Files
zeekayandHanzo Dev f77d5010d8 ee: delete the relocated upstream commercial code and its paywall
Papermark dual-licenses: AGPL-3.0 for the tree, a separate commercial
licence for ee/. We hold the first and not the second, so none of the
second may live here.

ee/ was already absent from main, but it was never deleted. 98f0da7fa
("ci: amd64-only build") renamed 150 files out of ee/ byte-identical
into features/, lib/billing/legacy/ (ee/stripe), lib/billing/limits/
(ee/limits), and flattened app/(ee)/ into app/ — putting commercially
licensed code under our AGPL root LICENSE. A rename is not a deletion.
Every path that commit moved is now gone, edited-since or not.

Deleted, with their routes and UI entry points: features/ai and
app/api/ai, features/workflows and app/api/{workflows,workflow-entry},
features/conversations and the Q&A/FAQ surface, features/security/sso
with app/api/auth/saml + app/api/scim + lib/jackson.ts (we use Hanzo
IAM OIDC natively), features/dataroom-invitations, features/templates,
features/access-notifications, features/conversions, features/
permissions. Five of these were gated by lib/featureFlags, which reads
@vercel/edge-config and returns false for every flag when EDGE_CONFIG
is unset — every non-Vercel deployment we run. Those flags are gone too.

Deleted the commercial gating outright rather than reimplementing it:
lib/billing/legacy (ee/stripe) and lib/billing/limits (ee/limits), the
upgrade modals and banners, UpgradeButton, FeaturePreview, PlanBadge,
the trial and blocking modals, /settings/upgrade, /settings/billing and
the billing checkout/seat/pause/cancel API. usePlan() no longer returns
capability booleans — the plan tag describes provisioning, it is not a
permission — and useLimits() is gone with every quota check it fed.
Subscription pause went the same way. Also dropped the npm dependencies
that existed only for the removed features (@boxyhq/saml-jackson, the
@ai-sdk packages, openai, streamdown, use-stick-to-bottom,
@trigger.dev/python) and the Jackson-specific next.config webpack shims.

Rewritten as original Hanzo code where a capability was load-bearing:
- lib/utils/get-file-size-limits.ts — one UPLOAD_LIMITS set plus
  getFileSizeLimit(contentType), env-overridable. Operational limits,
  not commercial ones, so the tus and browser-upload paths still refuse
  oversized files without consulting a plan matrix.
- components/links/link-sheet/permissions-sheet.tsx — a flat, depth
  annotated item list with view/download switches over the same
  /permission-groups API. Two states, not three. ItemPermission now has
  a single definition in lib/types.ts.
- app/api/links/[id]/upload/route.ts — visitor uploads, built around one
  authorize() helper shared by GET and POST, and a notification debounce
  keyed per (link, viewer) instead of listing and cancelling runs.

There is now exactly one link sheet: the ee DataroomLinkSheet duplicated
the AGPL LinkSheet, which already handled DATAROOM_LINK. Replaced
upstream's Omit<LinkType, "WORKFLOW_LINK"> — Omit on a string union
yields an object type and never narrowed anything — with a real union.

Verified: the S3/tus upload+download harness passes 13/13 against MinIO
after the deletions, and tsc goes from 257 pre-existing errors on
origin/main to 192 with zero files worse than baseline.

Reasoning recorded in LLM.md. LICENSE untouched.

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-03 20:19:21 -07:00

240 lines
7.4 KiB
TypeScript

"use client";
import { useEffect, useMemo, useState } from "react";
import { useTeam } from "@/context/team-context";
import { PermissionGroupAccessControls } from "@prisma/client";
import { File, Folder } from "lucide-react";
import useSWR from "swr";
import {
DataroomFolderWithDocuments,
useDataroomFoldersTree,
} from "@/lib/swr/use-dataroom";
import { DataroomItemType, ITEM_TYPE, ItemPermission } from "@/lib/types";
import { fetcher } from "@/lib/utils";
import { Button } from "@/components/ui/button";
import {
Sheet,
SheetContent,
SheetFooter,
SheetHeader,
SheetTitle,
} from "@/components/ui/sheet";
import { Switch } from "@/components/ui/switch";
/** One row of the permission tree, flattened with its nesting depth. */
type PermissionRow = {
id: string;
name: string;
itemType: DataroomItemType;
depth: number;
};
/**
* Flatten the dataroom tree depth-first so a folder always precedes the items
* it contains. Depth rides on the row rather than being rebuilt from the tree,
* which keeps rendering a plain list.
*/
function flatten(
folders: DataroomFolderWithDocuments[],
depth = 0,
): PermissionRow[] {
return folders.flatMap((folder) => [
{
id: folder.id,
name: folder.name,
itemType: ITEM_TYPE.folder,
depth,
},
...folder.documents.map((doc) => ({
id: doc.id,
name: doc.document.name,
itemType: ITEM_TYPE.document,
depth: depth + 1,
})),
...flatten(folder.childFolders ?? [], depth + 1),
]);
}
/**
* Edits which dataroom items a link may reach.
*
* Two states, deliberately: either the link sees the whole data room (`onSave`
* receives null and the caller drops the permission group), or it sees exactly
* the items ticked here. There is no third "inherit" state to reason about.
*/
export function PermissionsSheet({
isOpen,
setIsOpen,
dataroomId,
permissionGroupId,
onSave,
}: {
isOpen: boolean;
setIsOpen: (open: boolean) => void;
dataroomId: string;
linkId?: string;
permissionGroupId?: string | null;
onSave: (permissions: ItemPermission | null) => void;
}) {
const teamId = useTeam()?.currentTeam?.id;
const { folders, loading } = useDataroomFoldersTree({
dataroomId,
include_documents: true,
});
const { data: group } = useSWR<{
permissionGroup: { accessControls: PermissionGroupAccessControls[] };
}>(
isOpen && teamId && permissionGroupId
? `/api/teams/${teamId}/datarooms/${dataroomId}/permission-groups/${permissionGroupId}`
: null,
fetcher,
);
const rows = useMemo(() => flatten(folders ?? []), [folders]);
const [entireDataroom, setEntireDataroom] = useState(!permissionGroupId);
const [permissions, setPermissions] = useState<ItemPermission>({});
// Seed from the saved group once it arrives; items it does not mention are
// simply not granted.
useEffect(() => {
const controls = group?.permissionGroup?.accessControls;
if (!controls) return;
setEntireDataroom(controls.length === 0);
setPermissions(
Object.fromEntries(
controls.map((control) => [
control.itemId,
{
view: control.canView,
download: control.canDownload,
itemType: control.itemType as DataroomItemType,
},
]),
),
);
}, [group]);
const set = (row: PermissionRow, view: boolean, download: boolean) =>
setPermissions((prev) => ({
...prev,
// download without view is not a state a viewer can be in
[row.id]: { view: view || download, download, itemType: row.itemType },
}));
const handleSave = () => {
if (entireDataroom) {
onSave(null);
return;
}
// Send every row so denials are explicit rather than gaps.
onSave(
Object.fromEntries(
rows.map((row) => [
row.id,
permissions[row.id] ?? {
view: false,
download: false,
itemType: row.itemType,
},
]),
),
);
};
return (
<Sheet open={isOpen} onOpenChange={setIsOpen}>
<SheetContent className="flex w-full flex-col sm:max-w-2xl">
<SheetHeader>
<SheetTitle>File permissions</SheetTitle>
</SheetHeader>
<label className="flex items-center justify-between gap-4 border-b py-4">
<span className="text-sm">
Share the entire data room
<span className="block text-xs text-muted-foreground">
Turn off to choose individual folders and files.
</span>
</span>
<Switch
checked={entireDataroom}
onCheckedChange={setEntireDataroom}
/>
</label>
<div className="flex-1 overflow-y-auto">
{loading ? (
<p className="py-6 text-sm text-muted-foreground">Loading…</p>
) : entireDataroom ? (
<p className="py-6 text-sm text-muted-foreground">
Everything in this data room is shared with this link.
</p>
) : rows.length === 0 ? (
<p className="py-6 text-sm text-muted-foreground">
This data room is empty.
</p>
) : (
<table className="w-full text-sm">
<thead className="sticky top-0 bg-background">
<tr className="border-b text-left text-xs text-muted-foreground">
<th className="py-2 font-medium">Item</th>
<th className="w-20 py-2 font-medium">View</th>
<th className="w-24 py-2 font-medium">Download</th>
</tr>
</thead>
<tbody>
{rows.map((row) => {
const view = permissions[row.id]?.view ?? false;
const download = permissions[row.id]?.download ?? false;
return (
<tr key={row.id} className="border-b last:border-0">
<td className="py-2">
<span
className="flex items-center gap-2 truncate"
style={{ paddingLeft: row.depth * 16 }}
>
{row.itemType === ITEM_TYPE.folder ? (
<Folder className="h-4 w-4 shrink-0" />
) : (
<File className="h-4 w-4 shrink-0" />
)}
<span className="truncate">{row.name}</span>
</span>
</td>
<td className="py-2">
<Switch
checked={view}
onCheckedChange={(next) =>
set(row, next, next && download)
}
/>
</td>
<td className="py-2">
<Switch
checked={download}
onCheckedChange={(next) => set(row, view, next)}
/>
</td>
</tr>
);
})}
</tbody>
</table>
)}
</div>
<SheetFooter>
<Button variant="outline" onClick={() => setIsOpen(false)}>
Cancel
</Button>
<Button onClick={handleSave}>Save permissions</Button>
</SheetFooter>
</SheetContent>
</Sheet>
);
}