Files
Leon SerfatyandClaude Opus 4.8 c9968531e4 Consolidate audit-fixes branch: webhooks, integrations, and deploy hardening
Batch commit of the pending working tree on security/audit-fixes-2026-07.
Major areas:
- Outbound webhooks / Zapier: schema + signed delivery with retries, public
  v1 API (REST-hook subscribe/unsubscribe), settings UI, cron drain.
- Deploy hardening: email via SMTP2GO (Resend fully removed), verified DB TLS
  (DATABASE_SSL=require + DATABASE_CA), storage fails loud in production when
  Spaces is unconfigured instead of silently using ephemeral disk.
- Integrations & features (concurrent work): accounting (QuickBooks/Xero),
  e-signature (DocuSign/Dropbox Sign), PayPal, geocoding/maps, onboarding,
  expanded legal pages.
- DB migrations 0006–0009.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-02 13:42:34 -04:00

60 lines
1.9 KiB
TypeScript

import { NextResponse } from "next/server"
import { eq } from "drizzle-orm"
import { db } from "@/lib/db"
import { ai_recommendations } from "@/lib/db/schema"
import { getSessionUser } from "@/lib/session"
import { getEffectiveOwnerId } from "@/lib/account"
export async function GET() {
const user = await getSessionUser()
if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
const ownerId = await getEffectiveOwnerId(user.id)
const all = await db
.select()
.from(ai_recommendations)
.where(eq(ai_recommendations.user_id, ownerId))
const approved = all.filter((r) => r.status === "approved")
const dismissed = all.filter((r) => r.status === "dismissed")
const pending = all.filter((r) => r.status === "pending")
let totalRevenue = 0
let totalSavings = 0
let totalRiskPrevented = 0
for (const r of approved) {
const val = Number(r.action_data?.estimated_value ?? 0)
const vtype = r.action_data?.value_type ?? "revenue"
if (vtype === "revenue") totalRevenue += val
else if (vtype === "savings") totalSavings += val
else if (vtype === "risk_prevention") totalRiskPrevented += val
}
const byType = approved.reduce((acc: Record<string, number>, r) => {
acc[r.type] = (acc[r.type] ?? 0) + 1
return acc
}, {})
return NextResponse.json({
totals: {
generated: all.length,
approved: approved.length,
dismissed: dismissed.length,
pending: pending.length,
approval_rate: all.length > 0 ? Math.round((approved.length / all.length) * 100) : 0,
},
impact: {
revenue: totalRevenue,
savings: totalSavings,
risk_prevented: totalRiskPrevented,
total: totalRevenue + totalSavings + totalRiskPrevented,
},
by_type: byType,
recent_approved: approved
.sort((a, b) => new Date(b.applied_at ?? 0).getTime() - new Date(a.applied_at ?? 0).getTime())
.slice(0, 5),
})
}