Uh oh!
There was an error while loading. Please reload this page.
v5 (#1097) - #1106
Merged
Merged
Conversation
Contributor
Important Review skippedToo many files! This PR contains 284 files, which is 134 over the limit of 150. To get a review, narrow the scope: ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: ⛔ Files ignored due to path filters (16)
📒 Files selected for processing (284)
You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Contributor
License Audit
Weak Copyleft Packages (informational)
Resolved Packages (11)
|
* wip * remove unused hook * Add collapse sidebar button * refactor settings into sidebar as a override context * chat thread styling * notification dot * improved rendering * fix light mode * imporved api key page * add chats page * not found nit * guest sidebar footer * add tooltip for sidebar collapse button * nit * onboard nit * fix permission sync banner * what's new * profile settings * home view settings * general settings * remove shadow * changelog * feedback
* wip on service ping
* add concept of License to the database and wire it into the enitlements system
* wip on e2e checkout flow
* basic card to display current plan
* store activation code at rest
* add manage subscription button
* wip on lighthouse client
* wip on lighthouse client
* remove the concept of a plan and just rely on entitlements at the app layer
* fix sidebar
* add temporary refresh license button
* clarified org availability design
* entitlements naming nit
* remove concept of a GUEST user
* remove anonymous-access entitlement
* change offline license to support optional seats
* handle license validation for all paths
* refactor some actions
* add explicit service ping calls to user <> organization update paths
* fix refresh bug with sidebar
* add billing details card
* fix invite redemption when user already a member
User was hitting a unique constraint on UserToOrg(orgId, userId) when
redeeming an invite, because onCreateUser auto-joins new signups in
self-serve mode and redeemInvite then tried to create the same row.
Make the insert idempotent via upsert so the downstream AccountRequest
and invite cleanup still runs.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* wip on license card
* further wip on license card / activaction code card
* add recent invoices UI
* nit on seats terminology
* feat(web): surface subscription cancellation on license card
Adds cancelAt to the License model and the lighthouse ping schema, and
renders "Cancels on <date>" on the current plan card when there's no
upcoming renewal. Prefers "Next renewal" when Stripe still has an
upcoming invoice — so subscriptions scheduled to end after the next
billing cycle keep showing the renewal row.
Also makes nextRenewalAt / nextRenewalAmount nullable to match the
lighthouse response, and guards new Date() against null in servicePing.
Adds a CLAUDE.md under the lighthouse feature folder pointing at the
service repo so the two schemas stay in lockstep.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* feat(web): add offline license card to settings
Renders a dedicated card for offline (SOURCEBOT_EE_LICENSE_KEY) licenses
showing the license id, seat cap, and expiry. When an offline license
is present, the page skips the online license lookup entirely to mirror
the precedence in entitlements.ts.
Also adds a header row with a mailto link to support and an "All plans"
shortcut to the public pricing page.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* feat(web): banner system for license + permission sync
Introduces a priority-ordered, single-slot banner system under
(app)/components/banners/. A server-side resolver picks the highest-priority
banner that matches the current context (role, license state, offline
license, permission-sync status) and renders it through a shared BannerShell
that handles per-day dismissal via cookies.
Banners included:
- License expired (everyone, non-dismissible, role-aware copy)
- License expiry heads-up (owner, dismissible, 14d window, uses
formatDistance for relative copy)
- Invoice past due (owner, non-dismissible)
- Permission sync pending (everyone, non-dismissible, migrated from the
prior standalone component through BannerShell)
Precedence mirrors entitlements.ts: offline license is the sole source
of truth when present, so online billing state is ignored.
Also splits getValidOfflineLicense into a decode-only path so
getOfflineLicenseMetadata can surface expired licenses to the UI.
Includes bannerResolver.test.ts covering priority, audience filtering,
dismissal filtering, offline/online expiry rules, and permission sync.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* handle failure case where lighthouse cannot be reached
* chore(web): mirror lighthouse trial + checkout schema changes
Adds trialEnd to the ping response schema and installId / requestTrial
to the checkout request schema so types match the lighthouse service.
createCheckoutSession passes the instance's SOURCEBOT_INSTALL_ID and
defaults requestTrial to false (the existing "upgrade" button is not
a trial path).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* feat(web): trial banner + plumbing
Adds a trial banner to the owner-facing banner stack and the
surrounding plumbing:
- Schema: License.trialEnd, License.hasPaymentMethod, Org.trialUsedAt
(durable flag that survives license deactivation). Two migrations.
- servicePing persists trialEnd / hasPaymentMethod and flips
Org.trialUsedAt on first trial sync.
- Trial banner (owner, dismissible, priority 25): title uses
formatDistance ("Your trial ends in 10 days"); copy + action branch
on hasPaymentMethod. With-PM variant links to /settings/license;
no-PM variant opens the Stripe portal via a new
OpenBillingPortalButton (LoadingButton + createPortalSession).
- currentPlanCard gains a "Trial ends on" fallback column for the
trial-without-PM case (where nextRenewalAt is null).
- activationCodeCard accepts isTrialEligible and flips its checkout
button from "Purchase a license" to "Start a free trial" when the
org hasn't trialed yet, passing requestTrial through to the checkout
endpoint.
- Types mirror the new lighthouse fields (trialEnd, hasPaymentMethod)
and the checkout request additions (installId, requestTrial).
Side-trips to Stripe (portal, checkout) now append ?refresh=true so
the license resyncs on return; trial-checkout also appends
?trial_used=true so Org.trialUsedAt flips immediately (closes the UX
gap between checkout completion and activation-code entry). page.tsx
handles both params, preserves any other query params, and redirects
to a clean URL.
Also: fetchWithRetry now only retries 5xx, 408, and 429 — 4xx errors
(e.g. TRIAL_ALREADY_USED at 409) propagate immediately instead of
retrying pointlessly.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* add badges to invoice cards
* add basic billing docs
* refactor(lighthouse): throw ServiceErrorException on ping failure
syncWithLighthouse previously swallowed ping errors with a log and early
return, which masked real problems. Flip the model: on a lighthouse
ServiceError response, throw ServiceErrorException. The sew() middleware
already knows how to marshal that into an API response for user-initiated
paths.
Callers fall into two camps:
- Propagate (user-initiated): activateLicense and refreshLicense. The
existing try/catch in activateLicense now correctly rolls back the
license row when lighthouse rejects the activation code; refreshLicense
lets the throw propagate so the UI surfaces a toast.
- Swallow explicitly (background / side-effect): license page load, the
24h cron, user-approval, and signup paths all wrap with
`.catch(() => { /* ignore */ })`. These happen as a side effect of
other successful operations; a ping failure shouldn't block them.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* feedback
* fix tests
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
* wip on reactivation flow * add banner for license bound to another instance error case
* s * changelog
brendan-kellam
marked this pull request as ready for review
May 21, 2026 21:34
* wip on upsell dialog * rename to upsell dialog * use dynamic prices * further polish w.r.t., how we hydrate the client with offer information * feedback
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…r upsell without a resatrt
* fix(web): prevent top banner from pushing the chat prompt off-screen Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * feedback --------- Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Co-authored-by: Brendan Kellam <brendan@sourcebot.dev>
The code preview panel now persists the scroll position per file/revision to sessionStorage and restores it on mount. Restoration is skipped when a highlight_range query param is present so the existing highlight scroll-into-view takes precedence. Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…ers (#1262) Switches the safe.directory "*" config from --global (only written to /root/.gitconfig) to --system (/etc/gitconfig) so it applies regardless of which user runs git. The image intentionally sets no USER directive and can be run as an arbitrary --user, where the global config was never read, leaving the "dubious ownership" error unfixed. Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
) * chore: remove embedded Postgres and Redis from the Docker image As of v5, Sourcebot no longer ships an embedded Postgres or Redis. External instances are now required via DATABASE_URL and REDIS_URL. - Dockerfile: drop postgresql16/redis packages, DATABASE_DATA_DIR/ REDIS_DATA_DIR env, postgres/redis users, and /run/postgresql setup - entrypoint.sh: hard-fail with guidance when DATABASE_URL/REDIS_URL are unset; remove embedded init/startup blocks - supervisord.conf: remove the redis program - docs: mark DATABASE_URL/REDIS_URL required, drop data-dir vars, document the breaking change and data migration in the v4-to-v5 guide - CHANGELOG: note the breaking change Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * docs: point CHANGELOG entry at PR #1264 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * changelog * docs: expand v4-to-v5 guide; require AUTH_SECRET and SOURCEBOT_ENCRYPTION_KEY - entrypoint.sh: require AUTH_SECRET and SOURCEBOT_ENCRYPTION_KEY explicitly (no auto-generation, no plaintext file loading); hard-fail with migration guidance and warn if the legacy plaintext files linger - v4-to-v5 guide: document the secrets, role-management, and external Postgres/Redis breaking changes with per-item migration steps - environment-variables: mark both secrets required - roles-and-permissions: add default-role-by-plan table - CHANGELOG: update breaking-change entries Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * docs nit * changelog nit * final nits --------- Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
…ces (#1267) * feat(web): graceful error and loading states for billing/offers surfaces Replace silent `null` returns with recoverable error states when the offers fetch fails, across onboarding, the upsell dialog/panel, and feature gates: - Onboarding trial step: reframe the error copy and add a "View pricing" link. - UpsellDialog / UpsellPanel: shared UpsellLoadError fallback with a retry, Status page link, and role-aware copy (owners get an outbound-access hint to deployments.sourcebot.dev + Learn more; members are routed to their admin). - UpsellPanel: add a `loadingVariant` prop so full-area feature gates render a centered spinner while the in-flow license card keeps its skeleton. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * nit --------- Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* Add scopes as part of the prisma schema * Add MCP OAuth scope discovery and selection * Refactor MCP scopes into configurable entries * Refactor MCP server tool data table * Add MCP server tool permissions * Cache MCP tool definitions in Redis * Auto-save MCP tool permission changes * Avoid expensive tool fetch after updating tool permissions. Just update react query cache instead * deduplicate some code for cleanliness * Squash prisma migrations. Update redis cache for mcp tools to be per user, 1h time out * update prisma migrations * Update mcpScope to be referred to as mcpOAuthScope across the codebase * Add documentation for scopes and permissions * Update docs to say Ask Sourcebot --------- Co-authored-by: Jack Minnetian <270441393+BlueBottleLatte@users.noreply.github.com>
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.