@striae-org/striae 5.5.0 → 5.5.2

package/scripts/deploy-primershear-emails.sh

@@ -4,16 +4,7 @@
 # PRIMERSHEAR EMAIL LIST DEPLOYMENT SCRIPT
 # ============================================
 # Reads primershear.emails, updates PRIMERSHEAR_EMAILS in .env,
-# then deploys that secret directly to Cloudflare Pages.
-#
-# Usage:
-#   bash ./scripts/deploy-primershear-emails.sh [--production-only|--preview-only|--env-only]
-#
-# Options:
-#   --production-only  Deploy to production Pages environment only
-#   --preview-only     Deploy to preview Pages environment only
-#   --env-only         Update .env only; do not deploy to Cloudflare
-#   -h, --help         Show this help message
+# then deploys that secret directly to Cloudflare Pages (production).
 
 set -e
 set -o pipefail
@@ -33,43 +24,6 @@ cd "$PROJECT_ROOT"
 
 trap 'echo -e "\n${RED}❌ deploy-primershear-emails.sh failed near line ${LINENO}${NC}"' ERR
 
-# ── Argument parsing ─────────────────────────────────────────────────────────
-
-deploy_production=true
-deploy_preview=true
-env_only=false
-
-for arg in "$@"; do
-    case "$arg" in
-        -h|--help)
-            echo "Usage: bash ./scripts/deploy-primershear-emails.sh [--production-only|--preview-only|--env-only]"
-            echo ""
-            echo "Options:"
-            echo "  --production-only  Deploy to production Pages environment only"
-            echo "  --preview-only     Deploy to preview Pages environment only"
-            echo "  --env-only         Update .env only; do not deploy to Cloudflare"
-            echo "  -h, --help         Show this help message"
-            exit 0
-            ;;
-        --production-only)
-            deploy_production=true
-            deploy_preview=false
-            ;;
-        --preview-only)
-            deploy_production=false
-            deploy_preview=true
-            ;;
-        --env-only)
-            env_only=true
-            ;;
-        *)
-            echo -e "${RED}❌ Unknown option: $arg${NC}"
-            echo "Use --help to see supported options."
-            exit 1
-            ;;
-    esac
-done
-
 # ── Read emails file ──────────────────────────────────────────────────────────
 
 EMAILS_FILE="$PROJECT_ROOT/primershear.emails"
@@ -114,11 +68,6 @@ else
     echo -e "${GREEN}✅ Appended PRIMERSHEAR_EMAILS to .env${NC}"
 fi
 
-if [ "$env_only" = "true" ]; then
-    echo -e "\n${GREEN}🎉 .env updated. Skipping Cloudflare deployment (--env-only).${NC}"
-    exit 0
-fi
-
 # ── Deploy to Cloudflare Pages ────────────────────────────────────────────────
 
 if ! command -v wrangler > /dev/null 2>&1; then
@@ -134,31 +83,16 @@ if [ -z "$PAGES_PROJECT_NAME" ]; then
     exit 1
 fi
 
-set_secret() {
-    local pages_env=$1
-    echo -e "${YELLOW}  Setting PRIMERSHEAR_EMAILS for $pages_env...${NC}"
-    if [ "$pages_env" = "production" ]; then
-        printf '%s' "$PRIMERSHEAR_EMAILS" | wrangler pages secret put PRIMERSHEAR_EMAILS \
-            --project-name "$PAGES_PROJECT_NAME"
-    else
-        printf '%s' "$PRIMERSHEAR_EMAILS" | wrangler pages secret put PRIMERSHEAR_EMAILS \
-            --project-name "$PAGES_PROJECT_NAME" --env "$pages_env"
-    fi
-}
-
-if [ "$deploy_production" = "true" ]; then
-    set_secret "production"
-    echo -e "${GREEN}✅ PRIMERSHEAR_EMAILS deployed to production${NC}"
-fi
+echo -e "${YELLOW}  Setting PRIMERSHEAR_EMAILS for production...${NC}"
+printf '%s' "$PRIMERSHEAR_EMAILS" | wrangler pages secret put PRIMERSHEAR_EMAILS \
+    --project-name "$PAGES_PROJECT_NAME"
 
-if [ "$deploy_preview" = "true" ]; then
-    set_secret "preview"
-    echo -e "${GREEN}✅ PRIMERSHEAR_EMAILS deployed to preview${NC}"
-fi
+echo -e "${GREEN}✅ PRIMERSHEAR_EMAILS deployed to production${NC}"
 
 # Deploy Pages so the new secret takes effect immediately
 echo -e "\n${YELLOW}🚀 Building and deploying Pages to activate new secret...${NC}"
-if ! npm run deploy; then
+
+if ! npm run deploy-pages; then
     echo -e "${RED}❌ Pages deployment failed${NC}"
     exit 1
 fi

package/scripts/update-markdown-versions.cjs

@@ -7,6 +7,14 @@ const markdownFiles = [
   // Add other markdown files that need version updates
 ];
 
+const workerDirs = [
+  'workers/audit-worker',
+  'workers/data-worker',
+  'workers/image-worker',
+  'workers/pdf-worker',
+  'workers/user-worker',
+];
+
 function updateMarkdownVersions() {
   console.log(`📝 Updating markdown files with version ${packageJson.version}...`);
   
@@ -31,8 +39,57 @@ function updateMarkdownVersions() {
       console.error(`❌ Error updating ${filePath}:`, error.message);
     }
   });
+
+  console.log(`📦 Updating worker package.json files with version ${packageJson.version}...`);
+
+  workerDirs.forEach(workerDir => {
+    const pkgPath = path.join(__dirname, '..', workerDir, 'package.json');
+    const lockPath = path.join(__dirname, '..', workerDir, 'package-lock.json');
+
+    // --- Update package.json ---
+    if (!fs.existsSync(pkgPath)) {
+      console.log(`⚠️  Skipping ${workerDir}/package.json (file not found)`);
+    } else {
+      try {
+        const workerPkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+        workerPkg.version = packageJson.version;
+        fs.writeFileSync(pkgPath, JSON.stringify(workerPkg, null, 2) + '\n');
+        console.log(`✅ Updated ${workerDir}/package.json`);
+      } catch (error) {
+        console.error(`❌ Error updating ${workerDir}/package.json:`, error.message);
+      }
+    }
+
+    // --- Update package-lock.json ---
+    // Lockfile v2/v3 stores the version in two places:
+    //   - Top-level `version` field
+    //   - `packages[""].version` (the self-referencing root entry)
+    // Both must match package.json to pass `npm ci` consistency checks.
+    if (!fs.existsSync(lockPath)) {
+      console.log(
+        `⚠️  No package-lock.json found in ${workerDir} — run \`npm install\` there to generate one.`
+      );
+    } else {
+      try {
+        const lockData = JSON.parse(fs.readFileSync(lockPath, 'utf8'));
+
+        if ('version' in lockData) {
+          lockData.version = packageJson.version;
+        }
+
+        if (lockData.packages && '' in lockData.packages) {
+          lockData.packages[''].version = packageJson.version;
+        }
+
+        fs.writeFileSync(lockPath, JSON.stringify(lockData, null, 2) + '\n');
+        console.log(`✅ Updated ${workerDir}/package-lock.json`);
+      } catch (error) {
+        console.error(`❌ Error updating ${workerDir}/package-lock.json:`, error.message);
+      }
+    }
+  });
   
-  console.log('🎉 Markdown version update complete!');
+  console.log('🎉 Version update complete!');
 }
 
 // Run if called directly

package/worker-configuration.d.ts

@@ -58,6 +58,7 @@ declare namespace Cloudflare {
 		PDF_WORKER_AUTH: string;
 		BROWSER_API_TOKEN: string;
 		PRIMERSHEAR_EMAILS: string;
+		REGISTRATION_EMAILS: string;
 	}
 }
 interface Env extends Cloudflare.Env {}
@@ -65,7 +66,7 @@ type StringifyValues<EnvType extends Record<string, unknown>> = {
 	[Binding in keyof EnvType]: EnvType[Binding] extends string ? EnvType[Binding] : string;
 };
 declare namespace NodeJS {
-	interface ProcessEnv extends StringifyValues<Pick<Cloudflare.Env, "ACCOUNT_ID" | "USER_DB_AUTH" | "R2_KEY_SECRET" | "IMAGES_API_TOKEN" | "API_KEY" | "AUTH_DOMAIN" | "PROJECT_ID" | "STORAGE_BUCKET" | "MESSAGING_SENDER_ID" | "APP_ID" | "MEASUREMENT_ID" | "FIREBASE_SERVICE_ACCOUNT_EMAIL" | "FIREBASE_SERVICE_ACCOUNT_PRIVATE_KEY" | "USER_KV_ENCRYPTION_PRIVATE_KEY" | "USER_KV_ENCRYPTION_KEY_ID" | "USER_KV_ENCRYPTION_PUBLIC_KEY" | "USER_KV_WRITE_ENDPOINTS_ENABLED" | "USER_KV_ENCRYPTION_KEYS_JSON" | "USER_KV_ENCRYPTION_ACTIVE_KEY_ID" | "MANIFEST_SIGNING_PRIVATE_KEY" | "MANIFEST_SIGNING_KEY_ID" | "MANIFEST_SIGNING_PUBLIC_KEY" | "EXPORT_ENCRYPTION_PRIVATE_KEY" | "EXPORT_ENCRYPTION_KEY_ID" | "EXPORT_ENCRYPTION_PUBLIC_KEY" | "EXPORT_ENCRYPTION_KEYS_JSON" | "EXPORT_ENCRYPTION_ACTIVE_KEY_ID" | "DATA_AT_REST_ENCRYPTION_ENABLED" | "DATA_AT_REST_ENCRYPTION_PRIVATE_KEY" | "DATA_AT_REST_ENCRYPTION_KEY_ID" | "DATA_AT_REST_ENCRYPTION_PUBLIC_KEY" | "DATA_AT_REST_ENCRYPTION_KEYS_JSON" | "DATA_AT_REST_ENCRYPTION_ACTIVE_KEY_ID" | "PAGES_PROJECT_NAME" | "PAGES_CUSTOM_DOMAIN" | "USER_WORKER_NAME" | "USER_WORKER_DOMAIN" | "KV_STORE_ID" | "DATA_WORKER_NAME" | "DATA_BUCKET_NAME" | "FILES_BUCKET_NAME" | "DATA_WORKER_DOMAIN" | "AUDIT_WORKER_NAME" | "AUDIT_BUCKET_NAME" | "AUDIT_WORKER_DOMAIN" | "IMAGES_WORKER_NAME" | "IMAGES_WORKER_DOMAIN" | "IMAGE_SIGNED_URL_SECRET" | "IMAGE_SIGNED_URL_TTL_SECONDS" | "IMAGE_SIGNED_URL_BASE_URL" | "PDF_WORKER_NAME" | "PDF_WORKER_DOMAIN" | "PDF_WORKER_AUTH" | "BROWSER_API_TOKEN" | "PRIMERSHEAR_EMAILS">> {}
+	interface ProcessEnv extends StringifyValues<Pick<Cloudflare.Env, "ACCOUNT_ID" | "USER_DB_AUTH" | "R2_KEY_SECRET" | "IMAGES_API_TOKEN" | "API_KEY" | "AUTH_DOMAIN" | "PROJECT_ID" | "STORAGE_BUCKET" | "MESSAGING_SENDER_ID" | "APP_ID" | "MEASUREMENT_ID" | "FIREBASE_SERVICE_ACCOUNT_EMAIL" | "FIREBASE_SERVICE_ACCOUNT_PRIVATE_KEY" | "USER_KV_ENCRYPTION_PRIVATE_KEY" | "USER_KV_ENCRYPTION_KEY_ID" | "USER_KV_ENCRYPTION_PUBLIC_KEY" | "USER_KV_WRITE_ENDPOINTS_ENABLED" | "USER_KV_ENCRYPTION_KEYS_JSON" | "USER_KV_ENCRYPTION_ACTIVE_KEY_ID" | "MANIFEST_SIGNING_PRIVATE_KEY" | "MANIFEST_SIGNING_KEY_ID" | "MANIFEST_SIGNING_PUBLIC_KEY" | "EXPORT_ENCRYPTION_PRIVATE_KEY" | "EXPORT_ENCRYPTION_KEY_ID" | "EXPORT_ENCRYPTION_PUBLIC_KEY" | "EXPORT_ENCRYPTION_KEYS_JSON" | "EXPORT_ENCRYPTION_ACTIVE_KEY_ID" | "DATA_AT_REST_ENCRYPTION_ENABLED" | "DATA_AT_REST_ENCRYPTION_PRIVATE_KEY" | "DATA_AT_REST_ENCRYPTION_KEY_ID" | "DATA_AT_REST_ENCRYPTION_PUBLIC_KEY" | "DATA_AT_REST_ENCRYPTION_KEYS_JSON" | "DATA_AT_REST_ENCRYPTION_ACTIVE_KEY_ID" | "PAGES_PROJECT_NAME" | "PAGES_CUSTOM_DOMAIN" | "USER_WORKER_NAME" | "USER_WORKER_DOMAIN" | "KV_STORE_ID" | "DATA_WORKER_NAME" | "DATA_BUCKET_NAME" | "FILES_BUCKET_NAME" | "DATA_WORKER_DOMAIN" | "AUDIT_WORKER_NAME" | "AUDIT_BUCKET_NAME" | "AUDIT_WORKER_DOMAIN" | "IMAGES_WORKER_NAME" | "IMAGES_WORKER_DOMAIN" | "IMAGE_SIGNED_URL_SECRET" | "IMAGE_SIGNED_URL_TTL_SECONDS" | "IMAGE_SIGNED_URL_BASE_URL" | "PDF_WORKER_NAME" | "PDF_WORKER_DOMAIN" | "PDF_WORKER_AUTH" | "BROWSER_API_TOKEN" | "PRIMERSHEAR_EMAILS" | "REGISTRATION_EMAILS">> {}
 }
 
 // Begin runtime types

package/workers/audit-worker/package.json

@@ -1,18 +1,13 @@
-{
-	"name": "audit-worker",
-	"version": "0.0.0",
-	"private": true,
-	"scripts": {
-		"deploy": "wrangler deploy",
-		"dev": "wrangler dev",
-		"start": "wrangler dev"
-	},
-	"devDependencies": {
-		"@cloudflare/puppeteer": "^1.0.6",
-		"wrangler": "^4.81.0"
-	},
-	"overrides": {
-		"undici": "7.24.1",
-		"yauzl": "3.2.1"
-	}
-}
+{
+  "name": "audit-worker",
+  "version": "5.5.2",
+  "private": true,
+  "scripts": {
+    "deploy": "wrangler deploy",
+    "dev": "wrangler dev",
+    "start": "wrangler dev"
+  },
+  "devDependencies": {
+    "wrangler": "^4.81.1"
+  }
+}

package/workers/audit-worker/wrangler.jsonc.example

@@ -7,7 +7,7 @@
   "name": "AUDIT_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/audit-worker.ts",
-  "compatibility_date": "2026-04-08",
+  "compatibility_date": "2026-04-10",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/workers/data-worker/package.json

@@ -1,18 +1,13 @@
-{
-  "name": "data-worker",
-  "version": "0.0.0",
-  "private": true,
-  "scripts": {
-    "deploy": "wrangler deploy",
-    "dev": "wrangler dev",
-    "start": "wrangler dev"
-  },
-  "devDependencies": {
-    "@cloudflare/puppeteer": "^1.0.6",
-    "wrangler": "^4.81.0"
-  },
-  "overrides": {
-    "undici": "7.24.1",
-    "yauzl": "3.2.1"
-  }
-}
+{
+  "name": "data-worker",
+  "version": "5.5.2",
+  "private": true,
+  "scripts": {
+    "deploy": "wrangler deploy",
+    "dev": "wrangler dev",
+    "start": "wrangler dev"
+  },
+  "devDependencies": {
+    "wrangler": "^4.81.1"
+  }
+}

package/workers/data-worker/wrangler.jsonc.example

@@ -5,7 +5,7 @@
   "name": "DATA_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/data-worker.ts",
-  "compatibility_date": "2026-04-08",
+  "compatibility_date": "2026-04-10",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/workers/image-worker/package.json

@@ -1,18 +1,13 @@
-{
-	"name": "image-worker",
-	"version": "0.0.0",
-	"private": true,
-	"scripts": {
-		"deploy": "wrangler deploy",
-		"dev": "wrangler dev",
-		"start": "wrangler dev"
-	},
-	"devDependencies": {
-		"@cloudflare/puppeteer": "^1.0.6",
-		"wrangler": "^4.81.0"
-	},
-	"overrides": {
-		"undici": "7.24.1",
-		"yauzl": "3.2.1"
-	}
-}
+{
+  "name": "image-worker",
+  "version": "5.5.2",
+  "private": true,
+  "scripts": {
+    "deploy": "wrangler deploy",
+    "dev": "wrangler dev",
+    "start": "wrangler dev"
+  },
+  "devDependencies": {
+    "wrangler": "^4.81.1"
+  }
+}

package/workers/image-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "IMAGES_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/image-worker.ts",
-  "compatibility_date": "2026-04-08",
+  "compatibility_date": "2026-04-10",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/workers/pdf-worker/package.json

@@ -1,19 +1,14 @@
-{
-	"name": "pdf-worker",
-	"version": "0.0.0",
-	"private": true,
-	"scripts": {
-		"generate:assets": "node scripts/generate-assets.js",
-		"deploy": "wrangler deploy",
-		"dev": "wrangler dev",
-		"start": "wrangler dev"
-	},
-	"devDependencies": {
-		"@cloudflare/puppeteer": "^1.0.6",
-		"wrangler": "^4.81.0"
-	},
-	"overrides": {
-		"undici": "7.24.1",
-		"yauzl": "3.2.1"
-	}
-}
+{
+  "name": "pdf-worker",
+  "version": "5.5.2",
+  "private": true,
+  "scripts": {
+    "generate:assets": "node scripts/generate-assets.js",
+    "deploy": "wrangler deploy",
+    "dev": "wrangler dev",
+    "start": "wrangler dev"
+  },
+  "devDependencies": {
+    "wrangler": "^4.81.1"
+  }
+}

package/workers/pdf-worker/src/audit-trail-report.ts

@@ -3,13 +3,34 @@ import { buildRepeatedChromePdfOptions, escapeHtml } from './report-layout';
 
 const safeText = (value: unknown): string => escapeHtml(String(value ?? ''));
 
-const formatTimestamp = (timestamp: string): string => {
+const formatTimestamp = (timestamp: string, timezone?: string): string => {
   const parsed = new Date(timestamp);
   if (Number.isNaN(parsed.getTime())) {
     return timestamp;
   }
 
-  return parsed.toISOString();
+  if (!timezone) {
+    return parsed.toISOString();
+  }
+
+  try {
+      const parts = new Intl.DateTimeFormat('en-US', {
+        timeZone: timezone,
+        month: '2-digit',
+        day: '2-digit',
+        year: 'numeric',
+        hour: '2-digit',
+        minute: '2-digit',
+        second: '2-digit',
+        hour12: false,
+        timeZoneName: 'short'
+      }).formatToParts(parsed);
+
+      const get = (type: string): string => parts.find(p => p.type === type)?.value ?? '';
+      return `${get('month')}/${get('day')}/${get('year')} ${get('hour')}:${get('minute')}:${get('second')} ${get('timeZoneName')}`;
+  } catch {
+    return parsed.toISOString();
+  }
 };
 
 const renderEntryDetailsSummary = (entry: Record<string, unknown>): string => {
@@ -71,6 +92,7 @@ export const getAuditTrailPayload = (data: PDFGenerationData): AuditTrailReportP
 export const renderAuditTrailReport = (data: PDFGenerationData): string => {
   const payload = getAuditTrailPayload(data);
   const entries = payload.entries || [];
+  const timezone = data.userTimezone;
 
   const entrySections = entries.map((entry, index) => {
     const entryRecord = entry as Record<string, unknown>;
@@ -84,7 +106,7 @@ export const renderAuditTrailReport = (data: PDFGenerationData): string => {
       <section class="entry-section">
         <h3 class="entry-title">Entry ${index + 1} of ${entries.length}</h3>
         <div class="entry-core-grid">
-          <div><strong>Timestamp:</strong> ${safeText(formatTimestamp(timestamp))}</div>
+          <div><strong>Timestamp:</strong> ${safeText(formatTimestamp(timestamp, timezone))}</div>
           <div><strong>Action:</strong> ${safeText(action)}</div>
           <div><strong>Result:</strong> ${safeText(result)}</div>
           <div><strong>User Email:</strong> ${safeText(userEmail)}</div>
@@ -195,9 +217,9 @@ export const renderAuditTrailReport = (data: PDFGenerationData): string => {
         <h1>Case Audit Trail Report</h1>
         <div class="summary-grid">
           <div><strong>Case Number:</strong> ${safeText(payload.caseNumber)}</div>
-          <div><strong>Exported At:</strong> ${safeText(formatTimestamp(payload.exportedAt))}</div>
-          <div><strong>Range Start:</strong> ${safeText(formatTimestamp(payload.exportRangeStart))}</div>
-          <div><strong>Range End:</strong> ${safeText(formatTimestamp(payload.exportRangeEnd))}</div>
+          <div><strong>Exported At:</strong> ${safeText(formatTimestamp(payload.exportedAt, timezone))}</div>
+          <div><strong>Range Start:</strong> ${safeText(formatTimestamp(payload.exportRangeStart, timezone))}</div>
+          <div><strong>Range End:</strong> ${safeText(formatTimestamp(payload.exportRangeEnd, timezone))}</div>
           <div><strong>Total Entries (All Parts):</strong> ${safeText(payload.totalEntries)}</div>
           <div><strong>This Part:</strong> ${safeText(payload.chunkIndex)} of ${safeText(payload.totalChunks)}</div>
           <div><strong>Entries in Part:</strong> ${safeText(entries.length)}</div>

package/workers/pdf-worker/src/report-types.ts

@@ -60,6 +60,7 @@ export interface PDFGenerationData {
   userBadgeId?: string;
   reportMode?: 'audit-trail';
   auditTrailReport?: AuditTrailReportPayload;
+  userTimezone?: string;
 }
 
 export interface AuditTrailReportPayload {

package/workers/pdf-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "PDF_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/pdf-worker.ts",
-  "compatibility_date": "2026-04-08",
+  "compatibility_date": "2026-04-10",
   "compatibility_flags": [
     "nodejs_compat"
   ],

package/workers/user-worker/package.json

@@ -1,18 +1,13 @@
-{
-  "name": "user-worker",
-  "version": "0.0.0",
-  "private": true,
-  "scripts": {
-    "deploy": "wrangler deploy",
-    "dev": "wrangler dev",
-    "start": "wrangler dev"
-  },
-  "devDependencies": {
-    "@cloudflare/puppeteer": "^1.0.6",
-    "wrangler": "^4.81.0"
-  },
-  "overrides": {
-    "undici": "7.24.1",
-    "yauzl": "3.2.1"
-  }
-}
+{
+  "name": "user-worker",
+  "version": "5.5.2",
+  "private": true,
+  "scripts": {
+    "deploy": "wrangler deploy",
+    "dev": "wrangler dev",
+    "start": "wrangler dev"
+  },
+  "devDependencies": {
+    "wrangler": "^4.81.1"
+  }
+}

package/workers/user-worker/wrangler.jsonc.example

@@ -2,7 +2,7 @@
   "name": "USER_WORKER_NAME",
   "account_id": "ACCOUNT_ID",
   "main": "src/user-worker.ts",
-  "compatibility_date": "2026-04-08",
+  "compatibility_date": "2026-04-10",
   "compatibility_flags": [
     "nodejs_compat"
   ], 

package/wrangler.toml.example

@@ -1,6 +1,6 @@
 #:schema node_modules/wrangler/config-schema.json
 name = "PAGES_PROJECT_NAME"
-compatibility_date = "2026-04-08"
+compatibility_date = "2026-04-10"
 compatibility_flags = ["nodejs_compat"]
 pages_build_output_dir = "./build/client"