Files
Leon SerfatyandClaude Opus 4.8 c9968531e4 Consolidate audit-fixes branch: webhooks, integrations, and deploy hardening
Batch commit of the pending working tree on security/audit-fixes-2026-07.
Major areas:
- Outbound webhooks / Zapier: schema + signed delivery with retries, public
  v1 API (REST-hook subscribe/unsubscribe), settings UI, cron drain.
- Deploy hardening: email via SMTP2GO (Resend fully removed), verified DB TLS
  (DATABASE_SSL=require + DATABASE_CA), storage fails loud in production when
  Spaces is unconfigured instead of silently using ephemeral disk.
- Integrations & features (concurrent work): accounting (QuickBooks/Xero),
  e-signature (DocuSign/Dropbox Sign), PayPal, geocoding/maps, onboarding,
  expanded legal pages.
- DB migrations 0006–0009.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-02 13:42:34 -04:00

61 lines
2.1 KiB
TypeScript

import { redirect } from "next/navigation"
import { and, asc, eq } from "drizzle-orm"
import { db } from "@/lib/db"
import { tenants as tenantsTable, properties } from "@/lib/db/schema"
import { getSessionUser } from "@/lib/session"
import { getEffectiveOwnerId } from "@/lib/account"
import { LeaseForm } from "@/components/forms/lease-form"
import { BackButton } from "@/components/ui/back-button"
export const metadata = { title: "Add Lease" }
export default async function NewLeasePage({ searchParams }: { searchParams: Promise<Record<string, string>> }) {
const user = await getSessionUser()
if (!user) redirect("/login")
const ownerId = await getEffectiveOwnerId(user.id)
const params = await searchParams
const prefill = {
tenant_id: params.tenant_id ?? "",
property_id: params.property_id ?? "",
unit_id: params.unit_id ?? "",
rent_amount: params.rent_amount ?? "",
}
const [tenants, properties_] = await Promise.all([
db
.select({
id: tenantsTable.id,
first_name: tenantsTable.first_name,
last_name: tenantsTable.last_name,
unit_id: tenantsTable.unit_id,
property_id: tenantsTable.property_id,
})
.from(tenantsTable)
.where(and(eq(tenantsTable.user_id, ownerId), eq(tenantsTable.status, "active")))
.orderBy(asc(tenantsTable.first_name)),
db.query.properties.findMany({
where: eq(properties.user_id, ownerId),
columns: { id: true, name: true },
with: {
units: { columns: { id: true, unit_number: true } },
},
orderBy: asc(properties.name),
}),
])
return (
<div className="mx-auto max-w-2xl space-y-6">
<BackButton href="/leases" />
<div>
<h2 className="text-lg font-semibold text-white">Add Lease</h2>
<p className="text-sm text-white/40">
{prefill.tenant_id ? "Renewing lease — dates pre-filled from previous lease" : "Create a lease record for a tenant"}
</p>
</div>
<LeaseForm tenants={tenants ?? []} properties={properties_ ?? []} prefill={prefill} />
</div>
)
}