@byline/host-tanstack-start 4.7.0 → 4.9.0

package/dist/admin-shell/admin-activity/list.d.ts

@@ -1,6 +1,6 @@
 import type { SystemActivityResponse } from '../../server-fns/admin-activity/index.js';
 /**
- * The system-wide activity report (docs/06-auth-and-security/02-auditability.md — Workstream 4): a paged,
+ * The system-wide activity report (docs/07-auth-and-security/02-auditability.md — Workstream 4): a paged,
  * filterable feed over the union of the version stream (content saves) and the
  * audit log (status / path / locale changes, deletions, and future admin-realm
  * events). Read-only; gated by `admin.activity.read`.

package/dist/admin-shell/collections/document-history.d.ts

@@ -9,7 +9,7 @@
  * One serialised audit-log entry as it reaches the admin UI. Mirrors
  * `@byline/client`'s `AuditLogEntry` but with `occurredAt` as an ISO string —
  * the value crosses the TanStack server-fn boundary through `serialise()`,
- * which turns Dates into strings (docs/06-auth-and-security/02-auditability.md — Workstream 3).
+ * which turns Dates into strings (docs/07-auth-and-security/02-auditability.md — Workstream 3).
  */
 export interface AuditLogEntryView {
     id: string;
@@ -42,7 +42,7 @@ export interface DocumentHistoryData {
     }>;
 }
 /**
- * Document-grain audit log for a single document (docs/06-auth-and-security/02-auditability.md — Workstream
+ * Document-grain audit log for a single document (docs/07-auth-and-security/02-auditability.md — Workstream
  * 3, "Document history" tab): a chronological, newest-first list of the
  * non-versioned changes the version stream does not record — path /
  * available-locales writes, in-place status transitions, and the deletion

package/dist/admin-shell/collections/history.d.ts

@@ -15,7 +15,7 @@ export declare const HistoryView: ({ collectionDefinition, adminConfig, data, au
     data: AnyCollectionSchemaTypes['HistoryType'] & {
         /**
          * Audit display labels (the acting user per version), resolved admin-side from each
-         * version's `createdBy` id (see docs/06-auth-and-security/02-auditability.md — Workstream 1). Ids
+         * version's `createdBy` id (see docs/07-auth-and-security/02-auditability.md — Workstream 1). Ids
          * absent from the map belong to deleted users.
          */
         actors?: Record<string, {
@@ -23,7 +23,7 @@ export declare const HistoryView: ({ collectionDefinition, adminConfig, data, au
         }>;
     };
     /**
-     * Document-grain audit log for the "Document history" tab (docs/06-auth-and-security/02-auditability.md —
+     * Document-grain audit log for the "Document history" tab (docs/07-auth-and-security/02-auditability.md —
      * Workstream 3): the non-versioned path / available-locales / status
      * changes and the deletion event, with admin-resolved actor labels.
      */

package/dist/admin-shell/collections/reindex-button.d.ts

@@ -18,7 +18,7 @@
  * Permission-gated both ends: hidden unless the actor holds
  * `collections.<path>.reindex` (the same ability the server fn re-asserts).
  * Synchronous — fine for small/medium collections; a large corpus wants a
- * backgrounded job (see docs/05-reading-and-delivery/07-search.md).
+ * backgrounded job (see docs/06-search/02-indexing-and-reindexing.md).
  */
 import type React from 'react';
 import type { ListActionComponentProps } from '@byline/core';

package/dist/server-fns/admin-activity/index.d.ts

@@ -6,7 +6,7 @@
  * Copyright (c) Infonomic Company Limited
  */
 /**
- * Admin-activity server fns (docs/06-auth-and-security/02-auditability.md — Workstream 4) — the
+ * Admin-activity server fns (docs/07-auth-and-security/02-auditability.md — Workstream 4) — the
  * system-wide activity report. Reads the adapter's audit queries directly
  * (cross-collection, includes admin-realm rows) behind the
  * `admin.activity.read` gate, rather than routing through a per-document

package/package.json

@@ -3,7 +3,7 @@
   "private": false,
   "type": "module",
   "license": "MPL-2.0",
-  "version": "4.7.0",
+  "version": "4.9.0",
   "engines": {
     "node": ">=20.9.0"
   },
@@ -114,17 +114,16 @@
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/sortable": "^10.0.0",
     "classnames": "^2.5.1",
-    "npm-run-all": "^4.1.5",
     "react-json-view-lite": "^2.5.0",
     "react-swipeable": "^7.0.2",
     "zod": "^4.4.3",
-    "@byline/admin": "4.7.0",
-    "@byline/ai": "4.7.0",
-    "@byline/auth": "4.7.0",
-    "@byline/ui": "4.7.0",
-    "@byline/core": "4.7.0",
-    "@byline/client": "4.7.0",
-    "@byline/i18n": "4.7.0"
+    "@byline/ai": "4.9.0",
+    "@byline/i18n": "4.9.0",
+    "@byline/core": "4.9.0",
+    "@byline/auth": "4.9.0",
+    "@byline/admin": "4.9.0",
+    "@byline/ui": "4.9.0",
+    "@byline/client": "4.9.0"
   },
   "peerDependencies": {
     "@tanstack/react-router": "^1.167.0",
@@ -143,6 +142,7 @@
     "@types/react": "19.2.17",
     "@types/react-dom": "19.2.3",
     "lightningcss": "^1.32.0",
+    "npm-run-all": "^4.1.5",
     "react": "^19.2.7",
     "react-dom": "^19.2.7",
     "rimraf": "^6.1.3",

package/src/admin-shell/admin-activity/list.tsx

@@ -63,7 +63,7 @@ function formatAuditValue(value: unknown): string {
 }
 
 /**
- * The system-wide activity report (docs/06-auth-and-security/02-auditability.md — Workstream 4): a paged,
+ * The system-wide activity report (docs/07-auth-and-security/02-auditability.md — Workstream 4): a paged,
  * filterable feed over the union of the version stream (content saves) and the
  * audit log (status / path / locale changes, deletions, and future admin-realm
  * events). Read-only; gated by `admin.activity.read`.

package/src/admin-shell/collections/document-history.tsx

@@ -16,7 +16,7 @@ import styles from './document-history.module.css'
  * One serialised audit-log entry as it reaches the admin UI. Mirrors
  * `@byline/client`'s `AuditLogEntry` but with `occurredAt` as an ISO string —
  * the value crosses the TanStack server-fn boundary through `serialise()`,
- * which turns Dates into strings (docs/06-auth-and-security/02-auditability.md — Workstream 3).
+ * which turns Dates into strings (docs/07-auth-and-security/02-auditability.md — Workstream 3).
  */
 export interface AuditLogEntryView {
   id: string
@@ -67,7 +67,7 @@ function formatAuditValue(value: unknown): string {
 }
 
 /**
- * Document-grain audit log for a single document (docs/06-auth-and-security/02-auditability.md — Workstream
+ * Document-grain audit log for a single document (docs/07-auth-and-security/02-auditability.md — Workstream
  * 3, "Document history" tab): a chronological, newest-first list of the
  * non-versioned changes the version stream does not record — path /
  * available-locales writes, in-place status transitions, and the deletion

package/src/admin-shell/collections/edit.tsx

@@ -428,7 +428,7 @@ export const EditView = ({
       // Document-grain system fields write first via their own non-versioned
       // path — so a path conflict surfaces before we mint a content version,
       // and these immediate writes never reset workflow status. See
-      // docs/07-internationalization/index.md.
+      // docs/08-internationalization/index.md.
       if (pathDirty || availableLocalesDirty) {
         await updateCollectionDocumentSystemFields({
           data: {

package/src/admin-shell/collections/history.tsx

@@ -123,13 +123,13 @@ export const HistoryView = ({
   data: AnyCollectionSchemaTypes['HistoryType'] & {
     /**
      * Audit display labels (the acting user per version), resolved admin-side from each
-     * version's `createdBy` id (see docs/06-auth-and-security/02-auditability.md — Workstream 1). Ids
+     * version's `createdBy` id (see docs/07-auth-and-security/02-auditability.md — Workstream 1). Ids
      * absent from the map belong to deleted users.
      */
     actors?: Record<string, { label: string }>
   }
   /**
-   * Document-grain audit log for the "Document history" tab (docs/06-auth-and-security/02-auditability.md —
+   * Document-grain audit log for the "Document history" tab (docs/07-auth-and-security/02-auditability.md —
    * Workstream 3): the non-versioned path / available-locales / status
    * changes and the deletion event, with admin-resolved actor labels.
    */
@@ -153,7 +153,7 @@ export const HistoryView = ({
   const titleFieldName = collectionDefinition.useAsTitle
   const location = useRouterState({ select: (s) => s.location })
   const locale = (location.search as { locale?: string }).locale
-  // Which sub-view is active (docs/06-auth-and-security/02-auditability.md — W3). Absent / anything but
+  // Which sub-view is active (docs/07-auth-and-security/02-auditability.md — W3). Absent / anything but
   // 'document' → the content version stream.
   const activeTab =
     (location.search as { tab?: string }).tab === 'document' ? 'document' : 'versions'
@@ -294,7 +294,7 @@ export const HistoryView = ({
                     const versionNumber = desc
                       ? total - (page - 1) * pageSize - rowIndex
                       : (page - 1) * pageSize + rowIndex + 1
-                    // Audit strip (docs/06-auth-and-security/02-auditability.md — W1): who created this
+                    // Audit strip (docs/07-auth-and-security/02-auditability.md — W1): who created this
                     // version, via which action. A present-but-unresolved id
                     // is a deleted user; an absent id is a row written before
                     // audit wiring or an internal-tooling write.

package/src/admin-shell/collections/reindex-button.tsx

@@ -19,7 +19,7 @@
  * Permission-gated both ends: hidden unless the actor holds
  * `collections.<path>.reindex` (the same ability the server fn re-asserts).
  * Synchronous — fine for small/medium collections; a large corpus wants a
- * backgrounded job (see docs/05-reading-and-delivery/07-search.md).
+ * backgrounded job (see docs/06-search/02-indexing-and-reindexing.md).
  */
 
 import type React from 'react'

package/src/routes/create-collection-history-route.tsx

@@ -33,7 +33,7 @@ const searchSchema = z.object({
   order: z.string().optional(),
   desc: z.coerce.boolean().optional(),
   locale: z.string().optional(),
-  // Which sub-view of the history page is active (docs/06-auth-and-security/02-auditability.md — Workstream
+  // Which sub-view of the history page is active (docs/07-auth-and-security/02-auditability.md — Workstream
   // 3). 'versions' is the content version stream; 'document' is the
   // document-grain audit log. Absent → 'versions'.
   tab: z.enum(['versions', 'document']).optional(),

package/src/server-fns/admin-activity/get.ts

@@ -17,7 +17,7 @@ import { type ActorLabelMap, resolveActorLabels } from '../collections/actors.js
 import type { AuditLogEntryDto } from '../collections/audit.js'
 
 // ---------------------------------------------------------------------------
-// System-wide activity report (docs/06-auth-and-security/02-auditability.md — Workstream 4)
+// System-wide activity report (docs/07-auth-and-security/02-auditability.md — Workstream 4)
 // ---------------------------------------------------------------------------
 
 /** Filters for the activity feed. `from` / `to` are ISO strings over the wire. */

package/src/server-fns/admin-activity/index.ts

@@ -7,7 +7,7 @@
  */
 
 /**
- * Admin-activity server fns (docs/06-auth-and-security/02-auditability.md — Workstream 4) — the
+ * Admin-activity server fns (docs/07-auth-and-security/02-auditability.md — Workstream 4) — the
  * system-wide activity report. Reads the adapter's audit queries directly
  * (cross-collection, includes admin-realm rows) behind the
  * `admin.activity.read` gate, rather than routing through a per-document

package/src/server-fns/collections/actors.ts

@@ -7,7 +7,7 @@
  */
 
 /**
- * Audit actor-label resolution (docs/06-auth-and-security/02-auditability.md — Workstream 1).
+ * Audit actor-label resolution (docs/07-auth-and-security/02-auditability.md — Workstream 1).
  *
  * Shaped documents carry only the raw `createdBy` uuid; turning ids into
  * display labels is an **admin-realm** concern, so it happens here — in

package/src/server-fns/collections/audit.ts

@@ -45,7 +45,7 @@ export interface AuditLogEntryDto {
 }
 
 // ---------------------------------------------------------------------------
-// Get document-grain audit log (docs/06-auth-and-security/02-auditability.md — Workstream 3)
+// Get document-grain audit log (docs/07-auth-and-security/02-auditability.md — Workstream 3)
 // ---------------------------------------------------------------------------
 
 export const getCollectionDocumentAuditLog = createServerFn({ method: 'GET' })
@@ -69,7 +69,7 @@ export const getCollectionDocumentAuditLog = createServerFn({ method: 'GET' })
       pageSize: params?.page_size,
     })
 
-    // Acting-user labels for the audit list (docs/06-auth-and-security/02-auditability.md — W3). Resolved
+    // Acting-user labels for the audit list (docs/07-auth-and-security/02-auditability.md — W3). Resolved
     // here, in the admin realm, from each entry's raw `actorId`; the UI joins
     // by id. System/tooling rows (NULL actorId) and deleted users are absent
     // from the map — the UI renders the corresponding tombstone label.

package/src/server-fns/collections/get.ts

@@ -157,7 +157,7 @@ const getDocumentFn = createServerFn({ method: 'GET' })
     //   `availableLocales`          — the stored editorial set → initialises the
     //                                 form-context slot / the checked state.
     //   `_availableVersionLocales`  — the ledger fact → drives each row's intent.
-    // See docs/07-internationalization/index.md.
+    // See docs/08-internationalization/index.md.
     const availableLocales = (serialised as Record<string, any>).availableLocales as
       | string[]
       | undefined

package/src/server-fns/collections/history.ts

@@ -61,7 +61,7 @@ export const getCollectionDocumentHistory = createServerFn({ method: 'GET' })
     const serialised = serialise(result)
     const { history } = getCollectionSchemasForPath(path)
 
-    // Acting-user labels for the audit strip (docs/06-auth-and-security/02-auditability.md — W1).
+    // Acting-user labels for the audit strip (docs/07-auth-and-security/02-auditability.md — W1).
     // Resolved here, in the admin realm, from the page's raw `createdBy`
     // ids; the UI joins by id. Deleted users are absent from the map.
     const actors: ActorLabelMap = await resolveActorLabels(result.docs.map((d) => d.createdBy))

package/src/server-fns/collections/reindex.ts

@@ -15,7 +15,7 @@
  * though the button is also permission-gated in the UI.
  *
  * Synchronous today (fine for small/medium collections). A large corpus wants
- * this backgrounded with progress — see docs/05-reading-and-delivery/07-search.md
+ * this backgrounded with progress — see docs/06-search/02-indexing-and-reindexing.md
  * ("reindex cost").
  */
 

package/src/server-fns/collections/update.ts

@@ -22,7 +22,7 @@ import { ensureCollection } from '../../integrations/api-utils.js'
 // Document-grain system fields (`path`, `availableLocales`) are deliberately
 // NOT handled here: they are written through their own non-versioned path
 // (`updateCollectionDocumentSystemFields` below) so that editing them does not
-// mint a new version or reset workflow status. See docs/07-internationalization/index.md.
+// mint a new version or reset workflow status. See docs/08-internationalization/index.md.
 // ---------------------------------------------------------------------------
 
 export const updateCollectionDocumentWithPatches = createServerFn({ method: 'POST' })