@striae-org/striae 5.3.1 → 5.4.0

package/scripts/update-compatibility-dates.cjs

@@ -0,0 +1,124 @@
+const fs = require('fs');
+const path = require('path');
+
+const DATE_PATTERN = /^\d{4}-\d{2}-\d{2}$/;
+
+function getCurrentDate() {
+  const now = new Date();
+  const year = now.getFullYear();
+  const month = String(now.getMonth() + 1).padStart(2, '0');
+  const day = String(now.getDate()).padStart(2, '0');
+  return `${year}-${month}-${day}`;
+}
+
+function replaceTomlCompatibilityDate(content, date) {
+  return content.replace(
+    /(compatibility_date\s*=\s*")\d{4}-\d{2}-\d{2}(")/,
+    `$1${date}$2`
+  );
+}
+
+function replaceJsoncCompatibilityDate(content, date) {
+  return content.replace(
+    /("compatibility_date"\s*:\s*")\d{4}-\d{2}-\d{2}(",?)/,
+    `$1${date}$2`
+  );
+}
+
+function updateFile(filePath, date, replacer) {
+  if (!fs.existsSync(filePath)) {
+    return { filePath, status: 'missing' };
+  }
+
+  const original = fs.readFileSync(filePath, 'utf8');
+  const updated = replacer(original, date);
+
+  if (original === updated) {
+    return { filePath, status: 'unchanged' };
+  }
+
+  fs.writeFileSync(filePath, updated, 'utf8');
+  return { filePath, status: 'updated' };
+}
+
+function updateCompatibilityDates(date = getCurrentDate()) {
+  if (!DATE_PATTERN.test(date)) {
+    throw new Error(`Invalid date format: ${date}. Use YYYY-MM-DD.`);
+  }
+
+  const rootDir = path.resolve(__dirname, '..');
+  const workersDir = path.join(rootDir, 'workers');
+
+  const results = [];
+
+  results.push(
+    updateFile(
+      path.join(rootDir, 'wrangler.toml'),
+      date,
+      replaceTomlCompatibilityDate
+    )
+  );
+
+  results.push(
+    updateFile(
+      path.join(rootDir, 'wrangler.toml.example'),
+      date,
+      replaceTomlCompatibilityDate
+    )
+  );
+
+  if (fs.existsSync(workersDir)) {
+    const workerDirs = fs
+      .readdirSync(workersDir, { withFileTypes: true })
+      .filter((entry) => entry.isDirectory())
+      .map((entry) => entry.name);
+
+    for (const workerDir of workerDirs) {
+      const workerPath = path.join(workersDir, workerDir);
+      results.push(
+        updateFile(
+          path.join(workerPath, 'wrangler.jsonc.example'),
+          date,
+          replaceJsoncCompatibilityDate
+        )
+      );
+      results.push(
+        updateFile(
+          path.join(workerPath, 'wrangler.jsonc'),
+          date,
+          replaceJsoncCompatibilityDate
+        )
+      );
+    }
+  }
+
+  const updatedCount = results.filter((result) => result.status === 'updated').length;
+  const unchangedCount = results.filter((result) => result.status === 'unchanged').length;
+  const missingCount = results.filter((result) => result.status === 'missing').length;
+
+  console.log(`Updated compatibility dates to ${date}`);
+  console.log(`- Updated: ${updatedCount}`);
+  console.log(`- Unchanged: ${unchangedCount}`);
+  console.log(`- Missing: ${missingCount}`);
+
+  for (const result of results) {
+    if (result.status !== 'updated') {
+      console.log(`  ${result.status.toUpperCase()}: ${path.relative(rootDir, result.filePath)}`);
+    }
+  }
+
+  return results;
+}
+
+if (require.main === module) {
+  const dateArg = process.argv[2] || getCurrentDate();
+
+  try {
+    updateCompatibilityDates(dateArg);
+  } catch (error) {
+    console.error(error.message);
+    process.exit(1);
+  }
+}
+
+module.exports = { updateCompatibilityDates };

package/scripts/update-markdown-versions.cjs

@@ -0,0 +1,43 @@
+const fs = require('fs');
+const path = require('path');
+const packageJson = require('../package.json');
+
+const markdownFiles = [
+  '.github/SECURITY.md',    
+  // Add other markdown files that need version updates
+];
+
+function updateMarkdownVersions() {
+  console.log(`📝 Updating markdown files with version ${packageJson.version}...`);
+  
+  markdownFiles.forEach(filePath => {
+    const fullPath = path.join(__dirname, '..', filePath);
+    
+    if (!fs.existsSync(fullPath)) {
+      console.log(`⚠️  Skipping ${filePath} (file not found)`);
+      return;
+    }
+    
+    try {
+      let content = fs.readFileSync(fullPath, 'utf8');
+      
+      // Replace version placeholders
+      content = content.replace(/{{VERSION}}/g, packageJson.version);
+      content = content.replace(/v\d+\.\d+\.\d+(-\w+)?/g, `v${packageJson.version}`);
+      
+      fs.writeFileSync(fullPath, content);
+      console.log(`✅ Updated ${filePath}`);
+    } catch (error) {
+      console.error(`❌ Error updating ${filePath}:`, error.message);
+    }
+  });
+  
+  console.log('🎉 Markdown version update complete!');
+}
+
+// Run if called directly
+if (require.main === module) {
+  updateMarkdownVersions();
+}
+
+module.exports = { updateMarkdownVersions };

package/workers/audit-worker/package.json

@@ -9,7 +9,7 @@
 	},
 	"devDependencies": {
 		"@cloudflare/puppeteer": "^1.0.6",
-		"wrangler": "^4.77.0"
+		"wrangler": "^4.78.0"
 	},
 	"overrides": {
 		"undici": "7.24.1",

package/workers/audit-worker/wrangler.jsonc.example

@@ -7,7 +7,7 @@
   "name": "AUDIT_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/audit-worker.ts",
-  "compatibility_date": "2026-03-29",
+  "compatibility_date": "2026-03-31",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/workers/data-worker/package.json

@@ -9,7 +9,7 @@
 	},
 	"devDependencies": {
 		"@cloudflare/puppeteer": "^1.0.6",
-		"wrangler": "^4.77.0"
+		"wrangler": "^4.78.0"
 	},
 	"overrides": {
 		"undici": "7.24.1",

package/workers/data-worker/wrangler.jsonc.example

@@ -5,7 +5,7 @@
   "name": "DATA_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/data-worker.ts",
-  "compatibility_date": "2026-03-29",
+  "compatibility_date": "2026-03-31",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/workers/image-worker/package.json

@@ -9,7 +9,7 @@
 	},
 	"devDependencies": {
 		"@cloudflare/puppeteer": "^1.0.6",
-		"wrangler": "^4.77.0"
+		"wrangler": "^4.78.0"
 	},
 	"overrides": {
 		"undici": "7.24.1",

package/workers/image-worker/src/image-worker.example.ts

@@ -14,6 +14,7 @@ interface Env {
   DATA_AT_REST_ENCRYPTION_ACTIVE_KEY_ID?: string;
   IMAGE_SIGNED_URL_SECRET?: string;
   IMAGE_SIGNED_URL_TTL_SECONDS?: string;
+  IMAGE_SIGNED_URL_BASE_URL?: string;
 }
 
 interface KeyRegistryPayload {
@@ -383,6 +384,25 @@ function requireSignedUrlConfig(env: Env): void {
   }
 }
 
+function parseSignedUrlBaseUrl(raw: string): string {
+  let parsed: URL;
+  try {
+    parsed = new URL(raw.trim());
+  } catch {
+    throw new Error(`IMAGE_SIGNED_URL_BASE_URL is not a valid absolute URL: "${raw}"`);
+  }
+
+  if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') {
+    throw new Error(`IMAGE_SIGNED_URL_BASE_URL must use http or https, got: "${parsed.protocol}"`);
+  }
+
+  if (parsed.search || parsed.hash) {
+    throw new Error(`IMAGE_SIGNED_URL_BASE_URL must not include a query string or fragment: "${raw}"`);
+  }
+
+  return `${parsed.origin}${parsed.pathname}`.replace(/\/+$/, '');
+}
+
 async function getSignedUrlHmacKey(env: Env): Promise<CryptoKey> {
   const resolvedSecret = (env.IMAGE_SIGNED_URL_SECRET || env.IMAGES_API_TOKEN || '').trim();
   const keyBytes = new TextEncoder().encode(resolvedSecret);
@@ -592,8 +612,22 @@ async function handleSignedUrlMinting(request: Request, env: Env, fileId: string
   };
 
   const signedToken = await signSignedAccessPayload(payload, env);
-  const signedPath = `/${encodeURIComponent(fileId)}?st=${encodeURIComponent(signedToken)}`;
-  const signedUrl = new URL(signedPath, request.url).toString();
+
+  let baseUrl: string;
+  if (env.IMAGE_SIGNED_URL_BASE_URL) {
+    try {
+      baseUrl = parseSignedUrlBaseUrl(env.IMAGE_SIGNED_URL_BASE_URL);
+    } catch (error) {
+      console.error('Invalid IMAGE_SIGNED_URL_BASE_URL configuration', {
+        reason: error instanceof Error ? error.message : String(error)
+      });
+      return createJsonResponse({ error: 'Signed URL base URL is misconfigured' }, 500);
+    }
+  } else {
+    baseUrl = new URL(request.url).origin;
+  }
+
+  const signedUrl = `${baseUrl}/${encodeURIComponent(fileId)}?st=${encodeURIComponent(signedToken)}`;
 
   return createJsonResponse({
     success: true,

package/workers/image-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "IMAGES_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/image-worker.ts",
-  "compatibility_date": "2026-03-29",
+  "compatibility_date": "2026-03-31",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/workers/pdf-worker/package.json

@@ -10,7 +10,7 @@
 	},
 	"devDependencies": {
 		"@cloudflare/puppeteer": "^1.0.6",
-		"wrangler": "^4.77.0"
+		"wrangler": "^4.78.0"
 	},
 	"overrides": {
 		"undici": "7.24.1",

package/workers/pdf-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "PDF_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/pdf-worker.ts",
-  "compatibility_date": "2026-03-29",
+  "compatibility_date": "2026-03-31",
   "compatibility_flags": [
     "nodejs_compat"
   ],

package/workers/user-worker/package.json

@@ -9,7 +9,7 @@
   },
   "devDependencies": {
     "@cloudflare/puppeteer": "^1.0.6",
-    "wrangler": "^4.77.0"
+    "wrangler": "^4.78.0"
   },
   "overrides": {
     "undici": "7.24.1",

package/workers/user-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "USER_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/user-worker.ts",
-  "compatibility_date": "2026-03-29",
+  "compatibility_date": "2026-03-31",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/wrangler.toml.example

@@ -1,6 +1,6 @@
 #:schema node_modules/wrangler/config-schema.json
 name = "PAGES_PROJECT_NAME"
-compatibility_date = "2026-03-29"
+compatibility_date = "2026-03-31"
 compatibility_flags = ["nodejs_compat"]
 pages_build_output_dir = "./build/client"
 

package/app/components/auth/mfa-enrollment.module.css

@@ -1,276 +0,0 @@
-.overlay {
-  position: fixed;
-  top: 0;
-  left: 0;
-  right: 0;
-  bottom: 0;
-  background-color: rgba(0, 0, 0, 0.75);
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  z-index: 1000;
-  padding: 1rem;
-  cursor: default;
-}
-
-.modal {
-  background: white;
-  border-radius: 12px;
-  padding: 2rem;
-  max-width: 500px;
-  width: 100%;
-  max-height: 90vh;
-  overflow-y: auto;
-  box-shadow: 0 20px 60px rgba(0, 0, 0, 0.3);
-  cursor: default;
-}
-
-.header {
-  text-align: center;
-  margin-bottom: 2rem;
-}
-
-.header h2 {
-  color: #333;
-  margin: 0 0 1rem 0;
-  font-size: 1.5rem;
-  font-weight: 600;
-}
-
-.header p {
-  color: #666;
-  margin: 0;
-  line-height: 1.5;
-}
-
-.content {
-  margin-bottom: 2rem;
-}
-
-.phoneStep,
-.codeStep {
-  text-align: center;
-}
-
-.phoneStep h3,
-.codeStep h3 {
-  color: #333;
-  margin: 0 0 1rem 0;
-  font-size: 1.2rem;
-  font-weight: 500;
-}
-
-.input {
-  width: 100%;
-  padding: 1rem;
-  border: 2px solid #e1e5e9;
-  border-radius: 8px;
-  font-size: 1rem;
-  margin-bottom: 1rem;
-  transition: border-color 0.2s ease;
-  box-sizing: border-box;
-}
-
-.input:focus {
-  outline: none;
-  border-color: #4285f4;
-  box-shadow: 0 0 0 3px rgba(66, 133, 244, 0.1);
-}
-
-.input:disabled {
-  background-color: #f5f5f5;
-  cursor: not-allowed;
-}
-
-.note {
-  color: #666;
-  font-size: 0.9rem;
-  margin: 0 0 1.5rem 0;
-  line-height: 1.4;
-}
-
-.buttonGroup {
-  display: flex;
-  flex-direction: column;
-  gap: 0.75rem;
-}
-
-.primaryButton {
-  background-color: #4285f4;
-  color: white;
-  border: none;
-  padding: 1rem 2rem;
-  border-radius: 8px;
-  font-size: 1rem;
-  font-weight: 500;
-  cursor: pointer;
-  transition: background-color 0.2s ease;
-  width: 100%;
-  box-sizing: border-box;
-}
-
-.primaryButton:hover:not(:disabled) {
-  background-color: #3367d6;
-}
-
-.primaryButton:disabled {
-  background-color: #ccc;
-  cursor: not-allowed;
-}
-
-.secondaryButton {
-  background-color: transparent;
-  color: #4285f4;
-  border: 2px solid #4285f4;
-  padding: 0.75rem 1.5rem;
-  border-radius: 8px;
-  font-size: 0.9rem;
-  font-weight: 500;
-  cursor: pointer;
-  transition: all 0.2s ease;
-  width: 100%;
-  box-sizing: border-box;
-}
-
-.secondaryButton:hover:not(:disabled) {
-  background-color: #4285f4;
-  color: white;
-}
-
-.secondaryButton:disabled {
-  border-color: #ccc;
-  color: #ccc;
-  cursor: not-allowed;
-}
-
-.resendTimer {
-  color: #999;
-  font-size: 0.9rem;
-  margin: 0;
-  text-align: center;
-}
-
-.errorMessage {
-  background: linear-gradient(
-    135deg,
-    color-mix(in lab, var(--error) 12%, transparent),
-    color-mix(in lab, var(--error) 8%, transparent)
-  );
-  border: 1px solid color-mix(in lab, var(--error) 30%, transparent);
-  border-left: 4px solid var(--error);
-  color: color-mix(in lab, var(--error) 90%, var(--black));
-  padding: var(--spaceL);
-  border-radius: var(--spaceS);
-  font-size: 0.9rem;
-  margin-bottom: 1rem;
-  text-align: left;
-  line-height: 1.4;
-  position: relative;
-  overflow: hidden;
-  box-shadow: 0 4px 16px color-mix(in lab, var(--text) 10%, transparent);
-  animation: slideInError var(--durationM) var(--bezierFastoutSlowin);
-}
-
-.errorMessage::before {
-  content: "";
-  position: absolute;
-  top: 0;
-  left: 0;
-  right: 0;
-  height: 2px;
-  background: linear-gradient(
-    90deg,
-    var(--error),
-    color-mix(in lab, var(--error) 60%, transparent)
-  );
-  animation: shimmer 2s ease-in-out infinite;
-}
-
-.errorMessage:empty {
-  display: none;
-}
-
-.footer {
-  border-top: 1px solid #e1e5e9;
-  padding-top: 1.5rem;
-  text-align: center;
-}
-
-.skipButton {
-  background-color: transparent;
-  color: #666;
-  border: none;
-  padding: 0.75rem 1.5rem;
-  border-radius: 8px;
-  font-size: 0.9rem;
-  cursor: pointer;
-  transition: color 0.2s ease;
-}
-
-.skipButton:hover:not(:disabled) {
-  color: #333;
-  text-decoration: underline;
-}
-
-.skipButton:disabled {
-  color: #ccc;
-  cursor: not-allowed;
-}
-
-.signOutContainer {
-  margin-top: var(--spaceL);
-  padding-top: var(--spaceL);
-  border-top: 1px solid var(--borderLight);
-  text-align: center;
-}
-
-.signOutText {
-  color: var(--textLight);
-  font-size: var(--fontSizeSmall);
-  margin-bottom: var(--spaceM);
-}
-
-/* Animations */
-@keyframes slideInError {
-  from {
-    opacity: 0;
-    transform: translateY(calc(-1 * var(--spaceM))) scaleY(0.8);
-    max-height: 0;
-    padding-top: 0;
-    padding-bottom: 0;
-    margin-top: 0;
-    margin-bottom: 0;
-  }
-  to {
-    opacity: 1;
-    transform: translateY(0) scaleY(1);
-    max-height: 200px;
-    padding-top: var(--spaceL);
-    padding-bottom: var(--spaceL);
-    margin-top: 0;
-    margin-bottom: 1rem;
-  }
-}
-
-@keyframes shimmer {
-  0%,
-  100% {
-    opacity: 0.6;
-    transform: translateX(-100%);
-  }
-  50% {
-    opacity: 1;
-    transform: translateX(100%);
-  }
-}
-
-/* Reduce motion for accessibility */
-@media (prefers-reduced-motion: reduce) {
-  .errorMessage {
-    animation: none;
-  }
-
-  .errorMessage::before {
-    animation: none;
-  }
-}