Files
zeekay caad90bc04 rip: enterprise dirs + paywalls — full AGPL, no commercial-license code
Drop the dual-licensed `ee/` tree entirely. All features previously
locked behind the Hanzo Dataroom Commercial License are now part of the
AGPL-3.0 core and freely available — custom domains, branded viewing,
advanced analytics, watermarks, access controls, Q&A, AI vector stores,
workflows, SAML SSO, dataroom invitations, conversations, templates.

Layout changes:
* `ee/features/{ai,conversations,workflows,permissions,storage,templates,
  dataroom-invitations,access-notifications,security,conversions}/` →
  `features/<name>/` (AGPL).
* `ee/limits/` → `lib/billing/limits/` with every plan resolving to an
  unlimited profile (no users/links/documents/domains/datarooms cap,
  conversations and watermarks always on).
* `ee/stripe/` → `lib/billing/legacy/` (already a compat shim over
  `@hanzoai/commerce`; renewal-reminder webhook is now a no-op).
* `ee/features/billing/cancellation/` deleted. Pause/unpause/cancel/
  retention routes now compile against `lib/billing/cancellation.ts`
  stubs that return 410 Gone; `isTeamPaused`/`isTeamPausedById` in
  `lib/billing/paused.ts` always report active. `CancellationModal` is
  a no-op shim in `components/billing/`.
* `app/(ee)/api/*` route group folded into `app/api/*` (SAML auth,
  SCIM, AI chat, workflows, FAQ, link-upload).

Build: `npm run build` green.
2026-06-07 11:46:48 -07:00

232 lines
6.9 KiB
TypeScript

import type { NextApiRequest, NextApiResponse } from "next";
import { isTeamPausedById } from "@/lib/billing/paused";
import { FolderTemplate } from "@/features/templates/constants/dataroom-templates";
import { getLimits } from "@/lib/billing/limits/server";
import { authOptions } from "@/pages/api/auth/[...nextauth]";
import { getServerSession } from "next-auth/next";
import { newId } from "@/lib/id-helper";
import { safeSlugify } from "@/lib/utils";
import prisma from "@/lib/prisma";
import { CustomUser } from "@/lib/types";
export default async function handle(
req: NextApiRequest,
res: NextApiResponse,
) {
if (req.method === "POST") {
// POST /api/teams/:teamId/datarooms/generate-ai
const session = await getServerSession(req, res, authOptions);
if (!session) {
res.status(401).end("Unauthorized");
return;
}
const userId = (session.user as CustomUser).id;
const { teamId } = req.query as { teamId: string };
const { name, folders } = req.body as {
name: string;
folders: FolderTemplate[];
};
// Validate input
if (!name || typeof name !== "string" || name.trim().length === 0) {
return res.status(400).json({
message: "Dataroom name is required",
});
}
if (name.length > 255) {
return res.status(400).json({
message: "Dataroom name is too long",
});
}
if (!Array.isArray(folders) || folders.length === 0) {
return res.status(400).json({
message: "Folder structure is required",
});
}
// Validate folder structure (max 2 levels: top-level + 1 subfolder level)
const validateFolder = (folder: any, depth = 0): boolean => {
if (depth >= 2) return false; // Max 2 levels deep
if (!folder.name || typeof folder.name !== "string") return false;
if (folder.name.length > 255) return false;
if (folder.subfolders) {
if (!Array.isArray(folder.subfolders)) return false;
// Limit subfolders to 5 per folder
if (folder.subfolders.length > 5) return false;
return folder.subfolders.every((sub: any) =>
validateFolder(sub, depth + 1),
);
}
return true;
};
// Limit top-level folders to 8
if (folders.length > 8) {
return res.status(400).json({
message: "Too many top-level folders (maximum 8)",
});
}
if (!folders.every((folder) => validateFolder(folder))) {
return res.status(400).json({
message: "Invalid folder structure",
});
}
try {
// Check if the user is part of the team (without plan restriction first)
const team = await prisma.team.findUnique({
where: {
id: teamId,
users: {
some: {
userId: userId,
},
},
},
select: {
id: true,
plan: true,
},
});
if (!team) {
return res.status(401).end("Unauthorized");
}
// Check if team has access to datarooms (allow trial plans, paid plans, and free plan for onboarding)
const allowedPlans = [
"business",
"datarooms",
"datarooms-plus",
"datarooms-premium",
"business+old",
"datarooms+old",
"datarooms-plus+old",
"datarooms-premium+old",
"datarooms+drtrial",
"business+drtrial",
"datarooms-plus+drtrial",
"datarooms-premium+drtrial",
"free+drtrial",
];
// Allow free plan (for onboarding) or any plan that includes allowed plans or drtrial
const hasAccess =
team.plan === "free" || // Allow free plan during onboarding
team.plan.includes("drtrial") || // Allow any trial plan
allowedPlans.some((plan) => team.plan.includes(plan));
if (!hasAccess) {
return res.status(403).json({
message:
"This feature requires a datarooms plan. Please upgrade to access AI-generated data rooms.",
});
}
// Check if team is paused
const teamIsPaused = await isTeamPausedById(teamId);
if (teamIsPaused) {
return res.status(403).json({
error:
"Team is currently paused. New dataroom creation is not available.",
});
}
// Limits: Check if the user has reached the limit of datarooms in the team
const dataroomCount = await prisma.dataroom.count({
where: {
teamId: teamId,
},
});
const limits = await getLimits({ teamId, userId });
// Allow first dataroom creation on free plan during onboarding
const isFreePlan = team.plan === "free" || team.plan === "free+drtrial";
const isFirstDataroom = dataroomCount === 0;
if (
limits &&
!(isFreePlan && isFirstDataroom) &&
dataroomCount >= limits.datarooms
) {
return res
.status(403)
.json({ message: "You have reached the limit of datarooms" });
}
const pId = newId("dataroom");
const dataroomName = name.trim();
// Create the dataroom and folders in a transaction to prevent hanging results
const dataroom = await prisma.$transaction(async (tx) => {
// Create the dataroom
const createdDataroom = await tx.dataroom.create({
data: {
name: dataroomName,
teamId: teamId,
pId: pId,
},
});
// Helper function to create folders recursively
const createFolders = async (
folders: FolderTemplate[],
parentPath: string = "",
parentId: string | null = null,
): Promise<void> => {
for (const folder of folders) {
const folderPath = parentPath + "/" + safeSlugify(folder.name);
// Create the folder
const createdFolder = await tx.dataroomFolder.create({
data: {
name: folder.name,
path: folderPath,
parentId: parentId,
dataroomId: createdDataroom.id,
},
});
// If the folder has subfolders, create them recursively
if (folder.subfolders && folder.subfolders.length > 0) {
await createFolders(
folder.subfolders,
folderPath,
createdFolder.id,
);
}
}
};
await createFolders(folders);
return createdDataroom;
});
const dataroomWithCount = {
...dataroom,
_count: { documents: 0 },
};
res.status(201).json({
dataroom: dataroomWithCount,
message: "Dataroom generated successfully with AI",
});
} catch (error) {
console.error("Error generating dataroom with AI:", error);
return res.status(500).json({ error: "Error generating dataroom" });
}
} else {
// We only allow POST requests
res.setHeader("Allow", ["POST"]);
return res.status(405).end(`Method ${req.method} Not Allowed`);
}
}