@byline/host-tanstack-start 2.3.2 → 2.4.0

package/dist/admin-shell/chrome/sign-in-page.d.ts

@@ -13,6 +13,11 @@ interface SignInPageProps {
  * layout (no app bar, breadcrumbs, or menu drawer). Wraps the
  * `SignInForm` from `@byline/ui` in the admin services provider so
  * the form can call `signIn` via the typed contract.
+ *
+ * Threads the configured `serverURL` into the `SignInForm` as `homeUrl` so
+ * the form's action row can render a plain "Home" link beside the submit
+ * button. After admin sign-out users land back here; the link is what lets
+ * them get back to the public site without typing the URL.
  */
 export declare function SignInPage({ callbackUrl }: SignInPageProps): import("react").JSX.Element;
 export {};

package/dist/admin-shell/chrome/sign-in-page.js

@@ -1,9 +1,11 @@
 import { jsx } from "react/jsx-runtime";
+import { getClientConfig } from "@byline/core";
 import { BylineAdminServicesProvider, SignInForm } from "@byline/ui/react";
 import classnames from "classnames";
 import { bylineAdminServices } from "../../integrations/byline-admin-services.js";
 import sign_in_page_module from "./sign-in-page.module.js";
 function SignInPage({ callbackUrl }) {
+    const { serverURL } = getClientConfig();
     return /*#__PURE__*/ jsx(BylineAdminServicesProvider, {
         services: bylineAdminServices,
         children: /*#__PURE__*/ jsx("main", {
@@ -11,7 +13,8 @@ function SignInPage({ callbackUrl }) {
             children: /*#__PURE__*/ jsx("div", {
                 className: classnames('byline-sign-in-page-inner', sign_in_page_module.inner),
                 children: /*#__PURE__*/ jsx(SignInForm, {
-                    callbackUrl: callbackUrl
+                    callbackUrl: callbackUrl,
+                    homeUrl: serverURL
                 })
             })
         })

package/dist/server-fns/auth/sign-out.js

@@ -1,6 +1,7 @@
 import { createServerFn } from "@tanstack/react-start";
 import { getServerConfig } from "@byline/core";
 import { clearSessionCookies, readRefreshTokenCookie } from "../../auth/auth-cookies.js";
+import { clearPreviewCookie } from "../../auth/preview-cookies.js";
 const adminSignOut = createServerFn({
     method: 'POST'
 }).handler(async ()=>{
@@ -10,6 +11,7 @@ const adminSignOut = createServerFn({
         await provider.revokeSession(refreshToken);
     } catch  {}
     clearSessionCookies();
+    clearPreviewCookie();
     return {
         status: 'ok'
     };

package/package.json

@@ -3,7 +3,7 @@
   "private": false,
   "type": "module",
   "license": "MPL-2.0",
-  "version": "2.3.2",
+  "version": "2.4.0",
   "engines": {
     "node": ">=20.9.0"
   },
@@ -107,12 +107,12 @@
     "react-swipeable": "^7.0.2",
     "uuid": "^14.0.0",
     "zod": "^4.4.3",
-    "@byline/auth": "2.3.2",
-    "@byline/admin": "2.3.2",
-    "@byline/core": "2.3.2",
-    "@byline/client": "2.3.2",
-    "@byline/ai": "2.3.2",
-    "@byline/ui": "2.3.2"
+    "@byline/admin": "2.4.0",
+    "@byline/core": "2.4.0",
+    "@byline/client": "2.4.0",
+    "@byline/ai": "2.4.0",
+    "@byline/ui": "2.4.0",
+    "@byline/auth": "2.4.0"
   },
   "peerDependencies": {
     "@tanstack/react-router": "^1.167.0",
@@ -124,8 +124,8 @@
     "@biomejs/biome": "2.4.15",
     "@rsbuild/plugin-react": "^2.0.0",
     "@rslib/core": "^0.21.5",
-    "@tanstack/react-router": "^1.170.6",
-    "@tanstack/react-start": "^1.168.9",
+    "@tanstack/react-router": "^1.170.7",
+    "@tanstack/react-start": "^1.168.10",
     "@types/node": "^25.9.1",
     "@types/react": "19.2.15",
     "@types/react-dom": "19.2.3",

package/src/admin-shell/chrome/sign-in-page.module.css

@@ -2,8 +2,11 @@
  * SignInPage — outer wrapper for the sign-in form.
  *
  * Override handles:
- *   .byline-sign-in-page    — outer <main>
+ *   .byline-sign-in-page       — outer <main>
  *   .byline-sign-in-page-inner — vertically-centred card container
+ *
+ * The Home link itself lives inside `SignInForm`'s action row — see
+ * `@byline/ui` `sign-in-form.module.css` for `.byline-sign-in-home-link`.
  */
 
 .main,

package/src/admin-shell/chrome/sign-in-page.tsx

@@ -6,6 +6,7 @@
  * Copyright (c) Infonomic Company Limited
  */
 
+import { getClientConfig } from '@byline/core'
 import { BylineAdminServicesProvider, SignInForm } from '@byline/ui/react'
 import cx from 'classnames'
 
@@ -21,13 +22,19 @@ interface SignInPageProps {
  * layout (no app bar, breadcrumbs, or menu drawer). Wraps the
  * `SignInForm` from `@byline/ui` in the admin services provider so
  * the form can call `signIn` via the typed contract.
+ *
+ * Threads the configured `serverURL` into the `SignInForm` as `homeUrl` so
+ * the form's action row can render a plain "Home" link beside the submit
+ * button. After admin sign-out users land back here; the link is what lets
+ * them get back to the public site without typing the URL.
  */
 export function SignInPage({ callbackUrl }: SignInPageProps) {
+  const { serverURL } = getClientConfig()
   return (
     <BylineAdminServicesProvider services={bylineAdminServices}>
       <main className={cx('byline-sign-in-page', styles.main)}>
         <div className={cx('byline-sign-in-page-inner', styles.inner)}>
-          <SignInForm callbackUrl={callbackUrl} />
+          <SignInForm callbackUrl={callbackUrl} homeUrl={serverURL} />
         </div>
       </main>
     </BylineAdminServicesProvider>

package/src/server-fns/auth/sign-out.ts

@@ -9,10 +9,16 @@
 /**
  * Admin sign-out server function.
  *
- * Revokes the current refresh token (so a stolen copy cannot be reused)
- * and clears both session cookies. Idempotent — if the caller already
- * lacks a refresh cookie, we still clear whatever's there and return
- * successfully.
+ * Revokes the current refresh token (so a stolen copy cannot be reused),
+ * clears both session cookies, and clears the preview-mode cookie.
+ * Idempotent — if the caller already lacks a refresh cookie, we still
+ * clear whatever's there and return successfully.
+ *
+ * Note: clearing `byline_preview` here is hygiene, not a security
+ * requirement. The CDN cache-bypass middleware keys off the session
+ * cookies, not the preview cookie, so a stale preview cookie left in the
+ * browser does not affect cacheability of subsequent anonymous responses.
+ * Clearing it simply means the next sign-in starts in non-preview mode.
  */
 
 import { createServerFn } from '@tanstack/react-start'
@@ -20,6 +26,7 @@ import { createServerFn } from '@tanstack/react-start'
 import { getServerConfig } from '@byline/core'
 
 import { clearSessionCookies, readRefreshTokenCookie } from '../../auth/auth-cookies.js'
+import { clearPreviewCookie } from '../../auth/preview-cookies.js'
 
 export const adminSignOut = createServerFn({ method: 'POST' }).handler(async () => {
   const provider = getServerConfig().sessionProvider
@@ -38,5 +45,6 @@ export const adminSignOut = createServerFn({ method: 'POST' }).handler(async ()
   }
 
   clearSessionCookies()
+  clearPreviewCookie()
   return { status: 'ok' as const }
 })