feat: United/DentalHub + Tufts SCO pre-auth, cloud storage search & file thumbnails

- Add United/DentalHub pre-authorization Selenium worker, helpers, backend route/processor/client, and frontend OTP modal + wired button
- Add Tufts SCO pre-authorization Selenium worker, helpers, backend route/processor/client, and frontend OTP modal + wired button
- Fix btnSubmitAuthorization selector for UnitedDH preauth step2
- Fix Tufts SCO preauth step3 to target <span>pre-authorization</span> button
- Cloud storage search: default to "both" mode so patient folder names match on first search
- Cloud storage folder panel: auto-scroll to panel when opened from search results
- Cloud storage files: show inline image thumbnails and PDF badge in file grid

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

apps/Backend/src/routes/index.ts

@@ -20,7 +20,9 @@ import insuranceStatusCCAClaimRoutes from "./insuranceStatusCCAClaim";
 import insuranceStatusCCAPreAuthRoutes from "./insuranceStatusCCAPreAuth";
 import insuranceStatusDDMAClaimRoutes from "./insuranceStatusDDMAClaim";
 import insuranceStatusUnitedDHClaimRoutes from "./insuranceStatusUnitedDHClaim";
+import insuranceStatusUnitedDHPreAuthRoutes from "./insuranceStatusUnitedDHPreAuth";
 import insuranceStatusTuftsSCOClaimRoutes from "./insuranceStatusTuftsSCOClaim";
+import insuranceStatusTuftsSCOPreAuthRoutes from "./insuranceStatusTuftsSCOPreAuth";
 import paymentsRoutes from "./payments";
 import databaseManagementRoutes from "./database-management";
 import notificationsRoutes from "./notifications";
@@ -66,7 +68,9 @@ router.use("/claims", insuranceStatusCCAClaimRoutes);
 router.use("/claims", insuranceStatusCCAPreAuthRoutes);
 router.use("/claims", insuranceStatusDDMAClaimRoutes);
 router.use("/claims", insuranceStatusUnitedDHClaimRoutes);
+router.use("/claims", insuranceStatusUnitedDHPreAuthRoutes);
 router.use("/claims", insuranceStatusTuftsSCOClaimRoutes);
+router.use("/claims", insuranceStatusTuftsSCOPreAuthRoutes);
 router.use("/payments", paymentsRoutes);
 router.use("/database-management", databaseManagementRoutes);
 router.use("/notifications", notificationsRoutes);

apps/Backend/src/routes/insuranceStatusTuftsSCOPreAuth.ts

@@ -0,0 +1,122 @@
+import { Router, Request, Response } from "express";
+import { storage } from "../storage";
+import { enqueueSeleniumJob } from "../queue/jobRunner";
+import { forwardOtpToSeleniumTuftsSCOPreAuthAgent } from "../services/seleniumTuftsSCOPreAuthClient";
+import { io } from "../socket";
+
+const router = Router();
+
+/**
+ * POST /tuftssco-preauth
+ *
+ * Enqueues a Tufts SCO (DentaQuest) pre-authorization submission job.
+ *
+ * Body fields (JSON):
+ *   data     — preauth payload (memberId, dateOfBirth, serviceDate, serviceLines, patientName, etc.)
+ *   socketId — socket.io client id
+ *   claimId  — existing claim DB id (optional)
+ *
+ * Response: { status: "queued", jobId: "…" }
+ */
+router.post("/tuftssco-preauth", async (req: Request, res: Response): Promise<any> => {
+  if (!req.user?.id) {
+    return res.status(401).json({ error: "Unauthorized: user info missing" });
+  }
+
+  try {
+    const claimData =
+      typeof req.body.data === "string"
+        ? JSON.parse(req.body.data)
+        : req.body.data ?? req.body ?? {};
+
+    const credentials = await storage.getInsuranceCredentialByUserAndSiteKey(
+      req.user.id,
+      "TUFTS_SCO"
+    );
+    if (!credentials) {
+      return res.status(404).json({
+        error: "No Tufts SCO credentials found. Please add them on the Settings page.",
+      });
+    }
+
+    const enrichedPayload = {
+      claim: {
+        ...claimData,
+        dentaquestUsername: credentials.username,
+        dentaquestPassword: credentials.password,
+      },
+    };
+
+    const socketId: string | undefined = req.body.socketId;
+    let claimId: number | undefined = claimData.claimId
+      ? Number(claimData.claimId)
+      : undefined;
+
+    if (!claimId && claimData.patientId) {
+      try {
+        const serviceDate = claimData.serviceDate
+          ? new Date(claimData.serviceDate)
+          : new Date();
+        const dob = claimData.dateOfBirth
+          ? new Date(claimData.dateOfBirth)
+          : new Date("2000-01-01");
+        const record = await storage.createClaim({
+          patientId: Number(claimData.patientId),
+          appointmentId: claimData.appointmentId ? Number(claimData.appointmentId) : null,
+          userId: req.user.id,
+          staffId: Number(claimData.staffId) || 1,
+          patientName: claimData.patientName || "",
+          memberId: claimData.memberId || "",
+          dateOfBirth: dob,
+          remarks: claimData.remarks || "",
+          missingTeethStatus: claimData.missingTeethStatus || "No_missing",
+          serviceDate,
+          insuranceProvider: "Tufts SCO",
+          status: "PREAUTH",
+        } as any);
+        claimId = record.id;
+        console.log(`[tuftssco-preauth route] created claim record id=${claimId}`);
+      } catch (e: any) {
+        console.error("[tuftssco-preauth route] failed to create claim record:", e?.message);
+      }
+    }
+
+    const jobId = enqueueSeleniumJob({
+      jobType: "tuftssco-preauth-submit",
+      userId: req.user.id,
+      socketId,
+      enrichedPayload,
+      claimId,
+    });
+
+    return res.json({ status: "queued", jobId });
+  } catch (err: any) {
+    console.error("[tuftssco-preauth route] error:", err);
+    return res.status(500).json({
+      error: err.message || "Failed to enqueue Tufts SCO preauth job",
+    });
+  }
+});
+
+/**
+ * POST /claims/tuftssco-preauth/selenium/submit-otp
+ * Body: { session_id, otp, socketId? }
+ */
+router.post("/tuftssco-preauth/selenium/submit-otp", async (req: Request, res: Response): Promise<any> => {
+  const { session_id: sessionId, otp, socketId } = req.body;
+  if (!sessionId || !otp) {
+    return res.status(400).json({ error: "session_id and otp are required" });
+  }
+  try {
+    const r = await forwardOtpToSeleniumTuftsSCOPreAuthAgent(sessionId, otp);
+    if (socketId && io) {
+      io.to(socketId).emit("selenium:otp_submitted", { session_id: sessionId });
+    }
+    return res.json(r);
+  } catch (err: any) {
+    console.error("[tuftssco-preauth] submit-otp failed:", err?.message);
+    return res.status(500).json({ error: err?.message || "Failed to forward OTP" });
+  }
+});
+
+export default router;

apps/Backend/src/routes/insuranceStatusUnitedDHPreAuth.ts

@@ -0,0 +1,124 @@
+import { Router, Request, Response } from "express";
+import { storage } from "../storage";
+import { enqueueSeleniumJob } from "../queue/jobRunner";
+import { forwardOtpToSeleniumUnitedDHPreAuthAgent } from "../services/seleniumUnitedDHPreAuthClient";
+import { io } from "../socket";
+
+const router = Router();
+
+/**
+ * POST /uniteddh-preauth
+ *
+ * Enqueues a United/DentalHub pre-authorization submission job.
+ *
+ * Body fields (JSON):
+ *   data     — preauth payload (memberId, dateOfBirth, serviceDate, serviceLines, patientName, etc.)
+ *   socketId — socket.io client id
+ *   claimId  — existing claim DB id (optional)
+ *
+ * Response: { status: "queued", jobId: "…" }
+ */
+router.post("/uniteddh-preauth", async (req: Request, res: Response): Promise<any> => {
+  if (!req.user?.id) {
+    return res.status(401).json({ error: "Unauthorized: user info missing" });
+  }
+
+  try {
+    const claimData =
+      typeof req.body.data === "string"
+        ? JSON.parse(req.body.data)
+        : req.body.data ?? req.body ?? {};
+
+    // Fetch United/DentalHub credentials — same portal as UnitedSCO
+    const credentials = await storage.getInsuranceCredentialByUserAndSiteKey(
+      req.user.id,
+      "UNITED_SCO"
+    );
+    if (!credentials) {
+      return res.status(404).json({
+        error: "No United/DentalHub credentials found. Please add them on the Settings page.",
+      });
+    }
+
+    const enrichedPayload = {
+      claim: {
+        ...claimData,
+        uniteddhUsername: credentials.username,
+        uniteddhPassword: credentials.password,
+      },
+    };
+
+    const socketId: string | undefined = req.body.socketId;
+    let claimId: number | undefined = claimData.claimId
+      ? Number(claimData.claimId)
+      : undefined;
+
+    // Create a PREAUTH claim record so preAuthNumber can be stored
+    if (!claimId && claimData.patientId) {
+      try {
+        const serviceDate = claimData.serviceDate
+          ? new Date(claimData.serviceDate)
+          : new Date();
+        const dob = claimData.dateOfBirth
+          ? new Date(claimData.dateOfBirth)
+          : new Date("2000-01-01");
+        const record = await storage.createClaim({
+          patientId: Number(claimData.patientId),
+          appointmentId: claimData.appointmentId ? Number(claimData.appointmentId) : null,
+          userId: req.user.id,
+          staffId: Number(claimData.staffId) || 1,
+          patientName: claimData.patientName || "",
+          memberId: claimData.memberId || "",
+          dateOfBirth: dob,
+          remarks: claimData.remarks || "",
+          missingTeethStatus: claimData.missingTeethStatus || "No_missing",
+          serviceDate,
+          insuranceProvider: "United/DentalHub",
+          status: "PREAUTH",
+        } as any);
+        claimId = record.id;
+        console.log(`[uniteddh-preauth route] created claim record id=${claimId}`);
+      } catch (e: any) {
+        console.error("[uniteddh-preauth route] failed to create claim record:", e?.message);
+      }
+    }
+
+    const jobId = enqueueSeleniumJob({
+      jobType: "uniteddh-preauth-submit",
+      userId: req.user.id,
+      socketId,
+      enrichedPayload,
+      claimId,
+    });
+
+    return res.json({ status: "queued", jobId });
+  } catch (err: any) {
+    console.error("[uniteddh-preauth route] error:", err);
+    return res.status(500).json({
+      error: err.message || "Failed to enqueue United/DentalHub preauth job",
+    });
+  }
+});
+
+/**
+ * POST /claims/uniteddh-preauth/selenium/submit-otp
+ * Body: { session_id, otp, socketId? }
+ */
+router.post("/uniteddh-preauth/selenium/submit-otp", async (req: Request, res: Response): Promise<any> => {
+  const { session_id: sessionId, otp, socketId } = req.body;
+  if (!sessionId || !otp) {
+    return res.status(400).json({ error: "session_id and otp are required" });
+  }
+  try {
+    const r = await forwardOtpToSeleniumUnitedDHPreAuthAgent(sessionId, otp);
+    if (socketId && io) {
+      io.to(socketId).emit("selenium:otp_submitted", { session_id: sessionId });
+    }
+    return res.json(r);
+  } catch (err: any) {
+    console.error("[uniteddh-preauth] submit-otp failed:", err?.message);
+    return res.status(500).json({ error: err?.message || "Failed to forward OTP" });
+  }
+});
+
+export default router;