fix(labrinth): register debug routes

* remaining globally safe/unsafe buttons

* tweak global traces layout

* deterministic local trace ordering

* fix preview

* ignore severity for ordering

* show globally resolved traces toggle

* minor frontend changes

* prepr

---------

Co-authored-by: Prospector <6166773+Prospector@users.noreply.github.com>

apps/frontend/src/components/ui/moderation/GlobalDetailLocalTraceCard.vue

@@ -5,16 +5,21 @@
 				<p class="m-0 break-words font-semibold text-contrast">
 					{{ trace.project_name }}
 				</p>
-				<p class="m-0 mt-1 break-all text-sm text-secondary">
-					Project {{ trace.project_slug ?? trace.project_id }} / Version
-					{{ trace.version_number }} / File {{ trace.file_name }}
+				<p class="m-0 mt-1 flex flex-wrap items-center gap-1 text-sm text-secondary">
+					<span class="break-all">{{ trace.version_number }}</span>
+					<ChevronRightIcon class="size-4 shrink-0" aria-hidden="true" />
+					<span class="break-all">{{ decodeTracePath(trace.file_name) }}</span>
+					<template v-if="trace.jar">
+						<ChevronRightIcon class="size-4 shrink-0" aria-hidden="true" />
+						<span class="break-all">{{ decodeTracePath(trace.jar) }}</span>
+					</template>
 				</p>
 			</div>
 			<div class="flex flex-wrap items-center gap-2">
-				<span class="text-sm text-secondary">Local</span>
-				<Badge :type="trace.local_status" />
-				<span class="text-sm text-secondary">Effective</span>
-				<Badge :type="trace.effective_status" />
+				<template v-if="trace.local_status !== 'pending'">
+					<span class="text-sm text-secondary">Local</span>
+					<Badge :type="trace.local_status" />
+				</template>
 				<ButtonStyled>
 					<NuxtLink :to="localTraceLink">
 						<ExternalIcon aria-hidden="true" />
@@ -23,31 +28,12 @@
 				</ButtonStyled>
 			</div>
 		</div>
-
-		<div class="mt-3 grid gap-2 text-sm text-secondary md:grid-cols-2">
-			<p class="m-0 break-all">
-				<span class="font-semibold text-contrast">Issue</span>
-				{{ trace.issue_type }}
-			</p>
-			<p class="m-0 break-all">
-				<span class="font-semibold text-contrast">Severity</span>
-				{{ trace.severity }}
-			</p>
-			<p class="m-0 break-all">
-				<span class="font-semibold text-contrast">Path</span>
-				{{ trace.file_path }}
-			</p>
-			<p v-if="trace.jar" class="m-0 break-all">
-				<span class="font-semibold text-contrast">JAR</span>
-				{{ trace.jar }}
-			</p>
-		</div>
 	</div>
 </template>
 
 <script setup lang="ts">
 import type { Labrinth } from '@modrinth/api-client'
-import { ExternalIcon } from '@modrinth/assets'
+import { ChevronRightIcon, ExternalIcon } from '@modrinth/assets'
 import { Badge, ButtonStyled } from '@modrinth/ui'
 
 const props = defineProps<{
@@ -60,4 +46,12 @@ const localTraceLink = computed(
 			props.trace.detail_id,
 		)}`,
 )
+
+function decodeTracePath(path: string): string {
+	try {
+		return decodeURIComponent(path)
+	} catch {
+		return path
+	}
+}
 </script>

apps/frontend/src/components/ui/moderation/GlobalDetailTracesList.vue

@@ -42,20 +42,34 @@
 				:key="trace.detail_key"
 				class="universal-card flex flex-col gap-3"
 			>
-				<div class="flex flex-wrap items-start justify-between gap-3">
+				<div class="grid grid-cols-[minmax(0,1fr)_auto] items-start gap-3">
 					<div class="min-w-0">
-						<div class="flex min-w-0 items-center gap-2">
+						<div class="flex min-w-0 flex-wrap items-center gap-2">
 							<HashIcon class="shrink-0 text-secondary" aria-hidden="true" />
 							<h2 class="m-0 min-w-0 text-lg font-semibold text-contrast">
 								Trace
 								<span class="break-all font-mono text-base">{{ trace.detail_key }}</span>
 							</h2>
+							<span
+								v-if="getLatestLocalTrace(trace)"
+								class="rounded-full border border-solid px-2.5 py-1 text-sm font-medium capitalize"
+								:class="getSeverityBadgeColor(getLatestLocalTrace(trace)?.severity)"
+							>
+								{{ getLatestLocalTrace(trace)?.severity }}
+							</span>
+						</div>
+						<div v-if="getLatestLocalTrace(trace)" class="mt-1 flex flex-wrap gap-x-3 text-sm">
+							<p class="m-0 break-all text-secondary">
+								<span class="font-semibold text-contrast">Issue</span>
+								{{ getLatestLocalTrace(trace)?.issue_type }}
+							</p>
+							<p class="m-0 break-all text-secondary">
+								<span class="font-semibold text-contrast">Path</span>
+								{{ decodeTracePath(getLatestLocalTrace(trace)?.file_path ?? '') }}
+							</p>
 						</div>
-						<p class="m-0 mt-1 text-sm text-secondary">
-							{{ formatTraceCount(trace.local_trace_count) }}
-						</p>
 					</div>
-					<div class="flex shrink-0 flex-wrap items-center gap-2">
+					<div class="flex shrink-0 flex-nowrap items-center gap-2">
 						<Badge :type="trace.verdict" />
 						<ButtonStyled color="red">
 							<button
@@ -70,15 +84,14 @@
 				</div>
 
 				<div v-if="getPreviewLocalTraces(trace).length > 0" class="flex flex-col gap-2">
-					<div
-						v-if="getVisibleLocalTraceTotal(trace) > getPreviewLocalTraces(trace).length"
-						class="flex flex-wrap items-center justify-between gap-2"
-					>
+					<div class="flex flex-wrap items-center justify-between gap-2">
 						<p class="m-0 text-sm text-secondary">
-							Showing first {{ getPreviewLocalTraces(trace).length }} of
-							{{ getVisibleLocalTraceTotal(trace) }} local traces
+							Showing {{ getPreviewLocalTraces(trace).length }} of
+							{{ formatTraceCount(getVisibleLocalTraceTotal(trace)) }}
 						</p>
-						<ButtonStyled>
+						<ButtonStyled
+							v-if="getVisibleLocalTraceTotal(trace) > getPreviewLocalTraces(trace).length"
+						>
 							<NuxtLink :to="getGlobalTraceLink(trace)">
 								<ListIcon aria-hidden="true" />
 								View all
@@ -129,7 +142,7 @@ const isLoading = ref(false)
 const loadError = ref(false)
 const currentPage = ref(1)
 const itemsPerPage = 20
-const localTracePreviewLimit = 10
+const localTracePreviewLimit = 3
 const total = ref(0)
 const traces = ref<Labrinth.TechReview.Internal.GlobalIssueDetail[]>([])
 const removingTraceKeys = reactive<Set<string>>(new Set())
@@ -148,6 +161,34 @@ function getPreviewLocalTraces(trace: Labrinth.TechReview.Internal.GlobalIssueDe
 	return trace.local_traces.slice(0, localTracePreviewLimit)
 }
 
+function getLatestLocalTrace(trace: Labrinth.TechReview.Internal.GlobalIssueDetail) {
+	return trace.local_traces.at(-1)
+}
+
+function decodeTracePath(path: string): string {
+	try {
+		return decodeURIComponent(path)
+	} catch {
+		return path
+	}
+}
+
+function getSeverityBadgeColor(
+	severity: Labrinth.TechReview.Internal.DelphiSeverity | undefined,
+): string {
+	switch (severity) {
+		case 'severe':
+			return 'border-red/60 bg-highlight-red text-red'
+		case 'high':
+			return 'border-orange/60 bg-highlight-orange text-orange'
+		case 'medium':
+			return 'border-green/60 bg-highlight-green text-green'
+		case 'low':
+		default:
+			return 'border-blue/60 bg-highlight-blue text-blue'
+	}
+}
+
 function getVisibleLocalTraceTotal(trace: Labrinth.TechReview.Internal.GlobalIssueDetail) {
 	return Math.max(trace.local_trace_count, trace.local_traces.length)
 }

apps/frontend/src/components/ui/moderation/ModerationTechRevCard.vue

@@ -4,7 +4,6 @@ import {
 	BanIcon,
 	BugIcon,
 	CheckCheckIcon,
-	CheckCircleIcon,
 	CheckIcon,
 	ChevronDownIcon,
 	ChevronRightIcon,
@@ -20,7 +19,6 @@ import {
 	ShieldCheckIcon,
 	SpinnerIcon,
 	TimerIcon,
-	TriangleAlertIcon,
 	XIcon,
 } from '@modrinth/assets'
 import { type TechReviewContext, techReviewQuickReplies } from '@modrinth/moderation'
@@ -36,6 +34,7 @@ import {
 	NavTabs,
 	OverflowMenu,
 	type OverflowMenuOption,
+	Toggle,
 	useFormatBytes,
 	useFormatDateTime,
 	useVIntl,
@@ -247,6 +246,42 @@ function getAllDetails(): Labrinth.TechReview.Internal.ReportIssueDetail[] {
 	return props.item.reports.flatMap((report) => report.issues.flatMap((issue) => issue.details))
 }
 
+const hideGloballyPassed = ref(true)
+
+function isDetailGloballyPassed(detail: Labrinth.TechReview.Internal.ReportIssueDetail): boolean {
+	if (detailDecisionScopes.get(detail.id) === 'global') {
+		return detailDecisions.get(detail.id) === 'safe'
+	}
+
+	return detail.global_status === 'safe'
+}
+
+function isDetailGloballyResolved(detail: Labrinth.TechReview.Internal.ReportIssueDetail): boolean {
+	if (detailDecisionScopes.get(detail.id) === 'global') {
+		return detailDecisions.get(detail.id) !== 'pending'
+	}
+
+	return detail.global_status === 'safe' || detail.global_status === 'unsafe'
+}
+
+const globallyPassedSelectedFileCount = computed(() => {
+	if (!selectedFile.value) return 0
+
+	return selectedFile.value.issues.reduce(
+		(count, issue) => count + issue.details.filter(isDetailGloballyPassed).length,
+		0,
+	)
+})
+
+const globallyResolvedSelectedFileCount = computed(() => {
+	if (!selectedFile.value) return 0
+
+	return selectedFile.value.issues.reduce(
+		(count, issue) => count + issue.details.filter(isDetailGloballyResolved).length,
+		0,
+	)
+})
+
 function applyDecisionToRelatedDetails(
 	detailIds: string[],
 	decision: DetailDecision,
@@ -397,10 +432,7 @@ watch(
 		allFiles.value = [...reports].sort((a, b) => {
 			const aComplete = getFileMarkedCount(a) === getFileDetailCount(a)
 			const bComplete = getFileMarkedCount(b) === getFileDetailCount(b)
-			if (aComplete !== bComplete) return aComplete ? 1 : -1
-			const aSeverity = getFileHighestSeverity(a)
-			const bSeverity = getFileHighestSeverity(b)
-			return (severityOrder[bSeverity] ?? 0) - (severityOrder[aSeverity] ?? 0)
+			return aComplete === bComplete ? 0 : aComplete ? 1 : -1
 		})
 	},
 	{ immediate: true },
@@ -615,6 +647,18 @@ const remainingUnmarkedCount = computed(() => {
 	return getFileDetailCount(selectedFile.value) - getFileMarkedCount(selectedFile.value)
 })
 
+function getSelectedFileFlags(): ClassGroup['flags'] {
+	if (!selectedFile.value) return []
+
+	return selectedFile.value.issues.flatMap((issue) =>
+		issue.details.map((detail) => ({
+			issueId: issue.id,
+			issueType: issue.issue_type,
+			detail,
+		})),
+	)
+}
+
 function getJarFlags(jarGroup: JarGroup): ClassGroup['flags'] {
 	return jarGroup.classes.flatMap((classItem) => classItem.flags)
 }
@@ -629,6 +673,74 @@ function getJarRemainingUnmarkedCount(jarGroup: JarGroup): number {
 
 const isBatchUpdating = ref(false)
 
+function getRemainingGlobalDetailCount(flags: ClassGroup['flags']): number {
+	return new Set(
+		flags
+			.filter(
+				(flag) =>
+					getDetailDecision(flag.detail.id, flag.detail.status) === 'pending' &&
+					canUpdateGlobalDetail(flag.detail),
+			)
+			.map((flag) => flag.detail.key),
+	).size
+}
+
+async function batchMarkRemainingGlobally(flags: ClassGroup['flags'], verdict: 'safe' | 'unsafe') {
+	if (isBatchUpdating.value) return
+
+	const detailsByKey = new Map(
+		flags
+			.filter(
+				(flag) =>
+					getDetailDecision(flag.detail.id, flag.detail.status) === 'pending' &&
+					canUpdateGlobalDetail(flag.detail),
+			)
+			.map((flag) => [flag.detail.key, flag.detail]),
+	)
+	const details = [...detailsByKey.values()]
+
+	if (details.length === 0) return
+
+	isBatchUpdating.value = true
+	try {
+		await client.labrinth.tech_review_internal.updateGlobalIssueDetails(
+			details.map((detail) => ({ detail_key: detail.key, verdict })),
+		)
+
+		applyDecisionToRelatedDetails(
+			details.map((detail) => detail.id),
+			verdictToDecision(verdict),
+			'global',
+		)
+
+		addNotification({
+			type: 'success',
+			title: `Globally marked ${details.length} trace keys as ${verdict}`,
+			text: `All remaining eligible traces have been globally marked as ${
+				verdict === 'safe' ? 'false positives' : 'malicious'
+			}.`,
+		})
+
+		if (
+			selectedFile.value &&
+			getFileMarkedCount(selectedFile.value) === getFileDetailCount(selectedFile.value)
+		) {
+			backToFileList()
+		}
+
+		emit('refetch')
+	} catch (error) {
+		console.error('Failed to batch update global traces:', error)
+		addNotification({
+			type: 'error',
+			title: 'Global batch update failed',
+			text: 'An error occurred while globally updating traces.',
+		})
+	} finally {
+		isBatchUpdating.value = false
+	}
+}
+
 async function batchMarkRemaining(verdict: 'safe' | 'unsafe') {
 	if (!selectedFile.value || isBatchUpdating.value) return
 
@@ -913,7 +1025,7 @@ interface JarGroup {
 function splitJarSegments(jar: string | null, currentFileName: string | null): string[] {
 	if (!jar) return []
 	const segments = jar
-		.split('#')
+		.split(/[/#]/)
 		.map((s) => decodeURIComponent(s.trim()))
 		.filter((s) => s.length > 0)
 	// Skip the first segment if it matches the current file tab (it's already shown in the file list)
@@ -934,6 +1046,10 @@ const groupedByClass = computed<ClassGroup[]>(() => {
 
 	for (const issue of selectedFile.value.issues) {
 		for (const detail of issue.details) {
+			if (hideGloballyPassed.value && isDetailGloballyPassed(detail)) {
+				continue
+			}
+
 			const classKey = `${detail.jar ?? ''}::${detail.file_path}`
 			if (!classMap.has(classKey)) {
 				classMap.set(classKey, {
@@ -959,20 +1075,11 @@ const groupedByClass = computed<ClassGroup[]>(() => {
 		classGroup.flags.sort((a, b) => {
 			const aPreReviewed = isPreReviewed(a.detail.id, a.detail.status)
 			const bPreReviewed = isPreReviewed(b.detail.id, b.detail.status)
-
-			if (aPreReviewed !== bPreReviewed) {
-				return aPreReviewed ? 1 : -1
-			}
-
-			return (severityOrder[b.detail.severity] ?? 0) - (severityOrder[a.detail.severity] ?? 0)
+			return aPreReviewed === bPreReviewed ? 0 : aPreReviewed ? 1 : -1
 		})
 	}
 
-	return Array.from(classMap.values()).sort((a, b) => {
-		const aSeverity = getHighestSeverityInClass(a.flags)
-		const bSeverity = getHighestSeverityInClass(b.flags)
-		return (severityOrder[bSeverity] ?? 0) - (severityOrder[aSeverity] ?? 0)
-	})
+	return Array.from(classMap.values())
 })
 
 const groupedByJar = computed<JarGroup[]>(() => {
@@ -994,11 +1101,7 @@ const groupedByJar = computed<JarGroup[]>(() => {
 	return Array.from(jarMap.values()).sort((a, b) => {
 		const aRoot = isRootJarGroup(a)
 		const bRoot = isRootJarGroup(b)
-		if (aRoot !== bRoot) return aRoot ? -1 : 1
-
-		const aSeverity = getHighestSeverityInClass(a.classes.flatMap((classItem) => classItem.flags))
-		const bSeverity = getHighestSeverityInClass(b.classes.flatMap((classItem) => classItem.flags))
-		return (severityOrder[bSeverity] ?? 0) - (severityOrder[aSeverity] ?? 0)
+		return aRoot === bRoot ? 0 : aRoot ? -1 : 1
 	})
 })
 
@@ -1589,21 +1692,73 @@ function copyId() {
 
 			<template v-else-if="currentTab === 'File' && selectedFile">
 				<div
-					v-if="remainingUnmarkedCount > 0"
-					class="flex gap-2 border-x border-b border-t-0 border-solid border-surface-3 bg-surface-2 p-4"
+					v-if="getFileDetailCount(selectedFile) > 0"
+					class="flex flex-wrap items-center justify-between gap-3 border-x border-b border-t-0 border-solid border-surface-3 bg-surface-2 p-4"
 				>
-					<ButtonStyled color="brand" :disabled="isBatchUpdating">
-						<button @click="batchMarkRemaining('safe')">
-							<CheckCircleIcon class="size-5" />
-							Remaining safe ({{ remainingUnmarkedCount }})
+					<div
+						v-if="remainingUnmarkedCount > 0"
+						class="detail-verdict-buttons"
+						role="group"
+						aria-label="Remaining issue actions"
+					>
+						<span class="remaining-verdict-label"
+							>Remaining issues ({{ remainingUnmarkedCount }})</span
+						>
+						<button
+							v-tooltip="'Remaining globally safe'"
+							class="detail-verdict-button detail-verdict-button--safe"
+							aria-label="Remaining globally safe"
+							:disabled="
+								isBatchUpdating || getRemainingGlobalDetailCount(getSelectedFileFlags()) === 0
+							"
+							@click="batchMarkRemainingGlobally(getSelectedFileFlags(), 'safe')"
+						>
+							<CheckCheckIcon aria-hidden="true" />
 						</button>
-					</ButtonStyled>
-					<ButtonStyled color="red" :disabled="isBatchUpdating">
-						<button @click="batchMarkRemaining('unsafe')">
-							<TriangleAlertIcon class="size-5" />
-							Remaining malware ({{ remainingUnmarkedCount }})
+						<button
+							v-tooltip="'Remaining safe'"
+							class="detail-verdict-button detail-verdict-button--safe"
+							aria-label="Remaining safe"
+							:disabled="isBatchUpdating"
+							@click="batchMarkRemaining('safe')"
+						>
+							<CheckIcon aria-hidden="true" />
 						</button>
-					</ButtonStyled>
+						<button
+							v-tooltip="'Remaining malware'"
+							class="detail-verdict-button detail-verdict-button--unsafe"
+							aria-label="Remaining malware"
+							:disabled="isBatchUpdating"
+							@click="batchMarkRemaining('unsafe')"
+						>
+							<BanIcon aria-hidden="true" />
+						</button>
+						<button
+							v-tooltip="'Remaining globally unsafe'"
+							class="detail-verdict-button detail-verdict-button--unsafe"
+							aria-label="Remaining globally unsafe"
+							:disabled="
+								isBatchUpdating || getRemainingGlobalDetailCount(getSelectedFileFlags()) === 0
+							"
+							@click="batchMarkRemainingGlobally(getSelectedFileFlags(), 'unsafe')"
+						>
+							<ShieldAlertIcon aria-hidden="true" />
+						</button>
+					</div>
+					<label class="ml-auto flex cursor-pointer items-center gap-3 text-sm">
+						<span class="text-right text-secondary">
+							Hide globally passed
+							<span class="text-tertiary block text-xs">
+								{{ globallyResolvedSelectedFileCount }}/{{ getFileDetailCount(selectedFile) }}
+								traces globally resolved
+							</span>
+						</span>
+						<Toggle
+							v-model="hideGloballyPassed"
+							:disabled="globallyPassedSelectedFileCount === 0"
+							small
+						/>
+					</label>
 				</div>
 				<div
 					v-for="jarGroup in groupedByJar"
@@ -1637,25 +1792,55 @@ function copyId() {
 								</template>
 							</div>
 
-							<div v-if="getJarRemainingUnmarkedCount(jarGroup) > 0" class="flex gap-2">
-								<ButtonStyled color="brand" size="small">
-									<button
-										:disabled="isBatchUpdating"
-										@click="batchMarkRemainingInJar(jarGroup, 'safe')"
-									>
-										<CheckCircleIcon class="size-4" />
-										Remaining safe ({{ getJarRemainingUnmarkedCount(jarGroup) }})
-									</button>
-								</ButtonStyled>
-								<ButtonStyled color="red" size="small">
-									<button
-										:disabled="isBatchUpdating"
-										@click="batchMarkRemainingInJar(jarGroup, 'unsafe')"
-									>
-										<TriangleAlertIcon class="size-4" />
-										Remaining malware ({{ getJarRemainingUnmarkedCount(jarGroup) }})
-									</button>
-								</ButtonStyled>
+							<div
+								v-if="getJarRemainingUnmarkedCount(jarGroup) > 0"
+								class="detail-verdict-buttons"
+								role="group"
+								aria-label="Remaining JAR issue actions"
+							>
+								<span class="remaining-verdict-label">
+									Remaining issues ({{ getJarRemainingUnmarkedCount(jarGroup) }})
+								</span>
+								<button
+									v-tooltip="'Remaining globally safe'"
+									class="detail-verdict-button detail-verdict-button--safe"
+									aria-label="Remaining globally safe"
+									:disabled="
+										isBatchUpdating || getRemainingGlobalDetailCount(getJarFlags(jarGroup)) === 0
+									"
+									@click="batchMarkRemainingGlobally(getJarFlags(jarGroup), 'safe')"
+								>
+									<CheckCheckIcon aria-hidden="true" />
+								</button>
+								<button
+									v-tooltip="'Remaining safe'"
+									class="detail-verdict-button detail-verdict-button--safe"
+									aria-label="Remaining safe"
+									:disabled="isBatchUpdating"
+									@click="batchMarkRemainingInJar(jarGroup, 'safe')"
+								>
+									<CheckIcon aria-hidden="true" />
+								</button>
+								<button
+									v-tooltip="'Remaining malware'"
+									class="detail-verdict-button detail-verdict-button--unsafe"
+									aria-label="Remaining malware"
+									:disabled="isBatchUpdating"
+									@click="batchMarkRemainingInJar(jarGroup, 'unsafe')"
+								>
+									<BanIcon aria-hidden="true" />
+								</button>
+								<button
+									v-tooltip="'Remaining globally unsafe'"
+									class="detail-verdict-button detail-verdict-button--unsafe"
+									aria-label="Remaining globally unsafe"
+									:disabled="
+										isBatchUpdating || getRemainingGlobalDetailCount(getJarFlags(jarGroup)) === 0
+									"
+									@click="batchMarkRemainingGlobally(getJarFlags(jarGroup), 'unsafe')"
+								>
+									<ShieldAlertIcon aria-hidden="true" />
+								</button>
 							</div>
 						</div>
 					</div>
@@ -1968,6 +2153,14 @@ pre {
 	background: var(--surface-3);
 }
 
+.remaining-verdict-label {
+	padding-inline: 0.75rem;
+	font-size: 0.875rem;
+	font-weight: 600;
+	white-space: nowrap;
+	color: var(--color-secondary);
+}
+
 .detail-verdict-button {
 	display: flex;
 	width: 2rem;

apps/frontend/src/pages/moderation/global-traces/[key].vue

@@ -20,20 +20,34 @@
 			heading="Failed to load global detail trace"
 		/>
 		<article v-else-if="trace" class="universal-card flex flex-col gap-3">
-			<div class="flex flex-wrap items-start justify-between gap-3">
+			<div class="grid grid-cols-[minmax(0,1fr)_auto] items-start gap-3">
 				<div class="min-w-0">
-					<div class="flex min-w-0 items-center gap-2">
+					<div class="flex min-w-0 flex-wrap items-center gap-2">
 						<HashIcon class="shrink-0 text-secondary" aria-hidden="true" />
 						<h2 class="m-0 min-w-0 text-lg font-semibold text-contrast">
 							Trace
 							<span class="break-all font-mono text-base">{{ trace.detail_key }}</span>
 						</h2>
+						<span
+							v-if="latestLocalTrace"
+							class="rounded-full border border-solid px-2.5 py-1 text-sm font-medium capitalize"
+							:class="getSeverityBadgeColor(latestLocalTrace.severity)"
+						>
+							{{ latestLocalTrace.severity }}
+						</span>
+					</div>
+					<div v-if="latestLocalTrace" class="mt-1 flex flex-wrap gap-x-3 text-sm">
+						<p class="m-0 break-all text-secondary">
+							<span class="font-semibold text-contrast">Issue</span>
+							{{ latestLocalTrace.issue_type }}
+						</p>
+						<p class="m-0 break-all text-secondary">
+							<span class="font-semibold text-contrast">Path</span>
+							{{ decodeTracePath(latestLocalTrace.file_path) }}
+						</p>
 					</div>
-					<p class="m-0 mt-1 text-sm text-secondary">
-						{{ pageStart }}-{{ pageEnd }} of {{ trace.local_trace_count }} local traces
-					</p>
 				</div>
-				<div class="flex shrink-0 flex-wrap items-center gap-2">
+				<div class="flex shrink-0 flex-nowrap items-center gap-2">
 					<Badge :type="trace.verdict" />
 					<ButtonStyled color="red">
 						<button :disabled="isRemoving" @click="removeGlobalTrace">
@@ -45,11 +59,18 @@
 			</div>
 
 			<div
-				v-if="trace.local_trace_count > localTracePageSize"
-				class="flex flex-wrap items-center justify-between gap-3"
+				class="flex flex-wrap items-center justify-between gap-3 border-0 border-t border-solid border-divider pt-3"
 			>
-				<Pagination :page="currentPage" :count="pageCount" @switch-page="switchPage" />
-				<p v-if="isLoading" class="m-0 text-sm text-secondary">Loading page...</p>
+				<p class="m-0 text-sm text-secondary">
+					{{ pageStart }}-{{ pageEnd }} of {{ trace.local_trace_count }} local traces
+					<span v-if="isLoading"> · Loading page...</span>
+				</p>
+				<Pagination
+					v-if="trace.local_trace_count > localTracePageSize"
+					:page="currentPage"
+					:count="pageCount"
+					@switch-page="switchPage"
+				/>
 			</div>
 
 			<div v-if="trace.local_traces.length > 0" class="flex flex-col gap-2">
@@ -114,6 +135,29 @@ const pageStart = computed(() =>
 const pageEnd = computed(() =>
 	Math.min(currentPage.value * localTracePageSize, trace.value?.local_trace_count ?? 0),
 )
+const latestLocalTrace = computed(() => trace.value?.local_traces.at(-1))
+
+function decodeTracePath(path: string): string {
+	try {
+		return decodeURIComponent(path)
+	} catch {
+		return path
+	}
+}
+
+function getSeverityBadgeColor(severity: Labrinth.TechReview.Internal.DelphiSeverity): string {
+	switch (severity) {
+		case 'severe':
+			return 'border-red/60 bg-highlight-red text-red'
+		case 'high':
+			return 'border-orange/60 bg-highlight-orange text-orange'
+		case 'medium':
+			return 'border-green/60 bg-highlight-green text-green'
+		case 'low':
+		default:
+			return 'border-blue/60 bg-highlight-blue text-blue'
+	}
+}
 
 async function fetchTracePage(afterDetailId: string | null) {
 	return await client.labrinth.tech_review_internal.getGlobalIssueDetail({

apps/labrinth/.sqlx/query-09ebec1a568edf1959f20b33d8ba2b8edb55d93ada8f2243448865163f555d8d.json

@@ -1,16 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            INSERT INTO shared_instance_users (user_id, shared_instance_id, permissions)\n            VALUES ($1, $2, $3)\n            ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Int8",
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "09ebec1a568edf1959f20b33d8ba2b8edb55d93ada8f2243448865163f555d8d"
-}

apps/labrinth/.sqlx/query-147e143aaaff82c71b89daddcc8805a0874d1c5ad8469dd83133ac771b86ea4e.json

@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "SELECT id FROM versions WHERE mod_id = ANY($1::bigint[])",
+  "query": "SELECT id FROM versions WHERE mod_id = ANY($1::bigint[]) ORDER BY id",
   "describe": {
     "columns": [
       {
@@ -18,5 +18,5 @@
       false
     ]
   },
-  "hash": "50d087248322373b2d5fc40e1c7b8a855b55d907d7fba0af0738c37366cb93e0"
+  "hash": "147e143aaaff82c71b89daddcc8805a0874d1c5ad8469dd83133ac771b86ea4e"
 }

apps/labrinth/.sqlx/query-1ebe19b7b4f10039065967a0b1ca4bb38acc54e4ea5de020fffef7457000fa6e.json

@@ -1,46 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            SELECT id, title, owner_id, public, current_version_id\n            FROM shared_instances\n            WHERE id = $1\n            ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "title",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 2,
-        "name": "owner_id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 3,
-        "name": "public",
-        "type_info": "Bool"
-      },
-      {
-        "ordinal": 4,
-        "name": "current_version_id",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": [
-      false,
-      false,
-      false,
-      false,
-      true
-    ]
-  },
-  "hash": "1ebe19b7b4f10039065967a0b1ca4bb38acc54e4ea5de020fffef7457000fa6e"
-}

apps/labrinth/.sqlx/query-265c4d6f33714c8a5cf3137c429e2b57e917e9507942d65f40c1b733209cabf0.json

@@ -1,46 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            SELECT id, shared_instance_id, size, sha512, created\n            FROM shared_instance_versions\n            WHERE shared_instance_id = $1\n            ORDER BY created DESC\n            ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "shared_instance_id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 2,
-        "name": "size",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 3,
-        "name": "sha512",
-        "type_info": "Bytea"
-      },
-      {
-        "ordinal": 4,
-        "name": "created",
-        "type_info": "Timestamptz"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": [
-      false,
-      false,
-      false,
-      false,
-      false
-    ]
-  },
-  "hash": "265c4d6f33714c8a5cf3137c429e2b57e917e9507942d65f40c1b733209cabf0"
-}

apps/labrinth/.sqlx/query-3a2a1962875e5164d3d20802886db93631d57be2fe82bc2986dffd878ef1174d.json

@@ -1,14 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n\t\t\t\tDELETE FROM shared_instance_invited_users\n\t\t\t\tWHERE invited_user_id = $1\n\t\t\t\t",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "3a2a1962875e5164d3d20802886db93631d57be2fe82bc2986dffd878ef1174d"
-}

apps/labrinth/.sqlx/query-47130ef29ce5914528e5424fe516a9158a3ea08f8720f6df5b4902cd8094d3bb.json

@@ -1,14 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        DELETE FROM shared_instance_versions\n        WHERE id = $1\n        ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "47130ef29ce5914528e5424fe516a9158a3ea08f8720f6df5b4902cd8094d3bb"
-}

apps/labrinth/.sqlx/query-47ec9f179f1c52213bd32b37621ab13ae43d180b8c86cb2a6fab0253dd4eba55.json

@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE shared_instances SET current_version_id = $1 WHERE id = $2",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "47ec9f179f1c52213bd32b37621ab13ae43d180b8c86cb2a6fab0253dd4eba55"
-}

apps/labrinth/.sqlx/query-63a9a89443566baa880ddbe05f741e2a83b50d89f5954ab8d951a090e702de73.json

@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            didws.id AS \"id!: DelphiReportIssueDetailsId\",\n            didws.issue_id AS \"issue_id!: DelphiReportIssueId\",\n            didws.key AS \"key!: String\",\n            didws.jar AS \"jar?: String\",\n            didws.file_path AS \"file_path!: String\",\n            didws.data AS \"data!: sqlx::types::Json<HashMap<String, serde_json::Value>>\",\n            didws.severity AS \"severity!: DelphiSeverity\",\n            didws.local_status AS \"local_status?: DelphiStatus\",\n            didws.global_status AS \"global_status?: DelphiStatus\",\n            didws.status AS \"status!: DelphiStatus\"\n        FROM delphi_issue_details_with_statuses didws\n        WHERE didws.issue_id = ANY($1::bigint[])\n        ",
+  "query": "\n        SELECT\n            didws.id AS \"id!: DelphiReportIssueDetailsId\",\n            didws.issue_id AS \"issue_id!: DelphiReportIssueId\",\n            didws.key AS \"key!: String\",\n            didws.jar AS \"jar?: String\",\n            didws.file_path AS \"file_path!: String\",\n            didws.data AS \"data!: sqlx::types::Json<HashMap<String, serde_json::Value>>\",\n            didws.severity AS \"severity!: DelphiSeverity\",\n            didws.local_status AS \"local_status?: DelphiStatus\",\n            didws.global_status AS \"global_status?: DelphiStatus\",\n            didws.status AS \"status!: DelphiStatus\"\n        FROM delphi_issue_details_with_statuses didws\n        WHERE didws.issue_id = ANY($1::bigint[])\n        ORDER BY didws.issue_id, didws.id\n        ",
   "describe": {
     "columns": [
       {
@@ -117,5 +117,5 @@
       true
     ]
   },
-  "hash": "9070b1b6a5b1e93eb1fd1838c522fa6084ad6a5c86fafbfe8448ea7cc86f38ba"
+  "hash": "63a9a89443566baa880ddbe05f741e2a83b50d89f5954ab8d951a090e702de73"
 }

apps/labrinth/.sqlx/query-6b166d129b0ee028898620054a58fa4c3641eb2221e522bf50abad4f5e977599.json

@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            UPDATE shared_instances\n            SET public = $1\n            WHERE id = $2\n            ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Bool",
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "6b166d129b0ee028898620054a58fa4c3641eb2221e522bf50abad4f5e977599"
-}

apps/labrinth/.sqlx/query-6f72c853e139f23322fe6f1f02e4e07e5ae80b5dfca6dc041a03c0c7a30a5cf1.json

@@ -1,17 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            INSERT INTO shared_instances (id, title, owner_id, current_version_id)\n            VALUES ($1, $2, $3, $4)\n            ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Varchar",
-        "Int8",
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "6f72c853e139f23322fe6f1f02e4e07e5ae80b5dfca6dc041a03c0c7a30a5cf1"
-}

apps/labrinth/.sqlx/query-72012eb0655d9130a7c7894f7682015c170b2fb325aaef554f08aac34457a3fa.json

@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            id AS \"file_id: DBFileId\",\n            version_id AS \"version_id: DBVersionId\",\n            url,\n            filename,\n            size\n        FROM files\n        WHERE version_id = ANY($1::bigint[])\n        ",
+  "query": "\n        SELECT\n            id AS \"file_id: DBFileId\",\n            version_id AS \"version_id: DBVersionId\",\n            url,\n            filename,\n            size\n        FROM files\n        WHERE version_id = ANY($1::bigint[])\n        ORDER BY version_id, id\n        ",
   "describe": {
     "columns": [
       {
@@ -42,5 +42,5 @@
       false
     ]
   },
-  "hash": "8e38571ffae8bf246973d328c890a45b87c0f71d53cf46f390c4b286677b2b31"
+  "hash": "72012eb0655d9130a7c7894f7682015c170b2fb325aaef554f08aac34457a3fa"
 }

apps/labrinth/.sqlx/query-72ae0e8debd06067894a2f7bea279446dd964da4efa49c5464cebde57860f741.json

@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n                UPDATE shared_instances\n                SET owner_id = $1\n                WHERE owner_id = $2\n                ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "72ae0e8debd06067894a2f7bea279446dd964da4efa49c5464cebde57860f741"
-}

apps/labrinth/.sqlx/query-7c445073f61e30723416a9690aa9d227d95f2a8f2eb9852833e14c723903988b.json

@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT EXISTS(SELECT 1 FROM shared_instance_versions WHERE id=$1)",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "exists",
-        "type_info": "Bool"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "7c445073f61e30723416a9690aa9d227d95f2a8f2eb9852833e14c723903988b"
-}

apps/labrinth/.sqlx/query-8d37c8c2633b7d601c7ba74d63608ff40af3b6b56f43540ec3798ef30e5c0b9d.json

@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            id AS \"report_id!: DelphiReportId\",\n            file_id AS \"file_id!: DBFileId\",\n            created,\n            severity AS \"severity!: DelphiSeverity\"\n        FROM delphi_reports\n        WHERE file_id = ANY($1::bigint[])\n        ",
+  "query": "\n        SELECT\n            id AS \"report_id!: DelphiReportId\",\n            file_id AS \"file_id!: DBFileId\",\n            created,\n            severity AS \"severity!: DelphiSeverity\"\n        FROM delphi_reports\n        WHERE file_id = ANY($1::bigint[])\n        ORDER BY file_id, created, id\n        ",
   "describe": {
     "columns": [
       {
@@ -48,5 +48,5 @@
       false
     ]
   },
-  "hash": "10e2a3b31ba94b93ed2d6c9753a5aabf13190a0b336089e6521022069813cf17"
+  "hash": "8d37c8c2633b7d601c7ba74d63608ff40af3b6b56f43540ec3798ef30e5c0b9d"
 }

apps/labrinth/.sqlx/query-9c6e18cb19251e54b3b96446ab88d84842152b82c9a0032d1db587d7099b8550.json

@@ -1,46 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            -- See https://github.com/launchbadge/sqlx/issues/1266 for why we need all the \"as\"\n            SELECT\n                id as \"id!\",\n                title as \"title!\",\n                public as \"public!\",\n                owner_id as \"owner_id!\",\n                current_version_id\n            FROM shared_instances\n            WHERE owner_id = $1\n            UNION\n            SELECT\n                id as \"id!\",\n                title as \"title!\",\n                public as \"public!\",\n                owner_id as \"owner_id!\",\n                current_version_id\n            FROM shared_instances\n            JOIN shared_instance_users ON id = shared_instance_id\n            WHERE user_id = $1\n            ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id!",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "title!",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 2,
-        "name": "public!",
-        "type_info": "Bool"
-      },
-      {
-        "ordinal": 3,
-        "name": "owner_id!",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 4,
-        "name": "current_version_id",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": [
-      null,
-      null,
-      null,
-      null,
-      null
-    ]
-  },
-  "hash": "9c6e18cb19251e54b3b96446ab88d84842152b82c9a0032d1db587d7099b8550"
-}

apps/labrinth/.sqlx/query-9ccaf8ea52b1b6f0880d34cdb4a9405e28c265bef6121b457c4f39cacf00683f.json

@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            UPDATE shared_instances\n            SET title = $1\n            WHERE id = $2\n            ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Varchar",
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "9ccaf8ea52b1b6f0880d34cdb4a9405e28c265bef6121b457c4f39cacf00683f"
-}

apps/labrinth/.sqlx/query-aec58041cf5e5e68501652336581b8c709645ef29f3b5fb6e8e07fc212b36798.json

@@ -1,34 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n                        SELECT shared_instance_id, user_id, permissions\n                        FROM shared_instance_users\n                        WHERE shared_instance_id = ANY($1)\n                        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "shared_instance_id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "user_id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 2,
-        "name": "permissions",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8Array"
-      ]
-    },
-    "nullable": [
-      false,
-      false,
-      false
-    ]
-  },
-  "hash": "aec58041cf5e5e68501652336581b8c709645ef29f3b5fb6e8e07fc212b36798"
-}

apps/labrinth/.sqlx/query-b93253bbc35b24974d13bc8ee0447be2a18275f33f8991d910f693fbcc1ff731.json

@@ -1,46 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            SELECT id, shared_instance_id, size, sha512, created\n            FROM shared_instance_versions\n            WHERE id = $1\n            ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 1,
-        "name": "shared_instance_id",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 2,
-        "name": "size",
-        "type_info": "Int8"
-      },
-      {
-        "ordinal": 3,
-        "name": "sha512",
-        "type_info": "Bytea"
-      },
-      {
-        "ordinal": 4,
-        "name": "created",
-        "type_info": "Timestamptz"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": [
-      false,
-      false,
-      false,
-      false,
-      false
-    ]
-  },
-  "hash": "b93253bbc35b24974d13bc8ee0447be2a18275f33f8991d910f693fbcc1ff731"
-}

apps/labrinth/.sqlx/query-c3869a595693757ccf81085d0c8eb2231578aff18c93d02ead97c3c07f0b27ea.json

@@ -1,23 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            SELECT permissions\n            FROM shared_instance_users\n            WHERE shared_instance_id = $1 AND user_id = $2\n            ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "permissions",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Int8"
-      ]
-    },
-    "nullable": [
-      false
-    ]
-  },
-  "hash": "c3869a595693757ccf81085d0c8eb2231578aff18c93d02ead97c3c07f0b27ea"
-}

apps/labrinth/.sqlx/query-c69a7a5296941a52f15c3c073e65e8eff6516004d0636357f146047789f8f8c1.json

@@ -1,6 +1,6 @@
 {
   "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            id AS \"id: DelphiReportIssueId\",\n            report_id AS \"report_id: DelphiReportId\",\n            issue_type\n        FROM delphi_report_issues\n        WHERE report_id = ANY($1::bigint[])\n        ",
+  "query": "\n        SELECT\n            id AS \"id: DelphiReportIssueId\",\n            report_id AS \"report_id: DelphiReportId\",\n            issue_type\n        FROM delphi_report_issues\n        WHERE report_id = ANY($1::bigint[])\n        ORDER BY report_id, id\n        ",
   "describe": {
     "columns": [
       {
@@ -30,5 +30,5 @@
       false
     ]
   },
-  "hash": "632b79f51dd39a75ebff838ca4beab463f84aa32246288cc251881ec41d207f5"
+  "hash": "c69a7a5296941a52f15c3c073e65e8eff6516004d0636357f146047789f8f8c1"
 }

apps/labrinth/.sqlx/query-cef730c02bb67b0536d35e5aaca0bd34c3893e8b55bbd126a988137ec7bf1ff9.json

@@ -1,14 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        DELETE FROM shared_instances\n        WHERE id = $1\n        ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "cef730c02bb67b0536d35e5aaca0bd34c3893e8b55bbd126a988137ec7bf1ff9"
-}

apps/labrinth/.sqlx/query-d8558a8039ade3b383db4f0e095e6826f46c27ab3a21520e9e169fd1491521c4.json

@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT EXISTS(SELECT 1 FROM shared_instances WHERE id=$1)",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "exists",
-        "type_info": "Bool"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "d8558a8039ade3b383db4f0e095e6826f46c27ab3a21520e9e169fd1491521c4"
-}

apps/labrinth/.sqlx/query-d8a1d710f86b3df4d99c2d2ec26ec405531e4270be85087122245991ec88473e.json

@@ -1,18 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n            INSERT INTO shared_instance_versions (id, shared_instance_id, size, sha512, created)\n            VALUES ($1, $2, $3, $4, $5)\n            ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8",
-        "Int8",
-        "Int8",
-        "Bytea",
-        "Timestamptz"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "d8a1d710f86b3df4d99c2d2ec26ec405531e4270be85087122245991ec88473e"
-}

apps/labrinth/.sqlx/query-d926d015cece307da567ac44b84d3e7416723ff95fcd83587f113621a9887420.json

@@ -1,14 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n\t\t\t\tDELETE FROM shared_instance_users\n\t\t\t\tWHERE user_id = $1\n\t\t\t\t",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "d926d015cece307da567ac44b84d3e7416723ff95fcd83587f113621a9887420"
-}

apps/labrinth/.sqlx/query-f6388b5026e25191840d1a157a9ed48aaedab5db381f4efc389b852d9020a0e6.json

@@ -1,14 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        UPDATE shared_instances\n        SET current_version_id = (\n            SELECT id FROM shared_instance_versions\n            WHERE shared_instance_id = $1\n            ORDER BY created DESC\n            LIMIT 1\n        )\n        WHERE id = $1\n        ",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int8"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "f6388b5026e25191840d1a157a9ed48aaedab5db381f4efc389b852d9020a0e6"
-}

apps/labrinth/migrations/20260714120000_drop-shared-instances.sql

@@ -0,0 +1,5 @@
+DROP TABLE IF EXISTS shared_instance_versions CASCADE;
+DROP TABLE IF EXISTS shared_instance_invite_links CASCADE;
+DROP TABLE IF EXISTS shared_instance_invited_users CASCADE;
+DROP TABLE IF EXISTS shared_instance_users CASCADE;
+DROP TABLE IF EXISTS shared_instances CASCADE;

apps/labrinth/src/database/models/ids.rs

@@ -5,9 +5,8 @@ use crate::models::ids::{
     ChargeId, CollectionId, FileId, ImageId, NotificationId,
     OAuthAccessTokenId, OAuthClientAuthorizationId, OAuthClientId,
     OAuthRedirectUriId, OrganizationId, PasskeyId, PatId, PayoutId, ProductId,
-    ProductPriceId, ProjectId, ReportId, SessionId, SharedInstanceId,
-    SharedInstanceVersionId, TeamId, TeamMemberId, ThreadId, ThreadMessageId,
-    UserSubscriptionId, VersionId,
+    ProductPriceId, ProjectId, ReportId, SessionId, TeamId, TeamMemberId,
+    ThreadId, ThreadMessageId, UserSubscriptionId, VersionId,
 };
 use ariadne::ids::base62_impl::to_base62;
 use ariadne::ids::{UserId, random_base62_rng, random_base62_rng_range};
@@ -238,14 +237,6 @@ db_id_interface!(
     SessionId,
     generator: generate_session_id @ "sessions",
 );
-db_id_interface!(
-    SharedInstanceId,
-    generator: generate_shared_instance_id @ "shared_instances",
-);
-db_id_interface!(
-    SharedInstanceVersionId,
-    generator: generate_shared_instance_version_id @ "shared_instance_versions",
-);
 db_id_interface!(
     TeamId,
     generator: generate_team_id @ "teams",

apps/labrinth/src/database/models/mod.rs

@@ -32,7 +32,6 @@ pub mod products_tax_identifier_item;
 pub mod project_item;
 pub mod report_item;
 pub mod session_item;
-pub mod shared_instance_item;
 pub mod team_item;
 pub mod thread_item;
 pub mod user_item;

apps/labrinth/src/database/models/shared_instance_item.rs

@@ -1,336 +0,0 @@
-use crate::database::PgTransaction;
-use crate::database::models::{
-    DBSharedInstanceId, DBSharedInstanceVersionId, DBUserId,
-};
-use crate::database::redis::RedisPool;
-use crate::models::shared_instances::SharedInstanceUserPermissions;
-use chrono::{DateTime, Utc};
-use dashmap::DashMap;
-use futures_util::TryStreamExt;
-use serde::{Deserialize, Serialize};
-
-//region shared_instances
-pub struct DBSharedInstance {
-    pub id: DBSharedInstanceId,
-    pub title: String,
-    pub owner_id: DBUserId,
-    pub public: bool,
-    pub current_version_id: Option<DBSharedInstanceVersionId>,
-}
-
-struct SharedInstanceQueryResult {
-    id: i64,
-    title: String,
-    owner_id: i64,
-    public: bool,
-    current_version_id: Option<i64>,
-}
-
-impl From<SharedInstanceQueryResult> for DBSharedInstance {
-    fn from(val: SharedInstanceQueryResult) -> Self {
-        DBSharedInstance {
-            id: DBSharedInstanceId(val.id),
-            title: val.title,
-            owner_id: DBUserId(val.owner_id),
-            public: val.public,
-            current_version_id: val
-                .current_version_id
-                .map(DBSharedInstanceVersionId),
-        }
-    }
-}
-
-impl DBSharedInstance {
-    pub async fn insert(
-        &self,
-        transaction: &mut PgTransaction<'_>,
-    ) -> Result<(), sqlx::Error> {
-        sqlx::query!(
-            "
-            INSERT INTO shared_instances (id, title, owner_id, current_version_id)
-            VALUES ($1, $2, $3, $4)
-            ",
-            self.id as DBSharedInstanceId,
-            self.title,
-            self.owner_id as DBUserId,
-            self.current_version_id.map(|x| x.0),
-        )
-        .execute(&mut *transaction)
-        .await?;
-
-        Ok(())
-    }
-
-    pub async fn get(
-        id: DBSharedInstanceId,
-        exec: impl crate::database::Executor<'_, Database = sqlx::Postgres>,
-    ) -> Result<Option<Self>, sqlx::Error> {
-        let result = sqlx::query_as!(
-            SharedInstanceQueryResult,
-            "
-            SELECT id, title, owner_id, public, current_version_id
-            FROM shared_instances
-            WHERE id = $1
-            ",
-            id.0,
-        )
-        .fetch_optional(exec)
-        .await?;
-
-        Ok(result.map(Into::into))
-    }
-
-    pub async fn list_for_user(
-        user: DBUserId,
-        exec: impl crate::database::Executor<'_, Database = sqlx::Postgres>,
-    ) -> Result<Vec<Self>, sqlx::Error> {
-        let results = sqlx::query_as!(
-            SharedInstanceQueryResult,
-            r#"
-            -- See https://github.com/launchbadge/sqlx/issues/1266 for why we need all the "as"
-            SELECT
-                id as "id!",
-                title as "title!",
-                public as "public!",
-                owner_id as "owner_id!",
-                current_version_id
-            FROM shared_instances
-            WHERE owner_id = $1
-            UNION
-            SELECT
-                id as "id!",
-                title as "title!",
-                public as "public!",
-                owner_id as "owner_id!",
-                current_version_id
-            FROM shared_instances
-            JOIN shared_instance_users ON id = shared_instance_id
-            WHERE user_id = $1
-            "#,
-            user.0,
-        )
-        .fetch_all(exec)
-        .await?;
-
-        Ok(results.into_iter().map(Into::into).collect())
-    }
-}
-//endregion
-
-//region shared_instance_users
-const USERS_NAMESPACE: &str = "shared_instance_users";
-
-#[derive(Deserialize, Serialize, Clone, Debug)]
-pub struct DBSharedInstanceUser {
-    pub user_id: DBUserId,
-    pub shared_instance_id: DBSharedInstanceId,
-    pub permissions: SharedInstanceUserPermissions,
-}
-
-impl DBSharedInstanceUser {
-    pub async fn insert(
-        &self,
-        transaction: &mut PgTransaction<'_>,
-    ) -> Result<(), sqlx::Error> {
-        sqlx::query!(
-            "
-            INSERT INTO shared_instance_users (user_id, shared_instance_id, permissions)
-            VALUES ($1, $2, $3)
-            ",
-            self.user_id as DBUserId,
-            self.shared_instance_id as DBSharedInstanceId,
-            self.permissions.bits() as i64,
-        )
-        .execute(&mut *transaction)
-        .await?;
-
-        Ok(())
-    }
-
-    pub async fn get_user_permissions(
-        instance_id: DBSharedInstanceId,
-        user_id: DBUserId,
-        exec: impl crate::database::Executor<'_, Database = sqlx::Postgres>,
-    ) -> Result<Option<SharedInstanceUserPermissions>, super::DatabaseError>
-    {
-        let permissions = sqlx::query!(
-            "
-            SELECT permissions
-            FROM shared_instance_users
-            WHERE shared_instance_id = $1 AND user_id = $2
-            ",
-            instance_id as DBSharedInstanceId,
-            user_id as DBUserId,
-        )
-        .fetch_optional(exec)
-        .await?
-        .map(|x| {
-            SharedInstanceUserPermissions::from_bits(x.permissions as u64)
-                .unwrap_or(SharedInstanceUserPermissions::empty())
-        });
-
-        Ok(permissions)
-    }
-
-    pub async fn get_from_instance(
-        instance_id: DBSharedInstanceId,
-        exec: impl crate::database::Executor<'_, Database = sqlx::Postgres>,
-        redis: &RedisPool,
-    ) -> Result<Vec<DBSharedInstanceUser>, super::DatabaseError> {
-        Self::get_from_instance_many(&[instance_id], exec, redis).await
-    }
-
-    pub async fn get_from_instance_many(
-        instance_ids: &[DBSharedInstanceId],
-        exec: impl crate::database::Executor<'_, Database = sqlx::Postgres>,
-        redis: &RedisPool,
-    ) -> Result<Vec<DBSharedInstanceUser>, super::DatabaseError> {
-        if instance_ids.is_empty() {
-            return Ok(vec![]);
-        }
-
-        let users = redis
-            .get_cached_keys(
-                USERS_NAMESPACE,
-                &instance_ids.iter().map(|id| id.0).collect::<Vec<_>>(),
-                async |user_ids| {
-                    let users = sqlx::query!(
-                        "
-                        SELECT shared_instance_id, user_id, permissions
-                        FROM shared_instance_users
-                        WHERE shared_instance_id = ANY($1)
-                        ",
-                        &user_ids
-                    )
-                    .fetch(exec)
-                    .try_fold(DashMap::new(), |acc: DashMap<_, Vec<_>>, m| {
-                        acc.entry(m.shared_instance_id).or_default().push(
-                            DBSharedInstanceUser {
-                                user_id: DBUserId(m.user_id),
-                                shared_instance_id: DBSharedInstanceId(
-                                    m.shared_instance_id,
-                                ),
-                                permissions:
-                                    SharedInstanceUserPermissions::from_bits(
-                                        m.permissions as u64,
-                                    )
-                                    .unwrap_or(
-                                        SharedInstanceUserPermissions::empty(),
-                                    ),
-                            },
-                        );
-
-                        async move { Ok(acc) }
-                    })
-                    .await?;
-
-                    Ok(users)
-                },
-            )
-            .await?;
-
-        Ok(users.into_iter().flatten().collect())
-    }
-
-    pub async fn clear_cache(
-        instance_id: DBSharedInstanceId,
-        redis: &RedisPool,
-    ) -> Result<(), super::DatabaseError> {
-        let mut redis = redis.connect().await?;
-        redis.delete(USERS_NAMESPACE, instance_id.0).await?;
-        Ok(())
-    }
-}
-//endregion
-
-//region shared_instance_versions
-pub struct DBSharedInstanceVersion {
-    pub id: DBSharedInstanceVersionId,
-    pub shared_instance_id: DBSharedInstanceId,
-    pub size: u64,
-    pub sha512: Vec<u8>,
-    pub created: DateTime<Utc>,
-}
-
-struct SharedInstanceVersionQueryResult {
-    id: i64,
-    shared_instance_id: i64,
-    size: i64,
-    sha512: Vec<u8>,
-    created: DateTime<Utc>,
-}
-
-impl From<SharedInstanceVersionQueryResult> for DBSharedInstanceVersion {
-    fn from(val: SharedInstanceVersionQueryResult) -> Self {
-        DBSharedInstanceVersion {
-            id: DBSharedInstanceVersionId(val.id),
-            shared_instance_id: DBSharedInstanceId(val.shared_instance_id),
-            size: val.size as u64,
-            sha512: val.sha512,
-            created: val.created,
-        }
-    }
-}
-
-impl DBSharedInstanceVersion {
-    pub async fn insert(
-        &self,
-        transaction: &mut PgTransaction<'_>,
-    ) -> Result<(), sqlx::Error> {
-        sqlx::query!(
-            "
-            INSERT INTO shared_instance_versions (id, shared_instance_id, size, sha512, created)
-            VALUES ($1, $2, $3, $4, $5)
-            ",
-            self.id as DBSharedInstanceVersionId,
-            self.shared_instance_id as DBSharedInstanceId,
-            self.size as i64,
-            self.sha512,
-            self.created,
-        )
-        .execute(&mut *transaction)
-        .await?;
-
-        Ok(())
-    }
-
-    pub async fn get(
-        id: DBSharedInstanceVersionId,
-        exec: impl crate::database::Executor<'_, Database = sqlx::Postgres>,
-    ) -> Result<Option<Self>, sqlx::Error> {
-        let result = sqlx::query_as!(
-            SharedInstanceVersionQueryResult,
-            "
-            SELECT id, shared_instance_id, size, sha512, created
-            FROM shared_instance_versions
-            WHERE id = $1
-            ",
-            id as DBSharedInstanceVersionId,
-        )
-        .fetch_optional(exec)
-        .await?;
-
-        Ok(result.map(Into::into))
-    }
-
-    pub async fn get_for_instance(
-        instance_id: DBSharedInstanceId,
-        exec: impl crate::database::Executor<'_, Database = sqlx::Postgres>,
-    ) -> Result<Vec<Self>, sqlx::Error> {
-        let results = sqlx::query_as!(
-            SharedInstanceVersionQueryResult,
-            "
-            SELECT id, shared_instance_id, size, sha512, created
-            FROM shared_instance_versions
-            WHERE shared_instance_id = $1
-            ORDER BY created DESC
-            ",
-            instance_id as DBSharedInstanceId,
-        )
-        .fetch_all(exec)
-        .await?;
-
-        Ok(results.into_iter().map(Into::into).collect())
-    }
-}
-//endregion

apps/labrinth/src/database/models/user_item.rs

@@ -631,19 +631,6 @@ impl DBUser {
             .await
             .wrap_err("failed to update versions author_id")?;
 
-            sqlx::query!(
-                "
-                UPDATE shared_instances
-                SET owner_id = $1
-                WHERE owner_id = $2
-                ",
-                deleted_user as DBUserId,
-                id as DBUserId,
-            )
-            .execute(&mut *transaction)
-            .await
-            .wrap_err("failed to update shared_instances owner_id")?;
-
             use futures::TryStreamExt;
             let notifications: Vec<i64> = sqlx::query!(
                 "
@@ -1009,28 +996,6 @@ impl DBUser {
             .await
             .wrap_err("failed to delete oauth_client_authorizations")?;
 
-            sqlx::query!(
-                "
-				DELETE FROM shared_instance_users
-				WHERE user_id = $1
-				",
-                id as DBUserId,
-            )
-            .execute(&mut *transaction)
-            .await
-            .wrap_err("failed to delete shared_instance_users")?;
-
-            sqlx::query!(
-                "
-				DELETE FROM shared_instance_invited_users
-				WHERE invited_user_id = $1
-				",
-                id as DBUserId,
-            )
-            .execute(&mut *transaction)
-            .await
-            .wrap_err("failed to delete shared_instance_invited_users")?;
-
             sqlx::query!(
                 "
 				UPDATE users_redeemals

apps/labrinth/src/main.rs

@@ -15,10 +15,7 @@ use labrinth::search;
 use labrinth::util::anrok;
 use labrinth::util::gotenberg::GotenbergClient;
 use labrinth::util::ratelimit::rate_limit_middleware;
-use labrinth::{app_data_config, app_fallback_config, env};
-use labrinth::{
-    app_routes_config_internal, app_routes_config_v2, app_routes_config_v3,
-};
+use labrinth::{app_data_config, app_fallback_config, app_routes_config, env};
 use labrinth::{clickhouse, database, file_hosting};
 use scalar_api_reference::actix_web::config as scalar_config;
 use serde_json::json;
@@ -275,11 +272,7 @@ async fn app() -> std::io::Result<()> {
             // own - See `sentry::SentryErrorReporting` for why.
             .wrap(labrinth::util::sentry::SentryErrorReporting)
             .configure(|cfg| app_data_config(cfg, labrinth_config.clone()))
-            .configure(|cfg| app_routes_config_v2(cfg, labrinth_config.clone()))
-            .configure(|cfg| app_routes_config_v3(cfg, labrinth_config.clone()))
-            .configure(|cfg| {
-                app_routes_config_internal(cfg, labrinth_config.clone())
-            });
+            .configure(|cfg| app_routes_config(cfg, labrinth_config.clone()));
 
         let scalar_configuration = json!({
             "sources": [

apps/labrinth/src/models/mod.rs

@@ -18,7 +18,6 @@ pub use v3::payouts;
 pub use v3::projects;
 pub use v3::reports;
 pub use v3::sessions;
-pub use v3::shared_instances;
 pub use v3::teams;
 pub use v3::threads;
 pub use v3::users;

apps/labrinth/src/models/v3/ids.rs

@@ -19,8 +19,6 @@ base62_id!(ProductPriceId);
 base62_id!(ProjectId);
 base62_id!(ReportId);
 base62_id!(SessionId);
-base62_id!(SharedInstanceId);
-base62_id!(SharedInstanceVersionId);
 base62_id!(TeamId);
 base62_id!(TeamMemberId);
 base62_id!(ThreadId);

apps/labrinth/src/models/v3/mod.rs

@@ -15,7 +15,6 @@ pub mod payouts;
 pub mod projects;
 pub mod reports;
 pub mod sessions;
-pub mod shared_instances;
 pub mod teams;
 pub mod threads;
 pub mod user_limits;

apps/labrinth/src/models/v3/shared_instances.rs

@@ -1,89 +0,0 @@
-use crate::bitflags_serde_impl;
-use crate::database::models::shared_instance_item::{
-    DBSharedInstance, DBSharedInstanceUser, DBSharedInstanceVersion,
-};
-use crate::models::ids::{SharedInstanceId, SharedInstanceVersionId};
-use ariadne::ids::UserId;
-use bitflags::bitflags;
-use chrono::{DateTime, Utc};
-use hex::ToHex;
-use serde::{Deserialize, Serialize};
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct SharedInstance {
-    pub id: SharedInstanceId,
-    pub title: String,
-    pub owner: UserId,
-    pub public: bool,
-    pub current_version: Option<SharedInstanceVersion>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub additional_users: Option<Vec<SharedInstanceUser>>,
-}
-
-impl SharedInstance {
-    pub fn from_db(
-        instance: DBSharedInstance,
-        users: Option<Vec<DBSharedInstanceUser>>,
-        current_version: Option<DBSharedInstanceVersion>,
-    ) -> Self {
-        SharedInstance {
-            id: instance.id.into(),
-            title: instance.title,
-            owner: instance.owner_id.into(),
-            public: instance.public,
-            current_version: current_version.map(Into::into),
-            additional_users: users
-                .map(|x| x.into_iter().map(Into::into).collect()),
-        }
-    }
-}
-
-#[derive(Debug, Clone, Serialize, Deserialize, utoipa::ToSchema)]
-pub struct SharedInstanceVersion {
-    pub id: SharedInstanceVersionId,
-    pub shared_instance: SharedInstanceId,
-    pub size: u64,
-    pub sha512: String,
-    pub created: DateTime<Utc>,
-}
-
-impl From<DBSharedInstanceVersion> for SharedInstanceVersion {
-    fn from(value: DBSharedInstanceVersion) -> Self {
-        let version_id = value.id.into();
-        let shared_instance_id = value.shared_instance_id.into();
-        SharedInstanceVersion {
-            id: version_id,
-            shared_instance: shared_instance_id,
-            size: value.size,
-            sha512: value.sha512.encode_hex(),
-            created: value.created,
-        }
-    }
-}
-
-bitflags! {
-    #[derive(Copy, Clone, Debug)]
-    pub struct SharedInstanceUserPermissions: u64 {
-        const EDIT = 1 << 0;
-        const DELETE = 1 << 1;
-        const UPLOAD_VERSION = 1 << 2;
-        const DELETE_VERSION = 1 << 3;
-    }
-}
-
-bitflags_serde_impl!(SharedInstanceUserPermissions, u64);
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-pub struct SharedInstanceUser {
-    pub user: UserId,
-    pub permissions: SharedInstanceUserPermissions,
-}
-
-impl From<DBSharedInstanceUser> for SharedInstanceUser {
-    fn from(user: DBSharedInstanceUser) -> Self {
-        SharedInstanceUser {
-            user: user.user_id.into(),
-            permissions: user.permissions,
-        }
-    }
-}

apps/labrinth/src/routes/internal/moderation/tech_review.rs

@@ -443,7 +443,7 @@ async fn fetch_project_reports(
     }
 
     let version_id_rows = sqlx::query!(
-        "SELECT id FROM versions WHERE mod_id = ANY($1::bigint[])",
+        "SELECT id FROM versions WHERE mod_id = ANY($1::bigint[]) ORDER BY id",
         &project_ids.iter().map(|id| id.0).collect::<Vec<_>>()
     )
     .fetch_all(pool)
@@ -469,6 +469,7 @@ async fn fetch_project_reports(
             size
         FROM files
         WHERE version_id = ANY($1::bigint[])
+        ORDER BY version_id, id
         "#,
         &version_ids.iter().map(|id| id.0).collect::<Vec<_>>()
     )
@@ -485,6 +486,7 @@ async fn fetch_project_reports(
             severity AS "severity!: DelphiSeverity"
         FROM delphi_reports
         WHERE file_id = ANY($1::bigint[])
+        ORDER BY file_id, created, id
         "#,
         &file_rows.iter().map(|f| f.file_id.0).collect::<Vec<_>>()
     )
@@ -500,6 +502,7 @@ async fn fetch_project_reports(
             issue_type
         FROM delphi_report_issues
         WHERE report_id = ANY($1::bigint[])
+        ORDER BY report_id, id
         "#,
         &report_rows
             .iter()
@@ -528,6 +531,7 @@ async fn fetch_project_reports(
             didws.status AS "status!: DelphiStatus"
         FROM delphi_issue_details_with_statuses didws
         WHERE didws.issue_id = ANY($1::bigint[])
+        ORDER BY didws.issue_id, didws.id
         "#,
         &issue_ids.iter().map(|i| i.0).collect::<Vec<_>>()
     )

apps/labrinth/src/routes/v3/mod.rs

@@ -17,8 +17,6 @@ pub mod payouts;
 pub mod project_creation;
 pub mod projects;
 pub mod reports;
-pub mod shared_instance_version_creation;
-pub mod shared_instances;
 pub mod statistics;
 pub mod tags;
 pub mod teams;
@@ -60,8 +58,6 @@ pub fn config(cfg: &mut web::ServiceConfig) {
             .service(payouts::tremendous_webhook)
             .configure(projects::config)
             .configure(reports::config)
-            .configure(shared_instance_version_creation::config)
-            .configure(shared_instances::config)
             .configure(statistics::config)
             .configure(tags::config)
             .configure(teams::config)
@@ -175,16 +171,6 @@ pub fn config(cfg: &mut web::ServiceConfig) {
 		reports::report_get_route,
 		reports::report_edit_route,
 		reports::report_delete_route,
-		shared_instance_version_creation::shared_instance_version_create,
-		shared_instances::shared_instance_create,
-		shared_instances::shared_instance_list,
-		shared_instances::shared_instance_get,
-		shared_instances::shared_instance_edit,
-		shared_instances::shared_instance_delete,
-		shared_instances::shared_instance_version_list,
-		shared_instances::shared_instance_version_get,
-		shared_instances::shared_instance_version_delete,
-		shared_instances::shared_instance_version_download,
 		statistics::get_stats_route,
 		tags::games_list_route,
 		tags::category_list_route,

apps/labrinth/src/routes/v3/shared_instance_version_creation.rs

@@ -1,219 +0,0 @@
-use crate::auth::get_user_from_headers;
-use crate::database::models::shared_instance_item::{
-    DBSharedInstance, DBSharedInstanceUser, DBSharedInstanceVersion,
-};
-use crate::database::models::{
-    DBSharedInstanceId, DBSharedInstanceVersionId,
-    generate_shared_instance_version_id,
-};
-use crate::database::redis::RedisPool;
-use crate::database::{PgPool, PgTransaction};
-use crate::file_hosting::{FileHost, FileHostPublicity};
-use crate::models::ids::{SharedInstanceId, SharedInstanceVersionId};
-use crate::models::pats::Scopes;
-use crate::models::shared_instances::{
-    SharedInstanceUserPermissions, SharedInstanceVersion,
-};
-use crate::queue::session::AuthQueue;
-use crate::routes::ApiError;
-use crate::routes::v3::project_creation::UploadedFile;
-use crate::util::ext::MRPACK_MIME_TYPE;
-use actix_web::http::header::ContentLength;
-use actix_web::web::Data;
-use actix_web::{HttpRequest, HttpResponse, post, web};
-use bytes::BytesMut;
-use chrono::Utc;
-use futures_util::StreamExt;
-use hex::FromHex;
-
-const MAX_FILE_SIZE: usize = 500 * 1024 * 1024;
-const MAX_FILE_SIZE_TEXT: &str = "500 MB";
-
-pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
-    cfg.service(shared_instance_version_create);
-}
-
-/// Create a shared instance version.
-#[utoipa::path(
-	tag = "versions",
-	post,
-	params(
-		("id" = SharedInstanceId, Path, description = "The ID of the shared instance")
-	),
-	request_body(content = Vec<u8>, content_type = "application/octet-stream"),
-	responses(
-		(status = 201, description = "Expected response to a valid request", body = SharedInstanceVersion),
-		(status = 400, description = "Request was invalid, see given error"),
-		(
-			status = 401,
-			description = "Incorrect token scopes or no authorization to access the requested item(s)"
-		),
-		(
-			status = 404,
-			description = "The requested item(s) were not found or no authorization to access the requested item(s)"
-		)
-	),
-	security(("bearer_auth" = ["SHARED_INSTANCE_VERSION_CREATE"]))
-)]
-#[post("/shared-instance/{id}/version")]
-#[allow(clippy::too_many_arguments)]
-pub async fn shared_instance_version_create(
-    req: HttpRequest,
-    pool: Data<PgPool>,
-    payload: web::Payload,
-    web::Header(ContentLength(content_length)): web::Header<ContentLength>,
-    redis: Data<RedisPool>,
-    file_host: Data<dyn FileHost>,
-    info: web::Path<(SharedInstanceId,)>,
-    session_queue: Data<AuthQueue>,
-) -> Result<HttpResponse, ApiError> {
-    if content_length > MAX_FILE_SIZE {
-        return Err(ApiError::InvalidInput(format!(
-            "File size exceeds the maximum limit of {MAX_FILE_SIZE_TEXT}"
-        )));
-    }
-
-    let mut transaction = pool.begin().await?;
-    let mut uploaded_files = vec![];
-
-    let result = shared_instance_version_create_inner(
-        req,
-        &pool,
-        payload,
-        content_length,
-        &redis,
-        &**file_host,
-        info.into_inner().0.into(),
-        &session_queue,
-        &mut transaction,
-        &mut uploaded_files,
-    )
-    .await;
-
-    if result.is_err() {
-        let undo_result = super::project_creation::undo_uploads(
-            &**file_host,
-            &uploaded_files,
-        )
-        .await;
-        let rollback_result = transaction.rollback().await;
-
-        undo_result?;
-        if let Err(e) = rollback_result {
-            return Err(e.into());
-        }
-    } else {
-        transaction.commit().await?;
-    }
-
-    result
-}
-
-#[allow(clippy::too_many_arguments)]
-async fn shared_instance_version_create_inner(
-    req: HttpRequest,
-    pool: &PgPool,
-    mut payload: web::Payload,
-    content_length: usize,
-    redis: &RedisPool,
-    file_host: &dyn FileHost,
-    instance_id: DBSharedInstanceId,
-    session_queue: &AuthQueue,
-    transaction: &mut PgTransaction<'_>,
-    uploaded_files: &mut Vec<UploadedFile>,
-) -> Result<HttpResponse, ApiError> {
-    let user = get_user_from_headers(
-        &req,
-        pool,
-        redis,
-        session_queue,
-        Scopes::SHARED_INSTANCE_VERSION_CREATE,
-    )
-    .await?
-    .1;
-
-    let Some(instance) = DBSharedInstance::get(instance_id, pool).await? else {
-        return Err(ApiError::NotFound);
-    };
-    if !user.role.is_mod() && instance.owner_id != user.id.into() {
-        let permissions = DBSharedInstanceUser::get_user_permissions(
-            instance_id,
-            user.id.into(),
-            pool,
-        )
-        .await?;
-        if let Some(permissions) = permissions {
-            if !permissions
-                .contains(SharedInstanceUserPermissions::UPLOAD_VERSION)
-            {
-                return Err(ApiError::CustomAuthentication(
-                    "You do not have permission to upload a version for this shared instance.".to_string()
-                ));
-            }
-        } else {
-            return Err(ApiError::NotFound);
-        }
-    }
-
-    let version_id =
-        generate_shared_instance_version_id(&mut *transaction).await?;
-
-    let mut file_data = BytesMut::new();
-    while let Some(chunk) = payload.next().await {
-        let chunk = chunk.map_err(|_| {
-            ApiError::InvalidInput(
-                "Unable to parse bytes in payload sent!".to_string(),
-            )
-        })?;
-
-        if file_data.len() + chunk.len() <= MAX_FILE_SIZE {
-            file_data.extend_from_slice(&chunk);
-        } else {
-            file_data
-                .extend_from_slice(&chunk[..MAX_FILE_SIZE - file_data.len()]);
-            break;
-        }
-    }
-
-    let file_data = file_data.freeze();
-    let file_path = format!(
-        "shared_instance/{}.mrpack",
-        SharedInstanceVersionId::from(version_id),
-    );
-
-    let upload_data = file_host
-        .upload_file(
-            MRPACK_MIME_TYPE,
-            &file_path,
-            FileHostPublicity::Private,
-            file_data,
-        )
-        .await?;
-
-    uploaded_files.push(UploadedFile {
-        name: file_path,
-        publicity: upload_data.file_publicity,
-    });
-
-    let sha512 = Vec::<u8>::from_hex(upload_data.content_sha512).unwrap();
-
-    let new_version = DBSharedInstanceVersion {
-        id: version_id,
-        shared_instance_id: instance_id,
-        size: content_length as u64,
-        sha512,
-        created: Utc::now(),
-    };
-    new_version.insert(transaction).await?;
-
-    sqlx::query!(
-        "UPDATE shared_instances SET current_version_id = $1 WHERE id = $2",
-        new_version.id as DBSharedInstanceVersionId,
-        instance_id as DBSharedInstanceId,
-    )
-    .execute(&mut *transaction)
-    .await?;
-
-    let version: SharedInstanceVersion = new_version.into();
-    Ok(HttpResponse::Created().json(version))
-}

apps/labrinth/src/routes/v3/shared_instances.rs

@@ -1,628 +0,0 @@
-use crate::auth::get_user_from_headers;
-use crate::auth::validate::get_maybe_user_from_headers;
-use crate::database::PgPool;
-use crate::database::models::shared_instance_item::{
-    DBSharedInstance, DBSharedInstanceUser, DBSharedInstanceVersion,
-};
-use crate::database::models::{
-    DBSharedInstanceId, DBSharedInstanceVersionId, generate_shared_instance_id,
-};
-use crate::database::redis::RedisPool;
-use crate::file_hosting::FileHost;
-use crate::models::ids::{SharedInstanceId, SharedInstanceVersionId};
-use crate::models::pats::Scopes;
-use crate::models::shared_instances::{
-    SharedInstance, SharedInstanceUserPermissions, SharedInstanceVersion,
-};
-use crate::models::users::User;
-use crate::queue::session::AuthQueue;
-use crate::routes::ApiError;
-use crate::util::routes::read_typed_from_payload;
-use actix_web::web::{Data, Redirect};
-use actix_web::{HttpRequest, HttpResponse, delete, get, patch, post, web};
-use futures_util::future::try_join_all;
-use serde::Deserialize;
-use validator::Validate;
-
-pub fn config(cfg: &mut actix_web::web::ServiceConfig) {
-    cfg.service(shared_instance_create)
-        .service(shared_instance_list)
-        .service(shared_instance_get)
-        .service(shared_instance_edit)
-        .service(shared_instance_delete)
-        .service(shared_instance_version_list)
-        .service(shared_instance_version_get)
-        .service(shared_instance_version_delete)
-        .service(shared_instance_version_download);
-}
-
-#[derive(Deserialize, Validate, utoipa::ToSchema)]
-pub struct CreateSharedInstance {
-    #[validate(
-        length(min = 3, max = 64),
-        custom(function = "crate::util::validate::validate_name")
-    )]
-    pub title: String,
-    #[serde(default)]
-    pub public: bool,
-}
-
-#[utoipa::path(
-	tag = "shared instances",
-	request_body = CreateSharedInstance,
-	responses((status = OK))
-)]
-#[post("/shared-instance")]
-pub async fn shared_instance_create(
-    req: HttpRequest,
-    pool: Data<PgPool>,
-    mut body: web::Payload,
-    redis: Data<RedisPool>,
-    session_queue: Data<AuthQueue>,
-) -> Result<HttpResponse, ApiError> {
-    let new_instance: CreateSharedInstance =
-        read_typed_from_payload(&mut body).await?;
-
-    let mut transaction = pool.begin().await?;
-
-    let user = get_user_from_headers(
-        &req,
-        &**pool,
-        &redis,
-        &session_queue,
-        Scopes::SHARED_INSTANCE_CREATE,
-    )
-    .await?
-    .1;
-
-    let id = generate_shared_instance_id(&mut transaction).await?;
-
-    let instance = DBSharedInstance {
-        id,
-        title: new_instance.title,
-        owner_id: user.id.into(),
-        public: new_instance.public,
-        current_version_id: None,
-    };
-    instance.insert(&mut transaction).await?;
-
-    transaction.commit().await?;
-
-    Ok(HttpResponse::Created().json(SharedInstance {
-        id: id.into(),
-        title: instance.title,
-        owner: user.id,
-        public: instance.public,
-        current_version: None,
-        additional_users: Some(vec![]),
-    }))
-}
-
-#[utoipa::path(tag = "shared instances", responses((status = OK)))]
-#[get("/shared-instance")]
-pub async fn shared_instance_list(
-    req: HttpRequest,
-    pool: Data<PgPool>,
-    redis: Data<RedisPool>,
-    session_queue: Data<AuthQueue>,
-) -> Result<HttpResponse, ApiError> {
-    let user = get_user_from_headers(
-        &req,
-        &**pool,
-        &redis,
-        &session_queue,
-        Scopes::SHARED_INSTANCE_READ,
-    )
-    .await?
-    .1;
-
-    // TODO: Something for moderators to be able to see all instances?
-    let instances =
-        DBSharedInstance::list_for_user(user.id.into(), &**pool).await?;
-    let instances = try_join_all(instances.into_iter().map(
-        async |instance| -> Result<SharedInstance, ApiError> {
-            let version = if let Some(version_id) = instance.current_version_id
-            {
-                DBSharedInstanceVersion::get(version_id, &**pool).await?
-            } else {
-                None
-            };
-            let instance_id = instance.id;
-            Ok(SharedInstance::from_db(
-                instance,
-                Some(
-                    DBSharedInstanceUser::get_from_instance(
-                        instance_id,
-                        &**pool,
-                        &redis,
-                    )
-                    .await?,
-                ),
-                version,
-            ))
-        },
-    ))
-    .await?;
-
-    Ok(HttpResponse::Ok().json(instances))
-}
-
-#[utoipa::path(tag = "shared instances", responses((status = OK)))]
-#[get("/shared-instance/{id}")]
-pub async fn shared_instance_get(
-    req: HttpRequest,
-    pool: Data<PgPool>,
-    redis: Data<RedisPool>,
-    info: web::Path<(SharedInstanceId,)>,
-    session_queue: Data<AuthQueue>,
-) -> Result<HttpResponse, ApiError> {
-    let id = info.into_inner().0.into();
-
-    let user = get_maybe_user_from_headers(
-        &req,
-        &**pool,
-        &redis,
-        &session_queue,
-        Scopes::SHARED_INSTANCE_READ,
-    )
-    .await?
-    .map(|(_, user)| user);
-
-    let shared_instance = DBSharedInstance::get(id, &**pool).await?;
-
-    if let Some(shared_instance) = shared_instance {
-        let users =
-            DBSharedInstanceUser::get_from_instance(id, &**pool, &redis)
-                .await?;
-
-        let privately_accessible = user.is_some_and(|user| {
-            can_access_instance_privately(&shared_instance, &users, &user)
-        });
-        if !shared_instance.public && !privately_accessible {
-            return Err(ApiError::NotFound);
-        }
-
-        let current_version =
-            if let Some(version_id) = shared_instance.current_version_id {
-                DBSharedInstanceVersion::get(version_id, &**pool).await?
-            } else {
-                None
-            };
-        let shared_instance = SharedInstance::from_db(
-            shared_instance,
-            privately_accessible.then_some(users),
-            current_version,
-        );
-
-        Ok(HttpResponse::Ok().json(shared_instance))
-    } else {
-        Err(ApiError::NotFound)
-    }
-}
-
-fn can_access_instance_privately(
-    instance: &DBSharedInstance,
-    users: &[DBSharedInstanceUser],
-    user: &User,
-) -> bool {
-    user.role.is_mod()
-        || instance.owner_id == user.id.into()
-        || users.iter().any(|x| x.user_id == user.id.into())
-}
-
-#[derive(Deserialize, Validate, utoipa::ToSchema)]
-pub struct EditSharedInstance {
-    #[validate(
-        length(min = 3, max = 64),
-        custom(function = "crate::util::validate::validate_name")
-    )]
-    pub title: Option<String>,
-    pub public: Option<bool>,
-}
-
-#[utoipa::path(
-	tag = "shared instances",
-	request_body = EditSharedInstance,
-	responses((status = NO_CONTENT))
-)]
-#[patch("/shared-instance/{id}")]
-pub async fn shared_instance_edit(
-    req: HttpRequest,
-    pool: Data<PgPool>,
-    mut body: web::Payload,
-    redis: Data<RedisPool>,
-    info: web::Path<(SharedInstanceId,)>,
-    session_queue: Data<AuthQueue>,
-) -> Result<HttpResponse, ApiError> {
-    let id = info.into_inner().0.into();
-    let edit_instance: EditSharedInstance =
-        read_typed_from_payload(&mut body).await?;
-
-    let mut transaction = pool.begin().await?;
-
-    let user = get_user_from_headers(
-        &req,
-        &**pool,
-        &redis,
-        &session_queue,
-        Scopes::SHARED_INSTANCE_WRITE,
-    )
-    .await?
-    .1;
-
-    let Some(instance) = DBSharedInstance::get(id, &**pool).await? else {
-        return Err(ApiError::NotFound);
-    };
-
-    if !user.role.is_mod() && instance.owner_id != user.id.into() {
-        let permissions = DBSharedInstanceUser::get_user_permissions(
-            id,
-            user.id.into(),
-            &**pool,
-        )
-        .await?;
-        if let Some(permissions) = permissions {
-            if !permissions.contains(SharedInstanceUserPermissions::EDIT) {
-                return Err(ApiError::CustomAuthentication(
-                    "You do not have permission to edit this shared instance."
-                        .to_string(),
-                ));
-            }
-        } else {
-            return Err(ApiError::NotFound);
-        }
-    }
-
-    if let Some(title) = edit_instance.title {
-        sqlx::query!(
-            "
-            UPDATE shared_instances
-            SET title = $1
-            WHERE id = $2
-            ",
-            title,
-            id as DBSharedInstanceId,
-        )
-        .execute(&mut transaction)
-        .await?;
-    }
-
-    if let Some(public) = edit_instance.public {
-        sqlx::query!(
-            "
-            UPDATE shared_instances
-            SET public = $1
-            WHERE id = $2
-            ",
-            public,
-            id as DBSharedInstanceId,
-        )
-        .execute(&mut transaction)
-        .await?;
-    }
-
-    transaction.commit().await?;
-
-    Ok(HttpResponse::NoContent().body(""))
-}
-
-#[utoipa::path(tag = "shared instances", responses((status = NO_CONTENT)))]
-#[delete("/shared-instance/{id}")]
-pub async fn shared_instance_delete(
-    req: HttpRequest,
-    pool: Data<PgPool>,
-    redis: Data<RedisPool>,
-    info: web::Path<(SharedInstanceId,)>,
-    session_queue: Data<AuthQueue>,
-) -> Result<HttpResponse, ApiError> {
-    let id: DBSharedInstanceId = info.into_inner().0.into();
-
-    let user = get_user_from_headers(
-        &req,
-        &**pool,
-        &redis,
-        &session_queue,
-        Scopes::SHARED_INSTANCE_DELETE,
-    )
-    .await?
-    .1;
-
-    let Some(instance) = DBSharedInstance::get(id, &**pool).await? else {
-        return Err(ApiError::NotFound);
-    };
-
-    if !user.role.is_mod() && instance.owner_id != user.id.into() {
-        let permissions = DBSharedInstanceUser::get_user_permissions(
-            id,
-            user.id.into(),
-            &**pool,
-        )
-        .await?;
-        if let Some(permissions) = permissions {
-            if !permissions.contains(SharedInstanceUserPermissions::DELETE) {
-                return Err(ApiError::CustomAuthentication(
-                    "You do not have permission to delete this shared instance.".to_string()
-                ));
-            }
-        } else {
-            return Err(ApiError::NotFound);
-        }
-    }
-
-    sqlx::query!(
-        "
-        DELETE FROM shared_instances
-        WHERE id = $1
-        ",
-        id as DBSharedInstanceId,
-    )
-    .execute(&**pool)
-    .await?;
-
-    DBSharedInstanceUser::clear_cache(id, &redis).await?;
-
-    Ok(HttpResponse::NoContent().body(""))
-}
-
-#[utoipa::path(tag = "shared instances", responses((status = OK)))]
-#[get("/shared-instance/{id}/version")]
-pub async fn shared_instance_version_list(
-    req: HttpRequest,
-    pool: Data<PgPool>,
-    redis: Data<RedisPool>,
-    info: web::Path<(SharedInstanceId,)>,
-    session_queue: Data<AuthQueue>,
-) -> Result<HttpResponse, ApiError> {
-    let id = info.into_inner().0.into();
-
-    let user = get_maybe_user_from_headers(
-        &req,
-        &**pool,
-        &redis,
-        &session_queue,
-        Scopes::SHARED_INSTANCE_READ,
-    )
-    .await?
-    .map(|(_, user)| user);
-
-    let shared_instance = DBSharedInstance::get(id, &**pool).await?;
-
-    if let Some(shared_instance) = shared_instance {
-        if !can_access_instance_as_maybe_user(
-            &pool,
-            &redis,
-            &shared_instance,
-            user,
-        )
-        .await?
-        {
-            return Err(ApiError::NotFound);
-        }
-
-        let versions =
-            DBSharedInstanceVersion::get_for_instance(id, &**pool).await?;
-        let versions = versions
-            .into_iter()
-            .map(Into::into)
-            .collect::<Vec<SharedInstanceVersion>>();
-
-        Ok(HttpResponse::Ok().json(versions))
-    } else {
-        Err(ApiError::NotFound)
-    }
-}
-
-#[utoipa::path(tag = "shared instances", responses((status = OK)))]
-#[get("/shared-instance-version/{id}")]
-pub async fn shared_instance_version_get(
-    req: HttpRequest,
-    pool: Data<PgPool>,
-    redis: Data<RedisPool>,
-    info: web::Path<(SharedInstanceVersionId,)>,
-    session_queue: Data<AuthQueue>,
-) -> Result<HttpResponse, ApiError> {
-    let version_id = info.into_inner().0.into();
-
-    let user = get_maybe_user_from_headers(
-        &req,
-        &**pool,
-        &redis,
-        &session_queue,
-        Scopes::SHARED_INSTANCE_READ,
-    )
-    .await?
-    .map(|(_, user)| user);
-
-    let version = DBSharedInstanceVersion::get(version_id, &**pool).await?;
-
-    if let Some(version) = version {
-        let instance =
-            DBSharedInstance::get(version.shared_instance_id, &**pool).await?;
-        if let Some(instance) = instance {
-            if !can_access_instance_as_maybe_user(
-                &pool, &redis, &instance, user,
-            )
-            .await?
-            {
-                return Err(ApiError::NotFound);
-            }
-
-            let version: SharedInstanceVersion = version.into();
-            Ok(HttpResponse::Ok().json(version))
-        } else {
-            Err(ApiError::NotFound)
-        }
-    } else {
-        Err(ApiError::NotFound)
-    }
-}
-
-async fn can_access_instance_as_maybe_user(
-    pool: &PgPool,
-    redis: &RedisPool,
-    instance: &DBSharedInstance,
-    user: Option<User>,
-) -> Result<bool, ApiError> {
-    if instance.public {
-        return Ok(true);
-    }
-    let users =
-        DBSharedInstanceUser::get_from_instance(instance.id, pool, redis)
-            .await?;
-    Ok(user.is_some_and(|user| {
-        can_access_instance_privately(instance, &users, &user)
-    }))
-}
-
-#[utoipa::path(tag = "shared instances", responses((status = NO_CONTENT)))]
-#[delete("/shared-instance-version/{id}")]
-pub async fn shared_instance_version_delete(
-    req: HttpRequest,
-    pool: Data<PgPool>,
-    redis: Data<RedisPool>,
-    info: web::Path<(SharedInstanceVersionId,)>,
-    session_queue: Data<AuthQueue>,
-) -> Result<HttpResponse, ApiError> {
-    let version_id = info.into_inner().0.into();
-
-    let user = get_user_from_headers(
-        &req,
-        &**pool,
-        &redis,
-        &session_queue,
-        Scopes::SHARED_INSTANCE_VERSION_DELETE,
-    )
-    .await?
-    .1;
-
-    let shared_instance_version =
-        DBSharedInstanceVersion::get(version_id, &**pool).await?;
-
-    if let Some(shared_instance_version) = shared_instance_version {
-        let shared_instance = DBSharedInstance::get(
-            shared_instance_version.shared_instance_id,
-            &**pool,
-        )
-        .await?;
-        if let Some(shared_instance) = shared_instance {
-            if !user.role.is_mod() && shared_instance.owner_id != user.id.into()
-            {
-                let permissions = DBSharedInstanceUser::get_user_permissions(
-                    shared_instance.id,
-                    user.id.into(),
-                    &**pool,
-                )
-                .await?;
-                if let Some(permissions) = permissions {
-                    if !permissions
-                        .contains(SharedInstanceUserPermissions::DELETE)
-                    {
-                        return Err(ApiError::CustomAuthentication(
-                            "You do not have permission to delete this shared instance version.".to_string()
-                        ));
-                    }
-                } else {
-                    return Err(ApiError::NotFound);
-                }
-            }
-
-            delete_instance_version(shared_instance.id, version_id, &pool)
-                .await?;
-
-            Ok(HttpResponse::NoContent().body(""))
-        } else {
-            Err(ApiError::NotFound)
-        }
-    } else {
-        Err(ApiError::NotFound)
-    }
-}
-
-async fn delete_instance_version(
-    instance_id: DBSharedInstanceId,
-    version_id: DBSharedInstanceVersionId,
-    pool: &PgPool,
-) -> Result<(), ApiError> {
-    let mut transaction = pool.begin().await?;
-
-    sqlx::query!(
-        "
-        DELETE FROM shared_instance_versions
-        WHERE id = $1
-        ",
-        version_id as DBSharedInstanceVersionId,
-    )
-    .execute(&mut transaction)
-    .await?;
-
-    sqlx::query!(
-        "
-        UPDATE shared_instances
-        SET current_version_id = (
-            SELECT id FROM shared_instance_versions
-            WHERE shared_instance_id = $1
-            ORDER BY created DESC
-            LIMIT 1
-        )
-        WHERE id = $1
-        ",
-        instance_id as DBSharedInstanceId,
-    )
-    .execute(&mut transaction)
-    .await?;
-
-    transaction.commit().await?;
-    Ok(())
-}
-
-#[utoipa::path(tag = "shared instances", responses((status = TEMPORARY_REDIRECT)))]
-#[get("/shared-instance-version/{id}/download")]
-pub async fn shared_instance_version_download(
-    req: HttpRequest,
-    pool: Data<PgPool>,
-    redis: Data<RedisPool>,
-    file_host: Data<dyn FileHost>,
-    info: web::Path<(SharedInstanceVersionId,)>,
-    session_queue: Data<AuthQueue>,
-) -> Result<Redirect, ApiError> {
-    let version_id = info.into_inner().0.into();
-
-    let user = get_maybe_user_from_headers(
-        &req,
-        &**pool,
-        &redis,
-        &session_queue,
-        Scopes::SHARED_INSTANCE_VERSION_READ,
-    )
-    .await?
-    .map(|(_, user)| user);
-
-    let version = DBSharedInstanceVersion::get(version_id, &**pool).await?;
-
-    if let Some(version) = version {
-        let instance =
-            DBSharedInstance::get(version.shared_instance_id, &**pool).await?;
-        if let Some(instance) = instance {
-            if !can_access_instance_as_maybe_user(
-                &pool, &redis, &instance, user,
-            )
-            .await?
-            {
-                return Err(ApiError::NotFound);
-            }
-
-            let file_name = format!(
-                "shared_instance/{}.mrpack",
-                SharedInstanceVersionId::from(version_id)
-            );
-            let url =
-                file_host.get_url_for_private_file(&file_name, 180).await?;
-
-            Ok(Redirect::to(url).see_other())
-        } else {
-            Err(ApiError::NotFound)
-        }
-    } else {
-        Err(ApiError::NotFound)
-    }
-}

packages/blog/changelog.ts

@@ -10,6 +10,14 @@ export type VersionEntry = {
 }
 
 const VERSIONS: VersionEntry[] = [
+	{
+		date: `2026-07-16T19:36:45+00:00`,
+		product: 'app',
+		version: '0.15.12',
+		body: `## Fixed
+- Fixed issue with some modpacks failing to install due to file mismatches.
+- Fixed hardcore worlds generated in 26.1+ not being recognised as hardcore in the Jump back in and Worlds tab.`,
+	},
 	{
 		date: `2026-07-14T22:14:08+00:00`,
 		product: 'app',