@byline/host-tanstack-start 5.0.0 → 5.1.0

package/dist/server-fns/singletons/change-status.d.ts

@@ -1,4 +1,13 @@
-export declare const changeSingletonStatus: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const changeSingletonStatus: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
     status: string;

package/dist/server-fns/singletons/change-status.js

@@ -1,10 +1,13 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const changeSingletonStatus = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).changeStatus(data.status, {
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).changeStatus(data.status, {
         expectedRevision: data.expectedRevision
     }))));
 export { changeSingletonStatus };

package/dist/server-fns/singletons/confirm-scheduled-publish.d.ts

@@ -1,4 +1,13 @@
-export declare const confirmSingletonScheduledPublish: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const confirmSingletonScheduledPublish: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
     expectedVersionId: string;

package/dist/server-fns/singletons/confirm-scheduled-publish.js

@@ -1,10 +1,13 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const confirmSingletonScheduledPublish = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).confirmScheduledPublish({
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).confirmScheduledPublish({
         expectedRevision: data.expectedRevision,
         expectedVersionId: data.expectedVersionId
     }))));

package/dist/server-fns/singletons/copy-to-locale.d.ts

@@ -1,4 +1,13 @@
-export declare const copySingletonToLocale: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const copySingletonToLocale: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
     sourceLocale: string;

package/dist/server-fns/singletons/copy-to-locale.js

@@ -1,11 +1,14 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { toCommittedDocumentHookFailureResponse } from "../collections/save-outcome.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const copySingletonToLocale = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     try {
         return serialise(await getAdminBylineClient().singleton(data.singleton).copyToLocale({
             expectedRevision: data.expectedRevision,

package/dist/server-fns/singletons/find-by-version.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const findSingletonByVersion: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const findSingletonByVersion: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     singleton: string;
     versionId: string;
     locale?: string;

package/dist/server-fns/singletons/find-by-version.js

@@ -1,9 +1,12 @@
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { serialise } from "../serialise.js";
 const findSingletonByVersion = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).findByVersion(data.versionId, {
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).findByVersion(data.versionId, {
         locale: data.locale ?? 'all'
     })));
 export { findSingletonByVersion };

package/dist/server-fns/singletons/get-scheduled-publish.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const getSingletonScheduledPublish: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const getSingletonScheduledPublish: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     singleton: string;
 }) => {
     singleton: string;

package/dist/server-fns/singletons/get-scheduled-publish.js

@@ -1,7 +1,10 @@
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { serialise } from "../serialise.js";
 const getSingletonScheduledPublish = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).getScheduledPublish()));
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).getScheduledPublish()));
 export { getSingletonScheduledPublish };

package/dist/server-fns/singletons/get.d.ts

@@ -21,4 +21,6 @@ export interface GetSingletonInput {
  *   enablement, capability, and schedule aliases. Schedule state itself comes
  *   from the same editable snapshot as the source document.
  */
-export declare const getSingleton: import("@tanstack/react-start").RequiredFetcher<undefined, (input: GetSingletonInput) => GetSingletonInput, Promise<Omit<import("@byline/client").EditableDocument<Record<string, any>>, "path"> | null>>;
+export declare const getSingleton: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: GetSingletonInput) => GetSingletonInput, Promise<Omit<import("@byline/client").EditableDocument<Record<string, any>>, "path"> | null>>;

package/dist/server-fns/singletons/get.js

@@ -1,6 +1,9 @@
 import { createServerFn } from "@tanstack/react-start";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { readSingletonDocument } from "../singleton-document-read.js";
 const getSingleton = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>readSingletonDocument(data));
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>readSingletonDocument(data));
 export { getSingleton };

package/dist/server-fns/singletons/history.d.ts

@@ -13,7 +13,9 @@ export interface SingletonHistorySearchParams {
     desc?: boolean;
     locale?: string;
 }
-export declare const getSingletonHistory: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const getSingletonHistory: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     singleton: string;
     params?: SingletonHistorySearchParams;
 }) => {

package/dist/server-fns/singletons/history.js

@@ -1,10 +1,13 @@
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { resolveActorLabels } from "../actors.js";
 import { serialise } from "../serialise.js";
 const getSingletonHistory = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const params = data.params ?? {};
     const result = await getAdminBylineClient().singleton(data.singleton).history({
         locale: params.locale ?? 'en',

package/dist/server-fns/singletons/restore-version.d.ts

@@ -1,4 +1,13 @@
-export declare const restoreSingletonVersion: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const restoreSingletonVersion: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
     versionId: string;

package/dist/server-fns/singletons/restore-version.js

@@ -1,11 +1,14 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { toCommittedDocumentHookFailureResponse } from "../collections/save-outcome.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const restoreSingletonVersion = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     try {
         return serialise(await getAdminBylineClient().singleton(data.singleton).restoreVersion(data.versionId, {
             expectedRevision: data.expectedRevision

package/dist/server-fns/singletons/schedule-publish.d.ts

@@ -1,4 +1,13 @@
-export declare const scheduleSingletonPublish: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const scheduleSingletonPublish: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
     publishAt: string;

package/dist/server-fns/singletons/schedule-publish.js

@@ -1,10 +1,13 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const scheduleSingletonPublish = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).schedulePublish({
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).schedulePublish({
         publishAt: data.publishAt,
         expectedRevision: data.expectedRevision,
         expectedVersionId: data.expectedVersionId

package/dist/server-fns/singletons/unpublish.d.ts

@@ -1,4 +1,13 @@
-export declare const unpublishSingleton: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const unpublishSingleton: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
 }) => {

package/dist/server-fns/singletons/unpublish.js

@@ -1,10 +1,13 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const unpublishSingleton = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).unpublish({
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).unpublish({
         expectedRevision: data.expectedRevision
     }))));
 export { unpublishSingleton };

package/dist/server-fns/singletons/update.d.ts

@@ -1,7 +1,16 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
 import type { SingletonSavePrecondition } from '@byline/core';
 export type UpdateSingletonInput = SingletonSavePrecondition & {
     singleton: string;
     data: Record<string, any>;
     locale?: string;
 };
-export declare const updateSingleton: import("@tanstack/react-start").RequiredFetcher<undefined, (input: UpdateSingletonInput) => UpdateSingletonInput, Promise<import("@byline/core").UpdateSingletonResult>>;
+export declare const updateSingleton: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: UpdateSingletonInput) => UpdateSingletonInput, Promise<import("@byline/core").UpdateSingletonResult>>;

package/dist/server-fns/singletons/update.js

@@ -1,11 +1,14 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { toCommittedDocumentHookFailureResponse } from "../collections/save-outcome.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const updateSingleton = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     const { singleton, data: fields, locale, ...precondition } = data;
     try {
         const result = await getAdminBylineClient().singleton(singleton).update(fields, {

package/package.json

@@ -3,7 +3,7 @@
   "private": false,
   "type": "module",
   "license": "MPL-2.0",
-  "version": "5.0.0",
+  "version": "5.1.0",
   "engines": {
     "node": ">=20.9.0"
   },
@@ -124,16 +124,16 @@
     "clsx": "^2.1.1",
     "react-json-view-lite": "^2.5.0",
     "react-swipeable": "^7.0.2",
-    "zod": "^4.4.3",
-    "@byline/admin": "5.0.0",
-    "@byline/analytics": "5.0.0",
-    "@byline/ai": "5.0.0",
-    "@byline/analytics-agent": "5.0.0",
-    "@byline/core": "5.0.0",
-    "@byline/i18n": "5.0.0",
-    "@byline/ui": "5.0.0",
-    "@byline/client": "5.0.0",
-    "@byline/auth": "5.0.0"
+    "zod": "^4.5.4",
+    "@byline/admin": "5.1.0",
+    "@byline/analytics-agent": "5.1.0",
+    "@byline/analytics": "5.1.0",
+    "@byline/client": "5.1.0",
+    "@byline/ai": "5.1.0",
+    "@byline/auth": "5.1.0",
+    "@byline/core": "5.1.0",
+    "@byline/i18n": "5.1.0",
+    "@byline/ui": "5.1.0"
   },
   "peerDependencies": {
     "@tanstack/react-router": "^1.167.0",
@@ -143,15 +143,15 @@
     "vite": "^8.0.0"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.5.10",
+    "@biomejs/biome": "2.5.12",
     "@rsbuild/plugin-react": "^2.1.0",
-    "@rslib/core": "^0.23.2",
-    "@tanstack/react-router": "^1.170.32",
-    "@tanstack/react-start": "^1.168.49",
-    "@types/node": "^26.4.0",
+    "@rslib/core": "^1.0.0",
+    "@tanstack/react-router": "^1.170.33",
+    "@tanstack/react-start": "^1.168.50",
+    "@types/node": "^26.5.0",
     "@types/react": "19.2.18",
-    "@types/react-dom": "19.2.5",
-    "@vitejs/plugin-react": "^6.1.0",
+    "@types/react-dom": "19.2.7",
+    "@vitejs/plugin-react": "^6.1.1",
     "jsdom": "^30.0.1",
     "npm-run-all": "^4.1.5",
     "react": "^19.2.8",
@@ -159,7 +159,7 @@
     "typescript": "^7.0.2",
     "typescript-plugin-css-modules": "^5.2.0",
     "vite": "^8.2.2",
-    "vitest": "^4.1.11"
+    "vitest": "^5.0.0"
   },
   "publishConfig": {
     "access": "public",

package/src/admin-shell/chrome/admin-app-bar.tsx

@@ -1,5 +1,3 @@
-'use client'
-
 /**
  * This Source Code is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
@@ -22,6 +20,8 @@ import { Branding } from './branding.js'
 import { Breadcrumbs } from './breadcrumbs/breadcrumbs.js'
 import { useBreadcrumbs } from './breadcrumbs/breadcrumbs-provider.js'
 
+;('use client')
+
 interface AdminAppBarProps {
   user: CurrentAdminUser
 }
@@ -37,16 +37,18 @@ export function AdminAppBar({ user }: AdminAppBarProps) {
   const { breadCrumbSettings } = useBreadcrumbs()
   const { t } = useTranslation('byline-admin')
   const [signingOut, setSigningOut] = useState(false)
+  const [signOutError, setSignOutError] = useState(false)
 
   async function handleSignOut() {
     if (signingOut) return
     setSigningOut(true)
+    setSignOutError(false)
     try {
       await adminSignOut()
-    } catch (err) {
-      // Even on transport failure, the server-side handler clears the
-      // cookies best-effort. Navigate to sign-in regardless.
-      console.warn('sign-out request failed', err)
+    } catch {
+      setSignOutError(true)
+      setSigningOut(false)
+      return
     }
     // Full-page navigation so the admin guard re-runs with cleared cookies.
     window.location.assign(getSignInRoutePath())
@@ -71,6 +73,9 @@ export function AdminAppBar({ user }: AdminAppBarProps) {
             {displayNameFor(user)}
           </span>
         </span>
+        {signOutError && (
+          <span role="alert">Sign-out could not be confirmed. Please try again.</span>
+        )}
         <Button size="xs" intent="secondary" onClick={handleSignOut} disabled={signingOut}>
           {signingOut ? t('common.actions.signingOut') : t('common.actions.signOut')}
         </Button>

package/src/admin-shell/chrome/session-change-boundary.test.tsx

@@ -0,0 +1,78 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+import { act } from 'react'
+
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+const mocks = vi.hoisted(() => ({ current: vi.fn() }))
+vi.mock('../../server-fns/auth/current-user.js', () => ({ getCurrentAdminUser: mocks.current }))
+vi.mock('../../routes/sign-in-path.js', () => ({ getSignInRoutePath: () => '/sign-in' }))
+
+import { acceptSession, expectedSession } from '../../integrations/session-coordination.js'
+import { SessionChangeBoundary } from './session-change-boundary.js'
+
+const user = (sessionId: string, email: string) => ({
+  sessionId,
+  email,
+  id: email,
+  given_name: null,
+  family_name: null,
+  is_super_admin: false,
+  abilities: [],
+})
+let root: Root
+let container: HTMLDivElement
+beforeEach(() => {
+  vi.clearAllMocks()
+  vi.stubGlobal('IS_REACT_ACT_ENVIRONMENT', true)
+  vi.stubGlobal('BroadcastChannel', undefined)
+  window.sessionStorage.clear()
+  acceptSession('expected-B')
+  container = document.createElement('div')
+  document.body.appendChild(container)
+  root = createRoot(container)
+})
+afterEach(() => {
+  act(() => root.unmount())
+  container.remove()
+  vi.unstubAllGlobals()
+})
+async function render() {
+  await act(async () => {
+    root.render(
+      <SessionChangeBoundary user={user('late-A', 'x@example.test')}>
+        <button type="button">Publish</button>
+      </SessionChangeBoundary>
+    )
+  })
+}
+describe('session-change acknowledgement', () => {
+  it('blocks business UI on the first post-sign-in render when cookies select a different login', async () => {
+    mocks.current.mockResolvedValue(user('late-A', 'x@example.test'))
+    await render()
+    expect(container.textContent).not.toContain('Publish')
+    expect(container.querySelector('[role="alertdialog"]')).not.toBeNull()
+    expect(container.textContent).toContain('Active account: x@example.test')
+    expect(expectedSession()).toBe('expected-B')
+  })
+  it('requires renewed acknowledgement when the server account changes again', async () => {
+    mocks.current.mockResolvedValue(user('late-A', 'x@example.test'))
+    await render()
+    mocks.current.mockResolvedValue(user('new-C', 'z@example.test'))
+    await act(async () => {
+      container.querySelector('button')?.click()
+    })
+    expect(container.textContent).toContain(
+      'The active session changed again. Review the account before continuing.'
+    )
+    expect(expectedSession()).toBe('expected-B')
+    expect(container.textContent).not.toContain('Publish')
+  })
+})

package/src/admin-shell/chrome/session-change-boundary.tsx

@@ -0,0 +1,94 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+
+import { type ReactNode, useEffect, useState, useSyncExternalStore } from 'react'
+
+import {
+  acceptSession,
+  expectedSession,
+  flagSessionChanged,
+  observeSession,
+  sessionEpoch,
+  sessionIsChanged,
+  startSessionNotifications,
+  subscribeSessionChange,
+} from '../../integrations/session-coordination.js'
+import { getSignInRoutePath } from '../../routes/sign-in-path.js'
+import { type CurrentAdminUser, getCurrentAdminUser } from '../../server-fns/auth/current-user.js'
+
+/** Blocks the page until the user explicitly acknowledges freshly verified login identity. */
+export function SessionChangeBoundary({
+  user,
+  children,
+}: {
+  user?: CurrentAdminUser
+  children: ReactNode
+}) {
+  const epoch = useSyncExternalStore(subscribeSessionChange, sessionEpoch, () => 0)
+  const changed = sessionIsChanged()
+  const [current, setCurrent] = useState(user)
+  const [error, setError] = useState<string>()
+  const [busy, setBusy] = useState(false)
+  const mismatch =
+    typeof window !== 'undefined' &&
+    !!user &&
+    !!expectedSession() &&
+    expectedSession() !== user.sessionId
+  useEffect(() => {
+    startSessionNotifications()
+    if (user) {
+      try {
+        observeSession(user.sessionId)
+      } catch {
+        /* Interstitial owns this mismatch. */
+      }
+    }
+  }, [user])
+  useEffect(() => {
+    if (!changed && !mismatch) return
+    void getCurrentAdminUser()
+      .then((verified) => {
+        if (sessionEpoch() !== epoch) return
+        setCurrent(verified)
+        setError(undefined)
+      })
+      .catch(() => setError('The session is no longer available. Please sign in again.'))
+  }, [changed, mismatch, epoch])
+  if (!changed && !mismatch) return children
+  async function acknowledge() {
+    setBusy(true)
+    try {
+      const verified = await getCurrentAdminUser()
+      // Require a second acknowledgement if the identity changed while this interstitial was open.
+      if (!current || current.sessionId !== verified.sessionId) {
+        setCurrent(verified)
+        setError('The active session changed again. Review the account before continuing.')
+        return
+      }
+      acceptSession(verified.sessionId)
+      window.location.reload() // Discard queued edits and old page state; never replay them.
+    } catch {
+      flagSessionChanged()
+      setError('Unable to verify the active session. Please sign in again.')
+    } finally {
+      setBusy(false)
+    }
+  }
+  return (
+    <main role="alertdialog" aria-modal="true" aria-labelledby="session-change-title">
+      <h1 id="session-change-title">Your session has changed</h1>
+      <p>Your previous work has not been retried. Check the active account before continuing.</p>
+      {current && <p>Active account: {current.email}</p>}
+      {error && <p role="alert">{error}</p>}
+      <button type="button" disabled={busy || !current} onClick={acknowledge}>
+        Continue as this account
+      </button>
+      <a href={`${getSignInRoutePath()}?reauthenticate=1`}>Sign in again</a>
+    </main>
+  )
+}