@byline/host-tanstack-start 5.0.0 → 5.1.0

package/dist/server-fns/collections/reorder.js

@@ -1,11 +1,14 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminRequestContext } from "@byline/client/server";
 import { ERR_NOT_FOUND, getLogger, getServerConfig, reorderDocument } from "@byline/core";
 import { ensureCollection } from "../../integrations/api-utils.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 const reorderCollectionDocument = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data: input })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data: input })=>{
     const { collection: path, documentId, beforeDocumentId, afterDocumentId } = input;
     const logger = getLogger();
     const config = await ensureCollection(path);

package/dist/server-fns/collections/restore-version.d.ts

@@ -1,4 +1,13 @@
-export declare const restoreDocumentVersion: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const restoreDocumentVersion: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     collection: string;
     id: string;

package/dist/server-fns/collections/restore-version.js

@@ -1,13 +1,16 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminRequestContext } from "@byline/client/server";
 import { ERR_NOT_FOUND, getLogger, getServerConfig } from "@byline/core";
 import { restoreDocumentVersion } from "@byline/core/services";
 import { ensureCollection } from "../../integrations/api-utils.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { toCommittedDocumentHookFailureResponse } from "./save-outcome.js";
 const restore_version_restoreDocumentVersion = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data: input })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data: input })=>{
     const { collection: path, id, versionId } = input;
     const logger = getLogger();
     const config = await ensureCollection(path);

package/dist/server-fns/collections/scheduled-publication.d.ts

@@ -1,3 +1,10 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
 import type { DocumentPublishScheduleInfo } from '@byline/client';
 import { type DocumentPublishScheduleState, type RecurringTaskHealth } from '@byline/core';
 export interface ScheduledPublicationRuntime {
@@ -48,8 +55,12 @@ export interface ScheduledPublicationListResponse {
     runtime: ScheduledPublicationRuntime;
 }
 /** Authenticated feature discovery for the admin shell and health warning. */
-export declare const getScheduledPublicationRuntime: import("@tanstack/react-start").OptionalFetcher<undefined, undefined, Promise<ScheduledPublicationRuntime>>;
-export declare const scheduleCollectionDocumentPublish: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const getScheduledPublicationRuntime: import("@tanstack/react-start").OptionalFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], undefined, Promise<ScheduledPublicationRuntime>>;
+export declare const scheduleCollectionDocumentPublish: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     collection: string;
     id: string;
@@ -81,7 +92,9 @@ export declare const scheduleCollectionDocumentPublish: import("@tanstack/react-
     nextAttemptAt: string;
     revision: number;
 }>>;
-export declare const confirmCollectionDocumentScheduledPublish: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const confirmCollectionDocumentScheduledPublish: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     collection: string;
     id: string;
@@ -111,7 +124,9 @@ export declare const confirmCollectionDocumentScheduledPublish: import("@tanstac
     nextAttemptAt: string;
     revision: number;
 }>>;
-export declare const cancelCollectionDocumentScheduledPublish: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const cancelCollectionDocumentScheduledPublish: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     collection: string;
     id: string;
@@ -128,7 +143,9 @@ export declare const cancelCollectionDocumentScheduledPublish: import("@tanstack
     schedule: SerializedDocumentPublishSchedule;
     revision: number;
 }>>;
-export declare const listScheduledPublications: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const listScheduledPublications: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     states?: readonly DocumentPublishScheduleState[];
     lastAuthorizedBy?: string;
     page?: number;

package/dist/server-fns/collections/scheduled-publication.js

@@ -1,9 +1,10 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient, getAdminRequestContext } from "@byline/client/server";
 import { ERR_NOT_FOUND, ERR_VALIDATION, isSingleton } from "@byline/core";
 import { listDocumentPublishSchedules } from "@byline/core/services";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { omitScheduleExecutionState } from "./scheduled-publication-response.js";
 import { serialise } from "./utils.js";
 const TASK_NAME = 'documents.publish-scheduled';
@@ -53,13 +54,17 @@ async function scheduledPublicationRuntime() {
 }
 const getScheduledPublicationRuntime = createServerFn({
     method: 'GET'
-}).handler(withDocumentMutationErrors(async ()=>{
+}).middleware([
+    adminSessionMiddleware
+]).handler(withDocumentMutationErrors(async ()=>{
     await getAdminRequestContext();
     return scheduledPublicationRuntime();
 }));
 const scheduleCollectionDocumentPublish = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     assertFeatureEnabled();
     const schedule = await getAdminBylineClient().collection(data.collection).schedulePublish(data.id, {
         publishAt: data.publishAt,
@@ -73,7 +78,9 @@ const scheduleCollectionDocumentPublish = createServerFn({
 }));
 const confirmCollectionDocumentScheduledPublish = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     assertFeatureEnabled();
     const schedule = await getAdminBylineClient().collection(data.collection).confirmScheduledPublish(data.id, {
         expectedRevision: data.expectedRevision,
@@ -86,7 +93,9 @@ const confirmCollectionDocumentScheduledPublish = createServerFn({
 }));
 const cancelCollectionDocumentScheduledPublish = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     assertFeatureEnabled();
     const schedule = await getAdminBylineClient().collection(data.collection).cancelScheduledPublish(data.id, {
         expectedRevision: data.expectedRevision
@@ -102,7 +111,9 @@ const cancelCollectionDocumentScheduledPublish = createServerFn({
 }));
 const listScheduledPublications = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     assertFeatureEnabled();
     if (data.states?.some((state)=>'armed' !== state && 'needs_reconfirm' !== state) === true) throw ERR_VALIDATION({
         message: 'state must be armed or needs_reconfirm'

package/dist/server-fns/collections/set-list-view-preference.d.ts

@@ -13,6 +13,8 @@ export interface SetListViewPreferenceInput {
         desc?: boolean;
     };
 }
-export declare const setListViewPreference: import("@tanstack/react-start").RequiredFetcher<undefined, (input: SetListViewPreferenceInput) => SetListViewPreferenceInput, Promise<{
+export declare const setListViewPreference: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: SetListViewPreferenceInput) => SetListViewPreferenceInput, Promise<{
     ok: true;
 }>>;

package/dist/server-fns/collections/set-list-view-preference.js

@@ -4,9 +4,12 @@ import { getAdminRequestContext } from "@byline/client/server";
 import { ERR_NOT_FOUND, getLogger } from "@byline/core";
 import { ensureCollection } from "../../integrations/api-utils.js";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const setListViewPreference = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const config = await ensureCollection(data.collection);
     if (!config) throw ERR_NOT_FOUND({
         message: 'Collection not found',

package/dist/server-fns/collections/stats.js

@@ -1,9 +1,12 @@
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
 import { ensureCollection } from "../../integrations/api-utils.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const getCollectionStatsFn = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const config = await ensureCollection(data.collection);
     if (!config) return {
         stats: []

package/dist/server-fns/collections/status.d.ts

@@ -1,4 +1,13 @@
-export declare const updateDocumentStatus: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const updateDocumentStatus: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     collection: string;
     id: string;
@@ -15,7 +24,9 @@ export declare const updateDocumentStatus: import("@tanstack/react-start").Requi
     previousStatus: string;
     newStatus: string;
 }>>;
-export declare const unpublishDocument: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const unpublishDocument: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     collection: string;
     id: string;

package/dist/server-fns/collections/status.js

@@ -1,12 +1,15 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminRequestContext } from "@byline/client/server";
 import { ERR_NOT_FOUND, getLogger, getServerConfig } from "@byline/core";
 import { changeDocumentStatus, unpublishDocument } from "@byline/core/services";
 import { ensureCollection } from "../../integrations/api-utils.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 const updateDocumentStatus = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data: input })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data: input })=>{
     const { collection: path, id, status: nextStatus } = input;
     const logger = getLogger();
     const config = await ensureCollection(path);
@@ -43,7 +46,9 @@ const updateDocumentStatus = createServerFn({
 }));
 const status_unpublishDocument = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data: input })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data: input })=>{
     const { collection: path, id } = input;
     const logger = getLogger();
     const config = await ensureCollection(path);

package/dist/server-fns/collections/tree.d.ts

@@ -1,4 +1,13 @@
-export declare const placeTreeNode: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const placeTreeNode: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     collection: string;
     documentId: string;
@@ -22,7 +31,9 @@ export declare const placeTreeNode: import("@tanstack/react-start").RequiredFetc
     orderKey: string;
     status: 'ok';
 }>>;
-export declare const removeFromTree: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const removeFromTree: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     collection: string;
     documentId: string;
@@ -39,7 +50,9 @@ export declare const removeFromTree: import("@tanstack/react-start").RequiredFet
     scheduledPublicationsNeedReconfirmation: boolean;
     status: 'ok';
 }>>;
-export declare const getTreeAncestors: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const getTreeAncestors: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     collection: string;
     documentId: string;
 }) => {
@@ -50,7 +63,9 @@ export declare const getTreeAncestors: import("@tanstack/react-start").RequiredF
     title: string;
     path: string;
 }[]>>;
-export declare const getTreeParent: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const getTreeParent: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     collection: string;
     documentId: string;
 }) => {
@@ -71,7 +86,9 @@ export interface CollectionTreeRow {
     updatedAt: Date;
     fields: Record<string, any>;
 }
-export declare const getCollectionTree: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const getCollectionTree: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     collection: string;
     locale?: string;
 }) => {

package/dist/server-fns/collections/tree.js

@@ -1,13 +1,16 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
 import { ERR_NOT_FOUND, createReadContext, getLogger } from "@byline/core";
 import { ensureCollection } from "../../integrations/api-utils.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { placeAdminTreeNode, removeAdminTreeNode } from "./tree-mutation.js";
 import { getAdminTreeParent } from "./tree-read.js";
 const placeTreeNode = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     const { collection: path, documentId } = data;
     const config = await ensureCollection(path);
     if (!config) throw ERR_NOT_FOUND({
@@ -31,7 +34,9 @@ const placeTreeNode = createServerFn({
 }));
 const removeFromTree = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     const { collection: path, documentId } = data;
     const config = await ensureCollection(path);
     if (!config) throw ERR_NOT_FOUND({
@@ -51,7 +56,9 @@ const removeFromTree = createServerFn({
 }));
 const getTreeAncestors = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     const { collection: path, documentId } = data;
     const config = await ensureCollection(path);
     if (!config) throw ERR_NOT_FOUND({
@@ -76,7 +83,9 @@ const getTreeAncestors = createServerFn({
 }));
 const getTreeParent = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     const { collection: path, documentId } = data;
     const config = await ensureCollection(path);
     if (!config) throw ERR_NOT_FOUND({
@@ -89,7 +98,9 @@ const getTreeParent = createServerFn({
 }));
 const getCollectionTree = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     const { collection: path } = data;
     const config = await ensureCollection(path);
     if (!config) throw ERR_NOT_FOUND({

package/dist/server-fns/collections/update.d.ts

@@ -1,5 +1,14 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
 import type { DocumentPatch } from '@byline/core/patches';
-export declare const updateCollectionDocumentWithPatches: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const updateCollectionDocumentWithPatches: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     collection: string;
     id: string;
     patches: DocumentPatch[];
@@ -21,7 +30,9 @@ export declare const updateCollectionDocumentWithPatches: import("@tanstack/reac
     documentVersionId?: string | undefined;
     revision: number;
 }>>;
-export declare const updateCollectionDocumentSystemFields: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const updateCollectionDocumentSystemFields: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     collection: string;
     id: string;
     expectedRevision: number;

package/dist/server-fns/collections/update.js

@@ -1,13 +1,16 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminRequestContext } from "@byline/client/server";
 import { ERR_NOT_FOUND, getLogger, getServerConfig } from "@byline/core";
 import { saveDocument, updateDocumentSystemFields } from "@byline/core/services";
 import { ensureCollection } from "../../integrations/api-utils.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { toCommittedDocumentHookFailureResponse } from "./save-outcome.js";
 const updateCollectionDocumentWithPatches = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data: input })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data: input })=>{
     const { collection: path, id, patches, expectedRevision, locale, path: explicitPath, availableLocales } = input;
     const logger = getLogger();
     const config = await ensureCollection(path);
@@ -55,7 +58,9 @@ const updateCollectionDocumentWithPatches = createServerFn({
 }));
 const updateCollectionDocumentSystemFields = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data: input })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data: input })=>{
     const { collection: path, id, expectedRevision, locale, path: explicitPath, availableLocales } = input;
     const logger = getLogger();
     const config = await ensureCollection(path);

package/dist/server-fns/collections/upload.d.ts

@@ -1,3 +1,10 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
 import type { StoredFileValue } from '@byline/core';
 /**
  * Result of an upload through the host transport. The legacy top-level
@@ -36,7 +43,9 @@ declare function parseUploadFormData(data: FormData): UploadDocumentInput;
  * deployments and external clients can use the identical upload orchestration
  * without depending on TanStack Start server-function transport details.
  */
-export declare const uploadCollectionField: import("@tanstack/react-start").RequiredFetcher<undefined, typeof parseUploadFormData, Promise<import("@byline/core").UploadFieldResult>>;
+export declare const uploadCollectionField: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], typeof parseUploadFormData, Promise<import("@byline/core").UploadFieldResult>>;
 /**
  * Upload a file to an upload-enabled collection.
  *

package/dist/server-fns/collections/upload.js

@@ -5,6 +5,7 @@ import { extractImageMeta, generateImageVariants, isBypassMimeType } from "@byli
 import { getLogger, withLogContext } from "@byline/core/logger";
 import { uploadField } from "@byline/core/services";
 import { ensureDocumentResource } from "../../integrations/api-utils.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 function parseUploadFormData(data) {
     if (!(data instanceof FormData)) throw new Error('Expected FormData upload payload.');
@@ -57,7 +58,9 @@ function resolveUploadField(definition, collectionPath, requested) {
 }
 const uploadCollectionField = createServerFn({
     method: 'POST'
-}).validator(parseUploadFormData).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator(parseUploadFormData).handler(withDocumentMutationErrors(async ({ data })=>{
     const { collectionPath, shouldCreateDocument, fieldName, file, fields } = data;
     const logger = getLogger();
     return withLogContext({

package/dist/server-fns/i18n/set-locale.d.ts

@@ -22,4 +22,6 @@ export interface SetAdminLocaleResult {
      */
     account: AccountResponse | null;
 }
-export declare const setAdminLocaleFn: import("@tanstack/react-start").RequiredFetcher<undefined, (input: SetAdminLocaleInput) => SetAdminLocaleInput, Promise<SetAdminLocaleResult>>;
+export declare const setAdminLocaleFn: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterClient<{}, unknown, undefined, {
+    expectedSessionId: string | null;
+}, undefined>], (input: SetAdminLocaleInput) => SetAdminLocaleInput, Promise<SetAdminLocaleResult>>;

package/dist/server-fns/i18n/set-locale.js

@@ -1,12 +1,22 @@
-import { createServerFn } from "@tanstack/react-start";
+import { createMiddleware, createServerFn } from "@tanstack/react-start";
 import { setPreferredLocaleCommand } from "@byline/admin/admin-account";
 import { AuthError, AuthErrorCodes } from "@byline/auth";
 import { getAdminRequestContext } from "@byline/client/server";
 import { clearAdminLocaleCookie, setAdminLocaleCookie } from "../../i18n/locale-cookie.js";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { expectedSession } from "../../integrations/session-coordination.js";
+const localeSession = createMiddleware({
+    type: 'function'
+}).client(({ next })=>next({
+        sendContext: {
+            expectedSessionId: expectedSession()
+        }
+    }));
 const setAdminLocaleFn = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    localeSession
+]).validator((input)=>input).handler(async ({ data, context: caller })=>{
     const core = bylineCore();
     const locales = core.config.i18n.admin.locales;
     if (null != data.locale && !locales.includes(data.locale)) throw new Error(`[setAdminLocaleFn] locale '${data.locale}' is not in i18n.admin.locales [${locales.join(', ')}].`);
@@ -20,6 +30,11 @@ const setAdminLocaleFn = createServerFn({
     };
     try {
         const context = await getAdminRequestContext();
+        if (!caller.expectedSessionId || caller.expectedSessionId !== context.sessionId) return {
+            ok: true,
+            locale: data.locale,
+            account: null
+        };
         const account = await setPreferredLocaleCommand(context, {
             locale: data.locale
         }, {
@@ -31,7 +46,7 @@ const setAdminLocaleFn = createServerFn({
             account
         };
     } catch (err) {
-        if (err instanceof AuthError && err.code === AuthErrorCodes.UNAUTHENTICATED) return {
+        if (err instanceof AuthError && (err.code === AuthErrorCodes.UNAUTHENTICATED || err.code === AuthErrorCodes.ACCESS_EXPIRED)) return {
             ok: true,
             locale: data.locale,
             account: null

package/dist/server-fns/preview/disable.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const disablePreviewModeFn: import("@tanstack/react-start").OptionalFetcher<undefined, undefined, Promise<{
+export declare const disablePreviewModeFn: import("@tanstack/react-start").OptionalFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], undefined, Promise<{
     status: 'ok';
     preview: false;
 }>>;

package/dist/server-fns/preview/disable.js

@@ -1,8 +1,11 @@
 import { createServerFn } from "@tanstack/react-start";
 import { clearPreviewCookie } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const disablePreviewModeFn = createServerFn({
     method: 'POST'
-}).handler(async ()=>{
+}).middleware([
+    adminSessionMiddleware
+]).handler(async ()=>{
     clearPreviewCookie();
     return {
         status: 'ok',

package/dist/server-fns/preview/enable.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const enablePreviewModeFn: import("@tanstack/react-start").OptionalFetcher<undefined, undefined, Promise<{
+export declare const enablePreviewModeFn: import("@tanstack/react-start").OptionalFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], undefined, Promise<{
     status: 'ok';
     preview: true;
 }>>;

package/dist/server-fns/preview/enable.js

@@ -1,8 +1,11 @@
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminRequestContext, setPreviewCookie } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const enablePreviewModeFn = createServerFn({
     method: 'POST'
-}).handler(async ()=>{
+}).middleware([
+    adminSessionMiddleware
+]).handler(async ()=>{
     await getAdminRequestContext();
     setPreviewCookie();
     return {

package/dist/server-fns/singletons/cancel-scheduled-publish.d.ts

@@ -1,4 +1,13 @@
-export declare const cancelSingletonScheduledPublish: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const cancelSingletonScheduledPublish: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
 }) => {

package/dist/server-fns/singletons/cancel-scheduled-publish.js

@@ -1,10 +1,13 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const cancelSingletonScheduledPublish = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).cancelScheduledPublish({
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).cancelScheduledPublish({
         expectedRevision: data.expectedRevision
     }))));
 export { cancelSingletonScheduledPublish };