feat: publish Material Workbench v0.1.0

Author: mirror4869

.github/workflows/ci.yml

@@ -0,0 +1,55 @@
+name: CI
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  windows-tests:
+    runs-on: windows-latest
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.11", "3.13"]
+    env:
+      PYTHONUTF8: "1"
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+      - uses: actions/setup-node@v7
+        with:
+          node-version: "22"
+      - name: Install Python dependencies
+        run: python -m pip install -r requirements.txt
+      - name: Python syntax
+        run: python -m compileall -q .
+      - name: JavaScript syntax
+        run: |
+          node --check assets/js/theme-init.js
+          node --check assets/js/workbench.js
+          node --check scripts/adobe_import_bridge.mjs
+      - name: Python tests
+        run: python -m unittest discover -s tests -v
+      - name: Node bridge tests
+        run: node --test tests/node_adobe_import_bridge.test.mjs
+      - name: Synthetic first-run smoke
+        shell: pwsh
+        run: |
+          python scripts/create_demo_library.py
+          $env:MWB_CONFIG = (Resolve-Path .demo\workbench.local.json).Path
+          python scan_and_thumb.py --metadata-only
+          python scan_media.py
+          python scan_docs.py
+          @("index.json", "media.json", "docs.json") | ForEach-Object {
+            if (-not (Test-Path -LiteralPath $_ -PathType Leaf)) {
+              throw "First-run smoke did not create $_"
+            }
+          }

.gitignore

@@ -0,0 +1,59 @@
+# Runtime caches
+__pycache__/
+*.pyc
+*.pyo
+*.tmp
+/tmp/
+.venv/
+.demo/
+.coverage
+htmlcov/
+
+# Machine-local configuration and common secret containers
+/workbench.local.json
+.env
+.env.*
+!.env.example
+*.local.json
+*.pem
+*.key
+*.p12
+*.pfx
+*.crt
+*.cer
+
+# Generated indexes and mutable user/runtime data
+index.json
+media.json
+/index_backup_before_*.json
+/media_backup_before_*.json
+docs.json
+promptsref.json
+inbox.json
+last_run.json
+rescan_status.json
+dropbox_status.json
+desktop_collect_status.json
+archive_status.json
+archive_manifest.json
+project_asset_links.json
+asset_migration_journal.json
+asset_dedupe_journal.json
+user_data*.json
+docs_mounts.json
+debug_delete.log
+
+# Generated thumbnails and archives
+thumbs/
+thumbs_media/
+thumbs_refs/
+*.zip
+
+# Historical backups and logs
+zz_backups/
+zz_logs/
+zz_legacy_v1/
+zz_old_icons/
+
+# Batch tagging workspaces
+tagging_work/

AGENTS.md

@@ -0,0 +1,29 @@
+# AGENTS.md
+
+## Project scope
+
+Material Workbench is a Windows local-first media catalogue. Source code and
+static assets live in this repository; real media, user metadata, generated
+indexes, thumbnails, journals, logs, and local configuration do not.
+
+## Safety rules
+
+1. Never use a real media library in tests. Use temporary directories and
+   synthetic fixtures.
+2. Never commit or directly edit `user_data.json` or runtime journals.
+3. Existing library files must not be silently moved, renamed, overwritten, or
+   deleted.
+4. Physical changes require preview, explicit confirmation, authoritative
+   server-side revalidation, persistent recovery evidence, and rollback.
+5. Destructive and Adobe write APIs accept opaque IDs, not browser-provided
+   filesystem paths.
+6. Do not weaken reparse-point, hard-link, stale-plan, project-identity, or
+   concurrent-write guards to make a test pass.
+7. Adobe integration is optional and must fail closed when the external bridge
+   or same-project runtime guard is unavailable.
+8. Keep all text files UTF-8 and preserve stable asset ID algorithms.
+
+## Validation
+
+Run Python unittests, Node bridge tests, JavaScript syntax checks, and
+`git diff --check`. Explain any omitted check in the pull request.

ASSET_PROVENANCE.md

@@ -0,0 +1,13 @@
+# Asset Provenance
+
+The star-map background, decorative rail icons, favicon, and Windows icon files
+in this repository were created specifically for Material Workbench through a
+mix of project-authored design work and AI-assisted image generation. They are
+not copied from a stock-asset pack or from the optional Promptsref library.
+
+The project maintainer releases these repository-local visual assets under the
+same Apache-2.0 license as the source code. Generated demo media created by
+`scripts/create_demo_library.py` is also Apache-2.0 licensed.
+
+No real user media, Adobe project file, private reference-library image, or
+runtime thumbnail is included in the public repository.

CHANGELOG.md

@@ -0,0 +1,11 @@
+# Changelog
+
+All notable public-release changes are documented here.
+
+## 0.1.0 - 2026-08-11
+
+- First clean-history open-source release.
+- Added portable machine-local path configuration and relative launchers.
+- Published the local-first media catalogue, project views, intake workflow,
+  transactional storage migration, exact duplicate cleanup, and safety tests.
+- Documented the optional external Adobe bridge boundary.

CODE_OF_CONDUCT.md

@@ -0,0 +1,10 @@
+# Code of Conduct
+
+Be respectful, specific, and constructive. Harassment, discrimination, threats,
+doxxing, and publication of another person's private files or credentials are
+not acceptable.
+
+Project discussions should focus on reproducible behavior and evidence. When a
+mistake could affect user data, report it plainly and help establish a safe
+recovery path. Maintainers may edit or remove content and restrict participation
+when needed to protect contributors and users.

CONTRIBUTING.md

@@ -0,0 +1,35 @@
+# Contributing
+
+Thank you for helping improve Material Workbench.
+
+## Before changing code
+
+- Use synthetic media and temporary directories.
+- Never commit runtime JSON, thumbnails, journals, logs, tokens, private paths,
+  or real project files.
+- Keep browser requests path-free for destructive and Adobe write operations.
+- Preserve preview, explicit confirmation, final server-side validation,
+  journaling, and rollback for any operation that changes physical files.
+- Do not silently broaden supported directories or file extensions.
+
+## Development setup
+
+```powershell
+py -3 -m venv .venv
+.\.venv\Scripts\python.exe -m pip install -r requirements.txt
+```
+
+Run the complete checks before opening a pull request:
+
+```powershell
+.\.venv\Scripts\python.exe -m unittest discover -s tests -v
+node --check assets\js\theme-init.js
+node --check assets\js\workbench.js
+node --check scripts\adobe_import_bridge.mjs
+node --test tests\node_adobe_import_bridge.test.mjs
+git diff --check
+```
+
+Pull requests should explain the user-visible outcome, data-safety impact,
+rollback behavior, and tests added. File-operation changes without adversarial
+tests will not be merged.