@tuturuuu/utils 0.27.1 → 0.28.0

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## [0.28.0](https://github.com/tutur3u/platform/compare/utils-v0.27.1...utils-v0.28.0) (2026-09-07)
+
+
+### Features
+
+* **calendar:** add installable Tasks and Calendar with bounded caching ([#5231](https://github.com/tutur3u/platform/issues/5231)) ([7078824](https://github.com/tutur3u/platform/commit/70788244874d811da3e1ce3a9af2c9389739a8c3))
+* **colab:** launch multiplayer prompt workshops on Cloudflare ([7a4a3f9](https://github.com/tutur3u/platform/commit/7a4a3f9b4a12a0d7439cdb296398a21c0cd8939f))
+* **meet:** host on Cloudflare and restrict meeting creation ([#5223](https://github.com/tutur3u/platform/issues/5223)) ([dff093b](https://github.com/tutur3u/platform/commit/dff093b4b6ade986ffd54f3c756d08589e47ad8e))
+
+
+### Bug Fixes
+
+* **calendar:** harden PWA lifecycle and cache retention ([14565c0](https://github.com/tutur3u/platform/commit/14565c0106e74b947e152fd8bb787de7f70bc54d))
+* **calendar:** recover failed syncs and redesign calendar views ([7d22948](https://github.com/tutur3u/platform/commit/7d22948095a29d236f698d42dde362fc38311dd0))
+* **calendar:** recover failed syncs and redesign calendar views ([#5230](https://github.com/tutur3u/platform/issues/5230)) ([e52605d](https://github.com/tutur3u/platform/commit/e52605d671f921b1564746afcdedf2478deee78e))
+* **meet:** restrict meeting hosts and restore reliable call media ([2a8a533](https://github.com/tutur3u/platform/commit/2a8a53355181fc8d429653506f7c845c02cf7ae9))
+
 ## [0.27.1](https://github.com/tutur3u/platform/compare/utils-v0.27.0...utils-v0.27.1) (2026-09-04)
 
 

package/biome.json

@@ -1,5 +1,5 @@
 {
   "root": false,
-  "$schema": "https://biomejs.dev/schemas/2.5.11/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.5.12/schema.json",
   "extends": "//"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tuturuuu/utils",
   "license": "MIT",
-  "version": "0.27.1",
+  "version": "0.28.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/tutur3u/platform",
@@ -20,15 +20,15 @@
     "@noble/ciphers": "^2.4.0",
     "@noble/hashes": "^2.4.0",
     "@tanstack/react-query": "^5.102.8",
-    "@tiptap/core": "3.31.0",
-    "@tiptap/react": "3.31.0",
+    "@tiptap/core": "3.31.2",
+    "@tiptap/react": "3.31.2",
     "@tuturuuu/google": "0.1.0",
     "@tuturuuu/icons": "0.1.0",
-    "@tuturuuu/internal-api": "0.33.1",
+    "@tuturuuu/internal-api": "0.34.0",
     "@tuturuuu/supabase": "0.5.1",
     "@upstash/ratelimit": "^2.0.8",
     "@upstash/redis": "^1.38.3",
-    "cn": "^0.2.3",
+    "cn": "^0.2.5",
     "date-fns": "^4.4.0",
     "dayjs": "^1.11.23",
     "diff": "^9.0.0",
@@ -44,7 +44,7 @@
     "zod": "^4.5.4"
   },
   "devDependencies": {
-    "@tuturuuu/types": "0.28.0",
+    "@tuturuuu/types": "0.29.0",
     "@tuturuuu/typescript-config": "0.1.2",
     "@types/diff": "^8.0.0",
     "@types/node": "^26.4.1",
@@ -76,5 +76,5 @@
     "./encryption": "./src/encryption/index.ts",
     "./finance": "./src/finance/index.ts"
   },
-  "packageManager": "bun@1.4.0"
+  "packageManager": "bun@1.4.1"
 }

package/src/__tests__/app-url.test.ts

@@ -292,6 +292,7 @@ describe('Portless app origin registry', () => {
       'https://calendar.tuturuuu.localhost',
       'https://chat.tuturuuu.localhost',
       'https://cms.tuturuuu.localhost',
+      'https://colab.tuturuuu.localhost',
       'https://contacts.tuturuuu.localhost',
       'https://docs.tuturuuu.localhost',
       'https://drive.tuturuuu.localhost',

package/src/ai-temp-auth-constants.ts

@@ -0,0 +1,2 @@
+// Shared wire-protocol constants; safe to import in browser bundles.
+export const AI_TEMP_AUTH_HEADER = 'x-tuturuuu-ai-temp-auth';

package/src/ai-temp-auth.ts

@@ -1,7 +1,8 @@
 import { createHash, randomBytes, randomUUID } from 'node:crypto';
+import { AI_TEMP_AUTH_HEADER } from './ai-temp-auth-constants';
 import { getUpstashRestRedisClient } from './upstash-rest';
 
-export const AI_TEMP_AUTH_HEADER = 'x-tuturuuu-ai-temp-auth';
+export { AI_TEMP_AUTH_HEADER } from './ai-temp-auth-constants';
 export const AI_TEMP_AUTH_TTL_SECONDS = 60;
 export const AI_CREDIT_SNAPSHOT_TTL_SECONDS = 15;
 

package/src/calendar-utils.ts

@@ -15,7 +15,16 @@ export function isAllDayEvent(
   const durationMs = end.diff(start, 'millisecond');
   const isMultipleOf24Hours = durationMs % (24 * 60 * 60 * 1000) === 0;
 
-  return durationMs > 0 && isMultipleOf24Hours;
+  const spansLocalMidnights =
+    start.startOf('day').valueOf() === start.valueOf() &&
+    end.startOf('day').valueOf() === end.valueOf();
+  const wallDuration =
+    durationMs + (end.utcOffset() - start.utcOffset()) * 60_000;
+  return (
+    durationMs > 0 &&
+    (isMultipleOf24Hours ||
+      (spansLocalMidnights && wallDuration % (24 * 60 * 60 * 1000) === 0))
+  );
 }
 
 // Helper function to convert Google Calendar all-day events to proper timezone

package/src/internal-domains.ts

@@ -4,6 +4,7 @@ import {
 } from './portless';
 
 export const PRODUCTION_INTERNAL_APP_DOMAINS = [
+  { name: 'colab', url: 'https://colab.tuturuuu.com' },
   {
     name: 'ai',
     url: 'https://ai.tuturuuu.com',
@@ -131,6 +132,7 @@ export const PRODUCTION_INTERNAL_APP_DOMAINS = [
 ] as const;
 
 export const PORTLESS_INTERNAL_APP_DOMAINS = [
+  { name: 'colab', url: getTuturuuuPortlessAppOrigin('colab') },
   {
     name: 'ai',
     url: getTuturuuuPortlessAppOrigin('ai'),
@@ -250,6 +252,7 @@ export const PORTLESS_INTERNAL_APP_DOMAINS = [
 ] as const;
 
 export const LOCALHOST_INTERNAL_APP_DOMAINS = [
+  { name: 'colab', url: 'http://localhost:8795' },
   {
     name: 'ai',
     url: 'http://localhost:7829',

package/src/keyboard-shortcuts.ts

@@ -0,0 +1,40 @@
+/** Shared guards for document/window keyboard commands. */
+export function isEditableShortcutTarget(target: EventTarget | null): boolean {
+  return (
+    typeof Element !== 'undefined' &&
+    target instanceof Element &&
+    Boolean(
+      target.closest(
+        'input, textarea, select, [contenteditable]:not([contenteditable="false"]), [role="textbox"], [role="combobox"]'
+      )
+    )
+  );
+}
+
+export function isShortcutEventIgnored(
+  event: Pick<KeyboardEvent, 'defaultPrevented' | 'isComposing' | 'repeat'>
+): boolean {
+  return event.defaultPrevented || event.isComposing || event.repeat;
+}
+
+export function isPageShortcutBlocked(event: KeyboardEvent): boolean {
+  if (isShortcutEventIgnored(event) || isEditableShortcutTarget(event.target))
+    return true;
+  const target = event.target;
+  if (
+    typeof Element !== 'undefined' &&
+    target instanceof Element &&
+    target.closest(
+      '[role="menu"], [role="listbox"], [role="dialog"], [role="alertdialog"]'
+    )
+  )
+    return true;
+  return (
+    typeof document !== 'undefined' &&
+    Boolean(
+      document.querySelector(
+        '[role="dialog"][data-state="open"], [role="alertdialog"][data-state="open"]'
+      )
+    )
+  );
+}

package/src/launchable-apps.ts

@@ -387,6 +387,18 @@ export const LAUNCHABLE_APPS = [
     title: 'Track',
     workspacePathResolver: workspaceRootPath,
   },
+  {
+    aliases: ['Prompt engineering', 'Team workshops', 'Multiplayer learning'],
+    appRoot: 'apps/colab',
+    category: 'learning',
+    defaultPath: '/',
+    localhostOrigin: 'http://localhost:8795',
+    packageName: '@tuturuuu/colab',
+    portlessApp: 'colab',
+    productionUrl: 'https://colab.tuturuuu.com',
+    slug: 'colab',
+    title: 'Colab',
+  },
 ] as const satisfies readonly LaunchableApp[];
 
 export type LaunchableAppSlug = (typeof LAUNCHABLE_APPS)[number]['slug'];

package/src/meet-creation-policy.test.ts

@@ -0,0 +1,21 @@
+import { describe, expect, it } from 'vitest';
+import { canCreateOnlineMeeting } from './meet-creation-policy';
+
+describe('online meeting creator domain', () => {
+  it.each(['host@tuturuuu.com', 'Host@TUTURUUU.COM'])('allows %s', (email) => {
+    expect(canCreateOnlineMeeting(email)).toBe(true);
+  });
+  it.each([
+    null,
+    undefined,
+    '',
+    '@tuturuuu.com',
+    'host@gmail.com',
+    'host@sub.tuturuuu.com',
+    'host@tuturuuu.com.evil.test',
+    'host@evil.test@tuturuuu.com',
+    ' host@tuturuuu.com',
+  ])('rejects %s', (email) => {
+    expect(canCreateOnlineMeeting(email)).toBe(false);
+  });
+});

package/src/meet-creation-policy.ts

@@ -0,0 +1,6 @@
+/** Apply only to an authenticated account email, never editable profile metadata. */
+export function canCreateOnlineMeeting(
+  email: string | null | undefined
+): boolean {
+  return typeof email === 'string' && /^[^\s@]+@tuturuuu\.com$/iu.test(email);
+}

package/src/onboarding.ts

@@ -71,6 +71,7 @@ export const GOAL_RECOMMENDATIONS = {
 } as const satisfies Record<OnboardingGoal, readonly string[]>;
 
 const MISSIONS = [
+  ['colab', 'learn', 'reversible', ['prompt', 'simulate', 'review']],
   ['platform', 'focus', 'reversible', ['overview', 'apps', 'next_move']],
   ['calendar', 'focus', 'reversible', ['schedule', 'timebox', 'review']],
   [

package/src/platform-release.test.ts

@@ -7,7 +7,7 @@ import {
 
 describe('platform release metadata', () => {
   it('uses the centralized shared browser app version', () => {
-    expect(TUTURUUU_PLATFORM_VERSION).toBe('0.45.0'); // x-release-please-version
+    expect(TUTURUUU_PLATFORM_VERSION).toBe('0.46.0'); // x-release-please-version
   });
 
   it('preserves the source timestamp in builtAt and derives a short hash', () => {

package/src/platform-release.ts

@@ -1,6 +1,6 @@
 import { PLATFORM_BUILD_METADATA } from './generated/platform-build-metadata';
 
-export const TUTURUUU_PLATFORM_VERSION = '0.45.0'; // x-release-please-version
+export const TUTURUUU_PLATFORM_VERSION = '0.46.0'; // x-release-please-version
 
 export type PlatformBuildMetadataInput = {
   /** ISO timestamp of the source commit used for the build, not deployment time. */

package/src/portless.ts

@@ -11,6 +11,7 @@ export const TUTURUUU_PORTLESS_APP_ORIGINS = {
   calendar: `https://calendar.${TUTURUUU_PORTLESS_ROOT_HOST}`,
   chat: `https://chat.${TUTURUUU_PORTLESS_ROOT_HOST}`,
   cms: `https://cms.${TUTURUUU_PORTLESS_ROOT_HOST}`,
+  colab: `https://colab.${TUTURUUU_PORTLESS_ROOT_HOST}`,
   contacts: `https://contacts.${TUTURUUU_PORTLESS_ROOT_HOST}`,
   docs: `https://docs.${TUTURUUU_PORTLESS_ROOT_HOST}`,
   drive: `https://drive.${TUTURUUU_PORTLESS_ROOT_HOST}`,