Upload app.py with huggingface_hub

app.py

@@ -796,6 +796,33 @@ def analyze():
             batch = pt.pop('_batch', '')
             nc_raw = pt.pop('_nc_raw', 0)
             pc_raw = pt.pop('_pc_raw', 0)
+
+            # 保存原始檔案
+            import db as _dbmod
+            import xlrd as _xlrd
+            upload_dir = _dbmod.get_upload_dir()
+            patient_name = request.form.get('patient_name', '').strip()
+            chart_no = request.form.get('patient_id', '').strip()
+            class_tag = 'PRA1' if pc == 'PRA1' else 'PRA2'
+            # 從 XLS row 0 抓 EL 編號 (如 EL20022_27996823)
+            el_part = ''
+            try:
+                _wb = _xlrd.open_workbook(file_contents=raw_bytes)
+                _sh = _wb.sheet_by_index(0)
+                _r0 = str(_sh.cell_value(0, 0)).strip()
+                if not _r0:
+                    _r0 = str(_sh.cell_value(0, 1)).strip()
+                if 'EL' in _r0.upper():
+                    el_part = _r0.split('_')[0]  # EL20022
+            except Exception:
+                pass
+            # 檔名: 姓名_EL20022_27996823_PRA1.xls
+            safe_name = f'{patient_name}_{el_part}_{chart_no}_{class_tag}{ext}'
+            safe_name = safe_name.replace('/', '_').replace('\\', '_')
+            save_path = upload_dir / safe_name
+            save_path.write_bytes(raw_bytes)
+            pt['_upload_file'] = safe_name
+
             all_patients[pc].append(pt)
             if date_val:
                 meta[pc]['date'] = date_val
@@ -936,8 +963,9 @@ def save():
         sero_mfi = r.get('sero_mfi', [])
 
         submitted_by = flask_session.get('display_name', flask_session.get('username', ''))
+        upload_file = r.get('upload_file', '')
         rid = db.save_report(patient_id, report_date, pra_class, pra_percent,
-                             overall, specificity, comment, sero_mfi, status, submitted_by)
+                             overall, specificity, comment, sero_mfi, status, submitted_by, upload_file)
         saved.append({'report_id': rid, 'pra_class': pra_class})
 
     return jsonify({'ok': True, 'patient_id': patient_id, 'saved': saved})
@@ -1060,7 +1088,8 @@ def admin():
         return redirect(url_for('dashboard'))
     import db
     users = db.get_all_users()
-    return render_template('admin.html', users=users,
+    storage = db.get_storage_stats()
+    return render_template('admin.html', users=users, storage=storage,
                            username=flask_session.get('username', ''))
 
 
@@ -1137,6 +1166,62 @@ def analysis():
                            donor_hla=donor_hla)
 
 
+@app.route('/download_upload/<path:filename>')
+@login_required
+def download_upload(filename):
+    """下載上傳的原始檔案"""
+    import db
+    upload_dir = db.get_upload_dir()
+    fpath = upload_dir / filename
+    if not fpath.exists():
+        return 'File not found', 404
+    return send_file(str(fpath), as_attachment=True, download_name=filename)
+
+
+@app.route('/admin/download_all_uploads')
+@login_required
+def download_all_uploads():
+    """一鍵下載所有上傳檔案 (ZIP)"""
+    if flask_session.get('role') != 'admin':
+        return 'Forbidden', 403
+    import db, zipfile
+    upload_dir = db.get_upload_dir()
+    files = list(upload_dir.glob('*.xls')) + list(upload_dir.glob('*.xlsx')) + list(upload_dir.glob('*.csv'))
+    if not files:
+        return 'No files', 404
+
+    buf = io.BytesIO()
+    with zipfile.ZipFile(buf, 'w', zipfile.ZIP_DEFLATED) as zf:
+        for f in files:
+            zf.write(str(f), f.name)
+    buf.seek(0)
+    from datetime import datetime
+    fname = f'uploads_{datetime.now().strftime("%Y%m%d_%H%M%S")}.zip'
+    return send_file(buf, as_attachment=True, download_name=fname,
+                     mimetype='application/zip')
+
+
+@app.route('/admin/cleanup_uploads', methods=['POST'])
+@login_required
+def cleanup_uploads():
+    """清理 N 個月前的上傳檔案"""
+    if flask_session.get('role') != 'admin':
+        return jsonify({'error': '無權限'}), 403
+    import db
+    from datetime import datetime, timedelta
+    months = request.json.get('months', 6)
+    cutoff = datetime.now() - timedelta(days=months * 30)
+    upload_dir = db.get_upload_dir()
+    files = list(upload_dir.glob('*.xls')) + list(upload_dir.glob('*.xlsx')) + list(upload_dir.glob('*.csv'))
+    deleted = 0
+    for f in files:
+        mtime = datetime.fromtimestamp(f.stat().st_mtime)
+        if mtime < cutoff:
+            f.unlink()
+            deleted += 1
+    return jsonify({'ok': True, 'deleted': deleted})
+
+
 if __name__ == '__main__':
     print('PRA Analysis Web App')
     print('http://127.0.0.1:5000')