metamind42.bsky.social Trying to remove cards that are NOT in a collection logs me out without completing the removal.
Steps taken:
Only SOME cards outside collections are affected, though.
Sorry for the delay! Is this still an issue? I checked those and it looked like they weren't in your library now
Possibly the same root cause as #32, from the API side, maybe a separate one.
Building a Discord→Semble relay (files links into a collection via card.addUrl, ~30/mo), our sk_… API key periodically stops authorizing writes while reads keep working. card.addUrl returns:
HTTP 401 — "No valid OAuth or App Password session found … The session was deleted by another process." …while collection.listMine / card.listMine with the same key keep returning 200 throughout. So the sk_ key appears to ride on a login session that the backend deletes — and #32's "removing certain cards logs me out" looks like the same session-invalidation surfacing in the web UI.
Two problems:
An sk_ API key that can be invalidated by an unrelated session change isn't behaving like a durable API key. The failure is asymmetric (reads 200, writes 401), so read-based health checks report "healthy" while every write silently fails. Ours went ~10h before we noticed. Repro: mint sk_ key → addUrl works → trigger a session change on the owning account (log in elsewhere / expire) → listMine still 200s, addUrl 401s indefinitely.
Suggestions: make sk_ keys standalone/long-lived (or auto-refresh their backing session server-side); at minimum return the same 401 for reads and writes so it fails loudly, and document that keys can be invalidated this way.
Workaround (FYI): switching to server.createSession with a Bluesky App Password and minting a fresh session per run reliably authorizes writes.
I've narrowed it down to 3 specific cards in my Semble library (this handle) that I can't remove.
Cards in question: