Files
zeekayandHanzo Dev f77d5010d8 ee: delete the relocated upstream commercial code and its paywall
Papermark dual-licenses: AGPL-3.0 for the tree, a separate commercial
licence for ee/. We hold the first and not the second, so none of the
second may live here.

ee/ was already absent from main, but it was never deleted. 98f0da7fa
("ci: amd64-only build") renamed 150 files out of ee/ byte-identical
into features/, lib/billing/legacy/ (ee/stripe), lib/billing/limits/
(ee/limits), and flattened app/(ee)/ into app/ — putting commercially
licensed code under our AGPL root LICENSE. A rename is not a deletion.
Every path that commit moved is now gone, edited-since or not.

Deleted, with their routes and UI entry points: features/ai and
app/api/ai, features/workflows and app/api/{workflows,workflow-entry},
features/conversations and the Q&A/FAQ surface, features/security/sso
with app/api/auth/saml + app/api/scim + lib/jackson.ts (we use Hanzo
IAM OIDC natively), features/dataroom-invitations, features/templates,
features/access-notifications, features/conversions, features/
permissions. Five of these were gated by lib/featureFlags, which reads
@vercel/edge-config and returns false for every flag when EDGE_CONFIG
is unset — every non-Vercel deployment we run. Those flags are gone too.

Deleted the commercial gating outright rather than reimplementing it:
lib/billing/legacy (ee/stripe) and lib/billing/limits (ee/limits), the
upgrade modals and banners, UpgradeButton, FeaturePreview, PlanBadge,
the trial and blocking modals, /settings/upgrade, /settings/billing and
the billing checkout/seat/pause/cancel API. usePlan() no longer returns
capability booleans — the plan tag describes provisioning, it is not a
permission — and useLimits() is gone with every quota check it fed.
Subscription pause went the same way. Also dropped the npm dependencies
that existed only for the removed features (@boxyhq/saml-jackson, the
@ai-sdk packages, openai, streamdown, use-stick-to-bottom,
@trigger.dev/python) and the Jackson-specific next.config webpack shims.

Rewritten as original Hanzo code where a capability was load-bearing:
- lib/utils/get-file-size-limits.ts — one UPLOAD_LIMITS set plus
  getFileSizeLimit(contentType), env-overridable. Operational limits,
  not commercial ones, so the tus and browser-upload paths still refuse
  oversized files without consulting a plan matrix.
- components/links/link-sheet/permissions-sheet.tsx — a flat, depth
  annotated item list with view/download switches over the same
  /permission-groups API. Two states, not three. ItemPermission now has
  a single definition in lib/types.ts.
- app/api/links/[id]/upload/route.ts — visitor uploads, built around one
  authorize() helper shared by GET and POST, and a notification debounce
  keyed per (link, viewer) instead of listing and cancelling runs.

There is now exactly one link sheet: the ee DataroomLinkSheet duplicated
the AGPL LinkSheet, which already handled DATAROOM_LINK. Replaced
upstream's Omit<LinkType, "WORKFLOW_LINK"> — Omit on a string union
yields an object type and never narrowed anything — with a real union.

Verified: the S3/tus upload+download harness passes 13/13 against MinIO
after the deletions, and tsc goes from 257 pre-existing errors on
origin/main to 192 with zero files worse than baseline.

Reasoning recorded in LLM.md. LICENSE untouched.

Co-authored-by: Hanzo Dev <[email protected]>
2026-08-03 20:19:21 -07:00

397 lines
10 KiB
TypeScript

import { NextApiRequest, NextApiResponse } from "next";
import { authOptions } from "@/pages/api/auth/[...nextauth]";
import { View } from "@prisma/client";
import { JsonValue } from "@prisma/client/runtime/library";
import { getServerSession } from "next-auth/next";
import { LIMITS } from "@/lib/constants";
import { errorhandler } from "@/lib/errorHandler";
import prisma from "@/lib/prisma";
import { getViewPageDuration } from "@/lib/tinybird";
import { getVideoEventsByDocument } from "@/lib/tinybird/pipes";
import { CustomUser } from "@/lib/types";
import { log } from "@/lib/utils";
type DocumentVersion = {
versionNumber: number;
createdAt: Date;
numPages: number | null;
type: string | null;
length: number | null;
};
type Document = {
id: string;
versions: DocumentVersion[];
numPages: number | null;
type: string | null;
ownerId: string | null;
_count: {
views: number;
};
};
type VideoEvent = {
view_id: string;
start_time: number;
end_time: number;
event_type: string;
};
type ViewWithExtras = View & {
link: { name: string | null };
feedbackResponse: {
id: string;
data: JsonValue;
} | null;
agreementResponse: {
id: string;
agreementId: string;
agreement: { name: string };
} | null;
};
async function getVideoViews(
views: ViewWithExtras[],
document: Document,
videoEvents: { data: VideoEvent[] },
) {
const durationsPromises = views.map((view) => {
const viewEvents =
videoEvents?.data.filter(
(event) =>
event.view_id === view.id &&
["played", "muted", "unmuted", "rate_changed"].includes(
event.event_type,
) &&
event.end_time > event.start_time &&
event.end_time - event.start_time >= 1,
) || [];
// Track timestamps and their frequency for total watch time
const timestampCounts = new Map<number, number>();
// Track unique timestamps for completion calculation
const uniqueTimestamps = new Set<number>();
// Calculate total watch time
// let totalWatchTime = 0;
viewEvents.forEach((event) => {
for (let t = event.start_time; t < event.end_time; t++) {
const timestamp = Math.floor(t);
// Count total occurrences including replays
timestampCounts.set(
timestamp,
(timestampCounts.get(timestamp) || 0) + 1,
);
// Track unique timestamps
uniqueTimestamps.add(timestamp);
}
});
// Sum up all timestamps including duplicates for total watch time
let totalWatchTime = 0;
timestampCounts.forEach((count) => {
totalWatchTime += count;
});
// Get the number of unique timestamps watched
const uniqueWatchTime = uniqueTimestamps.size;
return {
data: [],
totalWatchTime,
uniqueWatchTime,
videoLength: document.versions[0]?.length || 0,
};
});
const durations = await Promise.all(durationsPromises);
return views.map((view, index) => {
const relevantDocumentVersion = document.versions.find(
(version) => version.createdAt <= view.viewedAt,
);
const duration = durations[index];
const completionRate =
duration.videoLength > 0
? Math.min(100, (duration.uniqueWatchTime / duration.videoLength) * 100)
: 0;
return {
...view,
duration: durations[index],
totalDuration: duration.totalWatchTime * 1000, // convert to milliseconds
completionRate: completionRate.toFixed(),
versionNumber: relevantDocumentVersion?.versionNumber || 1,
versionNumPages: 0,
};
});
}
async function getDocumentViews(views: ViewWithExtras[], document: Document) {
const durationsPromises = views.map((view) => {
return getViewPageDuration({
documentId: document.id,
viewId: view.id,
since: 0,
});
});
const durations = await Promise.all(durationsPromises);
return views.map((view, index) => {
const relevantDocumentVersion = document.versions.find(
(version) => version.createdAt <= view.viewedAt,
);
const numPages =
relevantDocumentVersion?.numPages || document.numPages || 0;
const completionRate = numPages
? (durations[index].data.length / numPages) * 100
: 0;
return {
...view,
duration: durations[index],
totalDuration: durations[index].data.reduce(
(total: number, data: { sum_duration: number }) =>
total + data.sum_duration,
0,
),
completionRate: completionRate.toFixed(),
versionNumber: relevantDocumentVersion?.versionNumber || 1,
versionNumPages: numPages,
};
});
}
export default async function handle(
req: NextApiRequest,
res: NextApiResponse,
) {
if (req.method === "GET") {
const session = await getServerSession(req, res, authOptions);
if (!session) {
return res.status(401).end("Unauthorized");
}
const { teamId, id: docId } = req.query as { teamId: string; id: string };
// Parse and validate pagination parameters
const rawPage = Number.parseInt((req.query.page as string) || "1", 10);
const rawLimit = Number.parseInt((req.query.limit as string) || "10", 10);
// Apply defaults for invalid values and enforce constraints
const page = Number.isNaN(rawPage) || rawPage < 1 ? 1 : rawPage;
const limit =
Number.isNaN(rawLimit) || rawLimit < 1
? 10
: Math.min(Math.max(rawLimit, 1), 100); // Min 1, Max 100
const offset = (page - 1) * limit;
const userId = (session.user as CustomUser).id;
try {
const team = await prisma.team.findUnique({
where: {
id: teamId,
users: {
some: {
userId: userId,
},
},
},
select: {
plan: true,
pausedAt: true,
pauseStartsAt: true,
pauseEndsAt: true,
},
});
if (!team) {
return res.status(404).end("Team not found");
}
const document = await prisma.document.findUnique({
where: { id: docId, teamId: teamId },
select: {
id: true,
ownerId: true,
numPages: true,
type: true,
versions: {
orderBy: { createdAt: "desc" },
select: {
versionNumber: true,
createdAt: true,
numPages: true,
type: true,
length: true,
},
},
_count: {
select: {
views: true,
},
},
},
});
if (!document) {
return res.status(404).end("Document not found");
}
const pauseStartedAt = team.pauseStartsAt;
// Build where clause for views - if team is paused, only show views before pause date
const viewsWhereClause = {
documentId: docId,
isArchived: false,
...(pauseStartedAt && {
viewedAt: {
lt: pauseStartedAt,
},
}),
};
// Check if document has any views first to avoid expensive query
const viewCount = await prisma.view.count({
where: viewsWhereClause,
});
if (viewCount === 0) {
return res.status(200).json({
viewsWithDuration: [],
hiddenViewCount: 0,
totalViews: 0,
});
}
const views = await prisma.view.findMany({
skip: offset,
take: limit,
where: {
documentId: docId,
...(pauseStartedAt && {
viewedAt: {
lt: pauseStartedAt,
},
}),
},
orderBy: {
viewedAt: "desc",
},
include: {
link: {
select: {
name: true,
},
},
feedbackResponse: {
select: {
id: true,
data: true,
},
},
agreementResponse: {
select: {
id: true,
agreementId: true,
agreement: {
select: {
name: true,
},
},
},
},
},
});
if (!views) {
return res.status(404).end("Document has no views");
}
const users = await prisma.user.findMany({
where: {
teams: {
some: {
teamId: teamId,
},
},
},
select: {
email: true,
},
});
// Get total view count (including views after pause date for accurate count)
const totalViewCount = await prisma.view.count({
where: {
documentId: docId,
isArchived: false,
},
});
// Calculate hidden views due to pause (views after pause date)
const hiddenViewsFromPause = pauseStartedAt
? await prisma.view.count({
where: {
documentId: docId,
isArchived: false,
viewedAt: {
gte: pauseStartedAt,
},
},
})
: 0;
// filter the last 20 views for free plan
const limitedViews =
team.plan === "free" && offset >= LIMITS.views ? [] : views;
let viewsWithDuration;
if (document.type === "video") {
const videoEvents = await getVideoEventsByDocument({
document_id: docId,
});
viewsWithDuration = await getVideoViews(
limitedViews,
document,
videoEvents,
);
} else {
viewsWithDuration = await getDocumentViews(limitedViews, document);
}
// Add internal flag to all views
viewsWithDuration = viewsWithDuration.map((view) => ({
...view,
internal: users.some((user) => user.email === view.viewerEmail),
}));
// Calculate total hidden views (free plan limits + paused team filtering)
const hiddenFromFreePlan = views.length - limitedViews.length;
const totalHiddenViews = hiddenFromFreePlan + hiddenViewsFromPause;
return res.status(200).json({
viewsWithDuration,
hiddenViewCount: totalHiddenViews,
totalViews: totalViewCount,
hiddenFromPause: hiddenViewsFromPause, // Optional: to show specific pause-related hidden count
});
} catch (error) {
log({
message: `Failed to get views for document: _${docId}_. \n\n ${error} \n\n*Metadata*: \`{teamId: ${teamId}, userId: ${userId}}\``,
type: "error",
});
errorhandler(error, res);
}
} else {
res.setHeader("Allow", ["GET"]);
return res.status(405).end(`Method ${req.method} Not Allowed`);
}
}