dorfteich/packages/shared/src/fonts.ts
Claude Opus 4.8 f500198c5d
All checks were successful
CD / Build and push images (push) Successful in 3m24s
CI / Lint, typecheck, test (push) Successful in 3m6s
CI / Auth e2e pack (push) Successful in 4m8s
CI / Build container images (push) Has been skipped
CD / Deploy to Test (push) Successful in 8s
CD / Smoke tests against Test (push) Successful in 1m13s
CD / Promote to Int (push) Successful in 11s
Add per-pond fonts: catalog, build, application, and admin UI (#66)
Self-hosted Google Fonts with per-pond selection (ADR 0016), the GDPR
"zero external requests" posture (security.md, CSP `font-src 'self'`).

- Catalog: a curated 15-family OFL/Apache list in shared (family, weights,
  category, license, google-webfonts-helper id). `deploy/fonts/build-fonts.mjs`
  validates every entry has license info (fails the build otherwise),
  downloads the WOFF2 weights into apps/web/public/fonts/ (gitignored), and
  generates the @font-face stylesheet — run at image build time from the web
  Dockerfile (with retries), never from a visitor's browser.
- Application: PondFontScope sets --font-heading/body/mono (+ weights) from
  pond.settings.fonts on the editor + read view; the existing global CSS
  already reads those custom properties, so headings/body/code re-resolve to
  the pond's fonts. A pond with no settings arrives with the defaulted values
  (Roboto 400 / Roboto 200 / Fira Code), so the vision defaults always render.
- Admin UI: pond-settings 'Appearance' section — three slots (family + weight)
  with a live preview, Pond-Admin-gated (fonts added to updatePondInputSchema
  and merged in PondsService.update); a font catalog attribution page (/fonts)
  listing families and licenses. New `font` i18n namespace (de+en).
- CSP: strict Content-Security-Policy in nginx.conf (default-src 'self';
  font-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self'; …) —
  the app's scripts are all external files, inline styles cover CSS variables.
- Tests: shared catalog-integrity unit test (the invariant the build enforces);
  e2e fonts pack — no request leaves the origin when rendering a pond (the GDPR
  network assertion), a font choice applies to a page and persists, and a pond
  without settings renders the defaults.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EwZ4jR4KFAPvpjWevfUGX1
2026-07-10 11:16:29 +02:00

189 lines
5.4 KiB
TypeScript

/**
* The curated self-hosted font catalog (ADR 0016). One maintained list drives
* everything: the build step downloads these families' WOFF2 subsets into the
* web image, the pond-settings Appearance UI offers them, and the attribution
* page lists their licenses. Adding a font is a change here + an image rebuild
* — there is no runtime font management (deliberately small surface).
*
* Fonts are served only from the instance itself (`font-src 'self'`); a
* visitor's browser makes zero third-party requests (the GDPR guarantee,
* security.md).
*/
export type FontCategory = 'sans-serif' | 'serif' | 'monospace';
export type FontLicense = 'OFL-1.1' | 'Apache-2.0';
export interface FontCatalogEntry {
/** google-webfonts-helper id — the download key for the build step. */
id: string;
/** CSS `font-family` name. */
family: string;
category: FontCategory;
/** Weights downloaded and offered (a subset of what upstream provides). */
weights: number[];
license: FontLicense;
licenseUrl: string;
}
/** Every catalog entry MUST carry license info — the build step fails otherwise
* (ADR 0016). Roboto ships under Apache-2.0; the rest under the SIL OFL 1.1. */
export const FONT_CATALOG: readonly FontCatalogEntry[] = [
{
id: 'roboto',
family: 'Roboto',
category: 'sans-serif',
weights: [200, 300, 400, 500, 700],
license: 'Apache-2.0',
licenseUrl: 'https://www.apache.org/licenses/LICENSE-2.0',
},
{
id: 'open-sans',
family: 'Open Sans',
category: 'sans-serif',
weights: [300, 400, 600, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'lato',
family: 'Lato',
category: 'sans-serif',
weights: [300, 400, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'montserrat',
family: 'Montserrat',
category: 'sans-serif',
weights: [300, 400, 500, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'inter',
family: 'Inter',
category: 'sans-serif',
weights: [300, 400, 500, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'nunito',
family: 'Nunito',
category: 'sans-serif',
weights: [300, 400, 600, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'pt-sans',
family: 'PT Sans',
category: 'sans-serif',
weights: [400, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'merriweather',
family: 'Merriweather',
category: 'serif',
weights: [300, 400, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'lora',
family: 'Lora',
category: 'serif',
weights: [400, 500, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'source-serif-4',
family: 'Source Serif 4',
category: 'serif',
weights: [300, 400, 600, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'playfair-display',
family: 'Playfair Display',
category: 'serif',
weights: [400, 500, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'fira-code',
family: 'Fira Code',
category: 'monospace',
weights: [300, 400, 500, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'ibm-plex-mono',
family: 'IBM Plex Mono',
category: 'monospace',
weights: [300, 400, 500, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'jetbrains-mono',
family: 'JetBrains Mono',
category: 'monospace',
weights: [400, 500, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
{
id: 'source-code-pro',
family: 'Source Code Pro',
category: 'monospace',
weights: [400, 500, 700],
license: 'OFL-1.1',
licenseUrl: 'https://openfontlicense.org',
},
];
/** Per-vision defaults (ADR 0016) — a pond with no saved fonts renders these.
* Kept in step with `pondSettingsSchema`'s `fonts` defaults. */
export const DEFAULT_FONTS = {
heading: { family: 'Roboto', weight: 400 },
body: { family: 'Roboto', weight: 200 },
mono: { family: 'Fira Code', weight: 400 },
} as const;
/** System fallback per category — used while a WOFF2 loads and if it is absent. */
export const FONT_FALLBACKS: Readonly<Record<FontCategory, string>> = {
'sans-serif': "system-ui, -apple-system, 'Segoe UI', sans-serif",
serif: "Georgia, 'Times New Roman', serif",
monospace: "ui-monospace, 'SFMono-Regular', Menlo, monospace",
};
/** URL/file-safe slug for a family (matches the on-disk `/fonts/<slug>/` layout). */
export function fontSlug(family: string): string {
return family
.toLowerCase()
.replace(/[^a-z0-9]+/g, '-')
.replace(/(^-|-$)/g, '');
}
export function fontEntry(family: string): FontCatalogEntry | undefined {
return FONT_CATALOG.find((entry) => entry.family === family);
}
/**
* The `font-family` stack for a chosen family: the family itself (when it is in
* the catalog) ahead of the category's system fallback, so text stays readable
* before the WOFF2 loads or if the catalog font is unknown.
*/
export function fontStack(family: string): string {
const entry = fontEntry(family);
const fallback = FONT_FALLBACKS[entry?.category ?? 'sans-serif'];
return entry ? `'${family}', ${fallback}` : fallback;
}