014bbe1923
Replaces the legacy text-only expense PDF (was just dumping rows into a
single pdfme text field — no images, no pagination) with a proper
streaming export modelled on the legacy Nuxt client-portal but
re-architected for memory safety. The legacy implementation OOM'd on
hundreds of receipts because it:
- buffered every receipt image into memory simultaneously
- accumulated PDF chunks into an array, concat'd at end
- base64-encoded the whole PDF into a JSON response (3x peak memory)
- had no image downscaling
The new design:
- `streamExpensePdf()` (src/lib/services/expense-pdf.service.ts):
pdfkit pipes bytes directly to the HTTP response (no Buffer
accumulation). Receipts are processed serially so peak heap is one
image at a time. Sharp downscales any receipt > 500 KB or > 1500 px
to JPEG q80 — typical 8 MB phone photo collapses to ~250 KB. For a
500-receipt export, peak RSS stays under ~100 MB; legacy needed >2
GB for the same input.
- Pages: cover summary box (count, totals, currency equiv, optional
processing fee), grouped expense table (groupBy=none|payer|category|
date), one-page-per-receipt with header (establishment, amount,
date, payer, category, file name) and full-bleed image.
- Storage backend abstraction — receipts stream from
`getStorageBackend().get(storageKey)`, works on MinIO/S3/filesystem.
- Route: POST /api/v1/expenses/export/pdf streams binary
application/pdf with cache-control:no-store. Validator caps
expenseIds at 1000 to prevent runaway loops.
Receipt-less expense flow (per user request):
- Schema: 0033 migration adds `expenses.no_receipt_acknowledged`
boolean (default false).
- Validator: createExpenseSchema requires either receiptFileIds OR
noReceiptAcknowledged=true; the .refine() error message tells the
rep exactly what to do. updateExpenseSchema is partial and skips
the rule (existing rows can be edited without re-acknowledging).
- PDF: receiptless expenses get an inline red "(no receipt)" tag in
the establishment cell + a red footer warning in the summary box
showing the count and at-risk amount.
- The legacy parent-company reimbursement queue may refuse to pay
receiptless expenses, so the warning is load-bearing for ops.
Audit-3 fixes piggy-backed:
- 🔴 Tesseract OCR runtime now races a 30s timeout (CPU-bomb DoS
protection — a crafted PDF rasterizing to high-res noise could
pin the worker indefinitely).
- 🟠 brochures.service.ts:listBrochures dropped a wasted query (the
legacy single-brochure fast-path was discarding its result on the
multi-brochure branch).
- 🟠 berth-pdf.service.ts:listBerthPdfVersions now Promise.all's the
presignDownload calls instead of awaiting each in a for-loop —
20-version berths went from 20× round-trip to 1×.
- 🟡 public berths route no longer logs the full `row` object on
enum drift (was dumping price + amenity columns into ops logs).
- 🟡 dropped the dead `void sql` import from public berths route.
Tests still 1163/1163. tsc clean.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
126 lines
4.1 KiB
JSON
126 lines
4.1 KiB
JSON
{
|
|
"name": "port-nimara-crm",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"scripts": {
|
|
"dev": "next dev",
|
|
"build": "next build && pnpm build:server",
|
|
"build:server": "esbuild src/server.ts --bundle --platform=node --target=node20 --format=cjs --outdir=dist --packages=external --tsconfig=tsconfig.server.json",
|
|
"build:worker": "esbuild src/worker.ts --bundle --platform=node --target=node20 --format=cjs --outdir=dist --packages=external --tsconfig=tsconfig.server.json",
|
|
"start": "next start",
|
|
"lint": "next lint",
|
|
"format": "prettier --write \"src/**/*.{ts,tsx,json,css}\"",
|
|
"db:generate": "drizzle-kit generate",
|
|
"db:push": "drizzle-kit push",
|
|
"db:studio": "drizzle-kit studio",
|
|
"db:seed": "tsx src/lib/db/seed.ts",
|
|
"test:e2e": "playwright test",
|
|
"test:e2e:smoke": "playwright test --project=smoke",
|
|
"test:e2e:exhaustive": "playwright test --project=exhaustive",
|
|
"test:e2e:destructive": "playwright test --project=destructive",
|
|
"prepare": "husky"
|
|
},
|
|
"dependencies": {
|
|
"@dnd-kit/core": "^6.3.1",
|
|
"@dnd-kit/sortable": "^10.0.0",
|
|
"@dnd-kit/utilities": "^3.2.2",
|
|
"@hookform/resolvers": "^3.9.0",
|
|
"@pdfme/common": "^5.5.8",
|
|
"@pdfme/generator": "^5.5.8",
|
|
"@pdfme/schemas": "^5.5.8",
|
|
"@radix-ui/react-accordion": "^1.2.12",
|
|
"@radix-ui/react-alert-dialog": "^1.1.15",
|
|
"@radix-ui/react-avatar": "^1.1.11",
|
|
"@radix-ui/react-checkbox": "^1.3.3",
|
|
"@radix-ui/react-dialog": "^1.1.15",
|
|
"@radix-ui/react-dropdown-menu": "^2.1.16",
|
|
"@radix-ui/react-icons": "^1.3.0",
|
|
"@radix-ui/react-label": "^2.1.8",
|
|
"@radix-ui/react-navigation-menu": "^1.2.14",
|
|
"@radix-ui/react-popover": "^1.1.15",
|
|
"@radix-ui/react-progress": "^1.1.8",
|
|
"@radix-ui/react-radio-group": "^1.3.8",
|
|
"@radix-ui/react-scroll-area": "^1.2.10",
|
|
"@radix-ui/react-select": "^2.2.6",
|
|
"@radix-ui/react-separator": "^1.1.8",
|
|
"@radix-ui/react-slider": "^1.3.6",
|
|
"@radix-ui/react-slot": "^1.2.4",
|
|
"@radix-ui/react-switch": "^1.2.6",
|
|
"@radix-ui/react-tabs": "^1.1.13",
|
|
"@radix-ui/react-tooltip": "^1.2.8",
|
|
"@socket.io/redis-adapter": "^8.3.0",
|
|
"@tanstack/react-query": "^5.62.0",
|
|
"@tanstack/react-query-devtools": "^5.62.0",
|
|
"@tanstack/react-table": "^8.21.3",
|
|
"@types/pdfkit": "^0.17.6",
|
|
"archiver": "^7.0.1",
|
|
"better-auth": "^1.2.0",
|
|
"bullmq": "^5.25.0",
|
|
"class-variance-authority": "^0.7.0",
|
|
"clsx": "^2.1.1",
|
|
"cmdk": "^1.1.1",
|
|
"date-fns": "^4.1.0",
|
|
"drizzle-orm": "^0.38.0",
|
|
"imapflow": "^1.2.13",
|
|
"ioredis": "^5.4.0",
|
|
"iso-3166-2": "^1.0.0",
|
|
"jose": "^6.2.1",
|
|
"libphonenumber-js": "^1.12.42",
|
|
"lucide-react": "^0.460.0",
|
|
"mailparser": "^3.9.4",
|
|
"minio": "^8.0.0",
|
|
"next": "15.1.0",
|
|
"next-themes": "^0.4.0",
|
|
"nodemailer": "^6.9.0",
|
|
"openai": "^6.27.0",
|
|
"pdf-lib": "^1.17.1",
|
|
"pdfkit": "^0.18.0",
|
|
"pino": "^9.5.0",
|
|
"pino-pretty": "^13.0.0",
|
|
"postgres": "^3.4.0",
|
|
"react": "^19.0.0",
|
|
"react-day-picker": "^9.14.0",
|
|
"react-dom": "^19.0.0",
|
|
"react-hook-form": "^7.54.0",
|
|
"recharts": "^3.8.0",
|
|
"sharp": "^0.34.5",
|
|
"socket.io": "^4.8.0",
|
|
"socket.io-client": "^4.8.0",
|
|
"sonner": "^1.7.0",
|
|
"tailwind-merge": "^2.6.0",
|
|
"tailwindcss-animate": "^1.0.7",
|
|
"tesseract.js": "^7.0.0",
|
|
"vaul": "^1.1.2",
|
|
"zod": "^3.24.0",
|
|
"zustand": "^5.0.0"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/eslintrc": "^3.3.5",
|
|
"@playwright/test": "^1.58.2",
|
|
"@types/archiver": "^7.0.0",
|
|
"@types/iso-3166-2": "^1.0.4",
|
|
"@types/mailparser": "^3.4.6",
|
|
"@types/node": "^22.0.0",
|
|
"@types/nodemailer": "^6.4.0",
|
|
"@types/react": "^19.0.0",
|
|
"@types/react-dom": "^19.0.0",
|
|
"@vitest/coverage-v8": "^4.1.0",
|
|
"autoprefixer": "^10.4.27",
|
|
"dotenv": "^17.3.1",
|
|
"drizzle-kit": "^0.30.0",
|
|
"esbuild": "^0.25.0",
|
|
"eslint": "^9.0.0",
|
|
"eslint-config-next": "15.1.0",
|
|
"eslint-config-prettier": "^9.1.0",
|
|
"husky": "^9.1.0",
|
|
"lint-staged": "^15.2.0",
|
|
"postcss": "^8.4.0",
|
|
"prettier": "^3.4.0",
|
|
"react-grab": "^0.1.32",
|
|
"tailwindcss": "^3.4.0",
|
|
"tsx": "^4.19.0",
|
|
"typescript": "^5.7.0",
|
|
"vitest": "^4.1.0"
|
|
}
|
|
}
|