mirror of
https://github.com/hanzo-apps/dataroom.git
synced 2026-10-30 14:47:36 +00:00
Papermark dual-licenses: AGPL-3.0 for the tree, a separate commercial
licence for ee/. We hold the first and not the second, so none of the
second may live here.
ee/ was already absent from main, but it was never deleted. 98f0da7fa
("ci: amd64-only build") renamed 150 files out of ee/ byte-identical
into features/, lib/billing/legacy/ (ee/stripe), lib/billing/limits/
(ee/limits), and flattened app/(ee)/ into app/ — putting commercially
licensed code under our AGPL root LICENSE. A rename is not a deletion.
Every path that commit moved is now gone, edited-since or not.
Deleted, with their routes and UI entry points: features/ai and
app/api/ai, features/workflows and app/api/{workflows,workflow-entry},
features/conversations and the Q&A/FAQ surface, features/security/sso
with app/api/auth/saml + app/api/scim + lib/jackson.ts (we use Hanzo
IAM OIDC natively), features/dataroom-invitations, features/templates,
features/access-notifications, features/conversions, features/
permissions. Five of these were gated by lib/featureFlags, which reads
@vercel/edge-config and returns false for every flag when EDGE_CONFIG
is unset — every non-Vercel deployment we run. Those flags are gone too.
Deleted the commercial gating outright rather than reimplementing it:
lib/billing/legacy (ee/stripe) and lib/billing/limits (ee/limits), the
upgrade modals and banners, UpgradeButton, FeaturePreview, PlanBadge,
the trial and blocking modals, /settings/upgrade, /settings/billing and
the billing checkout/seat/pause/cancel API. usePlan() no longer returns
capability booleans — the plan tag describes provisioning, it is not a
permission — and useLimits() is gone with every quota check it fed.
Subscription pause went the same way. Also dropped the npm dependencies
that existed only for the removed features (@boxyhq/saml-jackson, the
@ai-sdk packages, openai, streamdown, use-stick-to-bottom,
@trigger.dev/python) and the Jackson-specific next.config webpack shims.
Rewritten as original Hanzo code where a capability was load-bearing:
- lib/utils/get-file-size-limits.ts — one UPLOAD_LIMITS set plus
getFileSizeLimit(contentType), env-overridable. Operational limits,
not commercial ones, so the tus and browser-upload paths still refuse
oversized files without consulting a plan matrix.
- components/links/link-sheet/permissions-sheet.tsx — a flat, depth
annotated item list with view/download switches over the same
/permission-groups API. Two states, not three. ItemPermission now has
a single definition in lib/types.ts.
- app/api/links/[id]/upload/route.ts — visitor uploads, built around one
authorize() helper shared by GET and POST, and a notification debounce
keyed per (link, viewer) instead of listing and cancelling runs.
There is now exactly one link sheet: the ee DataroomLinkSheet duplicated
the AGPL LinkSheet, which already handled DATAROOM_LINK. Replaced
upstream's Omit<LinkType, "WORKFLOW_LINK"> — Omit on a string union
yields an object type and never narrowed anything — with a real union.
Verified: the S3/tus upload+download harness passes 13/13 against MinIO
after the deletions, and tsc goes from 257 pre-existing errors on
origin/main to 192 with zero files worse than baseline.
Reasoning recorded in LLM.md. LICENSE untouched.
Co-authored-by: Hanzo Dev <[email protected]>
247 lines
8.6 KiB
TypeScript
247 lines
8.6 KiB
TypeScript
import { useEffect, useState } from "react";
|
|
|
|
import { LinkPreset } from "@prisma/client";
|
|
import { CheckIcon, UsersIcon, XIcon } from "lucide-react";
|
|
import { motion } from "motion/react";
|
|
|
|
import { FADE_IN_ANIMATION_SETTINGS } from "@/lib/constants";
|
|
import useVisitorGroups from "@/lib/swr/use-visitor-groups";
|
|
import { sanitizeList } from "@/lib/utils";
|
|
|
|
import { Badge } from "@/components/ui/badge";
|
|
import { Button } from "@/components/ui/button";
|
|
import {
|
|
Popover,
|
|
PopoverContent,
|
|
PopoverTrigger,
|
|
} from "@/components/ui/popover";
|
|
import { Textarea } from "@/components/ui/textarea";
|
|
|
|
import { DEFAULT_LINK_TYPE } from ".";
|
|
import LinkItem from "./link-item";
|
|
|
|
export default function AllowListSection({
|
|
data,
|
|
setData,
|
|
presets,
|
|
}: {
|
|
data: DEFAULT_LINK_TYPE;
|
|
setData: React.Dispatch<React.SetStateAction<DEFAULT_LINK_TYPE>>;
|
|
presets: LinkPreset | null;
|
|
}) {
|
|
const { emailProtected, allowList, visitorGroupIds } = data;
|
|
const { visitorGroups } = useVisitorGroups();
|
|
|
|
// Initialize enabled state based on whether allowList is not null and not empty
|
|
// or if visitor groups are selected
|
|
const [enabled, setEnabled] = useState<boolean>(
|
|
(!!allowList && allowList.length > 0) ||
|
|
(!!visitorGroupIds && visitorGroupIds.length > 0),
|
|
);
|
|
const [allowListInput, setAllowListInput] = useState<string>(
|
|
allowList?.join("\n") || "",
|
|
);
|
|
|
|
useEffect(() => {
|
|
if (!emailProtected && enabled) {
|
|
setEnabled(false);
|
|
setData((prevData) => ({
|
|
...prevData,
|
|
allowList: [],
|
|
visitorGroupIds: [],
|
|
}));
|
|
}
|
|
}, [emailProtected, enabled, setData]);
|
|
|
|
useEffect(() => {
|
|
if (presets?.allowList && presets.allowList.length > 0) {
|
|
setEnabled(true);
|
|
setAllowListInput(presets.allowList.join("\n") || "");
|
|
}
|
|
}, [presets]);
|
|
|
|
const handleEnableAllowList = () => {
|
|
const updatedEnabled = !enabled;
|
|
setEnabled(updatedEnabled);
|
|
|
|
if (updatedEnabled) {
|
|
setData((prevData) => ({
|
|
...prevData,
|
|
allowList: updatedEnabled ? sanitizeList(allowListInput) : [],
|
|
emailAuthenticated: true, // Turn on email authentication
|
|
emailProtected: true, // Turn on email protection
|
|
}));
|
|
} else {
|
|
setData((prevData) => ({
|
|
...prevData,
|
|
allowList: [],
|
|
visitorGroupIds: [],
|
|
}));
|
|
}
|
|
};
|
|
|
|
const handleAllowListChange = (
|
|
event: React.ChangeEvent<HTMLTextAreaElement>,
|
|
) => {
|
|
const updatedAllowListInput = event.target.value;
|
|
setAllowListInput(updatedAllowListInput);
|
|
|
|
if (emailProtected && enabled) {
|
|
setData((prevData) => ({
|
|
...prevData,
|
|
allowList: sanitizeList(updatedAllowListInput),
|
|
}));
|
|
}
|
|
};
|
|
|
|
const toggleVisitorGroup = (groupId: string) => {
|
|
setData((prevData) => {
|
|
const currentIds = prevData.visitorGroupIds || [];
|
|
const newIds = currentIds.includes(groupId)
|
|
? currentIds.filter((id) => id !== groupId)
|
|
: [...currentIds, groupId];
|
|
return { ...prevData, visitorGroupIds: newIds };
|
|
});
|
|
};
|
|
|
|
const removeVisitorGroup = (groupId: string) => {
|
|
setData((prevData) => ({
|
|
...prevData,
|
|
visitorGroupIds: (prevData.visitorGroupIds || []).filter(
|
|
(id) => id !== groupId,
|
|
),
|
|
}));
|
|
};
|
|
|
|
const selectedGroups =
|
|
visitorGroups?.filter((g) => visitorGroupIds?.includes(g.id)) || [];
|
|
|
|
return (
|
|
<div className="pb-5">
|
|
<div className="flex flex-col space-y-4">
|
|
<LinkItem
|
|
title="Allow specified viewers"
|
|
link="https://dataroom.hanzo.ai/help/article/allow-list"
|
|
tooltipContent={`Restrict access to a selected group of viewers. Enter allowed emails or domains${visitorGroups && visitorGroups.length > 0 ? ", or select visitor groups" : ""}.`}
|
|
enabled={enabled}
|
|
action={handleEnableAllowList}
|
|
/>
|
|
|
|
{enabled && (
|
|
<motion.div
|
|
className="mt-1 block w-full space-y-3"
|
|
{...FADE_IN_ANIMATION_SETTINGS}
|
|
>
|
|
{/* Visitor Groups Selector */}
|
|
{visitorGroups && visitorGroups.length > 0 && (
|
|
<div>
|
|
<div className="mb-1.5 flex items-center gap-1.5">
|
|
<UsersIcon className="h-3.5 w-3.5 text-muted-foreground" />
|
|
<span className="text-xs font-medium text-muted-foreground">
|
|
Visitor Groups
|
|
</span>
|
|
</div>
|
|
|
|
{/* Selected groups as badges */}
|
|
{selectedGroups.length > 0 && (
|
|
<div className="mb-2 flex flex-wrap gap-1.5">
|
|
{selectedGroups.map((group) => (
|
|
<Badge
|
|
key={group.id}
|
|
variant="secondary"
|
|
className="gap-1 pr-1"
|
|
>
|
|
{group.name}
|
|
<span className="text-muted-foreground">
|
|
({group.emails.length})
|
|
</span>
|
|
<button
|
|
type="button"
|
|
onClick={() => removeVisitorGroup(group.id)}
|
|
className="ml-0.5 rounded-full p-0.5 hover:bg-muted"
|
|
>
|
|
<XIcon className="h-3 w-3" />
|
|
</button>
|
|
</Badge>
|
|
))}
|
|
</div>
|
|
)}
|
|
|
|
<Popover>
|
|
<PopoverTrigger asChild>
|
|
<Button
|
|
type="button"
|
|
variant="outline"
|
|
size="sm"
|
|
className="w-full justify-start text-muted-foreground"
|
|
>
|
|
<UsersIcon className="mr-2 h-3.5 w-3.5" />
|
|
{selectedGroups.length > 0
|
|
? `${selectedGroups.length} group${selectedGroups.length > 1 ? "s" : ""} selected`
|
|
: "Select visitor groups..."}
|
|
</Button>
|
|
</PopoverTrigger>
|
|
<PopoverContent className="w-72 p-1" align="start">
|
|
<div className="max-h-60 overflow-y-auto">
|
|
{visitorGroups.map((group) => {
|
|
const isSelected = visitorGroupIds?.includes(group.id);
|
|
return (
|
|
<button
|
|
key={group.id}
|
|
type="button"
|
|
className="flex w-full items-center gap-2 rounded-sm px-2 py-1.5 text-left text-sm hover:bg-muted"
|
|
onClick={() => toggleVisitorGroup(group.id)}
|
|
>
|
|
<div
|
|
className={`flex h-4 w-4 items-center justify-center rounded-sm border ${
|
|
isSelected
|
|
? "border-primary bg-primary text-primary-foreground"
|
|
: "border-muted-foreground/30"
|
|
}`}
|
|
>
|
|
{isSelected && <CheckIcon className="h-3 w-3" />}
|
|
</div>
|
|
<div className="min-w-0 flex-1">
|
|
<div className="truncate font-medium">
|
|
{group.name}
|
|
</div>
|
|
<div className="text-xs text-muted-foreground">
|
|
{group.emails.length}{" "}
|
|
{group.emails.length === 1
|
|
? "entry"
|
|
: "entries"}
|
|
</div>
|
|
</div>
|
|
</button>
|
|
);
|
|
})}
|
|
</div>
|
|
</PopoverContent>
|
|
</Popover>
|
|
|
|
<div className="my-2 flex items-center gap-2">
|
|
<div className="h-px flex-1 bg-border" />
|
|
<span className="text-xs text-muted-foreground">
|
|
plus individual emails
|
|
</span>
|
|
<div className="h-px flex-1 bg-border" />
|
|
</div>
|
|
</div>
|
|
)}
|
|
|
|
<Textarea
|
|
className="focus:ring-inset"
|
|
rows={5}
|
|
placeholder={`Enter allowed emails/domains, one per line, e.g.
|
|
[email protected]
|
|
@example.org`}
|
|
value={allowListInput}
|
|
onChange={handleAllowListChange}
|
|
/>
|
|
</motion.div>
|
|
)}
|
|
</div>
|
|
</div>
|
|
);
|
|
}
|