[rubenvdlinde]

What this does

Change launcher-tile-internal-address (archived in this PR at openspec/changes/archive/2026-09-30-launcher-tile-internal-address). Stacked on #786 (feat/launcher-bookmark-import): this branch contains every PR below it. Land the stack in order, or land the top PR with a merge commit and the ones below close with it.

• Administrators list the office networks (IPv4 and IPv6 ranges) on a new "Office networks" admin tab; a malformed range is refused ("This is not a valid network range"). The tab names the administrator's own address and whether it is inside. GET/PUT /api/admin/office-networks, admin only.
• A tile gets an optional "Address on the office network". The server validates it like the main address (http or https with a host, or a path on this Nextcloud) and refuses the whole update otherwise.
• The server decides from the request address (IRequest::getRemoteAddress(), trusted proxies applied) and tells the page onOfficeNetwork; a tile with an office address opens it only then. The browser never probes internal hosts. With no ranges set nothing changes.
• The tile editor says which address the author gets right now.

Rows moved to built: d-internal-url (built.change = openspec/changes/archive/2026-09-30-launcher-tile-internal-address). The spec delta is folded into the main spec; the design records what the build corrected.

Tests (red first)

• tests/Unit/Service/OfficeNetworkServiceTest.php (IPv4, IPv6, empty list, malformed range stores nothing, unparsable remote address), with a CIDR double; tests/Unit/Database/OfficeNetworkLiveTest.php checks the same ranges with Nextcloud's own IP factory where CI boots Nextcloud
• tests/Unit/Service/TileInternalAddressTest.php through the real PlacementService, PlacementUpdater and TileUpdater (valid addresses stored, invalid ones refuse the update with nothing written)
• tests/Unit/Service/InitialStateBuilderTest.php, src/components/__tests__/TileWidget.internalAddress.spec.js, src/components/admin/tabs/__tests__/OfficeNetworksTab.spec.js

Playwright tasks are not written; the specs carry @e2e exclude naming these files.

Verified

• The stack now contains origin/development 5288399 (merged into feat(people): find colleagues by expertise and show extra profile fields #743 and up the stack; l10n catalogues merged per key, info.xml 1.1.7-unstable.20261005190000 for the whole stack, one migration Version002012).
• Full local mirror of the required CI jobs on the stack top (feat/launcher-tile-internal-address): npm lint, format, check:manifest, check:schema-l10n, l10n-parity and Vitest (963 of 963) all 0 on 7579477; the later source changes are three @spec comments (eslint 0 on those files). composer check:strict (lint, phpcs, phpmd, psalm, phpstan, PHPUnit 1948 tests, 14 skipped database tests that run in CI) and phpmetrics: 0 on 4a17769, after fixing six phpmd findings the stack introduced: BookmarkImportController coupling and static access (4e44727), PageController::index() length and TileUpdater complexity (4a17769).
• Hydra gates at CI's version (hydra-gates@main 4de7693, full scope, --require-full-coverage) on b2005d8: 85 of 86 applicable gates pass. Gate 16 found four untagged hooks, fixed where they were introduced (tile sorting, shortcuts, bookmarks). Gate 23 fails with the one match development itself has (PermissionService, RoleFeaturePermissionService, rule consume-or-rbac-fleet-wide); inherited, not touched here, and waiting on a decision.
• No local production build; CI's Frontend Build is the check.

Live check

Admin settings, LaunchPad, "Office networks": add the range your own address is in, save: the tab says your address is on the office network. Edit a tile with main address https://zaken.gemeente.nl, set "Address on the office network" to http://zaken.intern: the editor says this tile opens the internal address; the tile's link is http://zaken.intern. Remove the range: the tile opens the main address again. Entering 10.20.0.0/40 is refused.

[github-actions]

Quality Report — ConductionNL/launchpad @ 8b38a63

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
format		✅
check-schema-l10n		✅
composer			✅	✅ 104/104
npm			✅	✅ 636/636
app:check-code	⏭️
info.xml	✅
REUSE	❌
lockfile sync		✅
PHPUnit					✅
Newman					✅
Playwright					⏭️ deferred: E2E runs locally and on the promotion path only. This pull request targets development, so the suite is asked once per promotion into beta and main rather than once per push per open pull request. Run it locally with npx playwright test, or from the Actions tab on a branch with no open pull request into development.
Hydra gates					❌

---

Quality workflow — 2026-10-05 18:13 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/launchpad @ 3d2e1d8

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
format		❌
check-schema-l10n		✅
composer			✅	✅ 107/107
npm			❌	✅ 636/636
app:check-code	⏭️
info.xml	✅
REUSE	❌
lockfile sync		✅
PHPUnit					❌
Newman					❌
Playwright					⏭️ deferred: E2E runs locally and on the promotion path only. This pull request targets development, so the suite is asked once per promotion into beta and main rather than once per push per open pull request. Run it locally with npx playwright test, or from the Actions tab on a branch with no open pull request into development.
Hydra gates					❌

---

Quality workflow — 2026-10-23 05:24 UTC

Download the full PDF report from the workflow artifacts.