mirror of
https://github.com/hanzo-apps/dataroom.git
synced 2026-10-30 14:47:36 +00:00
Papermark dual-licenses: AGPL-3.0 for the tree, a separate commercial
licence for ee/. We hold the first and not the second, so none of the
second may live here.
ee/ was already absent from main, but it was never deleted. 98f0da7fa
("ci: amd64-only build") renamed 150 files out of ee/ byte-identical
into features/, lib/billing/legacy/ (ee/stripe), lib/billing/limits/
(ee/limits), and flattened app/(ee)/ into app/ — putting commercially
licensed code under our AGPL root LICENSE. A rename is not a deletion.
Every path that commit moved is now gone, edited-since or not.
Deleted, with their routes and UI entry points: features/ai and
app/api/ai, features/workflows and app/api/{workflows,workflow-entry},
features/conversations and the Q&A/FAQ surface, features/security/sso
with app/api/auth/saml + app/api/scim + lib/jackson.ts (we use Hanzo
IAM OIDC natively), features/dataroom-invitations, features/templates,
features/access-notifications, features/conversions, features/
permissions. Five of these were gated by lib/featureFlags, which reads
@vercel/edge-config and returns false for every flag when EDGE_CONFIG
is unset — every non-Vercel deployment we run. Those flags are gone too.
Deleted the commercial gating outright rather than reimplementing it:
lib/billing/legacy (ee/stripe) and lib/billing/limits (ee/limits), the
upgrade modals and banners, UpgradeButton, FeaturePreview, PlanBadge,
the trial and blocking modals, /settings/upgrade, /settings/billing and
the billing checkout/seat/pause/cancel API. usePlan() no longer returns
capability booleans — the plan tag describes provisioning, it is not a
permission — and useLimits() is gone with every quota check it fed.
Subscription pause went the same way. Also dropped the npm dependencies
that existed only for the removed features (@boxyhq/saml-jackson, the
@ai-sdk packages, openai, streamdown, use-stick-to-bottom,
@trigger.dev/python) and the Jackson-specific next.config webpack shims.
Rewritten as original Hanzo code where a capability was load-bearing:
- lib/utils/get-file-size-limits.ts — one UPLOAD_LIMITS set plus
getFileSizeLimit(contentType), env-overridable. Operational limits,
not commercial ones, so the tus and browser-upload paths still refuse
oversized files without consulting a plan matrix.
- components/links/link-sheet/permissions-sheet.tsx — a flat, depth
annotated item list with view/download switches over the same
/permission-groups API. Two states, not three. ItemPermission now has
a single definition in lib/types.ts.
- app/api/links/[id]/upload/route.ts — visitor uploads, built around one
authorize() helper shared by GET and POST, and a notification debounce
keyed per (link, viewer) instead of listing and cancelling runs.
There is now exactly one link sheet: the ee DataroomLinkSheet duplicated
the AGPL LinkSheet, which already handled DATAROOM_LINK. Replaced
upstream's Omit<LinkType, "WORKFLOW_LINK"> — Omit on a string union
yields an object type and never narrowed anything — with a real union.
Verified: the S3/tus upload+download harness passes 13/13 against MinIO
after the deletions, and tsc goes from 257 pre-existing errors on
origin/main to 192 with zero files worse than baseline.
Reasoning recorded in LLM.md. LICENSE untouched.
Co-authored-by: Hanzo Dev <[email protected]>
240 lines
7.4 KiB
TypeScript
240 lines
7.4 KiB
TypeScript
"use client";
|
|
|
|
import { useEffect, useMemo, useState } from "react";
|
|
|
|
import { useTeam } from "@/context/team-context";
|
|
import { PermissionGroupAccessControls } from "@prisma/client";
|
|
import { File, Folder } from "lucide-react";
|
|
import useSWR from "swr";
|
|
|
|
import {
|
|
DataroomFolderWithDocuments,
|
|
useDataroomFoldersTree,
|
|
} from "@/lib/swr/use-dataroom";
|
|
import { DataroomItemType, ITEM_TYPE, ItemPermission } from "@/lib/types";
|
|
import { fetcher } from "@/lib/utils";
|
|
|
|
import { Button } from "@/components/ui/button";
|
|
import {
|
|
Sheet,
|
|
SheetContent,
|
|
SheetFooter,
|
|
SheetHeader,
|
|
SheetTitle,
|
|
} from "@/components/ui/sheet";
|
|
import { Switch } from "@/components/ui/switch";
|
|
|
|
/** One row of the permission tree, flattened with its nesting depth. */
|
|
type PermissionRow = {
|
|
id: string;
|
|
name: string;
|
|
itemType: DataroomItemType;
|
|
depth: number;
|
|
};
|
|
|
|
/**
|
|
* Flatten the dataroom tree depth-first so a folder always precedes the items
|
|
* it contains. Depth rides on the row rather than being rebuilt from the tree,
|
|
* which keeps rendering a plain list.
|
|
*/
|
|
function flatten(
|
|
folders: DataroomFolderWithDocuments[],
|
|
depth = 0,
|
|
): PermissionRow[] {
|
|
return folders.flatMap((folder) => [
|
|
{
|
|
id: folder.id,
|
|
name: folder.name,
|
|
itemType: ITEM_TYPE.folder,
|
|
depth,
|
|
},
|
|
...folder.documents.map((doc) => ({
|
|
id: doc.id,
|
|
name: doc.document.name,
|
|
itemType: ITEM_TYPE.document,
|
|
depth: depth + 1,
|
|
})),
|
|
...flatten(folder.childFolders ?? [], depth + 1),
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Edits which dataroom items a link may reach.
|
|
*
|
|
* Two states, deliberately: either the link sees the whole data room (`onSave`
|
|
* receives null and the caller drops the permission group), or it sees exactly
|
|
* the items ticked here. There is no third "inherit" state to reason about.
|
|
*/
|
|
export function PermissionsSheet({
|
|
isOpen,
|
|
setIsOpen,
|
|
dataroomId,
|
|
permissionGroupId,
|
|
onSave,
|
|
}: {
|
|
isOpen: boolean;
|
|
setIsOpen: (open: boolean) => void;
|
|
dataroomId: string;
|
|
linkId?: string;
|
|
permissionGroupId?: string | null;
|
|
onSave: (permissions: ItemPermission | null) => void;
|
|
}) {
|
|
const teamId = useTeam()?.currentTeam?.id;
|
|
const { folders, loading } = useDataroomFoldersTree({
|
|
dataroomId,
|
|
include_documents: true,
|
|
});
|
|
|
|
const { data: group } = useSWR<{
|
|
permissionGroup: { accessControls: PermissionGroupAccessControls[] };
|
|
}>(
|
|
isOpen && teamId && permissionGroupId
|
|
? `/api/teams/${teamId}/datarooms/${dataroomId}/permission-groups/${permissionGroupId}`
|
|
: null,
|
|
fetcher,
|
|
);
|
|
|
|
const rows = useMemo(() => flatten(folders ?? []), [folders]);
|
|
|
|
const [entireDataroom, setEntireDataroom] = useState(!permissionGroupId);
|
|
const [permissions, setPermissions] = useState<ItemPermission>({});
|
|
|
|
// Seed from the saved group once it arrives; items it does not mention are
|
|
// simply not granted.
|
|
useEffect(() => {
|
|
const controls = group?.permissionGroup?.accessControls;
|
|
if (!controls) return;
|
|
setEntireDataroom(controls.length === 0);
|
|
setPermissions(
|
|
Object.fromEntries(
|
|
controls.map((control) => [
|
|
control.itemId,
|
|
{
|
|
view: control.canView,
|
|
download: control.canDownload,
|
|
itemType: control.itemType as DataroomItemType,
|
|
},
|
|
]),
|
|
),
|
|
);
|
|
}, [group]);
|
|
|
|
const set = (row: PermissionRow, view: boolean, download: boolean) =>
|
|
setPermissions((prev) => ({
|
|
...prev,
|
|
// download without view is not a state a viewer can be in
|
|
[row.id]: { view: view || download, download, itemType: row.itemType },
|
|
}));
|
|
|
|
const handleSave = () => {
|
|
if (entireDataroom) {
|
|
onSave(null);
|
|
return;
|
|
}
|
|
// Send every row so denials are explicit rather than gaps.
|
|
onSave(
|
|
Object.fromEntries(
|
|
rows.map((row) => [
|
|
row.id,
|
|
permissions[row.id] ?? {
|
|
view: false,
|
|
download: false,
|
|
itemType: row.itemType,
|
|
},
|
|
]),
|
|
),
|
|
);
|
|
};
|
|
|
|
return (
|
|
<Sheet open={isOpen} onOpenChange={setIsOpen}>
|
|
<SheetContent className="flex w-full flex-col sm:max-w-2xl">
|
|
<SheetHeader>
|
|
<SheetTitle>File permissions</SheetTitle>
|
|
</SheetHeader>
|
|
|
|
<label className="flex items-center justify-between gap-4 border-b py-4">
|
|
<span className="text-sm">
|
|
Share the entire data room
|
|
<span className="block text-xs text-muted-foreground">
|
|
Turn off to choose individual folders and files.
|
|
</span>
|
|
</span>
|
|
<Switch
|
|
checked={entireDataroom}
|
|
onCheckedChange={setEntireDataroom}
|
|
/>
|
|
</label>
|
|
|
|
<div className="flex-1 overflow-y-auto">
|
|
{loading ? (
|
|
<p className="py-6 text-sm text-muted-foreground">Loading…</p>
|
|
) : entireDataroom ? (
|
|
<p className="py-6 text-sm text-muted-foreground">
|
|
Everything in this data room is shared with this link.
|
|
</p>
|
|
) : rows.length === 0 ? (
|
|
<p className="py-6 text-sm text-muted-foreground">
|
|
This data room is empty.
|
|
</p>
|
|
) : (
|
|
<table className="w-full text-sm">
|
|
<thead className="sticky top-0 bg-background">
|
|
<tr className="border-b text-left text-xs text-muted-foreground">
|
|
<th className="py-2 font-medium">Item</th>
|
|
<th className="w-20 py-2 font-medium">View</th>
|
|
<th className="w-24 py-2 font-medium">Download</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
{rows.map((row) => {
|
|
const view = permissions[row.id]?.view ?? false;
|
|
const download = permissions[row.id]?.download ?? false;
|
|
return (
|
|
<tr key={row.id} className="border-b last:border-0">
|
|
<td className="py-2">
|
|
<span
|
|
className="flex items-center gap-2 truncate"
|
|
style={{ paddingLeft: row.depth * 16 }}
|
|
>
|
|
{row.itemType === ITEM_TYPE.folder ? (
|
|
<Folder className="h-4 w-4 shrink-0" />
|
|
) : (
|
|
<File className="h-4 w-4 shrink-0" />
|
|
)}
|
|
<span className="truncate">{row.name}</span>
|
|
</span>
|
|
</td>
|
|
<td className="py-2">
|
|
<Switch
|
|
checked={view}
|
|
onCheckedChange={(next) =>
|
|
set(row, next, next && download)
|
|
}
|
|
/>
|
|
</td>
|
|
<td className="py-2">
|
|
<Switch
|
|
checked={download}
|
|
onCheckedChange={(next) => set(row, view, next)}
|
|
/>
|
|
</td>
|
|
</tr>
|
|
);
|
|
})}
|
|
</tbody>
|
|
</table>
|
|
)}
|
|
</div>
|
|
|
|
<SheetFooter>
|
|
<Button variant="outline" onClick={() => setIsOpen(false)}>
|
|
Cancel
|
|
</Button>
|
|
<Button onClick={handleSave}>Save permissions</Button>
|
|
</SheetFooter>
|
|
</SheetContent>
|
|
</Sheet>
|
|
);
|
|
}
|