texlite 0.7.7 → 0.8.0

package/dist/server/latexSpellMask.js

@@ -0,0 +1,257 @@
+// This intentionally recognizes only the parts of LaTeX that are clearly not
+// prose. It is a single-pass lexer, not a parser: malformed delimiters remain
+// narrow, so they never hide the rest of a document or cause backtracking.
+const nonProseEnvironments = new Set([
+    "math", "displaymath", "equation", "equation*", "align", "align*", "alignat", "alignat*", "gather", "gather*", "multline", "multline*", "flalign", "flalign*",
+    "tikzpicture", "axis", "scope", "pgfonlayer", "pgfpicture",
+    "tabular", "tabularx", "tabulary", "longtable", "array", "matrix", "pmatrix", "bmatrix", "vmatrix",
+    "verbatim", "lstlisting", "minted", "comment", "algorithmic"
+]);
+const opaqueArgumentCommands = new Set([
+    "documentclass", "usepackage", "requirepackage", "includegraphics", "tikzset", "pgfplotsset", "hypersetup", "lstset",
+    "label", "hypertarget", "ref", "pageref", "autoref", "nameref", "hyperref", "index", "gls", "glspl",
+    "bibliography", "addbibresource", "input", "include", "url", "path", "setlength", "setcounter", "color", "textcolor", "colorbox", "pagecolor"
+]);
+function addRange(ranges, from, to) {
+    if (to > from)
+        ranges.push({ from, to });
+}
+function isWhitespace(character) {
+    return character === " " || character === "\t" || character === "\r" || character === "\n";
+}
+function isCommandNameCharacter(character) {
+    if (!character)
+        return false;
+    const code = character.charCodeAt(0);
+    return (code >= 65 && code <= 90) || (code >= 97 && code <= 122) || (code >= 48 && code <= 57)
+        || character === "@" || character === ":" || character === "_";
+}
+function balancedArgument(source, start, open, close) {
+    if (source[start] !== open)
+        return null;
+    let depth = 1;
+    for (let index = start + 1; index < source.length; index += 1) {
+        if (source[index] === "\\") {
+            index += 1;
+            continue;
+        }
+        if (source[index] === open)
+            depth += 1;
+        else if (source[index] === close && --depth === 0)
+            return { from: start, to: index + 1 };
+    }
+    return null;
+}
+function skipWhitespace(source, start) {
+    let index = start;
+    while (index < source.length && isWhitespace(source[index]))
+        index += 1;
+    return index;
+}
+function readCommand(source, start) {
+    let end = start + 1;
+    if (isCommandNameCharacter(source[end]))
+        while (isCommandNameCharacter(source[end]))
+            end += 1;
+    else if (end < source.length)
+        end += 1;
+    const name = source.slice(start + 1, end);
+    if (source[end] === "*")
+        end += 1;
+    return { name, end };
+}
+function isCitationCommand(name) {
+    const normalized = name.toLocaleLowerCase("en-US");
+    return normalized === "cite" || normalized.startsWith("cite") || normalized.endsWith("cite");
+}
+function masksOpaqueArguments(name) {
+    const normalized = name.toLocaleLowerCase("en-US");
+    return opaqueArgumentCommands.has(normalized) || isCitationCommand(normalized) || normalized === "definecolor" || normalized === "colorlet" || normalized === "href";
+}
+function maskOpaqueArguments(source, start, name, ranges) {
+    let cursor = start;
+    const normalized = name.toLocaleLowerCase("en-US");
+    const count = normalized === "definecolor" || normalized === "colorlet" ? 3 : 1;
+    for (let index = 0; index < count; index += 1) {
+        const argument = balancedArgument(source, cursor, "{", "}");
+        if (!argument)
+            break;
+        addRange(ranges, argument.from, argument.to);
+        cursor = skipWhitespace(source, argument.to);
+    }
+    return cursor;
+}
+function rawUrlEnd(source, start) {
+    const first = source[start];
+    if (first !== "h" && first !== "H" && first !== "f" && first !== "F")
+        return null;
+    for (const prefix of ["http://", "https://", "ftp://"]) {
+        if (source.slice(start, start + prefix.length).toLowerCase() !== prefix)
+            continue;
+        let end = start + prefix.length;
+        while (end < source.length && !isWhitespace(source[end]))
+            end += 1;
+        return end;
+    }
+    return null;
+}
+function mergeOrderedRanges(ranges) {
+    const merged = [];
+    for (const range of ranges) {
+        const previous = merged.at(-1);
+        if (previous && range.from <= previous.to)
+            previous.to = Math.max(previous.to, range.to);
+        else
+            merged.push({ ...range });
+    }
+    return merged;
+}
+/** Return ordered source spans that should not be sent to a prose checker. */
+export function ignoredLatexRanges(source) {
+    const ranges = [];
+    // Each non-prose environment installs its span at \begin and extends it at
+    // \end. This preserves source order, so final merging stays linear.
+    const nonProseStack = [];
+    // The same technique keeps unmatched $ / \[ delimiters cheap and local.
+    let pendingMath = null;
+    for (let index = 0; index < source.length;) {
+        if (pendingMath?.close.startsWith("\\") && source.startsWith(pendingMath.close, index)) {
+            pendingMath.range.to = index + pendingMath.close.length;
+            index += pendingMath.close.length;
+            pendingMath = null;
+            continue;
+        }
+        if (source[index] === "%") {
+            const end = source.indexOf("\n", index);
+            addRange(ranges, index, end < 0 ? source.length : end);
+            index = end < 0 ? source.length : end + 1;
+            continue;
+        }
+        if (source[index] === "$") {
+            if (pendingMath) {
+                if (pendingMath.close === "$" || (pendingMath.close === "$$" && source.startsWith("$$", index))) {
+                    pendingMath.range.to = index + pendingMath.close.length;
+                    index += pendingMath.close.length;
+                    pendingMath = null;
+                }
+                else {
+                    index += 1;
+                }
+            }
+            else {
+                const delimiter = source[index + 1] === "$" ? "$$" : "$";
+                const range = { from: index, to: index + delimiter.length };
+                ranges.push(range);
+                pendingMath = { close: delimiter, range };
+                index += delimiter.length;
+            }
+            continue;
+        }
+        const urlEnd = rawUrlEnd(source, index);
+        if (urlEnd !== null) {
+            addRange(ranges, index, urlEnd);
+            index = urlEnd;
+            continue;
+        }
+        if (source[index] !== "\\") {
+            index += 1;
+            continue;
+        }
+        const commandStart = index;
+        if (source[index + 1] === "(" || source[index + 1] === "[") {
+            if (pendingMath) {
+                addRange(ranges, commandStart, index + 2);
+            }
+            else {
+                const range = { from: commandStart, to: index + 2 };
+                ranges.push(range);
+                pendingMath = { close: source[index + 1] === "(" ? "\\)" : "\\]", range };
+            }
+            index += 2;
+            continue;
+        }
+        const command = readCommand(source, commandStart);
+        let cursor = skipWhitespace(source, command.end);
+        if (command.name === "verb") {
+            addRange(ranges, commandStart, command.end);
+            const delimiter = source[cursor];
+            if (delimiter && !isWhitespace(delimiter)) {
+                const end = source.indexOf(delimiter, cursor + 1);
+                if (end >= 0) {
+                    addRange(ranges, cursor, end + 1);
+                    cursor = end + 1;
+                }
+            }
+            index = Math.max(command.end, cursor);
+            continue;
+        }
+        if (command.name === "begin" || command.name === "end") {
+            const environment = balancedArgument(source, cursor, "{", "}");
+            if (!environment) {
+                addRange(ranges, commandStart, command.end);
+                index = command.end;
+                continue;
+            }
+            const environmentName = source.slice(environment.from + 1, environment.to - 1).trim().toLocaleLowerCase("en-US");
+            cursor = skipWhitespace(source, environment.to);
+            let options = null;
+            if (command.name === "begin") {
+                options = balancedArgument(source, cursor, "[", "]");
+                if (options)
+                    cursor = skipWhitespace(source, options.to);
+                if (nonProseEnvironments.has(environmentName)) {
+                    const range = { from: commandStart, to: cursor };
+                    ranges.push(range);
+                    nonProseStack.push({ name: environmentName, range });
+                }
+                else {
+                    addRange(ranges, commandStart, command.end);
+                    addRange(ranges, environment.from, environment.to);
+                    if (options)
+                        addRange(ranges, options.from, options.to);
+                }
+            }
+            else {
+                const open = nonProseStack.at(-1);
+                if (open?.name === environmentName) {
+                    nonProseStack.pop();
+                    open.range.to = cursor;
+                }
+                else {
+                    addRange(ranges, commandStart, command.end);
+                    addRange(ranges, environment.from, environment.to);
+                }
+            }
+            index = Math.max(command.end, cursor);
+            continue;
+        }
+        addRange(ranges, commandStart, command.end);
+        const options = balancedArgument(source, cursor, "[", "]");
+        if (options) {
+            addRange(ranges, options.from, options.to);
+            cursor = skipWhitespace(source, options.to);
+        }
+        if (masksOpaqueArguments(command.name))
+            cursor = maskOpaqueArguments(source, cursor, command.name, ranges);
+        index = Math.max(command.end, cursor);
+    }
+    return mergeOrderedRanges(ranges);
+}
+/** Replace syntax with spaces while retaining Unicode-scalar offsets and line breaks. */
+export function maskLatexSource(source) {
+    const ranges = ignoredLatexRanges(source);
+    const chars = [];
+    let offset = 0;
+    let rangeIndex = 0;
+    for (const character of source) {
+        while (rangeIndex < ranges.length && ranges[rangeIndex].to <= offset)
+            rangeIndex += 1;
+        const range = ranges[rangeIndex];
+        const masked = range && range.from <= offset && offset < range.to && character !== "\n" && character !== "\r";
+        // `harper-cli` reports Unicode scalar positions. One space for every
+        // source scalar keeps diagnostics aligned after masked astral characters.
+        chars.push(masked ? " " : character);
+        offset += character.length;
+    }
+    return chars.join("");
+}

package/dist/server/projects.js

@@ -1,16 +1,4 @@
 export function accessibleProject(db, projectId, user) {
-    if (user.role === "admin") {
-        const row = db.prepare(`
-      SELECT p.*, 'owner' AS permission, owner.username AS owner_username,
-        owner.display_name AS owner_display_name,
-        modifier.username AS last_modified_username, modifier.display_name AS last_modified_display_name
-      FROM projects p
-      JOIN users owner ON owner.id = p.owner_id
-      LEFT JOIN users modifier ON modifier.id = p.last_modified_by
-      WHERE p.id = ?
-    `).get(projectId);
-        return row ?? null;
-    }
     const row = db.prepare(`
     SELECT p.*,
       CASE WHEN p.owner_id = ? THEN 'owner' ELSE pm.permission END AS permission,

package/dist/server/routes/compile.js

@@ -5,7 +5,7 @@ import { performance } from "node:perf_hooks";
 import { requireUser } from "../auth.js";
 import { accessibleProject, canEdit } from "../projects.js";
 import { resolveSourcePath, safeRelativePath, texFileStem } from "../files.js";
-import { captureCompileSnapshot, cleanCompileArtifacts, cleanCompileCache, compileProject, discardCompileSnapshot, hasCompileCache, publishCompileArtifacts, publishedCompileArtifacts } from "../compiler.js";
+import { captureCompileSnapshot, cleanCompileArtifacts, cleanCompileCache, CompileCancelledError, compileProject, discardCompileSnapshot, hasCompileCache, publishCompileArtifacts, publishedCompileArtifacts } from "../compiler.js";
 import { parseCompileDiagnostics } from "../compileDiagnostics.js";
 import { pdfToSource, sourceToPdf } from "../synctex.js";
 import { availablePdf, compileRunPdf, compileMainFile, compilePdfUrl, isTextCompileArtifact, listCompileArtifacts, pdfLoadingMode, syncArtifacts } from "../compileArtifacts.js";
@@ -32,6 +32,10 @@ function pdfResponseMetadata(config, pdfPath) {
 function mainDocumentChangedError() {
     return httpError(409, "MAIN_DOCUMENT_CHANGED");
 }
+function throwIfCompileCancelled(signal) {
+    if (signal.aborted)
+        throw new CompileCancelledError();
+}
 class CompileSnapshotBusyError extends Error {
     code = "COMPILE_SNAPSHOT_BUSY";
     constructor() {
@@ -292,6 +296,21 @@ export function registerCompileRoutes(app, context) {
                     throw httpError(404, "PROJECT_NOT_FOUND");
             } });
     });
+    app.post("/api/projects/:id/compile/cancel", async (request, reply) => {
+        const user = requireUser(request, reply, db);
+        if (!user)
+            return;
+        const { id } = request.params;
+        const project = accessibleProject(db, id, user);
+        if (!project || !canEdit(project))
+            return apiError(reply, 403, "COMPILE_FORBIDDEN");
+        const body = (request.body ?? {});
+        const mainFile = compileMainFile(config, id, project.main_file, body.mainFile);
+        if (!mainFile)
+            return apiError(reply, 400, "MAIN_DOCUMENT_INVALID");
+        const cancelled = compileCoordinator.cancel(id, mainFile);
+        return { cancelled: Boolean(cancelled), mainFile, runId: cancelled?.runId ?? null, status: cancelled?.status ?? null };
+    });
     app.post("/api/projects/:id/compile", async (request, reply) => {
         const requestStartedAt = performance.now();
         const user = requireUser(request, reply, db);
@@ -363,8 +382,8 @@ export function registerCompileRoutes(app, context) {
             if (currentGeneration !== snapshotGeneration)
                 snapshotStale = true;
         };
-        const broadcast = () => collaboration.signalCompileState(id, {
-            mainFile, runId, status: phase, requestedBy, updatedAt: now(),
+        const broadcast = (stateRunId = runId) => collaboration.signalCompileState(id, {
+            mainFile, runId: stateRunId, status: phase, requestedBy, updatedAt: now(),
             ...(phase === "succeeded" && snapshotStale ? { stale: true } : {})
         });
         const result = await compileCoordinator.request({
@@ -380,19 +399,28 @@ export function registerCompileRoutes(app, context) {
             onDiscarded: () => {
                 db.prepare("DELETE FROM compile_runs WHERE id = ? AND status = 'queued'").run(runId);
             },
+            onCancelled: () => {
+                phase = "failed";
+                db.prepare("UPDATE compile_runs SET status = 'failed', log = ?, finished_at = ? WHERE id = ? AND status IN ('queued', 'running')")
+                    .run(new CompileCancelledError().message, now(), runId);
+                broadcast();
+            },
             // The compile reservation protects the shared compiler cache and
             // prevents Git/cleanup/deletion from replacing the project while
             // latexmk is running, but it deliberately does not occupy the ordinary
             // project queue for the duration of the subprocess.
-            execute: async () => projectMutations.runCompile(id, async () => {
+            execute: async (signal) => projectMutations.runCompile(id, async () => {
                 let snapshot = null;
                 let snapshotMs = 0;
                 const snapshotStartedAt = performance.now();
                 try {
-                    // Refresh the cheap generation after waiting for any queued source
-                    // operation. This makes the no-op check safe when a Git/HTTP write
-                    // completed after admission but before this compile got a worker.
-                    const refreshed = await projectMutations.runSerialized(id, () => {
+                    throwIfCompileCancelled(signal);
+                    // Revalidate settings after queued source operations. Do not use the
+                    // in-memory collaboration revision to skip before a snapshot: it is
+                    // not a durable content version and can collide after a room restart
+                    // or reconnect.
+                    await projectMutations.runSerialized(id, () => {
+                        throwIfCompileCancelled(signal);
                         const currentProject = accessibleProject(db, id, user);
                         if (!currentProject || !canEdit(currentProject)) {
                             throw new Error("Project access changed while waiting for a source snapshot");
@@ -404,38 +432,9 @@ export function registerCompileRoutes(app, context) {
                             throw mainDocumentChangedError();
                         project = currentProject;
                         mainFile = currentMainFile;
-                        return {
-                            generation: compileRequestGeneration(currentProject, collaboration.currentRevision(id), collaboration.currentGeneration(id), config.extraArgs)
-                        };
                     });
-                    const currentGeneration = refreshed.generation;
-                    const publishedBeforeSnapshot = publishedCompileArtifacts(config, id, mainFile, mainFile === project.main_file);
-                    const publishedRunBeforeSnapshot = publishedBeforeSnapshot ? db.prepare(`SELECT id, status, log, finished_at
-            FROM compile_runs WHERE id = ? AND project_id = ?`).get(publishedBeforeSnapshot.runId, id) : undefined;
-                    const latestRunBeforeSnapshot = db.prepare(`SELECT id, status FROM compile_runs
-            WHERE project_id = ? AND main_file = ? AND id <> ? ORDER BY created_at DESC LIMIT 1`).get(id, mainFile, runId);
-                    const activeRunBeforeSnapshot = db.prepare(`SELECT 1 AS active FROM compile_runs
-            WHERE project_id = ? AND main_file = ? AND id <> ? AND status IN ('queued', 'running') LIMIT 1`).get(id, mainFile, runId);
-                    if (!activeRunBeforeSnapshot && publishedBeforeSnapshot?.generation === currentGeneration
-                        && publishedRunBeforeSnapshot?.status === "succeeded"
-                        && latestRunBeforeSnapshot?.id === publishedRunBeforeSnapshot.id
-                        && hasCompileCache(config, id, mainFile)) {
-                        db.prepare("DELETE FROM compile_runs WHERE id = ? AND status = 'queued'").run(runId);
-                        phase = "succeeded";
-                        broadcast();
-                        return {
-                            runId: publishedBeforeSnapshot.runId,
-                            ok: true,
-                            skipped: true,
-                            log: publishedRunBeforeSnapshot.log ?? "",
-                            diagnostics: parseCompileDiagnostics(publishedRunBeforeSnapshot.log ?? "", "succeeded"),
-                            pdfPath: null,
-                            synctexPath: publishedBeforeSnapshot.synctex,
-                            revision: publishedBeforeSnapshot.revision,
-                            snapshotMs: 0
-                        };
-                    }
                     const captured = await projectMutations.runSerialized(id, async () => {
+                        throwIfCompileCancelled(signal);
                         const currentProject = accessibleProject(db, id, user);
                         if (!currentProject || !canEdit(currentProject)) {
                             throw new Error("Project access changed while waiting for a source snapshot");
@@ -469,6 +468,7 @@ export function registerCompileRoutes(app, context) {
                                     extraArgs: config.extraArgs,
                                     generation: generationKey
                                 });
+                                throwIfCompileCancelled(signal);
                             }
                             catch (error) {
                                 captureError = error;
@@ -508,6 +508,7 @@ export function registerCompileRoutes(app, context) {
                         throw new CompileSnapshotBusyError();
                     }, { flush: false });
                     snapshot = captured;
+                    throwIfCompileCancelled(signal);
                     snapshotMs = performance.now() - snapshotStartedAt;
                     metrics.record("compile.snapshot", snapshotMs);
                     const published = publishedCompileArtifacts(config, id, mainFile, mainFile === project.main_file);
@@ -526,7 +527,9 @@ export function registerCompileRoutes(app, context) {
                         snapshot = null;
                         db.prepare("DELETE FROM compile_runs WHERE id = ? AND status = 'queued'").run(runId);
                         phase = "succeeded";
-                        broadcast();
+                        // The probe row was deleted, so broadcast the retained run that
+                        // clients can actually resolve from SQLite and the manifest.
+                        broadcast(published.runId);
                         return {
                             runId: published.runId,
                             ok: true,
@@ -545,15 +548,17 @@ export function registerCompileRoutes(app, context) {
                     broadcast();
                     let compiled;
                     try {
-                        compiled = await compileProject(config, snapshot, mainFile, project.engine, project.latexmkrc);
+                        compiled = await compileProject(config, snapshot, mainFile, project.engine, project.latexmkrc, { signal });
                         refreshSnapshotStale();
                         if (compiled.ok && compiled.pdfPath) {
+                            throwIfCompileCancelled(signal);
                             const publishStartedAt = performance.now();
                             // Publishing is short and atomic, but still goes through the
                             // ordinary project queue so it cannot overlap a source-tree
                             // archive/read or another output mutation. The long latexmk
                             // process above remains outside that queue.
                             await projectMutations.runSerialized(id, () => {
+                                throwIfCompileCancelled(signal);
                                 if (!db.prepare("SELECT 1 FROM projects WHERE id = ?").get(id)) {
                                     throw new Error("Project was deleted before compile artifacts could be published.");
                                 }
@@ -576,12 +581,19 @@ export function registerCompileRoutes(app, context) {
                         snapshot = null;
                         compiled = {
                             ok: false,
+                            ...(error instanceof CompileCancelledError ? { cancelled: true } : {}),
                             log: error instanceof Error ? error.message : String(error),
                             diagnostics: parseCompileDiagnostics(error instanceof Error ? error.message : String(error), "failed"),
                             pdfPath: null,
                             synctexPath: null
                         };
                     }
+                    // A killed latexmk can leave an incomplete dependency database in
+                    // the incremental cache. Keep the last published PDF, but make the
+                    // next requested compile a clean rebuild instead of trusting that
+                    // partial state.
+                    if (compiled.cancelled)
+                        cleanCompileCache(config, id, mainFile);
                     phase = compiled.ok ? "succeeded" : "failed";
                     db.prepare("UPDATE compile_runs SET status = ?, log = ?, finished_at = ? WHERE id = ?")
                         .run(phase, compiled.log, now(), runId);
@@ -617,6 +629,7 @@ export function registerCompileRoutes(app, context) {
                     broadcast();
                     return {
                         ok: false,
+                        ...(error instanceof CompileCancelledError ? { cancelled: true } : {}),
                         log,
                         diagnostics: parseCompileDiagnostics(log, "failed"),
                         pdfPath: null,
@@ -660,7 +673,7 @@ export function registerCompileRoutes(app, context) {
             `total;dur=${timingDuration(requestMs)}`
         ].filter(Boolean).join(", "));
         return {
-            mainFile, runId: result.runId, ok: result.ok, skipped: result.skipped === true, log: result.log, diagnostics: result.diagnostics,
+            mainFile, runId: result.runId, ok: result.ok, cancelled: result.cancelled === true, skipped: result.skipped === true, log: result.log, diagnostics: result.diagnostics,
             pdfUrl: result.ok ? compilePdfUrl(id, mainFile, result.runId) : null,
             pdfCompiledAt: result.ok ? completed?.finished_at ?? null : null,
             ...pdfMetadata,

package/dist/server/routes/projectFiles.js

@@ -212,6 +212,14 @@ export function registerProjectFileRoutes(app, context) {
             return apiError(reply, 404, "PATH_NOT_FOUND", { path: source });
         if (destination === source)
             return { ok: true, path: source };
+        // Moving the configured root to (for example) main.tex.bak used to
+        // silently store that non-TeX path as main_file. The next compilation
+        // then failed long after the rename had appeared to succeed. Keep the
+        // current root a TeX file; users can first select another root document
+        // in project settings when they genuinely want to retire this one.
+        if (source === project.main_file && !/\.tex$/i.test(destination)) {
+            return apiError(reply, 400, "MAIN_DOCUMENT_INVALID");
+        }
         const initialSourceStat = fs.statSync(sourceAbsolute);
         if (initialSourceStat.isDirectory() && (destinationDirectory === source || destinationDirectory.startsWith(`${source}/`))) {
             return apiError(reply, 400, "MOVE_INTO_SELF", { path: source });
@@ -229,6 +237,9 @@ export function registerProjectFileRoutes(app, context) {
         const validateMove = () => {
             currentProject = requireEditableProject(db, id, user);
             assertNoSourceSymlinks(config, id);
+            if (source === currentProject.main_file && !/\.tex$/i.test(destination)) {
+                throw httpError(400, "MAIN_DOCUMENT_INVALID");
+            }
             if (!fs.existsSync(sourceAbsolute)) {
                 throw httpError(404, "PATH_NOT_FOUND", { path: source });
             }

package/dist/server/routes/projectShared.js

@@ -129,7 +129,7 @@ export function requireEditableProject(db, projectId, user) {
         throw httpError(403, "PROJECT_EDIT_FORBIDDEN");
     return project;
 }
-/** Owner permission includes an administrator's effective owner access. */
+/** Owner permission is granted only to the stored project owner. */
 export function requireProjectOwnerPermission(db, projectId, user) {
     requireActiveUser(db, user);
     const project = accessibleProject(db, projectId, user);

package/dist/server/routes/projects.js

@@ -9,6 +9,7 @@ import { isMainDocumentCandidate } from "../latexRoot.js";
 import { accessibleProject, canEdit } from "../projects.js";
 import { writeProjectArchive } from "../archive.js";
 import { extractProjectZip, ZipValidationError } from "../zip.js";
+import { HarperUnavailableError } from "../harper.js";
 import { commentsSummaryForProject, commentsSummaryForProjects, dictionaryWord, escapeLikePattern, now, projectJson, requireProjectOwnerPermission, tagColors, tagsForProject, tagsForProjects, text } from "./projectShared.js";
 /** Register project catalog, metadata, archive, dictionary, tag, export, and deletion routes. */
 export function registerProjectCatalogRoutes(app, context) {
@@ -50,14 +51,11 @@ export function registerProjectCatalogRoutes(app, context) {
         const archiveCondition = archivedOnly
             ? "EXISTS (SELECT 1 FROM user_project_archives archive WHERE archive.project_id = p.id AND archive.user_id = :userId)"
             : "NOT EXISTS (SELECT 1 FROM user_project_archives archive WHERE archive.project_id = p.id AND archive.user_id = :userId)";
-        const from = user.role === "admin"
-            ? `FROM projects p JOIN users owner ON owner.id = p.owner_id
-          LEFT JOIN users modifier ON modifier.id = p.last_modified_by`
-            : `FROM projects p JOIN users owner ON owner.id = p.owner_id
-          LEFT JOIN users modifier ON modifier.id = p.last_modified_by
-          LEFT JOIN project_members pm ON pm.project_id = p.id AND pm.user_id = :userId`;
+        const from = `FROM projects p JOIN users owner ON owner.id = p.owner_id
+      LEFT JOIN users modifier ON modifier.id = p.last_modified_by
+      LEFT JOIN project_members pm ON pm.project_id = p.id AND pm.user_id = :userId`;
         const conditions = [
-            ...(user.role === "admin" ? [] : ["(p.owner_id = :userId OR pm.user_id = :userId)"]),
+            "(p.owner_id = :userId OR pm.user_id = :userId)",
             archiveCondition
         ];
         const params = { userId: user.id };
@@ -79,14 +77,10 @@ export function registerProjectCatalogRoutes(app, context) {
         const totalPages = Math.ceil(total / pageSize);
         const currentPage = totalPages === 0 ? 1 : Math.min(page, totalPages);
         const rowsParams = { ...params, limit: pageSize, offset: (currentPage - 1) * pageSize };
-        const select = user.role === "admin"
-            ? `SELECT p.*, 'owner' AS permission, owner.username AS owner_username,
-          owner.display_name AS owner_display_name,
-          modifier.username AS last_modified_username, modifier.display_name AS last_modified_display_name`
-            : `SELECT DISTINCT p.*,
-          CASE WHEN p.owner_id = :userId THEN 'owner' ELSE pm.permission END AS permission,
-          owner.username AS owner_username, owner.display_name AS owner_display_name,
-          modifier.username AS last_modified_username, modifier.display_name AS last_modified_display_name`;
+        const select = `SELECT DISTINCT p.*,
+      CASE WHEN p.owner_id = :userId THEN 'owner' ELSE pm.permission END AS permission,
+      owner.username AS owner_username, owner.display_name AS owner_display_name,
+      modifier.username AS last_modified_username, modifier.display_name AS last_modified_display_name`;
         const rows = db.prepare(`${select} ${from} ${where}
       ORDER BY ${sortColumn} DESC, p.name COLLATE NOCASE ASC
       LIMIT :limit OFFSET :offset`).all(rowsParams);
@@ -259,16 +253,21 @@ export function registerProjectCatalogRoutes(app, context) {
         if (!accessibleProject(db, id, user))
             return apiError(reply, 404, "PROJECT_NOT_FOUND");
         const body = request.body;
-        if (typeof body?.source !== "string")
+        if (typeof body?.source !== "string" || typeof body.path !== "string")
             return apiError(reply, 400, "SPELLCHECK_SOURCE_INVALID");
         if (Buffer.byteLength(body.source, "utf8") > maxCollaborativeFileBytes(config)) {
             return apiError(reply, 413, "SPELLCHECK_SOURCE_TOO_LARGE");
         }
         try {
-            return { lints: await harper.lint(body.source) };
+            return { lints: await harper.lint(body.source, body.path) };
         }
         catch (error) {
-            request.log.error({ err: error, projectId: id }, "Harper writing check failed");
+            // A missing optional command is an expected fallback condition. Keep it
+            // out of normal logs while preserving diagnostics for an actual failure.
+            if (error instanceof HarperUnavailableError)
+                request.log.debug({ projectId: id }, "Host Harper CLI unavailable; using browser fallback");
+            else
+                request.log.error({ err: error, projectId: id }, "Harper writing check failed");
             return apiError(reply, 503, "HARPER_UNAVAILABLE");
         }
     });
@@ -459,7 +458,9 @@ export function registerProjectCatalogRoutes(app, context) {
             return;
         const { id } = request.params;
         const project = accessibleProject(db, id, user);
-        if (!project || project.permission !== "owner")
+        if (!project)
+            return apiError(reply, 404, "PROJECT_NOT_FOUND");
+        if (project.permission !== "owner")
             return apiError(reply, 403, "PROJECT_DELETE_FORBIDDEN");
         return await projectMutations.runExclusive(id, "project deletion", () => {
             collaboration.resetProject(id);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "texlite",
-  "version": "0.7.7",
+  "version": "0.8.0",
   "description": "A lightweight local-first collaborative LaTeX workspace",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -24,6 +24,9 @@
     "dist",
     "README.md",
     "README.zh-CN.md",
+    "OPERATIONS.md",
+    "DESIGN.md",
+    "NPM_TESTING.md",
     "LICENSE",
     "preview.png",
     "texlite.config.example.json"
@@ -72,7 +75,6 @@
     "bibtex-tidy": "1.14.0",
     "diff-match-patch": "^1.0.5",
     "fastify": "^5.4.0",
-    "harper.js": "^2.7.0",
     "i18next": "^25.3.2",
     "i18next-browser-languagedetector": "^8.2.0",
     "lib0": "^0.2.117",

package/dist/client/assets/ProjectNavigationDialogs-BDOtIoTy.js

@@ -1 +0,0 @@
-import{u as A,r,j as e}from"./react-BoEjKzFZ.js";import{j as B,a as R,M as F,o as $,L as I,p as J,n as K,F as V,q as G}from"./index-zIjCeZFK.js";const L=B("Replace",[["path",{d:"M14 4a2 2 0 0 1 2-2",key:"1w2hp7"}],["path",{d:"M16 10a2 2 0 0 1-2-2",key:"shjach"}],["path",{d:"M20 2a2 2 0 0 1 2 2",key:"188mtx"}],["path",{d:"M22 8a2 2 0 0 1-2 2",key:"ddf4tu"}],["path",{d:"m3 7 3 3 3-3",key:"x25e72"}],["path",{d:"M6 10V5a3 3 0 0 1 3-3h1",key:"3y3t5z"}],["rect",{x:"2",y:"14",width:"8",height:"8",rx:"2",key:"4rksxw"}]]);function Z({open:i,files:u,onOpenChange:l,onOpenFile:p}){const{t:a}=A(),[n,m]=r.useState(""),[d,o]=r.useState(0),f=r.useRef(null),h=r.useMemo(()=>u.filter(t=>t.type==="file").map(t=>({entry:t,score:H(t.path,n)})).filter(t=>t.score>=0).sort((t,c)=>c.score-t.score||t.entry.path.localeCompare(c.entry.path)).slice(0,100),[u,n]);r.useEffect(()=>{i&&(m(""),o(0),window.setTimeout(()=>f.current?.focus(),0))},[i]),r.useEffect(()=>o(t=>Math.min(t,Math.max(0,h.length-1))),[h.length]);const x=t=>{p(t),l(!1)};return e.jsx(F,{open:i,wide:!0,title:a("navigation.quickOpen"),description:a("navigation.quickOpenDescription"),onOpenChange:l,children:e.jsxs("div",{className:"quick-open-dialog",children:[e.jsxs("label",{children:[e.jsx($,{size:16}),e.jsx("input",{ref:f,value:n,placeholder:a("navigation.filePlaceholder"),onChange:t=>{m(t.target.value),o(0)},onKeyDown:t=>{t.key==="ArrowDown"&&(t.preventDefault(),o(c=>Math.min(h.length-1,c+1))),t.key==="ArrowUp"&&(t.preventDefault(),o(c=>Math.max(0,c-1))),t.key==="Enter"&&h[d]&&(t.preventDefault(),x(h[d].entry.path))}})]}),e.jsxs("div",{className:"quick-open-results",children:[h.map(({entry:t},c)=>e.jsxs("button",{className:c===d?"active":"",onMouseEnter:()=>o(c),onClick:()=>x(t.path),children:[e.jsx(V,{size:14}),e.jsx("span",{children:t.path}),c===d&&e.jsx(G,{size:13})]},t.path)),h.length===0&&e.jsx("p",{className:"muted padded",children:a("navigation.noFiles")})]})]})})}function _({open:i,project:u,onOpenChange:l,onJump:p}){const{t:a}=A(),[n,m]=r.useState(""),[d,o]=r.useState(""),[f,h]=r.useState(!1),[x,t]=r.useState(!1),[c,w]=r.useState([]),[v,C]=r.useState(0),[P,D]=r.useState(!1),[b,S]=r.useState(!1),[W,N]=r.useState(!1),[q,M]=r.useState(""),[z,k]=r.useState(""),[O,Q]=r.useState(0),y=r.useRef(null);r.useEffect(()=>{if(!i){y.current?.abort();return}if(M(""),k(""),!n.trim()){w([]),C(0),D(!1);return}const s=window.setTimeout(()=>{y.current?.abort();const j=new AbortController;y.current=j,S(!0);const E=new URLSearchParams({q:n});f&&E.set("caseSensitive","1"),x&&E.set("wholeWord","1"),R(`/api/projects/${u.id}/search?${E}`,{signal:j.signal}).then(g=>{w(g.matches),C(g.total),D(g.truncated)}).catch(g=>{g instanceof DOMException&&g.name==="AbortError"||k(T(g))}).finally(()=>{y.current===j&&(y.current=null,S(!1))})},250);return()=>window.clearTimeout(s)},[i,u.id,n,f,x,O]);const U=async()=>{N(!1),S(!0),k(""),M("");try{const s=await R(`/api/projects/${u.id}/search/replace`,{method:"POST",body:JSON.stringify({query:n,replacement:d,caseSensitive:f,wholeWord:x})});M(a("navigation.replaced",{count:s.replacements,files:s.files.length})),w([]),C(0),Q(j=>j+1)}catch(s){k(T(s))}finally{S(!1)}};return e.jsxs(e.Fragment,{children:[e.jsx(F,{open:i,extraWide:!0,title:a("navigation.projectSearch"),description:a("navigation.projectSearchDescription"),onOpenChange:l,footer:e.jsx("button",{onClick:()=>l(!1),children:a("common.close")}),children:e.jsxs("div",{className:"project-search-dialog",children:[z&&e.jsx("p",{className:"error",children:z}),q&&e.jsx("p",{className:"success",children:q}),e.jsxs("div",{className:"project-search-form",children:[e.jsxs("label",{className:"project-search-query",children:[e.jsx($,{size:16}),e.jsx("input",{autoFocus:!0,value:n,placeholder:a("navigation.searchPlaceholder"),onChange:s=>m(s.target.value)})]}),u.permission!=="read"&&e.jsxs("label",{className:"project-search-query",children:[e.jsx(L,{size:16}),e.jsx("input",{value:d,placeholder:a("navigation.replacePlaceholder"),onChange:s=>o(s.target.value)})]}),e.jsxs("div",{className:"project-search-options",children:[e.jsxs("label",{children:[e.jsx("input",{type:"checkbox",checked:f,onChange:s=>h(s.target.checked)}),a("editor.search.matchCase")]}),e.jsxs("label",{children:[e.jsx("input",{type:"checkbox",checked:x,onChange:s=>t(s.target.checked)}),a("editor.search.wholeWord")]}),u.permission!=="read"&&e.jsxs("button",{className:"danger-text",disabled:!n.trim()||v===0||b,onClick:()=>N(!0),children:[e.jsx(L,{size:13}),a("navigation.replaceAll",{count:v})]})]})]}),e.jsxs("div",{className:"project-search-summary",children:[e.jsx("span",{children:b?e.jsxs(e.Fragment,{children:[e.jsx(I,{className:"spin",size:13}),a("common.loading")]}):a("navigation.matchSummary",{count:v})}),P&&e.jsx("small",{children:a("navigation.truncated",{count:c.length})})]}),e.jsxs("div",{className:"project-search-results",children:[c.map((s,j)=>e.jsxs("button",{onClick:()=>{p(s.path,s.line,s.column),l(!1)},children:[e.jsx(J,{size:14}),e.jsxs("span",{children:[e.jsxs("strong",{children:[s.path,e.jsxs("small",{children:[":",s.line,":",s.column]})]}),e.jsxs("code",{children:[s.preview.slice(0,s.matchStart),e.jsx("mark",{children:s.preview.slice(s.matchStart,s.matchEnd)}),s.preview.slice(s.matchEnd)]})]})]},`${s.path}-${s.line}-${s.column}-${j}`)),!b&&n.trim()&&c.length===0&&e.jsx("p",{className:"muted padded",children:a("editor.search.noMatches")})]})]})}),e.jsx(K,{open:W,title:a("navigation.replaceConfirmTitle"),description:a("navigation.replaceConfirmDescription",{count:v}),confirmLabel:a("navigation.replaceAll",{count:v}),danger:!0,onCancel:()=>N(!1),onConfirm:()=>{U()}})]})}function H(i,u){const l=i.toLocaleLowerCase(),p=u.trim().toLocaleLowerCase();if(!p)return 1;const a=l.indexOf(p);if(a>=0)return 1e4-a-l.length;let n=0,m=0;for(const d of p){const o=l.indexOf(d,n);if(o<0)return-1;m+=o===n?5:1,n=o+1}return m-l.length/100}function T(i){return i instanceof Error?i.message:String(i)}export{_ as ProjectSearchDialog,Z as QuickOpenDialog};