@tuturuuu/utils 0.16.0 → 0.17.0

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## [0.17.0](https://github.com/tutur3u/platform/compare/utils-v0.16.0...utils-v0.17.0) (2026-07-21)
+
+
+### Features
+
+* **infrastructure:** manage internal accounts ([02fd9f3](https://github.com/tutur3u/platform/commit/02fd9f3d1b4edb23c881e2dbb04bf244b36e6ed0))
+
+
+### Bug Fixes
+
+* **chat:** harden personal Zalo integration ([f1d12c6](https://github.com/tutur3u/platform/commit/f1d12c60fe12ab3b01a1be3f0381573d44a32226))
+* **ci:** keep task helper collection source-only ([7355a05](https://github.com/tutur3u/platform/commit/7355a05385ccd8d1e2d1bcf6ac15ae5297e057ad))
+* **e2e:** run tasks lifecycle in CI ([bed2cd5](https://github.com/tutur3u/platform/commit/bed2cd590572748f65e75fcb15b7e4b714b9034c))
+* **inventory:** harden sales analytics and access ([53968d3](https://github.com/tutur3u/platform/commit/53968d38a0c5425a3c1065ab2f645e30a0145c8f))
+* resolve code quality findings ([63f10b5](https://github.com/tutur3u/platform/commit/63f10b5ec22a4194f48f448ee2b1b088b5da8f08))
+* **security:** remediate code scanning findings ([023db2e](https://github.com/tutur3u/platform/commit/023db2edf4b0557be108a9d772cbc7e2223af947))
+
+
+### Performance Improvements
+
+* **storefront:** share customer navigation shell ([21cb78d](https://github.com/tutur3u/platform/commit/21cb78db484d1e1fdb9f2469fcac4e3a948bd176))
+
 ## [0.16.0](https://github.com/tutur3u/platform/compare/utils-v0.15.1...utils-v0.16.0) (2026-07-18)
 
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tuturuuu/utils",
   "license": "MIT",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/tutur3u/platform",
@@ -20,12 +20,12 @@
     "@noble/ciphers": "^2.2.0",
     "@noble/hashes": "^2.2.0",
     "@tanstack/react-query": "^5.101.2",
-    "@tiptap/core": "3.27.4",
-    "@tiptap/react": "3.27.4",
+    "@tiptap/core": "3.28.0",
+    "@tiptap/react": "3.28.0",
     "@tuturuuu/google": "0.0.3",
     "@tuturuuu/icons": "0.0.6",
-    "@tuturuuu/internal-api": "0.19.0",
-    "@tuturuuu/supabase": "0.4.0",
+    "@tuturuuu/internal-api": "0.20.0",
+    "@tuturuuu/supabase": "0.4.1",
     "@upstash/ratelimit": "^2.0.8",
     "@upstash/redis": "^1.38.0",
     "clsx": "^2.1.1",
@@ -45,14 +45,14 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@tuturuuu/types": "0.18.0",
+    "@tuturuuu/types": "0.19.0",
     "@tuturuuu/typescript-config": "0.1.1",
     "@types/diff": "^8.0.0",
     "@types/node": "^26.1.1",
     "@types/react": "^19.2.17",
     "@vitejs/plugin-react": "^6.0.3",
     "typescript": "7.0.2",
-    "vite": "^8.1.4",
+    "vite": "^8.1.5",
     "vitest": "^4.1.10"
   },
   "exports": {
@@ -60,6 +60,7 @@
     "./effect": "./src/effect.ts",
     "./email/validation": "./src/email/validation.ts",
     "./hooks/*": "./src/hooks/*.ts",
+    "./task-helper/personal-external-staging": "./src/task-helper/personal-external-staging.ts",
     "./*": "./src/*.ts",
     "./common/scan": "./src/common/scan.tsx",
     "./common/metadata": "./src/common/metadata.ts",

package/src/__tests__/permissions.test.tsx

@@ -1,6 +1,7 @@
 import { readFileSync } from 'node:fs';
 import { resolve } from 'node:path';
 import { describe, expect, it } from 'vitest';
+import { ROOT_WORKSPACE_ID } from '../constants';
 import { permissions } from '../permissions';
 
 describe('workspace permission catalog', () => {
@@ -30,9 +31,39 @@ describe('workspace permission catalog', () => {
     expect(permissionIds).toContain('admin');
     expect(permissionIds).not.toContain('view_infrastructure');
     expect(permissionIds).not.toContain('manage_infrastructure_stress_tests');
+    expect(permissionIds).not.toContain('manage_internal_accounts');
     expect(permissionIds).not.toContain('manage_workspace_secrets');
   });
 
+  it('exposes internal account management only in the root workspace', () => {
+    const rootPermissionIds = permissions({
+      wsId: ROOT_WORKSPACE_ID,
+      user: null,
+    }).map((permission) => permission.id);
+
+    expect(rootPermissionIds).toContain('manage_internal_accounts');
+  });
+
+  it('keeps internal account permission translations in shared role editors', () => {
+    for (const app of ['cms', 'infrastructure', 'inventory', 'web']) {
+      for (const locale of ['en', 'vi']) {
+        const messages = JSON.parse(
+          readFileSync(
+            resolve(repoRoot, `apps/${app}/messages/${locale}.json`),
+            'utf8'
+          )
+        ) as { 'ws-roles': Record<string, string> };
+
+        expect(
+          messages['ws-roles'].manage_internal_accounts?.length
+        ).toBeGreaterThan(0);
+        expect(
+          messages['ws-roles'].manage_internal_accounts_description?.length
+        ).toBeGreaterThan(0);
+      }
+    }
+  });
+
   it('exposes the full shared catalog for typed defaults', () => {
     const permissionIds = permissions({
       catalog: 'full',
@@ -43,6 +74,7 @@ describe('workspace permission catalog', () => {
     expect(permissionIds).toContain('admin');
     expect(permissionIds).toContain('view_infrastructure');
     expect(permissionIds).toContain('manage_infrastructure_stress_tests');
+    expect(permissionIds).toContain('manage_internal_accounts');
     expect(permissionIds).toContain('manage_external_migrations');
     expect(permissionIds).toContain('manage_workspace_secrets');
     expect(new Set(permissionIds).size).toBe(permissionIds.length);

package/src/__tests__/workspace-helper.test.ts

@@ -578,7 +578,7 @@ describe('getPermissions membership type gate', () => {
     );
   });
 
-  it('returns null when caller membership is GUEST without enabled guest defaults', async () => {
+  it('returns a read-only permission context for a guest without defaults', async () => {
     const membershipQuery = {
       select: vi.fn(),
       eq: vi.fn(),
@@ -656,7 +656,14 @@ describe('getPermissions membership type gate', () => {
       wsId: '11111111-1111-4111-8111-111111111111',
     });
 
-    expect(permissions).toBeNull();
+    expect(permissions).toMatchObject({
+      membershipType: 'GUEST',
+      permissions: [],
+      wsId: '11111111-1111-4111-8111-111111111111',
+    });
+    expect(permissions?.containsPermission('manage_workspace_settings')).toBe(
+      false
+    );
     expect(defaultPermissionsQuery.eq).toHaveBeenCalledWith(
       'member_type',
       'GUEST'

package/src/common/metadata.test.ts

@@ -183,6 +183,21 @@ describe('createPageMetadata', () => {
     });
   });
 
+  it('normalizes long runs of boundary slashes in linear time', () => {
+    const boundary = '/'.repeat(20_000);
+    const metadata = createPageMetadata({
+      baseUrl: 'https://test.tuturuuu.com',
+      description: 'Stable metadata path normalization.',
+      locale: 'en',
+      pathname: `${boundary}products/workflows${boundary}`,
+      title: 'Workflow Automation',
+    });
+
+    expect(metadata.alternates?.canonical).toBe(
+      'https://test.tuturuuu.com/products/workflows'
+    );
+  });
+
   it('supports apps that never expose locale prefixes', () => {
     const metadata = createPageMetadata({
       baseUrl: 'https://tools.tuturuuu.com',
@@ -282,8 +297,8 @@ describe('application metadata coverage', () => {
       'apps/tools/src/app/[locale]/page.tsx',
       'apps/tools/src/app/[locale]/qr/page.tsx',
       'apps/tools/src/app/[locale]/random/page.tsx',
-      'apps/storefront/src/app/[locale]/[storeSlug]/page.tsx',
-      'apps/storefront/src/app/[locale]/[storeSlug]/products/[listingId]/page.tsx',
+      'apps/storefront/src/app/[locale]/[storeSlug]/(shop)/page.tsx',
+      'apps/storefront/src/app/[locale]/[storeSlug]/(shop)/products/[listingId]/page.tsx',
       'apps/nova/src/app/[locale]/(marketing)/layout.tsx',
       'apps/nova/src/app/[locale]/(marketing)/learn/layout.tsx',
     ];

package/src/common/metadata.ts

@@ -70,6 +70,16 @@ function getOpenGraphLocale(locale: string) {
   return locale === 'vi' ? 'vi_VN' : 'en_US';
 }
 
+function trimSlashes(value: string) {
+  let start = 0;
+  let end = value.length;
+
+  while (start < end && value[start] === '/') start += 1;
+  while (end > start && value[end - 1] === '/') end -= 1;
+
+  return value.slice(start, end);
+}
+
 function getLocalizedUrl(
   baseUrl: string,
   locale: string,
@@ -77,7 +87,7 @@ function getLocalizedUrl(
   localePrefix: NonNullable<PageMetadataConfig['localePrefix']>
 ) {
   const normalizedPathname =
-    pathname === '/' ? '' : `/${pathname.replace(/^\/+|\/+$/g, '')}`;
+    pathname === '/' ? '' : `/${trimSlashes(pathname)}`;
   const localizedPrefix =
     localePrefix === 'never' ||
     (localePrefix === 'as-needed' && locale === 'en')

package/src/launchable-apps.test.ts

@@ -101,6 +101,28 @@ describe('launchable apps', () => {
         currentOrigin: 'https://calendar.tuturuuu.localhost',
       })
     ).toBe('https://tasks.tuturuuu.localhost');
+
+    expect(
+      getLaunchableAppOrigin(app!, {
+        currentOrigin: 'https://tuturuuu.localhost:1355',
+      })
+    ).toBe('https://tasks.tuturuuu.localhost:1355');
+  });
+
+  it('preserves the Portless proxy port in full app URLs', () => {
+    const app = getLaunchableApp('tasks');
+
+    expect(app).not.toBeNull();
+    expect(
+      resolveLaunchableAppUrl({
+        app: app!,
+        currentOrigin: 'https://tuturuuu.localhost:1355',
+        searchParams: { source: 'sidebar-apps' },
+        workspace: teamWorkspace,
+      })
+    ).toBe(
+      'https://tasks.tuturuuu.localhost:1355/team-workspace/tasks?source=sidebar-apps'
+    );
   });
 
   it('uses default paths when no workspace is provided', () => {

package/src/launchable-apps.ts

@@ -395,6 +395,32 @@ function getAutoEnvironment(currentOrigin?: string): LaunchableAppEnvironment {
   return process.env.NODE_ENV === 'production' ? 'production' : 'portless';
 }
 
+function preservePortlessProxyPort(
+  targetOrigin: string,
+  currentOrigin?: string
+): string {
+  if (!currentOrigin) return targetOrigin;
+
+  try {
+    const currentUrl = new URL(currentOrigin);
+    const targetUrl = new URL(targetOrigin);
+    const isCurrentPortlessHost =
+      currentUrl.hostname === 'tuturuuu.localhost' ||
+      currentUrl.hostname.endsWith('.tuturuuu.localhost');
+    const isTargetPortlessHost =
+      targetUrl.hostname === 'tuturuuu.localhost' ||
+      targetUrl.hostname.endsWith('.tuturuuu.localhost');
+
+    if (isCurrentPortlessHost && isTargetPortlessHost && currentUrl.port) {
+      targetUrl.port = currentUrl.port;
+    }
+
+    return targetUrl.origin;
+  } catch {
+    return targetOrigin;
+  }
+}
+
 export function getLaunchableAppOrigin(
   app: LaunchableApp,
   {
@@ -413,7 +439,10 @@ export function getLaunchableAppOrigin(
     return app.localhostOrigin ?? getTuturuuuPortlessAppOrigin(app.portlessApp);
   }
 
-  return getTuturuuuPortlessAppOrigin(app.portlessApp);
+  return preservePortlessProxyPort(
+    getTuturuuuPortlessAppOrigin(app.portlessApp),
+    currentOrigin
+  );
 }
 
 function trimTrailingSlashes(value: string) {

package/src/money.ts

@@ -40,7 +40,7 @@ export function getCurrencyFractionDigits(currency = 'USD'): number {
   const cached = fractionDigitsCache.get(code);
   if (cached !== undefined) return cached;
 
-  let digits = DEFAULT_FRACTION_DIGITS;
+  let digits: number;
   try {
     digits =
       new Intl.NumberFormat(getCurrencyLocale(code), {

package/src/next-config.test.ts

@@ -4,6 +4,7 @@ import {
   createTuturuuuNextConfig,
   isTuturuuuNextCacheComponentsEnabled,
   isTuturuuuNextReactCompilerEnabled,
+  resolveTuturuuuInfrastructureAppUrl,
   resolveTuturuuuWebAppUrl,
   TUTURUUU_NEXT_IMAGE_REMOTE_PATTERNS,
   TUTURUUU_NEXT_OPTIMIZE_PACKAGE_IMPORTS,
@@ -372,6 +373,46 @@ describe('resolveTuturuuuWebAppUrl', () => {
   });
 });
 
+describe('resolveTuturuuuInfrastructureAppUrl', () => {
+  it('trims configured infrastructure origins', () => {
+    expect(
+      resolveTuturuuuInfrastructureAppUrl({
+        env: {
+          INTERNAL_INFRASTRUCTURE_API_ORIGIN: 'https://example.com///',
+          NODE_ENV: 'development',
+        },
+      })
+    ).toBe('https://example.com');
+  });
+
+  it('uses the local Portless infrastructure app in development', () => {
+    expect(
+      resolveTuturuuuInfrastructureAppUrl({
+        env: { NODE_ENV: 'development' },
+      })
+    ).toBe('https://infra.tuturuuu.localhost');
+  });
+
+  it('uses the canonical production infrastructure app when deployed', () => {
+    expect(
+      resolveTuturuuuInfrastructureAppUrl({
+        env: { VERCEL_ENV: 'production' },
+      })
+    ).toBe('https://infrastructure.tuturuuu.com');
+  });
+
+  it('ignores origins registered to another Tuturuuu app', () => {
+    expect(
+      resolveTuturuuuInfrastructureAppUrl({
+        env: {
+          INTERNAL_INFRASTRUCTURE_API_ORIGIN: 'https://chat.tuturuuu.com',
+          VERCEL_ENV: 'production',
+        },
+      })
+    ).toBe('https://infrastructure.tuturuuu.com');
+  });
+});
+
 describe('trimTrailingSlashes', () => {
   it('removes only trailing slash characters', () => {
     expect(trimTrailingSlashes('https://example.com/path///')).toBe(

package/src/next-config.ts

@@ -193,3 +193,31 @@ export function resolveTuturuuuWebAppUrl({
       (isTuturuuuNextDeployedEnvironment(env) ? productionUrl : localUrl)
   );
 }
+
+export function resolveTuturuuuInfrastructureAppUrl({
+  env = process.env,
+  localFallbackUrl,
+  productionUrl = 'https://infrastructure.tuturuuu.com',
+}: {
+  env?: Environment;
+  localFallbackUrl?: string;
+  productionUrl?: string;
+} = {}) {
+  const localUrl =
+    localFallbackUrl ??
+    getLocalInternalAppUrl('infra', 'http://localhost:7823');
+
+  return trimTrailingSlashes(
+    resolveInternalAppUrl({
+      appName: 'infra',
+      candidates: [
+        env.INTERNAL_INFRASTRUCTURE_API_ORIGIN,
+        env.INFRASTRUCTURE_APP_URL,
+        env.NEXT_PUBLIC_INFRASTRUCTURE_APP_URL,
+      ],
+      fallback: isTuturuuuNextDeployedEnvironment(env)
+        ? productionUrl
+        : localUrl,
+    })
+  );
+}

package/src/permissions.tsx

@@ -121,6 +121,16 @@ export const permissionGroups = ({
                   disableOnProduction: false,
                   disabled: false,
                 },
+                {
+                  id: 'manage_internal_accounts' as PermissionId,
+                  icon: <UserCog />,
+                  title: t('ws-roles.manage_internal_accounts'),
+                  description: t(
+                    'ws-roles.manage_internal_accounts_description'
+                  ),
+                  disableOnProduction: false,
+                  disabled: false,
+                },
                 {
                   id: 'manage_mobile_deployment_vault' as PermissionId,
                   icon: <FileKey2 />,

package/src/platform-release.test.ts

@@ -7,7 +7,7 @@ import {
 
 describe('platform release metadata', () => {
   it('uses the centralized shared browser app version', () => {
-    expect(TUTURUUU_PLATFORM_VERSION).toBe('0.23.0'); // x-release-please-version
+    expect(TUTURUUU_PLATFORM_VERSION).toBe('0.24.0'); // x-release-please-version
   });
 
   it('preserves the source timestamp in builtAt and derives a short hash', () => {

package/src/platform-release.ts

@@ -1,6 +1,6 @@
 import { PLATFORM_BUILD_METADATA } from './generated/platform-build-metadata';
 
-export const TUTURUUU_PLATFORM_VERSION = '0.23.0'; // x-release-please-version
+export const TUTURUUU_PLATFORM_VERSION = '0.24.0'; // x-release-please-version
 
 export type PlatformBuildMetadataInput = {
   /** ISO timestamp of the source commit used for the build, not deployment time. */

package/src/task-helper/board.ts

@@ -153,9 +153,11 @@ export function useWorkspaceLabels(wsId: string | null | undefined) {
 
 export interface BoardConfig {
   id: string;
+  name?: string | null;
   estimation_type: string | null;
   extended_estimation: boolean;
   allow_zero_estimates: boolean;
+  count_unestimated_issues?: boolean;
   ws_id: string;
   ticket_prefix: string | null;
 }
@@ -179,9 +181,11 @@ export function useBoardConfig(
 
       return {
         id: board.id,
+        name: board.name ?? null,
         estimation_type: board.estimation_type ?? null,
         extended_estimation: board.extended_estimation ?? false,
         allow_zero_estimates: board.allow_zero_estimates ?? false,
+        count_unestimated_issues: board.count_unestimated_issues ?? false,
         ws_id: board.ws_id,
         ticket_prefix: board.ticket_prefix ?? null,
       } as BoardConfig;

package/src/workspace-helper.ts

@@ -828,22 +828,14 @@ async function getPermissionsImpl({
 
   const isCreator =
     membershipType === 'MEMBER' && workspaceData.creator_id === userId;
-  const hasPermissions =
-    permissionsData.length > 0 || defaultData.length > 0 || isCreator;
-
   // if (DEV_MODE) {
   //   console.log('--------------------');
   //   console.log('Is creator', isCreator);
   //   console.log('Workspace permissions', permissionsData);
   //   console.log('Default permissions', defaultData);
-  //   console.log('Has permissions', hasPermissions);
   //   console.log('--------------------');
   // }
 
-  if (!isCreator && !hasPermissions) {
-    return null;
-  }
-
   const permissions = isCreator
     ? rolePermissions({
         wsId: resolvedWorkspaceId,