Batch commit of the pending working tree on security/audit-fixes-2026-07. Major areas: - Outbound webhooks / Zapier: schema + signed delivery with retries, public v1 API (REST-hook subscribe/unsubscribe), settings UI, cron drain. - Deploy hardening: email via SMTP2GO (Resend fully removed), verified DB TLS (DATABASE_SSL=require + DATABASE_CA), storage fails loud in production when Spaces is unconfigured instead of silently using ephemeral disk. - Integrations & features (concurrent work): accounting (QuickBooks/Xero), e-signature (DocuSign/Dropbox Sign), PayPal, geocoding/maps, onboarding, expanded legal pages. - DB migrations 0006–0009. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
60 lines
1.9 KiB
TypeScript
60 lines
1.9 KiB
TypeScript
import { NextResponse } from "next/server"
|
|
import { eq } from "drizzle-orm"
|
|
import { db } from "@/lib/db"
|
|
import { ai_recommendations } from "@/lib/db/schema"
|
|
import { getSessionUser } from "@/lib/session"
|
|
import { getEffectiveOwnerId } from "@/lib/account"
|
|
|
|
export async function GET() {
|
|
const user = await getSessionUser()
|
|
if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
|
|
|
|
const ownerId = await getEffectiveOwnerId(user.id)
|
|
|
|
const all = await db
|
|
.select()
|
|
.from(ai_recommendations)
|
|
.where(eq(ai_recommendations.user_id, ownerId))
|
|
|
|
const approved = all.filter((r) => r.status === "approved")
|
|
const dismissed = all.filter((r) => r.status === "dismissed")
|
|
const pending = all.filter((r) => r.status === "pending")
|
|
|
|
let totalRevenue = 0
|
|
let totalSavings = 0
|
|
let totalRiskPrevented = 0
|
|
|
|
for (const r of approved) {
|
|
const val = Number(r.action_data?.estimated_value ?? 0)
|
|
const vtype = r.action_data?.value_type ?? "revenue"
|
|
if (vtype === "revenue") totalRevenue += val
|
|
else if (vtype === "savings") totalSavings += val
|
|
else if (vtype === "risk_prevention") totalRiskPrevented += val
|
|
}
|
|
|
|
const byType = approved.reduce((acc: Record<string, number>, r) => {
|
|
acc[r.type] = (acc[r.type] ?? 0) + 1
|
|
return acc
|
|
}, {})
|
|
|
|
return NextResponse.json({
|
|
totals: {
|
|
generated: all.length,
|
|
approved: approved.length,
|
|
dismissed: dismissed.length,
|
|
pending: pending.length,
|
|
approval_rate: all.length > 0 ? Math.round((approved.length / all.length) * 100) : 0,
|
|
},
|
|
impact: {
|
|
revenue: totalRevenue,
|
|
savings: totalSavings,
|
|
risk_prevented: totalRiskPrevented,
|
|
total: totalRevenue + totalSavings + totalRiskPrevented,
|
|
},
|
|
by_type: byType,
|
|
recent_approved: approved
|
|
.sort((a, b) => new Date(b.applied_at ?? 0).getTime() - new Date(a.applied_at ?? 0).getTime())
|
|
.slice(0, 5),
|
|
})
|
|
}
|