@byline/host-tanstack-start 5.0.0 → 5.1.0

package/dist/server-fns/admin-roles/update.d.ts

@@ -14,7 +14,9 @@ export interface UpdateAdminRoleInput {
         order?: number;
     };
 }
-export declare const updateAdminRole: import("@tanstack/react-start").RequiredFetcher<undefined, (input: UpdateAdminRoleInput) => UpdateAdminRoleInput, Promise<{
+export declare const updateAdminRole: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: UpdateAdminRoleInput) => UpdateAdminRoleInput, Promise<{
     id: string;
     vid: number;
     name: string;

package/dist/server-fns/admin-roles/update.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { updateAdminRoleCommand } from "@byline/admin/admin-roles";
 import { getAdminRequestContext } from "@byline/client/server";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const updateAdminRole = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const context = await getAdminRequestContext();
     return updateAdminRoleCommand(context, data, {
         store: bylineCore().adminStore

package/dist/server-fns/admin-users/create.d.ts

@@ -15,7 +15,9 @@ export interface CreateAdminUserInput {
     is_enabled?: boolean;
     is_email_verified?: boolean;
 }
-export declare const createAdminUser: import("@tanstack/react-start").RequiredFetcher<undefined, (input: CreateAdminUserInput) => CreateAdminUserInput, Promise<{
+export declare const createAdminUser: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: CreateAdminUserInput) => CreateAdminUserInput, Promise<{
     id: string;
     vid: number;
     email: string;

package/dist/server-fns/admin-users/create.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { createAdminUserCommand } from "@byline/admin/admin-users";
 import { getAdminRequestContext } from "@byline/client/server";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const createAdminUser = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const context = await getAdminRequestContext();
     return createAdminUserCommand(context, data, {
         store: bylineCore().adminStore

package/dist/server-fns/admin-users/delete.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const deleteAdminUser: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const deleteAdminUser: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     id: string;
     vid: number;
 }) => {

package/dist/server-fns/admin-users/delete.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { deleteAdminUserCommand } from "@byline/admin/admin-users";
 import { getAdminRequestContext } from "@byline/client/server";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const deleteAdminUser = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const context = await getAdminRequestContext();
     return deleteAdminUserCommand(context, data, {
         store: bylineCore().adminStore

package/dist/server-fns/admin-users/disable.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const disableAdminUser: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const disableAdminUser: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     id: string;
 }) => {
     id: string;

package/dist/server-fns/admin-users/disable.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { disableAdminUserCommand } from "@byline/admin/admin-users";
 import { getAdminRequestContext } from "@byline/client/server";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const disableAdminUser = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const context = await getAdminRequestContext();
     return disableAdminUserCommand(context, data, {
         store: bylineCore().adminStore

package/dist/server-fns/admin-users/enable.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const enableAdminUser: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const enableAdminUser: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     id: string;
 }) => {
     id: string;

package/dist/server-fns/admin-users/enable.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { enableAdminUserCommand } from "@byline/admin/admin-users";
 import { getAdminRequestContext } from "@byline/client/server";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const enableAdminUser = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const context = await getAdminRequestContext();
     return enableAdminUserCommand(context, data, {
         store: bylineCore().adminStore

package/dist/server-fns/admin-users/get-user-roles.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const getUserRoles: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const getUserRoles: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     userId: string;
 }) => {
     userId: string;

package/dist/server-fns/admin-users/get-user-roles.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { getRolesForUserCommand } from "@byline/admin/admin-roles";
 import { getAdminRequestContext } from "@byline/client/server";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const getUserRoles = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const context = await getAdminRequestContext();
     return getRolesForUserCommand(context, data, {
         store: bylineCore().adminStore

package/dist/server-fns/admin-users/get.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const getAdminUser: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const getAdminUser: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     id: string;
 }) => {
     id: string;

package/dist/server-fns/admin-users/get.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { getAdminUserCommand } from "@byline/admin/admin-users";
 import { getAdminRequestContext } from "@byline/client/server";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const getAdminUser = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const context = await getAdminRequestContext();
     return getAdminUserCommand(context, data, {
         store: bylineCore().adminStore

package/dist/server-fns/admin-users/index.d.ts

@@ -15,13 +15,13 @@
  */
 export type { UserRolesResponse } from '@byline/admin/admin-roles';
 export type { AdminUserListOrder, AdminUserListResponse, AdminUserResponse, OkResponse, } from '@byline/admin/admin-users';
-export { type CreateAdminUserInput, createAdminUser } from './create';
-export { deleteAdminUser } from './delete';
-export { disableAdminUser } from './disable';
-export { enableAdminUser } from './enable';
-export { getAdminUser } from './get';
-export { getUserRoles } from './get-user-roles';
-export { type ListAdminUsersInput, listAdminUsers } from './list';
-export { type SetAdminUserPasswordInput, setAdminUserPassword } from './set-password';
-export { type SetUserRolesInput, setUserRoles } from './set-user-roles';
-export { type UpdateAdminUserInput, updateAdminUser } from './update';
+export { type CreateAdminUserInput, createAdminUser } from './create.js';
+export { deleteAdminUser } from './delete.js';
+export { disableAdminUser } from './disable.js';
+export { enableAdminUser } from './enable.js';
+export { getAdminUser } from './get.js';
+export { getUserRoles } from './get-user-roles.js';
+export { type ListAdminUsersInput, listAdminUsers } from './list.js';
+export { type SetAdminUserPasswordInput, setAdminUserPassword } from './set-password.js';
+export { type SetUserRolesInput, setUserRoles } from './set-user-roles.js';
+export { type UpdateAdminUserInput, updateAdminUser } from './update.js';

package/dist/server-fns/admin-users/list.d.ts

@@ -20,7 +20,9 @@ export interface ListAdminUsersInput {
  * cookies, pass the `AdminStore` in, and let errors propagate to the
  * TanStack Start transport layer for the client to branch on.
  */
-export declare const listAdminUsers: import("@tanstack/react-start").RequiredFetcher<undefined, (input: ListAdminUsersInput) => ListAdminUsersInput, Promise<{
+export declare const listAdminUsers: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: ListAdminUsersInput) => ListAdminUsersInput, Promise<{
     users: {
         id: string;
         vid: number;

package/dist/server-fns/admin-users/list.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { listAdminUsersCommand } from "@byline/admin/admin-users";
 import { getAdminRequestContext } from "@byline/client/server";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const listAdminUsers = createServerFn({
     method: 'GET'
-}).validator((input)=>input ?? {}).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input ?? {}).handler(async ({ data })=>{
     const context = await getAdminRequestContext();
     return listAdminUsersCommand(context, data, {
         store: bylineCore().adminStore

package/dist/server-fns/admin-users/set-password.d.ts

@@ -10,7 +10,9 @@ export interface SetAdminUserPasswordInput {
     vid: number;
     password: string;
 }
-export declare const setAdminUserPassword: import("@tanstack/react-start").RequiredFetcher<undefined, (input: SetAdminUserPasswordInput) => SetAdminUserPasswordInput, Promise<{
+export declare const setAdminUserPassword: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: SetAdminUserPasswordInput) => SetAdminUserPasswordInput, Promise<{
     id: string;
     vid: number;
     email: string;

package/dist/server-fns/admin-users/set-password.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { setAdminUserPasswordCommand } from "@byline/admin/admin-users";
 import { getAdminRequestContext } from "@byline/client/server";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const setAdminUserPassword = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const context = await getAdminRequestContext();
     return setAdminUserPasswordCommand(context, data, {
         store: bylineCore().adminStore

package/dist/server-fns/admin-users/set-user-roles.d.ts

@@ -9,7 +9,9 @@ export interface SetUserRolesInput {
     userId: string;
     roleIds: string[];
 }
-export declare const setUserRoles: import("@tanstack/react-start").RequiredFetcher<undefined, (input: SetUserRolesInput) => SetUserRolesInput, Promise<{
+export declare const setUserRoles: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: SetUserRolesInput) => SetUserRolesInput, Promise<{
     userId: string;
     roles: {
         id: string;

package/dist/server-fns/admin-users/set-user-roles.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { setRolesForUserCommand } from "@byline/admin/admin-roles";
 import { getAdminRequestContext } from "@byline/client/server";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const setUserRoles = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const context = await getAdminRequestContext();
     return setRolesForUserCommand(context, data, {
         store: bylineCore().adminStore

package/dist/server-fns/admin-users/update.d.ts

@@ -17,7 +17,9 @@ export interface UpdateAdminUserInput {
         is_email_verified?: boolean;
     };
 }
-export declare const updateAdminUser: import("@tanstack/react-start").RequiredFetcher<undefined, (input: UpdateAdminUserInput) => UpdateAdminUserInput, Promise<{
+export declare const updateAdminUser: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: UpdateAdminUserInput) => UpdateAdminUserInput, Promise<{
     id: string;
     vid: number;
     email: string;

package/dist/server-fns/admin-users/update.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { updateAdminUserCommand } from "@byline/admin/admin-users";
 import { getAdminRequestContext } from "@byline/client/server";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const updateAdminUser = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const context = await getAdminRequestContext();
     return updateAdminUserCommand(context, data, {
         store: bylineCore().adminStore

package/dist/server-fns/ai/execute.d.ts

@@ -15,5 +15,7 @@ type ExecuteAiInstructionInput = {
     params: ExecuteInstructionParams;
     options?: Omit<ExecuteInstructionOptions, 'signal'>;
 };
-export declare const executeAiInstruction: import("@tanstack/react-start").RequiredFetcher<undefined, (input: ExecuteAiInstructionInput) => ExecuteAiInstructionInput, Promise<Response>>;
+export declare const executeAiInstruction: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: ExecuteAiInstructionInput) => ExecuteAiInstructionInput, Promise<Response>>;
 export {};

package/dist/server-fns/ai/execute.js

@@ -1,9 +1,12 @@
 import { createServerFn } from "@tanstack/react-start";
 import { executeInstruction, executeInstructionStreaming } from "@byline/ai/server";
 import { getAdminRequestContext } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const executeAiInstruction = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     await getAdminRequestContext();
     if (data.options?.streaming) {
         const streamResult = executeInstructionStreaming(data.params, data.options);

package/dist/server-fns/ai/index.d.ts

@@ -12,4 +12,4 @@
  * `aiFetchAdapter` in `@byline/host-tanstack-start/integrations/byline-ai`
  * that wraps `executeAiInstruction` so the plugins remain transport-agnostic.
  */
-export { executeAiInstruction } from './execute';
+export { executeAiInstruction } from './execute.js';

package/dist/server-fns/analytics/maintenance.d.ts

@@ -10,10 +10,14 @@ export interface DeleteAnalyticsEventsInput {
     to: string;
     visitorHash?: string;
 }
-export declare const deleteAnalyticsEvents: import("@tanstack/react-start").RequiredFetcher<undefined, (input: DeleteAnalyticsEventsInput) => DeleteAnalyticsEventsInput, Promise<{
+export declare const deleteAnalyticsEvents: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: DeleteAnalyticsEventsInput) => DeleteAnalyticsEventsInput, Promise<{
     deleted: number;
 }>>;
-export declare const rebuildAnalyticsDay: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const rebuildAnalyticsDay: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     day: string;
 }) => {
     day: string;

package/dist/server-fns/analytics/maintenance.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { assertAdminActor } from "@byline/admin";
 import { ANALYTICS_ABILITIES } from "@byline/admin/analytics";
 import { getAdminRequestContext } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const deleteAnalyticsEvents = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     await assertAnalyticsMaintenance();
     const { getAnalytics } = await import("@byline/analytics");
     const from = parseInstant(data.from, 'from');
@@ -22,7 +25,9 @@ const deleteAnalyticsEvents = createServerFn({
 });
 const rebuildAnalyticsDay = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     await assertAnalyticsMaintenance();
     const { getAnalytics } = await import("@byline/analytics");
     await getAnalytics().rebuildDay(data.day);

package/dist/server-fns/analytics/queries.d.ts

@@ -13,13 +13,25 @@ export interface AnalyticsTopInput extends AnalyticsDateRange {
 export interface AnalyticsRuntimeState {
     enabled: boolean;
 }
-export declare const getAnalyticsRuntime: import("@tanstack/react-start").OptionalFetcher<undefined, undefined, Promise<AnalyticsRuntimeState>>;
-export declare const getAnalyticsSummary: import("@tanstack/react-start").RequiredFetcher<undefined, (input: AnalyticsDateRange) => AnalyticsDateRange, Promise<AnalyticsSummary>>;
-export declare const getAnalyticsReportCoverage: import("@tanstack/react-start").OptionalFetcher<undefined, undefined, Promise<AnalyticsReportCoverage>>;
-export declare const getAnalyticsTop: import("@tanstack/react-start").RequiredFetcher<undefined, (input: AnalyticsTopInput) => AnalyticsTopInput, Promise<AnalyticsRankedTotals<AnalyticsPathTotal>>>;
-export declare const getAnalyticsReferrers: import("@tanstack/react-start").RequiredFetcher<undefined, (input: AnalyticsDateRange & {
+export declare const getAnalyticsRuntime: import("@tanstack/react-start").OptionalFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], undefined, Promise<AnalyticsRuntimeState>>;
+export declare const getAnalyticsSummary: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: AnalyticsDateRange) => AnalyticsDateRange, Promise<AnalyticsSummary>>;
+export declare const getAnalyticsReportCoverage: import("@tanstack/react-start").OptionalFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], undefined, Promise<AnalyticsReportCoverage>>;
+export declare const getAnalyticsTop: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: AnalyticsTopInput) => AnalyticsTopInput, Promise<AnalyticsRankedTotals<AnalyticsPathTotal>>>;
+export declare const getAnalyticsReferrers: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: AnalyticsDateRange & {
     limit?: number;
 }) => AnalyticsDateRange & {
     limit?: number;
 }, Promise<AnalyticsRankedTotals<AnalyticsReferrerTotal>>>;
-export declare const getAnalyticsCountries: import("@tanstack/react-start").RequiredFetcher<undefined, (input: AnalyticsDateRange) => AnalyticsDateRange, Promise<AnalyticsCountryTotal[]>>;
+export declare const getAnalyticsCountries: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: AnalyticsDateRange) => AnalyticsDateRange, Promise<AnalyticsCountryTotal[]>>;

package/dist/server-fns/analytics/queries.js

@@ -2,9 +2,12 @@ import { createServerFn } from "@tanstack/react-start";
 import { assertAdminActor, requireAdminActor } from "@byline/admin";
 import { ANALYTICS_ABILITIES } from "@byline/admin/analytics";
 import { getAdminRequestContext } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const getAnalyticsRuntime = createServerFn({
     method: 'GET'
-}).handler(async ()=>{
+}).middleware([
+    adminSessionMiddleware
+]).handler(async ()=>{
     const context = await getAdminRequestContext();
     requireAdminActor(context, 'reading analytics runtime state');
     const { isAnalyticsRegistered } = await import("@byline/analytics");
@@ -14,35 +17,45 @@ const getAnalyticsRuntime = createServerFn({
 });
 const getAnalyticsSummary = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     await assertAnalyticsRead();
     const { getAnalytics } = await import("@byline/analytics");
     return getAnalytics().getSummary(data);
 });
 const getAnalyticsReportCoverage = createServerFn({
     method: 'GET'
-}).handler(async ()=>{
+}).middleware([
+    adminSessionMiddleware
+]).handler(async ()=>{
     await assertAnalyticsRead();
     const { getAnalytics } = await import("@byline/analytics");
     return getAnalytics().getReportCoverage();
 });
 const getAnalyticsTop = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     await assertAnalyticsRead();
     const { getAnalytics } = await import("@byline/analytics");
     return getAnalytics().getTopPaths(data);
 });
 const getAnalyticsReferrers = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     await assertAnalyticsRead();
     const { getAnalytics } = await import("@byline/analytics");
     return getAnalytics().getReferrers(data);
 });
 const getAnalyticsCountries = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     await assertAnalyticsRead();
     const { getAnalytics } = await import("@byline/analytics");
     return getAnalytics().getCountries(data);

package/dist/server-fns/auth/current-user.d.ts

@@ -6,6 +6,7 @@
  * Copyright (c) Infonomic Company Limited
  */
 export interface CurrentAdminUser {
+    sessionId: string;
     id: string;
     email: string;
     given_name: string | null;

package/dist/server-fns/auth/current-user.js

@@ -5,11 +5,12 @@ import { bylineCore } from "../../integrations/byline-core.js";
 const getCurrentAdminUser = createServerFn({
     method: 'GET'
 }).handler(async ()=>{
-    const { actor } = await getAdminRequestContext();
+    const { actor, sessionId } = await getAdminRequestContext();
     if (!actor) throw new Error('unexpected null actor after getAdminRequestContext');
     const row = await bylineCore().adminStore?.adminUsers.getById(actor.id);
     if (!row) throw new Error('admin user not found for current session');
     return {
+        sessionId: sessionId,
         id: row.id,
         email: row.email,
         given_name: row.given_name,
@@ -23,8 +24,9 @@ const getCurrentAdminUserSoft = createServerFn({
 }).handler(async ()=>{
     try {
         let actor;
+        let sessionId;
         try {
-            ({ actor } = await getAdminRequestContext());
+            ({ actor, sessionId } = await getAdminRequestContext());
         } catch (err) {
             if (err instanceof AuthError) return null;
             throw err;
@@ -33,6 +35,7 @@ const getCurrentAdminUserSoft = createServerFn({
         const row = await bylineCore().adminStore?.adminUsers.getById(actor.id);
         if (!row) return null;
         return {
+            sessionId: sessionId,
             id: row.id,
             email: row.email,
             given_name: row.given_name,

package/dist/server-fns/auth/renew.d.ts

@@ -0,0 +1,13 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+/** Explicit renewal only. Global CSRF protection applies before this POST handler. */
+export declare const renewAdminSession: import("@tanstack/react-start").OptionalFetcher<undefined, (value: unknown) => {
+    expectedSessionId?: string;
+}, Promise<{
+    sessionId: string;
+}>>;

package/dist/server-fns/auth/renew.js

@@ -0,0 +1,45 @@
+import { createServerFn } from "@tanstack/react-start";
+import { setResponseHeader } from "@tanstack/react-start/server";
+import { AuthError, ERR_SESSION_CHANGED, ERR_UNAUTHENTICATED } from "@byline/auth";
+import { readAccessTokenCookie, readRefreshTokenCookie, setSessionCookies } from "@byline/client/server";
+import { getServerConfig } from "@byline/core";
+const renewAdminSession = createServerFn({
+    method: 'POST'
+}).validator((value)=>{
+    if (null == value) return {};
+    if ('object' != typeof value) throw new Error('Invalid renewal input');
+    const sid = value.expectedSessionId;
+    if (void 0 !== sid && ('string' != typeof sid || !sid || sid.length > 256)) throw new Error('Invalid login identity');
+    return {
+        expectedSessionId: sid
+    };
+}).handler(async ({ data })=>{
+    setResponseHeader('Cache-Control', 'no-store');
+    const provider = getServerConfig().sessionProvider;
+    if (!provider) throw new Error('no sessionProvider configured');
+    const access = readAccessTokenCookie();
+    if (access) try {
+        const verified = await provider.verifyAccessToken(access);
+        if (data.expectedSessionId && data.expectedSessionId !== verified.sessionId) throw ERR_SESSION_CHANGED({
+            message: 'session changed'
+        });
+        return {
+            sessionId: verified.sessionId
+        };
+    } catch (error) {
+        if (!(error instanceof AuthError) || 'ERR_ACCESS_EXPIRED' !== error.code) throw error;
+    }
+    const refreshToken = readRefreshTokenCookie();
+    if (!refreshToken) throw ERR_UNAUTHENTICATED({
+        message: 'no session to renew'
+    });
+    const tokens = await provider.refreshSession({
+        refreshToken,
+        expectedSessionId: data.expectedSessionId
+    });
+    setSessionCookies(tokens);
+    return {
+        sessionId: tokens.sessionId
+    };
+});
+export { renewAdminSession };

package/dist/server-fns/auth/sign-in.d.ts

@@ -11,8 +11,9 @@ export interface SignInInput {
 }
 export interface SignInResult {
     userId: string;
+    sessionId: string;
 }
-export declare const adminSignIn: import("@tanstack/react-start").RequiredFetcher<undefined, (input: SignInInput) => {
+export declare const adminSignIn: import("@tanstack/react-start").OptionalFetcher<undefined, (input: unknown) => {
     email: string;
     password: string;
 }, Promise<SignInResult>>;