@byline/host-tanstack-start 3.15.2 → 3.16.1

package/dist/admin-shell/admin-activity/list.d.ts

@@ -1,6 +1,6 @@
 import type { SystemActivityResponse } from '../../server-fns/admin-activity/index.js';
 /**
- * The system-wide activity report (docs/AUDIT.md — Workstream 4): a paged,
+ * The system-wide activity report (docs/06-auth-and-security/02-auditability.md — Workstream 4): a paged,
  * filterable feed over the union of the version stream (content saves) and the
  * audit log (status / path / locale changes, deletions, and future admin-realm
  * events). Read-only; gated by `admin.activity.read`.

package/dist/admin-shell/collections/document-history.d.ts

@@ -9,7 +9,7 @@
  * One serialised audit-log entry as it reaches the admin UI. Mirrors
  * `@byline/client`'s `AuditLogEntry` but with `occurredAt` as an ISO string —
  * the value crosses the TanStack server-fn boundary through `serialise()`,
- * which turns Dates into strings (docs/AUDIT.md — Workstream 3).
+ * which turns Dates into strings (docs/06-auth-and-security/02-auditability.md — Workstream 3).
  */
 export interface AuditLogEntryView {
     id: string;
@@ -42,7 +42,7 @@ export interface DocumentHistoryData {
     }>;
 }
 /**
- * Document-grain audit log for a single document (docs/AUDIT.md — Workstream
+ * Document-grain audit log for a single document (docs/06-auth-and-security/02-auditability.md — Workstream
  * 3, "Document history" tab): a chronological, newest-first list of the
  * non-versioned changes the version stream does not record — path /
  * available-locales writes, in-place status transitions, and the deletion

package/dist/admin-shell/collections/history.d.ts

@@ -15,7 +15,7 @@ export declare const HistoryView: ({ collectionDefinition, adminConfig, data, au
     data: AnyCollectionSchemaTypes["HistoryType"] & {
         /**
          * Audit display labels (the acting user per version), resolved admin-side from each
-         * version's `createdBy` id (see docs/AUDIT.md — Workstream 1). Ids
+         * version's `createdBy` id (see docs/06-auth-and-security/02-auditability.md — Workstream 1). Ids
          * absent from the map belong to deleted users.
          */
         actors?: Record<string, {
@@ -23,7 +23,7 @@ export declare const HistoryView: ({ collectionDefinition, adminConfig, data, au
         }>;
     };
     /**
-     * Document-grain audit log for the "Document history" tab (docs/AUDIT.md —
+     * Document-grain audit log for the "Document history" tab (docs/06-auth-and-security/02-auditability.md —
      * Workstream 3): the non-versioned path / available-locales / status
      * changes and the deletion event, with admin-resolved actor labels.
      */

package/dist/admin-shell/collections/tree-list-projection.d.ts

@@ -7,7 +7,7 @@
  */
 /**
  * Pure projection helpers for the drag-to-reorder / re-parent tree list
- * (docs/DOCUMENT-TREE.md, phase 2). Adapted from the dnd-kit "sortable tree"
+ * (docs/04-collections/03-document-trees.md, phase 2). Adapted from the dnd-kit "sortable tree"
  * pattern: a pre-order flattened list where the drag's **horizontal** offset
  * projects a target depth, clamped to what the neighbouring rows allow, and the
  * target parent + sibling neighbours are resolved from that depth.

package/dist/server-fns/admin-activity/index.d.ts

@@ -6,7 +6,7 @@
  * Copyright (c) Infonomic Company Limited
  */
 /**
- * Admin-activity server fns (docs/AUDIT.md — Workstream 4) — the
+ * Admin-activity server fns (docs/06-auth-and-security/02-auditability.md — Workstream 4) — the
  * system-wide activity report. Reads the adapter's audit queries directly
  * (cross-collection, includes admin-realm rows) behind the
  * `admin.activity.read` gate, rather than routing through a per-document

package/package.json

@@ -3,7 +3,7 @@
   "private": false,
   "type": "module",
   "license": "MPL-2.0",
-  "version": "3.15.2",
+  "version": "3.16.1",
   "engines": {
     "node": ">=20.9.0"
   },
@@ -119,13 +119,13 @@
     "react-swipeable": "^7.0.2",
     "uuid": "^14.0.0",
     "zod": "^4.4.3",
-    "@byline/admin": "3.15.2",
-    "@byline/client": "3.15.2",
-    "@byline/core": "3.15.2",
-    "@byline/ai": "3.15.2",
-    "@byline/i18n": "3.15.2",
-    "@byline/ui": "3.15.2",
-    "@byline/auth": "3.15.2"
+    "@byline/admin": "3.16.1",
+    "@byline/ai": "3.16.1",
+    "@byline/i18n": "3.16.1",
+    "@byline/auth": "3.16.1",
+    "@byline/ui": "3.16.1",
+    "@byline/client": "3.16.1",
+    "@byline/core": "3.16.1"
   },
   "peerDependencies": {
     "@tanstack/react-router": "^1.167.0",

package/src/admin-shell/admin-activity/list.tsx

@@ -53,7 +53,7 @@ function formatAuditValue(value: unknown): string {
 }
 
 /**
- * The system-wide activity report (docs/AUDIT.md — Workstream 4): a paged,
+ * The system-wide activity report (docs/06-auth-and-security/02-auditability.md — Workstream 4): a paged,
  * filterable feed over the union of the version stream (content saves) and the
  * audit log (status / path / locale changes, deletions, and future admin-realm
  * events). Read-only; gated by `admin.activity.read`.

package/src/admin-shell/collections/document-history.tsx

@@ -16,7 +16,7 @@ import styles from './document-history.module.css'
  * One serialised audit-log entry as it reaches the admin UI. Mirrors
  * `@byline/client`'s `AuditLogEntry` but with `occurredAt` as an ISO string —
  * the value crosses the TanStack server-fn boundary through `serialise()`,
- * which turns Dates into strings (docs/AUDIT.md — Workstream 3).
+ * which turns Dates into strings (docs/06-auth-and-security/02-auditability.md — Workstream 3).
  */
 export interface AuditLogEntryView {
   id: string
@@ -62,7 +62,7 @@ function formatAuditValue(value: unknown): string {
 }
 
 /**
- * Document-grain audit log for a single document (docs/AUDIT.md — Workstream
+ * Document-grain audit log for a single document (docs/06-auth-and-security/02-auditability.md — Workstream
  * 3, "Document history" tab): a chronological, newest-first list of the
  * non-versioned changes the version stream does not record — path /
  * available-locales writes, in-place status transitions, and the deletion

package/src/admin-shell/collections/edit.tsx

@@ -410,7 +410,7 @@ export const EditView = ({
       // Document-grain system fields write first via their own non-versioned
       // path — so a path conflict surfaces before we mint a content version,
       // and these immediate writes never reset workflow status. See
-      // docs/I18N.md.
+      // docs/07-internationalization/index.md.
       if (pathDirty || availableLocalesDirty) {
         await updateCollectionDocumentSystemFields({
           data: {

package/src/admin-shell/collections/history.tsx

@@ -122,13 +122,13 @@ export const HistoryView = ({
   data: AnyCollectionSchemaTypes['HistoryType'] & {
     /**
      * Audit display labels (the acting user per version), resolved admin-side from each
-     * version's `createdBy` id (see docs/AUDIT.md — Workstream 1). Ids
+     * version's `createdBy` id (see docs/06-auth-and-security/02-auditability.md — Workstream 1). Ids
      * absent from the map belong to deleted users.
      */
     actors?: Record<string, { label: string }>
   }
   /**
-   * Document-grain audit log for the "Document history" tab (docs/AUDIT.md —
+   * Document-grain audit log for the "Document history" tab (docs/06-auth-and-security/02-auditability.md —
    * Workstream 3): the non-versioned path / available-locales / status
    * changes and the deletion event, with admin-resolved actor labels.
    */
@@ -152,7 +152,7 @@ export const HistoryView = ({
   const titleFieldName = collectionDefinition.useAsTitle
   const location = useRouterState({ select: (s) => s.location })
   const locale = (location.search as { locale?: string }).locale
-  // Which sub-view is active (docs/AUDIT.md — W3). Absent / anything but
+  // Which sub-view is active (docs/06-auth-and-security/02-auditability.md — W3). Absent / anything but
   // 'document' → the content version stream.
   const activeTab =
     (location.search as { tab?: string }).tab === 'document' ? 'document' : 'versions'
@@ -293,7 +293,7 @@ export const HistoryView = ({
                     const versionNumber = desc
                       ? total - (page - 1) * pageSize - rowIndex
                       : (page - 1) * pageSize + rowIndex + 1
-                    // Audit strip (docs/AUDIT.md — W1): who created this
+                    // Audit strip (docs/06-auth-and-security/02-auditability.md — W1): who created this
                     // version, via which action. A present-but-unresolved id
                     // is a deleted user; an absent id is a row written before
                     // audit wiring or an internal-tooling write.

package/src/admin-shell/collections/tree-list-projection.ts

@@ -8,7 +8,7 @@
 
 /**
  * Pure projection helpers for the drag-to-reorder / re-parent tree list
- * (docs/DOCUMENT-TREE.md, phase 2). Adapted from the dnd-kit "sortable tree"
+ * (docs/04-collections/03-document-trees.md, phase 2). Adapted from the dnd-kit "sortable tree"
  * pattern: a pre-order flattened list where the drag's **horizontal** offset
  * projects a target depth, clamped to what the neighbouring rows allow, and the
  * target parent + sibling neighbours are resolved from that depth.

package/src/routes/create-collection-history-route.tsx

@@ -32,7 +32,7 @@ const searchSchema = z.object({
   order: z.string().optional(),
   desc: z.coerce.boolean().optional(),
   locale: z.string().optional(),
-  // Which sub-view of the history page is active (docs/AUDIT.md — Workstream
+  // Which sub-view of the history page is active (docs/06-auth-and-security/02-auditability.md — Workstream
   // 3). 'versions' is the content version stream; 'document' is the
   // document-grain audit log. Absent → 'versions'.
   tab: z.enum(['versions', 'document']).optional(),

package/src/server-fns/admin-activity/get.ts

@@ -17,7 +17,7 @@ import { type ActorLabelMap, resolveActorLabels } from '../collections/actors.js
 import type { AuditLogEntryDto } from '../collections/audit.js'
 
 // ---------------------------------------------------------------------------
-// System-wide activity report (docs/AUDIT.md — Workstream 4)
+// System-wide activity report (docs/06-auth-and-security/02-auditability.md — Workstream 4)
 // ---------------------------------------------------------------------------
 
 /** Filters for the activity feed. `from` / `to` are ISO strings over the wire. */

package/src/server-fns/admin-activity/index.ts

@@ -7,7 +7,7 @@
  */
 
 /**
- * Admin-activity server fns (docs/AUDIT.md — Workstream 4) — the
+ * Admin-activity server fns (docs/06-auth-and-security/02-auditability.md — Workstream 4) — the
  * system-wide activity report. Reads the adapter's audit queries directly
  * (cross-collection, includes admin-realm rows) behind the
  * `admin.activity.read` gate, rather than routing through a per-document

package/src/server-fns/collections/actors.ts

@@ -7,7 +7,7 @@
  */
 
 /**
- * Audit actor-label resolution (docs/AUDIT.md — Workstream 1).
+ * Audit actor-label resolution (docs/06-auth-and-security/02-auditability.md — Workstream 1).
  *
  * Shaped documents carry only the raw `createdBy` uuid; turning ids into
  * display labels is an **admin-realm** concern, so it happens here — in

package/src/server-fns/collections/audit.ts

@@ -45,7 +45,7 @@ export interface AuditLogEntryDto {
 }
 
 // ---------------------------------------------------------------------------
-// Get document-grain audit log (docs/AUDIT.md — Workstream 3)
+// Get document-grain audit log (docs/06-auth-and-security/02-auditability.md — Workstream 3)
 // ---------------------------------------------------------------------------
 
 export const getCollectionDocumentAuditLog = createServerFn({ method: 'GET' })
@@ -69,7 +69,7 @@ export const getCollectionDocumentAuditLog = createServerFn({ method: 'GET' })
       pageSize: params?.page_size,
     })
 
-    // Acting-user labels for the audit list (docs/AUDIT.md — W3). Resolved
+    // Acting-user labels for the audit list (docs/06-auth-and-security/02-auditability.md — W3). Resolved
     // here, in the admin realm, from each entry's raw `actorId`; the UI joins
     // by id. System/tooling rows (NULL actorId) and deleted users are absent
     // from the map — the UI renders the corresponding tombstone label.

package/src/server-fns/collections/get.ts

@@ -157,7 +157,7 @@ const getDocumentFn = createServerFn({ method: 'GET' })
     //   `availableLocales`          — the stored editorial set → initialises the
     //                                 form-context slot / the checked state.
     //   `_availableVersionLocales`  — the ledger fact → drives each row's intent.
-    // See docs/I18N.md.
+    // See docs/07-internationalization/index.md.
     const availableLocales = (serialised as Record<string, any>).availableLocales as
       | string[]
       | undefined

package/src/server-fns/collections/history.ts

@@ -61,7 +61,7 @@ export const getCollectionDocumentHistory = createServerFn({ method: 'GET' })
     const serialised = serialise(result)
     const { history } = getCollectionSchemasForPath(path)
 
-    // Acting-user labels for the audit strip (docs/AUDIT.md — W1).
+    // Acting-user labels for the audit strip (docs/06-auth-and-security/02-auditability.md — W1).
     // Resolved here, in the admin realm, from the page's raw `createdBy`
     // ids; the UI joins by id. Deleted users are absent from the map.
     const actors: ActorLabelMap = await resolveActorLabels(result.docs.map((d) => d.createdBy))

package/src/server-fns/collections/tree.ts

@@ -11,7 +11,7 @@
  * behind the sidebar tree-placement widget. Thin wrappers over the
  * `@byline/client` tree API, which asserts the actor ability, enforces the
  * cycle / same-collection invariants, and fires the `afterTreeChange`
- * invalidation hook. See docs/DOCUMENT-TREE.md.
+ * invalidation hook. See docs/04-collections/03-document-trees.md.
  */
 
 import { createServerFn } from '@tanstack/react-start'

package/src/server-fns/collections/update.ts

@@ -22,7 +22,7 @@ import { ensureCollection } from '../../integrations/api-utils.js'
 // Document-grain system fields (`path`, `availableLocales`) are deliberately
 // NOT handled here: they are written through their own non-versioned path
 // (`updateCollectionDocumentSystemFields` below) so that editing them does not
-// mint a new version or reset workflow status. See docs/I18N.md.
+// mint a new version or reset workflow status. See docs/07-internationalization/index.md.
 // ---------------------------------------------------------------------------
 
 export const updateCollectionDocumentWithPatches = createServerFn({ method: 'POST' })