@byline/host-tanstack-start 3.21.0 → 4.1.0

package/src/server-fns/collections/tree.ts

@@ -16,10 +16,12 @@
 
 import { createServerFn } from '@tanstack/react-start'
 
-import { ERR_NOT_FOUND, getLogger } from '@byline/core'
+import { getAdminBylineClient } from '@byline/client/server'
+import { createReadContext, ERR_NOT_FOUND, getLogger } from '@byline/core'
 
 import { ensureCollection } from '../../integrations/api-utils.js'
-import { getAdminBylineClient } from '../../integrations/byline-client.js'
+import { placeAdminTreeNode, removeAdminTreeNode } from './tree-mutation.js'
+import { getAdminTreeParent, getAdminUnplacedTreeDocuments } from './tree-read.js'
 
 // ---------------------------------------------------------------------------
 // Place / move a node within the tree (place / reorder / re-parent)
@@ -33,6 +35,7 @@ export const placeTreeNode = createServerFn({ method: 'POST' })
       parentDocumentId: string | null
       beforeDocumentId?: string | null
       afterDocumentId?: string | null
+      reconcile?: boolean
     }) => input
   )
   .handler(async ({ data }) => {
@@ -45,10 +48,11 @@ export const placeTreeNode = createServerFn({ method: 'POST' })
       }).log(getLogger())
     }
     const handle = getAdminBylineClient().collection(path)
-    const result = await handle.placeTreeNode(documentId, {
+    const result = await placeAdminTreeNode(handle, documentId, {
       parentDocumentId: data.parentDocumentId,
       beforeDocumentId: data.beforeDocumentId ?? null,
       afterDocumentId: data.afterDocumentId ?? null,
+      reconcile: data.reconcile,
     })
     return { status: 'ok' as const, orderKey: result.orderKey }
   })
@@ -58,7 +62,7 @@ export const placeTreeNode = createServerFn({ method: 'POST' })
 // ---------------------------------------------------------------------------
 
 export const removeFromTree = createServerFn({ method: 'POST' })
-  .validator((input: { collection: string; documentId: string }) => input)
+  .validator((input: { collection: string; documentId: string; reconcile?: boolean }) => input)
   .handler(async ({ data }) => {
     const { collection: path, documentId } = data
     const config = await ensureCollection(path)
@@ -68,7 +72,9 @@ export const removeFromTree = createServerFn({ method: 'POST' })
         details: { collectionPath: path },
       }).log(getLogger())
     }
-    await getAdminBylineClient().collection(path).removeFromTree(documentId)
+    await removeAdminTreeNode(getAdminBylineClient().collection(path), documentId, {
+      reconcile: data.reconcile,
+    })
     return { status: 'ok' as const }
   })
 
@@ -118,7 +124,7 @@ export const getTreeParent = createServerFn({ method: 'GET' })
         details: { collectionPath: path },
       }).log(getLogger())
     }
-    return getAdminBylineClient().collection(path).getTreeParent(documentId)
+    return getAdminTreeParent(getAdminBylineClient().collection(path), documentId)
   })
 
 // ---------------------------------------------------------------------------
@@ -154,8 +160,19 @@ export const getCollectionTree = createServerFn({ method: 'GET' })
       }).log(getLogger())
     }
     const handle = getAdminBylineClient().collection(path)
-
-    const forest = await handle.getSubtree({ status: 'any', locale: data.locale })
+    // Shared deliberately across the structural and unplaced reads: the
+    // beforeRead predicate cache is per-ReadContext, so sharing gives both
+    // halves one predicate snapshot — a time-dependent predicate (embargo
+    // cutoff) evaluated twice could otherwise disagree between the placed
+    // forest and the unplaced list. The request-memoized context factory
+    // keeps this sharing safe (one request authority per request).
+    const readContext = createReadContext()
+
+    const forest = await handle.getSubtree({
+      status: 'any',
+      locale: data.locale,
+      _readContext: readContext,
+    })
     const rows: CollectionTreeRow[] = []
     const placed = new Set<string>()
     const walk = (nodes: typeof forest, depth: number, parentId: string | null): void => {
@@ -180,9 +197,8 @@ export const getCollectionTree = createServerFn({ method: 'GET' })
 
     // Surface documents not yet in the tree (e.g. freshly created) so they
     // remain reachable. Trees are small by design, so a single wide read is fine.
-    const all = await handle.find({ status: 'any', pageSize: 1000, _bypassBeforeRead: true })
-    for (const doc of all.docs) {
-      if (placed.has(doc.id)) continue
+    const unplaced = await getAdminUnplacedTreeDocuments(handle, placed, readContext, data.locale)
+    for (const doc of unplaced) {
       rows.push({
         id: doc.id,
         parentId: null,

package/src/server-fns/collections/update.ts

@@ -8,12 +8,12 @@
 
 import { createServerFn } from '@tanstack/react-start'
 
+import { getAdminRequestContext } from '@byline/client/server'
 import { ERR_NOT_FOUND, getLogger, getServerConfig } from '@byline/core'
 import type { DocumentPatch } from '@byline/core/patches'
 import type { DocumentLifecycleContext } from '@byline/core/services'
 import { updateDocumentSystemFields, updateDocumentWithPatches } from '@byline/core/services'
 
-import { getAdminRequestContext } from '../../auth/auth-context.js'
 import { ensureCollection } from '../../integrations/api-utils.js'
 
 // ---------------------------------------------------------------------------
@@ -118,6 +118,9 @@ export const updateCollectionDocumentSystemFields = createServerFn({ method: 'PO
       locale: locale ?? serverConfig.i18n.content.defaultLocale,
       path: explicitPath,
       availableLocales,
+      // A failed after-hook happens after commit. Retrying this same admin save
+      // must re-run cache/search reconciliation when DB values are now current.
+      reconcile: true,
     })
 
     return { status: 'ok' as const }

package/src/server-fns/collections/upload.ts

@@ -1,5 +1,6 @@
 import { createServerFn } from '@tanstack/react-start'
 
+import { getAdminRequestContext } from '@byline/client/server'
 import type {
   CollectionDefinition,
   FieldUploadContext,
@@ -12,7 +13,6 @@ import { extractImageMeta, generateImageVariants, isBypassMimeType } from '@byli
 import { getLogger, withLogContext } from '@byline/core/logger'
 import { uploadField as coreUploadField } from '@byline/core/services'
 
-import { getAdminRequestContext } from '../../auth/auth-context.js'
 import { ensureCollection } from '../../integrations/api-utils.js'
 
 /**

package/src/server-fns/i18n/set-locale.ts

@@ -30,8 +30,8 @@ import { createServerFn } from '@tanstack/react-start'
 import type { AccountResponse } from '@byline/admin/admin-account'
 import { setPreferredLocaleCommand } from '@byline/admin/admin-account'
 import { AuthError, AuthErrorCodes } from '@byline/auth'
+import { getAdminRequestContext } from '@byline/client/server'
 
-import { getAdminRequestContext } from '../../auth/auth-context.js'
 import { clearAdminLocaleCookie, setAdminLocaleCookie } from '../../i18n/locale-cookie.js'
 import { bylineCore } from '../../integrations/byline-core.js'
 

package/src/server-fns/preview/disable.ts

@@ -16,7 +16,7 @@
 
 import { createServerFn } from '@tanstack/react-start'
 
-import { clearPreviewCookie } from '../../auth/preview-cookies.js'
+import { clearPreviewCookie } from '@byline/client/server'
 
 export const disablePreviewModeFn = createServerFn({ method: 'POST' }).handler(async () => {
   clearPreviewCookie()

package/src/server-fns/preview/enable.ts

@@ -17,8 +17,7 @@
 
 import { createServerFn } from '@tanstack/react-start'
 
-import { getAdminRequestContext } from '../../auth/auth-context.js'
-import { setPreviewCookie } from '../../auth/preview-cookies.js'
+import { getAdminRequestContext, setPreviewCookie } from '@byline/client/server'
 
 export const enablePreviewModeFn = createServerFn({ method: 'POST' }).handler(async () => {
   await getAdminRequestContext()

package/src/server-fns/preview/state.ts

@@ -23,7 +23,7 @@
 
 import { createServerFn } from '@tanstack/react-start'
 
-import { readPreviewCookie } from '../../auth/preview-cookies.js'
+import { readPreviewCookie } from '@byline/client/server'
 
 export const getPreviewStateFn = createServerFn({ method: 'GET' }).handler(async () => {
   return { preview: readPreviewCookie() }

package/src/vite/client-hook-boundary.test.node.ts

@@ -0,0 +1,50 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+/**
+ * Unit coverage for the client-bundle guard's module classifier. Production
+ * application builds exercise the Vite plugin itself; these focused cases pin
+ * path normalization and the supported server-only filename conventions.
+ */
+import { describe, expect, it } from 'vitest'
+
+import { findServerHookModules } from './client-hook-boundary.js'
+
+describe('client hook boundary', () => {
+  it('finds collection hook implementations and their shared server graph', () => {
+    expect(
+      findServerHookModules([
+        '/project/byline/collections/docs/hooks.ts',
+        '/project/byline/collections/content-types/publications/file-hooks.ts',
+        '/project/byline/collections/content-types/publications/cover-hooks.tsx',
+        '/project/byline/collections/server-hooks.ts?import',
+        String.raw`C:\project\byline\collections\create-revalidation-lifecycle-hooks.ts`,
+        '/project/byline/collections/events/hooks.mts',
+        '/project/byline/collections/run-webhook-side-effects.ts?worker',
+        '/project/byline/collections/docs/schema.ts',
+      ])
+    ).toEqual([
+      '/project/byline/collections/docs/hooks.ts',
+      '/project/byline/collections/content-types/publications/file-hooks.ts',
+      '/project/byline/collections/content-types/publications/cover-hooks.tsx',
+      '/project/byline/collections/server-hooks.ts?import',
+      String.raw`C:\project\byline\collections\create-revalidation-lifecycle-hooks.ts`,
+      '/project/byline/collections/events/hooks.mts',
+      '/project/byline/collections/run-webhook-side-effects.ts?worker',
+    ])
+  })
+
+  it('allows schemas and unrelated client modules', () => {
+    expect(
+      findServerHookModules([
+        '/project/byline/collections/docs/schema.ts',
+        '/project/src/ui/byline/render-blocks.tsx',
+      ])
+    ).toEqual([])
+  })
+})

package/src/vite/client-hook-boundary.ts

@@ -0,0 +1,45 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+/**
+ * Production client-bundle guard for server-only Byline lifecycle modules.
+ *
+ * Collection schemas are isomorphic, but registered lifecycle hooks may
+ * import Node APIs, caches, storage SDKs, and other server-only dependencies.
+ * This Vite plugin inspects emitted client chunks and fails the build if a
+ * hook implementation, server hook registry, or shared lifecycle helper
+ * becomes reachable from the browser bundle.
+ */
+import type { Plugin } from 'vite'
+
+const SERVER_HOOK_MODULE =
+  /\/byline\/collections\/(?:.+\/)?(?:hooks|[^/]+-hooks|[^/]+-lifecycle-hooks|[^/]+-side-effects)\.[cm]?[jt]sx?$/
+
+export function findServerHookModules(moduleIds: Iterable<string>): string[] {
+  return [...moduleIds].filter((moduleId) => {
+    const normalized = moduleId.replaceAll('\\', '/').split('?', 1)[0]
+    return SERVER_HOOK_MODULE.test(normalized)
+  })
+}
+
+export function bylineClientHookBoundary(): Plugin {
+  return {
+    name: 'byline:client-hook-boundary',
+    generateBundle(_options, bundle) {
+      if (this.environment?.name !== 'client') return
+      const leaked = findServerHookModules(
+        Object.values(bundle).flatMap((output) =>
+          output.type === 'chunk' ? Object.keys(output.modules) : []
+        )
+      )
+      if (leaked.length > 0) {
+        this.error(`server lifecycle modules entered the client bundle:\n${leaked.join('\n')}`)
+      }
+    },
+  }
+}

package/src/vite/index.ts

@@ -0,0 +1,9 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+export { bylineClientHookBoundary } from './client-hook-boundary.js'

package/dist/auth/auth-context.d.ts

@@ -1,37 +0,0 @@
-/**
- * This Source Code is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, You can obtain one at http://mozilla.org/MPL/2.0/.
- *
- * Copyright (c) Infonomic Company Limited
- */
-/**
- * Request-scoped auth context for admin server functions.
- *
- * Reads the session cookies, verifies the access token, transparently
- * refreshes when needed, and returns a `RequestContext` carrying the
- * authenticated `AdminAuth`. Every admin server fn calls this as its
- * first step — it is the single point where the admin transport boundary
- * meets the actor/ability machinery.
- *
- * Flow, in order:
- *
- *   1. Read the access cookie.
- *   2. If present, try `sessionProvider.verifyAccessToken`. On success,
- *      return the context — no DB write, no cookie churn.
- *   3. On verify failure (or missing access cookie), read the refresh
- *      cookie. If present, call `sessionProvider.refreshSession` — this
- *      rotates the refresh token atomically and issues a new access
- *      token. Write both fresh cookies to the response.
- *   4. Verify the new access token (populate the actor) and return the
- *      context.
- *   5. Any failure along the way clears both cookies so the browser
- *      stops sending a session the server has already rejected, and
- *      throws `ERR_UNAUTHENTICATED`.
- *
- * Burns a refresh-token rotation only when the access token actually
- * fails verification — not on every request. The "one session" UX is
- * the consequence of this helper working invisibly behind each call.
- */
-import { type RequestContext } from '@byline/auth';
-export declare function getAdminRequestContext(): Promise<RequestContext>;

package/dist/auth/auth-context.js

@@ -1,57 +0,0 @@
-import { ERR_UNAUTHENTICATED } from "@byline/auth";
-import { getServerConfig } from "@byline/core";
-import { v7 } from "uuid";
-import { clearSessionCookies, readAccessTokenCookie, readRefreshTokenCookie, setSessionCookies } from "./auth-cookies.js";
-function requireSessionProvider() {
-    const provider = getServerConfig().sessionProvider;
-    if (!provider) throw new Error("No sessionProvider configured on ServerConfig. Construct a JwtSessionProvider in your server config and pass it to initBylineCore().");
-    return provider;
-}
-async function getAdminRequestContext() {
-    const provider = requireSessionProvider();
-    const accessToken = readAccessTokenCookie();
-    if (accessToken) try {
-        const { actor } = await provider.verifyAccessToken(accessToken);
-        return {
-            actor,
-            requestId: v7(),
-            readMode: 'any'
-        };
-    } catch  {}
-    const refreshToken = readRefreshTokenCookie();
-    if (!refreshToken) {
-        if (accessToken) clearSessionCookies();
-        throw ERR_UNAUTHENTICATED({
-            message: 'no admin session'
-        });
-    }
-    let refreshed;
-    try {
-        refreshed = await provider.refreshSession({
-            refreshToken
-        });
-    } catch (err) {
-        clearSessionCookies();
-        throw ERR_UNAUTHENTICATED({
-            message: 'admin session could not be refreshed',
-            cause: err
-        });
-    }
-    setSessionCookies(refreshed);
-    let verified;
-    try {
-        verified = await provider.verifyAccessToken(refreshed.accessToken);
-    } catch (err) {
-        clearSessionCookies();
-        throw ERR_UNAUTHENTICATED({
-            message: 'refreshed access token did not verify',
-            cause: err
-        });
-    }
-    return {
-        actor: verified.actor,
-        requestId: v7(),
-        readMode: 'any'
-    };
-}
-export { getAdminRequestContext };

package/dist/auth/auth-cookies.d.ts

@@ -1,34 +0,0 @@
-/**
- * This Source Code is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, You can obtain one at http://mozilla.org/MPL/2.0/.
- *
- * Copyright (c) Infonomic Company Limited
- */
-export declare const ACCESS_TOKEN_COOKIE = "byline_access_token";
-export declare const REFRESH_TOKEN_COOKIE = "byline_refresh_token";
-/** Read the access-token cookie. Returns undefined when not present. */
-export declare function readAccessTokenCookie(): string | undefined;
-/** Read the refresh-token cookie. Returns undefined when not present. */
-export declare function readRefreshTokenCookie(): string | undefined;
-export interface SessionCookieTokens {
-    accessToken: string;
-    refreshToken: string;
-    accessTokenExpiresAt: Date;
-    refreshTokenExpiresAt: Date;
-}
-/**
- * Write both access and refresh cookies. Called after sign-in and after
- * every transparent refresh in `getAdminRequestContext()`.
- *
- * `maxAge` is derived from each token's own expiry claim so the browser
- * drops the cookies at the same moment the server would reject them —
- * saves round trips when the refresh token has fully expired.
- */
-export declare function setSessionCookies(tokens: SessionCookieTokens): void;
-/**
- * Clear both session cookies. Called on sign-out and on any auth failure
- * during `getAdminRequestContext()` (ensures the browser does not keep
- * trying a token that the server has already rejected).
- */
-export declare function clearSessionCookies(): void;

package/dist/auth/auth-cookies.js

@@ -1,46 +0,0 @@
-import { getCookie, setCookie } from "@tanstack/react-start/server";
-const ACCESS_TOKEN_COOKIE = 'byline_access_token';
-const REFRESH_TOKEN_COOKIE = 'byline_refresh_token';
-const IS_PROD = 'production' === process.env.NODE_ENV;
-function readAccessTokenCookie() {
-    return getCookie(ACCESS_TOKEN_COOKIE);
-}
-function readRefreshTokenCookie() {
-    return getCookie(REFRESH_TOKEN_COOKIE);
-}
-function setSessionCookies(tokens) {
-    const now = Date.now();
-    const accessMaxAgeSeconds = Math.max(0, Math.floor((tokens.accessTokenExpiresAt.getTime() - now) / 1000));
-    const refreshMaxAgeSeconds = Math.max(0, Math.floor((tokens.refreshTokenExpiresAt.getTime() - now) / 1000));
-    setCookie(ACCESS_TOKEN_COOKIE, tokens.accessToken, {
-        httpOnly: true,
-        sameSite: 'lax',
-        secure: IS_PROD,
-        path: '/',
-        maxAge: accessMaxAgeSeconds
-    });
-    setCookie(REFRESH_TOKEN_COOKIE, tokens.refreshToken, {
-        httpOnly: true,
-        sameSite: 'lax',
-        secure: IS_PROD,
-        path: '/',
-        maxAge: refreshMaxAgeSeconds
-    });
-}
-function clearSessionCookies() {
-    setCookie(ACCESS_TOKEN_COOKIE, '', {
-        httpOnly: true,
-        sameSite: 'lax',
-        secure: IS_PROD,
-        path: '/',
-        maxAge: 0
-    });
-    setCookie(REFRESH_TOKEN_COOKIE, '', {
-        httpOnly: true,
-        sameSite: 'lax',
-        secure: IS_PROD,
-        path: '/',
-        maxAge: 0
-    });
-}
-export { ACCESS_TOKEN_COOKIE, REFRESH_TOKEN_COOKIE, clearSessionCookies, readAccessTokenCookie, readRefreshTokenCookie, setSessionCookies };

package/dist/auth/preview-cookies.d.ts

@@ -1,19 +0,0 @@
-/**
- * This Source Code is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, You can obtain one at http://mozilla.org/MPL/2.0/.
- *
- * Copyright (c) Infonomic Company Limited
- */
-export declare const PREVIEW_COOKIE = "byline_preview";
-/** True iff the preview cookie is currently set on the request. */
-export declare function readPreviewCookie(): boolean;
-/**
- * Write the preview cookie. Callers should ensure the request is from a
- * valid admin session before invoking — the cookie itself is just a flag
- * and carries no proof of authorisation. See `enablePreviewModeFn` for
- * the canonical entry point.
- */
-export declare function setPreviewCookie(): void;
-/** Clear the preview cookie. Safe to call from any context. */
-export declare function clearPreviewCookie(): void;

package/dist/auth/preview-cookies.js

@@ -1,26 +0,0 @@
-import { getCookie, setCookie } from "@tanstack/react-start/server";
-const PREVIEW_COOKIE = 'byline_preview';
-const PREVIEW_MAX_AGE_SECONDS = 86400;
-const IS_PROD = 'production' === process.env.NODE_ENV;
-function readPreviewCookie() {
-    return '1' === getCookie(PREVIEW_COOKIE);
-}
-function setPreviewCookie() {
-    setCookie(PREVIEW_COOKIE, '1', {
-        httpOnly: true,
-        sameSite: 'lax',
-        secure: IS_PROD,
-        path: '/',
-        maxAge: PREVIEW_MAX_AGE_SECONDS
-    });
-}
-function clearPreviewCookie() {
-    setCookie(PREVIEW_COOKIE, '', {
-        httpOnly: true,
-        sameSite: 'lax',
-        secure: IS_PROD,
-        path: '/',
-        maxAge: 0
-    });
-}
-export { PREVIEW_COOKIE, clearPreviewCookie, readPreviewCookie, setPreviewCookie };

package/dist/integrations/byline-client.d.ts

@@ -1,24 +0,0 @@
-/**
- * This Source Code is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, You can obtain one at http://mozilla.org/MPL/2.0/.
- *
- * Copyright (c) Infonomic Company Limited
- */
-import { type BylineClient } from '@byline/client';
-export declare function getAdminBylineClient(): BylineClient;
-/**
- * A `BylineClient` bound to an explicit super-admin context — for
- * **system / background** work that is not scoped to an HTTP request:
- * lifecycle-hook search indexing, maintenance scripts, seeds, migrations.
- *
- * Unlike {@link getAdminBylineClient}, this does **not** read session
- * cookies, so it works outside the TanStack Start server runtime (a bare
- * `tsx` script, a seed, a test). Reaching for the request-scoped client in
- * a lifecycle hook couples that hook to the live server and throws
- * `No StartEvent found in AsyncLocalStorage` from any out-of-band write
- * path. Indexing is maintenance, not a user action — it reads the published
- * view and bypasses `beforeRead` — so the super-admin context is both
- * correct and runtime-agnostic. The context is auditable by its stable id.
- */
-export declare function getSystemBylineClient(): BylineClient;

package/dist/integrations/byline-client.js

@@ -1,25 +0,0 @@
-import { createSuperAdminContext } from "@byline/auth";
-import { createBylineClient } from "@byline/client";
-import { getServerConfig } from "@byline/core";
-import { getAdminRequestContext } from "../auth/auth-context.js";
-let cachedClient;
-function getAdminBylineClient() {
-    if (cachedClient) return cachedClient;
-    cachedClient = createBylineClient({
-        config: getServerConfig(),
-        requestContext: getAdminRequestContext
-    });
-    return cachedClient;
-}
-let cachedSystemClient;
-function getSystemBylineClient() {
-    if (cachedSystemClient) return cachedSystemClient;
-    cachedSystemClient = createBylineClient({
-        config: getServerConfig(),
-        requestContext: createSuperAdminContext({
-            id: 'byline-system-client'
-        })
-    });
-    return cachedSystemClient;
-}
-export { getAdminBylineClient, getSystemBylineClient };

package/dist/integrations/byline-public-client.js

@@ -1,15 +0,0 @@
-import { createRequestContext } from "@byline/auth";
-import { createBylineClient } from "@byline/client";
-import { getServerConfig } from "@byline/core";
-let cachedClient;
-function getPublicBylineClient() {
-    if (cachedClient) return cachedClient;
-    cachedClient = createBylineClient({
-        config: getServerConfig(),
-        requestContext: ()=>createRequestContext({
-                readMode: 'published'
-            })
-    });
-    return cachedClient;
-}
-export { getPublicBylineClient };

package/dist/integrations/byline-viewer-client.d.ts

@@ -1,20 +0,0 @@
-/**
- * This Source Code is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, You can obtain one at http://mozilla.org/MPL/2.0/.
- *
- * Copyright (c) Infonomic Company Limited
- */
-import { type BylineClient } from '@byline/client';
-export declare function getViewerBylineClient(): BylineClient;
-/**
- * Resolve whether the current request should surface non-published
- * versions. True iff the preview cookie is set **and** a valid admin
- * session resolves. Server fns call this once and pass the result to
- * `status: preview ? 'any' : 'published'` on the SDK read.
- *
- * Defensive by design: the cookie alone is not enough. A signed-out
- * browser carrying an old preview cookie still gets `false` here, which
- * keeps stray query strings or shared links from leaking drafts.
- */
-export declare function isPreviewActive(): Promise<boolean>;

package/dist/integrations/byline-viewer-client.js

@@ -1,39 +0,0 @@
-import { createRequestContext } from "@byline/auth";
-import { createBylineClient } from "@byline/client";
-import { getServerConfig } from "@byline/core";
-import { getAdminRequestContext } from "../auth/auth-context.js";
-import { readPreviewCookie } from "../auth/preview-cookies.js";
-let cachedClient;
-function getViewerBylineClient() {
-    if (cachedClient) return cachedClient;
-    cachedClient = createBylineClient({
-        config: getServerConfig(),
-        requestContext: async ()=>{
-            if (!readPreviewCookie()) return createRequestContext({
-                readMode: 'published'
-            });
-            try {
-                const ctx = await getAdminRequestContext();
-                return {
-                    ...ctx,
-                    readMode: 'any'
-                };
-            } catch  {
-                return createRequestContext({
-                    readMode: 'published'
-                });
-            }
-        }
-    });
-    return cachedClient;
-}
-async function isPreviewActive() {
-    if (!readPreviewCookie()) return false;
-    try {
-        await getAdminRequestContext();
-        return true;
-    } catch  {
-        return false;
-    }
-}
-export { getViewerBylineClient, isPreviewActive };