@byline/admin 6.7.2 → 6.9.0

package/dist/fields/blocks/blocks-field.js

@@ -1,8 +1,8 @@
 import { jsx, jsxs } from "react/jsx-runtime";
-import { useEffect, useMemo, useState } from "react";
+import { Fragment, useEffect, useMemo, useState } from "react";
 import { getAdminConfig } from "@byline/core";
 import { useTranslation } from "@byline/i18n/react";
-import { Card, CloseIcon, DraggableSortable, ErrorText, IconButton, Modal, PlusIcon, moveItem } from "@byline/ui/react";
+import { Card, CloseIcon, DraggableSortable, ErrorText, IconButton, Modal, PlusIcon, WarningIcon, moveItem } from "@byline/ui/react";
 import clsx from "clsx";
 import { defaultScalarForField } from "../field-helpers.js";
 import { GroupField } from "../group/group-field.js";
@@ -11,10 +11,12 @@ import { useFieldError, useFormContext } from "../../forms/form-context.js";
 import { useScopedDomId } from "../../forms/form-dom-scope.js";
 import { hasExistingIdTargets } from "../../forms/nested-path.js";
 import { moveRepeatingItems, repeatingItemId, repeatingItemPath } from "../../forms/repeating-items.js";
+import { useUnavailableBlocks } from "../../forms/unavailable-blocks.js";
 import blocks_field_module from "./blocks-field.module.js";
 const BlocksField = ({ field, defaultValue, path, contentLocale })=>{
     const { appendPatch, getFieldValue, getFieldValues, removePendingUploadsUnder, setFieldStore } = useFormContext();
     const { t } = useTranslation('byline-admin');
+    const unavailableBlocks = useUnavailableBlocks(path);
     const fieldError = useFieldError(path);
     const htmlId = useScopedDomId(path);
     const [items, setItems] = useState([]);
@@ -170,7 +172,35 @@ const BlocksField = ({ field, defaultValue, path, contentLocale })=>{
                 onDragEnd: handleDragEnd,
                 className: clsx('byline-field-blocks-stack', blocks_field_module.stack),
                 children: [
-                    items.map((item, index)=>renderItem(item, index)),
+                    Array.from({
+                        length: items.length + 1
+                    }, (_, index)=>/*#__PURE__*/ jsxs(Fragment, {
+                            children: [
+                                unavailableBlocks.map((issue, removedBefore)=>Math.min(issue.storedIndex - removedBefore, items.length) === index ? /*#__PURE__*/ jsxs("div", {
+                                        role: "note",
+                                        className: clsx('byline-field-blocks-unavailable', blocks_field_module.unavailable),
+                                        children: [
+                                            /*#__PURE__*/ jsx(WarningIcon, {
+                                                width: "24px",
+                                                height: "24px"
+                                            }),
+                                            /*#__PURE__*/ jsxs("div", {
+                                                children: [
+                                                    /*#__PURE__*/ jsx("strong", {
+                                                        children: t('fields.blocks.unavailableTitle', {
+                                                            blockType: issue.blockType
+                                                        })
+                                                    }),
+                                                    /*#__PURE__*/ jsx("p", {
+                                                        children: t('fields.blocks.unavailableBody')
+                                                    })
+                                                ]
+                                            })
+                                        ]
+                                    }, `${issue.storedIndex}-${issue.blockType}`) : null),
+                                index < items.length && renderItem(items[index], index)
+                            ]
+                        }, items[index]?.id ?? 'end')),
                     /*#__PURE__*/ jsxs("div", {
                         className: clsx('byline-field-blocks-add-row', blocks_field_module["add-row"]),
                         children: [

package/dist/fields/blocks/blocks-field.module.js

@@ -2,6 +2,7 @@ import "./blocks-field_module.css";
 const blocks_field_module = {
     title: "title-lxXfG6",
     stack: "stack-Xxa89J",
+    unavailable: "unavailable-B9h_EU",
     "add-row": "add-row-gEqjM_",
     addRow: "add-row-gEqjM_",
     "add-label": "add-label-jiOURu",

package/dist/fields/blocks/blocks-field_module.css

@@ -10,6 +10,25 @@
   display: flex;
 }
 
+:is(.unavailable-B9h_EU, .byline-field-blocks-unavailable) {
+  align-items: flex-start;
+  gap: var(--spacing-8);
+  padding: var(--spacing-16);
+  border: 1px solid var(--stroke-warning);
+  border-radius: var(--border-radius-md);
+  background-color: oklch(from var(--fill-warning-weak) l c h / calc(alpha * .5));
+  color: var(--foreground);
+  display: flex;
+}
+
+:is(.unavailable-B9h_EU > :first-child, .byline-field-blocks-unavailable > :first-child) {
+  flex-shrink: 0;
+}
+
+:is(.unavailable-B9h_EU p, .byline-field-blocks-unavailable p) {
+  margin: var(--spacing-4) 0 0;
+}
+
 :is(.add-row-gEqjM_, .byline-field-blocks-add-row) {
   color: var(--muted);
   align-items: center;

package/dist/forms/form-page-chrome.d.ts

@@ -14,7 +14,7 @@
  * visible at its call site.
  */
 import type { ReactNode, RefObject } from 'react';
-import type { SlugifierFn, StructuralMutationReceipt, WorkflowStatus } from '@byline/core';
+import type { SlugifierFn, StructuralMutationReceipt, UnavailableBlock, WorkflowStatus } from '@byline/core';
 import { type DocumentActionsLocaleOption } from './document-actions.js';
 import { type UseScheduledPublicationReturn } from './scheduled-publication-control.js';
 import type { PublishedVersionInfo } from './form-renderer.js';
@@ -78,8 +78,9 @@ export interface FormConcurrencyNoticesProps {
     onDiscardRequested: () => void;
     scheduling: UseScheduledPublicationReturn;
     restoreWarnings?: string[];
+    unavailableBlocks?: UnavailableBlock[];
 }
-export declare const FormConcurrencyNotices: ({ disabled, mutationIssue, scheduledPublicationsNeedReconfirmation, scheduledPublicationsHref, warningRef, discarding, reloadFailed, onDiscardRequested, scheduling, restoreWarnings, }: FormConcurrencyNoticesProps) => ReactNode;
+export declare const FormConcurrencyNotices: ({ disabled, mutationIssue, scheduledPublicationsNeedReconfirmation, scheduledPublicationsHref, warningRef, discarding, reloadFailed, onDiscardRequested, scheduling, restoreWarnings, unavailableBlocks, }: FormConcurrencyNoticesProps) => ReactNode;
 export interface FormSidebarWidgetsProps {
     /** Mutations blocked or a discard in flight. */
     disabled: boolean;

package/dist/forms/form-page-chrome.js

@@ -132,7 +132,7 @@ const FormStatusBar = ({ disabled, initialData, workflowStatuses, publishedVersi
         ]
     });
 };
-const FormConcurrencyNotices = ({ disabled, mutationIssue, scheduledPublicationsNeedReconfirmation, scheduledPublicationsHref, warningRef, discarding, reloadFailed, onDiscardRequested, scheduling, restoreWarnings })=>{
+const FormConcurrencyNotices = ({ disabled, mutationIssue, scheduledPublicationsNeedReconfirmation, scheduledPublicationsHref, warningRef, discarding, reloadFailed, onDiscardRequested, scheduling, restoreWarnings, unavailableBlocks })=>{
     const { t } = useTranslation('byline-admin');
     return /*#__PURE__*/ jsxs(Fragment, {
         children: [
@@ -189,6 +189,18 @@ const FormConcurrencyNotices = ({ disabled, mutationIssue, scheduledPublications
                 onCancel: scheduling.cancel
             }),
             scheduling.modal,
+            unavailableBlocks && unavailableBlocks.length > 0 && /*#__PURE__*/ jsx(Alert, {
+                className: "m-0 mt-4",
+                intent: "warning",
+                icon: true,
+                close: false,
+                title: t('forms.unavailableBlocks.title'),
+                children: /*#__PURE__*/ jsx("p", {
+                    children: t('forms.unavailableBlocks.body', {
+                        count: unavailableBlocks.length
+                    })
+                })
+            }),
             restoreWarnings && restoreWarnings.length > 0 && /*#__PURE__*/ jsxs(Alert, {
                 className: "m-0 mt-4",
                 intent: "warning",

package/dist/forms/form-renderer.d.ts

@@ -6,7 +6,7 @@
  * Copyright (c) Infonomic Company Limited
  */
 import { type ReactNode } from 'react';
-import type { AdminResourceConfig, Field, WorkflowStatus } from '@byline/core';
+import type { AdminResourceConfig, Field, UnavailableBlock, WorkflowStatus } from '@byline/core';
 import { type ScheduledPublicationInfo, type SchedulePublicationInput } from './scheduled-publication-control.js';
 import { type SystemFieldsSubmitPayload } from './use-form-submission.js';
 import type { DocumentActionsLocaleOption } from './document-actions.js';
@@ -142,6 +142,7 @@ export interface FormRendererProps {
      * them with the new shape.
      */
     restoreWarnings?: string[];
+    unavailableBlocks?: UnavailableBlock[];
     /**
      * Default content locale used when no `initialLocale` is supplied and as the
      * fallback inside `PathWidget`. Hosts typically pass their app-wide

package/dist/forms/form-renderer.js

@@ -13,9 +13,10 @@ import form_renderer_module from "./form-renderer.module.js";
 import { useNavigationGuardAdapter } from "./navigation-guard.js";
 import { useScheduledPublication } from "./scheduled-publication-control.js";
 import { computeStatusTransitions } from "./status-transitions.js";
+import { UnavailableBlocksProvider } from "./unavailable-blocks.js";
 import { useDocumentReloadRecovery } from "./use-document-reload-recovery.js";
 import { useFormSubmission } from "./use-form-submission.js";
-const FormContent = ({ mode, mutationIssue, mutationsBlocked = false, observedRevision, onMutationError, onTreeMutationCommitted, scheduledPublicationsNeedReconfirmation = false, scheduledPublicationsHref, onReloadDocument, fields, onSubmit, onCancel, onStatusChange, onUnpublish, scheduledPublication, onSchedulePublication, onConfirmScheduledPublication, onCancelScheduledPublication, onDelete, onDuplicate, onCopyToLocale, onDeleteLocale, contentLocales, nextStatus, workflowStatuses, publishedVersion, initialData, adminConfig, useAsTitle, useAsPath, showPath = true, heading, advertiseLocales, tree, headingLabel, headerSlot, collectionPath, initialLocale, onLocaleChange, defaultLocale = 'en', useNavigationGuard: useNavigationGuardProp, restoreWarnings, _activeTabBySet, _onTabChange })=>{
+const FormContent = ({ mode, mutationIssue, mutationsBlocked = false, observedRevision, onMutationError, onTreeMutationCommitted, scheduledPublicationsNeedReconfirmation = false, scheduledPublicationsHref, onReloadDocument, fields, onSubmit, onCancel, onStatusChange, onUnpublish, scheduledPublication, onSchedulePublication, onConfirmScheduledPublication, onCancelScheduledPublication, onDelete, onDuplicate, onCopyToLocale, onDeleteLocale, contentLocales, nextStatus, workflowStatuses, publishedVersion, initialData, adminConfig, useAsTitle, useAsPath, showPath = true, heading, advertiseLocales, tree, headingLabel, headerSlot, collectionPath, initialLocale, onLocaleChange, defaultLocale = 'en', useNavigationGuard: useNavigationGuardProp, restoreWarnings, unavailableBlocks, _activeTabBySet, _onTabChange })=>{
     const { hasChanges: hasChangesFn, subscribeMeta } = useFormContext();
     const { t } = useTranslation('byline-admin');
     const [hasChanges, setHasChanges] = useState(hasChangesFn());
@@ -177,7 +178,8 @@ const FormContent = ({ mode, mutationIssue, mutationsBlocked = false, observedRe
                             reloadFailed: reloadFailed,
                             onDiscardRequested: requestDiscard,
                             scheduling: scheduling,
-                            restoreWarnings: restoreWarnings
+                            restoreWarnings: restoreWarnings,
+                            unavailableBlocks: unavailableBlocks
                         }),
                         /*#__PURE__*/ jsx(FormLayout, {
                             fields: fields,
@@ -233,20 +235,24 @@ const FormContent = ({ mode, mutationIssue, mutationsBlocked = false, observedRe
 const FormRenderer = (props)=>{
     const { mode, initialData, initialLocale, collectionPath } = props;
     const savedTabsRef = useRef({});
-    return /*#__PURE__*/ jsx(FormProvider, {
-        initialData: initialData,
-        documentId: 'edit' === mode && 'string' == typeof initialData?.id ? initialData.id : null,
-        collectionPath: collectionPath ?? null,
-        children: /*#__PURE__*/ jsx(FormContent, {
-            ...props,
-            _activeTabBySet: savedTabsRef.current,
-            _onTabChange: (tabSetName, tabName)=>{
-                savedTabsRef.current = {
-                    ...savedTabsRef.current,
-                    [tabSetName]: tabName
-                };
-            }
-        })
-    }, `${initialLocale ?? 'default'}-${initialData?.versionId ?? ''}`);
+    return /*#__PURE__*/ jsx(UnavailableBlocksProvider, {
+        issues: props.unavailableBlocks,
+        fields: initialData?.fields ?? initialData ?? {},
+        children: /*#__PURE__*/ jsx(FormProvider, {
+            initialData: initialData,
+            documentId: 'edit' === mode && 'string' == typeof initialData?.id ? initialData.id : null,
+            collectionPath: collectionPath ?? null,
+            children: /*#__PURE__*/ jsx(FormContent, {
+                ...props,
+                _activeTabBySet: savedTabsRef.current,
+                _onTabChange: (tabSetName, tabName)=>{
+                    savedTabsRef.current = {
+                        ...savedTabsRef.current,
+                        [tabSetName]: tabName
+                    };
+                }
+            })
+        }, `${initialLocale ?? 'default'}-${initialData?.versionId ?? ''}`)
+    });
 };
 export { FormRenderer };

package/dist/forms/unavailable-blocks.d.ts

@@ -0,0 +1,15 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+import type { ReactNode } from 'react';
+import { type UnavailableBlock } from '@byline/core';
+export declare function UnavailableBlocksProvider({ issues, fields, children, }: {
+    issues?: readonly UnavailableBlock[];
+    fields: Record<string, any>;
+    children: ReactNode;
+}): import("react").JSX.Element;
+export declare function useUnavailableBlocks(path: string): UnavailableBlock[];

package/dist/forms/unavailable-blocks.js

@@ -0,0 +1,38 @@
+import { jsx } from "react/jsx-runtime";
+import { createContext, useContext, useMemo } from "react";
+import { parseInstancePath } from "@byline/core";
+import { repeatingItemPath } from "./repeating-items.js";
+const UnavailableBlocksContext = /*#__PURE__*/ createContext([]);
+function bindUnavailableBlocks(issues, fields) {
+    return issues.map((issue)=>{
+        const parsed = parseInstancePath(issue.fieldPath);
+        if (!parsed.ok) return issue;
+        let value = fields;
+        let path = '';
+        for (const segment of parsed.segments)if ('field' === segment.kind) {
+            path = path ? `${path}.${segment.name}` : segment.name;
+            value = value?.[segment.name];
+        } else if ('index' === segment.kind) {
+            value = value?.[segment.index];
+            path = repeatingItemPath(path, value, segment.index);
+        }
+        return {
+            ...issue,
+            fieldPath: path
+        };
+    });
+}
+function UnavailableBlocksProvider({ issues, fields, children }) {
+    const bound = useMemo(()=>bindUnavailableBlocks(issues ?? [], fields), [
+        issues,
+        fields
+    ]);
+    return /*#__PURE__*/ jsx(UnavailableBlocksContext.Provider, {
+        value: bound,
+        children: children
+    });
+}
+function useUnavailableBlocks(path) {
+    return useContext(UnavailableBlocksContext).filter((issue)=>issue.fieldPath === path);
+}
+export { UnavailableBlocksProvider, useUnavailableBlocks };

package/dist/modules/admin-account/components/change-password.js

@@ -182,7 +182,7 @@ function ChangeAccountPassword({ account, onClose, onSuccess }) {
                     children: [
                         /*#__PURE__*/ jsx(Button, {
                             type: "button",
-                            intent: "secondary",
+                            intent: "noeffect",
                             size: "sm",
                             onClick: onClose,
                             className: clsx('byline-account-change-password-action', change_password_module.action),

package/dist/modules/admin-account/components/container.js

@@ -5,6 +5,7 @@ import { LocalDateTime } from "@byline/admin/react";
 import { useTranslation } from "@byline/i18n/react";
 import { CloseIcon, Drawer, EditIcon, IconButton } from "@byline/ui/react";
 import clsx from "clsx";
+import { PasskeyManager } from "../../auth/components/passkey-manager.js";
 import { ChangeAccountPassword } from "./change-password.js";
 import container_module from "./container.module.js";
 import { Preferences } from "./preferences.js";
@@ -208,6 +209,19 @@ function AccountSelfContainer({ account }) {
                                     /*#__PURE__*/ jsx("p", {
                                         className: clsx('muted', 'byline-account-status-help', container_module["status-help"]),
                                         children: t('account.preferences.help')
+                                    }),
+                                    /*#__PURE__*/ jsxs("div", {
+                                        className: clsx('byline-account-preferences-theme', container_module["preferences-theme"]),
+                                        children: [
+                                            /*#__PURE__*/ jsx("p", {
+                                                className: clsx('byline-account-line', container_module.line),
+                                                children: /*#__PURE__*/ jsx("span", {
+                                                    className: "muted",
+                                                    children: t('account.appearance.colorTheme')
+                                                })
+                                            }),
+                                            /*#__PURE__*/ jsx(ThemeSwitch, {})
+                                        ]
                                     })
                                 ]
                             })
@@ -225,9 +239,10 @@ function AccountSelfContainer({ account }) {
                                     children: t('account.password.intro')
                                 })
                             }),
-                            /*#__PURE__*/ jsx(ContainerSection, {
-                                title: t('account.sections.appearance'),
-                                children: /*#__PURE__*/ jsx(ThemeSwitch, {})
+                            /*#__PURE__*/ jsx(PasskeyManager, {
+                                targetUserId: currentAccount.id,
+                                targetIsSuperAdmin: currentAccount.is_super_admin,
+                                section: ContainerSection
                             }),
                             /*#__PURE__*/ jsxs(ContainerSection, {
                                 title: t('account.sections.status'),

package/dist/modules/admin-account/components/container.module.js

@@ -15,6 +15,8 @@ const container_module = {
     statusOff: "status-off-WJAcBy",
     "status-help": "status-help-GVOlMV",
     statusHelp: "status-help-GVOlMV",
+    "preferences-theme": "preferences-theme-SHTZmr",
+    preferencesTheme: "preferences-theme-SHTZmr",
     "not-set": "not-set-Ek2yXe",
     notSet: "not-set-Ek2yXe",
     drawer: "drawer-dDlpic",

package/dist/modules/admin-account/components/container_module.css

@@ -60,6 +60,13 @@
   margin-bottom: 0;
 }
 
+:is(.preferences-theme-SHTZmr, .byline-account-preferences-theme) {
+  gap: var(--spacing-8);
+  margin-top: var(--spacing-20);
+  flex-direction: column;
+  display: flex;
+}
+
 :is(.not-set-Ek2yXe, .byline-account-not-set) {
   font-style: italic;
 }

package/dist/modules/admin-account/components/preferences.js

@@ -124,7 +124,7 @@ function Preferences({ account, onClose, onSuccess }) {
                     children: [
                         /*#__PURE__*/ jsx(Button, {
                             type: "button",
-                            intent: "secondary",
+                            intent: "noeffect",
                             size: "sm",
                             onClick: onClose,
                             className: clsx('byline-account-preferences-action', preferences_module.action),

package/dist/modules/admin-account/components/update.js

@@ -183,7 +183,7 @@ function UpdateAccount({ account, onClose, onSuccess }) {
                     children: [
                         /*#__PURE__*/ jsx(Button, {
                             type: "button",
-                            intent: "secondary",
+                            intent: "noeffect",
                             size: "sm",
                             onClick: onClose,
                             className: clsx('byline-account-update-action', update_module.action),

package/dist/modules/admin-roles/components/create.js

@@ -144,7 +144,7 @@ function CreateAdminRole({ onClose, onSuccess }) {
                     children: [
                         /*#__PURE__*/ jsx(Button, {
                             type: "button",
-                            intent: "secondary",
+                            intent: "noeffect",
                             size: "sm",
                             onClick: onClose,
                             className: clsx('byline-role-create-action', create_module.action),

package/dist/modules/admin-roles/components/permissions.js

@@ -207,7 +207,7 @@ function RolePermissions({ role, registered, initialAbilities, onSaved }) {
                         children: [
                             /*#__PURE__*/ jsx(Button, {
                                 type: "button",
-                                intent: "secondary",
+                                intent: "noeffect",
                                 size: "xs",
                                 onClick: handleCancel,
                                 disabled: saving,

package/dist/modules/admin-roles/components/update.js

@@ -134,7 +134,7 @@ function UpdateRole({ role, onClose, onSuccess }) {
                     children: [
                         /*#__PURE__*/ jsx(Button, {
                             type: "button",
-                            intent: "secondary",
+                            intent: "noeffect",
                             size: "sm",
                             onClick: onClose,
                             className: clsx('byline-role-update-action', update_module.action),

package/dist/modules/admin-users/abilities.d.ts

@@ -30,6 +30,7 @@ export declare const ADMIN_USERS_ABILITIES: {
     readonly update: 'admin.users.update';
     readonly delete: 'admin.users.delete';
     readonly changePassword: 'admin.users.changePassword';
+    readonly managePasskeys: 'admin.users.managePasskeys';
 };
 export type AdminUsersAbilityKey = (typeof ADMIN_USERS_ABILITIES)[keyof typeof ADMIN_USERS_ABILITIES];
 /**

package/dist/modules/admin-users/abilities.js

@@ -3,9 +3,16 @@ const ADMIN_USERS_ABILITIES = {
     create: 'admin.users.create',
     update: 'admin.users.update',
     delete: 'admin.users.delete',
-    changePassword: 'admin.users.changePassword'
+    changePassword: 'admin.users.changePassword',
+    managePasskeys: 'admin.users.managePasskeys'
 };
 function registerAdminUsersAbilities(registry) {
+    registry.register({
+        key: ADMIN_USERS_ABILITIES.managePasskeys,
+        label: 'Manage admin user passkeys',
+        group: 'admin.users',
+        source: 'admin'
+    });
     registry.register({
         key: ADMIN_USERS_ABILITIES.read,
         label: 'Read admin users',

package/dist/modules/admin-users/components/create.js

@@ -239,7 +239,7 @@ function CreateAdminUser({ onClose, onSuccess }) {
                     children: [
                         /*#__PURE__*/ jsx(Button, {
                             type: "button",
-                            intent: "secondary",
+                            intent: "noeffect",
                             size: "sm",
                             onClick: onClose,
                             className: clsx('byline-user-create-action', create_module.action),

package/dist/modules/admin-users/components/roles.js

@@ -113,7 +113,7 @@ function UserRoles({ user, allRoles, initialRoleIds, onClose, onSaved }) {
                 children: [
                     /*#__PURE__*/ jsx(Button, {
                         type: "button",
-                        intent: "secondary",
+                        intent: "noeffect",
                         size: "xs",
                         onClick: onClose,
                         disabled: saving,

package/dist/modules/admin-users/components/set-password.js

@@ -130,7 +130,7 @@ function SetPassword({ user, onClose, onSuccess }) {
                     children: [
                         /*#__PURE__*/ jsx(Button, {
                             type: "button",
-                            intent: "secondary",
+                            intent: "noeffect",
                             size: "sm",
                             onClick: onClose,
                             className: clsx('byline-user-set-password-action', set_password_module.action),

package/dist/modules/admin-users/components/update.js

@@ -230,7 +230,7 @@ function UpdateUser({ user, onClose, onSuccess }) {
                     children: [
                         /*#__PURE__*/ jsx(Button, {
                             type: "button",
-                            intent: "secondary",
+                            intent: "noeffect",
                             size: "sm",
                             onClick: onClose,
                             className: clsx('byline-user-update-action', update_module.action),

package/dist/modules/auth/auth-maintenance-repository.d.ts

@@ -0,0 +1,31 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+/** Bounded housekeeping; expiry and revocation remain independent authorization checks. */
+export interface AuthMaintenanceRepository {
+    /** Remove at most 100 attempts expired or consumed on/before the supplied grace cutoff. */
+    purgeAttempts(before: Date): Promise<number>;
+    /** Candidate only: eligibility must be checked again under its owning account lock. */
+    findTerminalLogin(before: Date): Promise<{
+        id: string;
+        adminUserId: string;
+    } | null>;
+    /**
+     * Requires the owning account lock. Re-read eligibility, delete at most 100 refresh
+     * children, then delete the terminal parent only if no children remain. Never cascade.
+     */
+    pruneTerminalLogin(input: {
+        id: string;
+        adminUserId: string;
+        before: Date;
+    }): Promise<{
+        refreshDeleted: number;
+        loginDeleted: boolean;
+    }>;
+    /** Remove at most 100 legacy null-sid rows expired on/before the retention cutoff. */
+    purgeLegacyRefreshTokens(before: Date): Promise<number>;
+}

package/dist/modules/auth/auth-maintenance-repository.js

@@ -0,0 +1 @@
+export { };

package/dist/modules/auth/auth-maintenance.d.ts

@@ -0,0 +1,11 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+import type { RecurringTaskDefinition } from '@byline/core';
+import type { AdminStore } from '../../store.js';
+/** Register for native sessions even on password-only sites; configuration never runs cleanup. */
+export declare function createAuthMaintenanceTasks(store: AdminStore, now?: () => Date): RecurringTaskDefinition[];

package/dist/modules/auth/auth-maintenance.js

@@ -0,0 +1,39 @@
+const DAY = 86400000;
+function createAuthMaintenanceTasks(store, now = ()=>new Date()) {
+    const task = (name, retention, batch)=>({
+            name: `auth.maintenance.${name}`,
+            intervalMs: 60000,
+            leaseMs: 60000,
+            async run (context) {
+                const started = performance.now();
+                const cutoff = new Date(now().getTime() - retention);
+                for(let n = 0; n < 32 && performance.now() - started < 30000; n++){
+                    context.signal.throwIfAborted();
+                    await context.heartbeat();
+                    context.signal.throwIfAborted();
+                    if (!await batch(cutoff)) return {
+                        workRemaining: false
+                    };
+                }
+                return {
+                    workRemaining: true
+                };
+            }
+        });
+    return [
+        task('attempts', 300000, async (cutoff)=>await store.authMaintenance.purgeAttempts(cutoff) === 100),
+        task('logins', 30 * DAY, async (cutoff)=>{
+            const candidate = await store.authMaintenance.findTerminalLogin(cutoff);
+            if (!candidate) return false;
+            await store.withSessionLock(candidate.adminUserId, async (scoped)=>{
+                await scoped.authMaintenance.pruneTerminalLogin({
+                    ...candidate,
+                    before: cutoff
+                });
+            });
+            return true;
+        }),
+        task('legacy-refresh', 30 * DAY, async (cutoff)=>await store.authMaintenance.purgeLegacyRefreshTokens(cutoff) === 100)
+    ];
+}
+export { createAuthMaintenanceTasks };

package/dist/modules/auth/auth-maintenance.test.node.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/modules/auth/components/passkey-browser.d.ts

@@ -0,0 +1,14 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+import type { PasskeyManagementAction } from '@byline/auth';
+import type { PasskeyAdminServices, PasskeyPageBinding } from '../../../services/admin-services-types.js';
+export declare function signInWithPasskey(services: PasskeyAdminServices, isActive?: () => boolean): Promise<unknown>;
+export declare function provePasskeyAction(services: PasskeyAdminServices, binding: PasskeyPageBinding, action: PasskeyManagementAction, password?: string): Promise<import("@byline/auth").PasskeyManagementGrant>;
+export declare function enrollPasskey(services: PasskeyAdminServices, binding: PasskeyPageBinding, name: string, password?: string): Promise<import("@byline/auth").PasskeyCredentialSummary>;
+/** Render fixed translated messages, never provider payloads or authenticator identifiers. */
+export declare function passkeyErrorKey(error: unknown): string;