texlite 0.7.8 → 0.8.0

package/dist/server/projects.js

@@ -1,16 +1,4 @@
 export function accessibleProject(db, projectId, user) {
-    if (user.role === "admin") {
-        const row = db.prepare(`
-      SELECT p.*, 'owner' AS permission, owner.username AS owner_username,
-        owner.display_name AS owner_display_name,
-        modifier.username AS last_modified_username, modifier.display_name AS last_modified_display_name
-      FROM projects p
-      JOIN users owner ON owner.id = p.owner_id
-      LEFT JOIN users modifier ON modifier.id = p.last_modified_by
-      WHERE p.id = ?
-    `).get(projectId);
-        return row ?? null;
-    }
     const row = db.prepare(`
     SELECT p.*,
       CASE WHEN p.owner_id = ? THEN 'owner' ELSE pm.permission END AS permission,

package/dist/server/routes/projectShared.js

@@ -129,7 +129,7 @@ export function requireEditableProject(db, projectId, user) {
         throw httpError(403, "PROJECT_EDIT_FORBIDDEN");
     return project;
 }
-/** Owner permission includes an administrator's effective owner access. */
+/** Owner permission is granted only to the stored project owner. */
 export function requireProjectOwnerPermission(db, projectId, user) {
     requireActiveUser(db, user);
     const project = accessibleProject(db, projectId, user);

package/dist/server/routes/projects.js

@@ -9,6 +9,7 @@ import { isMainDocumentCandidate } from "../latexRoot.js";
 import { accessibleProject, canEdit } from "../projects.js";
 import { writeProjectArchive } from "../archive.js";
 import { extractProjectZip, ZipValidationError } from "../zip.js";
+import { HarperUnavailableError } from "../harper.js";
 import { commentsSummaryForProject, commentsSummaryForProjects, dictionaryWord, escapeLikePattern, now, projectJson, requireProjectOwnerPermission, tagColors, tagsForProject, tagsForProjects, text } from "./projectShared.js";
 /** Register project catalog, metadata, archive, dictionary, tag, export, and deletion routes. */
 export function registerProjectCatalogRoutes(app, context) {
@@ -50,14 +51,11 @@ export function registerProjectCatalogRoutes(app, context) {
         const archiveCondition = archivedOnly
             ? "EXISTS (SELECT 1 FROM user_project_archives archive WHERE archive.project_id = p.id AND archive.user_id = :userId)"
             : "NOT EXISTS (SELECT 1 FROM user_project_archives archive WHERE archive.project_id = p.id AND archive.user_id = :userId)";
-        const from = user.role === "admin"
-            ? `FROM projects p JOIN users owner ON owner.id = p.owner_id
-          LEFT JOIN users modifier ON modifier.id = p.last_modified_by`
-            : `FROM projects p JOIN users owner ON owner.id = p.owner_id
-          LEFT JOIN users modifier ON modifier.id = p.last_modified_by
-          LEFT JOIN project_members pm ON pm.project_id = p.id AND pm.user_id = :userId`;
+        const from = `FROM projects p JOIN users owner ON owner.id = p.owner_id
+      LEFT JOIN users modifier ON modifier.id = p.last_modified_by
+      LEFT JOIN project_members pm ON pm.project_id = p.id AND pm.user_id = :userId`;
         const conditions = [
-            ...(user.role === "admin" ? [] : ["(p.owner_id = :userId OR pm.user_id = :userId)"]),
+            "(p.owner_id = :userId OR pm.user_id = :userId)",
             archiveCondition
         ];
         const params = { userId: user.id };
@@ -79,14 +77,10 @@ export function registerProjectCatalogRoutes(app, context) {
         const totalPages = Math.ceil(total / pageSize);
         const currentPage = totalPages === 0 ? 1 : Math.min(page, totalPages);
         const rowsParams = { ...params, limit: pageSize, offset: (currentPage - 1) * pageSize };
-        const select = user.role === "admin"
-            ? `SELECT p.*, 'owner' AS permission, owner.username AS owner_username,
-          owner.display_name AS owner_display_name,
-          modifier.username AS last_modified_username, modifier.display_name AS last_modified_display_name`
-            : `SELECT DISTINCT p.*,
-          CASE WHEN p.owner_id = :userId THEN 'owner' ELSE pm.permission END AS permission,
-          owner.username AS owner_username, owner.display_name AS owner_display_name,
-          modifier.username AS last_modified_username, modifier.display_name AS last_modified_display_name`;
+        const select = `SELECT DISTINCT p.*,
+      CASE WHEN p.owner_id = :userId THEN 'owner' ELSE pm.permission END AS permission,
+      owner.username AS owner_username, owner.display_name AS owner_display_name,
+      modifier.username AS last_modified_username, modifier.display_name AS last_modified_display_name`;
         const rows = db.prepare(`${select} ${from} ${where}
       ORDER BY ${sortColumn} DESC, p.name COLLATE NOCASE ASC
       LIMIT :limit OFFSET :offset`).all(rowsParams);
@@ -259,16 +253,21 @@ export function registerProjectCatalogRoutes(app, context) {
         if (!accessibleProject(db, id, user))
             return apiError(reply, 404, "PROJECT_NOT_FOUND");
         const body = request.body;
-        if (typeof body?.source !== "string")
+        if (typeof body?.source !== "string" || typeof body.path !== "string")
             return apiError(reply, 400, "SPELLCHECK_SOURCE_INVALID");
         if (Buffer.byteLength(body.source, "utf8") > maxCollaborativeFileBytes(config)) {
             return apiError(reply, 413, "SPELLCHECK_SOURCE_TOO_LARGE");
         }
         try {
-            return { lints: await harper.lint(body.source) };
+            return { lints: await harper.lint(body.source, body.path) };
         }
         catch (error) {
-            request.log.error({ err: error, projectId: id }, "Harper writing check failed");
+            // A missing optional command is an expected fallback condition. Keep it
+            // out of normal logs while preserving diagnostics for an actual failure.
+            if (error instanceof HarperUnavailableError)
+                request.log.debug({ projectId: id }, "Host Harper CLI unavailable; using browser fallback");
+            else
+                request.log.error({ err: error, projectId: id }, "Harper writing check failed");
             return apiError(reply, 503, "HARPER_UNAVAILABLE");
         }
     });
@@ -459,7 +458,9 @@ export function registerProjectCatalogRoutes(app, context) {
             return;
         const { id } = request.params;
         const project = accessibleProject(db, id, user);
-        if (!project || project.permission !== "owner")
+        if (!project)
+            return apiError(reply, 404, "PROJECT_NOT_FOUND");
+        if (project.permission !== "owner")
             return apiError(reply, 403, "PROJECT_DELETE_FORBIDDEN");
         return await projectMutations.runExclusive(id, "project deletion", () => {
             collaboration.resetProject(id);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "texlite",
-  "version": "0.7.8",
+  "version": "0.8.0",
   "description": "A lightweight local-first collaborative LaTeX workspace",
   "license": "AGPL-3.0-only",
   "repository": {
@@ -24,6 +24,9 @@
     "dist",
     "README.md",
     "README.zh-CN.md",
+    "OPERATIONS.md",
+    "DESIGN.md",
+    "NPM_TESTING.md",
     "LICENSE",
     "preview.png",
     "texlite.config.example.json"
@@ -72,7 +75,6 @@
     "bibtex-tidy": "1.14.0",
     "diff-match-patch": "^1.0.5",
     "fastify": "^5.4.0",
-    "harper.js": "^2.7.0",
     "i18next": "^25.3.2",
     "i18next-browser-languagedetector": "^8.2.0",
     "lib0": "^0.2.117",