 +29,8 @@ server {
|
||||
add_header X-Frame-Options "DENY" always;
|
||||
add_header Cross-Origin-Opener-Policy "same-origin" always;
|
||||
add_header Cross-Origin-Embedder-Policy "require-corp" always;
|
||||
add_header Cross-Origin-Resource-Policy "same-origin" always;
|
||||
add_header Cross-Origin-Resource-Policy $toolbox_resource_policy always;
|
||||
add_header Access-Control-Allow-Origin $toolbox_access_control_allow_origin always;
|
||||
add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=(), usb=()" always;
|
||||
add_header Content-Security-Policy "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self' blob:; font-src 'self' data:; connect-src 'self'; worker-src 'self' blob:; manifest-src 'self'" always;
|
||||
add_header Cache-Control $toolbox_cache_control always;
|
||||
@@ -40,6 +51,13 @@ server {
|
||||
try_files $uri =404;
|
||||
}
|
||||
|
||||
location ~* \.mjs$ {
|
||||
types {
|
||||
application/javascript mjs;
|
||||
}
|
||||
try_files $uri =404;
|
||||
}
|
||||
|
||||
location ~* \.(?:css|js|mjs|woff2?|png|jpe?g|gif|webp|svg|ico|webmanifest)$ {
|
||||
try_files $uri =404;
|
||||
}
|
||||
|
||||
Generated
+11
-11
@@ -1,16 +1,16 @@
|
||||
{
|
||||
"name": "@add-ideas/toolbox-portal",
|
||||
"version": "0.2.6",
|
||||
"version": "0.2.13",
|
||||
"lockfileVersion": 3,
|
||||
"requires": true,
|
||||
"packages": {
|
||||
"": {
|
||||
"name": "@add-ideas/toolbox-portal",
|
||||
"version": "0.2.6",
|
||||
"version": "0.2.13",
|
||||
"license": "AGPL-3.0-only",
|
||||
"dependencies": {
|
||||
"@add-ideas/toolbox-contract": "^0.2.2",
|
||||
"@add-ideas/toolbox-shell-react": "^0.2.2",
|
||||
"@add-ideas/toolbox-contract": "^0.2.3",
|
||||
"@add-ideas/toolbox-shell-react": "^0.2.3",
|
||||
"@dnd-kit/core": "^6.3.1",
|
||||
"@dnd-kit/sortable": "^10.0.0",
|
||||
"@dnd-kit/utilities": "^3.2.2",
|
||||
@@ -44,18 +44,18 @@
|
||||
}
|
||||
},
|
||||
"node_modules/@add-ideas/toolbox-contract": {
|
||||
"version": "0.2.2",
|
||||
"resolved": "https://git.add-ideas.de/api/packages/zemion/npm/%40add-ideas%2Ftoolbox-contract/-/0.2.2/toolbox-contract-0.2.2.tgz",
|
||||
"integrity": "sha512-VcZ8j4O2PgFaIYgxs6r9u0uPxA+hHKwhCW+omfeVCtbjAAYhH2KhRlBGm0ERVVYcK5kchyzZLXrC4LKWRotVzg==",
|
||||
"version": "0.2.3",
|
||||
"resolved": "https://git.add-ideas.de/api/packages/lotobo/npm/%40add-ideas%2Ftoolbox-contract/-/0.2.3/toolbox-contract-0.2.3.tgz",
|
||||
"integrity": "sha512-T0PVSuMT40GjTDfQJhEEY3ZawQq8zz1/ry95JdKI6W39CdLacaRXdGnEpDCMHt+jUbf1Jz7Nat/M5dFCgKVM9A==",
|
||||
"license": "Apache-2.0"
|
||||
},
|
||||
"node_modules/@add-ideas/toolbox-shell-react": {
|
||||
"version": "0.2.2",
|
||||
"resolved": "https://git.add-ideas.de/api/packages/zemion/npm/%40add-ideas%2Ftoolbox-shell-react/-/0.2.2/toolbox-shell-react-0.2.2.tgz",
|
||||
"integrity": "sha512-w/xbLCd50a2Jq7vQ9Z9ygUOuqlOCRkIYlk4vSJx0mf4REJNeMYi3PE2MbaLUC4DkQWyrmatsa5HNT89o0l91BA==",
|
||||
"version": "0.2.3",
|
||||
"resolved": "https://git.add-ideas.de/api/packages/lotobo/npm/%40add-ideas%2Ftoolbox-shell-react/-/0.2.3/toolbox-shell-react-0.2.3.tgz",
|
||||
"integrity": "sha512-DT5lQDH48BFkFcmFLZnQh7+Cm73JzBPcmp5WzUXypfkUXpEyDYHzaXgmW4kZ0edSwh4RK4sPmx+JPtK0X4aKCQ==",
|
||||
"license": "Apache-2.0",
|
||||
"dependencies": {
|
||||
"@add-ideas/toolbox-contract": "0.2.2"
|
||||
"@add-ideas/toolbox-contract": "0.2.3"
|
||||
},
|
||||
"peerDependencies": {
|
||||
"react": ">=18 <20",
|
||||
|
||||
+11
-3
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "@add-ideas/toolbox-portal",
|
||||
"version": "0.2.6",
|
||||
"version": "0.2.13",
|
||||
"license": "AGPL-3.0-only",
|
||||
"private": true,
|
||||
"type": "module",
|
||||
@@ -21,8 +21,8 @@
|
||||
"package:static": "node scripts/package-static.mjs"
|
||||
},
|
||||
"dependencies": {
|
||||
"@add-ideas/toolbox-contract": "^0.2.2",
|
||||
"@add-ideas/toolbox-shell-react": "^0.2.2",
|
||||
"@add-ideas/toolbox-contract": "^0.2.3",
|
||||
"@add-ideas/toolbox-shell-react": "^0.2.3",
|
||||
"@dnd-kit/core": "^6.3.1",
|
||||
"@dnd-kit/sortable": "^10.0.0",
|
||||
"@dnd-kit/utilities": "^3.2.2",
|
||||
@@ -53,5 +53,13 @@
|
||||
},
|
||||
"engines": {
|
||||
"node": ">=22"
|
||||
},
|
||||
"repository": {
|
||||
"type": "git",
|
||||
"url": "git+https://git.add-ideas.de/lotobo/toolbox-portal.git"
|
||||
},
|
||||
"homepage": "https://git.add-ideas.de/lotobo/toolbox-portal",
|
||||
"bugs": {
|
||||
"url": "https://git.add-ideas.de/lotobo/toolbox-portal/issues"
|
||||
}
|
||||
}
|
||||
|
||||
+2
-2
@@ -1,8 +1,8 @@
|
||||
# Corresponding source
|
||||
|
||||
The source code corresponding to add·ideas Toolbox Portal 0.2.6 is available at:
|
||||
The source code corresponding to add·ideas Toolbox Portal 0.2.13 is available at:
|
||||
|
||||
https://git.add-ideas.de/zemion/toolbox-portal/src/tag/v0.7.0
|
||||
https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.11.0
|
||||
|
||||
Each bundled application contains its own `SOURCE.md`, license, and third-party
|
||||
license materials. The application sources are also linked from the portal.
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
{
|
||||
"$schema": "https://git.add-ideas.de/zemion/toolbox-sdk/raw/branch/main/schemas/toolbox-catalog.v1.schema.json",
|
||||
"$schema": "https://git.add-ideas.de/lotobo/toolbox-sdk/raw/branch/main/schemas/toolbox-catalog.v1.schema.json",
|
||||
"schemaVersion": 1,
|
||||
"id": "de.add-ideas.toolbox",
|
||||
"name": "add·ideas Toolbox",
|
||||
@@ -28,6 +28,14 @@
|
||||
{
|
||||
"manifest": "./apps/regex/toolbox-app.json",
|
||||
"enabled": true
|
||||
},
|
||||
{
|
||||
"manifest": "./apps/svg/toolbox-app.json",
|
||||
"enabled": true
|
||||
},
|
||||
{
|
||||
"manifest": "./apps/auth/toolbox-app.json",
|
||||
"enabled": true
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
||||
"$id": "https://git.add-ideas.de/zemion/toolbox-portal/raw/branch/main/release/toolbox-release-lock.schema.json",
|
||||
"$id": "https://git.add-ideas.de/lotobo/toolbox-portal/raw/branch/main/release/toolbox-release-lock.schema.json",
|
||||
"title": "add·ideas Toolbox release lock v1",
|
||||
"description": "Pins the exact portal and checksummed application archives used to assemble one static toolbox release.",
|
||||
"type": "object",
|
||||
|
||||
@@ -1,8 +1,8 @@
|
||||
{
|
||||
"$schema": "./toolbox-release-lock.schema.json",
|
||||
"schemaVersion": 1,
|
||||
"releaseVersion": "0.7.0",
|
||||
"portalVersion": "0.2.6",
|
||||
"releaseVersion": "0.11.0",
|
||||
"portalVersion": "0.2.13",
|
||||
"catalogue": {
|
||||
"id": "de.add-ideas.toolbox",
|
||||
"name": "add·ideas Toolbox",
|
||||
@@ -15,38 +15,52 @@
|
||||
"apps": [
|
||||
{
|
||||
"id": "de.add-ideas.pdf-tools",
|
||||
"version": "0.4.3",
|
||||
"artifact": "https://git.add-ideas.de/zemion/pdf-tools/releases/download/v0.4.3/pdf-tools-0.4.3.zip",
|
||||
"sha256": "f2dfd3bade49a4b8be9c0c54c6c2bf1bbb153fc0505a38af14de5ab52d5183cf",
|
||||
"version": "0.4.4",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/pdf-tools/releases/download/v0.4.4/pdf-tools-0.4.4.zip",
|
||||
"sha256": "fa93c4c004be74d6a1f68f62a0f64f44c99218f387441ca3630a7f5af3c09d7d",
|
||||
"target": "pdf"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.xslt-tools",
|
||||
"version": "0.4.2",
|
||||
"artifact": "https://git.add-ideas.de/zemion/xslt-tools/releases/download/v0.4.2/xslt-tools-0.4.2.zip",
|
||||
"sha256": "daaa821c10c6c6285f97128ba3d923e48efa24449f1fb0a21bf478abaf27499f",
|
||||
"version": "0.4.3",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/xslt-tools/releases/download/v0.4.3/xslt-tools-0.4.3.zip",
|
||||
"sha256": "e44012af214d24e3d97d10a6017fa3d9dbf063de36673ab04dd15a0a8643afcc",
|
||||
"target": "xslt"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.onenote-tools",
|
||||
"version": "0.3.3",
|
||||
"artifact": "https://git.add-ideas.de/zemion/onenote-tools/releases/download/v0.3.3/onenote-tools-0.3.3.zip",
|
||||
"sha256": "37c0ef7cdc7f435d0d4f5a341523f4e522118d5b258c374b5a7ef7b8e6c27cec",
|
||||
"version": "0.3.4",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/onenote-tools/releases/download/v0.3.4/onenote-tools-0.3.4.zip",
|
||||
"sha256": "c0ed791d1ae64fdf6a90bceebf97a7a3252989f2434204d009f87f5a2d1cc341",
|
||||
"target": "onenote"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.av-tools",
|
||||
"version": "0.2.0",
|
||||
"artifact": "https://git.add-ideas.de/zemion/av-tools/releases/download/v0.2.0/av-tools-0.2.0.zip",
|
||||
"sha256": "40f9e7f48617930ddcba25538bd12d0a24197c7c4824989f20fd23fd25349a54",
|
||||
"version": "0.3.0",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/av-tools/releases/download/v0.3.0/av-tools-0.3.0.zip",
|
||||
"sha256": "3476c5d43ae43ce66b5aeebe8c11334f7cd4d153586348b72f10bfbdbada9be7",
|
||||
"target": "av"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.regex-tools",
|
||||
"version": "0.2.0",
|
||||
"artifact": "https://git.add-ideas.de/zemion/regex-tools/releases/download/v0.2.0/regex-tools-0.2.0.zip",
|
||||
"sha256": "b65820ee0913f352d4fad8aacc5b62eed8b3328957e3f4c4d7bee722e6537acd",
|
||||
"version": "0.4.2",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/regex-tools/releases/download/v0.4.2/regex-tools-0.4.2.zip",
|
||||
"sha256": "a3e7342d1f0746aa9c88e6568e7fbc04ab429c94604ba5fb1094ffdb096a54fe",
|
||||
"target": "regex"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.svg-tools",
|
||||
"version": "0.1.0",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/svg-tools/releases/download/v0.1.0/svg-tools-0.1.0.zip",
|
||||
"sha256": "364f14c88c4934d9c847bf76de70b89dcf564a405afd58c6703363a95fbfb6ae",
|
||||
"target": "svg"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.auth-tools",
|
||||
"version": "0.1.0",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.1.0/auth-tools-0.1.0.zip",
|
||||
"sha256": "1f65f07e2d89c1ff115ae276542f406277fc01c85e8845648522708a9c8f3f18",
|
||||
"target": "auth"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
+31
-17
@@ -1,8 +1,8 @@
|
||||
{
|
||||
"$schema": "./toolbox-release-lock.schema.json",
|
||||
"schemaVersion": 1,
|
||||
"releaseVersion": "0.7.0",
|
||||
"portalVersion": "0.2.6",
|
||||
"releaseVersion": "0.11.0",
|
||||
"portalVersion": "0.2.13",
|
||||
"catalogue": {
|
||||
"id": "de.add-ideas.toolbox",
|
||||
"name": "add·ideas Toolbox",
|
||||
@@ -15,38 +15,52 @@
|
||||
"apps": [
|
||||
{
|
||||
"id": "de.add-ideas.pdf-tools",
|
||||
"version": "0.4.3",
|
||||
"artifact": "https://git.add-ideas.de/zemion/pdf-tools/releases/download/v0.4.3/pdf-tools-0.4.3.zip",
|
||||
"sha256": "f2dfd3bade49a4b8be9c0c54c6c2bf1bbb153fc0505a38af14de5ab52d5183cf",
|
||||
"version": "0.4.4",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/pdf-tools/releases/download/v0.4.4/pdf-tools-0.4.4.zip",
|
||||
"sha256": "fa93c4c004be74d6a1f68f62a0f64f44c99218f387441ca3630a7f5af3c09d7d",
|
||||
"target": "pdf"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.xslt-tools",
|
||||
"version": "0.4.2",
|
||||
"artifact": "https://git.add-ideas.de/zemion/xslt-tools/releases/download/v0.4.2/xslt-tools-0.4.2.zip",
|
||||
"sha256": "daaa821c10c6c6285f97128ba3d923e48efa24449f1fb0a21bf478abaf27499f",
|
||||
"version": "0.4.3",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/xslt-tools/releases/download/v0.4.3/xslt-tools-0.4.3.zip",
|
||||
"sha256": "e44012af214d24e3d97d10a6017fa3d9dbf063de36673ab04dd15a0a8643afcc",
|
||||
"target": "xslt"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.onenote-tools",
|
||||
"version": "0.3.3",
|
||||
"artifact": "https://git.add-ideas.de/zemion/onenote-tools/releases/download/v0.3.3/onenote-tools-0.3.3.zip",
|
||||
"sha256": "37c0ef7cdc7f435d0d4f5a341523f4e522118d5b258c374b5a7ef7b8e6c27cec",
|
||||
"version": "0.3.4",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/onenote-tools/releases/download/v0.3.4/onenote-tools-0.3.4.zip",
|
||||
"sha256": "c0ed791d1ae64fdf6a90bceebf97a7a3252989f2434204d009f87f5a2d1cc341",
|
||||
"target": "onenote"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.av-tools",
|
||||
"version": "0.2.0",
|
||||
"artifact": "https://git.add-ideas.de/zemion/av-tools/releases/download/v0.2.0/av-tools-0.2.0.zip",
|
||||
"sha256": "40f9e7f48617930ddcba25538bd12d0a24197c7c4824989f20fd23fd25349a54",
|
||||
"version": "0.3.0",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/av-tools/releases/download/v0.3.0/av-tools-0.3.0.zip",
|
||||
"sha256": "3476c5d43ae43ce66b5aeebe8c11334f7cd4d153586348b72f10bfbdbada9be7",
|
||||
"target": "av"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.regex-tools",
|
||||
"version": "0.2.0",
|
||||
"artifact": "https://git.add-ideas.de/zemion/regex-tools/releases/download/v0.2.0/regex-tools-0.2.0.zip",
|
||||
"sha256": "b65820ee0913f352d4fad8aacc5b62eed8b3328957e3f4c4d7bee722e6537acd",
|
||||
"version": "0.4.2",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/regex-tools/releases/download/v0.4.2/regex-tools-0.4.2.zip",
|
||||
"sha256": "a3e7342d1f0746aa9c88e6568e7fbc04ab429c94604ba5fb1094ffdb096a54fe",
|
||||
"target": "regex"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.svg-tools",
|
||||
"version": "0.1.0",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/svg-tools/releases/download/v0.1.0/svg-tools-0.1.0.zip",
|
||||
"sha256": "364f14c88c4934d9c847bf76de70b89dcf564a405afd58c6703363a95fbfb6ae",
|
||||
"target": "svg"
|
||||
},
|
||||
{
|
||||
"id": "de.add-ideas.auth-tools",
|
||||
"version": "0.1.0",
|
||||
"artifact": "https://git.add-ideas.de/lotobo/auth-tools/releases/download/v0.1.0/auth-tools-0.1.0.zip",
|
||||
"sha256": "1f65f07e2d89c1ff115ae276542f406277fc01c85e8845648522708a9c8f3f18",
|
||||
"target": "auth"
|
||||
}
|
||||
]
|
||||
}
|
||||
|
||||
@@ -83,7 +83,7 @@ function makeLock(artifact: string, sha256: string) {
|
||||
return {
|
||||
schemaVersion: 1,
|
||||
releaseVersion: '0.1.0',
|
||||
portalVersion: '0.2.6',
|
||||
portalVersion: '0.2.13',
|
||||
catalogue: {
|
||||
id: 'de.add-ideas.toolbox',
|
||||
name: 'Test Toolbox',
|
||||
|
||||
@@ -62,11 +62,14 @@ describe('production deployment', () => {
|
||||
/^TOOLBOX_RELEASE_SHA256=([a-f0-9]{64})$/mu
|
||||
)?.[1];
|
||||
const localImageVersion = composeExample.match(
|
||||
/^\s+image: git\.add-ideas\.de\/zemion\/toolbox:(\S+)$/mu
|
||||
/^\s+image: git\.add-ideas\.de\/lotobo\/toolbox:(\S+)$/mu
|
||||
)?.[1];
|
||||
|
||||
expect(containerVersion).toBe(releaseLock.releaseVersion);
|
||||
expect(composeVersion).toBe(containerVersion);
|
||||
expect(containerChecksum).toMatch(/^[a-f0-9]{64}$/u);
|
||||
expect(composeChecksum).toMatch(/^[a-f0-9]{64}$/u);
|
||||
expect(environmentChecksum).toMatch(/^[a-f0-9]{64}$/u);
|
||||
expect(composeChecksum).toBe(containerChecksum);
|
||||
expect(environmentVersion).toBe(containerVersion);
|
||||
expect(environmentChecksum).toBe(containerChecksum);
|
||||
@@ -82,7 +85,15 @@ describe('production deployment', () => {
|
||||
expect(containerfile).toContain(
|
||||
'COPY --from=release --chown=101:101 /tmp/toolbox/'
|
||||
);
|
||||
for (const app of ['pdf', 'xslt', 'onenote', 'av', 'regex']) {
|
||||
for (const app of [
|
||||
'pdf',
|
||||
'xslt',
|
||||
'onenote',
|
||||
'av',
|
||||
'regex',
|
||||
'svg',
|
||||
'auth',
|
||||
]) {
|
||||
expect(containerfile).toContain(
|
||||
`test -f /tmp/toolbox/apps/${app}/toolbox-app.json`
|
||||
);
|
||||
@@ -130,6 +141,31 @@ describe('production deployment', () => {
|
||||
expect(compose).not.toMatch(/^\s+ports:/mu);
|
||||
});
|
||||
|
||||
it('isolates live WebAuthn behind a dedicated hostname and path prefix', () => {
|
||||
expect(environmentExample).toContain(
|
||||
'AUTH_TOOLS_HOST=auth.toolbox.add-ideas.de'
|
||||
);
|
||||
expect(compose).toContain(
|
||||
'traefik.http.routers.addideas-auth.rule: "Host(`${AUTH_TOOLS_HOST:-auth.toolbox.add-ideas.de}`)"'
|
||||
);
|
||||
expect(compose).toContain(
|
||||
'traefik.http.routers.addideas-auth.entrypoints: websecure'
|
||||
);
|
||||
expect(compose).toContain(
|
||||
'traefik.http.routers.addideas-auth.tls.certresolver: "${TRAEFIK_CERT_RESOLVER:-netcup}"'
|
||||
);
|
||||
expect(compose).toContain(
|
||||
'traefik.http.routers.addideas-auth.middlewares: addideas-auth-prefix'
|
||||
);
|
||||
expect(compose).toContain(
|
||||
'traefik.http.middlewares.addideas-auth-prefix.addprefix.prefix: /apps/auth'
|
||||
);
|
||||
expect(compose).toContain(
|
||||
'traefik.http.routers.addideas-auth-http.middlewares: addideas-toolbox-https-redirect'
|
||||
);
|
||||
expect(compose).not.toContain('addideas-auth-stripprefix');
|
||||
});
|
||||
|
||||
it('quotes nginx regular expressions that contain brace quantifiers', () => {
|
||||
expect(nginxConfig).toContain(
|
||||
'"~^/(?:.*/)?assets/.*-[A-Za-z0-9_-]{8,}\\.[^/]+$"'
|
||||
@@ -193,10 +229,46 @@ describe('production deployment', () => {
|
||||
);
|
||||
});
|
||||
|
||||
it('serves ES modules as JavaScript before the broad static location', () => {
|
||||
const moduleLocation =
|
||||
/location ~\* \\\.mjs\$\s*\{\s*types\s*\{\s*application\/javascript mjs;\s*\}\s*try_files \$uri =404;\s*\}/mu;
|
||||
const moduleLocationIndex = nginxConfig.search(moduleLocation);
|
||||
const staticLocationIndex = nginxConfig.search(
|
||||
/location ~\* \\\.\(\?:css\|js\|mjs\|/u
|
||||
);
|
||||
|
||||
expect(moduleLocationIndex).toBeGreaterThanOrEqual(0);
|
||||
expect(staticLocationIndex).toBeGreaterThan(moduleLocationIndex);
|
||||
});
|
||||
|
||||
it('allows same-origin WebAssembly workers and local blob media previews', () => {
|
||||
expect(nginxConfig).toContain("script-src 'self' 'wasm-unsafe-eval'");
|
||||
expect(nginxConfig).toContain("worker-src 'self' blob:");
|
||||
expect(nginxConfig).toContain("media-src 'self' blob:");
|
||||
expect(nginxConfig).not.toContain("'unsafe-eval'");
|
||||
});
|
||||
|
||||
it('grants only the sandboxed SVG canvas controller cross-origin loading headers', () => {
|
||||
expect(nginxConfig).toMatch(
|
||||
/map \$uri \$toolbox_resource_policy\s*\{\s*default "same-origin";\s*"\/apps\/svg\/canvas-frame-controller\.js" "cross-origin";\s*\}/mu
|
||||
);
|
||||
expect(nginxConfig).toMatch(
|
||||
/map \$uri \$toolbox_access_control_allow_origin\s*\{\s*default "";\s*"\/apps\/svg\/canvas-frame-controller\.js" "\*";\s*\}/mu
|
||||
);
|
||||
expect(nginxConfig).toContain(
|
||||
'add_header Cross-Origin-Resource-Policy $toolbox_resource_policy always;'
|
||||
);
|
||||
expect(nginxConfig).toContain(
|
||||
'add_header Access-Control-Allow-Origin $toolbox_access_control_allow_origin always;'
|
||||
);
|
||||
expect(nginxConfig).not.toMatch(
|
||||
/location[^\n{]*canvas-frame-controller[^\n{]*\{/u
|
||||
);
|
||||
expect(
|
||||
nginxConfig.match(/^\s*add_header X-Content-Type-Options /gmu)
|
||||
).toHaveLength(1);
|
||||
expect(
|
||||
nginxConfig.match(/^\s*add_header Content-Security-Policy /gmu)
|
||||
).toHaveLength(1);
|
||||
});
|
||||
});
|
||||
|
||||
@@ -131,7 +131,7 @@ export function buildCatalogue(lock) {
|
||||
};
|
||||
return {
|
||||
$schema:
|
||||
'https://git.add-ideas.de/zemion/toolbox-sdk/raw/branch/main/schemas/toolbox-catalog.v1.schema.json',
|
||||
'https://git.add-ideas.de/lotobo/toolbox-sdk/raw/branch/main/schemas/toolbox-catalog.v1.schema.json',
|
||||
...parseToolboxCatalog(catalogue),
|
||||
};
|
||||
}
|
||||
|
||||
+15
-5
@@ -42,6 +42,12 @@ describe('portal UI', () => {
|
||||
expect(
|
||||
screen.getByTestId('app-card-de.add-ideas.onenote-tools')
|
||||
).toHaveTextContent('OneNote');
|
||||
expect(
|
||||
screen.getByTestId('app-card-de.add-ideas.svg-tools')
|
||||
).toHaveTextContent('SVG');
|
||||
expect(
|
||||
screen.getByTestId('app-card-de.add-ideas.auth-tools')
|
||||
).toHaveTextContent('OTP & Passkeys');
|
||||
expect(
|
||||
screen.queryByText(
|
||||
'Page-level PDF operations performed locally in the browser.'
|
||||
@@ -143,9 +149,7 @@ describe('portal UI', () => {
|
||||
expect(within(card).getByRole('heading', { level: 3 })).toHaveTextContent(
|
||||
'Regex'
|
||||
);
|
||||
expect(
|
||||
within(card).getByText('Explain and test regex locally.')
|
||||
).toBeVisible();
|
||||
expect(within(card).getByText('Explain and test locally.')).toBeVisible();
|
||||
});
|
||||
|
||||
it('moves the full disclosure into an accessible modal', async () => {
|
||||
@@ -181,7 +185,7 @@ describe('portal UI', () => {
|
||||
});
|
||||
expect(sourceLink).toHaveAttribute(
|
||||
'href',
|
||||
'https://git.add-ideas.de/zemion/pdf-tools'
|
||||
'https://git.add-ideas.de/lotobo/pdf-tools'
|
||||
);
|
||||
expect(sourceLink).toHaveAttribute('rel', 'noopener noreferrer');
|
||||
expect(
|
||||
@@ -409,6 +413,8 @@ describe('portal UI', () => {
|
||||
'de.add-ideas.pdf-tools',
|
||||
'de.add-ideas.xslt-tools',
|
||||
'de.add-ideas.onenote-tools',
|
||||
'de.add-ideas.svg-tools',
|
||||
'de.add-ideas.auth-tools',
|
||||
],
|
||||
hidden: [],
|
||||
theme: 'light',
|
||||
@@ -426,6 +432,8 @@ describe('portal UI', () => {
|
||||
screen.getByTestId('app-card-de.add-ideas.pdf-tools'),
|
||||
screen.getByTestId('app-card-de.add-ideas.xslt-tools'),
|
||||
screen.getByTestId('app-card-de.add-ideas.onenote-tools'),
|
||||
screen.getByTestId('app-card-de.add-ideas.svg-tools'),
|
||||
screen.getByTestId('app-card-de.add-ideas.auth-tools'),
|
||||
];
|
||||
cards.forEach((card, index) => {
|
||||
const rect = {
|
||||
@@ -456,7 +464,7 @@ describe('portal UI', () => {
|
||||
within(tools)
|
||||
.getAllByRole('heading', { level: 3 })
|
||||
.map((heading) => heading.textContent)
|
||||
).toEqual(['XSLT', 'PDF', 'OneNote']);
|
||||
).toEqual(['XSLT', 'PDF', 'OneNote', 'SVG', 'OTP & Passkeys']);
|
||||
});
|
||||
expect(
|
||||
JSON.parse(localStorage.getItem(PREFERENCES_KEY) ?? '{}').order
|
||||
@@ -464,6 +472,8 @@ describe('portal UI', () => {
|
||||
'de.add-ideas.xslt-tools',
|
||||
'de.add-ideas.pdf-tools',
|
||||
'de.add-ideas.onenote-tools',
|
||||
'de.add-ideas.svg-tools',
|
||||
'de.add-ideas.auth-tools',
|
||||
]);
|
||||
});
|
||||
|
||||
|
||||
+3
-3
@@ -28,7 +28,7 @@ import type { LoadedCatalogue, ResolvedApp } from './types';
|
||||
import { usePreferences } from './usePreferences';
|
||||
|
||||
const CATALOGUE_HREF = './toolbox.catalog.json';
|
||||
const PORTAL_SOURCE = 'https://git.add-ideas.de/zemion/toolbox-portal';
|
||||
const PORTAL_SOURCE = 'https://git.add-ideas.de/lotobo/toolbox-portal';
|
||||
|
||||
type LoadState =
|
||||
| { status: 'loading' }
|
||||
@@ -489,9 +489,9 @@ export default function App() {
|
||||
</span>
|
||||
</p>
|
||||
<span>
|
||||
Portal v0.2.6 ·{' '}
|
||||
Portal v0.2.13 ·{' '}
|
||||
<a
|
||||
href="https://git.add-ideas.de/zemion/toolbox-portal/src/tag/v0.7.0"
|
||||
href="https://git.add-ideas.de/lotobo/toolbox-portal/src/tag/v0.11.0"
|
||||
target="_blank"
|
||||
rel="noopener noreferrer"
|
||||
>
|
||||
|
||||
@@ -10,12 +10,12 @@ describe('catalogue loading', () => {
|
||||
const loaded = await loadCatalogue('/toolbox.catalog.json');
|
||||
expect(loaded.catalogue.name).toBe('add·ideas Toolbox');
|
||||
expect(loaded.homeUrl).toBe('http://localhost:3000/');
|
||||
expect(loaded.apps).toHaveLength(3);
|
||||
expect(loaded.apps).toHaveLength(5);
|
||||
expect(loaded.apps[0]).toMatchObject({
|
||||
id: 'de.add-ideas.pdf-tools',
|
||||
name: 'PDF Workbench',
|
||||
entryUrl: 'http://localhost:3000/apps/pdf/',
|
||||
sourceUrl: 'https://git.add-ideas.de/zemion/pdf-tools',
|
||||
sourceUrl: 'https://git.add-ideas.de/lotobo/pdf-tools',
|
||||
});
|
||||
});
|
||||
|
||||
@@ -40,6 +40,8 @@ describe('catalogue loading', () => {
|
||||
'de.add-ideas.pdf-tools',
|
||||
'de.add-ideas.xslt-tools',
|
||||
'de.add-ideas.onenote-tools',
|
||||
'de.add-ideas.svg-tools',
|
||||
'de.add-ideas.auth-tools',
|
||||
]);
|
||||
expect(loaded.unavailable).toHaveLength(1);
|
||||
expect(loaded.unavailable[0]?.reason).toMatch(/HTTP 404/);
|
||||
|
||||
+84
-5
@@ -30,7 +30,7 @@ export const pdfManifest: ToolboxAppManifest = {
|
||||
telemetry: false,
|
||||
},
|
||||
source: {
|
||||
repository: 'https://git.add-ideas.de/zemion/pdf-tools',
|
||||
repository: 'https://git.add-ideas.de/lotobo/pdf-tools',
|
||||
license: 'AGPL-3.0-only',
|
||||
},
|
||||
};
|
||||
@@ -45,7 +45,7 @@ export const xsltManifest: ToolboxAppManifest = {
|
||||
categories: ['documents', 'developer'],
|
||||
tags: ['transform', 'xml'],
|
||||
source: {
|
||||
repository: 'https://git.add-ideas.de/zemion/xslt-tools',
|
||||
repository: 'https://git.add-ideas.de/lotobo/xslt-tools',
|
||||
license: 'AGPL-3.0-only',
|
||||
},
|
||||
};
|
||||
@@ -60,7 +60,7 @@ export const onenoteManifest: ToolboxAppManifest = {
|
||||
categories: ['documents', 'notes'],
|
||||
tags: ['onepkg', 'import'],
|
||||
source: {
|
||||
repository: 'https://git.add-ideas.de/zemion/onenote-tools',
|
||||
repository: 'https://git.add-ideas.de/lotobo/onenote-tools',
|
||||
license: 'AGPL-3.0-only',
|
||||
},
|
||||
};
|
||||
@@ -69,7 +69,7 @@ export const regexManifest: ToolboxAppManifest = {
|
||||
...pdfManifest,
|
||||
id: 'de.add-ideas.regex-tools',
|
||||
name: 'Regex Tools',
|
||||
version: '0.1.0',
|
||||
version: '0.4.1',
|
||||
description:
|
||||
'Develop, explain, test and apply regular expressions locally in the browser.',
|
||||
icon: './regex.svg',
|
||||
@@ -82,7 +82,80 @@ export const regexManifest: ToolboxAppManifest = {
|
||||
crossOriginIsolated: false,
|
||||
},
|
||||
source: {
|
||||
repository: 'https://git.add-ideas.de/zemion/regex-tools',
|
||||
repository: 'https://git.add-ideas.de/lotobo/regex-tools',
|
||||
license: 'GPL-3.0-or-later',
|
||||
},
|
||||
};
|
||||
|
||||
export const svgManifest: ToolboxAppManifest = {
|
||||
...pdfManifest,
|
||||
id: 'de.add-ideas.svg-tools',
|
||||
name: 'SVG Tools',
|
||||
version: '0.1.0',
|
||||
description:
|
||||
'Inspect, edit, optimize and transform SVG documents locally in the browser.',
|
||||
icon: './favicon.svg',
|
||||
categories: ['graphics', 'design', 'developer'],
|
||||
tags: [
|
||||
'svg',
|
||||
'vector',
|
||||
'path',
|
||||
'xml',
|
||||
'transform',
|
||||
'optimize',
|
||||
'accessibility',
|
||||
],
|
||||
requirements: {
|
||||
secureContext: false,
|
||||
workers: true,
|
||||
indexedDb: false,
|
||||
crossOriginIsolated: false,
|
||||
topLevelContext: false,
|
||||
},
|
||||
source: {
|
||||
repository: 'https://git.add-ideas.de/lotobo/svg-tools',
|
||||
license: 'GPL-3.0-or-later',
|
||||
},
|
||||
assets: ['./canvas-frame-controller.js'],
|
||||
};
|
||||
|
||||
export const authManifest: ToolboxAppManifest = {
|
||||
...pdfManifest,
|
||||
id: 'de.add-ideas.auth-tools',
|
||||
name: 'OTP & Passkey Tools',
|
||||
version: '0.1.0',
|
||||
description:
|
||||
'Generate, inspect and verify OTP credentials and test WebAuthn/passkey ceremonies locally in the browser.',
|
||||
icon: './favicon.svg',
|
||||
categories: ['security', 'authentication', 'developer'],
|
||||
tags: [
|
||||
'otp',
|
||||
'hotp',
|
||||
'totp',
|
||||
'ocra',
|
||||
'oath',
|
||||
'webauthn',
|
||||
'fido2',
|
||||
'passkey',
|
||||
'attestation',
|
||||
'assertion',
|
||||
],
|
||||
requirements: {
|
||||
secureContext: true,
|
||||
workers: false,
|
||||
indexedDb: false,
|
||||
crossOriginIsolated: false,
|
||||
topLevelContext: true,
|
||||
},
|
||||
privacy: {
|
||||
processing: 'local',
|
||||
fileUploads: false,
|
||||
telemetry: false,
|
||||
label:
|
||||
'Authentication material stays in this tab; nothing is uploaded or saved unless you explicitly export it.',
|
||||
},
|
||||
source: {
|
||||
repository: 'https://git.add-ideas.de/lotobo/auth-tools',
|
||||
license: 'GPL-3.0-or-later',
|
||||
},
|
||||
};
|
||||
@@ -97,6 +170,8 @@ export const catalogue: ToolboxCatalog = {
|
||||
{ manifest: './apps/pdf/toolbox-app.json', enabled: true },
|
||||
{ manifest: './apps/xslt/toolbox-app.json', enabled: true },
|
||||
{ manifest: './apps/onenote/toolbox-app.json', enabled: true },
|
||||
{ manifest: './apps/svg/toolbox-app.json', enabled: true },
|
||||
{ manifest: './apps/auth/toolbox-app.json', enabled: true },
|
||||
],
|
||||
};
|
||||
|
||||
@@ -118,6 +193,10 @@ export function catalogueFetch(overrides: Record<string, Response> = {}) {
|
||||
return Response.json(onenoteManifest);
|
||||
if (url.pathname.endsWith('/apps/regex/toolbox-app.json'))
|
||||
return Response.json(regexManifest);
|
||||
if (url.pathname.endsWith('/apps/svg/toolbox-app.json'))
|
||||
return Response.json(svgManifest);
|
||||
if (url.pathname.endsWith('/apps/auth/toolbox-app.json'))
|
||||
return Response.json(authManifest);
|
||||
return new Response('Not found', { status: 404 });
|
||||
};
|
||||
}
|
||||
|
||||
@@ -0,0 +1,55 @@
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import { shortToolDescription, shortToolTitle } from './toolPresentation';
|
||||
import type { ResolvedApp } from './types';
|
||||
|
||||
function app(id: string, name: string, description: string): ResolvedApp {
|
||||
return { id, name, description } as ResolvedApp;
|
||||
}
|
||||
|
||||
describe('compact tool presentation', () => {
|
||||
it('uses the requested Audio & Video tile copy', () => {
|
||||
const audioVideo = app(
|
||||
'de.add-ideas.av-tools',
|
||||
'Audio & Video Tools',
|
||||
'Convert and lightly edit audio and video locally in the browser.'
|
||||
);
|
||||
|
||||
expect(shortToolTitle(audioVideo)).toBe('Audio & Video');
|
||||
expect(shortToolDescription(audioVideo)).toBe('Convert and edit locally.');
|
||||
});
|
||||
|
||||
it('uses the requested Regex tile copy', () => {
|
||||
const regex = app(
|
||||
'de.add-ideas.regex-tools',
|
||||
'Regex Tools',
|
||||
'Develop, explain, test and apply regular expressions locally in the browser.'
|
||||
);
|
||||
|
||||
expect(shortToolTitle(regex)).toBe('Regex');
|
||||
expect(shortToolDescription(regex)).toBe('Explain and test locally.');
|
||||
});
|
||||
|
||||
it('uses the compact SVG tile copy', () => {
|
||||
const svg = app(
|
||||
'de.add-ideas.svg-tools',
|
||||
'SVG Tools',
|
||||
'Inspect, edit, optimize and transform SVG documents locally in the browser.'
|
||||
);
|
||||
|
||||
expect(shortToolTitle(svg)).toBe('SVG');
|
||||
expect(shortToolDescription(svg)).toBe('Inspect and edit vectors locally.');
|
||||
});
|
||||
|
||||
it('uses the compact authentication tile copy', () => {
|
||||
const auth = app(
|
||||
'de.add-ideas.auth-tools',
|
||||
'OTP & Passkey Tools',
|
||||
'Generate, inspect and verify OTP credentials and test WebAuthn/passkey ceremonies locally in the browser.'
|
||||
);
|
||||
|
||||
expect(shortToolTitle(auth)).toBe('OTP & Passkeys');
|
||||
expect(shortToolDescription(auth)).toBe(
|
||||
'Inspect and test authentication locally.'
|
||||
);
|
||||
});
|
||||
});
|
||||
+13
-1
@@ -13,9 +13,21 @@ const PRESENTATION: Record<string, { title: string; description: string }> = {
|
||||
title: 'OneNote',
|
||||
description: 'Open OneNote files locally.',
|
||||
},
|
||||
'de.add-ideas.av-tools': {
|
||||
title: 'Audio & Video',
|
||||
description: 'Convert and edit locally.',
|
||||
},
|
||||
'de.add-ideas.regex-tools': {
|
||||
title: 'Regex',
|
||||
description: 'Explain and test regex locally.',
|
||||
description: 'Explain and test locally.',
|
||||
},
|
||||
'de.add-ideas.svg-tools': {
|
||||
title: 'SVG',
|
||||
description: 'Inspect and edit vectors locally.',
|
||||
},
|
||||
'de.add-ideas.auth-tools': {
|
||||
title: 'OTP & Passkeys',
|
||||
description: 'Inspect and test authentication locally.',
|
||||
},
|
||||
};
|
||||
|
||||
|
||||
Reference in New Issue
Block a user