From 7a6b4ca9fa09d04abb3801e6c8647e1a8759c35b Mon Sep 17 00:00:00 2001
From: "marcel.kocisek" <marcel.kocisek@lutraconsulting.co.uk>
Date: Tue, 17 Mar 2026 15:25:51 +0100
Subject: [PATCH 1/6] add rounded boundary for app-panel-toggleable

---
 .../common/components/AppPanelToggleable.vue  | 43 +++++++++++++------
 1 file changed, 29 insertions(+), 14 deletions(-)

diff --git a/web-app/packages/lib/src/common/components/AppPanelToggleable.vue b/web-app/packages/lib/src/common/components/AppPanelToggleable.vue
index db007803..1897b9f9 100644
--- a/web-app/packages/lib/src/common/components/AppPanelToggleable.vue
+++ b/web-app/packages/lib/src/common/components/AppPanelToggleable.vue
@@ -35,25 +35,40 @@ SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-MerginMaps-Commercial
 
 <script lang="ts" setup>
 import { PanelProps } from 'primevue/panel'
-import { ref, computed } from 'vue'
+import { ref, computed, useSlots } from 'vue'
 
 const props = defineProps<PanelProps>()
 const collapsed = ref(props.collapsed)
+const slots = useSlots()
 
-const pt = computed(() => ({
-  header: {
-    class: [
-      'surface-section border-none cursor-pointer',
-      // Toggle border radius by open / closed panel
-      collapsed.value ? 'border-round-2xl' : 'border-round-top-2xl',
-      props.pt?.header?.class ?? 'p-4'
-    ],
-    onclick: headerClick
-  },
-  content: {
-    class: 'border-none border-round-bottom-2xl p-4 pt-0'
+const pt = computed(() => {
+  const hasFooterSlot = Boolean(slots.footer)
+
+  return {
+    header: {
+      class: [
+        'surface-section border-none cursor-pointer',
+        // Toggle border radius by open / closed panel
+        collapsed.value ? 'border-round-2xl' : 'border-round-top-2xl',
+        props.pt?.header?.class ?? 'p-4'
+      ],
+      onclick: headerClick
+    },
+    content: {
+      class: [
+        'border-none p-4 pt-0',
+        hasFooterSlot ? '' : 'border-round-bottom-2xl'
+      ]
+    },
+    ...(hasFooterSlot
+      ? {
+          footer: {
+            class: 'border-none border-round-bottom-2xl p-4 pt-0'
+          }
+        }
+      : {})
   }
-}))
+})
 
 function headerClick() {
   collapsed.value = !collapsed.value

From dd43a84815650cf042198758eccf103e34853cd1 Mon Sep 17 00:00:00 2001
From: "marcel.kocisek" <marcel.kocisek@lutraconsulting.co.uk>
Date: Tue, 17 Mar 2026 15:26:21 +0100
Subject: [PATCH 2/6] Add head request x-mm-project-version header to GET
 v2/projects

---
 .../mergin/sync/public_api_v2_controller.py   |  4 +++
 server/mergin/tests/test_public_api_v2.py     | 32 +++++++++++++++++++
 .../lib/src/modules/project/projectApi.ts     |  4 +++
 3 files changed, 40 insertions(+)

diff --git a/server/mergin/sync/public_api_v2_controller.py b/server/mergin/sync/public_api_v2_controller.py
index ab2c00a2..a1786161 100644
--- a/server/mergin/sync/public_api_v2_controller.py
+++ b/server/mergin/sync/public_api_v2_controller.py
@@ -203,6 +203,10 @@ def download_diff_file(id: str, file: str):
 def get_project(id, files_at_version=None):
     """Get project info. Include list of files at specific version if requested."""
     project = require_project_by_uuid(id, ProjectPermissions.Read, expose=False)
+    if request.method == "HEAD":
+        headers = {"X-Mm-Project-Version": project.latest_version}
+        return ProjectSchemaV2().dump(project), 200, headers
+
     data = ProjectSchemaV2().dump(project)
     if files_at_version:
         pv = ProjectVersion.query.filter_by(
diff --git a/server/mergin/tests/test_public_api_v2.py b/server/mergin/tests/test_public_api_v2.py
index 46b22cbc..f9abfdaa 100644
--- a/server/mergin/tests/test_public_api_v2.py
+++ b/server/mergin/tests/test_public_api_v2.py
@@ -852,6 +852,38 @@ def test_get_project(client):
     assert response.status_code == 400
 
 
+def test_head_project(client):
+    """Test head project endpoint returns version header."""
+    admin = User.query.filter_by(username=DEFAULT_USER[0]).first()
+    test_workspace = create_workspace()
+    project = create_project("head_project", test_workspace, admin)
+
+    logout(client)
+    response = client.head(f"v2/projects/{project.id}")
+    assert response.status_code == 404
+
+    user = add_user("head_test", "tests")
+    login(client, user.username, "tests")
+    response = client.head(f"v2/projects/{project.id}")
+    assert response.status_code == 403
+
+    project.public = True
+    db.session.commit()
+    response = client.head(f"v2/projects/{project.id}")
+    assert response.status_code == 200
+    assert response.headers["X-Mm-Project-Version"] == ProjectVersion.to_v_name(
+        project.latest_version
+    )
+    assert response.data == b""
+
+    login_as_admin(client)
+    project.public = False
+    project.removed_at = datetime.utcnow()
+    db.session.commit()
+    response = client.head(f"v2/projects/{project.id}")
+    assert response.status_code == 404
+
+
 push_data = [
     # success
     (
diff --git a/web-app/packages/lib/src/modules/project/projectApi.ts b/web-app/packages/lib/src/modules/project/projectApi.ts
index 657675c8..5215eb3c 100644
--- a/web-app/packages/lib/src/modules/project/projectApi.ts
+++ b/web-app/packages/lib/src/modules/project/projectApi.ts
@@ -344,5 +344,9 @@ export const ProjectApi = {
     return ProjectModule.httpService.get(
       `/v2/projects/${projectId}/collaborators`
     )
+  },
+
+  async headProject(projectId: string): Promise<AxiosResponse<void>> {
+    return ProjectModule.httpService.head(`/v2/projects/${projectId}`)
   }
 }

From ba73204cc1ebb96f9516286f28b6f348cc2642f5 Mon Sep 17 00:00:00 2001
From: "marcel.kocisek" <marcel.kocisek@lutraconsulting.co.uk>
Date: Tue, 17 Mar 2026 15:27:46 +0100
Subject: [PATCH 3/6] upgrade data definition

---
 server/mergin/sync/public_api_v2_controller.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/server/mergin/sync/public_api_v2_controller.py b/server/mergin/sync/public_api_v2_controller.py
index a1786161..3119a20a 100644
--- a/server/mergin/sync/public_api_v2_controller.py
+++ b/server/mergin/sync/public_api_v2_controller.py
@@ -203,11 +203,11 @@ def download_diff_file(id: str, file: str):
 def get_project(id, files_at_version=None):
     """Get project info. Include list of files at specific version if requested."""
     project = require_project_by_uuid(id, ProjectPermissions.Read, expose=False)
+    data = ProjectSchemaV2().dump(project)
     if request.method == "HEAD":
         headers = {"X-Mm-Project-Version": project.latest_version}
-        return ProjectSchemaV2().dump(project), 200, headers
+        return data, 200, headers
 
-    data = ProjectSchemaV2().dump(project)
     if files_at_version:
         pv = ProjectVersion.query.filter_by(
             project_id=project.id, name=ProjectVersion.from_v_name(files_at_version)

From 3734e75c16f037ed480c1f7b6f32ece880c22781 Mon Sep 17 00:00:00 2001
From: "marcel.kocisek" <marcel.kocisek@lutraconsulting.co.uk>
Date: Tue, 17 Mar 2026 17:18:03 +0100
Subject: [PATCH 4/6] fix tests for head request

---
 server/mergin/tests/test_public_api_v2.py | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/server/mergin/tests/test_public_api_v2.py b/server/mergin/tests/test_public_api_v2.py
index f9abfdaa..913f6c8d 100644
--- a/server/mergin/tests/test_public_api_v2.py
+++ b/server/mergin/tests/test_public_api_v2.py
@@ -871,9 +871,7 @@ def test_head_project(client):
     db.session.commit()
     response = client.head(f"v2/projects/{project.id}")
     assert response.status_code == 200
-    assert response.headers["X-Mm-Project-Version"] == ProjectVersion.to_v_name(
-        project.latest_version
-    )
+    assert int(response.headers["X-Mm-Project-Version"]) == project.latest_version
     assert response.data == b""
 
     login_as_admin(client)

From ed93f5cdafdf320f1d09a937ddda737e30cfc8bd Mon Sep 17 00:00:00 2001
From: "marcel.kocisek" <marcel.kocisek@lutraconsulting.co.uk>
Date: Wed, 18 Mar 2026 12:53:49 +0100
Subject: [PATCH 5/6] cleanup head manipulation

---
 .../mergin/sync/public_api_v2_controller.py   |  3 --
 server/mergin/tests/test_public_api_v2.py     | 30 -------------------
 2 files changed, 33 deletions(-)

diff --git a/server/mergin/sync/public_api_v2_controller.py b/server/mergin/sync/public_api_v2_controller.py
index 3119a20a..9a82a211 100644
--- a/server/mergin/sync/public_api_v2_controller.py
+++ b/server/mergin/sync/public_api_v2_controller.py
@@ -204,9 +204,6 @@ def get_project(id, files_at_version=None):
     """Get project info. Include list of files at specific version if requested."""
     project = require_project_by_uuid(id, ProjectPermissions.Read, expose=False)
     data = ProjectSchemaV2().dump(project)
-    if request.method == "HEAD":
-        headers = {"X-Mm-Project-Version": project.latest_version}
-        return data, 200, headers
 
     if files_at_version:
         pv = ProjectVersion.query.filter_by(
diff --git a/server/mergin/tests/test_public_api_v2.py b/server/mergin/tests/test_public_api_v2.py
index 913f6c8d..46b22cbc 100644
--- a/server/mergin/tests/test_public_api_v2.py
+++ b/server/mergin/tests/test_public_api_v2.py
@@ -852,36 +852,6 @@ def test_get_project(client):
     assert response.status_code == 400
 
 
-def test_head_project(client):
-    """Test head project endpoint returns version header."""
-    admin = User.query.filter_by(username=DEFAULT_USER[0]).first()
-    test_workspace = create_workspace()
-    project = create_project("head_project", test_workspace, admin)
-
-    logout(client)
-    response = client.head(f"v2/projects/{project.id}")
-    assert response.status_code == 404
-
-    user = add_user("head_test", "tests")
-    login(client, user.username, "tests")
-    response = client.head(f"v2/projects/{project.id}")
-    assert response.status_code == 403
-
-    project.public = True
-    db.session.commit()
-    response = client.head(f"v2/projects/{project.id}")
-    assert response.status_code == 200
-    assert int(response.headers["X-Mm-Project-Version"]) == project.latest_version
-    assert response.data == b""
-
-    login_as_admin(client)
-    project.public = False
-    project.removed_at = datetime.utcnow()
-    db.session.commit()
-    response = client.head(f"v2/projects/{project.id}")
-    assert response.status_code == 404
-
-
 push_data = [
     # success
     (

From 6f3004c09768b68b000fdc004eb2a3fa229543cf Mon Sep 17 00:00:00 2001
From: "marcel.kocisek" <marcel.kocisek@lutraconsulting.co.uk>
Date: Wed, 18 Mar 2026 12:58:10 +0100
Subject: [PATCH 6/6] Cleanup FE from head request

---
 web-app/packages/lib/src/modules/project/projectApi.ts | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/web-app/packages/lib/src/modules/project/projectApi.ts b/web-app/packages/lib/src/modules/project/projectApi.ts
index 5215eb3c..657675c8 100644
--- a/web-app/packages/lib/src/modules/project/projectApi.ts
+++ b/web-app/packages/lib/src/modules/project/projectApi.ts
@@ -344,9 +344,5 @@ export const ProjectApi = {
     return ProjectModule.httpService.get(
       `/v2/projects/${projectId}/collaborators`
     )
-  },
-
-  async headProject(projectId: string): Promise<AxiosResponse<void>> {
-    return ProjectModule.httpService.head(`/v2/projects/${projectId}`)
   }
 }