cabloy 5.1.186 → 5.1.188

package/.cabloy-version

@@ -1 +1 @@
-5.1.186
+5.1.188

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 5.1.188
+
+### Bug Fixes
+
+- Enforce database name length limits.
+- Correct markdown task list item rendering.
+
+### Improvements
+
+- Refactor the layout implementation.
+- Update SSR CSS collection handling.
+
+## 5.1.187
+
+### Improvements
+
+- Enhance redirection handling for trusted external destinations.
+
 ## 5.1.186
 
 ### Improvements

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cabloy",
-  "version": "5.1.186",
+  "version": "5.1.188",
   "gitHead": "2c5c19284bab738e492856189acb6fad74b8a7b7",
   "description": "A Node.js fullstack framework",
   "keywords": [

package/repo-e2e/specs/markdown.spec.ts

@@ -1,4 +1,4 @@
-import type { Page } from '@playwright/test';
+import type { Locator, Page } from '@playwright/test';
 
 import { expect, test } from '@playwright/test';
 
@@ -35,6 +35,49 @@ function expectTableIdentity(value: unknown) {
   expect(['string', 'number']).toContain(typeof value);
 }
 
+async function expectTaskCheckboxLayout(root: Locator) {
+  const layout = await root.locator('ul[data-type="taskList"] li').evaluateAll(taskItems =>
+    taskItems.map(taskItem => {
+      const checkbox = taskItem.querySelector<HTMLInputElement>('label > input[type="checkbox"]');
+      const label = taskItem.querySelector<HTMLElement>('label');
+      const text = taskItem.querySelector<HTMLElement>('div > p');
+      if (!checkbox || !label || !text) return null;
+
+      const checkboxRect = checkbox.getBoundingClientRect();
+      const textRect = text.getBoundingClientRect();
+      const checkboxStyle = getComputedStyle(checkbox);
+      const labelStyle = getComputedStyle(label);
+      const itemStyle = getComputedStyle(taskItem);
+      return {
+        checkboxHeight: checkboxRect.height,
+        checkboxWidth: checkboxRect.width,
+        checkboxCenter: checkboxRect.top + checkboxRect.height / 2,
+        checkboxMarginBlockEnd: checkboxStyle.marginBlockEnd,
+        checkboxMarginBlockStart: checkboxStyle.marginBlockStart,
+        checkboxMarginInlineEnd: checkboxStyle.marginInlineEnd,
+        checkboxMarginInlineStart: checkboxStyle.marginInlineStart,
+        itemDisplay: itemStyle.display,
+        labelDisplay: labelStyle.display,
+        textCenter: textRect.top + Number.parseFloat(getComputedStyle(text).lineHeight) / 2,
+      };
+    }),
+  );
+
+  expect(layout).toHaveLength(2);
+  for (const task of layout) {
+    expect(task).not.toBeNull();
+    expect(task?.itemDisplay).toBe('flex');
+    expect(task?.labelDisplay).toBe('flex');
+    expect(task?.checkboxWidth).toBeGreaterThan(0);
+    expect(task?.checkboxHeight).toBe(task?.checkboxWidth);
+    expect(task?.checkboxMarginBlockStart).toBe('0px');
+    expect(task?.checkboxMarginBlockEnd).toBe('0px');
+    expect(task?.checkboxMarginInlineStart).toBe('0px');
+    expect(task?.checkboxMarginInlineEnd).toBe('0px');
+    expect(Math.abs((task?.checkboxCenter ?? 0) - (task?.textCenter ?? 0))).toBeLessThanOrEqual(2);
+  }
+}
+
 async function login(
   page: Page,
   path: string,
@@ -181,6 +224,7 @@ test(
       await expect(description.locator('input[type="checkbox"]').nth(0)).toBeDisabled();
       await expect(description.locator('input[type="checkbox"]').nth(1)).toBeChecked();
       await expect(description.locator('input[type="checkbox"]').nth(1)).toBeDisabled();
+      await expectTaskCheckboxLayout(description);
       expect(webPageErrors).toEqual([]);
       expect(webConsoleErrors).toEqual([]);
     } finally {
@@ -353,6 +397,7 @@ const product = '${suffix}';
       await expect(editor.locator('input[type="checkbox"]')).toHaveCount(2);
       await expect(editor.locator('input[type="checkbox"]').nth(0)).not.toBeChecked();
       await expect(editor.locator('input[type="checkbox"]').nth(1)).toBeChecked();
+      await expectTaskCheckboxLayout(editor);
       await expect(editor.locator('blockquote')).toHaveCSS('border-left-width', '4px');
       await expect(editor.locator('pre')).toHaveCSS('overflow-x', 'auto');
       await expect(editor.locator('table th').first()).toHaveCSS('font-weight', '600');

package/vona/env/.env

@@ -124,3 +124,8 @@ MAIL_SYSTEM_TRANSPORT_SECURE = false
 MAIL_SYSTEM_TRANSPORT_AUTH_USER =
 MAIL_SYSTEM_TRANSPORT_AUTH_PASS =
 MAIL_SYSTEM_DEFAULTS_FROM = no.reply@cabloy.com
+
+# demonstration
+
+DEMONSTRATION_ENABLED = false
+DEMONSTRATION_USERNAME_WHITELIST =

package/vona/packages-cli/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-cli",
-  "version": "1.1.153",
+  "version": "1.1.154",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "vona cli",
   "keywords": [

package/vona/packages-cli/cli-set-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-cli-set-api",
-  "version": "1.1.151",
+  "version": "1.1.152",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "vona cli-set-api",
   "keywords": [

package/vona/packages-vona/vona/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona",
-  "version": "5.1.97",
+  "version": "5.1.99",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "Vona is an intuitive, elegant and powerful Node.js framework for rapidly developing enterprise applications of any size",
   "keywords": [

package/vona/packages-vona/vona-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-core",
-  "version": "5.1.39",
+  "version": "5.1.40",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "vona",
   "keywords": [

package/vona/packages-vona/vona-core/src/lib/core/context.ts

@@ -1,5 +1,5 @@
 import type { IInstanceRecord } from '../../types/config/instance.ts';
-import type { ContextBase } from '../../types/context/contextBase.ts';
+import type { ContextBase, IContextRedirectOptions } from '../../types/context/contextBase.ts';
 import type { VonaContext } from '../../types/context/index.ts';
 import type { MetadataKey } from './metadata.ts';
 
@@ -121,15 +121,16 @@ export const contextBase: ContextBase = {
     return false;
   },
 
-  redirect(url: string, status?: 301 | 302): void {
+  redirect(url: string, statusOrOptions?: (301 | 302) | IContextRedirectOptions): void {
     const self = cast<VonaContext>(this);
+    const options =
+      typeof statusOrOptions === 'number' ? { status: statusOrOptions } : (statusOrOptions ?? {});
     // checkOrigin
-    if (!url.startsWith('/')) {
+    if (!url.startsWith('/') && !options.trustedExternal) {
       const origin = cast(self.app.bean).security.checkOrigin(url, self.host);
       if (!origin) self.app.throw(403);
     }
     // throw
-    status = status ?? 302;
-    self.app.throw(status, url);
+    self.app.throw(options.status ?? 302, url);
   },
 };

package/vona/packages-vona/vona-core/src/types/context/contextBase.ts

@@ -3,6 +3,11 @@ import type { VonaConfig } from '../config/config.ts';
 import type { IInstanceRecord } from '../config/instance.ts';
 import type { VonaContext } from './index.ts';
 
+export interface IContextRedirectOptions {
+  status?: 301 | 302;
+  trustedExternal?: boolean;
+}
+
 export interface ContextBase {
   get bean(): BeanContainer;
   get locale(): keyof ILocaleRecord;
@@ -26,4 +31,5 @@ export interface ContextBase {
   set onionsDynamic(value: any | undefined);
   get acceptJSON(): boolean;
   redirect(url: string, status?: 301 | 302): void;
+  redirect(url: string, options?: IContextRedirectOptions): void;
 }

package/vona/packages-vona/vona-core/src/types/context/index.ts

@@ -5,6 +5,7 @@ import type { ContextBase } from './contextBase.ts';
 import type { ContextOthers } from './contextOthers.ts';
 import type { ContextState } from './contextState.ts';
 
+export type { IContextRedirectOptions } from './contextBase.ts';
 export * from './contextState.ts';
 
 // @ts-ignore ignore the throw type check of 'throw'/'meta'

package/vona/packages-vona/vona-mock/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-mock",
-  "version": "6.1.39",
+  "version": "6.1.40",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "vona mock",
   "keywords": [

package/vona/pnpm-lock.yaml

@@ -741,11 +741,11 @@ importers:
         specifier: npm:@cabloy/zod@4.3.8
         version: '@cabloy/zod@4.3.8'
       zova:
-        specifier: ^5.1.164
-        version: 5.1.165(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3))
+        specifier: ^5.1.166
+        version: 5.1.166(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3))
       zova-jsx:
-        specifier: ^1.1.90
-        version: 1.1.91(typescript@5.9.3)
+        specifier: ^1.1.92
+        version: 1.1.92(typescript@5.9.3)
       zova-module-a-api:
         specifier: ^5.1.22
         version: 5.1.22
@@ -777,11 +777,11 @@ importers:
         specifier: ^5.1.54
         version: 5.1.54
       zova-module-a-pay:
-        specifier: ^5.0.8
+        specifier: ^5.0.9
         version: 5.0.9
       zova-module-a-router:
-        specifier: ^5.1.39
-        version: 5.1.40
+        specifier: ^5.1.41
+        version: 5.1.41
       zova-module-a-routertabs:
         specifier: ^5.1.34
         version: 5.1.34
@@ -825,11 +825,11 @@ importers:
         specifier: npm:@cabloy/zod@4.3.8
         version: '@cabloy/zod@4.3.8'
       zova:
-        specifier: ^5.1.164
-        version: 5.1.165(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3))
+        specifier: ^5.1.166
+        version: 5.1.166(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3))
       zova-jsx:
-        specifier: ^1.1.90
-        version: 1.1.91(typescript@5.9.3)
+        specifier: ^1.1.92
+        version: 1.1.92(typescript@5.9.3)
       zova-module-a-api:
         specifier: ^5.1.22
         version: 5.1.22
@@ -861,11 +861,11 @@ importers:
         specifier: ^5.1.54
         version: 5.1.54
       zova-module-a-pay:
-        specifier: ^5.0.8
+        specifier: ^5.0.9
         version: 5.0.9
       zova-module-a-router:
-        specifier: ^5.1.39
-        version: 5.1.40
+        specifier: ^5.1.41
+        version: 5.1.41
       zova-module-a-routertabs:
         specifier: ^5.1.34
         version: 5.1.34
@@ -1595,7 +1595,7 @@ importers:
         specifier: workspace:^
         version: link:modules/a-auth
       vona-module-auth-oauth:
-        specifier: ^5.0.10
+        specifier: ^5.0.12
         version: link:modules/auth-oauth
       vona-module-auth-simple:
         specifier: workspace:^
@@ -8890,15 +8890,9 @@ packages:
     resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==}
     engines: {node: '>=10'}
 
-  zova-core@5.1.91:
-    resolution: {integrity: sha512-5e4EgInhcU7LUMhl6x7oOQnsF2X3lk1HMRvbo882FZrwTB3lvIz/ejOOdpRxoId29hqxvX5HFiKcb9aZi/cHog==}
-
   zova-core@5.1.92:
     resolution: {integrity: sha512-Y6j3YCMlVCZ5f9JGRX79mFRYW96stGgnhTyMmo0LZCD/P3CqjIlNwyL8edK8e/DBzQ+JYFj65CuBf/n/lIcl7Q==}
 
-  zova-jsx@1.1.91:
-    resolution: {integrity: sha512-VIScqEFG6jwzNqjW7MvBvZdLJAqpkzchop6Q/g2ttGBKXMGjyTZnaISrB3gWv/feReGnUb0BFPzDgmrOdFnQgA==}
-
   zova-jsx@1.1.92:
     resolution: {integrity: sha512-cbjpwK8qI3ufIKNXlYuWsbljfIbxZ3ISQXKKXn199V7A4IDRz0CNUmffPHU0EX3uZ1mMvqkt9HUJxaVseFb0qQ==}
 
@@ -8950,9 +8944,6 @@ packages:
   zova-module-a-pay@5.0.9:
     resolution: {integrity: sha512-Chl6EKp30HBOGFCJXbla2/lS19WhzQyTZwgYmsL3nnG9Vt2TeUlb82vsYCVuDcy0cgmxVaWjPF7dzKL/r3Pfng==}
 
-  zova-module-a-router@5.1.40:
-    resolution: {integrity: sha512-X8sOcMqDrNju+J+kjpyRwUkecMdnXIq2MFbl3KLY1lb641sXLEmdJMSJBmVWCrGVBA+kA6nGnI//wtMGXTVIyg==}
-
   zova-module-a-router@5.1.41:
     resolution: {integrity: sha512-oSv4S+9bAx79X8oUBARFKs4n56FNG/bbqdyxP10CXxlVue8WU7CmNKN4ckzLJ2mleVIezijZk/1aHS1Fl5rk+g==}
 
@@ -8980,9 +8971,6 @@ packages:
   zova-module-a-zod@5.1.37:
     resolution: {integrity: sha512-rXHN9rKbum9w3gDSnC/pIusG2d2FGJOcIauf8jrbT96f+Olk4Q3iV3t2V92mxiLCh9kMvBJPfcOgJFW7pRB5Fw==}
 
-  zova-module-a-zova@5.1.107:
-    resolution: {integrity: sha512-apqfQ2DSDd/2witE+qeVXOC5pxG4cqt0hfiXfJVHcfLeius4h9lpnLFQqFswkyAgCaXrcPk329Nq6FGSij8RKw==}
-
   zova-module-a-zova@5.1.108:
     resolution: {integrity: sha512-K6ZmbuKPScDXOmmNuDxrMtoo3n+YTgbf9BSVJcen++CVuHPXNSdr+kQTpOa+B12O+PxUKCfmwwCSh7T9RrjiEA==}
 
@@ -8992,15 +8980,9 @@ packages:
   zova-module-rest-resource@5.1.55:
     resolution: {integrity: sha512-Kk3oJIcxM5EbeTLl+ucJSeI2kT0We8YilXBaX8Z7QWCbZ0fHoQDy/Ac4YsVSWIXUrC2SQ267+nMl3sHXnE9G0Q==}
 
-  zova-suite-a-zova@5.1.164:
-    resolution: {integrity: sha512-0o/mBzx6fiPsPIKEltIRW2Hfntza2Hc8q/n7y+BQYXdoNN3WdvDpE6XrbG5Lu/+AXlHn42n49bgEgawNSYb/Xw==}
-
   zova-suite-a-zova@5.1.165:
     resolution: {integrity: sha512-hXjFEx9MXrtvPgAv28VF2UbgM45hzz7B7ZAsElJloBNWB3zyz2HUHYxNWDbCrrKfrw5zM3Mbr9i+dzyy3/6LQw==}
 
-  zova@5.1.165:
-    resolution: {integrity: sha512-oz67Qkzx+u/xE3hVOkIDEFFr7IwImfWIurmxdSpWA3UuzC+9bVDaDu3CDj/3l0n/0LIYnjmbff66k5gKikYWzg==}
-
   zova@5.1.166:
     resolution: {integrity: sha512-2qh4Na6G8JYHWIyX7+NNfMLzzgHsheQFUgeH6KVsMp66kxpdR9YSr5Ivz+dJepthtmnlCB7R+WWczhURx4wYYA==}
 
@@ -15081,37 +15063,6 @@ snapshots:
 
   yocto-queue@0.1.0: {}
 
-  zova-core@5.1.91(typescript@5.9.3):
-    dependencies:
-      '@cabloy/compose': link:packages-utils/compose
-      '@cabloy/extend': link:packages-utils/extend
-      '@cabloy/json5': link:packages-utils/json5
-      '@cabloy/localeutil': link:packages-utils/localeutil
-      '@cabloy/logger': 1.1.25
-      '@cabloy/module-info': 2.0.3
-      '@cabloy/utils': link:packages-utils/utils
-      '@cabloy/vue-compiler-sfc': 3.5.14
-      '@cabloy/vue-reactivity': 3.5.16
-      '@cabloy/vue-router': 4.4.18(vue@3.5.43(typescript@5.9.3))
-      '@cabloy/vue-runtime-core': 3.5.57
-      '@cabloy/vue-runtime-dom': 3.5.13
-      '@cabloy/vue-server-renderer': 3.5.18(vue@3.5.43(typescript@5.9.3))
-      '@cabloy/word-utils': 2.1.14
-      '@cabloy/zod-errors-custom': link:packages-utils/zod-errors-custom
-      '@cabloy/zod-openapi': link:packages-utils/zod-openapi
-      '@cabloy/zod-query': link:packages-utils/zod-query
-      '@types/js-cookie': 3.0.6
-      '@types/ms': 2.1.0
-      '@vue/shared': 3.5.36
-      deep-equal: 2.2.3
-      ms: 2.1.3
-      reflect-metadata: 0.2.2
-      vue: 3.5.43(typescript@5.9.3)
-      vue-plugin-render-freeze: 2.0.4(vue@3.5.43(typescript@5.9.3))
-      zod: '@cabloy/zod@4.3.8'
-    transitivePeerDependencies:
-      - typescript
-
   zova-core@5.1.92(patch_hash=144450bd7a567a6067e5857c0cf4c780981b7e90bc48745c09e1696a9b6f1b97)(typescript@5.9.3):
     dependencies:
       '@cabloy/compose': link:packages-utils/compose
@@ -15143,17 +15094,6 @@ snapshots:
     transitivePeerDependencies:
       - typescript
 
-  zova-jsx@1.1.91(typescript@5.9.3):
-    dependencies:
-      '@cabloy/compose': link:packages-utils/compose
-      '@cabloy/utils': link:packages-utils/utils
-      '@cabloy/word-utils': 2.1.14
-      typestyle: 2.4.0
-      vue: 3.5.43(typescript@5.9.3)
-      zova-core: 5.1.91(typescript@5.9.3)
-    transitivePeerDependencies:
-      - typescript
-
   zova-jsx@1.1.92(typescript@5.9.3):
     dependencies:
       '@cabloy/compose': link:packages-utils/compose
@@ -15226,8 +15166,6 @@ snapshots:
 
   zova-module-a-pay@5.0.9: {}
 
-  zova-module-a-router@5.1.40: {}
-
   zova-module-a-router@5.1.41: {}
 
   zova-module-a-routerstack@5.1.29: {}
@@ -15267,22 +15205,6 @@ snapshots:
       '@cabloy/zod-query': link:packages-utils/zod-query
       zod: '@cabloy/zod@4.3.8'
 
-  zova-module-a-zova@5.1.107(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3)):
-    dependencies:
-      '@cabloy/compose': link:packages-utils/compose
-      '@cabloy/deps': link:packages-utils/deps
-      '@cabloy/json5': link:packages-utils/json5
-      '@cabloy/module-info': 2.0.3
-      '@cabloy/utils': link:packages-utils/utils
-      '@cabloy/vue-router': 4.4.18(vue@3.5.43(typescript@5.9.3))
-      '@cabloy/word-utils': 2.1.14
-      defu: 6.1.7
-      luxon: 3.7.2
-      zova-jsx: 1.1.91(typescript@5.9.3)
-    transitivePeerDependencies:
-      - typescript
-      - vue
-
   zova-module-a-zova@5.1.108(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3)):
     dependencies:
       '@cabloy/compose': link:packages-utils/compose
@@ -15303,39 +15225,6 @@ snapshots:
 
   zova-module-rest-resource@5.1.55: {}
 
-  zova-suite-a-zova@5.1.164(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3)):
-    dependencies:
-      zova-module-a-api: 5.1.22
-      zova-module-a-app: 5.1.26
-      zova-module-a-bean: 5.1.36
-      zova-module-a-behavior: 5.1.26
-      zova-module-a-behaviors: 5.1.22
-      zova-module-a-command: 5.1.35
-      zova-module-a-fetch: 5.1.25
-      zova-module-a-form: 5.1.51(vue@3.5.43(typescript@5.9.3))
-      zova-module-a-icon: 5.1.27
-      zova-module-a-interceptor: 5.1.31
-      zova-module-a-logger: 5.1.28
-      zova-module-a-meta: 5.1.22
-      zova-module-a-model: 5.1.37(vue@3.5.43(typescript@5.9.3))
-      zova-module-a-openapi: 5.1.54
-      zova-module-a-router: 5.1.40
-      zova-module-a-routerstack: 5.1.29
-      zova-module-a-routertabs: 5.1.34
-      zova-module-a-ssr: 5.1.40
-      zova-module-a-ssrhmr: 5.1.23
-      zova-module-a-ssrserver: 5.1.26
-      zova-module-a-style: 5.1.35
-      zova-module-a-table: 5.1.43(vue@3.5.43(typescript@5.9.3))
-      zova-module-a-zod: 5.1.37
-      zova-module-a-zova: 5.1.107(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3))
-    transitivePeerDependencies:
-      - '@vue/composition-api'
-      - debug
-      - supports-color
-      - typescript
-      - vue
-
   zova-suite-a-zova@5.1.165(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3)):
     dependencies:
       zova-module-a-api: 5.1.22
@@ -15369,17 +15258,6 @@ snapshots:
       - typescript
       - vue
 
-  zova@5.1.165(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3)):
-    dependencies:
-      zova-core: 5.1.91(typescript@5.9.3)
-      zova-suite-a-zova: 5.1.164(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3))
-    transitivePeerDependencies:
-      - '@vue/composition-api'
-      - debug
-      - supports-color
-      - typescript
-      - vue
-
   zova@5.1.166(typescript@5.9.3)(vue@3.5.43(typescript@5.9.3)):
     dependencies:
       zova-core: 5.1.92(patch_hash=144450bd7a567a6067e5857c0cf4c780981b7e90bc48745c09e1696a9b6f1b97)(typescript@5.9.3)

package/vona/src/suite/a-demo/modules/demo-demonstration/src/bean/guard.demonstration.ts

@@ -42,6 +42,7 @@ export interface IGuardOptionsDemonstration extends IDecoratorGuardOptionsGlobal
     '/auth/passport/callback',
     '/auth/mock/authorize',
     '/captcha/create',
+    '/captcha/refresh',
     '/image/upload-policy',
     '/file/upload-policy',
   ],

package/vona/src/suite-vendor/a-auth/modules/a-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-module-a-auth",
-  "version": "5.1.22",
+  "version": "5.1.23",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "",
   "keywords": [

package/vona/src/suite-vendor/a-auth/modules/a-auth/src/bean/bean.auth.ts

@@ -86,7 +86,7 @@ export class BeanAuth extends BeanBase {
       strategy.redirect = (location: string) => {
         // real
         if (!clientOptions.mockUsername) {
-          return this.ctx.redirect(location);
+          return this.ctx.redirect(location, { trustedExternal: true });
         }
         // mock
         this.ctx.request.query.code = clientOptions.mockProfileId

package/vona/src/suite-vendor/a-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-suite-a-auth",
-  "version": "5.1.26",
+  "version": "5.1.27",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "",
   "author": "",

package/vona/src/suite-vendor/a-vona/modules/a-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-module-a-core",
-  "version": "5.1.53",
+  "version": "5.1.54",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "",
   "keywords": [

package/vona/src/suite-vendor/a-vona/modules/a-version/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-module-a-version",
-  "version": "5.1.16",
+  "version": "5.1.17",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "vona-module-a-version",
   "keywords": [

package/vona/src/suite-vendor/a-vona/modules/a-version/src/lib/databaseTestName.ts

@@ -0,0 +1,47 @@
+import { createHash } from 'node:crypto';
+
+const DATABASE_NAME_MAX_BYTES = 63;
+const APP_NAME_MAX_BYTES = 13;
+const HASH_LENGTH = 10;
+const TIMESTAMP_LENGTH = 15;
+
+export function getDatabaseTestPrefix(appName: string, scope: string): string {
+  const readablePrefix = getReadablePrefix(appName, scope);
+  if (Buffer.byteLength(readablePrefix, 'utf8') + TIMESTAMP_LENGTH <= DATABASE_NAME_MAX_BYTES) {
+    return readablePrefix;
+  }
+
+  const appHead = truncateUtf8(appName, APP_NAME_MAX_BYTES);
+  const scopeKind = scope === 'share' ? 's' : 'i';
+  const namespaceHash = hash(`${appName}\0${scope}`);
+  return `vona-test-${appHead}-${scopeKind}-${namespaceHash}-`;
+}
+
+export function createDatabaseTestName(databasePrefix: string, timestamp: string): string {
+  const databaseName = `${databasePrefix}${timestamp}`;
+  if (Buffer.byteLength(databaseName, 'utf8') > DATABASE_NAME_MAX_BYTES) {
+    throw new Error(`test database name exceeds ${DATABASE_NAME_MAX_BYTES} bytes`);
+  }
+  return databaseName;
+}
+
+function getReadablePrefix(appName: string, scope: string): string {
+  if (scope === 'share') return `vona-test-${appName}-s-`;
+  return `vona-test-${appName}-i-${scope.slice('isolate-'.length)}-`;
+}
+
+function hash(value: string): string {
+  return createHash('sha256').update(value).digest('base64url').slice(0, HASH_LENGTH);
+}
+
+function truncateUtf8(value: string, maxBytes: number): string {
+  let result = '';
+  let bytes = 0;
+  for (const char of value) {
+    const charBytes = Buffer.byteLength(char, 'utf8');
+    if (bytes + charBytes > maxBytes) break;
+    result += char;
+    bytes += charBytes;
+  }
+  return result;
+}

package/vona/src/suite-vendor/a-vona/modules/a-version/src/service/database.ts

@@ -7,6 +7,8 @@ import { DateTime } from 'luxon';
 import { BeanBase } from 'vona';
 import { Service } from 'vona-module-a-bean';
 
+import { createDatabaseTestName, getDatabaseTestPrefix } from '../lib/databaseTestName.ts';
+
 const __separator = '-';
 const __timeFormat = `yyyyMMdd${__separator}HHmmss`;
 
@@ -20,8 +22,8 @@ export class ServiceDatabase extends BeanBase {
     instanceName?: keyof IInstanceRecord,
     configInstanceBase?: ConfigInstanceBase,
   ) {
-    const prefix = configInstanceBase?.isolate ? `isolate${__separator}${instanceName}` : 'share';
-    return `vona${__separator}test${__separator}${this.app.name}${__separator}${prefix}${__separator}`;
+    const scope = configInstanceBase?.isolate ? `isolate${__separator}${instanceName}` : 'share';
+    return getDatabaseTestPrefix(this.app.name, scope);
   }
 
   public async databaseInitStartup() {
@@ -60,7 +62,10 @@ export class ServiceDatabase extends BeanBase {
     configInstanceBase?: ConfigInstanceBase,
   ) {
     const databasePrefix = this.getDatabasePrefix(instanceName, configInstanceBase);
-    const databaseName = `${databasePrefix}${DateTime.now().toFormat(__timeFormat)}`;
+    const databaseName = createDatabaseTestName(
+      databasePrefix,
+      DateTime.now().toFormat(__timeFormat),
+    );
     return await client.connection.schema.createDatabase(databaseName);
   }
 

package/vona/src/suite-vendor/a-vona/modules/a-version/test/databaseName.test.ts

@@ -0,0 +1,72 @@
+import assert from 'node:assert';
+import { describe, it } from 'node:test';
+
+import { createDatabaseTestName, getDatabaseTestPrefix } from '../src/lib/databaseTestName.ts';
+
+const timestamp = '20260923-104500';
+
+describe('databaseTestName', () => {
+  it('keeps a short shared app name readable with its shared marker', () => {
+    const prefix = getDatabaseTestPrefix('cabloy-start', 'share');
+    const databaseName = createDatabaseTestName(prefix, timestamp);
+
+    assert.equal(prefix, 'vona-test-cabloy-start-s-');
+    assert.equal(databaseName, 'vona-test-cabloy-start-s-20260923-104500');
+    assert.ok(Buffer.byteLength(databaseName, 'utf8') <= 63);
+  });
+
+  it('keeps a short isolated app name readable with its isolate identity', () => {
+    const sharedPrefix = getDatabaseTestPrefix('cabloy-start', 'share');
+    const isolatedPrefix = getDatabaseTestPrefix('cabloy-start', 'isolate-isolateTest');
+
+    assert.equal(isolatedPrefix, 'vona-test-cabloy-start-i-isolateTest-');
+    assert.notEqual(sharedPrefix, isolatedPrefix);
+  });
+
+  it('uses the readable format through 63 bytes and the fallback at 64 bytes', () => {
+    const readableAppName = 'a'.repeat(35);
+    const fallbackAppName = `${readableAppName}a`;
+    const readablePrefix = getDatabaseTestPrefix(readableAppName, 'share');
+    const fallbackPrefix = getDatabaseTestPrefix(fallbackAppName, 'share');
+    const readableName = createDatabaseTestName(readablePrefix, timestamp);
+    const fallbackName = createDatabaseTestName(fallbackPrefix, timestamp);
+
+    assert.equal(readablePrefix, `vona-test-${readableAppName}-s-`);
+    assert.equal(Buffer.byteLength(readableName, 'utf8'), 63);
+    assert.match(fallbackPrefix, /^vona-test-a{13}-s-[\w-]{10}-$/);
+    assert.ok(Buffer.byteLength(fallbackName, 'utf8') <= 63);
+  });
+
+  it('uses UTF-8 byte length and preserves code points in the fallback', () => {
+    const readableAppName = '商'.repeat(11);
+    const fallbackAppName = `${readableAppName}店`;
+    const readablePrefix = getDatabaseTestPrefix(readableAppName, 'share');
+    const fallbackPrefix = getDatabaseTestPrefix(fallbackAppName, 'share');
+    const fallbackName = createDatabaseTestName(fallbackPrefix, timestamp);
+
+    assert.equal(readablePrefix, `vona-test-${readableAppName}-s-`);
+    assert.match(fallbackPrefix, /^vona-test-商{4}-s-[\w-]{10}-$/);
+    assert.ok(!fallbackPrefix.includes('�'));
+    assert.ok(Buffer.byteLength(fallbackName, 'utf8') <= 63);
+  });
+
+  it('distinguishes fallback namespaces with the same visible app head and distinct scopes', () => {
+    const appHead = 'same-readable';
+    const first = getDatabaseTestPrefix(
+      `${appHead}-worktree-one-that-overflows`,
+      'isolate-isolateTest',
+    );
+    const second = getDatabaseTestPrefix(
+      `${appHead}-worktree-two-that-overflows`,
+      'isolate-isolateTest',
+    );
+    const third = getDatabaseTestPrefix(
+      `${appHead}-worktree-one-that-overflows`,
+      'isolate-isolatePeerTest',
+    );
+
+    assert.notEqual(first, second);
+    assert.notEqual(first, third);
+    assert.match(first, /-i-[\w-]{10}-$/);
+  });
+});

package/vona/src/suite-vendor/a-vona/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vona-suite-a-vona",
-  "version": "5.1.88",
+  "version": "5.1.90",
   "gitHead": "a79189b882c17af5911573896a781bbb0046d37d",
   "description": "",
   "author": "",

package/zova/packages-cli/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zova-cli",
-  "version": "1.2.110",
+  "version": "1.2.111",
   "gitHead": "6f675a8cc46d596142c591c28a40cc4d82fcc6cc",
   "description": "zova cli",
   "keywords": [
@@ -44,7 +44,7 @@
     "@cabloy/process-helper": "^3.1.8",
     "fs-extra": "^11.3.5",
     "semver": "^7.6.2",
-    "zova-cli-set-front": "^1.2.108"
+    "zova-cli-set-front": "^1.2.109"
   },
   "devDependencies": {
     "clean-package": "^2.2.0",

package/zova/packages-cli/cli-set-front/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zova-cli-set-front",
-  "version": "1.2.108",
+  "version": "1.2.109",
   "gitHead": "6f675a8cc46d596142c591c28a40cc4d82fcc6cc",
   "description": "zova cli-set-front",
   "keywords": [
@@ -70,7 +70,7 @@
     "vite": "^8.0.14",
     "yaml": "^2.8.3",
     "zova-openapi": "^1.1.17",
-    "zova-vite": "^1.1.46"
+    "zova-vite": "^1.1.47"
   },
   "devDependencies": {
     "clean-package": "^2.2.0",

package/zova/packages-utils/zova-vite/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zova-vite",
-  "version": "1.1.46",
+  "version": "1.1.47",
   "gitHead": "09d901d17140a80ee0764211b441cda72fd94663",
   "description": "zova vite",
   "keywords": [

package/zova/packages-utils/zova-vite/src/collect-css-ssr.ts

@@ -58,11 +58,13 @@ function _collectCss(
     }
   });
 
-  styles.forEach((content, id) => {
-    result = result.concat(
-      `<style vite-css-module-id="${hashCode(id)}">${(content || '').replaceAll('\n', '')}</style>`,
-    );
-  });
+  Array.from(styles.entries())
+    .reverse()
+    .forEach(([id, content]) => {
+      result = result.concat(
+        `<style vite-css-module-id="${hashCode(id)}">${(content || '').replaceAll('\n', '')}</style>`,
+      );
+    });
 
   return result;
 }

package/zova/src/suite/a-home/modules/home-base/src/config/config.ts

@@ -4,14 +4,6 @@ import AvatarUser from '../../assets/img/avatar_user.png';
 
 export const config = (_sys: ZovaSys) => {
   return {
-    layout: {
-      sidebar: {
-        width: 300,
-      },
-      navbar: {
-        height: 132,
-      },
-    },
     avatar: {
       empty: AvatarUser,
     },

package/zova/src/suite/a-home/modules/home-base/src/service/ssrLayout.ts

@@ -4,6 +4,7 @@ import { getBodyReadyObserverScript } from 'zova-module-a-ssr';
 
 export interface IServiceSsrLayoutOptions {
   bodyReadyObserver?: boolean;
+  sidebarWidth?: number;
   sidebarBreakpoint?: number;
   sidebarLeftOpenPCCapability?: boolean;
   sidebarLeftOpenPCFallback?: boolean;
@@ -81,12 +82,10 @@ export class ServiceSsrLayout extends BeanBase {
       }
       const __domDrawerContainer=__targets?.drawerContainer;
       const __domDrawer=__targets?.drawer;
-      const sidebarWidth = '${this.scope.config.layout.sidebar.width}px';
-      const navbarHeight = '${this.scope.config.layout.navbar.height}px';
       if(!__domDrawerContainer||!__domDrawer)return;
       if(__leftDrawerOpen){
         __domDrawer.style.transform='translateX(0px)';
-        __domDrawer.style.width=sidebarWidth;
+        ${this.options?.sidebarWidth !== undefined ? `__domDrawer.style.width='${this.options.sidebarWidth}px';` : ''}
         __domDrawerContainer.classList.add('drawer-open');
       }else{
       }

package/zova/src/suite/a-home/modules/home-layoutadmin/src/component/layoutAdmin/controller.tsx

@@ -27,6 +27,7 @@ export class ControllerLayoutAdmin extends BeanControllerBase {
     const sidebar = this.scope.config.layout.sidebar;
     return usePrepareArg({
       bodyReadyObserver: sidebar.bodyReadyObserver,
+      sidebarWidth: sidebar.width,
       sidebarBreakpoint: sidebar.breakpoint,
       sidebarLeftOpenPCCapability: sidebar.leftOpenPCCapability,
       sidebarLeftOpenPCFallback: sidebar.leftOpenPCFallback,

package/zova/src/suite/a-home/modules/home-layoutadmin/src/component/layoutAdmin/render.sidebar.tsx

@@ -10,10 +10,7 @@ export class RenderSidebar extends BeanRenderBase {
 
   public render() {
     return (
-      <div
-        class="drawer-side"
-        style={{ width: `${this.$scopeBase.config.layout.sidebar.width}px` }}
-      >
+      <div class="drawer-side" style={{ width: `${this.scope.config.layout.sidebar.width}px` }}>
         <label htmlFor="my-drawer-2" aria-label="close sidebar" class="drawer-overlay"></label>
         {this.$$r.$$renderMenu.render()}
       </div>

package/zova/src/suite/a-home/modules/home-layoutadmin/src/config/config.ts

@@ -4,11 +4,15 @@ export const config = (_sys: ZovaSys) => {
   return {
     layout: {
       sidebar: {
+        width: 300,
         bodyReadyObserver: true,
         breakpoint: 1023,
         leftOpenPCCapability: true,
         leftOpenPCFallback: true,
       },
+      navbar: {
+        height: 132,
+      },
     },
     tabs: {
       scene: '',

package/zova/src/suite/a-home/modules/home-layoutweb/src/component/layoutWeb/controller.tsx

@@ -26,6 +26,7 @@ export class ControllerLayoutWeb extends BeanControllerBase {
     const sidebar = this.scope.config.layout.sidebar;
     return usePrepareArg({
       bodyReadyObserver: sidebar.bodyReadyObserver,
+      sidebarWidth: sidebar.width,
       sidebarBreakpoint: sidebar.breakpoint,
       sidebarLeftOpenPCCapability: sidebar.leftOpenPCCapability,
       sidebarLeftOpenPCFallback: sidebar.leftOpenPCFallback,

package/zova/src/suite/cabloy-basic/modules/basic-markdown/src/lib/richTextContentStyle.ts

@@ -61,8 +61,22 @@ export function richTextContentStyle(): NestedCSSProperties {
         gap: '0.5rem',
       },
       '& ul[data-type="taskList"] li > label': {
-        lineHeight: 1.65,
-        paddingTop: '0.2rem',
+        blockSize: '1em',
+        display: 'flex',
+        flex: '0 0 1em',
+        inlineSize: '1em',
+        lineHeight: 1,
+        margin: 0,
+        marginBlockStart: '0.325em',
+        padding: 0,
+      },
+      '& ul[data-type="taskList"] li > label > input[type="checkbox"]': {
+        blockSize: '1em',
+        boxSizing: 'border-box',
+        display: 'block',
+        flex: '0 0 1em',
+        inlineSize: '1em',
+        margin: 0,
       },
       '& ul[data-type="taskList"] li > div': {
         flex: 1,