Modernize digi-id.io: developer-first redesign

.github/ISSUE_TEMPLATE/ecosystem-submission.yml

@@ -0,0 +1,60 @@
+name: Ecosystem submission
+description: Add a wallet, library, plugin or app that supports Digi-ID to digi-id.io/ecosystem.html
+title: "Ecosystem: <project name>"
+labels: ["ecosystem"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for building with Digi-ID! Prefer a pull request? Add an entry to `src/data/ecosystem.json` and a logo under `assets/images/ecosystem/`; CI validates it against the schema.
+  - type: input
+    id: name
+    attributes:
+      label: Project name
+      placeholder: My Wallet
+    validations:
+      required: true
+  - type: dropdown
+    id: category
+    attributes:
+      label: Category
+      options:
+        - wallet
+        - library
+        - plugin
+        - app
+    validations:
+      required: true
+  - type: textarea
+    id: description
+    attributes:
+      label: Short description (max 160 characters)
+    validations:
+      required: true
+  - type: input
+    id: url
+    attributes:
+      label: Project URL (https)
+      placeholder: https://example.com
+    validations:
+      required: true
+  - type: input
+    id: proof
+    attributes:
+      label: Proof of Digi-ID support (https)
+      description: Docs, release notes, source code or a public page where Digi-ID sign-in can be tried.
+    validations:
+      required: true
+  - type: input
+    id: logo
+    attributes:
+      label: Logo URL (SVG or PNG, max 50 KB)
+    validations:
+      required: true
+  - type: checkboxes
+    id: confirm
+    attributes:
+      label: Confirmation
+      options:
+        - label: I maintain this project or have permission to submit it, and it supports Digi-ID today.
+          required: true

.github/pull_request_template.md

@@ -0,0 +1,9 @@
+## What does this change?
+
+<!-- Describe the change. For ecosystem submissions, name the project. -->
+
+## Checklist
+
+- [ ] `npm test` passes (includes `lint:data` for `src/data/ecosystem.json`)
+- [ ] `npm run build` succeeds and affected pages look right in light and dark themes
+- [ ] Ecosystem entries: logo is in `assets/images/ecosystem/`, `proofUrl` shows current Digi-ID support

.github/workflows/ci.yml

@@ -0,0 +1,32 @@
+name: CI
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
+        with:
+          node-version: 22
+          cache: npm
+      - run: npm ci
+      - run: npm test
+      - run: npm run build
+      - run: npx playwright install --with-deps chromium
+      - run: npm run test:e2e -- --pass-with-no-tests
+      - name: Check internal links
+        uses: lycheeverse/lychee-action@v2
+        with:
+          args: --offline --no-progress --root-dir ${{ github.workspace }}/_site '_site/**/*.html'
+          fail: true
+      - name: Lighthouse budgets
+        run: npx --yes @lhci/cli@0.14 autorun --config=tests/lighthouserc.json
+      - name: Lighthouse summary
+        if: always()
+        run: node scripts/lighthouse-summary.mjs

.github/workflows/pages.yml

@@ -30,14 +30,40 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
+      - name: Setup Node
+        uses: actions/setup-node@v7
+        with:
+          node-version: 22
+          cache: npm
+      - name: Install
+        run: npm ci
+      - name: Unit tests
+        run: npm test
+      - name: Build
+        run: npm run build
+      - name: E2E tests
+        run: |
+          npx playwright install --with-deps chromium
+          npm run test:e2e -- --pass-with-no-tests
+      - name: Check internal links
+        run: npm run test:links
       - name: Setup Pages
-        uses: actions/configure-pages@v5
+        id: pages
+        uses: actions/configure-pages@v6
+      # Project sites (e.g. forks) live under /<repo>; a custom domain has an empty base path.
+      - name: Build for Pages
+        run: npm run build
+        env:
+          BASE_PATH: ${{ steps.pages.outputs.base_path }}
+      - name: Check links with base path
+        run: npm run test:links
+        env:
+          BASE_PATH: ${{ steps.pages.outputs.base_path }}
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
         with:
-          # Upload entire repository
-          path: '.'
+          path: '_site'
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

.github/workflows/publish-core.yml

@@ -0,0 +1,31 @@
+name: Publish digiid-core
+
+on:
+  push:
+    tags: ['digiid-core-v*']
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  id-token: write # npm provenance
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
+        with:
+          node-version: 22
+          cache: npm
+          registry-url: https://registry.npmjs.org
+      - run: npm ci
+      - run: npm test
+      - name: Check tag matches package version
+        if: startsWith(github.ref, 'refs/tags/')
+        run: |
+          expected="digiid-core-v$(node -p "require('./packages/digiid-core/package.json').version")"
+          [ "$GITHUB_REF_NAME" = "$expected" ] || { echo "Tag $GITHUB_REF_NAME does not match $expected"; exit 1; }
+      - run: npm publish --workspace digiid-core
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/traffic.yml

@@ -0,0 +1,41 @@
+name: Traffic snapshot
+
+# GitHub keeps only 14 days of traffic data; this records weekly snapshots for the SC-006 baseline.
+# Needs a TRAFFIC_TOKEN secret: a fine-grained token with read access to "Administration" on the repos below.
+on:
+  schedule:
+    - cron: '0 6 * * 1'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  snapshot:
+    runs-on: ubuntu-latest
+    env:
+      GH_TOKEN: ${{ secrets.TRAFFIC_TOKEN }}
+    steps:
+      - name: Skip without token
+        if: env.GH_TOKEN == ''
+        run: echo "TRAFFIC_TOKEN is not set; skipping." 
+      - name: Collect views and referrers
+        if: env.GH_TOKEN != ''
+        run: |
+          mkdir -p traffic
+          for repo in DigiByte-Core/digiid-js DigiByte-Core/digiid-php DigiByte-Core/digiid-wp-authentication DigiByte-Core/digi-id-io; do
+            name="${repo#*/}"
+            gh api "repos/$repo/traffic/views" > "traffic/$name-views.json"
+            gh api "repos/$repo/traffic/popular/referrers" > "traffic/$name-referrers.json"
+          done
+          echo "Referrals from digi-id.io:" >> "$GITHUB_STEP_SUMMARY"
+          for f in traffic/*-referrers.json; do
+            echo "- $(basename "$f" -referrers.json): $(jq '[.[] | select(.referrer | test("digi-id"))] | map(.count) | add // 0' "$f")" >> "$GITHUB_STEP_SUMMARY"
+          done
+      - name: Upload snapshot
+        if: env.GH_TOKEN != ''
+        uses: actions/upload-artifact@v7
+        with:
+          name: traffic-${{ github.run_id }}
+          path: traffic/
+          retention-days: 400

.gitignore

@@ -1 +1,9 @@
 assets/.sass-cache
+node_modules
+_site/
+packages/*/dist/
+.wrangler/
+test-results/
+playwright-report/
+.lighthouseci/
+specs/

README.md

@@ -1,2 +1,34 @@
 # digi-id-io
-digiid.io site
+
+Source for [www.digi-id.io](https://www.digi-id.io) — the home of Digi-ID, passwordless authentication powered by DigiByte.
+
+The site is static HTML built with Tailwind CSS, PostHTML partials and small ES modules, and is deployed to GitHub Pages from `_site/`.
+
+## Develop
+
+Requires Node.js 22+.
+
+```sh
+npm ci
+npm run dev        # build, watch and serve at http://localhost:8080
+npm run build      # production build -> _site/
+npm test           # data lint + unit tests (packages/digiid-core)
+npm run test:e2e   # Playwright + axe against _site/ (run `npx playwright install chromium` once)
+npm run lighthouse # Lighthouse budgets for / and /developers.html
+npm run verify     # every launch gate above, in order
+npm run images     # regenerate app icons and social preview images after title or logo changes
+```
+
+| Path | What it is |
+| --- | --- |
+| `src/pages/` | Pages (JSON front matter + HTML). `legacy/` holds redirect stubs published at the site root. |
+| `src/partials/` | Layout, head, header, footer and shared blocks |
+| `src/snippets/` | Code samples, highlighted at build time |
+| `src/data/` | `sdks.json`, `guides.json`, `use-cases.json`, `ecosystem.json` (+ schema), `site.json` |
+| `src/js/` | Browser modules (`site.js`, `demo.js`, `playground.js`) |
+| `src/css/app.css` | Tailwind entry with brand tokens and light/dark themes |
+| `packages/digiid-core/` | Digi-ID URI, key derivation, signing and verification (used by the demo and playground; published to npm as `digiid-core` by tagging `digiid-core-v<version>`) |
+
+## Add your project to the ecosystem
+
+Open an [ecosystem submission issue](../../issues/new?template=ecosystem-submission.yml), or add an entry to `src/data/ecosystem.json` with a logo in `assets/images/ecosystem/` and open a pull request. CI validates entries against `src/data/ecosystem.schema.json`.