feat(experience,account): add image crop for avatar upload

[wangsijie]

Summary

Add a square crop + zoom step to the avatar upload flow in Experience sign-up (Collect User Profile) and Account Center profile. Selecting an image opens a crop modal; the cropped result is exported as a JPEG blob before upload.

• Shared useAvatarCropUpload hook for select → crop → upload orchestration
• AvatarCropModal with square crop, zoom slider, and inline error display
• Scoped blob: in img-src CSP for Experience and Account Center only
• Persist failures show error_save in the modal and retry without re-uploading the asset

Testing

Tested locally
Unit tests

  

[github-actions]

COMPARE TO master

Total Size Diff ⚠️ 📈 +31.54 KB

Diff by File

Name	Diff
packages/account/package.json	📈 +33 Bytes
packages/account/src/components/AvatarUploadField/index.test.tsx	📈 +5.66 KB
packages/account/src/components/AvatarUploadField/index.tsx	📈 +1.96 KB
packages/account/src/pages/Profile/index.test.tsx	📈 +3.54 KB
packages/account/src/pages/Profile/index.tsx	📈 +90 Bytes
packages/core/src/middleware/koa-security-headers.ts	📈 +304 Bytes
packages/experience/jest.config.ts	📈 +131 Bytes
packages/experience/package.json	📈 +33 Bytes
packages/experience/src/components/AvatarCropModal/index.module.scss	📈 +1.39 KB
packages/experience/src/components/AvatarCropModal/index.tsx	📈 +6.63 KB
packages/experience/src/components/InputFields/AvatarUploadField/index.test.tsx	📈 +2.02 KB
packages/experience/src/components/InputFields/AvatarUploadField/index.tsx	📈 +1.83 KB
packages/experience/src/hooks/use-avatar-crop-upload.ts	📈 +6.58 KB
packages/experience/src/utils/avatar-upload.test.ts	📈 +1.16 KB
packages/experience/src/utils/avatar-upload.ts	📈 +797 Bytes
packages/experience/src/utils/image-crop.ts	📈 +2.28 KB
packages/phrases-experience/src/locales/ar/profile.ts	📈 +257 Bytes
packages/phrases-experience/src/locales/cs/profile.ts	📈 +216 Bytes
packages/phrases-experience/src/locales/de/profile.ts	📈 +236 Bytes
packages/phrases-experience/src/locales/en/profile.ts	📈 +180 Bytes
packages/phrases-experience/src/locales/es/profile.ts	📈 +190 Bytes
packages/phrases-experience/src/locales/fr/profile.ts	📈 +207 Bytes
packages/phrases-experience/src/locales/it/profile.ts	📈 +175 Bytes
packages/phrases-experience/src/locales/ja/profile.ts	📈 +266 Bytes
packages/phrases-experience/src/locales/ko/profile.ts	📈 +237 Bytes
packages/phrases-experience/src/locales/pl-pl/profile.ts	📈 +210 Bytes
packages/phrases-experience/src/locales/pt-br/profile.ts	📈 +187 Bytes
packages/phrases-experience/src/locales/pt-pt/profile.ts	📈 +202 Bytes
packages/phrases-experience/src/locales/ru/profile.ts	📈 +292 Bytes
packages/phrases-experience/src/locales/th/profile.ts	📈 +370 Bytes
packages/phrases-experience/src/locales/tr-tr/profile.ts	📈 +209 Bytes
packages/phrases-experience/src/locales/uk-ua/profile.ts	📈 +290 Bytes
packages/phrases-experience/src/locales/zh-cn/profile.ts	📈 +158 Bytes
packages/phrases-experience/src/locales/zh-hk/profile.ts	📈 +158 Bytes
packages/phrases-experience/src/locales/zh-tw/profile.ts	📈 +158 Bytes
pnpm-lock.yaml	📈 +820 Bytes

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Autofix Details

Bugbot Autofix prepared a fix for the issue found in the latest run.

• ✅ Fixed: handleRemove no longer clears stale upload error
  • Exposed clearUploadError from useAvatarCropUpload and call it in handleRemove so stale upload errors are cleared when the avatar is removed.

_{You can send follow-ups to the cloud agent here.}

[Copilot]

Pull request overview

Copilot reviewed 34 out of 35 changed files in this pull request and generated 7 comments.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

[Copilot]

Pull request overview

Copilot reviewed 34 out of 35 changed files in this pull request and generated 1 comment.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

[simeng-li]

overall LGTM

[Copilot]

Pull request overview

Copilot reviewed 35 out of 36 changed files in this pull request and generated 1 comment.

Files not reviewed (1)

• pnpm-lock.yaml: Language not supported

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Reviewed by Cursor Bugbot for commit be4d2c9. Configure here.}