@byline/admin 6.0.1 → 6.0.3

package/dist/modules/admin-preferences/index.d.ts

@@ -11,11 +11,15 @@
  *
  * Self-service like `@byline/admin/admin-account`: the actor IS the
  * target, and there is no ability gate — authn-only. The `scope` string
- * (e.g. `collections.docs.list`) is the generality lever: new admin
- * surfaces claim their own scopes with no schema change.
+ * (e.g. `collections.docs.list`, `analytics.dashboard`) is the
+ * generality lever: a new admin surface claims its own scope by
+ * registering a value schema for it in `schemas.ts`, which keeps each
+ * family's payload strictly validated and unregistered scopes
+ * unwritable. Storage itself is untouched — scopes share one JSON
+ * key-value table.
  */
 export { getPreferenceCommand, setPreferenceCommand } from './commands.js';
-export { getPreferenceRequestSchema, listViewPreferenceValueSchema, preferenceResponseSchema, preferenceScopeSchema, setPreferenceRequestSchema, } from './schemas.js';
+export { analyticsViewPreferenceValueSchema, getPreferenceRequestSchema, listViewPreferenceValueSchema, preferenceResponseSchema, preferenceScopeSchema, setPreferenceRequestSchema, } from './schemas.js';
 export { AdminPreferencesService } from './service.js';
 export type { AdminPreferencesCommandDeps } from './commands.js';
 export type { AdminPreferencesRepository, AdminUserPreferenceRow, } from './repository.js';

package/dist/modules/admin-preferences/index.js

@@ -1,3 +1,3 @@
 export { getPreferenceCommand, setPreferenceCommand } from "./commands.js";
-export { getPreferenceRequestSchema, listViewPreferenceValueSchema, preferenceResponseSchema, preferenceScopeSchema, setPreferenceRequestSchema } from "./schemas.js";
+export { analyticsViewPreferenceValueSchema, getPreferenceRequestSchema, listViewPreferenceValueSchema, preferenceResponseSchema, preferenceScopeSchema, setPreferenceRequestSchema } from "./schemas.js";
 export { AdminPreferencesService } from "./service.js";

package/dist/modules/admin-preferences/schemas.d.ts

@@ -5,17 +5,6 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-/**
- * Zod schemas for the admin-preferences commands.
- *
- * Self-service, like admin-account: none of the request schemas accept a
- * user id — the command resolves the target from `actor.id`.
- *
- * The `value` payload is validated against the list-view shape because
- * that is the only registered scope family today
- * (`collections.<path>.list`). When a second scope family arrives, this
- * becomes a scope-keyed selection of value schemas.
- */
 import { z } from 'zod';
 /** Dot-separated segment key, e.g. `collections.docs.list`. */
 export declare const preferenceScopeSchema: z.ZodString;
@@ -29,17 +18,31 @@ export declare const listViewPreferenceValueSchema: z.ZodObject<{
     order: z.ZodOptional<z.ZodString>;
     desc: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strict>;
+/**
+ * Sticky analytics-dashboard keys. The period list is sourced from
+ * `@byline/analytics/config` rather than restated, so the stored value
+ * can only ever be one the dashboard actually offers — adding a sixth
+ * period there admits it here with no edit.
+ *
+ * Note the stored `period` is the *parsed* value (`30`, `'ytd'`), not
+ * the `?period=30` URL string the route validates on the way in.
+ */
+export declare const analyticsViewPreferenceValueSchema: z.ZodObject<{
+    period: z.ZodUnion<readonly [z.ZodLiteral<7>, z.ZodLiteral<30>, z.ZodLiteral<90>, z.ZodLiteral<"ytd">, z.ZodLiteral<"all">]>;
+}, z.core.$strict>;
+/**
+ * The value schema a scope selects, or `undefined` when the scope
+ * belongs to no registered family. Exported so callers (and tests) can
+ * ask the same question the write path asks.
+ */
+export declare function resolvePreferenceValueSchema(scope: string): z.ZodType | undefined;
 export declare const getPreferenceRequestSchema: z.ZodObject<{
     scope: z.ZodString;
 }, z.core.$strip>;
 export type GetPreferenceRequest = z.infer<typeof getPreferenceRequestSchema>;
 export declare const setPreferenceRequestSchema: z.ZodObject<{
     scope: z.ZodString;
-    value: z.ZodObject<{
-        page_size: z.ZodOptional<z.ZodNumber>;
-        order: z.ZodOptional<z.ZodString>;
-        desc: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strict>;
+    value: z.ZodRecord<z.ZodString, z.ZodUnknown>;
 }, z.core.$strip>;
 export type SetPreferenceRequest = z.infer<typeof setPreferenceRequestSchema>;
 /** `value` is `null` when the user has no stored preference for the scope. */

package/dist/modules/admin-preferences/schemas.js

@@ -1,3 +1,4 @@
+import { ANALYTICS_DASHBOARD_PERIODS } from "@byline/analytics/config";
 import { z } from "zod";
 const preferenceScopeSchema = z.string().min(1).max(255).regex(/^[a-z0-9_-]+(\.[a-z0-9_-]+)*$/i, {
     message: 'scope must be dot-separated segments of [a-z0-9_-]'
@@ -9,15 +10,58 @@ const listViewPreferenceValueSchema = z.object({
 }).strict().refine((v)=>Object.keys(v).length > 0, {
     message: 'value cannot be empty'
 });
+const analyticsViewPreferenceValueSchema = z.object({
+    period: z.union([
+        z.literal(ANALYTICS_DASHBOARD_PERIODS["0"]),
+        z.literal(ANALYTICS_DASHBOARD_PERIODS["1"]),
+        z.literal(ANALYTICS_DASHBOARD_PERIODS["2"]),
+        z.literal(ANALYTICS_DASHBOARD_PERIODS["3"]),
+        z.literal(ANALYTICS_DASHBOARD_PERIODS["4"])
+    ])
+}).strict();
+const PREFERENCE_VALUE_SCHEMAS = [
+    {
+        matches: (scope)=>{
+            const segments = scope.split('.');
+            return 3 === segments.length && 'collections' === segments[0] && 'list' === segments[2];
+        },
+        schema: listViewPreferenceValueSchema
+    },
+    {
+        matches: (scope)=>'analytics.dashboard' === scope,
+        schema: analyticsViewPreferenceValueSchema
+    }
+];
+function resolvePreferenceValueSchema(scope) {
+    return PREFERENCE_VALUE_SCHEMAS.find((family)=>family.matches(scope))?.schema;
+}
 const getPreferenceRequestSchema = z.object({
     scope: preferenceScopeSchema
 });
 const setPreferenceRequestSchema = z.object({
     scope: preferenceScopeSchema,
-    value: listViewPreferenceValueSchema
+    value: z.record(z.string(), z.unknown())
+}).superRefine((input, ctx)=>{
+    const schema = resolvePreferenceValueSchema(input.scope);
+    if (null == schema) return void ctx.addIssue({
+        code: 'custom',
+        path: [
+            'scope'
+        ],
+        message: 'scope does not belong to a registered preference family'
+    });
+    const result = schema.safeParse(input.value);
+    if (result.success) return;
+    for (const issue of result.error.issues)ctx.addIssue({
+        ...issue,
+        path: [
+            'value',
+            ...issue.path
+        ]
+    });
 });
 const preferenceResponseSchema = z.object({
     scope: z.string(),
     value: z.record(z.string(), z.unknown()).nullable()
 });
-export { getPreferenceRequestSchema, listViewPreferenceValueSchema, preferenceResponseSchema, preferenceScopeSchema, setPreferenceRequestSchema };
+export { analyticsViewPreferenceValueSchema, getPreferenceRequestSchema, listViewPreferenceValueSchema, preferenceResponseSchema, preferenceScopeSchema, resolvePreferenceValueSchema, setPreferenceRequestSchema };

package/dist/modules/analytics/components/timeseries.d.ts

@@ -51,6 +51,34 @@ export declare function resolveAnalyticsChartGranularity(period: AnalyticsDashbo
 export declare function bucketAnalyticsTimeseries(days: readonly AnalyticsSummaryDay[], granularity: AnalyticsChartGranularity): readonly AnalyticsChartBucket[];
 /** Project reporting buckets into column geometry. */
 export declare function buildAnalyticsColumns(buckets: readonly Pick<AnalyticsChartBucket, 'views' | 'visitors'>[]): readonly AnalyticsColumn[];
+/**
+ * Where the hover card sits relative to the plot box.
+ *
+ * `leftPercent` / `topPercent` are percentages of the plot rather than user
+ * -space units because the card is HTML laid over a stretched SVG: the plot
+ * is drawn `preserveAspectRatio="none"`, so anything measured in viewBox
+ * units would skew with the container width (the same reason the axis labels
+ * are HTML). Percentages survive the stretch.
+ */
+export interface AnalyticsHoverCardPlacement {
+    /** Horizontal centre of the hovered column, as a percentage of plot width. */
+    leftPercent: number;
+    /** Top edge of the hovered column, as a percentage of plot height. */
+    topPercent: number;
+    /**
+     * How the card lines up with `leftPercent`. Columns near a plot edge anchor
+     * that edge instead of centring, so the card never overhangs the chart.
+     */
+    align: 'start' | 'center' | 'end';
+    /**
+     * Which side of the column top the card occupies. A column tall enough that
+     * a card above it would clip the top of the plot takes the card below
+     * instead.
+     */
+    side: 'above' | 'below';
+}
+/** Project one column's geometry into hover-card placement. */
+export declare function resolveHoverCardPlacement(column: AnalyticsColumn): AnalyticsHoverCardPlacement;
 export interface AnalyticsTimeseriesProps {
     days: readonly AnalyticsSummaryDay[];
     granularity: AnalyticsChartGranularity;

package/dist/modules/analytics/components/timeseries.js

@@ -51,6 +51,18 @@ function buildAnalyticsColumns(buckets) {
         };
     });
 }
+const CARD_EDGE_MARGIN = 15;
+const CARD_FLIP_THRESHOLD = 45;
+function resolveHoverCardPlacement(column) {
+    const leftPercent = (column.hitX + column.hitWidth / 2) / VIEWBOX_WIDTH * 100;
+    const topPercent = column.y / VIEWBOX_HEIGHT * 100;
+    return {
+        leftPercent,
+        topPercent,
+        align: leftPercent < CARD_EDGE_MARGIN ? 'start' : leftPercent > 100 - CARD_EDGE_MARGIN ? 'end' : 'center',
+        side: topPercent < CARD_FLIP_THRESHOLD ? 'below' : 'above'
+    };
+}
 function AnalyticsTimeseries({ days, granularity, locale }) {
     const { t } = useTranslation('byline-admin');
     const [hovered, setHovered] = useState(null);
@@ -76,6 +88,13 @@ function AnalyticsTimeseries({ days, granularity, locale }) {
     const formatBucket = (bucket)=>1 === bucket.dayCount ? formatDay(bucket.from) : `${formatDay(bucket.from)} – ${formatDay(bucket.to)}`;
     const visitorLabel = (bucket)=>'day' === bucket.granularity ? t('analytics.stats.dailyUniques') : t('analytics.stats.summedDailyUniques');
     const active = null == hovered ? void 0 : buckets[hovered];
+    const activePlacement = null == hovered || null == columns[hovered] ? void 0 : resolveHoverCardPlacement(columns[hovered]);
+    const lastShown = useRef(null);
+    if (null != active && null != activePlacement) lastShown.current = {
+        bucket: active,
+        placement: activePlacement
+    };
+    const shown = lastShown.current;
     const readBucket = (bucket)=>[
             formatBucket(bucket),
             `${t('analytics.stats.views')} ${numbers.format(bucket.views)}`,
@@ -116,46 +135,99 @@ function AnalyticsTimeseries({ days, granularity, locale }) {
         onKeyDown: trackKey,
         onBlur: ()=>setHovered(null),
         children: [
-            /*#__PURE__*/ jsxs("svg", {
-                ref: plot,
-                className: clsx('byline-analytics-chart', timeseries_module.chart),
-                viewBox: `0 0 ${VIEWBOX_WIDTH} ${VIEWBOX_HEIGHT}`,
-                preserveAspectRatio: "none",
-                "aria-hidden": "true",
+            /*#__PURE__*/ jsxs("div", {
+                className: clsx('byline-analytics-plot', timeseries_module.plot),
                 children: [
-                    /*#__PURE__*/ jsx("title", {
-                        children: t('analytics.chart.views')
+                    /*#__PURE__*/ jsxs("svg", {
+                        ref: plot,
+                        className: clsx('byline-analytics-chart', timeseries_module.chart),
+                        viewBox: `0 0 ${VIEWBOX_WIDTH} ${VIEWBOX_HEIGHT}`,
+                        preserveAspectRatio: "none",
+                        "aria-hidden": "true",
+                        children: [
+                            /*#__PURE__*/ jsx("title", {
+                                children: t('analytics.chart.views')
+                            }),
+                            [
+                                0.5,
+                                1
+                            ].map((fraction)=>/*#__PURE__*/ jsx("line", {
+                                    className: timeseries_module.gridline,
+                                    x1: 0,
+                                    x2: VIEWBOX_WIDTH,
+                                    y1: VIEWBOX_HEIGHT - VIEWBOX_HEIGHT * fraction,
+                                    y2: VIEWBOX_HEIGHT - VIEWBOX_HEIGHT * fraction,
+                                    vectorEffect: "non-scaling-stroke"
+                                }, fraction)),
+                            columns.map((column)=>/*#__PURE__*/ jsxs("g", {
+                                    className: clsx(timeseries_module.column, hovered === column.index && timeseries_module.columnActive),
+                                    children: [
+                                        /*#__PURE__*/ jsx("rect", {
+                                            className: timeseries_module.views,
+                                            x: column.x,
+                                            width: column.width,
+                                            y: column.y,
+                                            height: column.height
+                                        }),
+                                        /*#__PURE__*/ jsx("rect", {
+                                            className: timeseries_module.visitors,
+                                            x: column.insetX,
+                                            width: column.insetWidth,
+                                            y: column.insetY,
+                                            height: column.insetHeight
+                                        })
+                                    ]
+                                }, buckets[column.index]?.from))
+                        ]
                     }),
-                    [
-                        0.5,
-                        1
-                    ].map((fraction)=>/*#__PURE__*/ jsx("line", {
-                            className: timeseries_module.gridline,
-                            x1: 0,
-                            x2: VIEWBOX_WIDTH,
-                            y1: VIEWBOX_HEIGHT - VIEWBOX_HEIGHT * fraction,
-                            y2: VIEWBOX_HEIGHT - VIEWBOX_HEIGHT * fraction,
-                            vectorEffect: "non-scaling-stroke"
-                        }, fraction)),
-                    columns.map((column)=>/*#__PURE__*/ jsxs("g", {
-                            className: clsx(timeseries_module.column, hovered === column.index && timeseries_module.columnActive),
+                    buckets.length > 0 && /*#__PURE__*/ jsx("div", {
+                        className: clsx('byline-analytics-hovercard', timeseries_module.hoverCard, null != shown && timeseries_module[shown.placement.align], null != shown && ('below' === shown.placement.side ? timeseries_module.below : timeseries_module.above), null != active && timeseries_module.hoverCardVisible),
+                        style: {
+                            left: `${shown?.placement.leftPercent ?? 50}%`,
+                            top: `${shown?.placement.topPercent ?? 100}%`
+                        },
+                        "aria-hidden": "true",
+                        children: null != shown && /*#__PURE__*/ jsxs(Fragment, {
                             children: [
-                                /*#__PURE__*/ jsx("rect", {
-                                    className: timeseries_module.views,
-                                    x: column.x,
-                                    width: column.width,
-                                    y: column.y,
-                                    height: column.height
+                                /*#__PURE__*/ jsx("span", {
+                                    className: timeseries_module.hoverCardDate,
+                                    children: formatBucket(shown.bucket)
                                 }),
-                                /*#__PURE__*/ jsx("rect", {
-                                    className: timeseries_module.visitors,
-                                    x: column.insetX,
-                                    width: column.insetWidth,
-                                    y: column.insetY,
-                                    height: column.insetHeight
+                                /*#__PURE__*/ jsxs("span", {
+                                    className: timeseries_module.hoverCardRow,
+                                    children: [
+                                        /*#__PURE__*/ jsx("span", {
+                                            className: clsx(timeseries_module.keyLine, timeseries_module.keyViews)
+                                        }),
+                                        /*#__PURE__*/ jsx("span", {
+                                            className: timeseries_module.hoverCardLabel,
+                                            children: t('analytics.stats.views')
+                                        }),
+                                        /*#__PURE__*/ jsx("span", {
+                                            className: timeseries_module.hoverCardValue,
+                                            children: numbers.format(shown.bucket.views)
+                                        })
+                                    ]
+                                }),
+                                /*#__PURE__*/ jsxs("span", {
+                                    className: timeseries_module.hoverCardRow,
+                                    children: [
+                                        /*#__PURE__*/ jsx("span", {
+                                            className: clsx(timeseries_module.keyLine, timeseries_module.keyVisitors)
+                                        }),
+                                        /*#__PURE__*/ jsx("span", {
+                                            className: timeseries_module.hoverCardLabel,
+                                            children: visitorLabel(shown.bucket)
+                                        }),
+                                        /*#__PURE__*/ jsx("span", {
+                                            className: timeseries_module.hoverCardValue,
+                                            children: numbers.format(shown.bucket.visitors)
+                                        })
+                                    ]
                                 })
                             ]
-                        }, buckets[column.index]?.from))
+                        })
+                    })
                 ]
             }),
             /*#__PURE__*/ jsxs("div", {
@@ -250,4 +322,4 @@ function combineRows(from, to, granularity, rows) {
         downloads
     };
 }
-export { AnalyticsTimeseries, bucketAnalyticsTimeseries, buildAnalyticsColumns, resolveAnalyticsChartGranularity };
+export { AnalyticsTimeseries, bucketAnalyticsTimeseries, buildAnalyticsColumns, resolveAnalyticsChartGranularity, resolveHoverCardPlacement };

package/dist/modules/analytics/components/timeseries.module.js

@@ -1,7 +1,22 @@
 import "./timeseries_module.css";
 const timeseries_module = {
     root: "root-L2qL4D",
+    plot: "plot-hcQkYI",
     chart: "chart-giYTrx",
+    hoverCard: "hoverCard-riiLLo",
+    hoverCardVisible: "hoverCardVisible-mYSsIo",
+    center: "center-WOF43a",
+    start: "start-rwR0vM",
+    end: "end-dDnFtK",
+    above: "above-V9eoE9",
+    below: "below-BMn9q_",
+    hoverCardDate: "hoverCardDate-Td91gd",
+    hoverCardRow: "hoverCardRow-fMGuNA",
+    keyLine: "keyLine-wvPvBg",
+    keyViews: "keyViews-G8H3zC",
+    keyVisitors: "keyVisitors-P1JVE9",
+    hoverCardLabel: "hoverCardLabel-JYa1xk",
+    hoverCardValue: "hoverCardValue-m_cylC",
     gridline: "gridline-R_wAwP",
     column: "column-_Cw2Ua",
     views: "views-WHbm44",

package/dist/modules/analytics/components/timeseries_module.css

@@ -10,12 +10,115 @@
   outline-offset: 4px;
 }
 
+:is(.plot-hcQkYI, .byline-analytics-plot) {
+  position: relative;
+}
+
 :is(.chart-giYTrx, .byline-analytics-chart) {
   width: 100%;
   height: 11rem;
   display: block;
 }
 
+:is(.hoverCard-riiLLo, .byline-analytics-hovercard) {
+  z-index: 1;
+  background-color: var(--surface-panel-elevated);
+  border-width: var(--border-width-thin);
+  border-style: var(--border-style-solid);
+  border-color: var(--surface-panel-border);
+  border-radius: var(--border-radius-sm);
+  box-shadow: var(--shadow-sm);
+  font-variant-numeric: tabular-nums;
+  white-space: nowrap;
+  pointer-events: none;
+  opacity: 0;
+  gap: .125rem .5rem;
+  padding: .4rem .55rem;
+  font-size: .6875rem;
+  line-height: 1.35;
+  transition: opacity .16s ease-in, translate .16s ease-in;
+  display: grid;
+  position: absolute;
+  translate: 0 6px;
+}
+
+.hoverCardVisible-mYSsIo {
+  opacity: 1;
+  transition: opacity .24s ease-out, translate .24s ease-out;
+  translate: 0;
+}
+
+.hoverCard-riiLLo.center-WOF43a {
+  transform: translateX(-50%);
+}
+
+.hoverCard-riiLLo.start-rwR0vM {
+  transform: translateX(-.5rem);
+}
+
+.hoverCard-riiLLo.end-dDnFtK {
+  transform: translateX(calc(.5rem - 100%));
+}
+
+.hoverCard-riiLLo.above-V9eoE9 {
+  margin-top: -.5rem;
+}
+
+.hoverCard-riiLLo.above-V9eoE9.center-WOF43a {
+  transform: translate(-50%, -100%);
+}
+
+.hoverCard-riiLLo.above-V9eoE9.start-rwR0vM {
+  transform: translate(-.5rem, -100%);
+}
+
+.hoverCard-riiLLo.above-V9eoE9.end-dDnFtK {
+  transform: translate(calc(.5rem - 100%), -100%);
+}
+
+.hoverCard-riiLLo.below-BMn9q_ {
+  margin-top: .5rem;
+}
+
+.hoverCardDate-Td91gd {
+  color: var(--text);
+  letter-spacing: .01em;
+  font-weight: 600;
+}
+
+.hoverCardRow-fMGuNA {
+  grid-template-columns: .625rem 1fr auto;
+  align-items: center;
+  gap: .4rem;
+  display: grid;
+}
+
+.keyLine-wvPvBg {
+  border-radius: 1px;
+  width: .625rem;
+  height: 2px;
+  display: inline-block;
+}
+
+.keyViews-G8H3zC {
+  opacity: .62;
+  background-color: #38bdf8;
+}
+
+.keyVisitors-P1JVE9 {
+  background-color: #7c3aed;
+}
+
+.hoverCardLabel-JYa1xk {
+  color: var(--gray-500);
+}
+
+.hoverCardValue-m_cylC {
+  color: var(--text);
+  text-align: right;
+  font-weight: 600;
+}
+
 .gridline-R_wAwP {
   stroke: var(--gray-200);
   stroke-width: 1px;
@@ -96,7 +199,7 @@
   stroke: var(--gray-700);
 }
 
-:is(:is([data-theme="dark"], .dark) .axis-fBshTw, :is([data-theme="dark"], .dark) .byline-analytics-axis, :is([data-theme="dark"], .dark) .readout-L9jEpz, :is([data-theme="dark"], .dark) .byline-analytics-readout) {
+:is(:is([data-theme="dark"], .dark) .axis-fBshTw, :is([data-theme="dark"], .dark) .byline-analytics-axis, :is([data-theme="dark"], .dark) .readout-L9jEpz, :is([data-theme="dark"], .dark) .byline-analytics-readout, :is([data-theme="dark"], .dark) .hoverCardLabel-JYa1xk) {
   color: var(--gray-400);
 }
 
@@ -104,7 +207,7 @@
   fill: #a78bfa;
 }
 
-:is([data-theme="dark"], .dark) .swatchVisitors-O3BWz6 {
+:is([data-theme="dark"], .dark) .swatchVisitors-O3BWz6, :is([data-theme="dark"], .dark) .keyVisitors-P1JVE9 {
   background-color: #a78bfa;
 }
 
@@ -113,9 +216,13 @@
 }
 
 @media (prefers-reduced-motion: reduce) {
-  .column-_Cw2Ua, .views-WHbm44 {
+  .column-_Cw2Ua, .views-WHbm44, .hoverCard-riiLLo, .hoverCardVisible-mYSsIo {
     transition: none;
   }
+
+  .hoverCard-riiLLo, .hoverCardVisible-mYSsIo {
+    translate: none;
+  }
 }
 
 @media (max-width: 720px) {

package/package.json

@@ -2,7 +2,7 @@
   "name": "@byline/admin",
   "private": false,
   "license": "MPL-2.0",
-  "version": "6.0.1",
+  "version": "6.0.3",
   "engines": {
     "node": ">=20.9.0"
   },
@@ -183,12 +183,12 @@
     "react-diff-viewer-continued": "^4.4.0",
     "uuid": "^14.0.2",
     "zod": "^4.6.2",
-    "@byline/auth": "6.0.1",
-    "@byline/analytics": "6.0.1",
-    "@byline/analytics-agent": "6.0.1",
-    "@byline/core": "6.0.1",
-    "@byline/i18n": "6.0.1",
-    "@byline/ui": "6.0.1"
+    "@byline/analytics": "6.0.3",
+    "@byline/analytics-agent": "6.0.3",
+    "@byline/core": "6.0.3",
+    "@byline/i18n": "6.0.3",
+    "@byline/ui": "6.0.3",
+    "@byline/auth": "6.0.3"
   },
   "peerDependencies": {
     "react": "^19.0.0",

package/src/modules/admin-preferences/index.ts

@@ -12,12 +12,17 @@
  *
  * Self-service like `@byline/admin/admin-account`: the actor IS the
  * target, and there is no ability gate — authn-only. The `scope` string
- * (e.g. `collections.docs.list`) is the generality lever: new admin
- * surfaces claim their own scopes with no schema change.
+ * (e.g. `collections.docs.list`, `analytics.dashboard`) is the
+ * generality lever: a new admin surface claims its own scope by
+ * registering a value schema for it in `schemas.ts`, which keeps each
+ * family's payload strictly validated and unregistered scopes
+ * unwritable. Storage itself is untouched — scopes share one JSON
+ * key-value table.
  */
 
 export { getPreferenceCommand, setPreferenceCommand } from './commands.js'
 export {
+  analyticsViewPreferenceValueSchema,
   getPreferenceRequestSchema,
   listViewPreferenceValueSchema,
   preferenceResponseSchema,