@striae-org/striae 5.3.0 → 5.3.2

package/app/routes/striae/striae.tsx

@@ -5,6 +5,8 @@ import { Navbar } from '~/components/navbar/navbar';
 import { RenameCaseModal } from '~/components/navbar/case-modals/rename-case-modal';
 import { ArchiveCaseModal } from '~/components/navbar/case-modals/archive-case-modal';
 import { OpenCaseModal } from '~/components/navbar/case-modals/open-case-modal';
+import { ExportCaseModal } from '~/components/navbar/case-modals/export-case-modal';
+import { ExportConfirmationsModal } from '~/components/navbar/case-modals/export-confirmations-modal';
 import { Toolbar } from '~/components/toolbar/toolbar';
 import { Canvas } from '~/components/canvas/canvas';
 import { Toast, type ToastType } from '~/components/toast/toast';
@@ -20,7 +22,7 @@ import { fetchUserApi } from '~/utils/api';
 import { type AnnotationData, type FileData } from '~/types';
 import { validateCaseNumber, renameCase, deleteCase, checkExistingCase, createNewCase, archiveCase, getCaseArchiveDetails } from '~/components/actions/case-manage';
 import { checkReadOnlyCaseExists, deleteReadOnlyCase } from '~/components/actions/case-review';
-import { canCreateCase } from '~/utils/data';
+import { canCreateCase, getCaseConfirmationSummary } from '~/utils/data';
 import {
   resolveEarliestAnnotationTimestamp,
   CREATE_READ_ONLY_CASE_EXISTS_ERROR,
@@ -91,6 +93,14 @@ export const Striae = ({ user }: StriaePage) => {
   const [isOpeningCase, setIsOpeningCase] = useState(false);
   const [openCaseHelperText, setOpenCaseHelperText] = useState('');
   const [isArchiveCaseModalOpen, setIsArchiveCaseModalOpen] = useState(false);
+  const [isExportCaseModalOpen, setIsExportCaseModalOpen] = useState(false);
+  const [isExportingCase, setIsExportingCase] = useState(false);
+  const [isExportConfirmationsModalOpen, setIsExportConfirmationsModalOpen] = useState(false);
+  const [isExportingConfirmations, setIsExportingConfirmations] = useState(false);
+  const [exportConfirmationStats, setExportConfirmationStats] = useState<{
+    confirmedCount: number;
+    unconfirmedCount: number;
+  } | null>(null);
   const [archiveDetails, setArchiveDetails] = useState<{
     archived: boolean;
     archivedAt?: string;
@@ -276,6 +286,7 @@ export const Striae = ({ user }: StriaePage) => {
 
   const handleExport = async (
     exportCaseNumber: string,
+    designatedReviewerEmail?: string,
     onProgress?: (progress: number, label: string) => void
   ) => {
     if (!exportCaseNumber) {
@@ -288,15 +299,20 @@ export const Striae = ({ user }: StriaePage) => {
     try {
       const caseExportActions = await loadCaseExportActions();
 
-      await caseExportActions.downloadCaseAsZip(user, exportCaseNumber, (progress) => {
-        const roundedProgress = Math.round(progress);
-        const label = getExportProgressLabel(progress);
-        setToastType('loading');
-        setToastMessage(`Exporting case ${exportCaseNumber}... ${label} (${roundedProgress}%)`);
-        setToastDuration(0);
-        setShowToast(true);
-        onProgress?.(roundedProgress, label);
-      });
+      await caseExportActions.downloadCaseAsZip(
+        user,
+        exportCaseNumber,
+        (progress) => {
+          const roundedProgress = Math.round(progress);
+          const label = getExportProgressLabel(progress);
+          setToastType('loading');
+          setToastMessage(`Exporting case ${exportCaseNumber}... ${label} (${roundedProgress}%)`);
+          setToastDuration(0);
+          setShowToast(true);
+          onProgress?.(roundedProgress, label);
+        },
+        { designatedReviewerEmail }
+      );
 
       showNotification(`Case ${exportCaseNumber} exported successfully.`, 'success');
     } catch (error) {
@@ -304,16 +320,47 @@ export const Striae = ({ user }: StriaePage) => {
     }
   };
 
+  const handleExportCaseModalSubmit = async (designatedReviewerEmail: string | undefined) => {
+    setIsExportingCase(true);
+    setIsExportCaseModalOpen(false);
+    try {
+      await handleExport(currentCase || '', designatedReviewerEmail);
+    } finally {
+      setIsExportingCase(false);
+    }
+  };
+
+  const handleOpenExportConfirmationsModal = async () => {
+    if (!currentCase || !user) return;
+
+    try {
+      const summary = await getCaseConfirmationSummary(user, currentCase);
+      const filesById = summary?.filesById ?? {};
+      const values = Object.values(filesById);
+      const confirmedCount = values.filter((f) => f.includeConfirmation && f.isConfirmed).length;
+      const unconfirmedCount = values.filter((f) => f.includeConfirmation && !f.isConfirmed).length;
+      setExportConfirmationStats({ confirmedCount, unconfirmedCount });
+    } catch {
+      setExportConfirmationStats({ confirmedCount: 0, unconfirmedCount: 0 });
+    }
+
+    setIsExportConfirmationsModalOpen(true);
+  };
+
   const handleExportConfirmations = async () => {
     if (!currentCase || !user) return;
 
+    setIsExportingConfirmations(true);
     showNotification(`Exporting confirmations for case ${currentCase}...`, 'loading', 0);
 
     try {
       await exportConfirmationData(user, currentCase);
+      setIsExportConfirmationsModalOpen(false);
       showNotification(`Confirmations for case ${currentCase} exported successfully.`, 'success');
     } catch (e) {
       showNotification(e instanceof Error ? e.message : 'Confirmation export failed. Please try again.', 'error');
+    } finally {
+      setIsExportingConfirmations(false);
     }
   };
 
@@ -764,9 +811,9 @@ export const Striae = ({ user }: StriaePage) => {
         onOpenListAllCases={() => setIsListCasesModalOpen(true)}
         onOpenCaseExport={() => {
           if (isReadOnlyCase) {
-            void handleExportConfirmations();
+            void handleOpenExportConfirmationsModal();
           } else {
-            void handleExport(currentCase || '');
+            setIsExportCaseModalOpen(true);
           }
         }}
         onOpenAuditTrail={() => setIsAuditTrailOpen(true)}
@@ -791,7 +838,7 @@ export const Striae = ({ user }: StriaePage) => {
           onOpenCase={() => {
             void handleOpenCaseModal();
           }}
-          onOpenCaseExport={() => void handleExportConfirmations()}
+          onOpenCaseExport={() => void handleOpenExportConfirmationsModal()}
           imageId={imageId}
           currentCase={currentCase}
           imageLoaded={imageLoaded}
@@ -904,6 +951,23 @@ export const Striae = ({ user }: StriaePage) => {
         onClose={() => setIsArchiveCaseModalOpen(false)}
         onSubmit={handleArchiveCaseSubmit}
       />
+      <ExportCaseModal
+        isOpen={isExportCaseModalOpen}
+        caseNumber={currentCase || ''}
+        currentUserEmail={user.email ?? undefined}
+        isSubmitting={isExportingCase}
+        onClose={() => setIsExportCaseModalOpen(false)}
+        onSubmit={handleExportCaseModalSubmit}
+      />
+      <ExportConfirmationsModal
+        isOpen={isExportConfirmationsModalOpen}
+        caseNumber={currentCase || ''}
+        confirmedCount={exportConfirmationStats?.confirmedCount ?? 0}
+        unconfirmedCount={exportConfirmationStats?.unconfirmedCount ?? 0}
+        isSubmitting={isExportingConfirmations}
+        onClose={() => setIsExportConfirmationsModalOpen(false)}
+        onConfirm={() => void handleExportConfirmations()}
+      />
       <Toast
         message={toastMessage}
         type={toastType}

package/app/types/case.ts

@@ -50,6 +50,7 @@ export interface CaseExportData {
     exportedByName: string;
     exportedByCompany: string;
     exportedByBadgeId?: string;
+    designatedReviewerEmail?: string;
     striaeExportSchemaVersion: string;
     totalFiles: number;
   };

package/app/types/export.ts

@@ -4,4 +4,5 @@ export interface ExportOptions {
   includeMetadata?: boolean;
   includeUserInfo?: boolean;
   protectForensicData?: boolean;
+  designatedReviewerEmail?: string;
 }

package/app/types/import.ts

@@ -78,6 +78,16 @@ export interface ConfirmationImportData {
   };
 }
 
+export interface ConfirmationImportPreview {
+  caseNumber: string;
+  exportedBy: string;
+  exportedByName: string;
+  exportedByCompany: string;
+  exportedByBadgeId?: string;
+  exportDate: string;
+  totalConfirmations: number;
+}
+
 export interface CaseImportPreview {
   caseNumber: string;
   archived?: boolean;

package/functions/api/image/[[path]].ts

@@ -67,6 +67,14 @@ function resolveImageWorkerToken(env: Env): string {
   return typeof env.IMAGES_API_TOKEN === 'string' ? env.IMAGES_API_TOKEN.trim() : '';
 }
 
+const BASE64URL_SEGMENT = /^[A-Za-z0-9_-]+$/;
+
+function looksLikeSignedToken(value: string): boolean {
+  const parts = value.split('.');
+  if (parts.length !== 2) return false;
+  return parts.every(part => part.length > 0 && BASE64URL_SEGMENT.test(part));
+}
+
 export const onRequest = async ({ request, env }: ImageProxyContext): Promise<Response> => {
   if (!SUPPORTED_METHODS.has(request.method)) {
     return textResponse('Method not allowed', 405);
@@ -84,9 +92,17 @@ export const onRequest = async ({ request, env }: ImageProxyContext): Promise<Re
 
   const requestUrl = new URL(request.url);
 
-  const identity = await verifyFirebaseIdentityFromRequest(request, env);
-  if (!identity) {
-    return textResponse('Unauthorized', 401);
+  const signedToken = requestUrl.searchParams.get('st');
+  const isSignedTokenRequest =
+    request.method === 'GET' &&
+    signedToken !== null &&
+    looksLikeSignedToken(signedToken);
+
+  if (!isSignedTokenRequest) {
+    const identity = await verifyFirebaseIdentityFromRequest(request, env);
+    if (!identity) {
+      return textResponse('Unauthorized', 401);
+    }
   }
 
   const proxyPathResult = extractProxyPath(requestUrl);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@striae-org/striae",
-  "version": "5.3.0",
+  "version": "5.3.2",
   "private": false,
   "description": "Striae is a specialized, cloud-native platform designed to streamline forensic firearms identification by providing an intuitive environment for digital comparison image annotation, authenticated confirmations, and automated report generation.",
   "license": "Apache-2.0",

package/workers/audit-worker/wrangler.jsonc.example

@@ -7,7 +7,7 @@
   "name": "AUDIT_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/audit-worker.ts",
-  "compatibility_date": "2026-03-26",
+  "compatibility_date": "2026-03-29",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/workers/data-worker/wrangler.jsonc.example

@@ -5,7 +5,7 @@
   "name": "DATA_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/data-worker.ts",
-  "compatibility_date": "2026-03-26",
+  "compatibility_date": "2026-03-29",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/workers/image-worker/src/image-worker.example.ts

@@ -14,6 +14,7 @@ interface Env {
   DATA_AT_REST_ENCRYPTION_ACTIVE_KEY_ID?: string;
   IMAGE_SIGNED_URL_SECRET?: string;
   IMAGE_SIGNED_URL_TTL_SECONDS?: string;
+  IMAGE_SIGNED_URL_BASE_URL?: string;
 }
 
 interface KeyRegistryPayload {
@@ -383,6 +384,25 @@ function requireSignedUrlConfig(env: Env): void {
   }
 }
 
+function parseSignedUrlBaseUrl(raw: string): string {
+  let parsed: URL;
+  try {
+    parsed = new URL(raw.trim());
+  } catch {
+    throw new Error(`IMAGE_SIGNED_URL_BASE_URL is not a valid absolute URL: "${raw}"`);
+  }
+
+  if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {
+    throw new Error(`IMAGE_SIGNED_URL_BASE_URL must use http or https, got: "${parsed.protocol}"`);
+  }
+
+  if (parsed.search || parsed.hash) {
+    throw new Error(`IMAGE_SIGNED_URL_BASE_URL must not include a query string or fragment: "${raw}"`);
+  }
+
+  return `${parsed.origin}${parsed.pathname}`.replace(/\/+$/, '');
+}
+
 async function getSignedUrlHmacKey(env: Env): Promise<CryptoKey> {
   const resolvedSecret = (env.IMAGE_SIGNED_URL_SECRET || env.IMAGES_API_TOKEN || '').trim();
   const keyBytes = new TextEncoder().encode(resolvedSecret);
@@ -592,8 +612,22 @@ async function handleSignedUrlMinting(request: Request, env: Env, fileId: string
   };
 
   const signedToken = await signSignedAccessPayload(payload, env);
-  const signedPath = `/${encodeURIComponent(fileId)}?st=${encodeURIComponent(signedToken)}`;
-  const signedUrl = new URL(signedPath, request.url).toString();
+
+  let baseUrl: string;
+  if (env.IMAGE_SIGNED_URL_BASE_URL) {
+    try {
+      baseUrl = parseSignedUrlBaseUrl(env.IMAGE_SIGNED_URL_BASE_URL);
+    } catch (error) {
+      console.error('Invalid IMAGE_SIGNED_URL_BASE_URL configuration', {
+        reason: error instanceof Error ? error.message : String(error)
+      });
+      return createJsonResponse({ error: 'Signed URL base URL is misconfigured' }, 500);
+    }
+  } else {
+    baseUrl = new URL(request.url).origin;
+  }
+
+  const signedUrl = `${baseUrl}/${encodeURIComponent(fileId)}?st=${encodeURIComponent(signedToken)}`;
 
   return createJsonResponse({
     success: true,

package/workers/image-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "IMAGES_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/image-worker.ts",
-  "compatibility_date": "2026-03-26",
+  "compatibility_date": "2026-03-29",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/workers/pdf-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "PDF_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/pdf-worker.ts",
-  "compatibility_date": "2026-03-26",
+  "compatibility_date": "2026-03-29",
   "compatibility_flags": [
     "nodejs_compat"
   ],

package/workers/user-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "USER_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/user-worker.ts",
-  "compatibility_date": "2026-03-26",
+  "compatibility_date": "2026-03-29",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/wrangler.toml.example

@@ -1,6 +1,6 @@
 #:schema node_modules/wrangler/config-schema.json
 name = "PAGES_PROJECT_NAME"
-compatibility_date = "2026-03-26"
+compatibility_date = "2026-03-29"
 compatibility_flags = ["nodejs_compat"]
 pages_build_output_dir = "./build/client"