Consolidate audit-fixes branch: webhooks, integrations, and deploy hardening

Batch commit of the pending working tree on security/audit-fixes-2026-07. Major areas: - Outbound webhooks / Zapier: schema + signed delivery with retries, public v1 API (REST-hook subscribe/unsubscribe), settings UI, cron drain. - Deploy hardening: email via SMTP2GO (Resend fully removed), verified DB TLS (DATABASE_SSL=require + DATABASE_CA), storage fails loud in production when Spaces is unconfigured instead of silently using ephemeral disk. - Integrations & features (concurrent work): accounting (QuickBooks/Xero), e-signature (DocuSign/Dropbox Sign), PayPal, geocoding/maps, onboarding, expanded legal pages. - DB migrations 0006–0009. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-02 13:42:34 -04:00
parent 969d5d4c8a
commit c9968531e4
282 changed files with 41530 additions and 4013 deletions
@@ -0,0 +1,107 @@
+"use client"
+
+import { useTransition } from "react"
+import { toast } from "sonner"
+import { PenLine, CheckCircle2, Clock, XCircle, AlertTriangle } from "lucide-react"
+import { formatDate } from "@/lib/utils"
+import { sendLeaseForSignatureAction } from "@/app/actions/esign"
+
+type Req = {
+  id: string
+  provider: string
+  status: string
+  signer_email: string
+  document_name: string | null
+  sent_at: string | null
+  completed_at: string | null
+  last_error: string | null
+}
+type Prov = { id: string; label: string; configured: boolean }
+
+const STATUS: Record<string, { label: string; cls: string; Icon: typeof Clock }> = {
+  sent: { label: "Awaiting signature", cls: "text-amber-400 bg-amber-500/10 border-amber-500/20", Icon: Clock },
+  signed: { label: "Signed", cls: "text-emerald-400 bg-emerald-500/10 border-emerald-500/20", Icon: CheckCircle2 },
+  declined: { label: "Declined", cls: "text-red-400 bg-red-500/10 border-red-500/20", Icon: XCircle },
+  voided: { label: "Voided", cls: "text-white/40 bg-white/5 border-white/10", Icon: XCircle },
+  error: { label: "Failed", cls: "text-red-400 bg-red-500/10 border-red-500/20", Icon: AlertTriangle },
+}
+const PROVIDER_LABEL: Record<string, string> = { docusign: "DocuSign", dropbox_sign: "Dropbox Sign" }
+
+export function EsignLease({
+  leaseId,
+  providers,
+  requests,
+  canSend,
+  disabledReason,
+}: {
+  leaseId: string
+  providers: Prov[]
+  requests: Req[]
+  canSend: boolean
+  disabledReason: string
+}) {
+  const configured = providers.filter((p) => p.configured)
+  const [pending, start] = useTransition()
+
+  function send(provider: string) {
+    start(async () => {
+      try {
+        await sendLeaseForSignatureAction(leaseId, provider)
+        toast.success("Lease sent for signature")
+      } catch (e) {
+        toast.error((e as Error).message || "Couldn't send for signature")
+      }
+    })
+  }
+
+  return (
+    <div className="rounded-2xl border border-white/[0.06] bg-[#16161f] p-5">
+      <div className="mb-3 flex items-center gap-2">
+        <PenLine className="h-4 w-4 text-indigo-400" />
+        <h3 className="text-sm font-semibold text-white">E-signature</h3>
+      </div>
+
+      {requests.length > 0 && (
+        <ul className="mb-4 space-y-2">
+          {requests.map((r) => {
+            const s = STATUS[r.status] ?? STATUS.sent
+            return (
+              <li key={r.id} className="flex items-center justify-between gap-3 rounded-xl border border-white/[0.05] bg-white/[0.02] px-3 py-2.5">
+                <div className="min-w-0">
+                  <p className="truncate text-xs font-medium text-white/80">{PROVIDER_LABEL[r.provider] ?? r.provider} · {r.signer_email}</p>
+                  <p className="text-[11px] text-white/35">
+                    Sent {r.sent_at ? formatDate(r.sent_at) : "—"}
+                    {r.completed_at ? ` · Signed ${formatDate(r.completed_at)}` : ""}
+                    {r.status === "error" && r.last_error ? ` · ${r.last_error}` : ""}
+                  </p>
+                </div>
+                <span className={`flex shrink-0 items-center gap-1 rounded-full border px-2 py-0.5 text-[10px] font-medium ${s.cls}`}>
+                  <s.Icon className="h-3 w-3" /> {s.label}
+                </span>
+              </li>
+            )
+          })}
+        </ul>
+      )}
+
+      {configured.length === 0 ? (
+        <p className="text-xs text-white/30">Configure DocuSign or Dropbox Sign on the server to send leases for e-signature.</p>
+      ) : canSend ? (
+        <div className="flex flex-wrap gap-2">
+          {configured.map((p) => (
+            <button
+              key={p.id}
+              onClick={() => send(p.id)}
+              disabled={pending}
+              className="flex items-center gap-1.5 rounded-lg bg-indigo-600 px-3 py-1.5 text-xs font-semibold text-white transition hover:bg-indigo-500 disabled:opacity-50"
+            >
+              <PenLine className="h-3.5 w-3.5" /> Send via {p.label}
+            </button>
+          ))}
+        </div>
+      ) : (
+        <p className="text-xs text-white/30">{disabledReason}</p>
+      )}
+    </div>
+  )
+}