feat: Subscriptions (#59)

apps/backend/api/src/api.ts

@@ -55,29 +55,6 @@ const fastifyTRPCOpenApiPlugin = <TRouter extends AnyRouter>(
   done();
 };
 const apiService = createPlugin(async (fastify) => {
-  const originCallback: OriginFunction = (origin, callback) => {
-    if (!origin || origin === "null") {
-      callback(null, true);
-
-      return;
-    }
-
-    const { hostname } = new URL(origin);
-    const appHostname = new URL(fastify.config.PUBLIC_APP_URL).hostname;
-
-    if (
-      hostname === "localhost" ||
-      hostname.endsWith(appHostname) ||
-      (fastify.config.VRITE_CLOUD && hostname.endsWith("swagger.io"))
-    ) {
-      callback(null, true);
-
-      return;
-    }
-
-    callback(new Error("Not allowed"), false);
-  };
-
   await fastify.register(rateLimitPlugin, {
     max: 500,
     timeWindow: "1 minute",

apps/backend/api/src/index.ts

@@ -10,7 +10,8 @@ import {
   pubSubPlugin,
   searchPlugin,
   sessionPlugin,
-  webhooksPlugin
+  webhooksPlugin,
+  billingPlugin
 } from "@vrite/backend";
 
 (async () => {
@@ -22,6 +23,7 @@ import {
     await server.register(gitSyncPlugin);
     await server.register(searchPlugin);
     await server.register(webhooksPlugin);
+    await server.register(billingPlugin);
   });
 
   await server.register(apiService);

apps/backend/app/src/index.ts

@@ -1,5 +1,5 @@
 import { appService } from "./app";
-import { createServer, webhooksPlugin } from "@vrite/backend";
+import { billingPlugin, createServer, webhooksPlugin } from "@vrite/backend";
 import {
   databasePlugin,
   pubSubPlugin,
@@ -21,6 +21,7 @@ import {
     await server.register(searchPlugin);
     await server.register(webhooksPlugin);
     await server.register(s3Plugin);
+    await server.register(billingPlugin);
   });
 
   await server.register(appService);

apps/backend/collaboration/src/writing.ts

@@ -39,6 +39,10 @@ const writingPlugin = createPlugin(async (fastify) => {
         data.connection.readOnly = true;
       }
 
+      if (fastify.hostConfig.billing && !sessionData.subscriptionPlan) {
+        data.connection.readOnly = true;
+      }
+
       return sessionData;
     },
     extensions: [

apps/backend/usage-reporting/Dockerfile

@@ -0,0 +1,37 @@
+FROM node:18-alpine as base
+
+FROM base AS builder
+WORKDIR /app
+RUN apk add --no-cache libc6-compat && npm install -g turbo
+
+COPY . .
+
+RUN turbo prune --scope=@vrite/usage-reporting --docker
+
+
+FROM base as installer
+WORKDIR /app
+
+RUN npm install -g [email protected]
+RUN npm install -g turbo
+
+COPY --from=builder /app/out/json/ .
+COPY --from=builder /app/out/pnpm-lock.yaml ./pnpm-lock.yaml
+RUN pnpm i --frozen-lockfile
+
+COPY --from=builder /app/out/full/ .
+
+RUN pnpm rebuild -r
+RUN turbo run build --filter=@vrite/usage-reporting
+
+FROM base AS runner
+WORKDIR /app
+
+# Install extra dependencies
+RUN npm install saslprep
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 app
+
+USER app
+COPY --from=installer --chown=app:nodejs /app/apps/backend/usage-reporting/dist .
+CMD node index.js

apps/backend/usage-reporting/LICENSE.md

@@ -0,0 +1,93 @@
+Copyright (c) 2024 Vrite, Inc.
+
+Elastic License 2.0
+
+## Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+## Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject to
+the limitations and conditions below.
+
+## Limitations
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial set of
+the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key functionality
+in the software, and you may not remove or obscure any functionality in the
+software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other notices
+of the licensor in the software. Any use of the licensor’s trademarks is subject
+to applicable law.
+
+## Patents
+
+The licensor grants you a license, under any patent claims the licensor can
+license, or becomes able to license, to make, have made, use, sell, offer for
+sale, import and have imported the software, in each case subject to the
+limitations and conditions in this license. This license does not cover any
+patent claims that you cause to be infringed by modifications or additions to
+the software. If you or your company make any written claim that the software
+infringes or contributes to infringement of any patent, your patent license for
+the software granted under these terms ends immediately. If your company makes
+such a claim, your patent license ends immediately for work on behalf of your
+company.
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software from you
+also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of the
+software prominent notices stating that you have modified the software.
+
+## No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+these terms.
+
+## Termination
+
+If you use the software in violation of these terms, such use is not licensed,
+and your licenses will automatically terminate. If the licensor provides you
+with a notice of your violation, and you cease all violation of this license no
+later than 30 days after you receive that notice, your licenses will be
+reinstated retroactively. However, if you violate these terms after such
+reinstatement, any additional violation of these terms will cause your licenses
+to terminate automatically and permanently.
+
+## No Liability
+
+_As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising
+out of these terms or the use or nature of the software, under any kind of
+legal claim._
+
+## Definitions
+
+The **licensor** is the entity offering these terms, and the **software** is the
+software the licensor makes available under these terms, including any portion
+of it.
+
+**you** refers to the individual or entity agreeing to these terms.
+
+**your company** is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control over,
+are under the control of, or are under common control with that
+organization. **control** means ownership of substantially all the assets of an
+entity, or the power to direct its management and policies by vote, contract, or
+otherwise. Control can be direct or indirect.
+
+**your licenses** are all the licenses granted to you for the software under
+these terms.
+
+**use** means anything you do with the software requiring one of your licenses.
+
+**trademark** means trademarks, service marks, and similar rights.

apps/backend/usage-reporting/package.json

@@ -0,0 +1,21 @@
+{
+  "name": "@vrite/usage-reporting",
+  "private": true,
+  "source": "src/index.ts",
+  "main": "index.ts",
+  "scripts": {
+    "build": "scripts build-node src/index.ts",
+    "start": "node ./dist/index.js"
+  },
+  "dependencies": {
+    "@fastify/cors": "^9.0.1",
+    "@fastify/rate-limit": "^9.1.0",
+    "@trpc/server": "^10.45.0",
+    "@vrite/backend": "workspace:*",
+    "fastify": "^4.26.0",
+    "trpc-openapi": "^1.2.0"
+  },
+  "devDependencies": {
+    "@vrite/scripts": "workspace:*"
+  }
+}

apps/backend/usage-reporting/src/index.ts

@@ -0,0 +1,18 @@
+import { createServer, databasePlugin, pubSubPlugin, billingPlugin } from "@vrite/backend";
+
+(async () => {
+  await createServer(async (server) => {
+    await server.register(databasePlugin);
+    await server.register(pubSubPlugin);
+    await server.register(billingPlugin);
+
+    const usageLogs = await server.billing.usage.getLogs();
+
+    await Promise.all(
+      Object.keys(usageLogs).map(async (workspaceId) => {
+        await server.billing.usage.record(workspaceId);
+      })
+    );
+    process.exit(0);
+  });
+})();

apps/backend/usage-reporting/tsconfig.json

@@ -0,0 +1,16 @@
+{
+  "compilerOptions": {
+    "target": "ESNext",
+    "module": "ESNext",
+    "esModuleInterop": true,
+    "moduleResolution": "node",
+    "isolatedModules": true,
+    "strict": true,
+    "outDir": "build",
+    "skipLibCheck": true,
+    "paths": {
+      "#*": ["./src/*"]
+    }
+  },
+  "include": ["src/**/*.ts"]
+}

apps/web/src/app.tsx

@@ -1,9 +1,13 @@
 import { Component, Match, ParentComponent, Show, Switch, lazy } from "solid-js";
 import { Route, Router } from "@solidjs/router";
+import RelativeTimePlugin from "dayjs/plugin/relativeTime";
+import dayjs from "dayjs";
 import { StandaloneLayout, SecuredLayout } from "#layout";
 import { isEditorApp } from "#lib/utils";
 import { useHostConfig } from "#context";
 
+dayjs.extend(RelativeTimePlugin);
+
 const AuthView = lazy(async () => {
   const { AuthView } = await import("#views/auth");
 

apps/web/src/context/authenticated-user-data.tsx

@@ -11,7 +11,7 @@ import {
   useContext
 } from "solid-js";
 import { useNavigate, useLocation } from "@solidjs/router";
-import { App, useClient } from "#context";
+import { App, useClient, useHostConfig } from "#context";
 
 interface AuthenticatedUserDataContextValue {
   userSettings: Accessor<App.AppearanceSettings | null>;
@@ -21,6 +21,11 @@ interface AuthenticatedUserDataContextValue {
   workspaceSettings: Accessor<App.WorkspaceSettings | null>;
   role: Accessor<App.ExtendedRole<"baseType"> | null>;
   deletedTags: Accessor<string[]>;
+  subscription: Accessor<{
+    status: string;
+    expiresAt: string;
+    plan?: string | undefined;
+  } | null>;
   currentWorkspaceId: Accessor<string | null>;
 }
 
@@ -30,6 +35,16 @@ const AuthenticatedUserDataProvider: ParentComponent = (props) => {
   const navigate = useNavigate();
   const location = useLocation();
   const [deletedTags, setDeletedTags] = createSignal<string[]>([]);
+  const [subscription] = createResource(
+    async () => {
+      try {
+        return await client.billing.subscription.query();
+      } catch (error) {
+        return null;
+      }
+    },
+    { initialValue: null }
+  );
   const [currentWorkspaceId] = createResource<string | null>(
     async () => {
       try {
@@ -91,7 +106,8 @@ const AuthenticatedUserDataProvider: ParentComponent = (props) => {
       membership.loading ||
       workspace.loading ||
       workspaceSettings.loading ||
-      role.loading
+      role.loading ||
+      subscription.loading
     );
   };
 
@@ -218,6 +234,7 @@ const AuthenticatedUserDataProvider: ParentComponent = (props) => {
             profile,
             membership,
             workspace,
+            subscription,
             workspaceSettings,
             role,
             deletedTags,
@@ -233,8 +250,13 @@ const AuthenticatedUserDataProvider: ParentComponent = (props) => {
 const useAuthenticatedUserData = (): AuthenticatedUserDataContextValue => {
   return useContext(AuthenticatedContext)!;
 };
-const hasPermission = (permission: App.Permission): boolean => {
-  const { role } = useAuthenticatedUserData();
+const hasPermission = (permission: App.Permission, ignoreSubscription?: boolean): boolean => {
+  const { role, subscription } = useAuthenticatedUserData();
+  const hostConfig = useHostConfig();
+
+  if (hostConfig.billing && !ignoreSubscription && subscription() && !subscription()?.plan) {
+    return false;
+  }
 
   return role()?.permissions.includes(permission) || role()?.baseType === "admin" || false;
 };