@tuturuuu/utils 0.27.0 → 0.28.0

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## [0.28.0](https://github.com/tutur3u/platform/compare/utils-v0.27.1...utils-v0.28.0) (2026-09-07)
+
+
+### Features
+
+* **calendar:** add installable Tasks and Calendar with bounded caching ([#5231](https://github.com/tutur3u/platform/issues/5231)) ([7078824](https://github.com/tutur3u/platform/commit/70788244874d811da3e1ce3a9af2c9389739a8c3))
+* **colab:** launch multiplayer prompt workshops on Cloudflare ([7a4a3f9](https://github.com/tutur3u/platform/commit/7a4a3f9b4a12a0d7439cdb296398a21c0cd8939f))
+* **meet:** host on Cloudflare and restrict meeting creation ([#5223](https://github.com/tutur3u/platform/issues/5223)) ([dff093b](https://github.com/tutur3u/platform/commit/dff093b4b6ade986ffd54f3c756d08589e47ad8e))
+
+
+### Bug Fixes
+
+* **calendar:** harden PWA lifecycle and cache retention ([14565c0](https://github.com/tutur3u/platform/commit/14565c0106e74b947e152fd8bb787de7f70bc54d))
+* **calendar:** recover failed syncs and redesign calendar views ([7d22948](https://github.com/tutur3u/platform/commit/7d22948095a29d236f698d42dde362fc38311dd0))
+* **calendar:** recover failed syncs and redesign calendar views ([#5230](https://github.com/tutur3u/platform/issues/5230)) ([e52605d](https://github.com/tutur3u/platform/commit/e52605d671f921b1564746afcdedf2478deee78e))
+* **meet:** restrict meeting hosts and restore reliable call media ([2a8a533](https://github.com/tutur3u/platform/commit/2a8a53355181fc8d429653506f7c845c02cf7ae9))
+
+## [0.27.1](https://github.com/tutur3u/platform/compare/utils-v0.27.0...utils-v0.27.1) (2026-09-04)
+
+
+### Bug Fixes
+
+* **ai:** type workspace resolution failures ([10b9141](https://github.com/tutur3u/platform/commit/10b9141999894f25f7c4e0ca81a9d7e75dbfb2c1))
+* **rewise:** bind AI work to selected workspace ([#5208](https://github.com/tutur3u/platform/issues/5208)) ([5f1d8f3](https://github.com/tutur3u/platform/commit/5f1d8f3544e87e78b6555cd679c36f2878d0dab9))
+
 ## [0.27.0](https://github.com/tutur3u/platform/compare/utils-v0.26.0...utils-v0.27.0) (2026-08-27)
 
 

package/biome.json

@@ -1,5 +1,5 @@
 {
   "root": false,
-  "$schema": "https://biomejs.dev/schemas/2.5.10/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.5.12/schema.json",
   "extends": "//"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tuturuuu/utils",
   "license": "MIT",
-  "version": "0.27.0",
+  "version": "0.28.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/tutur3u/platform",
@@ -17,43 +17,42 @@
   },
   "dependencies": {
     "@dnd-kit/core": "^6.3.1",
-    "@noble/ciphers": "^2.3.0",
-    "@noble/hashes": "^2.3.0",
-    "@tanstack/react-query": "^5.102.1",
-    "@tiptap/core": "3.30.2",
-    "@tiptap/react": "3.30.2",
+    "@noble/ciphers": "^2.4.0",
+    "@noble/hashes": "^2.4.0",
+    "@tanstack/react-query": "^5.102.8",
+    "@tiptap/core": "3.31.2",
+    "@tiptap/react": "3.31.2",
     "@tuturuuu/google": "0.1.0",
     "@tuturuuu/icons": "0.1.0",
-    "@tuturuuu/internal-api": "0.33.0",
+    "@tuturuuu/internal-api": "0.34.0",
     "@tuturuuu/supabase": "0.5.1",
     "@upstash/ratelimit": "^2.0.8",
-    "@upstash/redis": "^1.38.2",
-    "clsx": "^2.1.1",
+    "@upstash/redis": "^1.38.3",
+    "cn": "^0.2.5",
     "date-fns": "^4.4.0",
     "dayjs": "^1.11.23",
     "diff": "^9.0.0",
     "effect": "^3.22.1",
     "moment": "^2.30.1",
-    "next": "^16.3.2",
+    "next": "^16.3.4",
     "prosemirror-model": "^1.25.11",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
-    "tailwind-merge": "^3.6.0",
     "uuid": "^14.0.2",
     "y-prosemirror": "^1.3.7",
     "yjs": "^13.6.32",
-    "zod": "^4.4.3"
+    "zod": "^4.5.4"
   },
   "devDependencies": {
-    "@tuturuuu/types": "0.28.0",
+    "@tuturuuu/types": "0.29.0",
     "@tuturuuu/typescript-config": "0.1.2",
     "@types/diff": "^8.0.0",
-    "@types/node": "^26.2.0",
+    "@types/node": "^26.4.1",
     "@types/react": "^19.2.18",
-    "@vitejs/plugin-react": "^6.1.0",
+    "@vitejs/plugin-react": "^6.1.1",
     "typescript": "7.0.2",
     "vite": "^8.2.2",
-    "vitest": "^4.1.11"
+    "vitest": "^5.0.0"
   },
   "exports": {
     "./timezones": "./src/timezones.json",
@@ -77,5 +76,5 @@
     "./encryption": "./src/encryption/index.ts",
     "./finance": "./src/finance/index.ts"
   },
-  "packageManager": "bun@1.4.0"
+  "packageManager": "bun@1.4.1"
 }

package/src/__tests__/app-url.test.ts

@@ -292,6 +292,7 @@ describe('Portless app origin registry', () => {
       'https://calendar.tuturuuu.localhost',
       'https://chat.tuturuuu.localhost',
       'https://cms.tuturuuu.localhost',
+      'https://colab.tuturuuu.localhost',
       'https://contacts.tuturuuu.localhost',
       'https://docs.tuturuuu.localhost',
       'https://drive.tuturuuu.localhost',

package/src/__tests__/format.test.ts

@@ -1,6 +1,7 @@
 import { describe, expect, it } from 'vitest';
 import {
   capitalize,
+  cn,
   formatBytes,
   formatCurrency,
   formatDuration,
@@ -10,6 +11,48 @@ import {
 } from '../format';
 
 describe('Format Utilities', () => {
+  describe('cn', () => {
+    it('joins conditional class values with clsx-compatible semantics', () => {
+      expect(
+        cn('flex', false, null, undefined, [
+          'items-center',
+          { 'opacity-50': true, hidden: false },
+        ])
+      ).toBe('flex items-center opacity-50');
+    });
+
+    it('resolves conflicting Tailwind utilities using the last value', () => {
+      expect(cn('px-2 py-1', 'px-4', 'py-3')).toBe('px-4 py-3');
+    });
+
+    it('keeps independent responsive and state variants', () => {
+      expect(
+        cn(
+          'text-sm hover:text-base md:text-lg',
+          'text-xl hover:text-2xl md:text-3xl'
+        )
+      ).toBe('text-xl hover:text-2xl md:text-3xl');
+    });
+
+    it('preserves non-conflicting variants from separate inputs', () => {
+      expect(cn('text-sm hover:text-base', 'md:text-lg')).toBe(
+        'text-sm hover:text-base md:text-lg'
+      );
+    });
+
+    it('resolves arbitrary values and important modifiers', () => {
+      expect(cn('w-[10px] w-[var(--panel-width)]', '!p-4 p-2')).toBe(
+        'w-[var(--panel-width)] !p-4 p-2'
+      );
+    });
+
+    it('preserves non-Tailwind application classes', () => {
+      expect(cn('app-shell', 'feature-card', { selected: true })).toBe(
+        'app-shell feature-card selected'
+      );
+    });
+  });
+
   describe('capitalize', () => {
     it('capitalizes first letter of a word', () => {
       expect(capitalize('hello')).toBe('Hello');

package/src/__tests__/workspace-helper.test.ts

@@ -17,6 +17,9 @@ import {
   isPersonalWorkspace,
   isWorkspaceUuidLiteral,
   normalizeWorkspaceId,
+  WorkspaceAuthError,
+  WorkspaceNotFoundError,
+  WorkspaceResolutionError,
 } from '../workspace-helper';
 
 describe('isWorkspaceUuidLiteral', () => {
@@ -410,6 +413,41 @@ describe('normalizeWorkspaceId', () => {
     expect(query.eq).toHaveBeenCalledWith('workspace_members.type', 'MEMBER');
   });
 
+  it('uses a typed error when personal workspace authentication is missing', async () => {
+    mockCreateClient.mockResolvedValue({
+      auth: { getUser: vi.fn().mockResolvedValue({ data: { user: null } }) },
+    });
+
+    await expect(normalizeWorkspaceId('personal')).rejects.toBeInstanceOf(
+      WorkspaceAuthError
+    );
+  });
+
+  it.each([
+    [new Error('database unavailable'), WorkspaceResolutionError],
+    [null, WorkspaceNotFoundError],
+  ])('distinguishes personal lookup failures', async (error, ErrorType) => {
+    const query = {
+      eq: vi.fn(),
+      maybeSingle: vi.fn().mockResolvedValue({ data: null, error }),
+      select: vi.fn(),
+    };
+    query.select.mockReturnValue(query);
+    query.eq.mockReturnValue(query);
+    mockCreateClient.mockResolvedValue({
+      auth: {
+        getUser: vi.fn().mockResolvedValue({
+          data: { user: { id: 'user-1' } },
+        }),
+      },
+      from: vi.fn(() => query),
+    });
+
+    await expect(normalizeWorkspaceId('personal')).rejects.toBeInstanceOf(
+      ErrorType
+    );
+  });
+
   it('resolves handle via admin fallback when request-scoped lookup cannot see workspace', async () => {
     const requestScopedQuery = {
       select: vi.fn(),

package/src/ai-temp-auth-constants.ts

@@ -0,0 +1,2 @@
+// Shared wire-protocol constants; safe to import in browser bundles.
+export const AI_TEMP_AUTH_HEADER = 'x-tuturuuu-ai-temp-auth';

package/src/ai-temp-auth.ts

@@ -1,7 +1,8 @@
 import { createHash, randomBytes, randomUUID } from 'node:crypto';
+import { AI_TEMP_AUTH_HEADER } from './ai-temp-auth-constants';
 import { getUpstashRestRedisClient } from './upstash-rest';
 
-export const AI_TEMP_AUTH_HEADER = 'x-tuturuuu-ai-temp-auth';
+export { AI_TEMP_AUTH_HEADER } from './ai-temp-auth-constants';
 export const AI_TEMP_AUTH_TTL_SECONDS = 60;
 export const AI_CREDIT_SNAPSHOT_TTL_SECONDS = 15;
 

package/src/calendar-utils.ts

@@ -15,7 +15,16 @@ export function isAllDayEvent(
   const durationMs = end.diff(start, 'millisecond');
   const isMultipleOf24Hours = durationMs % (24 * 60 * 60 * 1000) === 0;
 
-  return durationMs > 0 && isMultipleOf24Hours;
+  const spansLocalMidnights =
+    start.startOf('day').valueOf() === start.valueOf() &&
+    end.startOf('day').valueOf() === end.valueOf();
+  const wallDuration =
+    durationMs + (end.utcOffset() - start.utcOffset()) * 60_000;
+  return (
+    durationMs > 0 &&
+    (isMultipleOf24Hours ||
+      (spansLocalMidnights && wallDuration % (24 * 60 * 60 * 1000) === 0))
+  );
 }
 
 // Helper function to convert Google Calendar all-day events to proper timezone

package/src/format.ts

@@ -1,12 +1,7 @@
-import { type ClassValue, clsx } from 'clsx';
-import { twMerge } from 'tailwind-merge';
+export { cn } from 'cn';
 
 import { getCurrencyLocale as getCurrencyLocaleFromConfig } from './currencies';
 
-export function cn(...inputs: ClassValue[]): string {
-  return twMerge(clsx(inputs));
-}
-
 export const capitalize = (s?: string | null): string => {
   if (!s) return '';
   if (s.length === 0) return s;

package/src/internal-domains.ts

@@ -4,6 +4,7 @@ import {
 } from './portless';
 
 export const PRODUCTION_INTERNAL_APP_DOMAINS = [
+  { name: 'colab', url: 'https://colab.tuturuuu.com' },
   {
     name: 'ai',
     url: 'https://ai.tuturuuu.com',
@@ -131,6 +132,7 @@ export const PRODUCTION_INTERNAL_APP_DOMAINS = [
 ] as const;
 
 export const PORTLESS_INTERNAL_APP_DOMAINS = [
+  { name: 'colab', url: getTuturuuuPortlessAppOrigin('colab') },
   {
     name: 'ai',
     url: getTuturuuuPortlessAppOrigin('ai'),
@@ -250,6 +252,7 @@ export const PORTLESS_INTERNAL_APP_DOMAINS = [
 ] as const;
 
 export const LOCALHOST_INTERNAL_APP_DOMAINS = [
+  { name: 'colab', url: 'http://localhost:8795' },
   {
     name: 'ai',
     url: 'http://localhost:7829',

package/src/keyboard-shortcuts.ts

@@ -0,0 +1,40 @@
+/** Shared guards for document/window keyboard commands. */
+export function isEditableShortcutTarget(target: EventTarget | null): boolean {
+  return (
+    typeof Element !== 'undefined' &&
+    target instanceof Element &&
+    Boolean(
+      target.closest(
+        'input, textarea, select, [contenteditable]:not([contenteditable="false"]), [role="textbox"], [role="combobox"]'
+      )
+    )
+  );
+}
+
+export function isShortcutEventIgnored(
+  event: Pick<KeyboardEvent, 'defaultPrevented' | 'isComposing' | 'repeat'>
+): boolean {
+  return event.defaultPrevented || event.isComposing || event.repeat;
+}
+
+export function isPageShortcutBlocked(event: KeyboardEvent): boolean {
+  if (isShortcutEventIgnored(event) || isEditableShortcutTarget(event.target))
+    return true;
+  const target = event.target;
+  if (
+    typeof Element !== 'undefined' &&
+    target instanceof Element &&
+    target.closest(
+      '[role="menu"], [role="listbox"], [role="dialog"], [role="alertdialog"]'
+    )
+  )
+    return true;
+  return (
+    typeof document !== 'undefined' &&
+    Boolean(
+      document.querySelector(
+        '[role="dialog"][data-state="open"], [role="alertdialog"][data-state="open"]'
+      )
+    )
+  );
+}

package/src/launchable-apps.ts

@@ -387,6 +387,18 @@ export const LAUNCHABLE_APPS = [
     title: 'Track',
     workspacePathResolver: workspaceRootPath,
   },
+  {
+    aliases: ['Prompt engineering', 'Team workshops', 'Multiplayer learning'],
+    appRoot: 'apps/colab',
+    category: 'learning',
+    defaultPath: '/',
+    localhostOrigin: 'http://localhost:8795',
+    packageName: '@tuturuuu/colab',
+    portlessApp: 'colab',
+    productionUrl: 'https://colab.tuturuuu.com',
+    slug: 'colab',
+    title: 'Colab',
+  },
 ] as const satisfies readonly LaunchableApp[];
 
 export type LaunchableAppSlug = (typeof LAUNCHABLE_APPS)[number]['slug'];

package/src/meet-creation-policy.test.ts

@@ -0,0 +1,21 @@
+import { describe, expect, it } from 'vitest';
+import { canCreateOnlineMeeting } from './meet-creation-policy';
+
+describe('online meeting creator domain', () => {
+  it.each(['host@tuturuuu.com', 'Host@TUTURUUU.COM'])('allows %s', (email) => {
+    expect(canCreateOnlineMeeting(email)).toBe(true);
+  });
+  it.each([
+    null,
+    undefined,
+    '',
+    '@tuturuuu.com',
+    'host@gmail.com',
+    'host@sub.tuturuuu.com',
+    'host@tuturuuu.com.evil.test',
+    'host@evil.test@tuturuuu.com',
+    ' host@tuturuuu.com',
+  ])('rejects %s', (email) => {
+    expect(canCreateOnlineMeeting(email)).toBe(false);
+  });
+});

package/src/meet-creation-policy.ts

@@ -0,0 +1,6 @@
+/** Apply only to an authenticated account email, never editable profile metadata. */
+export function canCreateOnlineMeeting(
+  email: string | null | undefined
+): boolean {
+  return typeof email === 'string' && /^[^\s@]+@tuturuuu\.com$/iu.test(email);
+}

package/src/onboarding.ts

@@ -71,6 +71,7 @@ export const GOAL_RECOMMENDATIONS = {
 } as const satisfies Record<OnboardingGoal, readonly string[]>;
 
 const MISSIONS = [
+  ['colab', 'learn', 'reversible', ['prompt', 'simulate', 'review']],
   ['platform', 'focus', 'reversible', ['overview', 'apps', 'next_move']],
   ['calendar', 'focus', 'reversible', ['schedule', 'timebox', 'review']],
   [

package/src/platform-release.test.ts

@@ -7,7 +7,7 @@ import {
 
 describe('platform release metadata', () => {
   it('uses the centralized shared browser app version', () => {
-    expect(TUTURUUU_PLATFORM_VERSION).toBe('0.43.0'); // x-release-please-version
+    expect(TUTURUUU_PLATFORM_VERSION).toBe('0.46.0'); // x-release-please-version
   });
 
   it('preserves the source timestamp in builtAt and derives a short hash', () => {

package/src/platform-release.ts

@@ -1,6 +1,6 @@
 import { PLATFORM_BUILD_METADATA } from './generated/platform-build-metadata';
 
-export const TUTURUUU_PLATFORM_VERSION = '0.43.0'; // x-release-please-version
+export const TUTURUUU_PLATFORM_VERSION = '0.46.0'; // x-release-please-version
 
 export type PlatformBuildMetadataInput = {
   /** ISO timestamp of the source commit used for the build, not deployment time. */

package/src/portless.ts

@@ -11,6 +11,7 @@ export const TUTURUUU_PORTLESS_APP_ORIGINS = {
   calendar: `https://calendar.${TUTURUUU_PORTLESS_ROOT_HOST}`,
   chat: `https://chat.${TUTURUUU_PORTLESS_ROOT_HOST}`,
   cms: `https://cms.${TUTURUUU_PORTLESS_ROOT_HOST}`,
+  colab: `https://colab.${TUTURUUU_PORTLESS_ROOT_HOST}`,
   contacts: `https://contacts.${TUTURUUU_PORTLESS_ROOT_HOST}`,
   docs: `https://docs.${TUTURUUU_PORTLESS_ROOT_HOST}`,
   drive: `https://drive.${TUTURUUU_PORTLESS_ROOT_HOST}`,

package/src/workspace-helper.ts

@@ -28,6 +28,20 @@ export class WorkspaceAuthError extends Error {
   }
 }
 
+export class WorkspaceNotFoundError extends Error {
+  constructor(message = 'Workspace not found') {
+    super(message);
+    this.name = 'WorkspaceNotFoundError';
+  }
+}
+
+export class WorkspaceResolutionError extends Error {
+  constructor(message = 'Workspace resolution failed') {
+    super(message);
+    this.name = 'WorkspaceResolutionError';
+  }
+}
+
 export class WorkspaceAccessError extends Error {
   constructor(message = 'Workspace access denied') {
     super(message);
@@ -1096,7 +1110,7 @@ export async function normalizeWorkspaceId(
     const principal = await resolveAuthenticatedPrincipal(sb);
 
     if (!principal) {
-      throw new Error('User not authenticated');
+      throw new WorkspaceAuthError();
     }
 
     const userId = principal.id;
@@ -1109,8 +1123,11 @@ export async function normalizeWorkspaceId(
       .eq('workspace_members.type', 'MEMBER')
       .maybeSingle();
 
-    if (error || !workspace) {
-      throw new Error('Personal workspace not found');
+    if (error) {
+      throw new WorkspaceResolutionError('Personal workspace lookup failed');
+    }
+    if (!workspace) {
+      throw new WorkspaceNotFoundError('Personal workspace not found');
     }
 
     return workspace.id;