Initial import: property management SaaS + security hardening + admin dashboard

Property Management Network — Next.js 16 (App Router), Better Auth, Drizzle ORM over PostgreSQL, Stripe, OpenAI, Resend. Includes: - Security hardening: access-control/IDOR fixes, TLS-by-default DB layer, constant-time cron auth, strict security headers, atomic AI quota gating, HTML/email output encoding, demo-backdoor disabled in production. - Superadmin dashboard at /admin (overview/MRR, server-paginated users with ban/impersonate/plan/delete, billing, platform activity + admin audit log, AI usage, system health) via the Better Auth admin plugin. - Seed/migration utility scripts under scripts/. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-23 20:36:07 -04:00
commit 857b9a7811
291 changed files with 38996 additions and 0 deletions
@@ -0,0 +1,69 @@
+"use client"
+
+import { useState, useRef } from "react"
+import { Upload, X, File, Loader2 } from "lucide-react"
+
+interface FileUploadProps {
+  propertyId: string
+  onUploaded: (doc: { id: string; name: string; file_url: string; file_type: string; file_size: number }) => void
+}
+
+export function FileUpload({ propertyId, onUploaded }: FileUploadProps) {
+  const [dragging, setDragging] = useState(false)
+  const [uploading, setUploading] = useState(false)
+  const [error, setError] = useState("")
+  const inputRef = useRef<HTMLInputElement>(null)
+
+  async function upload(file: File) {
+    setUploading(true)
+    setError("")
+
+    const fd = new FormData()
+    fd.append("file", file)
+    fd.append("property_id", propertyId)
+    fd.append("name", file.name.replace(/\.[^/.]+$/, ""))
+    fd.append("category", "general")
+
+    const res = await fetch("/api/documents", { method: "POST", body: fd })
+    const data = await res.json()
+    setUploading(false)
+
+    if (!res.ok) {
+      setError(data.error ?? "Upload failed")
+      return
+    }
+
+    onUploaded(data)
+  }
+
+  function handleFiles(files: FileList | null) {
+    if (!files || files.length === 0) return
+    upload(files[0])
+  }
+
+  return (
+    <div className="space-y-2">
+      <div
+        onDragOver={(e) => { e.preventDefault(); setDragging(true) }}
+        onDragLeave={() => setDragging(false)}
+        onDrop={(e) => { e.preventDefault(); setDragging(false); handleFiles(e.dataTransfer.files) }}
+        onClick={() => inputRef.current?.click()}
+        className={`flex cursor-pointer flex-col items-center justify-center gap-2 rounded-xl border-2 border-dashed px-6 py-10 transition ${
+          dragging ? "border-indigo-500 bg-indigo-500/5" : "border-white/10 bg-white/[0.02] hover:border-white/20"
+        }`}
+      >
+        <input ref={inputRef} type="file" className="hidden" onChange={(e) => handleFiles(e.target.files)} />
+        {uploading ? (
+          <Loader2 className="h-7 w-7 animate-spin text-indigo-400" />
+        ) : (
+          <Upload className="h-7 w-7 text-white/30" />
+        )}
+        <p className="text-sm text-white/50">
+          {uploading ? "Uploading..." : "Drop a file here or click to browse"}
+        </p>
+        <p className="text-xs text-white/30">PDF, DOC, JPG, PNG — max 20 MB</p>
+      </div>
+      {error && <p className="text-xs text-red-400">{error}</p>}
+    </div>
+  )
+}