Session 2026-05-20: UI fixes, invoice filtering, file browser, request approvals, sub invoice task scope

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-20 21:32:55 -04:00
parent ff159c5937
commit 565d2ed4bc
34 changed files with 3384 additions and 1161 deletions
@@ -0,0 +1,165 @@
+// One-time script: copies existing submission files from Supabase Storage to FileBrowser
+// Run: node scripts/backfill-request-files.mjs
+import { readFileSync } from 'fs';
+import { createClient } from '@supabase/supabase-js';
+import { resolve, dirname } from 'path';
+import { fileURLToPath } from 'url';
+
+const __dir = dirname(fileURLToPath(import.meta.url));
+const envFile = resolve(__dir, '../.env.backfill');
+
+// Parse env file
+const env = {};
+readFileSync(envFile, 'utf8').split('\n').forEach(line => {
+  const m = line.match(/^([^#=]+)=(.*)$/);
+  if (m) env[m[1].trim()] = m[2].trim().replace(/^["']|["']$/g, '');
+});
+
+const SUPABASE_URL = env.VITE_SUPABASE_URL || env.SUPABASE_URL;
+const SERVICE_ROLE_KEY = env.SUPABASE_SERVICE_ROLE_KEY;
+const FB_URL = (env.FILEBROWSER_URL || '').replace(/\/+$/, '');
+const FB_TOKEN = env.FILEBROWSER_TOKEN;
+const CLIENT_ROOT = env.FILEBROWSER_CLIENT_ROOT || '/fourgebranding/Clients';
+const FB_SOURCE = 'files';
+
+if (!SUPABASE_URL || !SERVICE_ROLE_KEY) { console.error('Missing Supabase env'); process.exit(1); }
+if (!FB_URL || !FB_TOKEN) { console.error('Missing FileBrowser env'); process.exit(1); }
+
+const admin = createClient(SUPABASE_URL, SERVICE_ROLE_KEY, {
+  auth: { persistSession: false, autoRefreshToken: false },
+});
+
+function normalizePath(path) {
+  const parts = String(path || '/').trim().split('/').filter(Boolean);
+  const clean = [];
+  for (const p of parts) {
+    if (p === '.') continue;
+    if (p === '..') throw new Error('path traversal');
+    clean.push(p);
+  }
+  return `/${clean.join('/')}`;
+}
+
+function joinPath(...parts) { return normalizePath(parts.join('/')); }
+
+function safeName(v) {
+  return String(v || '').trim()
+    .replace(/[\\/:*?"<>|#%{}^~[\]`]+/g, '-')
+    .replace(/\s+/g, ' ')
+    .replace(/^-+|-+$/g, '');
+}
+
+async function fbFetch(method, endpoint, { params = {}, headers = {}, body } = {}) {
+  const qs = new URLSearchParams({ source: FB_SOURCE, ...params }).toString();
+  const res = await fetch(`${FB_URL}${endpoint}?${qs}`, {
+    method,
+    headers: { Authorization: `Bearer ${FB_TOKEN}`, ...headers },
+    body,
+  });
+  if (!res.ok) {
+    const text = await res.text();
+    throw new Error(`FB ${res.status}: ${text.slice(0, 200)}`);
+  }
+  return res;
+}
+
+async function mkdir(path) {
+  await fbFetch('POST', '/api/resources', { params: { path, isDir: 'true' } }).catch(() => {});
+}
+
+async function main() {
+  const { data: rows, error } = await admin
+    .from('submission_files')
+    .select(`
+      id, name, storage_path,
+      submission:submissions!inner(
+        id, version_number,
+        task:tasks!inner(
+          id, title,
+          project:projects!inner(
+            id, name,
+            company:companies!inner(name)
+          )
+        )
+      )
+    `);
+
+  if (error) { console.error('Query failed:', error.message); process.exit(1); }
+
+  // Group by task + version
+  const groups = new Map();
+  for (const row of rows || []) {
+    const sub = row.submission;
+    const task = sub?.task;
+    const project = task?.project;
+    const company = project?.company;
+    if (!task || !project || !company) continue;
+
+    const key = `${task.id}::${sub.version_number}`;
+    if (!groups.has(key)) {
+      groups.set(key, {
+        companyName: company.name,
+        projectName: project.name,
+        taskTitle: task.title,
+        versionNumber: sub.version_number,
+        files: [],
+      });
+    }
+    groups.get(key).files.push({ name: row.name, storage_path: row.storage_path });
+  }
+
+  console.log(`Found ${groups.size} task/revision groups, ${rows.length} total files`);
+
+  let processed = 0, skipped = 0, errors = 0;
+
+  for (const [key, group] of groups) {
+    if (group.files.length === 0) { skipped++; continue; }
+
+    const revFolder = `R${String(group.versionNumber).padStart(2, '0')}`;
+    const companyDir = joinPath(CLIENT_ROOT, safeName(group.companyName));
+    const projectDir = joinPath(companyDir, 'Projects', safeName(group.projectName));
+    const taskDir = joinPath(projectDir, safeName(group.taskTitle));
+    const requestInfoDir = joinPath(taskDir, 'Request Info');
+    const revDir = joinPath(requestInfoDir, revFolder);
+
+    console.log(`\n[${group.companyName}] ${group.projectName} / ${group.taskTitle} / ${revFolder} (${group.files.length} files)`);
+
+    await mkdir(companyDir);
+    await mkdir(joinPath(companyDir, 'Projects'));
+    await mkdir(projectDir);
+    await mkdir(taskDir);
+    await mkdir(requestInfoDir);
+    await mkdir(revDir);
+
+    for (const file of group.files) {
+      try {
+        const { data: signed, error: signErr } = await admin.storage
+          .from('submissions')
+          .createSignedUrl(file.storage_path, 120);
+
+        if (signErr || !signed?.signedUrl) throw new Error(`signed url failed: ${signErr?.message}`);
+
+        const fileRes = await fetch(signed.signedUrl);
+        if (!fileRes.ok) throw new Error(`download failed: ${fileRes.status}`);
+        const fileBuffer = await fileRes.arrayBuffer();
+
+        const fbFilePath = joinPath(revDir, file.name);
+        await fbFetch('POST', '/api/resources', {
+          params: { path: fbFilePath, override: 'true' },
+          headers: { 'Content-Type': 'application/octet-stream' },
+          body: fileBuffer,
+        });
+
+        console.log(`  ✓ ${file.name}`);
+        processed++;
+      } catch (err) {
+        console.error(`  ✗ ${file.name}: ${err.message}`);
+        errors++;
+      }
+    }
+  }
+
+  console.log(`\nDone. Processed: ${processed}, Skipped: ${skipped}, Errors: ${errors}`);
+}
+
+main().catch(err => { console.error(err); process.exit(1); });