@byline/host-tanstack-start 5.0.0 → 5.1.1

package/dist/server-fns/collections/upload.d.ts

@@ -1,3 +1,10 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
 import type { StoredFileValue } from '@byline/core';
 /**
  * Result of an upload through the host transport. The legacy top-level
@@ -36,7 +43,9 @@ declare function parseUploadFormData(data: FormData): UploadDocumentInput;
  * deployments and external clients can use the identical upload orchestration
  * without depending on TanStack Start server-function transport details.
  */
-export declare const uploadCollectionField: import("@tanstack/react-start").RequiredFetcher<undefined, typeof parseUploadFormData, Promise<import("@byline/core").UploadFieldResult>>;
+export declare const uploadCollectionField: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], typeof parseUploadFormData, Promise<import("@byline/core").UploadFieldResult>>;
 /**
  * Upload a file to an upload-enabled collection.
  *

package/dist/server-fns/collections/upload.js

@@ -5,6 +5,7 @@ import { extractImageMeta, generateImageVariants, isBypassMimeType } from "@byli
 import { getLogger, withLogContext } from "@byline/core/logger";
 import { uploadField } from "@byline/core/services";
 import { ensureDocumentResource } from "../../integrations/api-utils.js";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 function parseUploadFormData(data) {
     if (!(data instanceof FormData)) throw new Error('Expected FormData upload payload.');
@@ -57,7 +58,9 @@ function resolveUploadField(definition, collectionPath, requested) {
 }
 const uploadCollectionField = createServerFn({
     method: 'POST'
-}).validator(parseUploadFormData).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator(parseUploadFormData).handler(withDocumentMutationErrors(async ({ data })=>{
     const { collectionPath, shouldCreateDocument, fieldName, file, fields } = data;
     const logger = getLogger();
     return withLogContext({

package/dist/server-fns/i18n/set-locale.d.ts

@@ -22,4 +22,6 @@ export interface SetAdminLocaleResult {
      */
     account: AccountResponse | null;
 }
-export declare const setAdminLocaleFn: import("@tanstack/react-start").RequiredFetcher<undefined, (input: SetAdminLocaleInput) => SetAdminLocaleInput, Promise<SetAdminLocaleResult>>;
+export declare const setAdminLocaleFn: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterClient<{}, unknown, undefined, {
+    expectedSessionId: string | null;
+}, undefined>], (input: SetAdminLocaleInput) => SetAdminLocaleInput, Promise<SetAdminLocaleResult>>;

package/dist/server-fns/i18n/set-locale.js

@@ -1,12 +1,22 @@
-import { createServerFn } from "@tanstack/react-start";
+import { createMiddleware, createServerFn } from "@tanstack/react-start";
 import { setPreferredLocaleCommand } from "@byline/admin/admin-account";
 import { AuthError, AuthErrorCodes } from "@byline/auth";
 import { getAdminRequestContext } from "@byline/client/server";
 import { clearAdminLocaleCookie, setAdminLocaleCookie } from "../../i18n/locale-cookie.js";
 import { bylineCore } from "../../integrations/byline-core.js";
+import { expectedSession } from "../../integrations/session-coordination.js";
+const localeSession = createMiddleware({
+    type: 'function'
+}).client(({ next })=>next({
+        sendContext: {
+            expectedSessionId: expectedSession()
+        }
+    }));
 const setAdminLocaleFn = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    localeSession
+]).validator((input)=>input).handler(async ({ data, context: caller })=>{
     const core = bylineCore();
     const locales = core.config.i18n.admin.locales;
     if (null != data.locale && !locales.includes(data.locale)) throw new Error(`[setAdminLocaleFn] locale '${data.locale}' is not in i18n.admin.locales [${locales.join(', ')}].`);
@@ -20,6 +30,11 @@ const setAdminLocaleFn = createServerFn({
     };
     try {
         const context = await getAdminRequestContext();
+        if (!caller.expectedSessionId || caller.expectedSessionId !== context.sessionId) return {
+            ok: true,
+            locale: data.locale,
+            account: null
+        };
         const account = await setPreferredLocaleCommand(context, {
             locale: data.locale
         }, {
@@ -31,7 +46,7 @@ const setAdminLocaleFn = createServerFn({
             account
         };
     } catch (err) {
-        if (err instanceof AuthError && err.code === AuthErrorCodes.UNAUTHENTICATED) return {
+        if (err instanceof AuthError && (err.code === AuthErrorCodes.UNAUTHENTICATED || err.code === AuthErrorCodes.ACCESS_EXPIRED)) return {
             ok: true,
             locale: data.locale,
             account: null

package/dist/server-fns/preview/disable.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const disablePreviewModeFn: import("@tanstack/react-start").OptionalFetcher<undefined, undefined, Promise<{
+export declare const disablePreviewModeFn: import("@tanstack/react-start").OptionalFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], undefined, Promise<{
     status: 'ok';
     preview: false;
 }>>;

package/dist/server-fns/preview/disable.js

@@ -1,8 +1,11 @@
 import { createServerFn } from "@tanstack/react-start";
 import { clearPreviewCookie } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const disablePreviewModeFn = createServerFn({
     method: 'POST'
-}).handler(async ()=>{
+}).middleware([
+    adminSessionMiddleware
+]).handler(async ()=>{
     clearPreviewCookie();
     return {
         status: 'ok',

package/dist/server-fns/preview/enable.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const enablePreviewModeFn: import("@tanstack/react-start").OptionalFetcher<undefined, undefined, Promise<{
+export declare const enablePreviewModeFn: import("@tanstack/react-start").OptionalFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], undefined, Promise<{
     status: 'ok';
     preview: true;
 }>>;

package/dist/server-fns/preview/enable.js

@@ -1,8 +1,11 @@
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminRequestContext, setPreviewCookie } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 const enablePreviewModeFn = createServerFn({
     method: 'POST'
-}).handler(async ()=>{
+}).middleware([
+    adminSessionMiddleware
+]).handler(async ()=>{
     await getAdminRequestContext();
     setPreviewCookie();
     return {

package/dist/server-fns/singletons/cancel-scheduled-publish.d.ts

@@ -1,4 +1,13 @@
-export declare const cancelSingletonScheduledPublish: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const cancelSingletonScheduledPublish: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
 }) => {

package/dist/server-fns/singletons/cancel-scheduled-publish.js

@@ -1,10 +1,13 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const cancelSingletonScheduledPublish = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).cancelScheduledPublish({
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).cancelScheduledPublish({
         expectedRevision: data.expectedRevision
     }))));
 export { cancelSingletonScheduledPublish };

package/dist/server-fns/singletons/change-status.d.ts

@@ -1,4 +1,13 @@
-export declare const changeSingletonStatus: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const changeSingletonStatus: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
     status: string;

package/dist/server-fns/singletons/change-status.js

@@ -1,10 +1,13 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const changeSingletonStatus = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).changeStatus(data.status, {
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).changeStatus(data.status, {
         expectedRevision: data.expectedRevision
     }))));
 export { changeSingletonStatus };

package/dist/server-fns/singletons/confirm-scheduled-publish.d.ts

@@ -1,4 +1,13 @@
-export declare const confirmSingletonScheduledPublish: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const confirmSingletonScheduledPublish: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
     expectedVersionId: string;

package/dist/server-fns/singletons/confirm-scheduled-publish.js

@@ -1,10 +1,13 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const confirmSingletonScheduledPublish = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).confirmScheduledPublish({
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).confirmScheduledPublish({
         expectedRevision: data.expectedRevision,
         expectedVersionId: data.expectedVersionId
     }))));

package/dist/server-fns/singletons/copy-to-locale.d.ts

@@ -1,4 +1,13 @@
-export declare const copySingletonToLocale: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const copySingletonToLocale: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
     sourceLocale: string;

package/dist/server-fns/singletons/copy-to-locale.js

@@ -1,11 +1,14 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { toCommittedDocumentHookFailureResponse } from "../collections/save-outcome.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const copySingletonToLocale = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     try {
         return serialise(await getAdminBylineClient().singleton(data.singleton).copyToLocale({
             expectedRevision: data.expectedRevision,

package/dist/server-fns/singletons/find-by-version.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const findSingletonByVersion: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const findSingletonByVersion: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     singleton: string;
     versionId: string;
     locale?: string;

package/dist/server-fns/singletons/find-by-version.js

@@ -1,9 +1,12 @@
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { serialise } from "../serialise.js";
 const findSingletonByVersion = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).findByVersion(data.versionId, {
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).findByVersion(data.versionId, {
         locale: data.locale ?? 'all'
     })));
 export { findSingletonByVersion };

package/dist/server-fns/singletons/get-scheduled-publish.d.ts

@@ -5,7 +5,9 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export declare const getSingletonScheduledPublish: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const getSingletonScheduledPublish: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     singleton: string;
 }) => {
     singleton: string;

package/dist/server-fns/singletons/get-scheduled-publish.js

@@ -1,7 +1,10 @@
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { serialise } from "../serialise.js";
 const getSingletonScheduledPublish = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).getScheduledPublish()));
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).getScheduledPublish()));
 export { getSingletonScheduledPublish };

package/dist/server-fns/singletons/get.d.ts

@@ -21,4 +21,6 @@ export interface GetSingletonInput {
  *   enablement, capability, and schedule aliases. Schedule state itself comes
  *   from the same editable snapshot as the source document.
  */
-export declare const getSingleton: import("@tanstack/react-start").RequiredFetcher<undefined, (input: GetSingletonInput) => GetSingletonInput, Promise<Omit<import("@byline/client").EditableDocument<Record<string, any>>, "path"> | null>>;
+export declare const getSingleton: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: GetSingletonInput) => GetSingletonInput, Promise<Omit<import("@byline/client").EditableDocument<Record<string, any>>, "path"> | null>>;

package/dist/server-fns/singletons/get.js

@@ -1,6 +1,9 @@
 import { createServerFn } from "@tanstack/react-start";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { readSingletonDocument } from "../singleton-document-read.js";
 const getSingleton = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>readSingletonDocument(data));
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>readSingletonDocument(data));
 export { getSingleton };

package/dist/server-fns/singletons/history.d.ts

@@ -13,7 +13,9 @@ export interface SingletonHistorySearchParams {
     desc?: boolean;
     locale?: string;
 }
-export declare const getSingletonHistory: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+export declare const getSingletonHistory: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     singleton: string;
     params?: SingletonHistorySearchParams;
 }) => {

package/dist/server-fns/singletons/history.js

@@ -1,10 +1,13 @@
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { resolveActorLabels } from "../actors.js";
 import { serialise } from "../serialise.js";
 const getSingletonHistory = createServerFn({
     method: 'GET'
-}).validator((input)=>input).handler(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(async ({ data })=>{
     const params = data.params ?? {};
     const result = await getAdminBylineClient().singleton(data.singleton).history({
         locale: params.locale ?? 'en',

package/dist/server-fns/singletons/restore-version.d.ts

@@ -1,4 +1,13 @@
-export declare const restoreSingletonVersion: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const restoreSingletonVersion: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
     versionId: string;

package/dist/server-fns/singletons/restore-version.js

@@ -1,11 +1,14 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { toCommittedDocumentHookFailureResponse } from "../collections/save-outcome.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const restoreSingletonVersion = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     try {
         return serialise(await getAdminBylineClient().singleton(data.singleton).restoreVersion(data.versionId, {
             expectedRevision: data.expectedRevision

package/dist/server-fns/singletons/schedule-publish.d.ts

@@ -1,4 +1,13 @@
-export declare const scheduleSingletonPublish: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const scheduleSingletonPublish: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
     publishAt: string;

package/dist/server-fns/singletons/schedule-publish.js

@@ -1,10 +1,13 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const scheduleSingletonPublish = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).schedulePublish({
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).schedulePublish({
         publishAt: data.publishAt,
         expectedRevision: data.expectedRevision,
         expectedVersionId: data.expectedVersionId

package/dist/server-fns/singletons/unpublish.d.ts

@@ -1,4 +1,13 @@
-export declare const unpublishSingleton: import("@tanstack/react-start").RequiredFetcher<undefined, (input: {
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare const unpublishSingleton: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: {
     expectedRevision: number;
     singleton: string;
 }) => {

package/dist/server-fns/singletons/unpublish.js

@@ -1,10 +1,13 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const unpublishSingleton = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).unpublish({
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>serialise(await getAdminBylineClient().singleton(data.singleton).unpublish({
         expectedRevision: data.expectedRevision
     }))));
 export { unpublishSingleton };

package/dist/server-fns/singletons/update.d.ts

@@ -1,7 +1,16 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
 import type { SingletonSavePrecondition } from '@byline/core';
 export type UpdateSingletonInput = SingletonSavePrecondition & {
     singleton: string;
     data: Record<string, any>;
     locale?: string;
 };
-export declare const updateSingleton: import("@tanstack/react-start").RequiredFetcher<undefined, (input: UpdateSingletonInput) => UpdateSingletonInput, Promise<import("@byline/core").UpdateSingletonResult>>;
+export declare const updateSingleton: import("@tanstack/react-start").RequiredFetcher<readonly [import("@tanstack/react-start").FunctionMiddlewareAfterServer<{}, unknown, undefined, undefined, {
+    bylineExpectedSessionId: string | null;
+}, undefined, undefined>], (input: UpdateSingletonInput) => UpdateSingletonInput, Promise<import("@byline/core").UpdateSingletonResult>>;

package/dist/server-fns/singletons/update.js

@@ -1,11 +1,14 @@
-import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { createServerFn } from "@tanstack/react-start";
 import { getAdminBylineClient } from "@byline/client/server";
+import { adminSessionMiddleware } from "../../integrations/session-middleware.js";
 import { toCommittedDocumentHookFailureResponse } from "../collections/save-outcome.js";
+import { withDocumentMutationErrors } from "../document-mutation-errors.js";
 import { serialise } from "../serialise.js";
 const updateSingleton = createServerFn({
     method: 'POST'
-}).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
+}).middleware([
+    adminSessionMiddleware
+]).validator((input)=>input).handler(withDocumentMutationErrors(async ({ data })=>{
     const { singleton, data: fields, locale, ...precondition } = data;
     try {
         const result = await getAdminBylineClient().singleton(singleton).update(fields, {

package/package.json

@@ -3,7 +3,7 @@
   "private": false,
   "type": "module",
   "license": "MPL-2.0",
-  "version": "5.0.0",
+  "version": "5.1.1",
   "engines": {
     "node": ">=20.9.0"
   },
@@ -124,16 +124,16 @@
     "clsx": "^2.1.1",
     "react-json-view-lite": "^2.5.0",
     "react-swipeable": "^7.0.2",
-    "zod": "^4.4.3",
-    "@byline/admin": "5.0.0",
-    "@byline/analytics": "5.0.0",
-    "@byline/ai": "5.0.0",
-    "@byline/analytics-agent": "5.0.0",
-    "@byline/core": "5.0.0",
-    "@byline/i18n": "5.0.0",
-    "@byline/ui": "5.0.0",
-    "@byline/client": "5.0.0",
-    "@byline/auth": "5.0.0"
+    "zod": "^4.5.4",
+    "@byline/admin": "5.1.1",
+    "@byline/ai": "5.1.1",
+    "@byline/auth": "5.1.1",
+    "@byline/analytics": "5.1.1",
+    "@byline/analytics-agent": "5.1.1",
+    "@byline/client": "5.1.1",
+    "@byline/core": "5.1.1",
+    "@byline/i18n": "5.1.1",
+    "@byline/ui": "5.1.1"
   },
   "peerDependencies": {
     "@tanstack/react-router": "^1.167.0",
@@ -143,15 +143,15 @@
     "vite": "^8.0.0"
   },
   "devDependencies": {
-    "@biomejs/biome": "2.5.10",
+    "@biomejs/biome": "2.5.12",
     "@rsbuild/plugin-react": "^2.1.0",
-    "@rslib/core": "^0.23.2",
-    "@tanstack/react-router": "^1.170.32",
-    "@tanstack/react-start": "^1.168.49",
-    "@types/node": "^26.4.0",
+    "@rslib/core": "^1.0.0",
+    "@tanstack/react-router": "^1.170.33",
+    "@tanstack/react-start": "^1.168.50",
+    "@types/node": "^26.5.0",
     "@types/react": "19.2.18",
-    "@types/react-dom": "19.2.5",
-    "@vitejs/plugin-react": "^6.1.0",
+    "@types/react-dom": "19.2.7",
+    "@vitejs/plugin-react": "^6.1.1",
     "jsdom": "^30.0.1",
     "npm-run-all": "^4.1.5",
     "react": "^19.2.8",
@@ -159,7 +159,7 @@
     "typescript": "^7.0.2",
     "typescript-plugin-css-modules": "^5.2.0",
     "vite": "^8.2.2",
-    "vitest": "^4.1.11"
+    "vitest": "^5.0.0"
   },
   "publishConfig": {
     "access": "public",