Merge branch 'main' into dependabot/github_actions/voidzero-dev/setup-vp-1.15.0

Author: sumitsahoo

CLAUDE.md

@@ -21,7 +21,7 @@ Pre-commit testing rule: run `vp check` + `vp test` + (for UI/RAG changes) `pnpm
 
 ## Architecture
 
-CloakPDF is a **100% client-side** React 19 + TypeScript 6 single-page app served as static assets via Cloudflare Workers (`wrangler.jsonc`). Every PDF operation runs in the browser; no file ever crosses the network.
+CloakPDF is a **100% client-side** React 19 + TypeScript 7 single-page app served as static assets via Cloudflare Workers (`wrangler.jsonc`). Every PDF operation runs in the browser; no file ever crosses the network.
 
 ### View routing
 

README.md

@@ -52,7 +52,7 @@ Everything runs client-side — there is no server to upload to. No accounts, no
 
 | Area             | Technology                                                                                                                   |
 | ---------------- | ---------------------------------------------------------------------------------------------------------------------------- |
-| Framework        | [React 19](https://react.dev/) + [TypeScript 6](https://www.typescriptlang.org/)                                             |
+| Framework        | [React 19](https://react.dev/) + [TypeScript 7](https://www.typescriptlang.org/)                                             |
 | Styling          | [Tailwind CSS 4](https://tailwindcss.com/)                                                                                   |
 | Build & tooling  | [Vite+ (`vp`)](https://viteplus.dev/)                                                                                        |
 | PDF manipulation | [@pdfme/pdf-lib](https://github.com/pdfme/pdf-lib)                                                                           |

package.json

@@ -17,18 +17,16 @@
   "dependencies": {
     "@huggingface/transformers": "^4.2.0",
     "@langchain/community": "^1.1.29",
-    "@langchain/core": "^1.2.1",
+    "@langchain/core": "^1.2.2",
     "@langchain/langgraph": "^1.4.7",
-    "@llamaindex/liteparse-wasm": "^2.2.1",
+    "@llamaindex/liteparse-wasm": "^2.5.0",
     "@pdf-lib/fontkit": "^1.1.1",
-    "@pdfme/pdf-lib": "^6.1.10",
-    "jszip": "^3.10.1",
-    "lucide-react": "^1.21.0",
-    "motion": "^12.42.0",
+    "@pdfme/pdf-lib": "^6.1.11",
+    "lucide-react": "^1.23.0",
+    "motion": "^12.42.2",
     "node-forge": "^1.4.0",
     "ogl": "^1.0.11",
-    "pdfjs-dist": "^6.0.227",
-    "qrcode-generator": "^2.0.4",
+    "pdfjs-dist": "^6.1.200",
     "react": "^19.2.7",
     "react-dom": "^19.2.7",
     "react-markdown": "^10.1.0",
@@ -37,20 +35,20 @@
     "workbox-window": "^7.4.1"
   },
   "devDependencies": {
-    "@tailwindcss/vite": "^4.3.1",
+    "@tailwindcss/vite": "^4.3.2",
     "@types/node-forge": "^1.3.14",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
     "@vite-pwa/assets-generator": "^1.0.2",
-    "@vitejs/plugin-react": "^6.0.2",
-    "@voidzero-dev/vite-plus-core": "^0.1.24",
-    "puppeteer-core": "^25.2.0",
-    "tailwindcss": "^4.3.1",
-    "typescript": "^6.0.3",
-    "vite": "npm:@voidzero-dev/vite-plus-core@^0.1.24",
+    "@vitejs/plugin-react": "^6.0.3",
+    "@voidzero-dev/vite-plus-core": "^0.2.4",
+    "puppeteer-core": "^25.3.0",
+    "tailwindcss": "^4.3.2",
+    "typescript": "^7.0.2",
+    "vite": "npm:@voidzero-dev/vite-plus-core@^0.2.4",
     "vite-plugin-pwa": "^1.3.0",
-    "vite-plus": "^0.1.24",
-    "vitest": "npm:@voidzero-dev/vite-plus-test@^0.1.24"
+    "vite-plus": "^0.2.4",
+    "vitest": "^4.1.10"
   },
   "packageManager": "pnpm@10.32.1"
 }

pnpm-lock.yaml

@@ -1,10 +1,10 @@
 # pnpm 10 reads dependency overrides from here (no longer from package.json's
-# "pnpm.overrides", which it silently ignores). vite/vitest are remapped to the
-# Vite+ drop-ins; the rest pin transitive deps past known advisories:
+# "pnpm.overrides", which it silently ignores). `vite` is remapped to the Vite+
+# core drop-in; vitest is now the real package bundled by Vite+ 0.2.x (no alias).
+# The rest pin transitive deps past known advisories:
 #   - serialize-javascript >=7.0.3  (XSS, GHSA-76p7-773f-r4q5)
 #   - form-data >=4.0.6             (unsafe boundary, GHSA-hmw2-7cc7-3qxx)
 overrides:
-  vite: "npm:@voidzero-dev/vite-plus-core@^0.1.24"
-  vitest: "npm:@voidzero-dev/vite-plus-test@^0.1.24"
+  vite: "npm:@voidzero-dev/vite-plus-core@^0.2.4"
   serialize-javascript: ">=7.0.3"
   form-data: ">=4.0.6"

pnpm-workspace.yaml

@@ -330,12 +330,14 @@ export function ExportButton() {
           downloadBlob(rendered[0].blob, `${baseName}.png`);
           return;
         }
-        const JSZip = (await import("jszip")).default;
-        const zip = new JSZip();
-        for (const { pageIndex, blob } of rendered) {
-          zip.file(`${baseName}_p${String(pageIndex + 1).padStart(3, "0")}.png`, blob);
-        }
-        downloadBlob(await zip.generateAsync({ type: "blob" }), `${baseName}_images.zip`);
+        const { makeZip } = await import("../utils/zip.ts");
+        const zipBlob = await makeZip(
+          rendered.map(({ pageIndex, blob }) => ({
+            name: `${baseName}_p${String(pageIndex + 1).padStart(3, "0")}.png`,
+            data: blob,
+          })),
+        );
+        downloadBlob(zipBlob, `${baseName}_images.zip`);
       });
       return;
     }
@@ -352,12 +354,14 @@ export function ExportButton() {
       void runTask("Splitting pages…", async () => {
         const parts = Array.from({ length: doc.pageCount }, (_, i) => [i]);
         const pdfs = await splitPdfIntoParts(await flattenedFile(), parts);
-        const JSZip = (await import("jszip")).default;
-        const zip = new JSZip();
-        pdfs.forEach((bytes, i) => {
-          zip.file(`${baseName}_p${String(i + 1).padStart(3, "0")}.pdf`, bytes);
-        });
-        downloadBlob(await zip.generateAsync({ type: "blob" }), `${baseName}_pages.zip`);
+        const { makeZip } = await import("../utils/zip.ts");
+        const zipBlob = await makeZip(
+          pdfs.map((bytes, i) => ({
+            name: `${baseName}_p${String(i + 1).padStart(3, "0")}.pdf`,
+            data: bytes,
+          })),
+        );
+        downloadBlob(zipBlob, `${baseName}_pages.zip`);
       });
       return;
     }

src/editor/ExportModal.tsx

@@ -14,8 +14,12 @@
 
 import { Layers } from "lucide-react";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
-import qrcode from "qrcode-generator";
-import { addCodeStampAt, type CodeStampType, encodeCode128B } from "../../utils/pdf-operations.ts";
+import {
+  addCodeStampAt,
+  type CodeStampType,
+  encodeCode128B,
+  encodeQr,
+} from "../../utils/pdf-operations.ts";
 import { ColorPicker, hexToRgb } from "../../components/ColorPicker.tsx";
 import { useEditorActions, useEditorRead, useToolSlice } from "../EditorContext.tsx";
 import { PrimaryAction } from "./PrimaryAction.tsx";
@@ -77,10 +81,8 @@ function renderCode(
   if (!text) return null;
   if (type === "qr") {
     try {
-      const qr = qrcode(0, "M");
-      qr.addData(text);
-      qr.make();
-      const n = qr.getModuleCount();
+      const qr = encodeQr(text, "M");
+      const n = qr.size;
       const quiet = 4;
       const cell = 6;
       const dim = (n + quiet * 2) * cell;

src/editor/panels/CodeStampTool.tsx

@@ -295,12 +295,13 @@ export default function ExtractImages() {
         const img = selectedImages[0];
         downloadBlob(img.blob, `${baseName}_p${img.page}_img${img.indexOnPage + 1}.png`);
       } else {
-        const JSZip = (await import("jszip")).default;
-        const zip = new JSZip();
-        for (const img of selectedImages) {
-          zip.file(`${baseName}_p${img.page}_img${img.indexOnPage + 1}.png`, img.blob);
-        }
-        const zipBlob = await zip.generateAsync({ type: "blob" });
+        const { makeZip } = await import("../utils/zip.ts");
+        const zipBlob = await makeZip(
+          selectedImages.map((img) => ({
+            name: `${baseName}_p${img.page}_img${img.indexOnPage + 1}.png`,
+            data: img.blob,
+          })),
+        );
         downloadBlob(zipBlob, `${baseName}_images.zip`);
       }
     }, "Failed to download images. Please try again.");

src/standalone/ExtractImages.tsx

@@ -44,6 +44,8 @@ export {
 
 export type { CodeStampType, CodeArtOptions, CodePlacement } from "./pdf/codes.ts";
 export { addCodeStampAt, encodeCode128B } from "./pdf/codes.ts";
+export type { QrEcl, QrMatrix } from "./pdf/qr.ts";
+export { encodeQr } from "./pdf/qr.ts";
 
 export type { TokenContext, TokenDef } from "./pdf/tokens.ts";
 export { STAMP_TOKENS, resolveStampTokens, baseFileName } from "./pdf/tokens.ts";

src/utils/pdf-operations.ts

@@ -3,9 +3,9 @@
  *
  * Both symbologies are drawn as **vector** rectangles straight into the page
  * content stream (no canvas, no embedded raster), so they stay razor-sharp at
- * any zoom or print DPI and add only a few KB. QR matrices come from the tiny
- * dependency-free `qrcode-generator`; Code 128 is encoded here by a compact
- * self-contained encoder so we pull in no barcode library.
+ * any zoom or print DPI and add only a few KB. QR matrices come from our own
+ * dependency-free encoder ([qr.ts](./qr.ts)); Code 128 is encoded here by a
+ * compact self-contained encoder — no QR or barcode library is pulled in.
  *
  * Use cases this unlocks that no other in-browser PDF editor offers: dropping a
  * scannable verification URL, case number, or document hash onto a corner of
@@ -14,7 +14,7 @@
  */
 
 import { PDFDocument, rgb, StandardFonts } from "@pdfme/pdf-lib";
-import qrcode from "qrcode-generator";
+import { encodeQr } from "./qr.ts";
 
 export type CodeStampType = "qr" | "barcode";
 
@@ -218,10 +218,8 @@ export async function addCodeStampAt(
   let qrCount = 0;
   let qrIsDark: (row: number, col: number) => boolean = () => false;
   if (options.type === "qr") {
-    const qr = qrcode(0, "M");
-    qr.addData(content);
-    qr.make();
-    qrCount = qr.getModuleCount();
+    const qr = encodeQr(content, "M");
+    qrCount = qr.size;
     qrIsDark = (row, col) => qr.isDark(row, col);
   }
   const barPattern = options.type === "barcode" ? encodeCode128B(content) : "";