texlite 0.11.0 → 0.13.0

package/dist/server/git.js

@@ -22,6 +22,7 @@ export class ProjectGitService {
         await this.ensureGitAvailable();
         assertNoSourceSymlinks(this.config, project.id);
         const settings = this.settings(project.id);
+        const account = this.userSettings(project.owner_id);
         const gitDirectory = path.join(sourceRoot(this.config, project.id), ".git");
         let gitStat = null;
         try {
@@ -37,8 +38,8 @@ export class ProjectGitService {
         if (!initialized)
             return {
                 initialized: false,
-                tokenConfigured: Boolean(settings?.token_ciphertext),
-                githubLogin: settings?.github_login ?? null,
+                tokenConfigured: Boolean(account?.token_ciphertext),
+                githubLogin: account?.github_login ?? null,
                 remoteUrl: settings?.remote_url ?? null,
                 repositoryName: settings?.repository_name ?? null,
                 repositoryHtmlUrl: settings?.repository_html_url ?? null,
@@ -56,11 +57,17 @@ export class ProjectGitService {
         const branch = branchResult.code === 0 ? branchResult.stdout.trim() : null;
         const remoteResult = await this.git(root, ["remote", "get-url", "origin"], [2]);
         const latestResult = await this.git(root, ["log", "-1", "--format=%H%x1f%h%x1f%an%x1f%ae%x1f%aI%x1f%s"], [128]);
-        const aheadResult = await this.git(root, ["rev-list", "--count", "@{upstream}..HEAD"], [128]);
+        const upstreamResult = branch
+            ? await this.git(root, ["rev-parse", "--abbrev-ref", "--symbolic-full-name", "@{upstream}"], [128])
+            : null;
+        // A newly initialized backup repository has no upstream until its first
+        // push. In that case, every local commit is pending for the remote.
+        const aheadRevision = upstreamResult?.code === 0 ? "@{upstream}..HEAD" : "HEAD";
+        const aheadResult = branch ? await this.git(root, ["rev-list", "--count", aheadRevision], [128]) : null;
         return {
             initialized: true,
-            tokenConfigured: Boolean(settings?.token_ciphertext),
-            githubLogin: settings?.github_login ?? null,
+            tokenConfigured: Boolean(account?.token_ciphertext),
+            githubLogin: account?.github_login ?? null,
             remoteUrl: settings?.remote_url ?? (remoteResult.code === 0 ? remoteResult.stdout.trim() : null),
             repositoryName: settings?.repository_name ?? null,
             repositoryHtmlUrl: settings?.repository_html_url ?? null,
@@ -69,41 +76,43 @@ export class ProjectGitService {
             dirty: Boolean(porcelain),
             restorable: porcelain.split("\n").some((line) => Boolean(line) && !line.startsWith("??")),
             changedFiles: porcelain ? porcelain.split("\n").length : 0,
-            ahead: aheadResult.code === 0 ? Number.parseInt(aheadResult.stdout.trim(), 10) || 0 : 0,
+            ahead: aheadResult?.code === 0 ? Number.parseInt(aheadResult.stdout.trim(), 10) || 0 : 0,
             latestCommit: latestResult.code === 0 ? parseCommit(latestResult.stdout.trim()) : null
         };
     }
-    async configureToken(project, tokenInput) {
+    githubAccountStatus(userId) {
+        const settings = this.userSettings(userId);
+        return { tokenConfigured: Boolean(settings?.token_ciphertext), githubLogin: settings?.github_login ?? null };
+    }
+    async configureUserToken(userId, tokenInput) {
         const token = tokenInput.trim();
         if (token.length < 20 || token.length > 500)
             throw httpError(400, "GIT_TOKEN_INVALID");
-        await this.ensureGitAvailable();
         const account = await this.githubRequest(token, "/user", { method: "GET" });
         if (typeof account.login !== "string" || !account.login)
             throw httpError(502, "GIT_ACCOUNT_INVALID");
-        await this.ensureRepository(project);
         const timestamp = new Date().toISOString();
-        this.db.prepare(`INSERT INTO project_git_settings
-      (project_id, token_ciphertext, github_login, default_branch, created_at, updated_at)
-      VALUES (?, ?, ?, 'main', ?, ?)
-      ON CONFLICT(project_id) DO UPDATE SET token_ciphertext = excluded.token_ciphertext,
+        this.db.prepare(`INSERT INTO user_github_settings
+      (user_id, token_ciphertext, github_login, created_at, updated_at)
+      VALUES (?, ?, ?, ?, ?)
+      ON CONFLICT(user_id) DO UPDATE SET token_ciphertext = excluded.token_ciphertext,
         github_login = excluded.github_login, updated_at = excluded.updated_at`)
-            .run(project.id, encryptToken(this.config, token), account.login, timestamp, timestamp);
-        return this.status(project);
+            .run(userId, encryptToken(this.config, token), account.login, timestamp, timestamp);
+        return this.githubAccountStatus(userId);
     }
-    async removeToken(project) {
-        this.db.prepare("UPDATE project_git_settings SET token_ciphertext = NULL, github_login = NULL, updated_at = ? WHERE project_id = ?")
-            .run(new Date().toISOString(), project.id);
-        return this.status(project);
+    removeUserToken(userId) {
+        this.db.prepare("DELETE FROM user_github_settings WHERE user_id = ?").run(userId);
+        return this.githubAccountStatus(userId);
     }
     async createGitHubRepository(project, name, isPrivate) {
         if (!/^[A-Za-z0-9._-]{1,100}$/.test(name))
             throw httpError(400, "GIT_REPOSITORY_NAME_INVALID");
         await this.ensureGitAvailable();
-        const settings = this.requireTokenSettings(project.id);
-        if (settings.remote_url)
+        const account = this.requireUserTokenSettings(project.owner_id);
+        const settings = this.settings(project.id);
+        if (settings?.remote_url)
             throw httpError(409, "GIT_REMOTE_ALREADY_CONFIGURED");
-        const token = decryptToken(this.config, settings.token_ciphertext);
+        const token = decryptToken(this.config, account.token_ciphertext);
         const repository = await this.githubRequest(token, "/user/repos", {
             method: "POST",
             body: JSON.stringify({ name, private: isPrivate, auto_init: false, description: `Backup of ${project.name}` })
@@ -112,6 +121,7 @@ export class ProjectGitService {
             throw httpError(502, "GIT_REPOSITORY_RESPONSE_INVALID");
         }
         await this.ensureRepository(project);
+        this.ensureProjectSettings(project.id);
         const root = sourceRoot(this.config, project.id);
         const currentRemote = await this.git(root, ["remote", "get-url", "origin"], [2]);
         if (currentRemote.code === 0)
@@ -149,8 +159,8 @@ export class ProjectGitService {
         return parseCommit(result.stdout.trim());
     }
     async push(project) {
-        const settings = this.requireTokenSettings(project.id);
-        if (!settings.remote_url)
+        const account = this.requireUserTokenSettings(project.owner_id);
+        if (!this.settings(project.id)?.remote_url)
             throw httpError(409, "GIT_REMOTE_NOT_CONFIGURED");
         const root = this.requireRepository(project.id);
         assertNoSourceSymlinks(this.config, project.id);
@@ -163,7 +173,7 @@ export class ProjectGitService {
         const branch = branchResult.stdout.trim();
         if (!/^[A-Za-z0-9._/-]+$/.test(branch))
             throw httpError(400, "GIT_BRANCH_INVALID");
-        const token = decryptToken(this.config, settings.token_ciphertext);
+        const token = decryptToken(this.config, account.token_ciphertext);
         await this.git(root, ["push", "--set-upstream", "origin", `HEAD:refs/heads/${branch}`], [], this.authEnvironment(token));
         return this.status(project);
     }
@@ -269,12 +279,20 @@ export class ProjectGitService {
     settings(projectId) {
         return this.db.prepare("SELECT * FROM project_git_settings WHERE project_id = ?").get(projectId);
     }
-    requireTokenSettings(projectId) {
-        const settings = this.settings(projectId);
+    userSettings(userId) {
+        return this.db.prepare("SELECT * FROM user_github_settings WHERE user_id = ?").get(userId);
+    }
+    requireUserTokenSettings(userId) {
+        const settings = this.userSettings(userId);
         if (!settings?.token_ciphertext)
             throw httpError(409, "GIT_TOKEN_NOT_CONFIGURED");
         return settings;
     }
+    ensureProjectSettings(projectId) {
+        const timestamp = new Date().toISOString();
+        this.db.prepare(`INSERT INTO project_git_settings (project_id, default_branch, created_at, updated_at)
+      VALUES (?, 'main', ?, ?) ON CONFLICT(project_id) DO NOTHING`).run(projectId, timestamp, timestamp);
+    }
     async verifyCommit(root, revision) {
         const result = await this.git(root, ["rev-parse", "--verify", `${revision}^{commit}`], [128]);
         if (result.code !== 0)
@@ -303,7 +321,10 @@ export class ProjectGitService {
                 }
             });
             if (!response.ok) {
-                throw httpError(response.status === 401 || response.status === 403 ? 400 : 502, response.status === 401 || response.status === 403 ? "GIT_TOKEN_REJECTED" : "GIT_OPERATION_FAILED");
+                const authError = classifyGitHubAuthFailure(response.status);
+                if (authError)
+                    throw httpError(400, authError);
+                throw httpError(502, "GIT_OPERATION_FAILED");
             }
             return await response.json();
         }
@@ -376,13 +397,27 @@ export class ProjectGitService {
                 if (size > MAX_COMMAND_OUTPUT)
                     return reject(httpError(413, "GIT_OUTPUT_TOO_LARGE"));
                 if (result.code !== 0 && !allowedCodes.includes(result.code)) {
-                    return reject(httpError(400, "GIT_COMMAND_FAILED"));
+                    const pushAuthError = args[0] === "push" ? classifyGitPushFailure(result.stderr) : null;
+                    return reject(httpError(400, pushAuthError ?? "GIT_COMMAND_FAILED"));
                 }
                 resolve(result);
             });
         });
     }
 }
+function classifyGitHubAuthFailure(status) {
+    // GitHub's 401/403 responses do not reliably distinguish invalid or expired
+    // credentials from insufficient repository access (including SSO/policy
+    // restrictions), so give users one actionable message for these cases.
+    return status === 401 || status === 403 ? "GIT_TOKEN_REJECTED" : null;
+}
+export function classifyGitPushFailure(stderr) {
+    if (/saml|single[- ]sign[- ]on|\bsso\b/i.test(stderr) ||
+        /invalid username or token|bad credentials|authentication failed|could not read username/i.test(stderr) ||
+        /write access.{0,80}(?:not granted|denied)|permission to .{1,200} denied|repository not found|returned error:\s*403/i.test(stderr))
+        return "GIT_TOKEN_REJECTED";
+    return null;
+}
 function parseCommit(line) {
     const [sha = "", shortSha = "", authorName = "", authorEmail = "", authoredAt = "", ...message] = line.split("\x1f");
     return { sha, shortSha, authorName, authorEmail, authoredAt, message: message.join("\x1f") };

package/dist/server/harper.js

@@ -115,6 +115,20 @@ export class HarperService {
     async preload() {
         await this.ensureAvailable();
     }
+    /** Availability probe only; does not run a writing check or join its queue. */
+    async isAvailable() {
+        if (this.disposed)
+            return false;
+        try {
+            await this.ensureAvailable();
+            return !this.disposed;
+        }
+        catch (error) {
+            if (error instanceof HarperUnavailableError)
+                return false;
+            throw error;
+        }
+    }
     /**
      * Schedule one host-side check. A lane represents one browser page's
      * current file, so an edit can replace only its own stale waiting request

package/dist/server/history.js

@@ -4,6 +4,8 @@ import { createHash, randomUUID } from "node:crypto";
 import { assertNoSourceSymlinks, listProjectFiles, outputRoot, projectRoot, resolveSourcePath, safeRelativePath, sourceRoot } from "./files.js";
 import { httpError } from "./http.js";
 import { MAX_TEXT_PREVIEW_BYTES } from "./limits.js";
+import { isUtf8 } from "node:buffer";
+import { isHistoryTextFile } from "../shared/historyFiles.js";
 const AUTOSAVE_COALESCE_MS = 2 * 60_000;
 // Logical stored payload; SQLite pages, indexes and WAL are shared database overhead.
 function historyMetadataBytes(row) {
@@ -39,7 +41,9 @@ export class ProjectHistoryService {
             }
         }
         const changedPaths = previousManifest ? changedManifestPaths(previousManifest, manifest) : Object.keys(manifest.files).sort();
-        if (previousManifest && changedPaths.length === 0 && JSON.stringify(previousManifest.settings) === JSON.stringify(manifest.settings)) {
+        // Settings alone do not create a file-history entry. Keep the baseline
+        // current so the next real file change captures the effective settings.
+        if (changedPaths.length === 0) {
             this.saveBaseline(projectId, manifest);
             return null;
         }
@@ -72,7 +76,8 @@ export class ProjectHistoryService {
     list(projectId, limit = 100) {
         const rows = this.db.prepare(`SELECT history.*, user.username AS author_username, user.display_name AS author_name
       FROM project_history_versions history LEFT JOIN users user ON user.id = history.author_id
-      WHERE history.project_id = ? ORDER BY history.created_at DESC, history.rowid DESC LIMIT ?`)
+      WHERE history.project_id = ? AND json_array_length(history.changed_paths_json) > 0
+      ORDER BY history.created_at DESC, history.rowid DESC LIMIT ?`)
             .all(projectId, Math.min(200, Math.max(1, limit)));
         return rows.map((row) => versionJson(row));
     }
@@ -97,7 +102,7 @@ export class ProjectHistoryService {
         const rows = this.db.prepare(`SELECT history.*, history.rowid AS history_rowid,
       user.username AS author_username, user.display_name AS author_name
       FROM project_history_versions history LEFT JOIN users user ON user.id = history.author_id
-      WHERE history.project_id = ? ${cursorFilter}
+      WHERE history.project_id = ? AND json_array_length(history.changed_paths_json) > 0 ${cursorFilter}
       ORDER BY history.created_at DESC, history.rowid DESC LIMIT ?`)
             .all(...values);
         const pageRows = rows.slice(0, limitValue);
@@ -231,7 +236,8 @@ export class ProjectHistoryService {
     previousVersion(projectId, versionId) {
         const row = this.db.prepare(`SELECT older.id FROM project_history_versions older
       JOIN project_history_versions selected ON selected.id = ? AND selected.project_id = older.project_id
-      WHERE older.project_id = ? AND (older.created_at < selected.created_at
+      WHERE older.project_id = ? AND json_array_length(older.changed_paths_json) > 0
+        AND (older.created_at < selected.created_at
         OR (older.created_at = selected.created_at AND older.rowid < selected.rowid))
       ORDER BY older.created_at DESC, older.rowid DESC LIMIT 1`).get(versionId, projectId);
         return row ? this.version(row.id, projectId) : null;
@@ -243,6 +249,8 @@ export class ProjectHistoryService {
     }
     readTextFile(projectId, versionId, filePathInput) {
         const filePath = safeRelativePath(filePathInput);
+        if (!isHistoryTextFile(filePath))
+            return null;
         const entry = this.manifest(projectId, versionId)?.files[filePath];
         if (!entry || entry.size > MAX_TEXT_PREVIEW_BYTES)
             return null;
@@ -364,7 +372,8 @@ export class ProjectHistoryService {
      */
     readStoredObject(projectId, digest, filePath) {
         try {
-            return fs.readFileSync(this.objectPath(projectId, digest), "utf8");
+            const bytes = fs.readFileSync(this.objectPath(projectId, digest));
+            return !bytes.includes(0) && isUtf8(bytes) ? bytes.toString("utf8") : null;
         }
         catch (error) {
             this.rethrowHistoryObjectError(error, filePath);

package/dist/server/i18n.js

@@ -46,7 +46,7 @@ const enMessages = {
     GIT_REVISION_INVALID: "Choose a Git revision to check out.",
     GIT_TOKEN_INVALID: "Enter a GitHub token.",
     GIT_TOKEN_NOT_CONFIGURED: "Configure a GitHub token first.",
-    GIT_TOKEN_REJECTED: "GitHub rejected this token. Check its permissions and try again.",
+    GIT_TOKEN_REJECTED: "GitHub rejected this token. It may be invalid, expired, or lack the required permissions.",
     GIT_UNAVAILABLE: "Git is not available on this server.",
     HARPER_UNAVAILABLE: "Harper spelling and grammar checking is temporarily unavailable.",
     HISTORY_FILE_NOT_FOUND: "The historical file does not exist.",
@@ -183,7 +183,7 @@ const zhMessages = {
     GIT_REVISION_INVALID: "请选择要 checkout 的 Git 版本。",
     GIT_TOKEN_INVALID: "请输入 GitHub token。",
     GIT_TOKEN_NOT_CONFIGURED: "请先配置 GitHub token。",
-    GIT_TOKEN_REJECTED: "GitHub 拒绝了该 token，请检查权限后重试。",
+    GIT_TOKEN_REJECTED: "GitHub 拒绝了此 token：它可能无效、已过期或权限不足。",
     GIT_UNAVAILABLE: "服务器未安装 Git。",
     HARPER_UNAVAILABLE: "Harper 拼写与语法检查暂不可用。",
     HISTORY_FILE_NOT_FOUND: "历史文件不存在。",

package/dist/server/routes/projectGit.js

@@ -23,27 +23,26 @@ export function registerProjectGitRoutes(app, context) {
             return { status: await projectGit.status(requireGitOwner(id, user)) };
         }, { preflight: () => { requireGitOwner(id, user); } });
     });
-    app.put("/api/projects/:id/git/token", async (request, reply) => {
+    app.get("/api/account/github", async (request, reply) => {
+        const user = requireUser(request, reply, db);
+        if (!user)
+            return;
+        return { status: projectGit.githubAccountStatus(user.id) };
+    });
+    app.put("/api/account/github", async (request, reply) => {
         const user = requireUser(request, reply, db);
         if (!user)
             return;
-        const { id } = request.params;
         const body = request.body;
         if (typeof body.token !== "string")
             return apiError(reply, 400, "GIT_TOKEN_INVALID");
-        const token = body.token;
-        return await projectMutations.runSerialized(id, async () => {
-            return { status: await projectGit.configureToken(requireGitOwner(id, user), token) };
-        }, { preflight: () => { requireGitOwner(id, user); } });
+        return { status: await projectGit.configureUserToken(user.id, body.token) };
     });
-    app.delete("/api/projects/:id/git/token", async (request, reply) => {
+    app.delete("/api/account/github", async (request, reply) => {
         const user = requireUser(request, reply, db);
         if (!user)
             return;
-        const { id } = request.params;
-        return await projectMutations.runSerialized(id, async () => {
-            return { status: await projectGit.removeToken(requireGitOwner(id, user)) };
-        }, { preflight: () => { requireGitOwner(id, user); } });
+        return { status: projectGit.removeUserToken(user.id) };
     });
     app.post("/api/projects/:id/git/repository", async (request, reply) => {
         const user = requireUser(request, reply, db);

package/dist/server/routes/projectHistory.js

@@ -1,4 +1,5 @@
 import fs from "node:fs";
+import { isUtf8 } from "node:buffer";
 import { requireUser } from "../auth.js";
 import { isCollaborativeTextFile, maxCollaborativeFileBytes } from "../collaboration.js";
 import { hashText } from "../editHistory.js";
@@ -6,6 +7,7 @@ import { HISTORY_RETENTION_DELAY_MS } from "../historyRetention.js";
 import { resolveSourcePath, safeRelativePath } from "../files.js";
 import { apiError, httpError } from "../http.js";
 import { MAX_TEXT_PREVIEW_BYTES } from "../limits.js";
+import { isHistoryTextFile } from "../../shared/historyFiles.js";
 import { accessibleProject, canEdit } from "../projects.js";
 import { commentsSummaryForProject, projectJson, projectTextSnapshot, reanchorProjectSnapshot, requireEditableProject, requireProjectOwnerPermission, tagsForProject, text, touchProject } from "./projectShared.js";
 /** Register retained project version listing, inspection, restoration, and cleanup routes. */
@@ -112,7 +114,10 @@ export function registerProjectHistoryRoutes(app, context) {
         return {
             version,
             settings: manifest.settings,
-            files: Object.entries(manifest.files).map(([filePath, file]) => ({ path: filePath, size: file.size })).sort((left, right) => left.path.localeCompare(right.path))
+            files: [
+                ...Object.entries(manifest.files).map(([filePath, file]) => ({ path: filePath, size: file.size })),
+                ...version.changedPaths.filter((filePath) => !manifest.files[filePath]).map((filePath) => ({ path: filePath, size: 0, deleted: true }))
+            ].sort((left, right) => left.path.localeCompare(right.path))
         };
     });
     app.get("/api/projects/:id/history/:versionId/file", async (request, reply) => {
@@ -125,19 +130,41 @@ export function registerProjectHistoryRoutes(app, context) {
         const query = request.query;
         const filePath = safeRelativePath(query.path ?? "");
         return await projectMutations.runConsistentRead(id, () => {
-            const historical = history.readTextFile(id, versionId, filePath);
+            const manifest = history.manifest(id, versionId);
+            const version = history.version(versionId, id);
+            if (!manifest || !version)
+                return apiError(reply, 404, "HISTORY_VERSION_NOT_FOUND");
+            if (!manifest.files[filePath] && !version.changedPaths.includes(filePath))
+                return apiError(reply, 404, "HISTORY_FILE_NOT_FOUND");
+            // Never decode attachment bytes as UTF-8, including direct API calls.
+            if (!isHistoryTextFile(filePath))
+                return apiError(reply, 415, "HISTORY_FILE_PREVIEW_UNSUPPORTED", { path: filePath });
+            const historical = manifest.files[filePath] ? history.readTextFile(id, versionId, filePath) : "";
             if (historical === null)
                 return apiError(reply, 415, "HISTORY_FILE_PREVIEW_UNSUPPORTED", { path: filePath });
             let comparison = "";
             const previousVersion = query.against === "__previous__" ? history.previousVersion(id, versionId) : null;
             const against = query.against === "__previous__" ? previousVersion?.id ?? "__none__" : query.against;
             if (query.against) {
-                comparison = history.readTextFile(id, against, filePath) ?? "";
+                const comparisonManifest = history.manifest(id, against);
+                if (against !== "__none__" && !comparisonManifest)
+                    return apiError(reply, 404, "HISTORY_VERSION_NOT_FOUND");
+                if (comparisonManifest?.files[filePath]) {
+                    const text = history.readTextFile(id, against, filePath);
+                    if (text === null)
+                        return apiError(reply, 415, "HISTORY_FILE_PREVIEW_UNSUPPORTED", { path: filePath });
+                    comparison = text;
+                }
             }
             else {
                 const current = resolveSourcePath(config, id, filePath);
-                if (fs.existsSync(current) && fs.statSync(current).isFile() && fs.statSync(current).size <= MAX_TEXT_PREVIEW_BYTES) {
-                    comparison = fs.readFileSync(current, "utf8");
+                if (fs.existsSync(current) && fs.statSync(current).isFile()) {
+                    if (fs.statSync(current).size > MAX_TEXT_PREVIEW_BYTES)
+                        return apiError(reply, 415, "HISTORY_FILE_PREVIEW_UNSUPPORTED", { path: filePath });
+                    const bytes = fs.readFileSync(current);
+                    if (bytes.includes(0) || !isUtf8(bytes))
+                        return apiError(reply, 415, "HISTORY_FILE_PREVIEW_UNSUPPORTED", { path: filePath });
+                    comparison = bytes.toString("utf8");
                 }
             }
             return { path: filePath, historical, comparison, against: against ?? "current", previousVersion };

package/dist/server/routes/projectMembers.js

@@ -53,11 +53,6 @@ export function registerProjectMemberRoutes(app, context) {
                     .run(id, user.id, changedAt);
                 db.prepare("UPDATE projects SET owner_id = ?, last_modified_by = ?, updated_at = ? WHERE id = ?")
                     .run(currentTarget.id, user.id, changedAt, id);
-                // A project token belongs to the account that supplied it. Preserve the
-                // local repository/remote metadata, but require the new owner to add
-                // their own credential before the next GitHub operation.
-                db.prepare("UPDATE project_git_settings SET token_ciphertext = NULL, github_login = NULL, updated_at = ? WHERE project_id = ?")
-                    .run(changedAt, id);
                 db.exec("COMMIT");
             }
             catch (error) {

package/dist/server/routes/projects.js

@@ -358,6 +358,16 @@ export function registerProjectCatalogRoutes(app, context) {
       WHERE project_id = ? ORDER BY word COLLATE NOCASE`).all(id);
         return { words: rows.map((row) => row.word) };
     });
+    app.get("/api/projects/:id/spellcheck/status", async (request, reply) => {
+        const user = requireUser(request, reply, db);
+        if (!user)
+            return;
+        const { id } = request.params;
+        if (!accessibleProject(db, id, user))
+            return apiError(reply, 404, "PROJECT_NOT_FOUND");
+        reply.header("Cache-Control", "no-store");
+        return { available: await harper.isAvailable() };
+    });
     app.post("/api/projects/:id/spellcheck", async (request, reply) => {
         const user = requireUser(request, reply, db);
         if (!user)

package/dist/server/routes/users.js

@@ -121,8 +121,6 @@ export function registerUserManagementRoutes(app, context) {
                 db.prepare("DELETE FROM projects WHERE owner_id = ?").run(id);
             }
             else {
-                db.prepare("UPDATE project_git_settings SET token_ciphertext = NULL, github_login = NULL, updated_at = ? WHERE project_id IN (SELECT id FROM projects WHERE owner_id = ?)")
-                    .run(now(), id);
                 db.prepare("DELETE FROM project_members WHERE user_id = ? AND project_id IN (SELECT id FROM projects WHERE owner_id = ?)")
                     .run(admin.id, id);
                 db.prepare("UPDATE projects SET owner_id = ?, last_modified_by = ?, updated_at = ? WHERE owner_id = ?")

package/dist/shared/historyFiles.js

@@ -0,0 +1,6 @@
+/** File types for which a source-level snapshot diff is meaningful. */
+export function isHistoryTextFile(filePath) {
+    const name = filePath.split("/").at(-1) ?? "";
+    return /\.(?:tex|bib|bst|sty|cls|txt|md|rst|dat|csv|tsv|json|ya?ml|toml|xml|html?|css|[cm]?js|tsx?|py|sh|r|log|bbl|aux|idx|ind|gls)$/i.test(name)
+        || /^(?:\.?latexmkrc|readme|licen[cs]e|makefile)$/i.test(name);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "texlite",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "description": "A lightweight local-first collaborative LaTeX workspace",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -80,6 +80,8 @@
     "@lezer/highlight": "^1.2.3",
     "@lezer/lr": "^1.4.10",
     "@radix-ui/react-dialog": "^1.1.15",
+    "@radix-ui/react-dropdown-menu": "^2.1.25",
+    "@radix-ui/react-popover": "^1.2.0",
     "@replit/codemirror-vim": "^6.4.0",
     "better-sqlite3": "^13.0.2",
     "bibtex-tidy": "1.14.0",

package/dist/client/assets/AdminUsers-BExOMZsW.js

@@ -1 +0,0 @@
-import{u as Y,r as n,j as e}from"./react-BVUjbTTn.js";import{c as m,M as D,d as _,C as ee,g as u,h}from"./index-CqBmQAzW.js";import{U as se,T as R,X as O}from"./x-Cspw_pa4.js";import{U as $}from"./user-plus-gFwY-NA3.js";import{S as ae}from"./Dashboard-DRt4rjKP.js";import{K as B}from"./key-round-BEnQo7IM.js";import"./hard-drive-CkIPwUSV.js";import"./sigma-B-wjepsY.js";import"./tags-BSA08jK3.js";const re=m("Dices",[["rect",{width:"12",height:"12",x:"2",y:"10",rx:"2",ry:"2",key:"6agr2n"}],["path",{d:"m17.92 14 3.5-3.5a2.24 2.24 0 0 0 0-3l-5-4.92a2.24 2.24 0 0 0-3 0L10 6",key:"1o487t"}],["path",{d:"M6 18h.01",key:"uhywen"}],["path",{d:"M10 14h.01",key:"ssrbsk"}],["path",{d:"M15 6h.01",key:"cblpky"}],["path",{d:"M18 9h.01",key:"2061c0"}]]);const ne=m("FolderCheck",[["path",{d:"M20 20a2 2 0 0 0 2-2V8a2 2 0 0 0-2-2h-7.9a2 2 0 0 1-1.69-.9L9.6 3.9A2 2 0 0 0 7.93 3H4a2 2 0 0 0-2 2v13a2 2 0 0 0 2 2Z",key:"1kt360"}],["path",{d:"m9 13 2 2 4-4",key:"6343dt"}]]);const te=m("FolderX",[["path",{d:"M20 20a2 2 0 0 0 2-2V8a2 2 0 0 0-2-2h-7.9a2 2 0 0 1-1.69-.9L9.6 3.9A2 2 0 0 0 7.93 3H4a2 2 0 0 0-2 2v13a2 2 0 0 0 2 2Z",key:"1kt360"}],["path",{d:"m9.5 10.5 5 5",key:"ra9qjz"}],["path",{d:"m14.5 10.5-5 5",key:"l2rkpq"}]]);const ie=m("ShieldOff",[["path",{d:"m2 2 20 20",key:"1ooewy"}],["path",{d:"M5 5a1 1 0 0 0-1 1v7c0 5 3.5 7.5 7.67 8.94a1 1 0 0 0 .67.01c2.35-.82 4.48-1.97 5.9-3.71",key:"1jlk70"}],["path",{d:"M9.309 3.652A12.252 12.252 0 0 0 11.24 2.28a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1v7a9.784 9.784 0 0 1-.08 1.264",key:"18rp1v"}]]);const oe=m("UserCheck",[["path",{d:"M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2",key:"1yyitq"}],["circle",{cx:"9",cy:"7",r:"4",key:"nufk8"}],["polyline",{points:"16 11 18 13 22 9",key:"1pwet4"}]]);const le=m("UserX",[["path",{d:"M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2",key:"1yyitq"}],["circle",{cx:"9",cy:"7",r:"4",key:"nufk8"}],["line",{x1:"17",x2:"22",y1:"8",y2:"13",key:"3nzzx3"}],["line",{x1:"22",x2:"17",y1:"8",y2:"13",key:"1swrse"}]]);function de(p=10){const t="ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz23456789!@#$%",a=crypto.getRandomValues(new Uint8Array(p));return Array.from(a,S=>t[S%t.length]).join("")}function be({currentUser:p,minPasswordLength:t}){const{t:a}=Y(),[S,J]=n.useState([]),[E,d]=n.useState(""),[V,C]=n.useState(!1),[r,o]=n.useState({username:"",displayName:"",password:"",role:"user",canCreateProjects:!1}),[k,g]=n.useState(null),[j,P]=n.useState(""),[x,w]=n.useState(null),[z,N]=n.useState(!1),[i,F]=n.useState(!1),[U,y]=n.useState(""),[l,f]=n.useState(null),[A,H]=n.useState(!1),[X,c]=n.useState(""),b=()=>u("/api/admin/users").then(({users:s})=>J(s)).catch(s=>d(h(s)));n.useEffect(()=>{b()},[]);const q=async()=>{if(r.password.length<t)return d(a("auth.passwordMinimum",{count:t}));try{await u("/api/admin/users",{method:"POST",body:JSON.stringify({username:r.username,displayName:r.displayName||r.username,password:r.password,role:r.role,canCreateProjects:r.canCreateProjects})}),C(!1),o({username:"",displayName:"",password:"",role:"user",canCreateProjects:!1}),await b()}catch(s){d(h(s))}},M=async(s,v)=>{try{await u(`/api/admin/users/${s.id}`,{method:"PATCH",body:JSON.stringify(v)}),await b()}catch(T){d(h(T))}},K=async s=>{if(!s.disabled){f({target:s,setting:"disable"}),c("");return}await M(s,{disabled:!1})},Z=async s=>{if(s.role==="admin"){f({target:s,setting:"demote"}),c("");return}await M(s,{role:"admin"})},G=async s=>{if(s.canCreateProjects){f({target:s,setting:"denyProjectCreation"}),c("");return}await M(s,{canCreateProjects:!0})},I=async()=>{if(!l)return;const{target:s,setting:v}=l,T=v==="disable"?{disabled:!0}:v==="demote"?{role:"user"}:{canCreateProjects:!1};H(!0),c("");try{await u(`/api/admin/users/${s.id}`,{method:"PATCH",body:JSON.stringify(T)}),await b(),f(null)}catch(W){c(h(W))}finally{H(!1)}},L=async()=>{if(!(!k||!j)){if(j.length<t)return d(a("auth.passwordMinimum",{count:t}));try{await u(`/api/admin/users/${k.id}`,{method:"PATCH",body:JSON.stringify({password:j})}),g(null),P("")}catch(s){d(h(s))}}},Q=async()=>{if(!(!x||i)){F(!0),y("");try{await u(`/api/admin/users/${x.id}`,{method:"DELETE",body:JSON.stringify({deleteProjects:z})}),w(null),N(!1),await b()}catch(s){y(h(s))}finally{F(!1)}}};return e.jsxs("main",{className:"dashboard",children:[e.jsxs("div",{className:"section-title",children:[e.jsxs("div",{children:[e.jsxs("h1",{children:[e.jsx(se,{"aria-hidden":!0,size:25}),a("users.manage")]}),e.jsx("p",{className:"muted",children:a("users.onlyAdmin")})]}),e.jsxs("button",{className:"primary icon-button",onClick:()=>C(!0),children:[e.jsx($,{"aria-hidden":!0,size:15}),a("users.add")]})]}),E&&e.jsx("p",{className:"error",children:E}),e.jsx("div",{className:"table-card",children:e.jsxs("table",{children:[e.jsx("thead",{children:e.jsxs("tr",{children:[e.jsx("th",{children:a("common.user")}),e.jsx("th",{children:a("users.role")}),e.jsx("th",{children:a("users.createProjects")}),e.jsx("th",{children:a("users.ownedProjects")}),e.jsx("th",{children:a("users.status")}),e.jsx("th",{children:a("users.actions")})]})}),e.jsx("tbody",{children:S.map(s=>e.jsxs("tr",{children:[e.jsxs("td",{children:[e.jsx("strong",{children:s.displayName}),e.jsxs("small",{children:["@",s.username]})]}),e.jsx("td",{children:s.role==="admin"?a("common.admin"):a("common.user")}),e.jsx("td",{children:s.canCreateProjects?a("users.allow"):a("users.deny")}),e.jsx("td",{children:s.ownedProjects}),e.jsx("td",{children:s.disabled?a("common.disabled"):a("common.normal")}),e.jsxs("td",{children:[e.jsxs("button",{className:"icon-button",disabled:s.id===p.id,onClick:()=>K(s),children:[s.disabled?e.jsx(oe,{"aria-hidden":!0,size:13}):e.jsx(le,{"aria-hidden":!0,size:13}),s.disabled?a("users.enable"):a("users.disable")]}),e.jsxs("button",{className:"icon-button",disabled:s.id===p.id,onClick:()=>Z(s),children:[s.role==="admin"?e.jsx(ie,{"aria-hidden":!0,size:13}):e.jsx(ae,{"aria-hidden":!0,size:13}),s.role==="admin"?a("users.demote"):a("users.promote")]}),e.jsxs("button",{className:"icon-button",disabled:s.role==="admin",onClick:()=>G(s),children:[s.canCreateProjects?e.jsx(te,{"aria-hidden":!0,size:13}):e.jsx(ne,{"aria-hidden":!0,size:13}),s.canCreateProjects?a("users.denyCreate"):a("users.allowCreate")]}),e.jsxs("button",{className:"icon-button",onClick:()=>{g(s),P("")},children:[e.jsx(B,{"aria-hidden":!0,size:13}),a("users.resetPassword")]}),e.jsxs("button",{className:"icon-button danger-text",disabled:s.id===p.id,onClick:()=>{w(s),N(!1),y("")},children:[e.jsx(R,{"aria-hidden":!0,size:13}),a("common.delete")]})]})]},s.id))})]})}),e.jsx(D,{open:V,title:a("users.add"),description:a("users.addDescription"),onOpenChange:C,footer:e.jsxs(e.Fragment,{children:[e.jsxs("button",{className:"icon-button",onClick:()=>C(!1),children:[e.jsx(O,{"aria-hidden":!0,size:14}),a("common.cancel")]}),e.jsxs("button",{className:"primary icon-button",disabled:r.password.length<t,onClick:()=>{q()},children:[e.jsx($,{"aria-hidden":!0,size:14}),a("users.createUser")]})]}),children:e.jsxs("div",{className:"form-stack",children:[e.jsxs("label",{className:"form-field",children:[a("auth.username"),e.jsx("input",{value:r.username,onChange:s=>o({...r,username:s.target.value})})]}),e.jsxs("label",{className:"form-field",children:[a("users.displayName"),e.jsx("input",{value:r.displayName,onChange:s=>o({...r,displayName:s.target.value})})]}),e.jsxs("label",{className:"form-field",children:[a("users.initialPassword"),e.jsxs("span",{className:"password-generator",children:[e.jsx("input",{minLength:t,autoComplete:"new-password",value:r.password,onChange:s=>o({...r,password:s.target.value})}),e.jsxs("button",{type:"button",title:a("users.generatePassword"),onClick:()=>o({...r,password:de()}),children:[e.jsx(re,{size:15}),a("users.randomPassword")]})]}),e.jsx("small",{className:"field-hint",children:a("auth.passwordMinimum",{count:t})})]}),e.jsxs("label",{className:"form-field",children:[a("users.role"),e.jsxs("select",{value:r.role,onChange:s=>o({...r,role:s.target.value}),children:[e.jsx("option",{value:"user",children:a("common.user")}),e.jsx("option",{value:"admin",children:a("common.admin")})]})]}),e.jsxs("label",{className:"checkbox-field",children:[e.jsx("input",{type:"checkbox",checked:r.canCreateProjects||r.role==="admin",disabled:r.role==="admin",onChange:s=>o({...r,canCreateProjects:s.target.checked})})," ",a("users.allowCreate")]})]})}),e.jsx(D,{open:!!k,title:a("users.resetPassword"),description:a("users.resetDescription",{username:k?.username??""}),onOpenChange:s=>{s||g(null)},footer:e.jsxs(e.Fragment,{children:[e.jsxs("button",{className:"icon-button",onClick:()=>g(null),children:[e.jsx(O,{"aria-hidden":!0,size:14}),a("common.cancel")]}),e.jsxs("button",{className:"primary icon-button",disabled:j.length<t,onClick:()=>{L()},children:[e.jsx(B,{"aria-hidden":!0,size:14}),a("users.reset")]})]}),children:e.jsxs("label",{className:"form-field",children:[a("auth.newPassword"),e.jsx("input",{autoFocus:!0,type:"password",minLength:t,autoComplete:"new-password",value:j,onChange:s=>P(s.target.value)}),e.jsx("small",{className:"field-hint",children:a("auth.passwordMinimum",{count:t})})]})}),e.jsx(D,{open:!!x,title:a("users.deleteTitle"),description:a("users.deleteDescription",{username:x?.username??""}),onOpenChange:s=>{!s&&!i&&(w(null),y(""))},footer:e.jsxs(e.Fragment,{children:[e.jsxs("button",{className:"icon-button",disabled:i,onClick:()=>{w(null),y("")},children:[e.jsx(O,{"aria-hidden":!0,size:14}),a("common.cancel")]}),e.jsxs("button",{className:"danger icon-button",disabled:i,"aria-busy":i,onClick:()=>{Q()},children:[i?e.jsx(_,{className:"spin","aria-hidden":!0,size:14}):e.jsx(R,{"aria-hidden":!0,size:14}),a(i?"common.loading":"users.deleteTitle")]})]}),children:e.jsxs(e.Fragment,{children:[U&&e.jsx("p",{className:"error dialog-error",children:U}),e.jsxs("fieldset",{className:"choice-group",disabled:i,children:[e.jsx("legend",{children:a("users.ownedChoice",{count:x?.ownedProjects??0})}),e.jsxs("label",{children:[e.jsx("input",{type:"radio",checked:!z,onChange:()=>N(!1)})," ",a("users.transferProjects")]}),e.jsxs("label",{children:[e.jsx("input",{type:"radio",checked:z,onChange:()=>N(!0)})," ",a("users.deleteProjects")]})]})]})}),e.jsx(ee,{open:!!l,title:a(`userConfirmations.${l?.setting??"disable"}Title`),description:a(`userConfirmations.${l?.setting??"disable"}Description`,{username:l?.target.username??""}),confirmLabel:a(`userConfirmations.${l?.setting??"disable"}Confirm`),danger:!0,busy:A,error:X,onCancel:()=>{A||(f(null),c(""))},onConfirm:()=>{I()}})]})}export{be as AdminUsers};