mirror of
https://github.com/hanzo-apps/dataroom.git
synced 2026-11-02 22:04:20 +00:00
Papermark dual-licenses: AGPL-3.0 for the tree, a separate commercial
licence for ee/. We hold the first and not the second, so none of the
second may live here.
ee/ was already absent from main, but it was never deleted. 98f0da7fa
("ci: amd64-only build") renamed 150 files out of ee/ byte-identical
into features/, lib/billing/legacy/ (ee/stripe), lib/billing/limits/
(ee/limits), and flattened app/(ee)/ into app/ — putting commercially
licensed code under our AGPL root LICENSE. A rename is not a deletion.
Every path that commit moved is now gone, edited-since or not.
Deleted, with their routes and UI entry points: features/ai and
app/api/ai, features/workflows and app/api/{workflows,workflow-entry},
features/conversations and the Q&A/FAQ surface, features/security/sso
with app/api/auth/saml + app/api/scim + lib/jackson.ts (we use Hanzo
IAM OIDC natively), features/dataroom-invitations, features/templates,
features/access-notifications, features/conversions, features/
permissions. Five of these were gated by lib/featureFlags, which reads
@vercel/edge-config and returns false for every flag when EDGE_CONFIG
is unset — every non-Vercel deployment we run. Those flags are gone too.
Deleted the commercial gating outright rather than reimplementing it:
lib/billing/legacy (ee/stripe) and lib/billing/limits (ee/limits), the
upgrade modals and banners, UpgradeButton, FeaturePreview, PlanBadge,
the trial and blocking modals, /settings/upgrade, /settings/billing and
the billing checkout/seat/pause/cancel API. usePlan() no longer returns
capability booleans — the plan tag describes provisioning, it is not a
permission — and useLimits() is gone with every quota check it fed.
Subscription pause went the same way. Also dropped the npm dependencies
that existed only for the removed features (@boxyhq/saml-jackson, the
@ai-sdk packages, openai, streamdown, use-stick-to-bottom,
@trigger.dev/python) and the Jackson-specific next.config webpack shims.
Rewritten as original Hanzo code where a capability was load-bearing:
- lib/utils/get-file-size-limits.ts — one UPLOAD_LIMITS set plus
getFileSizeLimit(contentType), env-overridable. Operational limits,
not commercial ones, so the tus and browser-upload paths still refuse
oversized files without consulting a plan matrix.
- components/links/link-sheet/permissions-sheet.tsx — a flat, depth
annotated item list with view/download switches over the same
/permission-groups API. Two states, not three. ItemPermission now has
a single definition in lib/types.ts.
- app/api/links/[id]/upload/route.ts — visitor uploads, built around one
authorize() helper shared by GET and POST, and a notification debounce
keyed per (link, viewer) instead of listing and cancelling runs.
There is now exactly one link sheet: the ee DataroomLinkSheet duplicated
the AGPL LinkSheet, which already handled DATAROOM_LINK. Replaced
upstream's Omit<LinkType, "WORKFLOW_LINK"> — Omit on a string union
yields an object type and never narrowed anything — with a real union.
Verified: the S3/tus upload+download harness passes 13/13 against MinIO
after the deletions, and tsc goes from 257 pre-existing errors on
origin/main to 192 with zero files worse than baseline.
Reasoning recorded in LLM.md. LICENSE untouched.
Co-authored-by: Hanzo Dev <[email protected]>
174 lines
4.4 KiB
TypeScript
174 lines
4.4 KiB
TypeScript
import { NextApiRequest, NextApiResponse } from "next";
|
|
|
|
import { authOptions } from "@/pages/api/auth/[...nextauth]";
|
|
import { Prisma } from "@prisma/client";
|
|
import { getServerSession } from "next-auth/next";
|
|
|
|
import { getFeatureFlags } from "@/lib/featureFlags";
|
|
import prisma from "@/lib/prisma";
|
|
import { CustomUser } from "@/lib/types";
|
|
import { serializeFileSize } from "@/lib/utils";
|
|
|
|
export default async function handle(
|
|
req: NextApiRequest,
|
|
res: NextApiResponse,
|
|
) {
|
|
if (req.method !== "GET") {
|
|
res.setHeader("Allow", ["GET"]);
|
|
return res.status(405).end(`Method ${req.method} Not Allowed`);
|
|
}
|
|
|
|
const session = await getServerSession(req, res, authOptions);
|
|
if (!session) {
|
|
return res.status(401).end("Unauthorized");
|
|
}
|
|
|
|
const { teamId, id: docId } = req.query as {
|
|
teamId: string;
|
|
id: string;
|
|
};
|
|
|
|
const userId = (session.user as CustomUser).id;
|
|
|
|
try {
|
|
// First verify user has access to the team
|
|
const team = await prisma.team.findUnique({
|
|
where: {
|
|
id: teamId,
|
|
users: {
|
|
some: {
|
|
userId,
|
|
},
|
|
},
|
|
},
|
|
select: { plan: true },
|
|
});
|
|
|
|
if (!team) {
|
|
return res.status(401).end("Unauthorized");
|
|
}
|
|
|
|
// Parallel fetch of core data
|
|
const [document, featureFlags] = await Promise.all([
|
|
prisma.document.findUnique({
|
|
where: {
|
|
id: docId,
|
|
teamId,
|
|
},
|
|
select: {
|
|
id: true,
|
|
name: true,
|
|
description: true,
|
|
file: true,
|
|
originalFile: true,
|
|
type: true,
|
|
contentType: true,
|
|
storageType: true,
|
|
numPages: true,
|
|
ownerId: true,
|
|
teamId: true,
|
|
advancedExcelEnabled: true,
|
|
downloadOnly: true,
|
|
createdAt: true,
|
|
updatedAt: true,
|
|
folderId: true,
|
|
isExternalUpload: true,
|
|
versions: {
|
|
where: { isPrimary: true },
|
|
orderBy: { createdAt: "desc" },
|
|
take: 1,
|
|
},
|
|
folder: {
|
|
select: {
|
|
name: true,
|
|
path: true,
|
|
},
|
|
},
|
|
datarooms: {
|
|
select: {
|
|
dataroom: {
|
|
select: {
|
|
id: true,
|
|
name: true,
|
|
},
|
|
},
|
|
folder: {
|
|
select: {
|
|
id: true,
|
|
name: true,
|
|
path: true,
|
|
},
|
|
},
|
|
},
|
|
},
|
|
// Get counts without fetching full records
|
|
_count: {
|
|
select: {
|
|
links: true,
|
|
views: { where: { isArchived: false } },
|
|
},
|
|
},
|
|
},
|
|
}),
|
|
getFeatureFlags({ teamId }),
|
|
]);
|
|
|
|
if (!document || !document.versions || document.versions.length === 0) {
|
|
return res.status(404).json({
|
|
error: "Not Found",
|
|
message: "The requested document does not exist",
|
|
});
|
|
}
|
|
|
|
const primaryVersion = document.versions[0];
|
|
const hasLinks = document._count.links > 0;
|
|
const hasViews = document._count.views > 0;
|
|
|
|
// Check for page links only if needed
|
|
let hasPageLinks = false;
|
|
if (primaryVersion && team.plan.includes("free")) {
|
|
const pageLinksCount = await prisma.documentPage.count({
|
|
where: {
|
|
versionId: primaryVersion.id,
|
|
pageLinks: {
|
|
not: Prisma.JsonNull,
|
|
},
|
|
},
|
|
});
|
|
hasPageLinks = pageLinksCount > 0;
|
|
}
|
|
|
|
// Basic response for instant loading
|
|
const response = {
|
|
document: {
|
|
...serializeFileSize(document),
|
|
primaryVersion: serializeFileSize(primaryVersion),
|
|
hasPageLinks,
|
|
isEmpty: !hasLinks && !hasViews, // Flag for empty state optimization
|
|
},
|
|
featureFlags: {
|
|
annotations: featureFlags.annotations,
|
|
},
|
|
team: {
|
|
plan: team?.plan || "free",
|
|
isTrial: team?.plan.includes("drtrial") || false,
|
|
},
|
|
counts: {
|
|
links: document._count.links,
|
|
views: document._count.views,
|
|
},
|
|
};
|
|
|
|
// Set cache headers for faster subsequent loads
|
|
res.setHeader(
|
|
"Cache-Control",
|
|
"private, max-age=60, stale-while-revalidate=300",
|
|
);
|
|
|
|
return res.status(200).json(response);
|
|
} catch (error) {
|
|
console.error("Document overview error:", error);
|
|
return res.status(500).json({ error: "Internal server error" });
|
|
}
|
|
}
|