@striae-org/striae 5.4.2 → 5.4.4

package/workers/user-worker/src/handlers/user-routes.ts

@@ -13,7 +13,20 @@ import type {
 function createJsonResponse(data: unknown, headers: ResponseHeaders, status: number = 200): Response {
   return new Response(JSON.stringify(data), {
     status,
-    headers
+    headers: {
+      ...headers,
+      'Content-Type': 'application/json; charset=utf-8'
+    }
+  });
+}
+
+function createTextResponse(message: string, headers: ResponseHeaders, status: number): Response {
+  return new Response(message, {
+    status,
+    headers: {
+      ...headers,
+      'Content-Type': 'text/plain; charset=utf-8'
+    }
   });
 }
 
@@ -25,10 +38,7 @@ export async function handleGetUser(
   try {
     const userData = await readUserRecord(env, userUid);
     if (userData === null) {
-      return new Response('User not found', {
-        status: 404,
-        headers: corsHeaders
-      });
+      return createTextResponse('User not found', corsHeaders, 404);
     }
 
     return createJsonResponse(userData, corsHeaders);
@@ -36,10 +46,7 @@ export async function handleGetUser(
     const errorMessage = error instanceof Error ? error.message : 'Unknown user data read error';
     console.error('Failed to get user data:', { uid: userUid, reason: errorMessage });
 
-    return new Response('Failed to get user data', {
-      status: 500,
-      headers: corsHeaders
-    });
+    return createTextResponse('Failed to get user data', corsHeaders, 500);
   }
 }
 
@@ -91,10 +98,7 @@ export async function handleAddUser(
 
     return createJsonResponse(userData, corsHeaders, existingUser !== null ? 200 : 201);
   } catch {
-    return new Response('Failed to save user data', {
-      status: 500,
-      headers: corsHeaders
-    });
+    return createTextResponse('Failed to save user data', corsHeaders, 500);
   }
 }
 
@@ -115,10 +119,7 @@ export async function handleDeleteUser(
     const errorMessage = error instanceof Error ? error.message : 'Unknown error occurred';
 
     if (errorMessage === 'User not found') {
-      return new Response('User not found', {
-        status: 404,
-        headers: corsHeaders
-      });
+      return createTextResponse('User not found', corsHeaders, 404);
     }
 
     return createJsonResponse({
@@ -135,7 +136,7 @@ export function handleDeleteUserWithProgress(
 ): Response {
   const sseHeaders: ResponseHeaders = {
     ...corsHeaders,
-    'Content-Type': 'text/event-stream',
+    'Content-Type': 'text/event-stream; charset=utf-8',
     'Cache-Control': 'no-cache, no-transform',
     Connection: 'keep-alive'
   };
@@ -188,10 +189,7 @@ export async function handleAddCases(
     const { cases = [] }: AddCasesRequest = await request.json();
     const userData = await readUserRecord(env, userUid);
     if (!userData) {
-      return new Response('User not found', {
-        status: 404,
-        headers: corsHeaders
-      });
+      return createTextResponse('User not found', corsHeaders, 404);
     }
 
     const existingCases = userData.cases || [];
@@ -205,10 +203,7 @@ export async function handleAddCases(
 
     return createJsonResponse(userData, corsHeaders);
   } catch {
-    return new Response('Failed to add cases', {
-      status: 500,
-      headers: corsHeaders
-    });
+    return createTextResponse('Failed to add cases', corsHeaders, 500);
   }
 }
 
@@ -222,10 +217,7 @@ export async function handleDeleteCases(
     const { casesToDelete }: DeleteCasesRequest = await request.json();
     const userData = await readUserRecord(env, userUid);
     if (!userData) {
-      return new Response('User not found', {
-        status: 404,
-        headers: corsHeaders
-      });
+      return createTextResponse('User not found', corsHeaders, 404);
     }
 
     userData.cases = userData.cases.filter((caseItem) => !casesToDelete.includes(caseItem.caseNumber));
@@ -234,9 +226,6 @@ export async function handleDeleteCases(
 
     return createJsonResponse(userData, corsHeaders);
   } catch {
-    return new Response('Failed to delete cases', {
-      status: 500,
-      headers: corsHeaders
-    });
+    return createTextResponse('Failed to delete cases', corsHeaders, 500);
   }
 }

package/workers/user-worker/src/user-worker.example.ts

@@ -13,10 +13,19 @@ import type { Env } from './types';
 const corsHeaders: Record<string, string> = {
   'Access-Control-Allow-Origin': 'PAGES_CUSTOM_DOMAIN',
   'Access-Control-Allow-Methods': 'GET, PUT, DELETE, OPTIONS',
-  'Access-Control-Allow-Headers': 'Content-Type, X-Custom-Auth-Key',
-  'Content-Type': 'application/json'
+  'Access-Control-Allow-Headers': 'Content-Type, X-Custom-Auth-Key'
 };
 
+function createTextResponse(message: string, status: number, headers: Record<string, string>): Response {
+  return new Response(message, {
+    status,
+    headers: {
+      ...headers,
+      'Content-Type': 'text/plain; charset=utf-8'
+    }
+  });
+}
+
 export default {
   async fetch(request: Request, env: Env): Promise<Response> {
     if (request.method === 'OPTIONS') {
@@ -39,7 +48,7 @@ export default {
       const isCasesEndpoint = parts[2] === USER_CASES_SEGMENT;
       
       if (!userUid) {
-        return new Response('Not Found', { status: 404 });
+        return createTextResponse('Not Found', 404, corsHeaders);
       }
 
       // Handle regular cases endpoint
@@ -47,10 +56,7 @@ export default {
         switch (request.method) {
           case 'PUT': return handleAddCases(request, env, userUid, corsHeaders);
           case 'DELETE': return handleDeleteCases(request, env, userUid, corsHeaders);
-          default: return new Response('Method not allowed', {
-            status: 405,
-            headers: corsHeaders
-          });
+          default: return createTextResponse('Method not allowed', 405, corsHeaders);
         }
       }
 
@@ -64,31 +70,19 @@ export default {
         case 'DELETE': return streamProgress
           ? handleDeleteUserWithProgress(env, userUid, corsHeaders)
           : handleDeleteUser(env, userUid, corsHeaders);
-        default: return new Response('Method not allowed', {
-          status: 405,
-          headers: corsHeaders
-        });
+        default: return createTextResponse('Method not allowed', 405, corsHeaders);
       }
     } catch (error) {
       const errorMessage = error instanceof Error ? error.message : 'Unknown error occurred';
       if (errorMessage === 'Unauthorized') {
-        return new Response('Forbidden', { 
-          status: 403, 
-          headers: corsHeaders 
-        });
+        return createTextResponse('Forbidden', 403, corsHeaders);
       }
 
       if (errorMessage === 'User KV encryption is not fully configured') {
-        return new Response(errorMessage, {
-          status: 500,
-          headers: corsHeaders
-        });
+        return createTextResponse(errorMessage, 500, corsHeaders);
       }
       
-      return new Response('Internal Server Error', { 
-        status: 500, 
-        headers: corsHeaders 
-      });
+      return createTextResponse('Internal Server Error', 500, corsHeaders);
     }
   }
 };

package/workers/user-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "USER_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/user-worker.ts",
-  "compatibility_date": "2026-03-31",
+  "compatibility_date": "2026-04-02",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/wrangler.toml.example

@@ -1,6 +1,6 @@
 #:schema node_modules/wrangler/config-schema.json
 name = "PAGES_PROJECT_NAME"
-compatibility_date = "2026-03-31"
+compatibility_date = "2026-04-02"
 compatibility_flags = ["nodejs_compat"]
 pages_build_output_dir = "./build/client"
 

package/app/components/audit/viewer/use-audit-viewer-export.ts

@@ -1,176 +0,0 @@
-import { useCallback } from 'react';
-import type { Dispatch, SetStateAction } from 'react';
-import type { User } from 'firebase/auth';
-import { auditExportService } from '~/services/audit';
-import type { AuditTrail, ValidationAuditEntry } from '~/types';
-
-interface UseAuditViewerExportParams {
-  user: User | null;
-  effectiveCaseNumber?: string;
-  filteredEntries: ValidationAuditEntry[];
-  auditTrail: AuditTrail | null;
-  setError: Dispatch<SetStateAction<string>>;
-}
-
-export const useAuditViewerExport = ({
-  user,
-  effectiveCaseNumber,
-  filteredEntries,
-  auditTrail,
-  setError
-}: UseAuditViewerExportParams) => {
-  const resolveExportContext = useCallback(() => {
-    if (!user) {
-      return null;
-    }
-
-    const identifier = effectiveCaseNumber || user.uid;
-    const scopeType: 'case' | 'user' = effectiveCaseNumber ? 'case' : 'user';
-
-    return {
-      identifier,
-      scopeType,
-      context: {
-        user,
-        scopeType,
-        scopeIdentifier: identifier,
-        caseNumber: effectiveCaseNumber || undefined
-      } as const
-    };
-  }, [user, effectiveCaseNumber]);
-
-  const handleExportCSV = useCallback(async () => {
-    const exportContextData = resolveExportContext();
-    if (!exportContextData) {
-      return;
-    }
-
-    const filename = auditExportService.generateFilename(
-      exportContextData.scopeType,
-      exportContextData.identifier,
-      'csv'
-    );
-
-    try {
-      if (auditTrail && effectiveCaseNumber) {
-        await auditExportService.exportAuditTrailToCSV(auditTrail, filename, exportContextData.context);
-      } else {
-        await auditExportService.exportToCSV(filteredEntries, filename, exportContextData.context);
-      }
-    } catch (exportError) {
-      console.error('Export failed:', exportError);
-      setError('Failed to export audit trail to CSV');
-    }
-  }, [resolveExportContext, auditTrail, effectiveCaseNumber, filteredEntries, setError]);
-
-  const handleExportJSON = useCallback(async () => {
-    const exportContextData = resolveExportContext();
-    if (!exportContextData) {
-      return;
-    }
-
-    const filename = auditExportService.generateFilename(
-      exportContextData.scopeType,
-      exportContextData.identifier,
-      'json'
-    );
-
-    try {
-      if (auditTrail && effectiveCaseNumber) {
-        await auditExportService.exportAuditTrailToJSON(auditTrail, filename, exportContextData.context);
-      } else {
-        await auditExportService.exportToJSON(filteredEntries, filename, exportContextData.context);
-      }
-    } catch (exportError) {
-      console.error('Export failed:', exportError);
-      setError('Failed to export audit trail to JSON');
-    }
-  }, [resolveExportContext, auditTrail, effectiveCaseNumber, filteredEntries, setError]);
-
-  const handleGenerateReport = useCallback(async () => {
-    const exportContextData = resolveExportContext();
-    if (!exportContextData) {
-      return;
-    }
-
-    const resolvedUser = exportContextData.context.user;
-
-    const filename = `${exportContextData.scopeType}-audit-report-${exportContextData.identifier}-${new Date().toISOString().split('T')[0]}.txt`;
-
-    try {
-      let reportContent: string;
-
-      if (auditTrail && effectiveCaseNumber) {
-        reportContent = await auditExportService.generateReportSummary(auditTrail, exportContextData.context);
-      } else {
-        const totalEntries = filteredEntries.length;
-        const successfulActions = filteredEntries.filter(entry => entry.result === 'success').length;
-        const failedActions = filteredEntries.filter(entry => entry.result === 'failure').length;
-
-        const actionCounts = filteredEntries.reduce((accumulator, entry) => {
-          accumulator[entry.action] = (accumulator[entry.action] || 0) + 1;
-          return accumulator;
-        }, {} as Record<string, number>);
-
-        const detectedDateRange = filteredEntries.length > 0
-          ? {
-              earliest: new Date(Math.min(...filteredEntries.map(entry => new Date(entry.timestamp).getTime()))),
-              latest: new Date(Math.max(...filteredEntries.map(entry => new Date(entry.timestamp).getTime())))
-            }
-          : null;
-
-        reportContent = `${effectiveCaseNumber ? 'CASE' : 'USER'} AUDIT REPORT
-Generated: ${new Date().toISOString()}
-      ${effectiveCaseNumber ? `Case: ${effectiveCaseNumber}` : `User: ${resolvedUser.email}`}
-      ${effectiveCaseNumber ? '' : `User ID: ${resolvedUser.uid}`}
-
-=== SUMMARY ===
-Total Actions: ${totalEntries}
-Successful: ${successfulActions}
-Failed: ${failedActions}
-Success Rate: ${totalEntries > 0 ? ((successfulActions / totalEntries) * 100).toFixed(1) : 0}%
-
-${detectedDateRange ? `Date Range: ${detectedDateRange.earliest.toLocaleDateString()} - ${detectedDateRange.latest.toLocaleDateString()}` : 'No entries found'}
-
-=== ACTION BREAKDOWN ===
-${Object.entries(actionCounts)
-  .sort(([, actionCountA], [, actionCountB]) => actionCountB - actionCountA)
-  .map(([action, count]) => `${action}: ${count}`)
-  .join('\n')}
-
-=== RECENT ACTIVITIES ===
-${filteredEntries.slice(0, 10).map(entry =>
-  `${new Date(entry.timestamp).toLocaleString()} | ${entry.action} | ${entry.result}${entry.details.caseNumber ? ` | Case: ${entry.details.caseNumber}` : ''}`
-).join('\n')}
-
-Generated by Striae
-`;
-
-        reportContent = await auditExportService.appendSignedReportIntegrity(
-          reportContent,
-          exportContextData.context,
-          totalEntries
-        );
-      }
-
-      const blob = new Blob([reportContent], { type: 'text/plain' });
-      const url = URL.createObjectURL(blob);
-      const anchor = document.createElement('a');
-      anchor.href = url;
-      anchor.download = filename;
-      document.body.appendChild(anchor);
-      anchor.click();
-      document.body.removeChild(anchor);
-      URL.revokeObjectURL(url);
-    } catch (reportError) {
-      console.error('Report generation failed:', reportError);
-      setError('Failed to generate audit report');
-    }
-  }, [resolveExportContext, auditTrail, effectiveCaseNumber, filteredEntries, setError]);
-
-  return {
-    handleExportCSV,
-    handleExportJSON,
-    handleGenerateReport
-  };
-};

package/app/services/audit/audit-export-csv.ts

@@ -1,130 +0,0 @@
-import { type ValidationAuditEntry } from '~/types';
-
-export const AUDIT_CSV_ENTRY_HEADERS = [
-  'Timestamp',
-  'User Email',
-  'Action',
-  'Result',
-  'File Name',
-  'File Type',
-  'Case Number',
-  'Confirmation ID',
-  'Original Examiner UID',
-  'Reviewing Examiner UID',
-  'File ID',
-  'Original Filename',
-  'File Size (MB)',
-  'MIME Type',
-  'Upload Method',
-  'Delete Reason',
-  'Annotation ID',
-  'Annotation Type',
-  'Annotation Tool',
-  'Session ID',
-  'User Agent',
-  'Processing Time (ms)',
-  'Hash Valid',
-  'Validation Errors',
-  'Security Issues',
-  'Workflow Phase',
-  'Profile Field',
-  'Old Value',
-  'New Value',
-  'Badge/ID',
-  'Total Confirmations In File',
-  'Confirmations Successfully Imported',
-  'Validation Steps Failed',
-  'Case Name',
-  'Total Files',
-  'MFA Method',
-  'Security Incident Type',
-  'Security Severity',
-  'Confirmed Files'
-];
-
-const formatForCSV = (value?: string | number | null): string => {
-  if (value === undefined || value === null) return '';
-  const str = String(value);
-  if (str.includes(',') || str.includes('"') || str.includes('\n')) {
-    return `"${str.replace(/"/g, '""')}"`;
-  }
-  return str;
-};
-
-const getSecurityIssues = (entry: ValidationAuditEntry): string => {
-  const securityChecks = entry.details.securityChecks;
-  if (!securityChecks) {
-    return '';
-  }
-
-  const issues = [];
-
-  if (securityChecks.selfConfirmationPrevented === true) {
-    issues.push('selfConfirmationPrevented');
-  }
-
-  if (securityChecks.fileIntegrityValid === false) {
-    issues.push('fileIntegrityValid');
-  }
-
-  if (securityChecks.exporterUidValidated === false) {
-    issues.push('exporterUidValidated');
-  }
-
-  return issues.join('; ');
-};
-
-export const entryToCSVRow = (entry: ValidationAuditEntry): string => {
-  const fileDetails = entry.details.fileDetails;
-  const annotationDetails = entry.details.annotationDetails;
-  const sessionDetails = entry.details.sessionDetails;
-  const userProfileDetails = entry.details.userProfileDetails;
-  const caseDetails = entry.details.caseDetails;
-  const performanceMetrics = entry.details.performanceMetrics;
-  const securityDetails = entry.details.securityDetails;
-  const securityIssues = getSecurityIssues(entry);
-
-  const values = [
-    formatForCSV(entry.timestamp),
-    formatForCSV(entry.userEmail),
-    formatForCSV(entry.action),
-    formatForCSV(entry.result),
-    formatForCSV(entry.details.fileName),
-    formatForCSV(entry.details.fileType),
-    formatForCSV(entry.details.caseNumber),
-    formatForCSV(entry.details.confirmationId),
-    formatForCSV(entry.details.originalExaminerUid),
-    formatForCSV(entry.details.reviewingExaminerUid),
-    formatForCSV(fileDetails?.fileId),
-    formatForCSV(fileDetails?.originalFileName),
-    fileDetails?.fileSize ? (fileDetails.fileSize / 1024 / 1024).toFixed(2) : '',
-    formatForCSV(fileDetails?.mimeType),
-    formatForCSV(fileDetails?.uploadMethod),
-    formatForCSV(fileDetails?.deleteReason),
-    formatForCSV(annotationDetails?.annotationId),
-    formatForCSV(annotationDetails?.annotationType),
-    formatForCSV(annotationDetails?.tool),
-    formatForCSV(sessionDetails?.sessionId),
-    formatForCSV(sessionDetails?.userAgent),
-    performanceMetrics?.processingTimeMs || '',
-    entry.details.hashValid !== undefined ? (entry.details.hashValid ? 'Yes' : 'No') : '',
-    formatForCSV(entry.details.validationErrors?.join('; ')),
-    formatForCSV(securityIssues),
-    formatForCSV(entry.details.workflowPhase),
-    formatForCSV(userProfileDetails?.profileField),
-    formatForCSV(userProfileDetails?.oldValue),
-    formatForCSV(userProfileDetails?.newValue),
-    formatForCSV(userProfileDetails?.badgeId),
-    caseDetails?.totalAnnotations?.toString() || '',
-    performanceMetrics?.validationStepsCompleted?.toString() || '',
-    performanceMetrics?.validationStepsFailed?.toString() || '',
-    formatForCSV(caseDetails?.newCaseName || caseDetails?.oldCaseName),
-    caseDetails?.totalFiles?.toString() || '',
-    formatForCSV(securityDetails?.mfaMethod),
-    formatForCSV(securityDetails?.incidentType),
-    formatForCSV(securityDetails?.severity),
-    formatForCSV(caseDetails?.confirmedFileNames?.join('; '))
-  ];
-
-  return values.join(',');
-};