@striae-org/striae 3.0.4

package/scripts/deploy-pages.sh

@@ -0,0 +1,34 @@
+#!/bin/bash
+
+# ======================================
+# STRIAE PAGES DEPLOYMENT SCRIPT
+# ======================================
+# This script deploys the Striae frontend to Cloudflare Pages
+
+set -e
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m' # No Color
+
+echo -e "${BLUE}📄 Striae Pages Deployment Script${NC}"
+echo "=================================="
+
+# Deploy to Cloudflare Pages (includes build step)
+echo -e "${YELLOW}🚀 Building and deploying to Cloudflare Pages...${NC}"
+if ! npm run deploy; then
+    echo -e "${RED}❌ Deployment failed!${NC}"
+    exit 1
+fi
+
+echo -e "${GREEN}✅ Pages deployment completed successfully${NC}"
+
+echo -e "\n${BLUE}💡 Next Steps:${NC}"
+echo "   1. Deploy Pages secrets: npm run deploy-pages:secrets"
+echo "   2. Configure custom domain (optional)"
+echo "   3. Test your application"
+
+echo -e "\n${GREEN}✨ Pages deployment complete!${NC}"

package/scripts/deploy-worker-secrets.sh

@@ -0,0 +1,215 @@
+#!/bin/bash
+
+# ======================================
+# STRIAE WORKER SECRETS DEPLOYMENT SCRIPT  
+# ======================================
+# This script deploys environment variables/secrets to Cloudflare Workers
+# Run this AFTER workers are deployed to avoid deployment errors
+
+set -e
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m' # No Color
+
+echo -e "${BLUE}🔐 Striae Worker Secrets Deployment Script${NC}"
+echo "=========================================="
+
+# Check if .env file exists
+if [ ! -f ".env" ]; then
+    echo -e "${RED}❌ Error: .env file not found!${NC}"
+    echo "Please copy .env.example to .env and fill in your values."
+    exit 1
+fi
+
+# Source the .env file
+echo -e "${YELLOW}📖 Loading environment variables from .env...${NC}"
+source .env
+
+is_admin_service_placeholder() {
+    local value="$1"
+    local normalized=$(echo "$value" | tr '[:upper:]' '[:lower:]')
+
+    [[ -z "$normalized" || "$normalized" == your-* || "$normalized" == *"your_private_key"* ]]
+}
+
+load_required_admin_service_credentials() {
+    local admin_service_path="app/config/admin-service.json"
+
+    if [ ! -f "$admin_service_path" ]; then
+        echo -e "${RED}❌ Error: Required Firebase admin service file not found: $admin_service_path${NC}"
+        echo -e "${YELLOW}   Create app/config/admin-service.json before deploying worker secrets.${NC}"
+        exit 1
+    fi
+
+    local service_project_id
+    local service_client_email
+    local service_private_key
+
+    if ! service_project_id=$(node -e "const fs=require('fs'); const data=JSON.parse(fs.readFileSync(process.argv[1], 'utf8')); process.stdout.write(data.project_id || '');" "$admin_service_path"); then
+        echo -e "${RED}❌ Error: Could not parse project_id from $admin_service_path${NC}"
+        exit 1
+    fi
+
+    if ! service_client_email=$(node -e "const fs=require('fs'); const data=JSON.parse(fs.readFileSync(process.argv[1], 'utf8')); process.stdout.write(data.client_email || '');" "$admin_service_path"); then
+        echo -e "${RED}❌ Error: Could not parse client_email from $admin_service_path${NC}"
+        exit 1
+    fi
+
+    if ! service_private_key=$(node -e "const fs=require('fs'); const data=JSON.parse(fs.readFileSync(process.argv[1], 'utf8')); process.stdout.write(data.private_key || '');" "$admin_service_path"); then
+        echo -e "${RED}❌ Error: Could not parse private_key from $admin_service_path${NC}"
+        exit 1
+    fi
+
+    local normalized_private_key="${service_private_key//$'\r'/}"
+    normalized_private_key="${normalized_private_key//$'\n'/\\n}"
+
+    if is_admin_service_placeholder "$service_project_id"; then
+        echo -e "${RED}❌ Error: project_id in $admin_service_path is missing or placeholder${NC}"
+        exit 1
+    fi
+
+    if is_admin_service_placeholder "$service_client_email" || [[ "$service_client_email" != *".gserviceaccount.com"* ]]; then
+        echo -e "${RED}❌ Error: client_email in $admin_service_path is invalid${NC}"
+        exit 1
+    fi
+
+    if is_admin_service_placeholder "$normalized_private_key" || [[ "$normalized_private_key" != *"-----BEGIN PRIVATE KEY-----"* ]] || [[ "$normalized_private_key" != *"-----END PRIVATE KEY-----"* ]]; then
+        echo -e "${RED}❌ Error: private_key in $admin_service_path is invalid${NC}"
+        exit 1
+    fi
+
+    PROJECT_ID="$service_project_id"
+    FIREBASE_SERVICE_ACCOUNT_EMAIL="$service_client_email"
+    FIREBASE_SERVICE_ACCOUNT_PRIVATE_KEY="$normalized_private_key"
+
+    export PROJECT_ID
+    export FIREBASE_SERVICE_ACCOUNT_EMAIL
+    export FIREBASE_SERVICE_ACCOUNT_PRIVATE_KEY
+
+    echo -e "${GREEN}✅ Loaded Firebase service account credentials from $admin_service_path${NC}"
+}
+
+load_required_admin_service_credentials
+
+# Function to set worker secrets
+set_worker_secrets() {
+    local worker_name=$1
+    local worker_path=$2
+    shift 2
+    local secrets=("$@")
+    
+    echo -e "\n${BLUE}🔧 Setting secrets for $worker_name...${NC}"
+    
+    # Check if worker has a wrangler configuration file
+    if [ ! -f "$worker_path/wrangler.jsonc" ] && [ ! -f "$worker_path/wrangler.toml" ]; then
+        echo -e "${RED}❌ Error: No wrangler configuration found for $worker_name${NC}"
+        echo -e "${YELLOW}   Please copy wrangler.jsonc.example to wrangler.jsonc and configure it first.${NC}"
+        return 1
+    fi
+    
+    # Change to worker directory
+    pushd "$worker_path" > /dev/null
+    
+    # Get the worker name from the configuration file
+    local config_worker_name
+    if [ -f "wrangler.jsonc" ]; then
+        config_worker_name=$(grep -o '"name"[[:space:]]*:[[:space:]]*"[^"]*"' wrangler.jsonc | sed 's/.*"name"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/')
+    elif [ -f "wrangler.toml" ]; then
+        config_worker_name=$(grep '^name[[:space:]]*=' wrangler.toml | sed 's/.*=[[:space:]]*["\x27]\([^"\x27]*\)["\x27].*/\1/')
+    fi
+    
+    if [ -z "$config_worker_name" ]; then
+        echo -e "${RED}❌ Error: Could not determine worker name from configuration${NC}"
+        popd > /dev/null
+        return 1
+    fi
+    
+    echo -e "${YELLOW}  Using worker name: $config_worker_name${NC}"
+    
+    for secret in "${secrets[@]}"; do
+        echo -e "${YELLOW}  Setting $secret...${NC}"
+        if ! echo "${!secret}" | wrangler secret put "$secret" --name "$config_worker_name"; then
+            echo -e "${RED}❌ Failed to set $secret for $worker_name${NC}"
+            popd > /dev/null
+            return 1
+        fi
+    done
+    
+    echo -e "${GREEN}✅ $worker_name secrets configured${NC}"
+    popd > /dev/null
+}
+
+# Deploy secrets to each worker
+echo -e "\n${BLUE}🔐 Deploying secrets to workers...${NC}"
+
+# Check if workers are configured
+echo -e "${YELLOW}🔍 Checking worker configurations...${NC}"
+workers_configured=0
+total_workers=6
+
+for worker_dir in workers/*/; do
+    if [ -f "$worker_dir/wrangler.jsonc" ] || [ -f "$worker_dir/wrangler.toml" ]; then
+        workers_configured=$((workers_configured + 1))
+    fi
+done
+
+if [ $workers_configured -eq 0 ]; then
+    echo -e "${RED}❌ No workers are configured!${NC}"
+    echo -e "${YELLOW}   Please copy wrangler.jsonc.example to wrangler.jsonc in each worker directory and configure them.${NC}"
+    echo -e "${YELLOW}   Then run this script again.${NC}"
+    exit 1
+elif [ $workers_configured -lt $total_workers ]; then
+    echo -e "${YELLOW}⚠️  Warning: Only $workers_configured of $total_workers workers are configured.${NC}"
+    echo -e "${YELLOW}   Some workers may not have their secrets deployed.${NC}"
+fi
+
+# Audit Worker
+if ! set_worker_secrets "Audit Worker" "workers/audit-worker" \
+    "R2_KEY_SECRET"; then
+    echo -e "${YELLOW}⚠️  Skipping Audit Worker (not configured)${NC}"
+fi
+
+# Keys Worker
+if ! set_worker_secrets "Keys Worker" "workers/keys-worker" \
+    "KEYS_AUTH" "USER_DB_AUTH" "R2_KEY_SECRET" "ACCOUNT_HASH" "IMAGES_API_TOKEN"; then
+    echo -e "${YELLOW}⚠️  Skipping Keys Worker (not configured)${NC}"
+fi
+
+# User Worker  
+if ! set_worker_secrets "User Worker" "workers/user-worker" \
+    "USER_DB_AUTH" "R2_KEY_SECRET" "IMAGES_API_TOKEN" "PROJECT_ID" "FIREBASE_SERVICE_ACCOUNT_EMAIL" "FIREBASE_SERVICE_ACCOUNT_PRIVATE_KEY"; then
+    echo -e "${YELLOW}⚠️  Skipping User Worker (not configured)${NC}"
+fi
+
+# Data Worker
+if ! set_worker_secrets "Data Worker" "workers/data-worker" \
+    "R2_KEY_SECRET" "MANIFEST_SIGNING_PRIVATE_KEY" "MANIFEST_SIGNING_KEY_ID"; then
+    echo -e "${YELLOW}⚠️  Skipping Data Worker (not configured)${NC}"
+fi
+
+# Images Worker
+if ! set_worker_secrets "Images Worker" "workers/image-worker" \
+    "ACCOUNT_ID" "API_TOKEN" "HMAC_KEY"; then
+    echo -e "${YELLOW}⚠️  Skipping Images Worker (not configured)${NC}"
+fi
+
+# PDF Worker (no secrets needed)
+echo -e "\n${BLUE}📄 PDF Worker: No environment variables needed${NC}"
+
+echo -e "\n${GREEN}🎉 Worker secrets deployment completed!${NC}"
+
+echo -e "\n${YELLOW}⚠️  WORKER CONFIGURATION REMINDERS:${NC}"
+echo "   - Copy wrangler.jsonc.example to wrangler.jsonc in each worker directory"
+echo "   - Configure KV namespace ID in workers/user-worker/wrangler.jsonc"
+echo "   - Configure R2 bucket name in workers/data-worker/wrangler.jsonc"
+echo "   - Configure R2 bucket name in workers/audit-worker/wrangler.jsonc"
+echo "   - Update ACCOUNT_ID and custom domains in all worker configurations"
+
+echo -e "\n${BLUE}📝 For manual deployment, use these commands:${NC}"
+echo "   cd workers/[worker-name]"
+echo "   wrangler secret put VARIABLE_NAME --name [worker-name]"
+echo -e "\n${GREEN}✨ Worker secrets deployment complete!${NC}"

package/scripts/dev.cjs

@@ -0,0 +1,23 @@
+const fs = require('fs');
+const path = require('path');
+const { updateMarkdownVersions } = require('./update-markdown-versions.cjs');
+const { updateCompatibilityDates } = require('./update-compatibility-dates.cjs');
+
+// Read the ASCII art file from the filesystem
+const asciiArtPath = path.join(__dirname, '..', 'public', 'striae-ascii.txt');
+let asciiArt;  
+try {  
+    asciiArt = fs.readFileSync(asciiArtPath, 'utf8');  
+} catch (err) {  
+    console.warn(`Warning: Unable to read ASCII art file at ${asciiArtPath}.\n${err.message}`);  
+    asciiArt = "(ASCII art unavailable)\n";  
+} 
+
+// Pop a lil' logo in the terminal
+console.info(asciiArt);
+
+// Update markdown files with current version
+updateMarkdownVersions();
+
+// Update compatibility dates to current date
+updateCompatibilityDates();

package/scripts/install-workers.sh

@@ -0,0 +1,88 @@
+#!/bin/bash
+
+# ======================================
+# STRIAE WORKERS NPM INSTALL SCRIPT
+# ======================================
+# This script installs npm dependencies for all Striae workers:
+# 1. audit-worker
+# 2. data-worker
+# 3. image-worker
+# 4. keys-worker
+# 5. pdf-worker
+# 6. user-worker
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+PURPLE='\033[0;35m'
+NC='\033[0m' # No Color
+
+echo -e "${BLUE}📦 Striae Workers NPM Install Script${NC}"
+echo "========================================"
+echo ""
+
+# Get the script directory and project root
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
+WORKERS_DIR="$PROJECT_ROOT/workers"
+
+# Check if workers directory exists
+if [ ! -d "$WORKERS_DIR" ]; then
+    echo -e "${RED}❌ Error: Workers directory not found at $WORKERS_DIR${NC}"
+    exit 1
+fi
+
+# List of workers
+WORKERS=("audit-worker" "data-worker" "image-worker" "keys-worker" "pdf-worker" "user-worker")
+
+echo -e "${PURPLE}Installing npm dependencies for all workers...${NC}"
+echo ""
+
+# Counter for progress
+total=${#WORKERS[@]}
+current=0
+
+# Install dependencies for each worker
+for worker in "${WORKERS[@]}"; do
+    current=$((current + 1))
+    worker_path="$WORKERS_DIR/$worker"
+    
+    echo -e "${YELLOW}[$current/$total] Installing dependencies for $worker...${NC}"
+    
+    # Check if worker directory exists
+    if [ ! -d "$worker_path" ]; then
+        echo -e "${RED}❌ Warning: Worker directory not found: $worker_path${NC}"
+        continue
+    fi
+    
+    # Check if package.json exists
+    if [ ! -f "$worker_path/package.json" ]; then
+        echo -e "${RED}❌ Warning: package.json not found in $worker_path${NC}"
+        continue
+    fi
+    
+    # Change to worker directory and install dependencies
+    cd "$worker_path"
+    
+    echo "   Running npm install in $worker_path..."
+    if npm install; then
+        echo -e "${GREEN}✅ Successfully installed dependencies for $worker${NC}"
+    else
+        echo -e "${RED}❌ Failed to install dependencies for $worker${NC}"
+        exit 1
+    fi
+    
+    echo ""
+done
+
+# Return to original directory
+cd "$PROJECT_ROOT"
+
+echo -e "${GREEN}🎉 All worker dependencies installed successfully!${NC}"
+echo ""
+echo -e "${BLUE}Summary:${NC}"
+echo "- Installed dependencies for $total workers"
+echo "- All workers are ready for development/deployment"
+echo ""

package/scripts/run-eslint.cjs

@@ -0,0 +1,35 @@
+const { spawnSync } = require('node:child_process');
+const path = require('node:path');
+
+const eslintApiPath = require.resolve('eslint');
+const eslintCliPath = path.resolve(path.dirname(eslintApiPath), '..', 'bin', 'eslint.js');
+
+const defaultArgs = [
+  '--ignore-path',
+  '.gitignore',
+  '--cache',
+  '--cache-location',
+  './node_modules/.cache/eslint',
+  '.',
+];
+
+const passthroughArgs = process.argv.slice(2);
+const eslintArgs = passthroughArgs.length > 0 ? passthroughArgs : defaultArgs;
+
+const result = spawnSync(process.execPath, [eslintCliPath, ...eslintArgs], {
+  stdio: 'inherit',
+  env: {
+    ...process.env,
+    ESLINT_USE_FLAT_CONFIG: 'false',
+  },
+});
+
+if (typeof result.status === 'number') {
+  process.exit(result.status);
+}
+
+if (result.error) {
+  console.error(result.error);
+}
+
+process.exit(1);

package/scripts/update-compatibility-dates.cjs

@@ -0,0 +1,124 @@
+const fs = require('fs');
+const path = require('path');
+
+const DATE_PATTERN = /^\d{4}-\d{2}-\d{2}$/;
+
+function getCurrentDate() {
+  const now = new Date();
+  const year = now.getFullYear();
+  const month = String(now.getMonth() + 1).padStart(2, '0');
+  const day = String(now.getDate()).padStart(2, '0');
+  return `${year}-${month}-${day}`;
+}
+
+function replaceTomlCompatibilityDate(content, date) {
+  return content.replace(
+    /(compatibility_date\s*=\s*")\d{4}-\d{2}-\d{2}(")/,
+    `$1${date}$2`
+  );
+}
+
+function replaceJsoncCompatibilityDate(content, date) {
+  return content.replace(
+    /("compatibility_date"\s*:\s*")\d{4}-\d{2}-\d{2}(",?)/,
+    `$1${date}$2`
+  );
+}
+
+function updateFile(filePath, date, replacer) {
+  if (!fs.existsSync(filePath)) {
+    return { filePath, status: 'missing' };
+  }
+
+  const original = fs.readFileSync(filePath, 'utf8');
+  const updated = replacer(original, date);
+
+  if (original === updated) {
+    return { filePath, status: 'unchanged' };
+  }
+
+  fs.writeFileSync(filePath, updated, 'utf8');
+  return { filePath, status: 'updated' };
+}
+
+function updateCompatibilityDates(date = getCurrentDate()) {
+  if (!DATE_PATTERN.test(date)) {
+    throw new Error(`Invalid date format: ${date}. Use YYYY-MM-DD.`);
+  }
+
+  const rootDir = path.resolve(__dirname, '..');
+  const workersDir = path.join(rootDir, 'workers');
+
+  const results = [];
+
+  results.push(
+    updateFile(
+      path.join(rootDir, 'wrangler.toml'),
+      date,
+      replaceTomlCompatibilityDate
+    )
+  );
+
+  results.push(
+    updateFile(
+      path.join(rootDir, 'wrangler.toml.example'),
+      date,
+      replaceTomlCompatibilityDate
+    )
+  );
+
+  if (fs.existsSync(workersDir)) {
+    const workerDirs = fs
+      .readdirSync(workersDir, { withFileTypes: true })
+      .filter((entry) => entry.isDirectory())
+      .map((entry) => entry.name);
+
+    for (const workerDir of workerDirs) {
+      const workerPath = path.join(workersDir, workerDir);
+      results.push(
+        updateFile(
+          path.join(workerPath, 'wrangler.jsonc.example'),
+          date,
+          replaceJsoncCompatibilityDate
+        )
+      );
+      results.push(
+        updateFile(
+          path.join(workerPath, 'wrangler.jsonc'),
+          date,
+          replaceJsoncCompatibilityDate
+        )
+      );
+    }
+  }
+
+  const updatedCount = results.filter((result) => result.status === 'updated').length;
+  const unchangedCount = results.filter((result) => result.status === 'unchanged').length;
+  const missingCount = results.filter((result) => result.status === 'missing').length;
+
+  console.log(`Updated compatibility dates to ${date}`);
+  console.log(`- Updated: ${updatedCount}`);
+  console.log(`- Unchanged: ${unchangedCount}`);
+  console.log(`- Missing: ${missingCount}`);
+
+  for (const result of results) {
+    if (result.status !== 'updated') {
+      console.log(`  ${result.status.toUpperCase()}: ${path.relative(rootDir, result.filePath)}`);
+    }
+  }
+
+  return results;
+}
+
+if (require.main === module) {
+  const dateArg = process.argv[2] || getCurrentDate();
+
+  try {
+    updateCompatibilityDates(dateArg);
+  } catch (error) {
+    console.error(error.message);
+    process.exit(1);
+  }
+}
+
+module.exports = { updateCompatibilityDates };

package/scripts/update-markdown-versions.cjs

@@ -0,0 +1,43 @@
+const fs = require('fs');
+const path = require('path');
+const packageJson = require('../package.json');
+
+const markdownFiles = [
+  '.github/SECURITY.md',    
+  // Add other markdown files that need version updates
+];
+
+function updateMarkdownVersions() {
+  console.log(`📝 Updating markdown files with version ${packageJson.version}...`);
+  
+  markdownFiles.forEach(filePath => {
+    const fullPath = path.join(__dirname, '..', filePath);
+    
+    if (!fs.existsSync(fullPath)) {
+      console.log(`⚠️  Skipping ${filePath} (file not found)`);
+      return;
+    }
+    
+    try {
+      let content = fs.readFileSync(fullPath, 'utf8');
+      
+      // Replace version placeholders
+      content = content.replace(/{{VERSION}}/g, packageJson.version);
+      content = content.replace(/v\d+\.\d+\.\d+(-\w+)?/g, `v${packageJson.version}`);
+      
+      fs.writeFileSync(fullPath, content);
+      console.log(`✅ Updated ${filePath}`);
+    } catch (error) {
+      console.error(`❌ Error updating ${filePath}:`, error.message);
+    }
+  });
+  
+  console.log('🎉 Markdown version update complete!');
+}
+
+// Run if called directly
+if (require.main === module) {
+  updateMarkdownVersions();
+}
+
+module.exports = { updateMarkdownVersions };

package/tailwind.config.ts

@@ -0,0 +1,22 @@
+import type { Config } from "tailwindcss";
+
+export default {
+  content: ["./app/**/{**,.client,.server}/**/*.{js,jsx,ts,tsx}"],
+  theme: {
+    extend: {
+      fontFamily: {
+        sans: [
+          "Inter",
+          "ui-sans-serif",
+          "system-ui",
+          "sans-serif",
+          "Apple Color Emoji",
+          "Segoe UI Emoji",
+          "Segoe UI Symbol",
+          "Noto Color Emoji",
+        ],
+      },
+    },
+  },
+  plugins: [],
+} satisfies Config;

package/tsconfig.json

@@ -0,0 +1,33 @@
+{
+  "include": [
+    "**/*.ts",
+    "**/*.tsx",
+    "**/.server/**/*.ts",
+    "**/.server/**/*.tsx",
+    "**/.client/**/*.ts",
+    "**/.client/**/*.tsx"
+  ],
+  "compilerOptions": {
+    "lib": ["DOM", "DOM.Iterable", "ES2022"],
+    "types": [
+        "@remix-run/cloudflare",
+        "vite/client"
+    ],    
+    "isolatedModules": true,
+    "esModuleInterop": true,
+    "jsx": "react-jsx",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "resolveJsonModule": true,
+    "target": "ES2022",
+    "strict": true,
+    "allowJs": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "paths": {
+      "~/*": ["./app/*"]
+    },
+        
+    "noEmit": true
+  }
+}

package/vite.config.ts

@@ -0,0 +1,35 @@
+import {
+  vitePlugin as remix,
+  cloudflareDevProxyVitePlugin as remixCloudflareDevProxy,
+} from "@remix-run/dev";
+import { defineConfig } from "vite";
+import tsconfigPaths from "vite-tsconfig-paths";
+
+declare module "@remix-run/cloudflare" {
+  interface Future {
+    v3_singleFetch: true;
+  }
+}
+
+export default defineConfig({
+  server: {
+    port: 7777,
+  },
+  build: {    
+    chunkSizeWarningLimit: 500,
+    minify: true,
+  },
+  plugins: [
+    remixCloudflareDevProxy(),
+    remix({      
+      future: {
+        v3_fetcherPersist: true,
+        v3_relativeSplatPath: true,
+        v3_throwAbortReason: true,
+        v3_singleFetch: true,
+        v3_lazyRouteDiscovery: true,
+      },
+    }),
+    tsconfigPaths()    
+  ],
+});