@selvajs/selva 4.6.19 → 4.6.20

package/build/server/chunks/chunks/{providers.server.js-CmYXhGrz.js → providers.server.js-Dwaws7YS.js}

@@ -1823,14 +1823,22 @@ class LocalDataProvider {
   }
   /**
    * Cascade hook called after the auth provider deletes a user. Removes the
-   * matching `user-data.json` row so the data layer doesn't accumulate
-   * orphans. Tolerates missing rows.
+   * matching `user-data.json` row and every live org membership so the data
+   * layer doesn't accumulate orphans — a leftover membership renders as a
+   * bare user ID in the team roster forever. (Supabase gets the membership
+   * cascade from FK constraints; local must do it explicitly.) Tolerates
+   * missing rows.
    */
-  async onUserDeleted(_ctx, userId) {
+  async onUserDeleted(ctx, userId) {
     try {
       await this.userData.deleteUser(userId);
     } catch {
     }
+    for (let i = 0; i < 100; i++) {
+      const membership = await this.orgs.findUserMembership(ctx, userId);
+      if (!membership) break;
+      await this.orgs.removeOrgMember(ctx, membership.org.id, userId);
+    }
   }
   static fromEnv(env, events = new NoopEventSink()) {
     if (!env.DATA_PATH) throw new Error("Missing required env var: DATA_PATH");
@@ -3948,16 +3956,16 @@ function createAllowlistStore(filePath) {
       await writeFile(filePath, file);
       return entry;
     },
-    async materializeFromHeaders(id, fields) {
+    async syncFromHeaders(id, fields) {
       const file = await readFile(filePath);
       const user = file.users.find((u) => u.id === id);
       if (!user) return;
       let dirty = false;
-      if (!user.email && fields.email) {
+      if (fields.email && user.email !== fields.email) {
         user.email = fields.email;
         dirty = true;
       }
-      if (!user.displayName && fields.displayName) {
+      if (fields.displayName && user.displayName !== fields.displayName) {
         user.displayName = fields.displayName;
         dirty = true;
       }
@@ -4087,11 +4095,11 @@ class HeaderProxyAuth {
     if (!entry || entry.disabled) {
       return null;
     }
-    if (!entry.email && email || !entry.displayName && displayName) {
-      await this.users.materializeFromHeaders(entry.id, { email, displayName }).catch(() => {
+    if (email && entry.email !== email || displayName && entry.displayName !== displayName) {
+      await this.users.syncFromHeaders(entry.id, { email, displayName }).catch(() => {
       });
-      if (email && !entry.email) entry.email = email;
-      if (displayName && !entry.displayName) entry.displayName = displayName;
+      if (email) entry.email = email;
+      if (displayName) entry.displayName = displayName;
     }
     await this.users.touchLastLogin(entry.id).catch(() => {
     });
@@ -4545,4 +4553,4 @@ function getAuditQuery() {
 }
 
 export { LocalComputeServerStore as L, MAX_PAGE_LIMIT as M, ProviderError as P, getPermissionStore as a, getTenancy as b, getDataProvider as c, getOrganizationProvider as d, getProjectProvider as e, flag as f, getAuthProvider as g, getBranding as h, isPlatformServer as i, getComputeServerConfigStore as j, getDefinitionMeta as k, getPlatformProjectGrantStore as l, getAuditQuery as m, getInviteStore as n, getUserProfileStore as o, providers as p, getStorageProvider as q, isOrgServer as r, getOrgAssetService as s, getSolveMetricSink as t, getDefinitionService as u, definitionPaths as v };
-//# sourceMappingURL=providers.server.js-CmYXhGrz.js.map
+//# sourceMappingURL=providers.server.js-Dwaws7YS.js.map