Merge branch 'main' into boris/search-index-fix

.github/workflows/frontend-preview.yml

@@ -76,6 +76,8 @@ jobs:
 
       - name: Deploy Storybook preview
         uses: cloudflare/wrangler-action@9acf94ace14e7dc412b076f2c5c20b8ce93c79cd # v3.15.0
+        env:
+          NODE_OPTIONS: --max-old-space-size=6144
         with:
           apiToken: ${{ secrets.CF_API_TOKEN }}
           accountId: ${{ secrets.CF_ACCOUNT_ID }}

apps/labrinth/src/routes/internal/attribution.rs

@@ -6,7 +6,7 @@ use serde::{Deserialize, Serialize};
 use crate::auth::{check_is_moderator_from_headers, get_user_from_headers};
 use crate::database::PgPool;
 use crate::database::models::{
-    DBFileId, DBOrganization, DBTeamMember, DBVersion,
+    DBFileId, DBOrganization, DBProject, DBTeamMember, DBVersion,
     ids::{
         DBAttributionGroupId, DBProjectId, DBVersionId,
         generate_attribution_group_id,
@@ -312,16 +312,39 @@ pub async fn list(
     path: web::Path<ProjectId>,
 ) -> Result<web::Json<Vec<AttributionGroupResponse>>, ApiError> {
     let project_id: DBProjectId = path.into_inner().into();
-    let requester_is_mod = get_user_from_headers(
+    let user = get_user_from_headers(
         &req,
         &**pool,
         &redis,
         &session_queue,
-        Scopes::PROJECT_READ,
+        Scopes::VERSION_READ,
     )
-    .await
+    .await?
-    .ok()
+    .1;
-    .is_some_and(|(_, user)| user.role.is_mod());
+    let requester_is_mod = user.role.is_mod();
+
+    let project = DBProject::get_id(project_id, pool.as_ref(), redis.as_ref())
+        .await?
+        .ok_or(ApiError::NotFound)?;
+    let (team_member, organization_team_member) =
+        DBTeamMember::get_for_project_permissions(
+            &project.inner,
+            user.id.into(),
+            pool.as_ref(),
+        )
+        .await
+        .wrap_internal_err("failed to fetch project permissions")?;
+    if ProjectPermissions::get_permissions_by_role(
+        &user.role,
+        &team_member,
+        &organization_team_member,
+    )
+    .is_none()
+    {
+        return Err(ApiError::Auth(eyre!(
+            "you do not have permission to read versions for this project"
+        )));
+    }
 
     let groups = sqlx::query!(
         r#"

packages/app-lib/src/api/worlds.rs

@@ -401,7 +401,7 @@ async fn read_singleplayer_world_maybe_locked(
         .to_string();
     let last_played = data.get::<_, i64>("LastPlayed").unwrap_or(0);
     let game_type = data.get::<_, i32>("GameType").unwrap_or(0);
-    let hardcore = data.get::<_, i8>("hardcore").unwrap_or(0) != 0;
+    let hardcore = read_hardcore(data);
 
     let icon = if tokio::fs::try_exists(world_path.join("icon.png"))
         .await
@@ -438,6 +438,14 @@ async fn read_singleplayer_world_maybe_locked(
     })
 }
 
+fn read_hardcore(data: &NbtCompound) -> bool {
+    data.get::<_, &NbtCompound>("difficulty_settings")
+        .and_then(|settings| settings.get::<_, i8>("hardcore"))
+        .or_else(|_| data.get::<_, i8>("hardcore"))
+        .unwrap_or(0)
+        != 0
+}
+
 async fn get_server_worlds_in_instance(
     instance_id: &str,
     instance_dir: &Path,

packages/app-lib/src/state/instances/commands/apply_content_install.rs

@@ -711,7 +711,11 @@ pub(crate) async fn remove_project(
     )
     .await?;
 
-    io::remove_file(base.join(project_path)).await?;
+    match io::remove_file(base.join(project_path)).await {
+        Ok(()) => {}
+        Err(err) if err.kind() == std::io::ErrorKind::NotFound => {}
+        Err(err) => return Err(err.into()),
+    }
 
     if let Some(file) = file {
         content_rows::remove_content_entries_for_file(

packages/blog/changelog.ts

@@ -10,6 +10,14 @@ export type VersionEntry = {
 }
 
 const VERSIONS: VersionEntry[] = [
+	{
+		date: `2026-07-16T19:36:45+00:00`,
+		product: 'app',
+		version: '0.15.12',
+		body: `## Fixed
+- Fixed issue with some modpacks failing to install due to file mismatches.
+- Fixed hardcore worlds generated in 26.1+ not being recognised as hardcore in the Jump back in and Worlds tab.`,
+	},
 	{
 		date: `2026-07-14T22:14:08+00:00`,
 		product: 'app',