@byline/host-tanstack-start 0.9.3

package/dist/auth/auth-cookies.d.ts

@@ -0,0 +1,35 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const ACCESS_TOKEN_COOKIE = "byline_access_token";
+export declare const REFRESH_TOKEN_COOKIE = "byline_refresh_token";
+/** Read the access-token cookie. Returns undefined when not present. */
+export declare function readAccessTokenCookie(): string | undefined;
+/** Read the refresh-token cookie. Returns undefined when not present. */
+export declare function readRefreshTokenCookie(): string | undefined;
+export interface SessionCookieTokens {
+    accessToken: string;
+    refreshToken: string;
+    accessTokenExpiresAt: Date;
+    refreshTokenExpiresAt: Date;
+}
+/**
+ * Write both access and refresh cookies. Called after sign-in and after
+ * every transparent refresh in `getAdminRequestContext()`.
+ *
+ * `maxAge` is derived from each token's own expiry claim so the browser
+ * drops the cookies at the same moment the server would reject them —
+ * saves round trips when the refresh token has fully expired.
+ */
+export declare function setSessionCookies(tokens: SessionCookieTokens): void;
+/**
+ * Clear both session cookies. Called on sign-out and on any auth failure
+ * during `getAdminRequestContext()` (ensures the browser does not keep
+ * trying a token that the server has already rejected).
+ */
+export declare function clearSessionCookies(): void;
+//# sourceMappingURL=auth-cookies.d.ts.map

package/dist/auth/auth-cookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-cookies.d.ts","sourceRoot":"","sources":["../../src/auth/auth-cookies.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA4BH,eAAO,MAAM,mBAAmB,wBAAwB,CAAA;AACxD,eAAO,MAAM,oBAAoB,yBAAyB,CAAA;AAI1D,wEAAwE;AACxE,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,SAAS,CAE1D;AAED,yEAAyE;AACzE,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,SAAS,CAE3D;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,oBAAoB,EAAE,IAAI,CAAA;IAC1B,qBAAqB,EAAE,IAAI,CAAA;CAC5B;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CA0BnE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAe1C"}

package/dist/auth/auth-cookies.js

@@ -0,0 +1,46 @@
+import { getCookie, setCookie } from "@tanstack/react-start/server";
+const ACCESS_TOKEN_COOKIE = 'byline_access_token';
+const REFRESH_TOKEN_COOKIE = 'byline_refresh_token';
+const IS_PROD = 'production' === process.env.NODE_ENV;
+function readAccessTokenCookie() {
+    return getCookie(ACCESS_TOKEN_COOKIE);
+}
+function readRefreshTokenCookie() {
+    return getCookie(REFRESH_TOKEN_COOKIE);
+}
+function setSessionCookies(tokens) {
+    const now = Date.now();
+    const accessMaxAgeSeconds = Math.max(0, Math.floor((tokens.accessTokenExpiresAt.getTime() - now) / 1000));
+    const refreshMaxAgeSeconds = Math.max(0, Math.floor((tokens.refreshTokenExpiresAt.getTime() - now) / 1000));
+    setCookie(ACCESS_TOKEN_COOKIE, tokens.accessToken, {
+        httpOnly: true,
+        sameSite: 'lax',
+        secure: IS_PROD,
+        path: '/',
+        maxAge: accessMaxAgeSeconds
+    });
+    setCookie(REFRESH_TOKEN_COOKIE, tokens.refreshToken, {
+        httpOnly: true,
+        sameSite: 'lax',
+        secure: IS_PROD,
+        path: '/',
+        maxAge: refreshMaxAgeSeconds
+    });
+}
+function clearSessionCookies() {
+    setCookie(ACCESS_TOKEN_COOKIE, '', {
+        httpOnly: true,
+        sameSite: 'lax',
+        secure: IS_PROD,
+        path: '/',
+        maxAge: 0
+    });
+    setCookie(REFRESH_TOKEN_COOKIE, '', {
+        httpOnly: true,
+        sameSite: 'lax',
+        secure: IS_PROD,
+        path: '/',
+        maxAge: 0
+    });
+}
+export { ACCESS_TOKEN_COOKIE, REFRESH_TOKEN_COOKIE, clearSessionCookies, readAccessTokenCookie, readRefreshTokenCookie, setSessionCookies };

package/dist/auth/preview-cookies.d.ts

@@ -0,0 +1,20 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const PREVIEW_COOKIE = "byline_preview";
+/** True iff the preview cookie is currently set on the request. */
+export declare function readPreviewCookie(): boolean;
+/**
+ * Write the preview cookie. Callers should ensure the request is from a
+ * valid admin session before invoking — the cookie itself is just a flag
+ * and carries no proof of authorisation. See `enablePreviewModeFn` for
+ * the canonical entry point.
+ */
+export declare function setPreviewCookie(): void;
+/** Clear the preview cookie. Safe to call from any context. */
+export declare function clearPreviewCookie(): void;
+//# sourceMappingURL=preview-cookies.d.ts.map

package/dist/auth/preview-cookies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-cookies.d.ts","sourceRoot":"","sources":["../../src/auth/preview-cookies.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA+BH,eAAO,MAAM,cAAc,mBAAmB,CAAA;AAK9C,mEAAmE;AACnE,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CAQvC;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,IAAI,IAAI,CAQzC"}

package/dist/auth/preview-cookies.js

@@ -0,0 +1,26 @@
+import { getCookie, setCookie } from "@tanstack/react-start/server";
+const PREVIEW_COOKIE = 'byline_preview';
+const PREVIEW_MAX_AGE_SECONDS = 86400;
+const IS_PROD = 'production' === process.env.NODE_ENV;
+function readPreviewCookie() {
+    return '1' === getCookie(PREVIEW_COOKIE);
+}
+function setPreviewCookie() {
+    setCookie(PREVIEW_COOKIE, '1', {
+        httpOnly: true,
+        sameSite: 'lax',
+        secure: IS_PROD,
+        path: '/',
+        maxAge: PREVIEW_MAX_AGE_SECONDS
+    });
+}
+function clearPreviewCookie() {
+    setCookie(PREVIEW_COOKIE, '', {
+        httpOnly: true,
+        sameSite: 'lax',
+        secure: IS_PROD,
+        path: '/',
+        maxAge: 0
+    });
+}
+export { PREVIEW_COOKIE, clearPreviewCookie, readPreviewCookie, setPreviewCookie };

package/dist/index.d.ts

@@ -0,0 +1,43 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+/**
+ * `@byline/host-tanstack-start` — TanStack Start host adapter for Byline.
+ *
+ * Houses everything that's framework-coupled to TanStack Start /
+ * Router so the framework-neutral packages (`@byline/core`, `@byline/admin`,
+ * `@byline/client`, `@byline/auth`, `@byline/ui`) stay framework-neutral.
+ *
+ * Surface is exposed via subpath exports rather than a single root barrel
+ * so hosts only pull in what they consume:
+ *
+ *   - `@byline/host-tanstack-start/server-fns/<module>` — TanStack Start
+ *     server functions for each admin module (admin-account, admin-roles,
+ *     admin-users, admin-permissions, auth, collections).
+ *   - `@byline/host-tanstack-start/auth/auth-context` — request-scoped
+ *     `RequestContext` resolution that reads session cookies, refreshes
+ *     transparently, and surfaces `ERR_UNAUTHENTICATED` to callers.
+ *   - `@byline/host-tanstack-start/integrations/*` — host-side adapters
+ *     binding TanStack Start primitives to the framework-neutral
+ *     contracts in `@byline/ui` and `@byline/client`
+ *     (`bylineFieldServices`, `bylineAdminServices`, the admin
+ *     `BylineClient` singleton).
+ *   - `@byline/host-tanstack-start/admin-shell/{chrome,collections,...}` —
+ *     router-coupled admin UI: shared shell chrome (menu drawer, app bar,
+ *     route-error, breadcrumbs, etc.) plus per-area page containers.
+ *   - `@byline/host-tanstack-start/routes/*` — route factories. Each
+ *     factory returns the result of `createFileRoute(path)({...})` ready
+ *     for assignment to the host's `export const Route = ...`. The host
+ *     supplies the filesystem-backed path string; the package owns the
+ *     loader, `beforeLoad`, component, and error boundary.
+ *
+ * The root entry exports nothing intentionally — every consumption path
+ * is a subpath import. This keeps the public surface small and the
+ * boundaries explicit.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,CAAA"}

package/dist/index.js

@@ -0,0 +1 @@
+export { };

package/dist/integrations/abilities.d.ts

@@ -0,0 +1,67 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+/**
+ * Client-side ability helpers for the admin shell.
+ *
+ * These hooks read the current admin user's ability set off the admin
+ * route's TanStack Router context — which `route.tsx` populates in
+ * `beforeLoad` via `getCurrentAdminUser()`. No separate React Context
+ * provider is required because the route context already plays that
+ * role.
+ *
+ * **Cosmetic UI only.** A hidden menu item, disabled button, or
+ * un-rendered children block is an affordance, never a security
+ * boundary. Every server-side path is independently gated by
+ * `assertActorCanPerform` (document collections) or `assertAdminActor`
+ * (admin user / role / permission management). Callers can construct
+ * the matching ability key by hand or — preferred — import the
+ * `ADMIN_*_ABILITIES` constants from the relevant
+ * `@byline/admin/admin-*` subpath so a rename surfaces as a type error
+ * rather than a silent miss.
+ *
+ * Super-admin bypass mirrors the server: every `useAbility` call
+ * returns `true` when `is_super_admin` is set.
+ *
+ * Snapshot semantics: the ability set is the snapshot from the last
+ * `beforeLoad` of the admin route, refreshed on navigation. A grant
+ * revoked mid-session won't disappear from the UI until the next
+ * navigation — fine for cosmetic cues since the server still rejects
+ * the underlying action.
+ */
+import type React from 'react';
+/**
+ * `true` when the current admin holds the given ability (or is a
+ * super-admin). Cosmetic — see file-level docstring.
+ */
+export declare function useAbility(ability: string): boolean;
+/**
+ * Bundle of ability checks for situations where a component needs more
+ * than one verb (e.g. the menu drawer asks about three keys at once).
+ * Avoids calling `useAbility` repeatedly when a single context read is
+ * sufficient.
+ */
+export declare function useAbilities(): {
+    has: (ability: string) => boolean;
+    hasAny: (abilities: readonly string[]) => boolean;
+    isSuperAdmin: boolean;
+};
+/**
+ * JSX wrapper. Renders `children` only when the current admin holds
+ * the given ability. Cosmetic — see file-level docstring.
+ *
+ * ```tsx
+ * <RequireAbility ability={ADMIN_USERS_ABILITIES.create}>
+ *   <Button>New admin user</Button>
+ * </RequireAbility>
+ * ```
+ */
+export declare function RequireAbility({ ability, children, }: {
+    ability: string;
+    children: React.ReactNode;
+}): React.ReactNode;
+//# sourceMappingURL=abilities.d.ts.map

package/dist/integrations/abilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abilities.d.ts","sourceRoot":"","sources":["../../src/integrations/abilities.tsx"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAA;AAM9B;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAInD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI;IAC9B,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAA;IACjC,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,KAAK,OAAO,CAAA;IACjD,YAAY,EAAE,OAAO,CAAA;CACtB,CAMA;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,EAC7B,OAAO,EACP,QAAQ,GACT,EAAE;IACD,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAA;CAC1B,GAAG,KAAK,CAAC,SAAS,CAElB"}

package/dist/integrations/abilities.js

@@ -0,0 +1,25 @@
+import { useRouteContext } from "@tanstack/react-router";
+const ADMIN_ROUTE_ID = '/(byline)/admin';
+function useAbility(ability) {
+    const { user } = useRouteContext({
+        from: ADMIN_ROUTE_ID
+    });
+    if (user.is_super_admin) return true;
+    return user.abilities.includes(ability);
+}
+function useAbilities() {
+    const { user } = useRouteContext({
+        from: ADMIN_ROUTE_ID
+    });
+    const has = (ability)=>user.is_super_admin || user.abilities.includes(ability);
+    const hasAny = (abilities)=>user.is_super_admin || abilities.some((key)=>user.abilities.includes(key));
+    return {
+        has,
+        hasAny,
+        isSuperAdmin: user.is_super_admin
+    };
+}
+function RequireAbility({ ability, children }) {
+    return useAbility(ability) ? children : null;
+}
+export { RequireAbility, useAbilities, useAbility };

package/dist/integrations/api-utils.d.ts

@@ -0,0 +1,34 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+/**
+ * NOTE: Before you dunk on this, this is a prototype implementation
+ * of our API and used only for development.
+ * We'll extract a properly configured API server soon.
+ */
+import type { CollectionDefinition } from '@byline/core';
+export interface EnsuredCollection {
+    definition: CollectionDefinition;
+    collection: {
+        id: string;
+        path: string;
+        version: number;
+        schemaHash: string;
+    };
+}
+/**
+ * Resolve a collection for an admin API request.
+ *
+ * Collections are reconciled with the database once at startup by
+ * `initBylineCore()` (see `packages/core/src/services/collection-bootstrap.ts`).
+ * This helper is a per-request cache lookup against the resulting in-memory
+ * registry — no DB I/O, no hash work.
+ *
+ * Returns `null` when the path is not registered in the client/server config.
+ */
+export declare function ensureCollection(path: string): Promise<EnsuredCollection | null>;
+//# sourceMappingURL=api-utils.d.ts.map

package/dist/integrations/api-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-utils.d.ts","sourceRoot":"","sources":["../../src/integrations/api-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;GAIG;AAMH,OAAO,KAAK,EAAE,oBAAoB,EAAoB,MAAM,cAAc,CAAA;AAK1E,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,oBAAoB,CAAA;IAChC,UAAU,EAAE;QACV,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,CAAA;QACf,UAAU,EAAE,MAAM,CAAA;KACnB,CAAA;CACF;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAsBtF"}

package/dist/integrations/api-utils.js

@@ -0,0 +1,22 @@
+import { getCollectionDefinition } from "@byline/core";
+import { bylineCore } from "./byline-core.js";
+async function ensureCollection(path) {
+    const definition = getCollectionDefinition(path);
+    if (null == definition) return null;
+    let record;
+    try {
+        record = bylineCore().getCollectionRecord(path);
+    } catch  {
+        return null;
+    }
+    return {
+        definition,
+        collection: {
+            id: record.collectionId,
+            path,
+            version: record.version,
+            schemaHash: record.schemaHash
+        }
+    };
+}
+export { ensureCollection };

package/dist/integrations/byline-admin-services.d.ts

@@ -0,0 +1,25 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+/**
+ * Host-side adapter that binds the webapp's TanStack Start server functions
+ * to the framework-neutral `BylineAdminServices` contract consumed by
+ * `@byline/ui` admin components.
+ *
+ * Wired into the admin route once via `<BylineAdminServicesProvider>`. A
+ * future Next.js host would ship its own adapter file (server-actions in
+ * place of server fns) and Provider; the `@byline/ui` surface is unchanged.
+ *
+ * Contract scope: only the framework-neutral admin UI components consume
+ * this — sign-in, account self-service, admin-user/role write forms, the
+ * permissions inspector, role-permissions editor, and the diff modal.
+ * Page-container reads (list/edit) stay on direct server-fn imports
+ * inside the host's deferred router-coupled containers.
+ */
+import type { BylineAdminServices } from '@byline/ui';
+export declare const bylineAdminServices: BylineAdminServices;
+//# sourceMappingURL=byline-admin-services.d.ts.map

package/dist/integrations/byline-admin-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"byline-admin-services.d.ts","sourceRoot":"","sources":["../../src/integrations/byline-admin-services.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAqCrD,eAAO,MAAM,mBAAmB,EAAE,mBAwBjC,CAAA"}

package/dist/integrations/byline-admin-services.js

@@ -0,0 +1,26 @@
+import { changeAccountPassword, updateAccount } from "../server-fns/admin-account/index.js";
+import { setRoleAbilities, whoHasAbility } from "../server-fns/admin-permissions/index.js";
+import { createAdminRole, updateAdminRole } from "../server-fns/admin-roles/index.js";
+import { createAdminUser, setAdminUserPassword, setUserRoles, updateAdminUser } from "../server-fns/admin-users/index.js";
+import { adminSignIn } from "../server-fns/auth/index.js";
+import { getCollectionDocumentVersion } from "../server-fns/collections/get.js";
+const byline_admin_services_getCollectionDocumentVersion = async (collection, documentId, versionId, locale)=>{
+    const result = await getCollectionDocumentVersion(collection, documentId, versionId, locale);
+    if (null == result) throw new Error(`Document version not found: collection=${collection} document=${documentId} version=${versionId}`);
+    return result;
+};
+const bylineAdminServices = {
+    adminSignIn: adminSignIn,
+    updateAccount: updateAccount,
+    changeAccountPassword: changeAccountPassword,
+    createAdminUser: createAdminUser,
+    updateAdminUser: updateAdminUser,
+    setAdminUserPassword: setAdminUserPassword,
+    setUserRoles: setUserRoles,
+    createAdminRole: createAdminRole,
+    updateAdminRole: updateAdminRole,
+    setRoleAbilities: setRoleAbilities,
+    whoHasAbility: whoHasAbility,
+    getCollectionDocumentVersion: byline_admin_services_getCollectionDocumentVersion
+};
+export { bylineAdminServices };

package/dist/integrations/byline-client.d.ts

@@ -0,0 +1,22 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+/**
+ * The admin webapp's `BylineClient` singleton.
+ *
+ * Configured with a `requestContext` factory that resolves the
+ * authenticated admin actor per call via `getAdminRequestContext`. Every
+ * admin server fn that reads documents goes through this client, so the
+ * full read pipeline (`beforeRead` → `findDocuments` → `populate` →
+ * `afterRead`) is uniform between admin and any future external
+ * client. The collection runtime, db adapter, and storage provider are
+ * sourced from the shared `getServerConfig()` so we don't duplicate
+ * adapter wiring.
+ */
+import { type BylineClient } from '@byline/client';
+export declare function getAdminBylineClient(): BylineClient;
+//# sourceMappingURL=byline-client.d.ts.map

package/dist/integrations/byline-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"byline-client.d.ts","sourceRoot":"","sources":["../../src/integrations/byline-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,gBAAgB,CAAA;AAOtE,wBAAgB,oBAAoB,IAAI,YAAY,CAWnD"}

package/dist/integrations/byline-client.js

@@ -0,0 +1,13 @@
+import { createBylineClient } from "@byline/client";
+import { getServerConfig } from "@byline/core";
+import { getAdminRequestContext } from "../auth/auth-context.js";
+let cachedClient;
+function getAdminBylineClient() {
+    if (cachedClient) return cachedClient;
+    cachedClient = createBylineClient({
+        config: getServerConfig(),
+        requestContext: getAdminRequestContext
+    });
+    return cachedClient;
+}
+export { getAdminBylineClient };

package/dist/integrations/byline-core.d.ts

@@ -0,0 +1,28 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+/**
+ * Typed accessor for the composed `BylineCore` post-init.
+ *
+ * Wraps `@byline/core`'s framework-neutral `getBylineCore<TAdminStore>()`
+ * and pre-binds `TAdminStore` to `AdminStore` from `@byline/admin`. This
+ * package is the admin host adapter — every server fn here ultimately
+ * delegates to an `@byline/admin` command that wants the typed store, so
+ * baking the generic in once removes the need for each call site to
+ * repeat `getBylineCore<AdminStore>()` and to import `AdminStore`
+ * separately.
+ *
+ * Hosts that wire a different admin-store flavour through
+ * `initBylineCore<TOtherStore>()` should NOT use this helper — they
+ * import `getBylineCore<TOtherStore>()` from `@byline/core` directly.
+ * That escape hatch keeps the framework-neutral package agnostic to
+ * which admin store is configured.
+ */
+import type { AdminStore } from '@byline/admin';
+import { type BylineCore } from '@byline/core';
+export declare function bylineCore(): BylineCore<AdminStore>;
+//# sourceMappingURL=byline-core.d.ts.map

package/dist/integrations/byline-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"byline-core.d.ts","sourceRoot":"","sources":["../../src/integrations/byline-core.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,KAAK,UAAU,EAAiB,MAAM,cAAc,CAAA;AAE7D,wBAAgB,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,CAEnD"}

package/dist/integrations/byline-core.js

@@ -0,0 +1,5 @@
+import { getBylineCore } from "@byline/core";
+function bylineCore() {
+    return getBylineCore();
+}
+export { bylineCore };

package/dist/integrations/byline-field-services.d.ts

@@ -0,0 +1,19 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+/**
+ * Host-side adapters that bind the webapp's TanStack Start server functions
+ * to the framework-neutral `BylineFieldServices` contract consumed by
+ * `@byline/ui` field/form components.
+ *
+ * Wired into the admin route once via `<BylineFieldServicesProvider>`. A
+ * future Next.js host would ship its own adapter file and Provider; the
+ * @byline/ui surface is unchanged.
+ */
+import type { BylineFieldServices } from '@byline/ui';
+export declare const bylineFieldServices: BylineFieldServices;
+//# sourceMappingURL=byline-field-services.d.ts.map

package/dist/integrations/byline-field-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"byline-field-services.d.ts","sourceRoot":"","sources":["../../src/integrations/byline-field-services.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAA2C,MAAM,YAAY,CAAA;AAa9F,eAAO,MAAM,mBAAmB,EAAE,mBAGjC,CAAA"}

package/dist/integrations/byline-field-services.js

@@ -0,0 +1,14 @@
+import { getCollectionDocuments } from "../server-fns/collections/list.js";
+import { uploadField } from "../server-fns/collections/upload.js";
+const byline_field_services_getCollectionDocuments = ({ collection, params })=>getCollectionDocuments({
+        data: {
+            collection,
+            params
+        }
+    });
+const byline_field_services_uploadField = (collection, formData, createDocument)=>uploadField(collection, formData, createDocument);
+const bylineFieldServices = {
+    getCollectionDocuments: byline_field_services_getCollectionDocuments,
+    uploadField: byline_field_services_uploadField
+};
+export { bylineFieldServices };

package/dist/integrations/byline-public-client.d.ts

@@ -0,0 +1,10 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+import { type BylineClient } from '@byline/client';
+export declare function getPublicBylineClient(): BylineClient;
+//# sourceMappingURL=byline-public-client.d.ts.map

package/dist/integrations/byline-public-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"byline-public-client.d.ts","sourceRoot":"","sources":["../../src/integrations/byline-public-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAkCH,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,gBAAgB,CAAA;AAKtE,wBAAgB,qBAAqB,IAAI,YAAY,CAOpD"}

package/dist/integrations/byline-public-client.js

@@ -0,0 +1,15 @@
+import { createRequestContext } from "@byline/auth";
+import { createBylineClient } from "@byline/client";
+import { getServerConfig } from "@byline/core";
+let cachedClient;
+function getPublicBylineClient() {
+    if (cachedClient) return cachedClient;
+    cachedClient = createBylineClient({
+        config: getServerConfig(),
+        requestContext: ()=>createRequestContext({
+                readMode: 'published'
+            })
+    });
+    return cachedClient;
+}
+export { getPublicBylineClient };

package/dist/integrations/byline-viewer-client.d.ts

@@ -0,0 +1,21 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+import { type BylineClient } from '@byline/client';
+export declare function getViewerBylineClient(): BylineClient;
+/**
+ * Resolve whether the current request should surface non-published
+ * versions. True iff the preview cookie is set **and** a valid admin
+ * session resolves. Server fns call this once and pass the result to
+ * `status: preview ? 'any' : 'published'` on the SDK read.
+ *
+ * Defensive by design: the cookie alone is not enough. A signed-out
+ * browser carrying an old preview cookie still gets `false` here, which
+ * keeps stray query strings or shared links from leaking drafts.
+ */
+export declare function isPreviewActive(): Promise<boolean>;
+//# sourceMappingURL=byline-viewer-client.d.ts.map

package/dist/integrations/byline-viewer-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"byline-viewer-client.d.ts","sourceRoot":"","sources":["../../src/integrations/byline-viewer-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAwCH,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,gBAAgB,CAAA;AAQtE,wBAAgB,qBAAqB,IAAI,YAAY,CAwBpD;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAQxD"}

package/dist/integrations/byline-viewer-client.js

@@ -0,0 +1,39 @@
+import { createRequestContext } from "@byline/auth";
+import { createBylineClient } from "@byline/client";
+import { getServerConfig } from "@byline/core";
+import { getAdminRequestContext } from "../auth/auth-context.js";
+import { readPreviewCookie } from "../auth/preview-cookies.js";
+let cachedClient;
+function getViewerBylineClient() {
+    if (cachedClient) return cachedClient;
+    cachedClient = createBylineClient({
+        config: getServerConfig(),
+        requestContext: async ()=>{
+            if (!readPreviewCookie()) return createRequestContext({
+                readMode: 'published'
+            });
+            try {
+                const ctx = await getAdminRequestContext();
+                return {
+                    ...ctx,
+                    readMode: 'any'
+                };
+            } catch  {
+                return createRequestContext({
+                    readMode: 'published'
+                });
+            }
+        }
+    });
+    return cachedClient;
+}
+async function isPreviewActive() {
+    if (!readPreviewCookie()) return false;
+    try {
+        await getAdminRequestContext();
+        return true;
+    } catch  {
+        return false;
+    }
+}
+export { getViewerBylineClient, isPreviewActive };