@k2b/cloud 0.9.0 → 0.9.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@k2b/cloud",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Application platform library for independently deployed Hono and SolidJS services behind a dynamic gateway.",
   "license": "AGPL-3.0-or-later",
   "repository": {
@@ -98,7 +98,7 @@
     "@tailwindcss/typography": "0.5.20",
     "@k2b/nessi": "0.12.0",
     "@k2b/ssr": "0.14.0",
-    "@k2b/ui": "0.4.1",
+    "@k2b/ui": "0.4.2",
     "@k2b/stdlib": "0.25.0",
     "@k2b/sync": "6.4.0",
     "@nats-io/transport-node": "3.4.0",

package/src/server/app-assets.ts

@@ -5,10 +5,14 @@ import { env } from "../config/env";
 /** Set by `scripts/build.ts`; the bundle lives next to `dist/assets/`. */
 declare const __CLOUD_APP_ASSETS__: string | undefined;
 
+// `resolve` normalizes both forms: a file URL keeps its trailing slash, which
+// would otherwise break the containment check below (`/app/assets//...`).
 const assetsRoot = (): string =>
-  typeof __CLOUD_APP_ASSETS__ === "string"
-    ? fileURLToPath(new URL(__CLOUD_APP_ASSETS__, import.meta.url))
-    : resolve(env.APP_DIR ?? process.cwd(), "src/assets");
+  resolve(
+    typeof __CLOUD_APP_ASSETS__ === "string"
+      ? fileURLToPath(new URL(__CLOUD_APP_ASSETS__, import.meta.url))
+      : resolve(env.APP_DIR ?? process.cwd(), "src/assets"),
+  );
 
 /**
  * Absolute path of a server-side application asset.

package/src/services/account-lifecycle/index.ts

@@ -457,7 +457,6 @@ export const accountLifecycle = {
           });
           await tx`DELETE FROM auth.users WHERE id = ${userId}::uuid`;
         });
-        await session.revokeAllForUser(userId);
         summary.changed += 1;
       } catch (error) {
         summary.failed += 1;
@@ -507,7 +506,6 @@ export const accountLifecycle = {
           });
           await tx`DELETE FROM auth.users WHERE id = ${userId}::uuid`;
         });
-        await session.revokeAllForUser(userId);
         summary.changed += 1;
       } catch (error) {
         summary.failed += 1;

package/src/services/ipa/users.ts

@@ -847,7 +847,7 @@ export const deleteUser = async (params: {
     });
     throw dbError;
   }
-  await session.revokeAllForUser(id);
+  // Deleting the row invalidates every session; no epoch bump is possible or needed.
 
   return { ok: true, data: undefined };
 };

package/src/services/providers/local/users.ts

@@ -8,7 +8,6 @@ import { writeLocalAccount } from "../../accounts/posix";
 import type { AuditActor } from "../../audit";
 import { generateUniqueAbbreviation } from "../../ipa/users";
 import { isUniqueViolation } from "../../postgres";
-import { session } from "../../session";
 import * as settings from "../../settings";
 
 type DbRow = Record<string, unknown>;
@@ -265,8 +264,8 @@ export const remove = async (params: { id: string; actor: { userId: string; uid:
     });
     await tx`DELETE FROM auth.users WHERE id = ${params.id}::uuid`;
   });
-
-  await session.revokeAllForUser(params.id);
+  // Deleting the row invalidates every session: session lookups find no user.
+  // A separate epoch bump would fail because the row is gone.
 
   return { ok: true, data: undefined };
 };

package/src/ssr/MobileNavigation.tsx

@@ -32,11 +32,13 @@ function MobileNavigation(props: {
   );
   return (
     <BottomSheet onDismiss={props.dismiss}>
-      <BottomSheet.Header
-        title={workspace()?.label || t().apps}
-        close={() => void props.dismiss()}
-        actions={
-          <Show when={workspace()} fallback={<span class="font-semibold">{t().allApps}</span>}>
+      {/* Without an app menu the launchpad gets the whole sheet; the hidden
+          heading still names the dialog, and the handle and backdrop dismiss it. */}
+      <Show when={workspace()} fallback={<h2 class="sr-only">{t().allApps}</h2>}>
+        <BottomSheet.Header
+          title={workspace()?.label || t().apps}
+          close={() => void props.dismiss()}
+          actions={
             <SegmentedControl
               class="cloud-mobile-menu__switch"
               size="md"
@@ -48,9 +50,9 @@ function MobileNavigation(props: {
                 { value: "apps", label: t().allApps },
               ]}
             />
-          </Show>
-        }
-      />
+          }
+        />
+      </Show>
       <BottomSheet.Body>
         <Show
           when={workspace() && tab() === "app"}