@striae-org/striae 5.4.1 → 5.4.3

package/app/components/actions/case-export/download-handlers.ts

@@ -438,7 +438,7 @@ async function generateJSONContent(
   
   // Add forensic protection warning if enabled
   if (protectForensicData) {
-    return addForensicDataWarning(finalJsonString, 'json');
+    return addForensicDataWarning(finalJsonString);
   }
   
   return finalJsonString;

package/app/components/actions/case-export/metadata-helpers.ts

@@ -32,10 +32,8 @@ export async function getUserExportMetadata(user: User) {
 /**
  * Add data protection warning to content
  */
-export function addForensicDataWarning(content: string, format: 'csv' | 'json'): string {
-  const warning = format === 'csv' 
-    ? `"CASE DATA WARNING: This file contains evidence data for forensic examination. Any modification may compromise the integrity of the evidence. Handle according to your organization's chain of custody procedures."\n\n`
-    : `/* CASE DATA WARNING
+export function addForensicDataWarning(content: string): string {
+  const warning = `/* CASE DATA WARNING
  * This file contains evidence data for forensic examination.
  * Any modification may compromise the integrity of the evidence.
  * Handle according to your organization's chain of custody procedures.

package/app/components/actions/case-import/confirmation-import.ts

@@ -185,6 +185,17 @@ export async function importConfirmationData(
       throw new Error('You cannot import confirmation data that you exported yourself.');
     }
 
+    // Validate that this confirmation package was intended for the current user.
+    // originalCaseOwnerUid is embedded at export time and covered by the package signature.
+    if (
+      confirmationData.metadata.originalCaseOwnerUid &&
+      confirmationData.metadata.originalCaseOwnerUid !== user.uid
+    ) {
+      throw new Error(
+        'This confirmation package was not exported for your case. It can only be imported by the original case owner.'
+      );
+    }
+
     onProgress?.('Validating case', 50, 'Checking case exists...');
 
     // Check if case exists in user's regular cases

package/app/components/actions/case-import/orchestrator.ts

@@ -512,6 +512,7 @@ export async function importCaseForReview(
       importedAt: new Date().toISOString(),
       originalExportDate: caseData.metadata.exportDate,
       originalExportedBy: caseData.metadata.exportedBy || 'Unknown',
+      originalExportedByUid: caseData.metadata.exportedByUid,
       sourceHash: parsedForensicManifest?.manifestHash,
       sourceManifestVersion: parsedForensicManifest?.manifestVersion,
       sourceSignatureKeyId: parsedForensicManifest?.signature?.keyId,

package/app/components/actions/case-import/storage-operations.ts

@@ -118,6 +118,8 @@ export async function storeCaseDataInR2(
       ...(bundledAuditTrail && { bundledAuditTrail }),
       // Add original image ID mapping for confirmation linking
       originalImageIds: originalImageIds,
+      // Store original case owner UID so confirmation exports can embed the intended recipient
+      ...(caseData.metadata.exportedByUid && { originalCaseOwnerUid: caseData.metadata.exportedByUid }),
       // Add forensic manifest timestamp if available for confirmation exports
       ...(forensicManifest?.createdAt && { forensicManifestCreatedAt: forensicManifest.createdAt }),
       // Store full forensic manifest metadata for chain-of-custody validation

package/app/components/actions/case-import/zip-processing.ts

@@ -281,13 +281,13 @@ export async function parseImportZip(zipFile: File): Promise<{
     const zip = await JSZip.loadAsync(zipFile);
     const verificationPublicKeyPem = await extractVerificationPublicKeyFromZip(zip);
     
-    // Find the main data file (JSON or CSV)
+    // Find the main data file (JSON)
     const dataFiles = Object.keys(zip.files).filter(name => 
-      name.endsWith('_data.json') || name.endsWith('_data.csv')
+      name.endsWith('_data.json')
     );
     
     if (dataFiles.length === 0) {
-      throw new Error('No valid data file found in ZIP archive');
+      throw new Error('No valid JSON data file found in ZIP archive');
     }
     
     if (dataFiles.length > 1) {

package/app/components/actions/confirm-export.ts

@@ -153,7 +153,7 @@ export async function getCaseConfirmations(
 export async function getCaseDataWithManifest(
   user: User,
   caseNumber: string
-): Promise<{ confirmations: CaseConfirmations | null; forensicManifestCreatedAt?: string }> {
+): Promise<{ confirmations: CaseConfirmations | null; forensicManifestCreatedAt?: string; originalCaseOwnerUid?: string }> {
   try {
     const caseData = await getCaseData(user, caseNumber) as CaseDataWithConfirmations & { forensicManifestCreatedAt?: string };
     if (!caseData) {
@@ -163,7 +163,8 @@ export async function getCaseDataWithManifest(
     
     return {
       confirmations: caseData.confirmations || null,
-      forensicManifestCreatedAt: caseData.forensicManifestCreatedAt
+      forensicManifestCreatedAt: caseData.forensicManifestCreatedAt,
+      originalCaseOwnerUid: caseData.originalCaseOwnerUid
     };
 
   } catch (error) {
@@ -206,7 +207,7 @@ export async function exportConfirmationData(
     auditService.startWorkflow(caseNumber);
     
     // Get all confirmation data and forensic manifest info for the case
-    const { confirmations: caseConfirmations, forensicManifestCreatedAt } = await getCaseDataWithManifest(user, caseNumber);
+    const { confirmations: caseConfirmations, forensicManifestCreatedAt, originalCaseOwnerUid } = await getCaseDataWithManifest(user, caseNumber);
     
     if (!caseConfirmations || Object.keys(caseConfirmations).length === 0) {
       throw new Error('No confirmation data found for this case');
@@ -256,7 +257,8 @@ export async function exportConfirmationData(
         ...userMetadata,
         totalConfirmations: Object.keys(caseConfirmations).length,
         version: '2.0',
-        ...(originalExportCreatedAt && { originalExportCreatedAt })
+        ...(originalExportCreatedAt && { originalExportCreatedAt }),
+        ...(originalCaseOwnerUid && { originalCaseOwnerUid })
       },
       confirmations: caseConfirmations
     };

package/app/components/canvas/confirmation/confirmation.tsx

@@ -72,11 +72,6 @@ export const ConfirmationModal = ({ isOpen, onClose, onConfirm, company, default
   if (!isOpen) return null;
 
   const handleConfirm = async () => {
-    if (!badgeId.trim()) {
-      setError('Badge/ID is required');
-      return;
-    }
-
     setIsConfirming(true);
     setError('');
 
@@ -134,19 +129,10 @@ export const ConfirmationModal = ({ isOpen, onClose, onConfirm, company, default
             </div>
 
             <div className={styles.field}>
-              <label className={styles.label} htmlFor="badgeId">Badge/ID: *</label>
-              <input
-                id="badgeId"
-                type="text"
-                className={styles.input}
-                value={badgeId}
-                onChange={(e) => {
-                  setBadgeId(e.target.value);
-                  if (error) setError('');
-                }}
-                placeholder="Enter your badge or ID number"
-                disabled={isConfirming || hasExistingConfirmation}
-              />
+              <span className={styles.label}>Badge/ID:</span>
+              <div className={styles.readOnlyValue}>
+                {badgeId || 'Not set'}
+              </div>
             </div>
 
             <div className={styles.field}>

package/app/components/mobile-warning/mobile-warning.module.css

@@ -0,0 +1,80 @@
+@layer layout {
+  .overlay {
+    display: none;
+    position: fixed;
+    inset: 0;
+    z-index: 10000;
+    background: var(--background);
+    align-items: center;
+    justify-content: center;
+    padding: var(--spaceXL);
+  }
+
+  .backdrop {
+    appearance: none;
+    position: absolute;
+    inset: 0;
+    background: transparent;
+    border: none;
+    cursor: default;
+  }
+
+  .content {
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    text-align: center;
+    max-width: 420px;
+    gap: var(--spaceL);
+  }
+
+  .icon {
+    color: var(--primary);
+  }
+
+  .title {
+    font-size: var(--fontSizeH4);
+    font-weight: var(--fontWeightBold);
+    color: var(--textTitle);
+    line-height: var(--lineHeightTitle);
+    margin: 0;
+  }
+
+  .message {
+    font-size: var(--fontSizeBodyS);
+    color: var(--textBody);
+    line-height: var(--lineHeightBody);
+    margin: 0;
+  }
+
+  .dismissButton {
+    appearance: none;
+    background-color: var(--primary);
+    border: 1px solid var(--primary);
+    border-radius: var(--radiusM);
+    color: var(--white);
+    cursor: pointer;
+    font-size: var(--fontSizeBodyS);
+    font-weight: var(--fontWeightMedium);
+    padding: var(--spaceM) var(--spaceXL);
+    transition:
+      background-color var(--durationS) var(--bezierFastoutSlowin),
+      border-color var(--durationS) var(--bezierFastoutSlowin);
+  }
+
+  .dismissButton:hover {
+    background-color: color-mix(in lab, var(--primary) 82%, var(--black));
+    border-color: color-mix(in lab, var(--primary) 82%, var(--black));
+  }
+
+  .dismissButton:focus-visible {
+    outline: 3px solid color-mix(in lab, var(--white) 65%, var(--primary));
+    outline-offset: 3px;
+  }
+
+  @media (max-width: 1024px) {
+    .overlay {
+      display: flex;
+    }
+  }
+}

package/app/components/mobile-warning/mobile-warning.tsx

@@ -0,0 +1,108 @@
+import { useState, useCallback, useRef, useEffect } from 'react';
+import styles from './mobile-warning.module.css';
+
+const DISMISSED_KEY = 'striae-mobile-warning-dismissed';
+
+const isBrowser =
+  typeof window !== 'undefined' && typeof window.sessionStorage !== 'undefined';
+
+export function MobileWarning() {
+  const [dismissed, setDismissed] = useState<boolean>(() => {
+    if (!isBrowser) {
+      // Match previous server behavior: render null during SSR.
+      return true;
+    }
+
+    try {
+      return window.sessionStorage.getItem(DISMISSED_KEY) === '1';
+    } catch {
+      return false;
+    }
+  });
+
+  const buttonRef = useRef<HTMLButtonElement>(null);
+
+  useEffect(() => {
+    if (!dismissed && buttonRef.current) {
+      buttonRef.current.focus();
+    }
+  }, [dismissed]);
+
+  const handleDismiss = useCallback(() => {
+    if (isBrowser) {
+      try {
+        window.sessionStorage.setItem(DISMISSED_KEY, '1');
+      } catch {
+        // Ignore storage errors and still dismiss for this session.
+      }
+    }
+    setDismissed(true);
+  }, []);
+
+  useEffect(() => {
+    if (dismissed) return;
+    const onKeyDown = (e: KeyboardEvent) => {
+      if (e.key === 'Escape') {
+        handleDismiss();
+      }
+    };
+    document.addEventListener('keydown', onKeyDown);
+    return () => document.removeEventListener('keydown', onKeyDown);
+  }, [dismissed, handleDismiss]);
+
+  if (dismissed) {
+    return null;
+  }
+
+  return (
+    <div
+      className={styles.overlay}
+      role="dialog"
+      aria-modal="true"
+      aria-labelledby="mobile-warning-title"
+      aria-describedby="mobile-warning-message"
+    >
+      {/* Backdrop dismiss button covers area outside dialog content */}
+      <button
+        type="button"
+        className={styles.backdrop}
+        onClick={handleDismiss}
+        aria-label="Dismiss"
+        tabIndex={-1}
+      />
+      <div className={styles.content}>
+        <div className={styles.icon}>
+          <svg
+            width="48"
+            height="48"
+            viewBox="0 0 24 24"
+            fill="none"
+            stroke="currentColor"
+            strokeWidth="1.5"
+            strokeLinecap="round"
+            strokeLinejoin="round"
+          >
+            <rect x="5" y="2" width="14" height="20" rx="2" ry="2" />
+            <line x1="12" y1="18" x2="12.01" y2="18" />
+          </svg>
+        </div>
+        <h2 className={styles.title} id="mobile-warning-title">
+          Desktop Experience Only
+        </h2>
+        <p className={styles.message} id="mobile-warning-message">
+          Striae is designed for desktop browsers and is not optimized for
+          mobile devices or tablets. For the best experience, please use a
+          desktop computer.
+        </p>
+        <button
+          ref={buttonRef}
+          type="button"
+          className={styles.dismissButton}
+          onClick={handleDismiss}
+        >
+          Continue Anyway
+        </button>
+      </div>
+    </div>
+  );
+}

package/app/components/navbar/case-import/utils/file-validation.ts

@@ -1,4 +1,4 @@
-const CASE_EXPORT_DATA_FILE_REGEX = /_data\.(json|csv)$/i;
+const CASE_EXPORT_DATA_FILE_REGEX = /_data\.json$/i;
 const CONFIRMATION_EXPORT_FILE_REGEX = /^confirmation-data-.*\.json$/i;
 const FORENSIC_MANIFEST_FILE_NAME = 'forensic_manifest.json';
 const ENCRYPTION_MANIFEST_FILE_NAME = 'encryption_manifest.json';

package/app/config-example/config.json

@@ -10,6 +10,6 @@
   "export_encryption_public_keys": {
     "EXPORT_ENCRYPTION_KEY_ID": "EXPORT_ENCRYPTION_PUBLIC_KEY"
   },
-  "max_cases_review": 0,
-  "max_files_per_case_review": 0
+  "max_cases_demo": 0,
+  "max_files_per_case_demo": 0
 }

package/app/root.tsx

@@ -13,6 +13,7 @@ import {
   themeStyles 
 } from '~/components/theme-provider/theme-provider';
 import { AuthProvider } from '~/components/auth/auth-provider';
+import { MobileWarning } from '~/components/mobile-warning/mobile-warning';
 import { auth } from '~/services/firebase';
 import styles from '~/styles/root.module.css';
 import './global.css';
@@ -68,6 +69,7 @@ export function Layout({ children }: { children: React.ReactNode }) {
       </head>
       <body className="flex flex-col h-screen w-full overflow-x-hidden">
         <ThemeProvider theme={theme} className="">
+        <MobileWarning />
         <main>
           {children}
         </main>

package/app/services/audit/audit-file-type.ts

@@ -4,7 +4,6 @@ export const getAuditFileTypeFromMime = (mimeType: string): AuditFileType => {
   if (mimeType.startsWith('image/')) return 'image-file';
   if (mimeType === 'application/pdf') return 'pdf-document';
   if (mimeType === 'application/json') return 'json-data';
-  if (mimeType === 'text/csv') return 'csv-export';
   return 'unknown';
 };
 

package/app/services/audit/audit.service.ts

@@ -208,7 +208,7 @@ class AuditService {
     result: AuditResult,
     errors: string[] = [],
     performanceMetrics?: PerformanceMetrics,
-    exportFormat?: 'json' | 'csv' | 'xlsx' | 'zip',
+    exportFormat?: 'json' | 'zip',
     protectionEnabled?: boolean,
     signatureDetails?: {
       present?: boolean;

package/app/services/audit/builders/audit-event-builders-workflow.ts

@@ -20,21 +20,18 @@ interface BuildCaseExportAuditParamsInput {
   result: AuditResult;
   errors?: string[];
   performanceMetrics?: PerformanceMetrics;
-  exportFormat?: 'json' | 'csv' | 'xlsx' | 'zip';
+  exportFormat?: 'json' | 'zip';
   signatureDetails?: SignatureDetailsInput;
 }
 
 const resolveCaseExportFileType = (
   fileName: string,
-  exportFormat?: 'json' | 'csv' | 'xlsx' | 'zip'
+  exportFormat?: 'json' | 'zip'
 ): AuditFileType => {
   if (exportFormat) {
     switch (exportFormat) {
       case 'json':
         return 'json-data';
-      case 'csv':
-      case 'xlsx':
-        return 'csv-export';
       case 'zip':
       default:
         return 'case-package';
@@ -42,7 +39,6 @@ const resolveCaseExportFileType = (
   }
 
   if (fileName.includes('.json')) return 'json-data';
-  if (fileName.includes('.csv') || fileName.includes('.xlsx')) return 'csv-export';
   return 'case-package';
 };
 

package/app/services/audit/index.ts

@@ -1,2 +1 @@
 export { auditService } from './audit.service';
-export { auditExportService } from './audit-export.service';

package/app/types/audit.ts

@@ -25,7 +25,7 @@ export type AuditResult = 'success' | 'failure' | 'warning' | 'blocked' | 'pendi
 
 export type AuditFileType = 
   | 'case-package' | 'confirmation-data' | 'image-file' | 'pdf-document' 
-  | 'json-data' | 'csv-export' | 'log-file' | 'unknown';
+  | 'json-data' | 'log-file' | 'unknown';
 
 /**
  * Core audit entry structure for all validation events

package/app/types/case.ts

@@ -115,6 +115,7 @@ export interface CaseDataWithConfirmations {
   archiveReason?: string;
   importedAt?: string;
   originalImageIds?: { [originalId: string]: string };
+  originalCaseOwnerUid?: string;
   confirmations?: CaseConfirmations;
   bundledAuditTrail?: BundledAuditTrailData;
 }

package/app/types/import.ts

@@ -21,6 +21,7 @@ export interface ReadOnlyCaseMetadata {
   importedAt: string;
   originalExportDate: string;
   originalExportedBy: string;
+  originalExportedByUid?: string;
   sourceHash?: string;
   sourceManifestVersion?: string;
   sourceSignatureKeyId?: string;
@@ -63,6 +64,7 @@ export interface ConfirmationImportData {
       value: string;
     };
     originalExportCreatedAt?: string;
+    originalCaseOwnerUid?: string;
   };
   confirmations: {
     [originalImageId: string]: Array<{

package/app/utils/data/permissions.ts

@@ -3,8 +3,8 @@ import type { UserData, ExtendedUserData, UserLimits, ReadOnlyCaseMetadata } fro
 import paths from '~/config/config.json';
 import { fetchDataApi, fetchUserApi } from '../api';
 
-const MAX_CASES_REVIEW = paths.max_cases_review;
-const MAX_FILES_PER_CASE_REVIEW = paths.max_files_per_case_review;
+const MAX_CASES_DEMO = paths.max_cases_demo;
+const MAX_FILES_PER_CASE_DEMO = paths.max_files_per_case_demo;
 
 export interface UserUsage {
   currentCases: number;
@@ -63,8 +63,8 @@ export const getUserLimits = (userData: UserData): UserLimits => {
     };
   } else {
     return {
-      maxCases: MAX_CASES_REVIEW, // Use config value for review users
-      maxFilesPerCase: MAX_FILES_PER_CASE_REVIEW // Use config value for review users
+      maxCases: MAX_CASES_DEMO, // Use config value for demo users
+      maxFilesPerCase: MAX_FILES_PER_CASE_DEMO // Use config value for demo users
     };
   }
 };
@@ -155,7 +155,7 @@ export const canCreateCase = async (user: User): Promise<{ canCreate: boolean; r
     if (usage.currentCases >= limits.maxCases) {
       return {
         canCreate: false,
-        reason: `Read-Only Account: Case creation disabled`
+        reason: `Demo account only: Maximum of ${limits.maxCases} case${limits.maxCases === 1 ? '' : 's'} reached`
       };
     }
 
@@ -181,7 +181,7 @@ export const canUploadFile = async (user: User, currentFileCount: number): Promi
     if (currentFileCount >= limits.maxFilesPerCase) {
       return {
         canUpload: false,
-        reason: `Read-Only Account: File uploads disabled`
+        reason: `Demo account only: Maximum of ${limits.maxFilesPerCase} file${limits.maxFilesPerCase === 1 ? '' : 's'} per case reached`
       };
     }
 
@@ -199,13 +199,13 @@ export const getLimitsDescription = async (user: User): Promise<string> => {
   try {
     const userData = await getUserData(user);
     if (!userData) {
-      return `Account limits: ${MAX_CASES_REVIEW} case, ${MAX_FILES_PER_CASE_REVIEW} files per case`;
+      return `Account limits: ${MAX_CASES_DEMO} case${MAX_CASES_DEMO === 1 ? '' : 's'}, ${MAX_FILES_PER_CASE_DEMO} file${MAX_FILES_PER_CASE_DEMO === 1 ? '' : 's'} per case`;
     }
 
     if (userData.permitted) {
       return '';
     } else {
-      return `Read-Only Account: Case review only.`;
+      return `Demo account only: ${MAX_CASES_DEMO} case${MAX_CASES_DEMO === 1 ? '' : 's'}, ${MAX_FILES_PER_CASE_DEMO} file${MAX_FILES_PER_CASE_DEMO === 1 ? '' : 's'} per case`;
     }
   } catch (error) {
     console.error('Error getting limits description:', error);
@@ -391,8 +391,9 @@ export const canAccessCase = async (user: User, caseNumber: string): Promise<Per
 /**
  * Check if user can modify a specific case
  * - Regular users (permitted=true) can modify their owned cases
- * - Read-only users (permitted=false) can modify read-only cases for review
- * - Nobody can modify cases marked as truly read-only in the case data itself
+ * - Demo users (permitted=false) can modify their owned cases
+ * - Both permitted and demo users can modify read-only cases for review
+ * - Nobody can modify cases marked as archived in the case data itself
  */
 export const canModifyCase = async (user: User, caseNumber: string): Promise<PermissionResult> => {
   try {
@@ -419,20 +420,21 @@ export const canModifyCase = async (user: User, caseNumber: string): Promise<Per
       if (caseData.archived) {
         return { allowed: false, reason: 'Archived cases are immutable and read-only' };
       }
+    } else if (archiveCheckResponse.status !== 404) {
+      // Fail closed: if archive status can't be verified (worker error/timeout),
+      // block modification rather than risk mutating an archived case
+      return { allowed: false, reason: 'Unable to verify case archive status' };
     }
 
     // Check if user owns the case (regular cases)
     if (userData.cases && userData.cases.some(c => c.caseNumber === caseNumber)) {
-      // For owned cases, user must be permitted
-      if (!userData.permitted) {
-        return { allowed: false, reason: 'Read-Only Account: Cannot modify owned cases' };
-      }
+      // Both permitted and demo users can modify their owned cases
       return { allowed: true };
     }
 
     // Check if it's a read-only case that user can review
     if (userData.readOnlyCases && userData.readOnlyCases.some(c => c.caseNumber === caseNumber)) {
-      // For read-only cases, both permitted and non-permitted users can modify for review
+      // For read-only cases, both permitted and demo users can modify for review
       // The actual read-only restrictions should be enforced at the case data level, not user level
       return { allowed: true };
     }

package/app/utils/forensics/audit-export-signature.ts

@@ -9,8 +9,8 @@ export const AUDIT_EXPORT_SIGNATURE_VERSION = '1.0';
 
 const SHA256_HEX_REGEX = /^[a-f0-9]{64}$/i;
 
-export type AuditExportFormat = 'csv' | 'json' | 'txt';
-export type AuditExportType = 'entries' | 'trail' | 'report';
+export type AuditExportFormat = 'json';
+export type AuditExportType = 'trail';
 export type AuditExportScopeType = 'case' | 'user';
 
 export interface AuditExportSigningPayload {
@@ -35,11 +35,11 @@ export function isValidAuditExportSigningPayload(
     return false;
   }
 
-  if (payload.exportFormat !== 'csv' && payload.exportFormat !== 'json' && payload.exportFormat !== 'txt') {
+  if (payload.exportFormat !== 'json') {
     return false;
   }
 
-  if (payload.exportType !== 'entries' && payload.exportType !== 'trail' && payload.exportType !== 'report') {
+  if (payload.exportType !== 'trail') {
     return false;
   }
 

package/app/utils/forensics/confirmation-signature.ts

@@ -71,6 +71,13 @@ function isValidConfirmationData(candidate: Partial<ConfirmationImportData>): ca
     return false;
   }
 
+  if (
+    typeof metadata.originalCaseOwnerUid !== 'undefined' &&
+    (typeof metadata.originalCaseOwnerUid !== 'string' || metadata.originalCaseOwnerUid.trim().length === 0)
+  ) {
+    return false;
+  }
+
   const confirmations = candidate.confirmations as Record<string, unknown>;
   for (const [imageId, confirmationList] of Object.entries(confirmations)) {
     if (!imageId || !Array.isArray(confirmationList)) {
@@ -146,6 +153,9 @@ export function createConfirmationSigningPayload(
       hash: confirmationData.metadata.hash.toUpperCase(),
       ...(confirmationData.metadata.originalExportCreatedAt
         ? { originalExportCreatedAt: confirmationData.metadata.originalExportCreatedAt }
+        : {}),
+      ...(confirmationData.metadata.originalCaseOwnerUid
+        ? { originalCaseOwnerUid: confirmationData.metadata.originalCaseOwnerUid }
         : {})
     },
     confirmations: normalizeConfirmations(confirmationData.confirmations)

package/app/utils/forensics/export-verification.ts

@@ -23,7 +23,7 @@ interface BundledAuditExportFile {
     exportVersion?: string;
     totalEntries?: number;
     application?: string;
-    exportType?: 'entries' | 'trail' | 'report';
+    exportType?: 'trail';
     scopeType?: 'case' | 'user';
     scopeIdentifier?: string;
     hash?: string;
@@ -164,7 +164,7 @@ async function verifyBundledAuditExport(
     const embeddedSignaturePayload: Partial<AuditExportSigningPayload> = metadata.signatureMetadata ?? {
       signatureVersion: metadata.signatureVersion,
       exportFormat: 'json',
-      exportType: metadata.exportType,
+      exportType: 'trail',
       scopeType: metadata.scopeType,
       scopeIdentifier: metadata.scopeIdentifier,
       generatedAt: metadata.exportTimestamp,
@@ -209,23 +209,15 @@ async function verifyBundledAuditExport(
 
 /**
  * Remove forensic warning from content for hash validation.
- * Supports the warning formats added to JSON and CSV case exports.
+ * Supports the warning format added to JSON case exports.
  */
 export function removeForensicWarning(content: string): string {
   const jsonForensicWarningRegex = /^\/\*\s*CASE\s+DATA\s+WARNING[\s\S]*?\*\/\s*\r?\n*/;
-  const csvForensicWarningRegex = /^"CASE DATA WARNING: This file contains evidence data for forensic examination\. Any modification may compromise the integrity of the evidence\. Handle according to your organization's chain of custody procedures\."(?:\r?\n){2}/;
 
   let cleaned = content;
 
   if (jsonForensicWarningRegex.test(content)) {
     cleaned = content.replace(jsonForensicWarningRegex, '');
-  } else if (csvForensicWarningRegex.test(content)) {
-    cleaned = content.replace(csvForensicWarningRegex, '');
-  } else if (content.startsWith('"CASE DATA WARNING:')) {
-    const match = content.match(/^"[^"]*"(?:\r?\n)+/);
-    if (match) {
-      cleaned = content.substring(match[0].length);
-    }
   }
 
   return cleaned.replace(/^\s+/, '');