Files
zeekayandHanzo Dev f77d5010d8 ee: delete the relocated upstream commercial code and its paywall
Papermark dual-licenses: AGPL-3.0 for the tree, a separate commercial
licence for ee/. We hold the first and not the second, so none of the
second may live here.

ee/ was already absent from main, but it was never deleted. 98f0da7fa
("ci: amd64-only build") renamed 150 files out of ee/ byte-identical
into features/, lib/billing/legacy/ (ee/stripe), lib/billing/limits/
(ee/limits), and flattened app/(ee)/ into app/ — putting commercially
licensed code under our AGPL root LICENSE. A rename is not a deletion.
Every path that commit moved is now gone, edited-since or not.

Deleted, with their routes and UI entry points: features/ai and
app/api/ai, features/workflows and app/api/{workflows,workflow-entry},
features/conversations and the Q&A/FAQ surface, features/security/sso
with app/api/auth/saml + app/api/scim + lib/jackson.ts (we use Hanzo
IAM OIDC natively), features/dataroom-invitations, features/templates,
features/access-notifications, features/conversions, features/
permissions. Five of these were gated by lib/featureFlags, which reads
@vercel/edge-config and returns false for every flag when EDGE_CONFIG
is unset — every non-Vercel deployment we run. Those flags are gone too.

Deleted the commercial gating outright rather than reimplementing it:
lib/billing/legacy (ee/stripe) and lib/billing/limits (ee/limits), the
upgrade modals and banners, UpgradeButton, FeaturePreview, PlanBadge,
the trial and blocking modals, /settings/upgrade, /settings/billing and
the billing checkout/seat/pause/cancel API. usePlan() no longer returns
capability booleans — the plan tag describes provisioning, it is not a
permission — and useLimits() is gone with every quota check it fed.
Subscription pause went the same way. Also dropped the npm dependencies
that existed only for the removed features (@boxyhq/saml-jackson, the
@ai-sdk packages, openai, streamdown, use-stick-to-bottom,
@trigger.dev/python) and the Jackson-specific next.config webpack shims.

Rewritten as original Hanzo code where a capability was load-bearing:
- lib/utils/get-file-size-limits.ts — one UPLOAD_LIMITS set plus
  getFileSizeLimit(contentType), env-overridable. Operational limits,
  not commercial ones, so the tus and browser-upload paths still refuse
  oversized files without consulting a plan matrix.
- components/links/link-sheet/permissions-sheet.tsx — a flat, depth
  annotated item list with view/download switches over the same
  /permission-groups API. Two states, not three. ItemPermission now has
  a single definition in lib/types.ts.
- app/api/links/[id]/upload/route.ts — visitor uploads, built around one
  authorize() helper shared by GET and POST, and a notification debounce
  keyed per (link, viewer) instead of listing and cancelling runs.

There is now exactly one link sheet: the ee DataroomLinkSheet duplicated
the AGPL LinkSheet, which already handled DATAROOM_LINK. Replaced
upstream's Omit<LinkType, "WORKFLOW_LINK"> — Omit on a string union
yields an object type and never narrowed anything — with a real union.

Verified: the S3/tus upload+download harness passes 13/13 against MinIO
after the deletions, and tsc goes from 257 pre-existing errors on
origin/main to 192 with zero files worse than baseline.

Reasoning recorded in LLM.md. LICENSE untouched.

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-03 20:19:21 -07:00

239 lines
6.2 KiB
TypeScript

import { NextApiRequest, NextApiResponse } from "next";
import { authOptions } from "@/pages/api/auth/[...nextauth]";
import {
Dataroom,
DataroomBrand,
DataroomDocument,
DataroomFolder,
} from "@prisma/client";
import { getServerSession } from "next-auth/next";
import { newId } from "@/lib/id-helper";
import prisma from "@/lib/prisma";
import { CustomUser } from "@/lib/types";
interface DataroomWithContents extends Dataroom {
documents: DataroomDocument[];
folders: DataroomFolderWithContents[];
brand: Partial<DataroomBrand> | null;
}
interface DataroomFolderWithContents extends DataroomFolder {
documents: DataroomDocument[];
childFolders: DataroomFolderWithContents[];
}
// Function to fetch the existing data room structure
async function fetchDataroomContents(
dataroomId: string,
): Promise<DataroomWithContents> {
const dataroom = await prisma.dataroom.findUnique({
where: { id: dataroomId },
include: {
documents: true,
folders: {
where: { parentId: null }, // Only get root folders initially
include: { documents: true },
},
brand: true,
},
});
if (!dataroom) {
throw new Error(`Dataroom with id ${dataroomId} not found`);
}
// Recursive function to fetch folder contents
async function getFolderContents(
folderId: string,
): Promise<DataroomFolderWithContents> {
const folder = await prisma.dataroomFolder.findUnique({
where: { id: folderId },
include: {
documents: true,
childFolders: {
include: { documents: true },
},
},
});
if (!folder) {
throw new Error(`Folder with id ${folderId} not found`);
}
const childFolders = await Promise.all(
folder.childFolders.map(async (childFolder) => {
const nestedContents = await getFolderContents(childFolder.id);
return nestedContents;
}),
);
return {
...folder,
documents: folder.documents,
childFolders: childFolders,
};
}
// Transform root folders by fetching their complete contents
const foldersWithContents = await Promise.all(
dataroom.folders.map((folder) => getFolderContents(folder.id)),
);
return {
...dataroom,
documents: dataroom.documents.filter((doc) => !doc.folderId),
folders: foldersWithContents,
brand: dataroom.brand,
};
}
// Recursive function to duplicate folders and documents
async function duplicateFolders(
dataroomId: string,
folder: DataroomFolderWithContents,
parentFolderId?: string,
) {
const newFolder = await prisma.dataroomFolder.create({
data: {
name: folder.name,
path: folder.path,
parentId: parentFolderId,
dataroomId: dataroomId,
},
select: { id: true },
});
// Duplicate documents for the current folder
await Promise.allSettled(
folder.documents.map((doc) =>
prisma.dataroomDocument.create({
data: {
documentId: doc.documentId,
dataroomId: dataroomId,
folderId: newFolder.id,
},
}),
),
);
// Duplicate child folders recursively
await Promise.allSettled(
folder.childFolders.map((childFolder) =>
duplicateFolders(dataroomId, childFolder, newFolder.id),
),
);
}
export default async function handle(
req: NextApiRequest,
res: NextApiResponse,
) {
if (req.method === "POST") {
// POST /api/teams/:teamId/datarooms/:id/duplicate
const session = await getServerSession(req, res, authOptions);
if (!session) {
res.status(401).end("Unauthorized");
return;
}
const { teamId, id: dataroomId } = req.query as {
teamId: string;
id: string;
};
const userId = (session.user as CustomUser).id;
try {
const team = await prisma.team.findUnique({
where: {
id: teamId,
users: {
some: {
userId: userId,
},
},
},
include: {
_count: {
select: {
datarooms: true,
},
},
},
});
if (!team) {
return res.status(401).end("Unauthorized");
}
if (team.plan.includes("drtrial")) {
return res.status(403).json({
message:
"You've reached the limit of datarooms. Consider upgrading your plan.",
});
}
const dataroom = await prisma.dataroom.findUnique({
where: {
id: dataroomId,
teamId: teamId,
},
select: { id: true },
});
if (!dataroom) {
return res.status(404).json({ message: "Dataroom not found" });
}
// Fetch the existing data room structure
const dataroomContents = await fetchDataroomContents(dataroomId);
// Create a new data room
const pId = newId("dataroom");
const newDataroom = await prisma.dataroom.create({
data: {
pId: pId,
name: dataroomContents.name + " (Copy)",
teamId: dataroomContents.teamId,
documents: {
create: dataroomContents.documents.map((doc) => ({
documentId: doc.documentId,
})),
},
folders: {
create: [],
},
brand: {
create: {
banner: dataroomContents.brand?.banner,
logo: dataroomContents.brand?.logo,
accentColor: dataroomContents.brand?.accentColor,
applyAccentColorToDataroomView:
(dataroomContents.brand as any)?.applyAccentColorToDataroomView ??
false,
brandColor: dataroomContents.brand?.brandColor,
},
},
},
});
// Changed this section to properly await all folder duplications
await Promise.all(
dataroomContents.folders
.filter((folder) => !folder.parentId)
.map((folder) => duplicateFolders(newDataroom.id, folder)),
);
res.status(201).json(newDataroom);
} catch (error) {
console.error("Request error", error);
res.status(500).json({ message: "Error duplicating dataroom" });
}
} else {
// We only allow POST requests
res.setHeader("Allow", ["POST"]);
return res.status(405).end(`Method ${req.method} Not Allowed`);
}
}