@hexpro/qr-code-studio 0.0.0-stage → 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,53 @@
+# Changelog
+
+## 0.1.1
+
+The first release with the offline app attached on GitHub. 0.1.0 is on npm,
+but its release job ran out of time on GitHub's runners before it wrote the
+release, so its tag has none.
+
+- The offline app's Bulk tab no longer scrolls sideways at 320 pixels in
+  WebKit on Linux. A select there draws its chosen option past its own box
+  when the text is longer than the field, and that engine lets the drawing
+  widen the page even with the select's overflow hidden. Each field now puts
+  its select in a box that clips, with room for the focus ring, and the field
+  grids hold their column to the card's width. The 320 pixel check now names
+  what reaches past the window when it fails.
+- CI allows 90 minutes for the gate and 40 for the browsers, and the publish
+  job 120, which covers the whole coverage run on a GitHub runner.
+
+## 0.1.0
+
+The first published release: the library, the DOM adapters and the single-file
+offline studio. The version stays below 1.0 until the public API has been
+through api-extractor and a phone scan session has confirmed the scan check's
+thresholds on printed codes.
+
+- Encoding of QR Model 2 at versions 1 to 40, Micro QR and rectangular Micro
+  QR, with optimal segmentation across numeric, alphanumeric, byte and kanji
+  modes, ECI, FNC1 and structured append. Checked bit for bit against
+  `qrcode`, `qrcode-generator` and `bwip-js`.
+- A decoder for all three symbologies, with a strict profile held below
+  zxing-cpp and jsQR: in a nightly corpus of 20,000 damaged captures, every
+  code it reads is one they read too, apart from two cases the tests document,
+  which zxing-cpp reads with its denoiser on.
+- The scan check, which renders a design at its stated print size through
+  simulated captures (distance, focus, angle, light, glare, ink spread), judges
+  each with the strict reader, and reports the margins and the fixes that would
+  pass.
+- Versioned design JSON with migrations: 46 presets, 14 module shapes, 17
+  corner square shapes, solid and gradient fills, 12 frames with captions set in
+  a bundled font, 16 built-in icons and uploaded logos. Every entry, built in or
+  added, has to pass the same conformance rules.
+- 22 kinds of content, among them web links, Wi-Fi (WPA3, hidden networks,
+  EAP), contact cards, events, and the EPC, PIX, UPI, Swiss QR-bill and BIP21
+  payment codes, tested against vectors from their specifications. The
+  inspector names what a code holds and anything unsafe about where it leads,
+  and visits nothing.
+- Export to SVG, PNG with its physical size written in, PDF in RGB or CMYK,
+  EPS, JPEG and WebP, plus print sheets and label sheets. The same design gives
+  the same bytes in Node, Chromium, Firefox and WebKit.
+- Bulk generation from a CSV file to a ZIP of codes or a PDF of label sheets,
+  with templated content and file names, and every row checked.
+- `qr-code-studio.html`, the whole studio in one file that sends no request and
+  keeps nothing, with its library kept in a file you save.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Hex Pro
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,63 @@
-# Temporary Holding Version
+# qr-code-studio
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Make, design, check and read QR codes entirely in the browser. Nothing is
+uploaded, nothing is stored unless you ask for it, and there is no server in
+the path between a printed code and where it goes, so nothing can switch it
+off.
+
+Zero runtime dependencies. CHANGELOG.md records what each release changed.
+
+## The offline app
+
+`qr-code-studio.html` is the whole studio in one file. Download it from a
+release, open it from your own disc, and turn your network off: every part of
+it keeps working, because none of it ever needed the network.
+
+Many QR code sites sell "dynamic" codes: the code points at their server,
+which forwards to your link, and the forwarding stops when the subscription
+does, usually after the code is printed. A code made in this file holds your
+link itself. There is no server in between, so there is nothing to switch off.
+
+What it does:
+
+- Create makes a web link, text, Wi-Fi, a contact card, an email, a phone
+  call, a text message, WhatsApp, a map location or a calendar event, with more
+  kinds under one menu. Presets are drawn with your own code, and the module
+  shapes, corner squares, colours and gradients (with a contrast reading), a
+  logo, a frame with a caption and the printed size can all be changed. The
+  code is shown as a printer's proof, at its true width once the screen is
+  calibrated against a bank card.
+- Codes save as SVG, PNG, PDF, EPS, JPEG or WebP, copy to the clipboard, or
+  print at their physical size.
+- Scan reads a code from the camera, a picture or a pasted screenshot, and can
+  remake it as a code of your own.
+- Bulk turns a CSV file into a ZIP of codes or a PDF of label sheets.
+- The library keeps saved designs and brand kits in a `.qrlibrary.json` file
+  you save and open. It holds the look of a code and never what the code says.
+
+How to check what it does rather than take it on trust:
+
+- The file's first lines carry a Content-Security-Policy that names the
+  sha256 of its one script and its one stylesheet and refuses every connection
+  (`default-src 'none'`, `connect-src 'none'`). Anything added to the file after
+  it was built does not run.
+- It keeps no cookies, no local or session storage, no database and no cache.
+  The test suite opens the built file in Chromium, Firefox and WebKit, runs a
+  whole session, and checks that no request left the page and nothing was left
+  behind.
+- Each release carries a `SHA256SUMS` file and a build provenance attestation,
+  and the build is deterministic, so the file can be rebuilt from source and
+  compared. RELEASING.md has the commands.
+
+The file is also published in the npm package, as
+`@hexpro/qr-code-studio/standalone.html`. To build it from a checkout:
+
+```bash
+pnpm install --frozen-lockfile
+pnpm build:all
+open dist/qr-code-studio.html
+```
+
+Micro QR and rectangular Micro QR are offered under Encoding for printing that
+has no room for a QR code. Most phone cameras cannot read either, and the file
+says so wherever one is chosen.

package/dist/app/bulk.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Bulk: many codes from a spreadsheet, in the design from Create.
+ *
+ * The file is read here and goes nowhere. Its columns are mapped to the
+ * chosen content type's fields (a column, or a template that mixes text and
+ * columns), the plan is drawn as a preview with each row's problems beside
+ * it, and the studio's `batch` command makes a ZIP of files or a PDF of label
+ * sheets in time slices, with its progress in the snapshot.
+ *
+ * The mapping, the preview and the output choice are the command's arguments,
+ * not the document, so they live here; the rows and what became of them are
+ * the studio's.
+ */
+import type { AppContext, View } from './context.js';
+export interface BulkView extends View {
+    readonly root: HTMLElement;
+    /** A spreadsheet the person dropped anywhere on the page. */
+    readFile(file: Blob): Promise<void>;
+}
+export declare function createBulk(ctx: AppContext): BulkView;
+//# sourceMappingURL=bulk.d.ts.map

package/dist/app/bulk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk.d.ts","sourceRoot":"","sources":["../../src/app/bulk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAwBH,OAAO,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAwBrD,MAAM,WAAW,QAAS,SAAQ,IAAI;IACrC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,QAAQ,CA2lBpD"}