Files
dataroom/lib/utils/get-file-size-limits.ts
zeekayandHanzo Dev f77d5010d8 ee: delete the relocated upstream commercial code and its paywall
Papermark dual-licenses: AGPL-3.0 for the tree, a separate commercial
licence for ee/. We hold the first and not the second, so none of the
second may live here.

ee/ was already absent from main, but it was never deleted. 98f0da7fa
("ci: amd64-only build") renamed 150 files out of ee/ byte-identical
into features/, lib/billing/legacy/ (ee/stripe), lib/billing/limits/
(ee/limits), and flattened app/(ee)/ into app/ — putting commercially
licensed code under our AGPL root LICENSE. A rename is not a deletion.
Every path that commit moved is now gone, edited-since or not.

Deleted, with their routes and UI entry points: features/ai and
app/api/ai, features/workflows and app/api/{workflows,workflow-entry},
features/conversations and the Q&A/FAQ surface, features/security/sso
with app/api/auth/saml + app/api/scim + lib/jackson.ts (we use Hanzo
IAM OIDC natively), features/dataroom-invitations, features/templates,
features/access-notifications, features/conversions, features/
permissions. Five of these were gated by lib/featureFlags, which reads
@vercel/edge-config and returns false for every flag when EDGE_CONFIG
is unset — every non-Vercel deployment we run. Those flags are gone too.

Deleted the commercial gating outright rather than reimplementing it:
lib/billing/legacy (ee/stripe) and lib/billing/limits (ee/limits), the
upgrade modals and banners, UpgradeButton, FeaturePreview, PlanBadge,
the trial and blocking modals, /settings/upgrade, /settings/billing and
the billing checkout/seat/pause/cancel API. usePlan() no longer returns
capability booleans — the plan tag describes provisioning, it is not a
permission — and useLimits() is gone with every quota check it fed.
Subscription pause went the same way. Also dropped the npm dependencies
that existed only for the removed features (@boxyhq/saml-jackson, the
@ai-sdk packages, openai, streamdown, use-stick-to-bottom,
@trigger.dev/python) and the Jackson-specific next.config webpack shims.

Rewritten as original Hanzo code where a capability was load-bearing:
- lib/utils/get-file-size-limits.ts — one UPLOAD_LIMITS set plus
  getFileSizeLimit(contentType), env-overridable. Operational limits,
  not commercial ones, so the tus and browser-upload paths still refuse
  oversized files without consulting a plan matrix.
- components/links/link-sheet/permissions-sheet.tsx — a flat, depth
  annotated item list with view/download switches over the same
  /permission-groups API. Two states, not three. ItemPermission now has
  a single definition in lib/types.ts.
- app/api/links/[id]/upload/route.ts — visitor uploads, built around one
  authorize() helper shared by GET and POST, and a notification debounce
  keyed per (link, viewer) instead of listing and cancelling runs.

There is now exactly one link sheet: the ee DataroomLinkSheet duplicated
the AGPL LinkSheet, which already handled DATAROOM_LINK. Replaced
upstream's Omit<LinkType, "WORKFLOW_LINK"> — Omit on a string union
yields an object type and never narrowed anything — with a real union.

Verified: the S3/tus upload+download harness passes 13/13 against MinIO
after the deletions, and tsc goes from 257 pre-existing errors on
origin/main to 192 with zero files worse than baseline.

Reasoning recorded in LLM.md. LICENSE untouched.

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-03 20:19:21 -07:00

49 lines
1.6 KiB
TypeScript

/**
* Upload constraints.
*
* These are operational limits — what the conversion and storage pipeline can
* chew through — not commercial ones. Hanzo Dataroom has no paywall, so every
* team gets the same ceiling. Tune per deployment via the env overrides.
*/
export type UploadLimits = {
/** per-file ceilings, in megabytes, by kind */
video: number;
document: number;
image: number;
excel: number;
/** files accepted in a single drop */
maxFiles: number;
/** pages rendered per document */
maxPages: number;
};
const mb = (name: string, fallback: number): number => {
const raw = Number(process.env[name]);
return Number.isFinite(raw) && raw > 0 ? raw : fallback;
};
export const UPLOAD_LIMITS: UploadLimits = {
video: mb("NEXT_PUBLIC_UPLOAD_LIMIT_VIDEO_MB", 500),
document: mb("NEXT_PUBLIC_UPLOAD_LIMIT_DOCUMENT_MB", 350),
image: mb("NEXT_PUBLIC_UPLOAD_LIMIT_IMAGE_MB", 100),
excel: mb("NEXT_PUBLIC_UPLOAD_LIMIT_EXCEL_MB", 40),
maxFiles: mb("NEXT_PUBLIC_UPLOAD_LIMIT_MAX_FILES", 150),
maxPages: mb("NEXT_PUBLIC_UPLOAD_LIMIT_MAX_PAGES", 500),
};
/** Size ceiling in megabytes for a given content type. */
export function getFileSizeLimit(contentType: string): number {
if (contentType.startsWith("video/")) return UPLOAD_LIMITS.video;
if (contentType.startsWith("image/")) return UPLOAD_LIMITS.image;
if (
contentType.startsWith(
"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
) ||
contentType.startsWith("application/vnd.ms-excel") ||
contentType.startsWith("application/vnd.oasis.opendocument.spreadsheet")
) {
return UPLOAD_LIMITS.excel;
}
return UPLOAD_LIMITS.document;
}