@byline/host-tanstack-start 0.9.3

package/dist/admin-shell/collections/list.module.js

@@ -0,0 +1,16 @@
+import "./list_module.css";
+const list_module = {
+    head: "head-vYUjd5",
+    title: "title-Ih3ash",
+    stats: "stats-PGihat",
+    statsLoader: "statsLoader-VrzNSK",
+    options: "options-knoIjN",
+    optionsBottom: "optionsBottom-qU_R9A",
+    search: "search-TLzpuo",
+    tableWrap: "tableWrap-QbMeTF",
+    cellRight: "cellRight-KPlIvX",
+    cellCenter: "cellCenter-NlTSyy",
+    padRow: "padRow-mCWMHC",
+    pageSize: "pageSize-ojmZKR"
+};
+export default list_module;

package/dist/admin-shell/collections/list_module.css

@@ -0,0 +1,88 @@
+:is(.head-vYUjd5, .byline-coll-list-head) {
+  align-items: center;
+  gap: .75rem;
+  display: flex;
+}
+
+:is(.title-Ih3ash, .byline-coll-list-title) {
+  margin: 0;
+  padding-bottom: 2px;
+}
+
+:is(.stats-PGihat, .byline-coll-list-stats) {
+  white-space: nowrap;
+  background-color: var(--gray-25);
+  border: var(--border-width-thin) var(--border-style-solid) var(--gray-200);
+  border-radius: .375rem;
+  justify-content: center;
+  align-items: center;
+  min-width: 28px;
+  height: 28px;
+  margin-bottom: -4px;
+  margin-right: auto;
+  padding: 5px 6px;
+  font-size: .875rem;
+  line-height: 0;
+  display: flex;
+}
+
+:is(:is([data-theme="dark"], .dark) .stats-PGihat, :is([data-theme="dark"], .dark) .byline-coll-list-stats) {
+  background-color: var(--canvas-700);
+}
+
+:is(.statsLoader-VrzNSK, .byline-coll-list-stats-loader) {
+  margin-bottom: -4px;
+  margin-right: auto;
+}
+
+:is(.options-knoIjN, .byline-coll-list-options) {
+  flex-direction: column;
+  align-items: flex-start;
+  gap: .5rem;
+  margin-top: .75rem;
+  margin-bottom: .75rem;
+  display: flex;
+}
+
+@media (min-width: 40rem) {
+  :is(.options-knoIjN, .byline-coll-list-options) {
+    flex-direction: row;
+    align-items: center;
+  }
+}
+
+:is(.optionsBottom-qU_R9A, .byline-coll-list-options-bottom) {
+  margin-top: 0;
+  margin-bottom: 1.25rem;
+}
+
+:is(.search-TLzpuo, .byline-coll-list-search) {
+  width: 100%;
+  max-width: 350px;
+  margin-right: auto;
+}
+
+:is(.tableWrap-QbMeTF, .byline-coll-list-table-wrap) {
+  margin-top: .5rem;
+  margin-bottom: .75rem;
+}
+
+:is(.cellRight-KPlIvX, .byline-coll-list-cell-right) {
+  text-align: right;
+}
+
+:is(.cellCenter-NlTSyy, .byline-coll-list-cell-center) {
+  text-align: center;
+}
+
+:is(.padRow-mCWMHC, .byline-coll-list-pad-row) {
+  border: 0;
+  height: 32px;
+}
+
+@media (min-width: 40rem) {
+  :is(.pageSize-ojmZKR, .byline-coll-list-page-size) {
+    margin-left: auto;
+  }
+}
+

package/dist/admin-shell/collections/preview-link.d.ts

@@ -0,0 +1,32 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+import type { CollectionAdminConfig, PreviewDocument } from '@byline/core';
+export interface PreviewLinkProps {
+    /** Collection path (e.g. `'news'`, `'pages'`). */
+    collectionPath: string;
+    /** The loaded document — must include `id`, `path`, and `fields`. */
+    doc: PreviewDocument;
+    /** Admin config for the collection. Read for `preview.url`. */
+    adminConfig?: CollectionAdminConfig;
+    /** Current content locale (forwarded into `preview.url(doc, { locale })`). */
+    locale?: string;
+    /** Optional className for the IconButton. */
+    className?: string;
+}
+/**
+ * Resolve the preview URL for a doc against an admin config. Exported so
+ * other surfaces (list-row preview links in the future) can share the
+ * same fallback logic.
+ *
+ * Returns:
+ *   - `string`  → URL to open
+ *   - `null`    → no preview URL meaningful for this doc; hide affordance
+ */
+export declare function resolvePreviewUrl(doc: PreviewDocument, collectionPath: string, adminConfig: CollectionAdminConfig | undefined, locale: string | undefined): string | null;
+export declare const PreviewLink: ({ collectionPath, doc, adminConfig, locale, className, }: PreviewLinkProps) => import("react").JSX.Element | null;
+//# sourceMappingURL=preview-link.d.ts.map

package/dist/admin-shell/collections/preview-link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-link.d.ts","sourceRoot":"","sources":["../../../src/admin-shell/collections/preview-link.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmCH,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAM1E,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,cAAc,EAAE,MAAM,CAAA;IACtB,qEAAqE;IACrE,GAAG,EAAE,eAAe,CAAA;IACpB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,eAAe,EACpB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,qBAAqB,GAAG,SAAS,EAC9C,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,GAAG,IAAI,CAQf;AAED,eAAO,MAAM,WAAW,GAAI,0DAMzB,gBAAgB,uCA+ClB,CAAA"}

package/dist/admin-shell/collections/preview-link.js

@@ -0,0 +1,54 @@
+import { jsx } from "react/jsx-runtime";
+import { useState } from "react";
+import { ExternalLinkIcon, IconButton, useToastManager } from "@infonomic/uikit/react";
+import classnames from "classnames";
+import { enablePreviewModeFn } from "../../server-fns/preview/index.js";
+function resolvePreviewUrl(doc, collectionPath, adminConfig, locale) {
+    if (adminConfig?.preview) return adminConfig.preview.url(doc, {
+        locale
+    });
+    if (!doc.path) return null;
+    return `/${collectionPath}/${doc.path}`;
+}
+const PreviewLink = ({ collectionPath, doc, adminConfig, locale, className })=>{
+    const toastManager = useToastManager();
+    const [busy, setBusy] = useState(false);
+    const url = resolvePreviewUrl(doc, collectionPath, adminConfig, locale);
+    if (null == url) return null;
+    const handleClick = async ()=>{
+        if (busy) return;
+        setBusy(true);
+        try {
+            await enablePreviewModeFn();
+            window.open(url, '_blank', 'noopener,noreferrer');
+        } catch (err) {
+            toastManager.add({
+                title: 'Preview',
+                description: `Could not enable preview mode: ${err.message}`,
+                data: {
+                    intent: 'danger',
+                    iconType: 'danger',
+                    icon: true,
+                    close: true
+                }
+            });
+        } finally{
+            setBusy(false);
+        }
+    };
+    return /*#__PURE__*/ jsx(IconButton, {
+        className: classnames('byline-preview-link', className),
+        size: "xs",
+        variant: "text",
+        disabled: busy,
+        onClick: handleClick,
+        "aria-label": "Open preview in new tab",
+        title: "Preview",
+        children: /*#__PURE__*/ jsx(ExternalLinkIcon, {
+            width: "20px",
+            height: "20px",
+            className: "byline-preview-link-icon"
+        })
+    });
+};
+export { PreviewLink, resolvePreviewUrl };

package/dist/admin-shell/collections/tanstack-navigation-guard.d.ts

@@ -0,0 +1,16 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+import type { UseNavigationGuard } from '@byline/ui';
+/**
+ * Navigation guard backed by TanStack Router's `useBlocker`.
+ *
+ * Blocks both in-app (soft) navigation and the browser's native `beforeunload`
+ * event when `shouldBlock` is `true`.
+ */
+export declare const useTanStackNavigationGuard: UseNavigationGuard;
+//# sourceMappingURL=tanstack-navigation-guard.d.ts.map

package/dist/admin-shell/collections/tanstack-navigation-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tanstack-navigation-guard.d.ts","sourceRoot":"","sources":["../../../src/admin-shell/collections/tanstack-navigation-guard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,OAAO,KAAK,EAAyB,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAE3E;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,kBAgBxC,CAAA"}

package/dist/admin-shell/collections/tanstack-navigation-guard.js

@@ -0,0 +1,19 @@
+import { useCallback } from "react";
+import { useBlocker } from "@tanstack/react-router";
+const useTanStackNavigationGuard = (shouldBlock)=>{
+    const shouldBlockFn = useCallback(()=>shouldBlock, [
+        shouldBlock
+    ]);
+    const blocker = useBlocker({
+        shouldBlockFn,
+        enableBeforeUnload: shouldBlock,
+        withResolver: true
+    });
+    const result = {
+        isBlocked: 'blocked' === blocker.status,
+        stay: ()=>blocker.reset?.(),
+        proceed: ()=>blocker.proceed?.()
+    };
+    return result;
+};
+export { useTanStackNavigationGuard };

package/dist/admin-shell/collections/view-menu.d.ts

@@ -0,0 +1,58 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+import type { CollectionAdminConfig, PreviewDocument } from '@byline/core';
+export type ViewMenuPaths = 'edit' | 'history' | 'api';
+export interface ContentLocaleOption {
+    code: string;
+    label: string;
+}
+/**
+ * Shared mini-navigation bar for document-level views (Edit, History, API).
+ * Renders a locale selector, the History icon button, Edit button, and API
+ * button with appropriate variant styling based on the currently active view.
+ * Changing the locale triggers a navigate to the current view's route so the
+ * loader re-fetches with the new locale — all three views react automatically.
+ *
+ * On the API route, an additional Depth selector appears — it drives the
+ * `populateDocuments` call inside the api loader and lets editors see
+ * what a client library `find({ populate: true, depth: N })` call would
+ * return. Capped at 3 in the UI to avoid runaway fan-out.
+ *
+ * `contentLocales` and `defaultContentLocale` are passed in from the host
+ * route shell (which reads them from the host's i18n config) so this
+ * component stays free of host-specific imports.
+ */
+export declare const ViewMenu: ({ collection, documentId, activeView, locale, depth, contentLocales, defaultContentLocale, adminConfig, doc, }: {
+    /** Collection path (e.g. "docs", "news"). */
+    collection: string;
+    /** The document ID to navigate to. */
+    documentId: string;
+    /** Which view is currently active — used to style the active button. */
+    activeView?: ViewMenuPaths;
+    /** Current content locale. undefined means "All" (full multi-locale shape). */
+    locale?: string;
+    /** Populate depth (api route only). undefined → 0 (no populate). */
+    depth?: number;
+    /** Content locales the host advertises in language switchers. */
+    contentLocales: ReadonlyArray<ContentLocaleOption>;
+    /** Fallback content locale used when the URL has none. */
+    defaultContentLocale: string;
+    /**
+     * Admin config for the collection. When present and `adminConfig.preview`
+     * is configured (or the default URL convention applies), a `<PreviewLink>`
+     * external-link icon is rendered next to the History button.
+     */
+    adminConfig?: CollectionAdminConfig;
+    /**
+     * The currently-loaded document. Required for the preview link's
+     * URL resolution; omit this prop to suppress the preview affordance
+     * entirely (e.g. on the create route, where no doc exists yet).
+     */
+    doc?: PreviewDocument;
+}) => import("react").JSX.Element;
+//# sourceMappingURL=view-menu.d.ts.map

package/dist/admin-shell/collections/view-menu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"view-menu.d.ts","sourceRoot":"","sources":["../../../src/admin-shell/collections/view-menu.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAQ1E,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,CAAA;AAEtD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,QAAQ,GAAI,gHAUtB;IACD,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAA;IAClB,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAA;IAClB,wEAAwE;IACxE,UAAU,CAAC,EAAE,aAAa,CAAA;IAC1B,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iEAAiE;IACjE,cAAc,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAA;IAClD,0DAA0D;IAC1D,oBAAoB,EAAE,MAAM,CAAA;IAC5B;;;;OAIG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC;;;;OAIG;IACH,GAAG,CAAC,EAAE,eAAe,CAAA;CACtB,gCA+JA,CAAA"}

package/dist/admin-shell/collections/view-menu.js

@@ -0,0 +1,203 @@
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import { useEffect } from "react";
+import { Button, HistoryIcon, IconButton, Label, Select } from "@infonomic/uikit/react";
+import classnames from "classnames";
+import { useNavigate } from "../chrome/loose-router.js";
+import { PreviewLink } from "./preview-link.js";
+import view_menu_module from "./view-menu.module.js";
+const ViewMenu = ({ collection, documentId, activeView, locale, depth, contentLocales, defaultContentLocale, adminConfig, doc })=>{
+    const navigate = useNavigate();
+    useEffect(()=>{
+        if ('edit' === activeView && 'all' === locale) navigate({
+            to: '/admin/collections/$collection/$id',
+            params: {
+                collection,
+                id: documentId
+            },
+            search: (prev)=>({
+                    ...prev,
+                    locale: defaultContentLocale
+                })
+        });
+    }, [
+        activeView,
+        locale,
+        collection,
+        documentId,
+        defaultContentLocale,
+        navigate
+    ]);
+    const handleLocaleChange = (value)=>{
+        if (null == value) return;
+        const search = (prev)=>({
+                ...prev,
+                locale: value
+            });
+        if ('api' === activeView) navigate({
+            to: '/admin/collections/$collection/$id/api',
+            params: {
+                collection,
+                id: documentId
+            },
+            search: search
+        });
+        else 'history' === activeView ? navigate({
+            to: '/admin/collections/$collection/$id/history',
+            params: {
+                collection,
+                id: documentId
+            },
+            search: search
+        }) : navigate({
+            to: '/admin/collections/$collection/$id',
+            params: {
+                collection,
+                id: documentId
+            },
+            search: search
+        });
+    };
+    const handleDepthChange = (value)=>{
+        if (null == value || 'api' !== activeView) return;
+        const n = Number.parseInt(value, 10);
+        const nextDepth = Number.isFinite(n) ? Math.max(0, Math.min(3, n)) : 0;
+        navigate({
+            to: '/admin/collections/$collection/$id/api',
+            params: {
+                collection,
+                id: documentId
+            },
+            search: (prev)=>({
+                    ...prev,
+                    depth: 0 === nextDepth ? void 0 : nextDepth
+                })
+        });
+    };
+    return /*#__PURE__*/ jsxs("div", {
+        className: classnames('byline-view-menu', view_menu_module.root),
+        children: [
+            /*#__PURE__*/ jsx(Label, {
+                className: classnames('muted byline-view-menu-label', view_menu_module.label),
+                id: "contentLocaleLabel",
+                htmlFor: "contentLocale",
+                label: "Content Locale:"
+            }),
+            /*#__PURE__*/ jsx(Select, {
+                name: "contentLocale",
+                id: "contentLocale",
+                className: classnames('byline-view-menu-locale-select', view_menu_module.localeSelect),
+                size: "xs",
+                variant: "outlined",
+                value: locale ?? defaultContentLocale,
+                items: [
+                    ...'edit' !== activeView ? [
+                        {
+                            value: 'all',
+                            label: 'All'
+                        }
+                    ] : [],
+                    ...contentLocales.map((loc)=>({
+                            value: loc.code,
+                            label: loc.label
+                        }))
+                ],
+                onValueChange: handleLocaleChange
+            }),
+            'api' === activeView && /*#__PURE__*/ jsxs(Fragment, {
+                children: [
+                    /*#__PURE__*/ jsx(Label, {
+                        className: classnames('muted byline-view-menu-label', view_menu_module.label),
+                        id: "populateDepthLabel",
+                        htmlFor: "populateDepth",
+                        label: "Depth:"
+                    }),
+                    /*#__PURE__*/ jsx(Select, {
+                        name: "populateDepth",
+                        id: "populateDepth",
+                        className: classnames('byline-view-menu-depth-select', view_menu_module.depthSelect),
+                        size: "xs",
+                        variant: "outlined",
+                        value: String(depth ?? 0),
+                        items: [
+                            {
+                                value: '0',
+                                label: '0'
+                            },
+                            {
+                                value: '1',
+                                label: '1'
+                            },
+                            {
+                                value: '2',
+                                label: '2'
+                            },
+                            {
+                                value: '3',
+                                label: '3'
+                            }
+                        ],
+                        onValueChange: handleDepthChange
+                    })
+                ]
+            }),
+            doc && /*#__PURE__*/ jsx(PreviewLink, {
+                collectionPath: collection,
+                doc: doc,
+                adminConfig: adminConfig,
+                locale: locale,
+                className: classnames('byline-view-menu-icon-button', view_menu_module.iconButton)
+            }),
+            /*#__PURE__*/ jsx(IconButton, {
+                className: classnames('byline-view-menu-icon-button', view_menu_module.iconButton),
+                size: "xs",
+                variant: 'history' === activeView ? 'filled' : 'text',
+                onClick: ()=>navigate({
+                        to: '/admin/collections/$collection/$id/history',
+                        params: {
+                            collection,
+                            id: documentId
+                        },
+                        search: locale ? {
+                            locale
+                        } : {}
+                    }),
+                children: /*#__PURE__*/ jsx(HistoryIcon, {
+                    className: classnames('byline-view-menu-icon-button-icon', view_menu_module.iconButtonIcon)
+                })
+            }),
+            /*#__PURE__*/ jsx(Button, {
+                size: "xs",
+                variant: 'edit' === activeView ? 'filled' : 'outlined',
+                className: classnames('byline-view-menu-button', view_menu_module.button),
+                onClick: ()=>navigate({
+                        to: '/admin/collections/$collection/$id',
+                        params: {
+                            collection,
+                            id: documentId
+                        },
+                        search: locale ? {
+                            locale
+                        } : {}
+                    }),
+                children: "Edit"
+            }),
+            /*#__PURE__*/ jsx(Button, {
+                size: "xs",
+                variant: 'api' === activeView ? 'filled' : 'outlined',
+                className: classnames('byline-view-menu-button', view_menu_module.button),
+                onClick: ()=>navigate({
+                        to: '/admin/collections/$collection/$id/api',
+                        params: {
+                            collection,
+                            id: documentId
+                        },
+                        search: locale ? {
+                            locale
+                        } : {}
+                    }),
+                children: "API"
+            })
+        ]
+    });
+};
+export { ViewMenu };

package/dist/admin-shell/collections/view-menu.module.js

@@ -0,0 +1,11 @@
+import "./view-menu_module.css";
+const view_menu_module = {
+    root: "root-vI0s6C",
+    label: "label-GcmVPn",
+    localeSelect: "localeSelect-JCYsTa",
+    depthSelect: "depthSelect-_wY_6k",
+    iconButton: "iconButton-_tiGNT",
+    iconButtonIcon: "iconButtonIcon-d8Qd6g",
+    button: "button-RIVwzv"
+};
+export default view_menu_module;

package/dist/admin-shell/collections/view-menu_module.css

@@ -0,0 +1,43 @@
+:is(.root-vI0s6C, .byline-view-menu) {
+  align-items: center;
+  gap: .5rem;
+  margin-top: .5rem;
+  margin-bottom: .5rem;
+  display: flex;
+}
+
+:is(.label-GcmVPn, .byline-view-menu-label) {
+  color: var(--gray-400);
+  padding-top: 2px;
+  font-size: .75rem;
+  display: none;
+}
+
+@media (min-width: 66rem) {
+  :is(.label-GcmVPn, .byline-view-menu-label) {
+    display: block;
+  }
+}
+
+:is(.localeSelect-JCYsTa, .byline-view-menu-locale-select) {
+  min-width: 100px;
+  padding: .1rem 0;
+}
+
+:is(.depthSelect-_wY_6k, .byline-view-menu-depth-select) {
+  min-width: 60px;
+}
+
+:is(.iconButton-_tiGNT, .byline-view-menu-icon-button) {
+  min-width: 24px;
+}
+
+:is(.iconButtonIcon-d8Qd6g, .byline-view-menu-icon-button-icon) {
+  width: 1.25rem;
+  height: 1.25rem;
+}
+
+:is(.button-RIVwzv, .byline-view-menu-button) {
+  min-width: 50px;
+}
+

package/dist/auth/auth-context.d.ts

@@ -0,0 +1,38 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+/**
+ * Request-scoped auth context for admin server functions.
+ *
+ * Reads the session cookies, verifies the access token, transparently
+ * refreshes when needed, and returns a `RequestContext` carrying the
+ * authenticated `AdminAuth`. Every admin server fn calls this as its
+ * first step — it is the single point where the admin transport boundary
+ * meets the actor/ability machinery.
+ *
+ * Flow, in order:
+ *
+ *   1. Read the access cookie.
+ *   2. If present, try `sessionProvider.verifyAccessToken`. On success,
+ *      return the context — no DB write, no cookie churn.
+ *   3. On verify failure (or missing access cookie), read the refresh
+ *      cookie. If present, call `sessionProvider.refreshSession` — this
+ *      rotates the refresh token atomically and issues a new access
+ *      token. Write both fresh cookies to the response.
+ *   4. Verify the new access token (populate the actor) and return the
+ *      context.
+ *   5. Any failure along the way clears both cookies so the browser
+ *      stops sending a session the server has already rejected, and
+ *      throws `ERR_UNAUTHENTICATED`.
+ *
+ * Burns a refresh-token rotation only when the access token actually
+ * fails verification — not on every request. The "one session" UX is
+ * the consequence of this helper working invisibly behind each call.
+ */
+import { type RequestContext } from '@byline/auth';
+export declare function getAdminRequestContext(): Promise<RequestContext>;
+//# sourceMappingURL=auth-context.d.ts.map

package/dist/auth/auth-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-context.d.ts","sourceRoot":"","sources":["../../src/auth/auth-context.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAA;AAsBvE,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,cAAc,CAAC,CA2DtE"}

package/dist/auth/auth-context.js

@@ -0,0 +1,57 @@
+import { ERR_UNAUTHENTICATED } from "@byline/auth";
+import { getServerConfig } from "@byline/core";
+import { v7 } from "uuid";
+import { clearSessionCookies, readAccessTokenCookie, readRefreshTokenCookie, setSessionCookies } from "./auth-cookies.js";
+function requireSessionProvider() {
+    const provider = getServerConfig().sessionProvider;
+    if (!provider) throw new Error("No sessionProvider configured on ServerConfig. Construct a JwtSessionProvider in your server config and pass it to initBylineCore().");
+    return provider;
+}
+async function getAdminRequestContext() {
+    const provider = requireSessionProvider();
+    const accessToken = readAccessTokenCookie();
+    if (accessToken) try {
+        const { actor } = await provider.verifyAccessToken(accessToken);
+        return {
+            actor,
+            requestId: v7(),
+            readMode: 'any'
+        };
+    } catch  {}
+    const refreshToken = readRefreshTokenCookie();
+    if (!refreshToken) {
+        clearSessionCookies();
+        throw ERR_UNAUTHENTICATED({
+            message: 'no admin session'
+        });
+    }
+    let refreshed;
+    try {
+        refreshed = await provider.refreshSession({
+            refreshToken
+        });
+    } catch (err) {
+        clearSessionCookies();
+        throw ERR_UNAUTHENTICATED({
+            message: 'admin session could not be refreshed',
+            cause: err
+        });
+    }
+    setSessionCookies(refreshed);
+    let verified;
+    try {
+        verified = await provider.verifyAccessToken(refreshed.accessToken);
+    } catch (err) {
+        clearSessionCookies();
+        throw ERR_UNAUTHENTICATED({
+            message: 'refreshed access token did not verify',
+            cause: err
+        });
+    }
+    return {
+        actor: verified.actor,
+        requestId: v7(),
+        readMode: 'any'
+    };
+}
+export { getAdminRequestContext };