Jakob WennbergandClaude Sonnet 5
ec27228a8e
Em dashes (—) and en dashes (–) had spread across comments, docs, tests, and a few UI strings, reading as AI-generated boilerplate rather than house style. Replaced each with punctuation matching its context: colon for explanatory clauses, comma for asides, plain hyphen for numeric/legal ranges (e.g. "21-23§"), "to"/"till" for date ranges, parentheses for paired-dash asides. messages/en.json and messages/sv.json were fixed by hand together to keep sv/en in sync. Left untouched where the dash is the functional subject rather than decorative punctuation: date-range-parser.ts's separator regex, charset-repair.ts's CP1252 byte-mapping table (and its test), the SIE encoding mojibake docs, generic-csv.ts's minus-sign normalizer, the agent system-prompt files that already instruct against em dashes, and a golden iXBRL test fixture compared byte-for-byte. Also fixes two bugs surfaced along the way: an off-by-one in ApiKeysPanel's scope-label split (a leftover from an earlier partial pass), and a charset-repair test that had lost the literal en-dash it exists to verify. Regenerated the agent atom seed migration (skills:generate) since 27 SKILL.md files changed. Added a CLAUDE.md rule against em/en dashes, with an explicit carve-out for the functional-dash cases above. Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
113 lines
3.1 KiB
TypeScript
113 lines
3.1 KiB
TypeScript
import { createClient } from '@/lib/supabase/server'
|
|
import { NextResponse } from 'next/server'
|
|
import { ensureInitialized } from '@/lib/init'
|
|
import { requireCompanyId } from '@/lib/company/context'
|
|
import { requireWritePermission } from '@/lib/auth/require-write'
|
|
import { deleteDocument } from '@/lib/core/documents/document-service'
|
|
import { eventBus } from '@/lib/events'
|
|
|
|
ensureInitialized()
|
|
|
|
/**
|
|
* GET /api/documents/:id
|
|
* Fetch document metadata + signed download URL (60 min expiry)
|
|
*/
|
|
export async function GET(
|
|
request: Request,
|
|
{ params }: { params: Promise<{ id: string }> }
|
|
) {
|
|
const supabase = await createClient()
|
|
|
|
const { data: { user } } = await supabase.auth.getUser()
|
|
|
|
if (!user) {
|
|
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
|
|
}
|
|
|
|
const companyId = await requireCompanyId(supabase, user.id)
|
|
|
|
const { id } = await params
|
|
|
|
// Fetch document record
|
|
const { data: doc, error: docError } = await supabase
|
|
.from('document_attachments')
|
|
.select('*')
|
|
.eq('id', id)
|
|
.eq('company_id', companyId)
|
|
.single()
|
|
|
|
if (docError || !doc) {
|
|
return NextResponse.json({ error: 'Document not found' }, { status: 404 })
|
|
}
|
|
|
|
// Create signed download URL (60 minutes)
|
|
const { data: signedUrl, error: signError } = await supabase.storage
|
|
.from('documents')
|
|
.createSignedUrl(doc.storage_path, 3600)
|
|
|
|
if (signError) {
|
|
return NextResponse.json(
|
|
{ error: `Failed to create download URL: ${signError.message}` },
|
|
{ status: 500 }
|
|
)
|
|
}
|
|
|
|
await eventBus.emit({
|
|
type: 'document.accessed',
|
|
payload: {
|
|
document: { id: doc.id, file_name: doc.file_name },
|
|
userId: user.id,
|
|
companyId,
|
|
},
|
|
})
|
|
|
|
return NextResponse.json({
|
|
data: {
|
|
...doc,
|
|
download_url: signedUrl.signedUrl,
|
|
},
|
|
})
|
|
}
|
|
|
|
/**
|
|
* DELETE /api/documents/:id
|
|
* Remove an uploaded document. Only permitted when the document is not yet
|
|
* linked to a journal entry: once linked, it is räkenskapsinformation under
|
|
* BFL 7 kap 2§ and must be retained for 7 years. For linked docs the caller
|
|
* should use POST /api/documents/:id/versions to supersede via a new version.
|
|
*/
|
|
export async function DELETE(
|
|
_request: Request,
|
|
{ params }: { params: Promise<{ id: string }> }
|
|
) {
|
|
const supabase = await createClient()
|
|
|
|
const { data: { user } } = await supabase.auth.getUser()
|
|
if (!user) {
|
|
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
|
|
}
|
|
|
|
const writeCheck = await requireWritePermission(supabase, user.id)
|
|
if (!writeCheck.ok) return writeCheck.response
|
|
|
|
const companyId = await requireCompanyId(supabase, user.id)
|
|
|
|
const { id } = await params
|
|
|
|
try {
|
|
const result = await deleteDocument(supabase, companyId, id)
|
|
|
|
if (!result.ok) {
|
|
return NextResponse.json({ error: result.message }, { status: result.status })
|
|
}
|
|
|
|
return NextResponse.json({ data: { id: result.document.id, deleted: true } })
|
|
} catch (error) {
|
|
console.error('[documents/DELETE] Failed to delete document:', error)
|
|
return NextResponse.json(
|
|
{ error: error instanceof Error ? error.message : 'Failed to delete document' },
|
|
{ status: 500 }
|
|
)
|
|
}
|
|
}
|