@byline/admin 4.19.0 → 5.1.0

package/dist/forms/form-status-display.d.ts

@@ -6,14 +6,15 @@
  * Copyright (c) Infonomic Company Limited
  */
 import type { WorkflowStatus } from '@byline/core';
-import type { PublishedVersionInfo } from './form-renderer';
+import type { PublishedVersionInfo } from './form-renderer.js';
 /**
  * The status / metadata strip at the top of a document form — current
  * workflow status (suppressed for single-status workflows), last-modified and
  * created timestamps, and a "published live" indicator with an inline
  * Unpublish action when a previously-published version is still live.
  */
-export declare const FormStatusDisplay: ({ initialData, workflowStatuses, publishedVersion, onUnpublish, afterStatusCells, }: {
+export declare const FormStatusDisplay: ({ disabled, initialData, workflowStatuses, publishedVersion, onUnpublish, afterStatusCells, }: {
+    disabled?: boolean;
     initialData?: Record<string, any>;
     workflowStatuses?: WorkflowStatus[];
     publishedVersion?: PublishedVersionInfo | null;

package/dist/forms/form-status-display.js

@@ -4,7 +4,7 @@ import { useTranslation } from "@byline/i18n/react";
 import clsx from "clsx";
 import { LocalDateTime } from "../fields/local-date-time.js";
 import form_renderer_module from "./form-renderer.module.js";
-const FormStatusDisplay = ({ initialData, workflowStatuses, publishedVersion, onUnpublish, afterStatusCells })=>{
+const FormStatusDisplay = ({ disabled = false, initialData, workflowStatuses, publishedVersion, onUnpublish, afterStatusCells })=>{
     const { t } = useTranslation('byline-admin');
     const statusCode = initialData?.status;
     const statusLabel = workflowStatuses?.find((s)=>s.name === statusCode)?.label ?? statusCode;
@@ -82,7 +82,10 @@ const FormStatusDisplay = ({ initialData, workflowStatuses, publishedVersion, on
                             ' ',
                             /*#__PURE__*/ jsx("button", {
                                 type: "button",
-                                onClick: onUnpublish,
+                                disabled: disabled,
+                                onClick: ()=>{
+                                    if (!disabled) onUnpublish().catch(()=>{});
+                                },
                                 className: clsx('byline-form-status-unpublish', form_renderer_module["status-unpublish"]),
                                 children: t('common.actions.unpublish')
                             })

package/dist/forms/path-widget.d.ts

@@ -1,5 +1,6 @@
 import type { SlugifierFn } from '@byline/core';
 export interface PathWidgetProps {
+    disabled?: boolean;
     /** The collection's `useAsPath` source field name, when configured. */
     useAsPath: string | undefined;
     /** Collection path, forwarded to the slugifier as context. */
@@ -51,4 +52,4 @@ export interface PathWidgetProps {
  * Stable override handles: `.byline-form-path`, `.byline-form-path-header`,
  * `.byline-form-path-regenerate`.
  */
-export declare const PathWidget: ({ useAsPath, collectionPath, defaultLocale, activeLocale, mode, slugifier, sourceLocked, }: PathWidgetProps) => import("react").JSX.Element;
+export declare const PathWidget: ({ useAsPath, collectionPath, defaultLocale, activeLocale, mode, slugifier, sourceLocked, disabled, }: PathWidgetProps) => import("react").JSX.Element;

package/dist/forms/path-widget.js

@@ -12,7 +12,7 @@ function coerceToString(value) {
     if (value instanceof Date) return value.toISOString();
     return String(value);
 }
-const PathWidget = ({ useAsPath, collectionPath, defaultLocale, activeLocale, mode, slugifier, sourceLocked = false })=>{
+const PathWidget = ({ useAsPath, collectionPath, defaultLocale, activeLocale, mode, slugifier, sourceLocked = false, disabled = false })=>{
     const { setSystemPath } = useFormContext();
     const { t } = useTranslation('byline-admin');
     const systemPath = useSystemPath();
@@ -37,13 +37,16 @@ const PathWidget = ({ useAsPath, collectionPath, defaultLocale, activeLocale, mo
     ]);
     const inputValue = systemPath ?? '';
     const handleChange = useCallback((next)=>{
+        if (disabled) return;
         setSystemPath(0 === next.length ? null : next);
     }, [
+        disabled,
         setSystemPath
     ]);
     const handleRegenerate = useCallback(()=>{
-        if (livePreview.length > 0) setSystemPath(livePreview);
+        if (!disabled && livePreview.length > 0) setSystemPath(livePreview);
     }, [
+        disabled,
         livePreview,
         setSystemPath
     ]);
@@ -90,6 +93,7 @@ const PathWidget = ({ useAsPath, collectionPath, defaultLocale, activeLocale, mo
                         type: "button",
                         onClick: handleRegenerate,
                         className: clsx('byline-form-path-regenerate', path_widget_module.regenerate),
+                        disabled: disabled,
                         "aria-label": t('pathWidget.regenerateAriaLabel', {
                             field: useAsPath
                         }),
@@ -100,6 +104,7 @@ const PathWidget = ({ useAsPath, collectionPath, defaultLocale, activeLocale, mo
                 ]
             }),
             /*#__PURE__*/ jsx(Input, {
+                disabled: disabled,
                 id: "system-path",
                 name: "__systemPath__",
                 value: inputValue,

package/dist/forms/scheduled-publication-control.d.ts

@@ -5,6 +5,7 @@ export interface SchedulePublicationInput {
     publishAt: string;
 }
 export interface UseScheduledPublicationArgs {
+    disabled?: boolean;
     schedule: ScheduledPublicationInfo | null;
     onSchedule?: (input: SchedulePublicationInput) => Promise<void>;
     onConfirm?: () => Promise<void>;
@@ -24,7 +25,7 @@ export interface UseScheduledPublicationReturn {
     /** The schedule / reschedule modal. Render once, anywhere in the form. */
     modal: React.ReactNode;
 }
-export declare function useScheduledPublication({ schedule, onSchedule, onConfirm, onCancel, hasUnsavedChanges, onUnsavedChanges, }: UseScheduledPublicationArgs): UseScheduledPublicationReturn;
+export declare function useScheduledPublication({ disabled, schedule, onSchedule, onConfirm, onCancel, hasUnsavedChanges, onUnsavedChanges, }: UseScheduledPublicationArgs): UseScheduledPublicationReturn;
 /**
  * One metadata cell for the form's status bar, matching the Status /
  * Last modified / Created cells in scale, sitting immediately after the status

package/dist/forms/scheduled-publication-control.js

@@ -28,7 +28,7 @@ function seedScheduleInstant(schedule) {
     seed.setSeconds(0, 0);
     return seed;
 }
-function useScheduledPublication({ schedule, onSchedule, onConfirm, onCancel, hasUnsavedChanges, onUnsavedChanges }) {
+function useScheduledPublication({ disabled = false, schedule, onSchedule, onConfirm, onCancel, hasUnsavedChanges, onUnsavedChanges }) {
     const timeZone = useMemo(browserTimeZone, []);
     const [now, setNow] = useState(()=>Date.now());
     const [showSchedule, setShowSchedule] = useState(false);
@@ -55,52 +55,56 @@ function useScheduledPublication({ schedule, onSchedule, onConfirm, onCancel, ha
         now
     ]);
     const openSchedule = useCallback(()=>{
+        if (disabled) return;
         if (hasUnsavedChanges) return void onUnsavedChanges();
         setShowSchedule(true);
     }, [
+        disabled,
         hasUnsavedChanges,
         onUnsavedChanges
     ]);
     const confirm = useCallback(async ()=>{
-        if (null == onConfirm) return;
+        if (disabled || null == onConfirm) return;
         if (hasUnsavedChanges) return void onUnsavedChanges();
         setBusy(true);
         try {
             await onConfirm();
-        } finally{
+        } catch  {} finally{
             setBusy(false);
         }
     }, [
+        disabled,
         onConfirm,
         hasUnsavedChanges,
         onUnsavedChanges
     ]);
     const cancel = useCallback(async ()=>{
-        if (null == onCancel) return;
+        if (disabled || null == onCancel) return;
         setBusy(true);
         try {
             await onCancel();
-        } finally{
+        } catch  {} finally{
             setBusy(false);
         }
     }, [
+        disabled,
         onCancel
     ]);
     const modal = showSchedule ? /*#__PURE__*/ jsx(ScheduleModal, {
         schedule: schedule,
         timeZone: timeZone,
         onSubmit: async (input)=>{
-            if (null == onSchedule) return;
+            if (disabled || null == onSchedule) return;
             setBusy(true);
             try {
                 await onSchedule(input);
                 setShowSchedule(false);
-            } finally{
+            } catch  {} finally{
                 setBusy(false);
             }
         },
         onDismiss: ()=>setShowSchedule(false),
-        busy: busy
+        busy: disabled || busy
     }) : null;
     return {
         state,

package/dist/forms/tree-placement-widget.d.ts

@@ -1,4 +1,8 @@
 export interface TreePlacementWidgetProps {
+    disabled?: boolean;
+    onMutationError?: (error: unknown) => 'blocked' | 'committed' | null | void;
+    onCommitted?: (receipt: import('@byline/core').StructuralMutationReceipt) => void;
+    expectedRevision: number;
     /** The collection path (`tree: true`). */
     collectionPath: string;
     /** The logical id of the document being edited. */
@@ -20,4 +24,4 @@ export interface TreePlacementWidgetProps {
  * Renders only in edit mode (placement needs a persisted document) and only when
  * the host wires the tree services. Stable override handle: `.byline-form-tree`.
  */
-export declare const TreePlacementWidget: ({ collectionPath, documentId, useAsTitle, }: TreePlacementWidgetProps) => import("react").JSX.Element | null;
+export declare const TreePlacementWidget: ({ collectionPath, disabled, onMutationError, onCommitted, expectedRevision, documentId, useAsTitle, }: TreePlacementWidgetProps) => import("react").JSX.Element | null;

package/dist/forms/tree-placement-widget.js

@@ -8,7 +8,7 @@ import clsx from "clsx";
 import { useBylineFieldServices } from "../fields/field-services-context.js";
 import { RelationPicker } from "../fields/relation/relation-picker.js";
 import tree_placement_widget_module from "./tree-placement-widget.module.js";
-const TreePlacementWidget = ({ collectionPath, documentId, useAsTitle })=>{
+const TreePlacementWidget = ({ collectionPath, disabled = false, onMutationError, onCommitted, expectedRevision, documentId, useAsTitle })=>{
     const { t } = useTranslation('byline-admin');
     const { getTreeAncestors, getTreeParent, placeTreeNode } = useBylineFieldServices();
     const definition = getCollectionDefinition(collectionPath);
@@ -60,7 +60,7 @@ const TreePlacementWidget = ({ collectionPath, documentId, useAsTitle })=>{
         t
     ]);
     const place = useCallback(async (parentDocumentId, optimistic)=>{
-        if (null == placeTreeNode || busy) return;
+        if (disabled || null == placeTreeNode || busy) return;
         const previousParent = parent;
         const previousPlaced = placed;
         setError(null);
@@ -68,12 +68,15 @@ const TreePlacementWidget = ({ collectionPath, documentId, useAsTitle })=>{
         setParent(optimistic);
         setPlaced(true);
         try {
-            await placeTreeNode({
+            const result = await placeTreeNode({
+                expectedRevision,
                 collection: collectionPath,
                 documentId,
                 parentDocumentId
             });
-        } catch  {
+            onCommitted?.(result);
+        } catch (error) {
+            if (onMutationError?.(error) === 'committed') return;
             setParent(previousParent);
             setPlaced(previousPlaced);
             setError(t('treeWidget.error'));
@@ -81,6 +84,10 @@ const TreePlacementWidget = ({ collectionPath, documentId, useAsTitle })=>{
             setBusy(false);
         }
     }, [
+        disabled,
+        onMutationError,
+        onCommitted,
+        expectedRevision,
         placeTreeNode,
         busy,
         parent,
@@ -136,20 +143,20 @@ const TreePlacementWidget = ({ collectionPath, documentId, useAsTitle })=>{
                         size: "xs",
                         variant: "outlined",
                         intent: "noeffect",
-                        disabled: loading || busy,
+                        disabled: disabled || loading || busy,
                         onClick: ()=>setPickerOpen(true),
                         children: t('treeWidget.choose')
                     }),
                     placed ? null != parent && /*#__PURE__*/ jsx("button", {
                         type: "button",
                         className: clsx('byline-form-tree-link', tree_placement_widget_module.link),
-                        disabled: busy,
+                        disabled: disabled || busy,
                         onClick: ()=>place(null, null),
                         children: t('treeWidget.makeRoot')
                     }) : /*#__PURE__*/ jsx("button", {
                         type: "button",
                         className: clsx('byline-form-tree-link', tree_placement_widget_module.link),
-                        disabled: loading || busy,
+                        disabled: disabled || loading || busy,
                         onClick: ()=>place(null, null),
                         children: t('treeWidget.addToTree')
                     })

package/dist/forms/upload-executor.d.ts

@@ -13,8 +13,8 @@
  * but only uploaded when the user clicks Save.
  */
 import type { Field, StoredFileValue } from '@byline/core';
-import type { UploadFieldFn } from '../fields/field-services-types';
-import type { PendingUpload } from './form-context';
+import type { UploadFieldFn } from '../fields/field-services-types.js';
+import type { PendingUpload } from './form-context.js';
 export interface UploadResult {
     fieldPath: string;
     success: boolean;

package/dist/modules/admin-account/components/change-password.js

@@ -84,6 +84,24 @@ function ChangeAccountPassword({ account, onClose, onSuccess }) {
             }
         }
     });
+    if (successMessage) return /*#__PURE__*/ jsxs("div", {
+        className: clsx('byline-account-change-password-wrap', change_password_module.wrap),
+        children: [
+            /*#__PURE__*/ jsx("div", {
+                role: "status",
+                children: /*#__PURE__*/ jsx(Alert, {
+                    intent: "success",
+                    children: successMessage
+                })
+            }),
+            /*#__PURE__*/ jsx(Button, {
+                type: "button",
+                intent: "primary",
+                onClick: ()=>window.location.reload(),
+                children: t('auth.signIn.title')
+            })
+        ]
+    });
     return /*#__PURE__*/ jsx("div", {
         className: clsx('byline-account-change-password-wrap', change_password_module.wrap),
         children: /*#__PURE__*/ jsxs("form", {

package/dist/modules/admin-account/service.d.ts

@@ -25,12 +25,8 @@ import type { AccountResponse, ChangeAccountPasswordRequest, UpdateAccountReques
  *     in the new hash. A hijacked session cannot use this flow to lock
  *     out the legitimate owner.
  *
- * Note on session revocation: changing a password here does **not**
- * currently revoke other refresh tokens — existing access tokens stay
- * valid until their 15-minute expiry, and other refresh tokens remain
- * useable. A "sign out everywhere on password change" follow-up should
- * call `RefreshTokensRepository.revokeAllExcept(adminUserId, currentJti)`
- * once that lands.
+ * Native adapter password writes atomically advance the session generation and
+ * revoke every refresh session. External providers own their own revocation.
  */
 export declare class AdminAccountService {
     #private;

package/dist/modules/admin-account/service.js

@@ -1,5 +1,5 @@
 import { toAdminUser } from "../admin-users/dto.js";
-import { ERR_ADMIN_USER_EMAIL_IN_USE } from "../admin-users/errors.js";
+import { ERR_ADMIN_USER_EMAIL_IN_USE, ERR_ADMIN_USER_VERSION_CONFLICT } from "../admin-users/errors.js";
 import { hashPassword, verifyPassword } from "../auth/password.js";
 import { ERR_ADMIN_ACCOUNT_INVALID_CURRENT_PASSWORD, ERR_ADMIN_ACCOUNT_NOT_FOUND } from "./errors.js";
 function _check_private_redeclaration(obj, privateCollection) {
@@ -63,6 +63,7 @@ class AdminAccountService {
         if (!withHash) throw ERR_ADMIN_ACCOUNT_NOT_FOUND();
         const ok = await verifyPassword(request.currentPassword, withHash.password_hash);
         if (!ok) throw ERR_ADMIN_ACCOUNT_INVALID_CURRENT_PASSWORD();
+        if (withHash.vid !== request.vid) throw ERR_ADMIN_USER_VERSION_CONFLICT();
         const newHash = await hashPassword(request.newPassword);
         const row = await _class_private_field_get(this, _repo).setPasswordHash(actorId, request.vid, newHash);
         return toAdminUser(row);

package/dist/modules/admin-users/repository.d.ts

@@ -65,6 +65,8 @@ export interface AdminUserRow {
  */
 export interface AdminUserWithPasswordRow extends AdminUserRow {
     password_hash: string;
+    /** Native session generation, independent of edit revisions. */
+    session_version: number;
 }
 export interface CreateAdminUserInput {
     email: string;
@@ -143,16 +145,23 @@ export interface AdminUsersRepository {
      * Content update with optimistic concurrency. Throws
      * `AdminUsersError(VERSION_CONFLICT)` if the stored `vid` differs from
      * `expectedVid`. Bumps `vid` on success and returns the fresh row.
+     * A false `is_enabled` patch must atomically advance the native session
+     * generation and revoke refresh sessions, under the account row lock.
      */
     update(id: string, expectedVid: number, patch: UpdateAdminUserInput): Promise<AdminUserRow>;
     /**
      * Replace the stored password hash with optimistic concurrency.
      * Version-gated on `expectedVid`. Caller supplies a pre-hashed PHC string.
+     * Atomically advance the native session generation and revoke every refresh
+     * session in the same transaction. Lock the account before refresh rows.
      * Returns the updated row so callers holding the edit form can refresh
      * their cached `vid` without a second round-trip.
      */
     setPasswordHash(id: string, expectedVid: number, passwordHash: string): Promise<AdminUserRow>;
-    /** Toggle enabled state. Vid-less — admin intent is independent of other edits. */
+    /**
+     * Toggle enabled state. Disable must atomically advance the native session
+     * generation and revoke refresh sessions. Enable never resets the generation.
+     */
     setEnabled(id: string, enabled: boolean): Promise<void>;
     /**
      * Set the admin interface locale preference. Vid-less — user preference

package/dist/modules/auth/index.d.ts

@@ -19,7 +19,9 @@
  * Clerk, institutional SSO) should be shipped as separate packages
  * against `@byline/auth` rather than added here.
  */
-export { JwtSessionProvider, type JwtSessionProviderConfig } from './jwt-session-provider.js';
+export { JwtSessionProvider, type JwtSessionProviderConfig, type NativeSessionEvent, } from './jwt-session-provider.js';
 export { hashPassword, verifyPassword } from './password.js';
 export { resolveActor } from './resolve-actor.js';
+export { createPasswordSignInLimiter, type SignInLimiterOptions, type SignInRateLimitPolicy, type SignInRateLimitStore, type SignInSecurityEvent, } from './sign-in-rate-limiter.js';
+export type { LoginSessionRow, LoginSessionsRepository } from './login-sessions-repository.js';
 export type { IssueRefreshTokenInput, RefreshTokenRow, RefreshTokensRepository, } from './refresh-tokens-repository.js';

package/dist/modules/auth/index.js

@@ -1,3 +1,4 @@
 export { JwtSessionProvider } from "./jwt-session-provider.js";
 export { hashPassword, verifyPassword } from "./password.js";
 export { resolveActor } from "./resolve-actor.js";
+export { createPasswordSignInLimiter } from "./sign-in-rate-limiter.js";

package/dist/modules/auth/jwt-session-provider.d.ts

@@ -5,9 +5,14 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-import { type AdminAuth, type RefreshSessionArgs, type SessionProvider, type SessionProviderCapabilities, type SessionTokens, type SignInResult, type SignInWithPasswordArgs } from '@byline/auth';
+import { type AdminAuth, type RefreshSessionArgs, type RevokeSessionArgs, type SessionProvider, type SessionProviderCapabilities, type SessionTokens, type SignInResult, type SignInWithPasswordArgs } from '@byline/auth';
 import type { AdminStore } from '../../store.js';
+export interface NativeSessionEvent {
+    type: 'refresh_attempted' | 'refresh_completed' | 'refresh_contested';
+}
 export interface JwtSessionProviderConfig {
+    /** Best-effort, token-free renewal telemetry. Errors never change authentication outcomes. */
+    onEvent?: (event: NativeSessionEvent) => void;
     /**
      * Adapter-backed admin repositories. Construct via the DB adapter's
      * admin-store factory (e.g. `createAdminStore(db)` from
@@ -39,8 +44,9 @@ export declare class JwtSessionProvider implements SessionProvider {
     signInWithPassword(args: SignInWithPasswordArgs): Promise<SignInResult>;
     verifyAccessToken(token: string): Promise<{
         actor: AdminAuth;
+        sessionId: string;
     }>;
     refreshSession(args: RefreshSessionArgs): Promise<SessionTokens>;
-    revokeSession(refreshToken: string): Promise<void>;
+    revokeSession(args: RevokeSessionArgs): Promise<void>;
     resolveActor(adminUserId: string): Promise<AdminAuth | null>;
 }