@cosmicdrift/kumiko-bundled-features 0.204.0 → 0.204.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cosmicdrift/kumiko-bundled-features",
|
|
3
|
-
"version": "0.204.
|
|
3
|
+
"version": "0.204.1",
|
|
4
4
|
"description": "Built-in features — tenant, user, auth, delivery. The stuff you'd rewrite anyway, already typed.",
|
|
5
5
|
"license": "BUSL-1.1",
|
|
6
6
|
"author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
|
|
@@ -126,12 +126,12 @@
|
|
|
126
126
|
"./step-dispatcher": "./src/step-dispatcher/index.ts"
|
|
127
127
|
},
|
|
128
128
|
"dependencies": {
|
|
129
|
-
"@cosmicdrift/kumiko-dispatcher-live": "0.204.
|
|
130
|
-
"@cosmicdrift/kumiko-framework": "0.204.
|
|
131
|
-
"@cosmicdrift/kumiko-headless": "0.204.
|
|
132
|
-
"@cosmicdrift/kumiko-renderer": "0.204.
|
|
133
|
-
"@cosmicdrift/kumiko-renderer-web": "0.204.
|
|
134
|
-
"@cosmicdrift/kumiko-types": "0.204.
|
|
129
|
+
"@cosmicdrift/kumiko-dispatcher-live": "0.204.1",
|
|
130
|
+
"@cosmicdrift/kumiko-framework": "0.204.1",
|
|
131
|
+
"@cosmicdrift/kumiko-headless": "0.204.1",
|
|
132
|
+
"@cosmicdrift/kumiko-renderer": "0.204.1",
|
|
133
|
+
"@cosmicdrift/kumiko-renderer-web": "0.204.1",
|
|
134
|
+
"@cosmicdrift/kumiko-types": "0.204.1",
|
|
135
135
|
"@mollie/api-client": "^4.5.0",
|
|
136
136
|
"@node-rs/argon2": "^2.0.2",
|
|
137
137
|
"@types/mailparser": "^3.4.6",
|
|
@@ -106,10 +106,19 @@ export const forgetSubjectWrite = defineWriteHandler({
|
|
|
106
106
|
// crash recovery is safe. User-feature guard: without the user feature
|
|
107
107
|
// read_users doesn't exist (crypto-only stack). Tenant subjects have no
|
|
108
108
|
// credentials.
|
|
109
|
+
// Graceful fail: email-subscribers and other non-user entities may use
|
|
110
|
+
// user-style subject keys without having an actual user row — the key
|
|
111
|
+
// erase above is the important part for GDPR compliance; the lifecycle
|
|
112
|
+
// update is best-effort for real users.
|
|
109
113
|
if (raw.kind === "user" && ctx.registry.features.has("user")) {
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
114
|
+
try {
|
|
115
|
+
await updateUserLifecycle(ctx.db.raw, raw.userId, { status: USER_STATUS.Deleted });
|
|
116
|
+
if (ctx.registry.features.has("personal-access-tokens")) {
|
|
117
|
+
await revokeAllPatTokensForUser(ctx.db.raw, raw.userId);
|
|
118
|
+
}
|
|
119
|
+
} catch {
|
|
120
|
+
// User row may not exist (e.g. email subscribers with user-style
|
|
121
|
+
// subject keys). Key erase + blind-index sweep above already ran.
|
|
113
122
|
}
|
|
114
123
|
}
|
|
115
124
|
|