@byline/host-tanstack-start 5.1.2 → 5.1.4

package/dist/admin-shell/chrome/sign-in-page.js

@@ -3,12 +3,13 @@ import { useEffect, useState } from "react";
 import { SignInForm } from "@byline/admin/auth/components/sign-in-form";
 import { BylineAdminServicesProvider } from "@byline/admin/services";
 import { getAdminConfig } from "@byline/core";
-import { I18nProvider, LanguageMenu } from "@byline/i18n/react";
+import { I18nProvider, LanguageMenu, useTranslation } from "@byline/i18n/react";
+import { Alert, Button, Card, LoaderRing } from "@byline/ui/react";
 import clsx from "clsx";
 import { buildLocaleDefinitions } from "../../i18n/locale-definitions.js";
 import { bylineAdminServices } from "../../integrations/byline-admin-services.js";
-import { coordinateAuthAction, expectedSession, flagSessionChanged, observeSession, renewSingleFlight } from "../../integrations/session-coordination.js";
-import { renewAdminSession } from "../../server-fns/auth/renew.js";
+import { flagSessionChanged } from "../../integrations/session-coordination.js";
+import { renewExpectedSession } from "../../integrations/session-renewal.js";
 import { setAdminLocaleFn } from "../../server-fns/i18n/index.js";
 import { SessionChangeBoundary } from "./session-change-boundary.js";
 import sign_in_page_module from "./sign-in-page.module.js";
@@ -18,14 +19,7 @@ function SignInPage({ redirectTo, activeLocale, homeUrl, reauthenticate = false
     useEffect(()=>{
         if (reauthenticate) return;
         let active = true;
-        renewSingleFlight(()=>coordinateAuthAction(async ()=>{
-                const result = await renewAdminSession({
-                    data: {
-                        expectedSessionId: expectedSession() ?? void 0
-                    }
-                });
-                observeSession(result.sessionId);
-            })).then(()=>{
+        renewExpectedSession().then(()=>{
             if (active) window.location.replace(redirectTo);
         }).catch((error)=>{
             if (error?.code === 'ERR_SESSION_CHANGED') flagSessionChanged();
@@ -66,34 +60,19 @@ function SignInPage({ redirectTo, activeLocale, homeUrl, reauthenticate = false
             children: /*#__PURE__*/ jsxs("main", {
                 className: clsx('byline-sign-in-page', sign_in_page_module.main),
                 children: [
-                    /*#__PURE__*/ jsx("noscript", {
-                        children: "JavaScript is required to sign in or renew your admin session."
-                    }),
                     /*#__PURE__*/ jsx("div", {
                         className: clsx('byline-sign-in-page-bar', sign_in_page_module.bar),
                         children: /*#__PURE__*/ jsx(LanguageMenu, {})
                     }),
-                    /*#__PURE__*/ jsx("div", {
+                    /*#__PURE__*/ jsxs("div", {
                         className: clsx('byline-sign-in-page-inner', sign_in_page_module.inner),
-                        children: bootstrapError ? /*#__PURE__*/ jsxs("div", {
-                            role: "alert",
-                            children: [
-                                /*#__PURE__*/ jsx("p", {
-                                    children: "Unable to check your session. Please try again."
-                                }),
-                                /*#__PURE__*/ jsx("button", {
-                                    type: "button",
-                                    onClick: ()=>window.location.reload(),
-                                    children: "Try again"
-                                })
-                            ]
-                        }) : checking ? /*#__PURE__*/ jsx("p", {
-                            role: "status",
-                            children: "Checking your session…"
-                        }) : /*#__PURE__*/ jsx(SignInForm, {
-                            redirectTo: redirectTo,
-                            homeUrl: homeUrl
-                        })
+                        children: [
+                            /*#__PURE__*/ jsx(NoScriptNotice, {}),
+                            bootstrapError ? /*#__PURE__*/ jsx(SessionCheckError, {}) : checking ? /*#__PURE__*/ jsx(SessionCheckIndicator, {}) : /*#__PURE__*/ jsx(SignInForm, {
+                                redirectTo: redirectTo,
+                                homeUrl: homeUrl
+                            })
+                        ]
                     })
                 ]
             })
@@ -103,4 +82,67 @@ function SignInPage({ redirectTo, activeLocale, homeUrl, reauthenticate = false
         children: content
     });
 }
+function SessionCheckIndicator() {
+    const { t } = useTranslation('byline-admin');
+    return /*#__PURE__*/ jsxs("div", {
+        role: "status",
+        "aria-live": "polite",
+        className: clsx('byline-sign-in-page-checking', sign_in_page_module.checking),
+        children: [
+            /*#__PURE__*/ jsx(LoaderRing, {
+                size: 32,
+                "aria-hidden": "true"
+            }),
+            /*#__PURE__*/ jsx("span", {
+                className: sign_in_page_module.srOnly,
+                children: t('common.loading')
+            })
+        ]
+    });
+}
+function NoScriptNotice() {
+    const { t } = useTranslation('byline-admin');
+    return /*#__PURE__*/ jsx("noscript", {
+        children: /*#__PURE__*/ jsx(Alert, {
+            intent: "warning",
+            close: false,
+            className: clsx('byline-sign-in-page-alert', sign_in_page_module.alert),
+            children: t("auth.signIn.noscript")
+        })
+    });
+}
+function SessionCheckError() {
+    const { t } = useTranslation('byline-admin');
+    return /*#__PURE__*/ jsxs(Card, {
+        role: "alert",
+        className: clsx('byline-sign-in-page-card', sign_in_page_module.card),
+        children: [
+            /*#__PURE__*/ jsxs(Card.Header, {
+                children: [
+                    /*#__PURE__*/ jsx(Card.Title, {
+                        children: /*#__PURE__*/ jsx("h2", {
+                            children: t('auth.signIn.title')
+                        })
+                    }),
+                    /*#__PURE__*/ jsx(Alert, {
+                        intent: "danger",
+                        close: false,
+                        className: clsx('byline-sign-in-page-alert', sign_in_page_module.alert),
+                        children: t('auth.signIn.errors.bootstrap')
+                    })
+                ]
+            }),
+            /*#__PURE__*/ jsx(Card.Content, {
+                children: /*#__PURE__*/ jsx("div", {
+                    className: clsx('byline-sign-in-page-actions', sign_in_page_module.actions),
+                    children: /*#__PURE__*/ jsx(Button, {
+                        type: "button",
+                        onClick: ()=>window.location.reload(),
+                        children: t('common.actions.tryAgain')
+                    })
+                })
+            })
+        ]
+    });
+}
 export { SignInPage };

package/dist/admin-shell/chrome/sign-in-page.module.js

@@ -2,6 +2,11 @@ import "./sign-in-page_module.css";
 const sign_in_page_module = {
     main: "main-Mz7TWj",
     bar: "bar-uO4D8B",
-    inner: "inner-iPyHJh"
+    inner: "inner-iPyHJh",
+    checking: "checking-GccoM3",
+    srOnly: "srOnly-zH8cgE",
+    card: "card-TwlYhw",
+    alert: "alert-mFCzan",
+    actions: "actions-d9wIp6"
 };
 export default sign_in_page_module;

package/dist/admin-shell/chrome/sign-in-page.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export {};

package/dist/admin-shell/chrome/sign-in-page_module.css

@@ -27,3 +27,52 @@
   }
 }
 
+:is(.checking-GccoM3, .byline-sign-in-page-checking) {
+  color: inherit;
+  opacity: .6;
+  justify-content: center;
+  align-items: center;
+  padding: 2rem 0;
+  display: flex;
+}
+
+.srOnly-zH8cgE {
+  clip: rect(0, 0, 0, 0);
+  white-space: nowrap;
+  border: 0;
+  width: 1px;
+  height: 1px;
+  margin: -1px;
+  padding: 0;
+  position: absolute;
+  overflow: hidden;
+}
+
+:is(.card-TwlYhw, .byline-sign-in-page-card) {
+  width: 100%;
+}
+
+@media (min-width: 40rem) {
+  :is(.card-TwlYhw, .byline-sign-in-page-card) {
+    max-width: 380px;
+  }
+}
+
+:is(.alert-mFCzan, .byline-sign-in-page-alert) {
+  width: 100%;
+  margin-top: var(--spacing-12);
+}
+
+@media (min-width: 40rem) {
+  :is(noscript > .alert-mFCzan, noscript > .byline-sign-in-page-alert) {
+    max-width: 380px;
+  }
+}
+
+:is(.actions-d9wIp6, .byline-sign-in-page-actions) {
+  padding-top: var(--spacing-8);
+  margin-bottom: var(--spacing-8);
+  justify-content: flex-end;
+  display: flex;
+}
+

package/dist/integrations/admin-session-recovery.d.ts

@@ -0,0 +1,10 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare function AdminSessionRecovery({ renewable }: {
+    renewable: boolean;
+}): null;

package/dist/integrations/admin-session-recovery.js

@@ -0,0 +1,33 @@
+import { useEffect, useRef } from "react";
+import { useRouter, useRouterState } from "@tanstack/react-router";
+import { renewExpectedSession } from "./session-renewal.js";
+const TERMINAL_CODES = new Set([
+    'ERR_UNAUTHENTICATED',
+    'ERR_INVALID_TOKEN',
+    'ERR_REVOKED_TOKEN',
+    'ERR_ACCOUNT_DISABLED',
+    'ERR_SESSION_CHANGED'
+]);
+let suppressed = false;
+function AdminSessionRecovery({ renewable }) {
+    const router = useRouter();
+    const href = useRouterState({
+        select: (state)=>state.location.href
+    });
+    const inFlight = useRef(false);
+    useEffect(()=>{
+        if (!renewable || inFlight.current || suppressed) return;
+        inFlight.current = true;
+        renewExpectedSession().then(()=>router.invalidate()).catch((error)=>{
+            if (TERMINAL_CODES.has(error?.code ?? '')) suppressed = true;
+        }).finally(()=>{
+            inFlight.current = false;
+        });
+    }, [
+        renewable,
+        href,
+        router
+    ]);
+    return null;
+}
+export { AdminSessionRecovery };

package/dist/integrations/admin-session-recovery.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export {};

package/dist/integrations/session-renewal.d.ts

@@ -0,0 +1,8 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export declare function renewExpectedSession(): Promise<void>;

package/dist/integrations/session-renewal.js

@@ -0,0 +1,16 @@
+import { renewAdminSession } from "../server-fns/auth/renew.js";
+import { coordinateAuthAction, expectedSession, flagSessionChanged, observeSession, renewSingleFlight } from "./session-coordination.js";
+function renewExpectedSession() {
+    return renewSingleFlight(()=>coordinateAuthAction(async ()=>{
+            const result = await renewAdminSession({
+                data: {
+                    expectedSessionId: expectedSession() ?? void 0
+                }
+            }).catch((error)=>{
+                if (error?.code === 'ERR_SESSION_CHANGED') flagSessionChanged();
+                throw error;
+            });
+            observeSession(result.sessionId);
+        }));
+}
+export { renewExpectedSession };

package/dist/integrations/session-renewal.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export {};

package/dist/routes/admin-layout-guard.d.ts

@@ -0,0 +1,20 @@
+/**
+ * This Source Code is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ *
+ * Copyright (c) Infonomic Company Limited
+ */
+export interface AdminLayoutGuardDeps<T> {
+    /** Load the full layout context; expected to verify the access credential first. */
+    load: () => Promise<T>;
+    /** Coordinated browser renewal. Resolves on success and rejects on any failure. */
+    renewSession: () => Promise<void>;
+    isBrowser: boolean;
+    /** True when the page has already flagged a session change awaiting acknowledgement. */
+    sessionChanged: () => boolean;
+    signInPath: string;
+    /** The requested location, preserved as `callbackUrl` on redirect. */
+    href: string;
+}
+export declare function loadAdminLayoutContext<T>(deps: AdminLayoutGuardDeps<T>): Promise<T>;

package/dist/routes/admin-layout-guard.js

@@ -0,0 +1,40 @@
+import { redirect } from "@tanstack/react-router";
+const AUTH_REDIRECT_CODES = new Set([
+    'ERR_UNAUTHENTICATED',
+    'ERR_ACCESS_EXPIRED',
+    'ERR_INVALID_TOKEN',
+    'ERR_REVOKED_TOKEN',
+    'ERR_ACCOUNT_DISABLED',
+    'ERR_SESSION_CHANGED'
+]);
+async function loadAdminLayoutContext(deps) {
+    const toSignIn = ()=>redirect({
+            to: deps.signInPath,
+            search: {
+                callbackUrl: deps.href
+            }
+        });
+    try {
+        return await deps.load();
+    } catch (error) {
+        const code = errorCode(error);
+        const changed = deps.isBrowser && deps.sessionChanged();
+        if (!changed && !AUTH_REDIRECT_CODES.has(code)) throw error;
+        if (changed || !deps.isBrowser || 'ERR_ACCESS_EXPIRED' !== code) throw toSignIn();
+    }
+    try {
+        await deps.renewSession();
+    } catch  {
+        throw toSignIn();
+    }
+    try {
+        return await deps.load();
+    } catch (error) {
+        if (AUTH_REDIRECT_CODES.has(errorCode(error))) throw toSignIn();
+        throw error;
+    }
+}
+function errorCode(error) {
+    return error?.code;
+}
+export { loadAdminLayoutContext };

package/dist/routes/create-admin-analytics-route.js

@@ -1,7 +1,7 @@
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { createFileRoute, notFound } from "@tanstack/react-router";
-import { AnalyticsDashboard } from "@byline/admin/analytics/components/dashboard";
-import { isAnalyticsDashboardPeriod } from "@byline/analytics/config";
+import { ANALYTICS_PREVIEW_ROWS, AnalyticsDashboard } from "@byline/admin/analytics/components/dashboard";
+import { ANALYTICS_MAX_TOP_LIMIT, isAnalyticsDashboardPeriod } from "@byline/analytics/config";
 import { useTranslation } from "@byline/i18n/react";
 import { z } from "zod";
 import { BreadcrumbsClient } from "../admin-shell/chrome/breadcrumbs/breadcrumbs-client.js";
@@ -36,20 +36,20 @@ function createAdminAnalyticsRoute(path) {
                     data: {
                         ...range,
                         kind: 'page',
-                        limit: 20
+                        limit: ANALYTICS_PREVIEW_ROWS
                     }
                 }),
                 getAnalyticsTop({
                     data: {
                         ...range,
                         kind: 'download',
-                        limit: 20
+                        limit: ANALYTICS_PREVIEW_ROWS
                     }
                 }),
                 getAnalyticsReferrers({
                     data: {
                         ...range,
-                        limit: 20
+                        limit: ANALYTICS_PREVIEW_ROWS
                     }
                 }),
                 getAnalyticsCountries({
@@ -90,6 +90,18 @@ function createAdminAnalyticsRoute(path) {
                     /*#__PURE__*/ jsx(AnalyticsDashboard, {
                         data: data,
                         period: period,
+                        loadFullList: (kind)=>'referrers' === kind ? getAnalyticsReferrers({
+                                data: {
+                                    ...data.range,
+                                    limit: ANALYTICS_MAX_TOP_LIMIT
+                                }
+                            }) : getAnalyticsTop({
+                                data: {
+                                    ...data.range,
+                                    kind: 'pages' === kind ? 'page' : 'download',
+                                    limit: ANALYTICS_MAX_TOP_LIMIT
+                                }
+                            }),
                         onPeriodChange: (nextPeriod)=>{
                             navigate({
                                 to: getAdminRoutePath('analytics'),

package/dist/routes/create-admin-layout-route.js

@@ -1,6 +1,6 @@
 import { jsx, jsxs } from "react/jsx-runtime";
 import { useEffect } from "react";
-import { Outlet, createFileRoute, redirect } from "@tanstack/react-router";
+import { Outlet, createFileRoute } from "@tanstack/react-router";
 import { applyStoredTheme } from "@byline/admin/admin-account/components/theme";
 import { BylineFieldServicesProvider } from "@byline/admin/react";
 import { BylineAdminServicesProvider } from "@byline/admin/services";
@@ -20,47 +20,37 @@ import { bylineAdminServices } from "../integrations/byline-admin-services.js";
 import { BylineAiAdminProvider } from "../integrations/byline-ai.js";
 import { bylineFieldServices } from "../integrations/byline-field-services.js";
 import { observeSession, sessionIsChanged } from "../integrations/session-coordination.js";
+import { renewExpectedSession } from "../integrations/session-renewal.js";
 import { getAnalyticsRuntime } from "../server-fns/analytics/index.js";
 import { getCurrentAdminUser } from "../server-fns/auth/index.js";
 import { getScheduledPublicationRuntime } from "../server-fns/collections/index.js";
 import { getActiveLocaleFn, setAdminLocaleFn } from "../server-fns/i18n/index.js";
+import { loadAdminLayoutContext } from "./admin-layout-guard.js";
 import { getSignInRoutePath } from "./sign-in-path.js";
 function createAdminLayoutRoute(path) {
     const Route = createFileRoute(path)({
-        beforeLoad: async ({ location })=>{
-            const signInPath = getSignInRoutePath();
-            try {
-                const user = await getCurrentAdminUser();
-                if ("u" > typeof window) observeSession(user.sessionId);
-                const [activeLocale, scheduledPublicationRuntime, analyticsRuntime] = await Promise.all([
-                    getActiveLocaleFn(),
-                    getScheduledPublicationRuntime(),
-                    getAnalyticsRuntime()
-                ]);
-                return {
-                    user,
-                    activeLocale,
-                    scheduledPublicationRuntime,
-                    analyticsRuntime
-                };
-            } catch (error) {
-                const code = error?.code;
-                if (!("u" > typeof window && sessionIsChanged()) && ![
-                    'ERR_UNAUTHENTICATED',
-                    'ERR_ACCESS_EXPIRED',
-                    'ERR_INVALID_TOKEN',
-                    'ERR_REVOKED_TOKEN',
-                    'ERR_ACCOUNT_DISABLED',
-                    'ERR_SESSION_CHANGED'
-                ].includes(code ?? '')) throw error;
-                throw redirect({
-                    to: signInPath,
-                    search: {
-                        callbackUrl: location.href
-                    }
-                });
-            }
-        },
+        beforeLoad: ({ location })=>loadAdminLayoutContext({
+                load: async ()=>{
+                    const user = await getCurrentAdminUser();
+                    if ("u" > typeof window) observeSession(user.sessionId);
+                    const [activeLocale, scheduledPublicationRuntime, analyticsRuntime] = await Promise.all([
+                        getActiveLocaleFn(),
+                        getScheduledPublicationRuntime(),
+                        getAnalyticsRuntime()
+                    ]);
+                    return {
+                        user,
+                        activeLocale,
+                        scheduledPublicationRuntime,
+                        analyticsRuntime
+                    };
+                },
+                renewSession: renewExpectedSession,
+                isBrowser: "u" > typeof window,
+                sessionChanged: sessionIsChanged,
+                signInPath: getSignInRoutePath(),
+                href: location.href
+            }),
         component: function() {
             const { user, activeLocale, scheduledPublicationRuntime, analyticsRuntime } = Route.useRouteContext();
             const { i18n } = getAdminConfig();

package/dist/server-fns/auth/current-user.d.ts

@@ -28,11 +28,27 @@ export interface CurrentAdminUser {
 }
 export declare const getCurrentAdminUser: import("@tanstack/react-start").OptionalFetcher<undefined, undefined, Promise<CurrentAdminUser>>;
 /**
- * Soft variant for public-page consumers (e.g. the content admin bar that
- * renders only when the visitor is signed in). Returns `null` instead of
+ * Soft variants for public-page consumers (e.g. the content admin bar that
+ * renders only when the visitor is signed in). Return `null` instead of
  * throwing when there is no session — anonymous visitors are the common
  * case here, so a thrown error would be wrong shape for a public route
  * loader. Other failure modes (DB unavailable, session points to a
  * deleted admin) are still coerced to `null` so the bar simply hides.
+ *
+ * `getCurrentAdminSessionSoft` additionally reports `renewable`: true when
+ * the access credential has expired but a refresh credential is present.
+ * Public reads never rotate credentials, so without this hint a signed-in
+ * editor's admin bar and preview mode silently vanish after the access
+ * lifetime. The host's `AdminSessionRecovery` component consumes it to run
+ * the coordinated browser renewal and re-run the page's loaders.
+ *
+ * `getCurrentAdminUserSoft` keeps the original `CurrentAdminUser | null`
+ * shape for existing integrations.
  */
+export interface CurrentAdminSession {
+    user: CurrentAdminUser | null;
+    /** Access expired with a refresh credential present: the browser may renew and reload data. */
+    renewable: boolean;
+}
+export declare const getCurrentAdminSessionSoft: import("@tanstack/react-start").OptionalFetcher<undefined, undefined, Promise<CurrentAdminSession>>;
 export declare const getCurrentAdminUserSoft: import("@tanstack/react-start").OptionalFetcher<undefined, undefined, Promise<CurrentAdminUser | null>>;

package/dist/server-fns/auth/current-user.js

@@ -1,6 +1,6 @@
 import { createServerFn } from "@tanstack/react-start";
 import { AuthError } from "@byline/auth";
-import { getAdminRequestContext } from "@byline/client/server";
+import { getAdminRequestContext, readRefreshTokenCookie } from "@byline/client/server";
 import { bylineCore } from "../../integrations/byline-core.js";
 const getCurrentAdminUser = createServerFn({
     method: 'GET'
@@ -19,32 +19,49 @@ const getCurrentAdminUser = createServerFn({
         abilities: Array.from(actor.abilities)
     };
 });
+const getCurrentAdminSessionSoft = createServerFn({
+    method: 'GET'
+}).handler(async ()=>resolveSoftSession());
 const getCurrentAdminUserSoft = createServerFn({
     method: 'GET'
-}).handler(async ()=>{
+}).handler(async ()=>(await resolveSoftSession()).user);
+const anonymous = {
+    user: null,
+    renewable: false
+};
+async function resolveSoftSession() {
     try {
         let actor;
         let sessionId;
         try {
             ({ actor, sessionId } = await getAdminRequestContext());
         } catch (err) {
-            if (err instanceof AuthError) return null;
+            if (err instanceof AuthError) {
+                const renewable = 'ERR_ACCESS_EXPIRED' === err.code && null != readRefreshTokenCookie();
+                return {
+                    user: null,
+                    renewable
+                };
+            }
             throw err;
         }
-        if (!actor) return null;
+        if (!actor) return anonymous;
         const row = await bylineCore().adminStore?.adminUsers.getById(actor.id);
-        if (!row) return null;
+        if (!row) return anonymous;
         return {
-            sessionId: sessionId,
-            id: row.id,
-            email: row.email,
-            given_name: row.given_name,
-            family_name: row.family_name,
-            is_super_admin: row.is_super_admin,
-            abilities: Array.from(actor.abilities)
+            user: {
+                sessionId: sessionId,
+                id: row.id,
+                email: row.email,
+                given_name: row.given_name,
+                family_name: row.family_name,
+                is_super_admin: row.is_super_admin,
+                abilities: Array.from(actor.abilities)
+            },
+            renewable: false
         };
     } catch  {
-        return null;
+        return anonymous;
     }
-});
-export { getCurrentAdminUser, getCurrentAdminUserSoft };
+}
+export { getCurrentAdminSessionSoft, getCurrentAdminUser, getCurrentAdminUserSoft };

package/dist/server-fns/auth/index.d.ts

@@ -5,6 +5,6 @@
  *
  * Copyright (c) Infonomic Company Limited
  */
-export { type CurrentAdminUser, getCurrentAdminUser, getCurrentAdminUserSoft, } from './current-user.js';
+export { type CurrentAdminSession, type CurrentAdminUser, getCurrentAdminSessionSoft, getCurrentAdminUser, getCurrentAdminUserSoft, } from './current-user.js';
 export { adminSignIn, type SignInInput, type SignInResult } from './sign-in.js';
 export { adminSignOut } from './sign-out.js';

package/dist/server-fns/auth/index.js

@@ -1,3 +1,3 @@
-export { getCurrentAdminUser, getCurrentAdminUserSoft } from "./current-user.js";
+export { getCurrentAdminSessionSoft, getCurrentAdminUser, getCurrentAdminUserSoft } from "./current-user.js";
 export { adminSignIn } from "./sign-in.js";
 export { adminSignOut } from "./sign-out.js";