@strapi/admin 5.53.0 → 5.54.0

package/dist/admin/ee/admin/src/pages/SettingsPage/pages/AuditLogs/utils/getActionTypesDefaultMessages.js

@@ -37,7 +37,11 @@ const actionTypes = {
     'release.entry.update': 'Change entry on release',
     'release.entry.remove': 'Remove entry from release',
     'release.settings.update': 'Update release settings',
-    'audit-log.export': 'Export audit logs'
+    'audit-log.export': 'Export audit logs',
+    'locale.create': 'Create locale',
+    'locale.update': 'Update locale',
+    'locale.delete': 'Delete locale',
+    'locale.default.update': 'Change default locale'
 };
 const getDefaultMessage = (value)=>{
     return actionTypes[value] || value;

package/dist/admin/ee/admin/src/pages/SettingsPage/pages/AuditLogs/utils/getActionTypesDefaultMessages.js.map

@@ -1 +1 @@
-{"version":3,"file":"getActionTypesDefaultMessages.js","sources":["../../../../../../../../../../ee/admin/src/pages/SettingsPage/pages/AuditLogs/utils/getActionTypesDefaultMessages.ts"],"sourcesContent":["export const actionTypes = {\n  'entry.create': 'Create entry{model, select, undefined {} other { ({model})}}',\n  'entry.update': 'Update entry{model, select, undefined {} other { ({model})}}',\n  'entry.delete': 'Delete entry{model, select, undefined {} other { ({model})}}',\n  'entry.publish': 'Publish entry{model, select, undefined {} other { ({model})}}',\n  'entry.unpublish': 'Unpublish entry{model, select, undefined {} other { ({model})}}',\n  'media.create': 'Create media',\n  'media.update': 'Update media',\n  'media.delete': 'Delete media',\n  'media-folder.create': 'Create media folder',\n  'media-folder.update': 'Update media folder',\n  'media-folder.delete': 'Delete media folder',\n  'user.create': 'Create user',\n  'user.update': 'Update user',\n  'user.delete': 'Delete user',\n  'admin.auth.success': 'Admin login',\n  'admin.logout': 'Admin logout',\n  'content-type.create': 'Create content type',\n  'content-type.update': 'Update content type',\n  'content-type.delete': 'Delete content type',\n  'component.create': 'Create component',\n  'component.update': 'Update component',\n  'component.delete': 'Delete component',\n  'role.create': 'Create role',\n  'role.update': 'Update role',\n  'role.delete': 'Delete role',\n  'permission.create': 'Create permission',\n  'permission.update': 'Update permission',\n  'permission.delete': 'Delete permission',\n  'release.create': 'Create release',\n  'release.update': 'Update release',\n  'release.delete': 'Delete release',\n  'release.trigger': 'Trigger release',\n  'release.entry.add': 'Add entry to release',\n  'release.entry.update': 'Change entry on release',\n  'release.entry.remove': 'Remove entry from release',\n  'release.settings.update': 'Update release settings',\n  'audit-log.export': 'Export audit logs',\n};\n\nexport const getDefaultMessage = (value: keyof typeof actionTypes) => {\n  return actionTypes[value] || value;\n};\n"],"names":["actionTypes","getDefaultMessage","value"],"mappings":";;MAAaA,WAAAA,GAAc;IACzB,cAAA,EAAgB,8DAAA;IAChB,cAAA,EAAgB,8DAAA;IAChB,cAAA,EAAgB,8DAAA;IAChB,eAAA,EAAiB,+DAAA;IACjB,iBAAA,EAAmB,iEAAA;IACnB,cAAA,EAAgB,cAAA;IAChB,cAAA,EAAgB,cAAA;IAChB,cAAA,EAAgB,cAAA;IAChB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,oBAAA,EAAsB,aAAA;IACtB,cAAA,EAAgB,cAAA;IAChB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,kBAAA,EAAoB,kBAAA;IACpB,kBAAA,EAAoB,kBAAA;IACpB,kBAAA,EAAoB,kBAAA;IACpB,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,mBAAA,EAAqB,mBAAA;IACrB,mBAAA,EAAqB,mBAAA;IACrB,mBAAA,EAAqB,mBAAA;IACrB,gBAAA,EAAkB,gBAAA;IAClB,gBAAA,EAAkB,gBAAA;IAClB,gBAAA,EAAkB,gBAAA;IAClB,iBAAA,EAAmB,iBAAA;IACnB,mBAAA,EAAqB,sBAAA;IACrB,sBAAA,EAAwB,yBAAA;IACxB,sBAAA,EAAwB,2BAAA;IACxB,yBAAA,EAA2B,yBAAA;IAC3B,kBAAA,EAAoB;AACtB;AAEO,MAAMC,oBAAoB,CAACC,KAAAA,GAAAA;IAChC,OAAOF,WAAW,CAACE,KAAAA,CAAM,IAAIA,KAAAA;AAC/B;;;;;"}
+{"version":3,"file":"getActionTypesDefaultMessages.js","sources":["../../../../../../../../../../ee/admin/src/pages/SettingsPage/pages/AuditLogs/utils/getActionTypesDefaultMessages.ts"],"sourcesContent":["export const actionTypes = {\n  'entry.create': 'Create entry{model, select, undefined {} other { ({model})}}',\n  'entry.update': 'Update entry{model, select, undefined {} other { ({model})}}',\n  'entry.delete': 'Delete entry{model, select, undefined {} other { ({model})}}',\n  'entry.publish': 'Publish entry{model, select, undefined {} other { ({model})}}',\n  'entry.unpublish': 'Unpublish entry{model, select, undefined {} other { ({model})}}',\n  'media.create': 'Create media',\n  'media.update': 'Update media',\n  'media.delete': 'Delete media',\n  'media-folder.create': 'Create media folder',\n  'media-folder.update': 'Update media folder',\n  'media-folder.delete': 'Delete media folder',\n  'user.create': 'Create user',\n  'user.update': 'Update user',\n  'user.delete': 'Delete user',\n  'admin.auth.success': 'Admin login',\n  'admin.logout': 'Admin logout',\n  'content-type.create': 'Create content type',\n  'content-type.update': 'Update content type',\n  'content-type.delete': 'Delete content type',\n  'component.create': 'Create component',\n  'component.update': 'Update component',\n  'component.delete': 'Delete component',\n  'role.create': 'Create role',\n  'role.update': 'Update role',\n  'role.delete': 'Delete role',\n  'permission.create': 'Create permission',\n  'permission.update': 'Update permission',\n  'permission.delete': 'Delete permission',\n  'release.create': 'Create release',\n  'release.update': 'Update release',\n  'release.delete': 'Delete release',\n  'release.trigger': 'Trigger release',\n  'release.entry.add': 'Add entry to release',\n  'release.entry.update': 'Change entry on release',\n  'release.entry.remove': 'Remove entry from release',\n  'release.settings.update': 'Update release settings',\n  'audit-log.export': 'Export audit logs',\n  'locale.create': 'Create locale',\n  'locale.update': 'Update locale',\n  'locale.delete': 'Delete locale',\n  'locale.default.update': 'Change default locale',\n};\n\nexport const getDefaultMessage = (value: keyof typeof actionTypes) => {\n  return actionTypes[value] || value;\n};\n"],"names":["actionTypes","getDefaultMessage","value"],"mappings":";;MAAaA,WAAAA,GAAc;IACzB,cAAA,EAAgB,8DAAA;IAChB,cAAA,EAAgB,8DAAA;IAChB,cAAA,EAAgB,8DAAA;IAChB,eAAA,EAAiB,+DAAA;IACjB,iBAAA,EAAmB,iEAAA;IACnB,cAAA,EAAgB,cAAA;IAChB,cAAA,EAAgB,cAAA;IAChB,cAAA,EAAgB,cAAA;IAChB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,oBAAA,EAAsB,aAAA;IACtB,cAAA,EAAgB,cAAA;IAChB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,kBAAA,EAAoB,kBAAA;IACpB,kBAAA,EAAoB,kBAAA;IACpB,kBAAA,EAAoB,kBAAA;IACpB,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,mBAAA,EAAqB,mBAAA;IACrB,mBAAA,EAAqB,mBAAA;IACrB,mBAAA,EAAqB,mBAAA;IACrB,gBAAA,EAAkB,gBAAA;IAClB,gBAAA,EAAkB,gBAAA;IAClB,gBAAA,EAAkB,gBAAA;IAClB,iBAAA,EAAmB,iBAAA;IACnB,mBAAA,EAAqB,sBAAA;IACrB,sBAAA,EAAwB,yBAAA;IACxB,sBAAA,EAAwB,2BAAA;IACxB,yBAAA,EAA2B,yBAAA;IAC3B,kBAAA,EAAoB,mBAAA;IACpB,eAAA,EAAiB,eAAA;IACjB,eAAA,EAAiB,eAAA;IACjB,eAAA,EAAiB,eAAA;IACjB,uBAAA,EAAyB;AAC3B;AAEO,MAAMC,oBAAoB,CAACC,KAAAA,GAAAA;IAChC,OAAOF,WAAW,CAACE,KAAAA,CAAM,IAAIA,KAAAA;AAC/B;;;;;"}

package/dist/admin/ee/admin/src/pages/SettingsPage/pages/AuditLogs/utils/getActionTypesDefaultMessages.mjs

@@ -35,7 +35,11 @@ const actionTypes = {
     'release.entry.update': 'Change entry on release',
     'release.entry.remove': 'Remove entry from release',
     'release.settings.update': 'Update release settings',
-    'audit-log.export': 'Export audit logs'
+    'audit-log.export': 'Export audit logs',
+    'locale.create': 'Create locale',
+    'locale.update': 'Update locale',
+    'locale.delete': 'Delete locale',
+    'locale.default.update': 'Change default locale'
 };
 const getDefaultMessage = (value)=>{
     return actionTypes[value] || value;

package/dist/admin/ee/admin/src/pages/SettingsPage/pages/AuditLogs/utils/getActionTypesDefaultMessages.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"getActionTypesDefaultMessages.mjs","sources":["../../../../../../../../../../ee/admin/src/pages/SettingsPage/pages/AuditLogs/utils/getActionTypesDefaultMessages.ts"],"sourcesContent":["export const actionTypes = {\n  'entry.create': 'Create entry{model, select, undefined {} other { ({model})}}',\n  'entry.update': 'Update entry{model, select, undefined {} other { ({model})}}',\n  'entry.delete': 'Delete entry{model, select, undefined {} other { ({model})}}',\n  'entry.publish': 'Publish entry{model, select, undefined {} other { ({model})}}',\n  'entry.unpublish': 'Unpublish entry{model, select, undefined {} other { ({model})}}',\n  'media.create': 'Create media',\n  'media.update': 'Update media',\n  'media.delete': 'Delete media',\n  'media-folder.create': 'Create media folder',\n  'media-folder.update': 'Update media folder',\n  'media-folder.delete': 'Delete media folder',\n  'user.create': 'Create user',\n  'user.update': 'Update user',\n  'user.delete': 'Delete user',\n  'admin.auth.success': 'Admin login',\n  'admin.logout': 'Admin logout',\n  'content-type.create': 'Create content type',\n  'content-type.update': 'Update content type',\n  'content-type.delete': 'Delete content type',\n  'component.create': 'Create component',\n  'component.update': 'Update component',\n  'component.delete': 'Delete component',\n  'role.create': 'Create role',\n  'role.update': 'Update role',\n  'role.delete': 'Delete role',\n  'permission.create': 'Create permission',\n  'permission.update': 'Update permission',\n  'permission.delete': 'Delete permission',\n  'release.create': 'Create release',\n  'release.update': 'Update release',\n  'release.delete': 'Delete release',\n  'release.trigger': 'Trigger release',\n  'release.entry.add': 'Add entry to release',\n  'release.entry.update': 'Change entry on release',\n  'release.entry.remove': 'Remove entry from release',\n  'release.settings.update': 'Update release settings',\n  'audit-log.export': 'Export audit logs',\n};\n\nexport const getDefaultMessage = (value: keyof typeof actionTypes) => {\n  return actionTypes[value] || value;\n};\n"],"names":["actionTypes","getDefaultMessage","value"],"mappings":"MAAaA,WAAAA,GAAc;IACzB,cAAA,EAAgB,8DAAA;IAChB,cAAA,EAAgB,8DAAA;IAChB,cAAA,EAAgB,8DAAA;IAChB,eAAA,EAAiB,+DAAA;IACjB,iBAAA,EAAmB,iEAAA;IACnB,cAAA,EAAgB,cAAA;IAChB,cAAA,EAAgB,cAAA;IAChB,cAAA,EAAgB,cAAA;IAChB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,oBAAA,EAAsB,aAAA;IACtB,cAAA,EAAgB,cAAA;IAChB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,kBAAA,EAAoB,kBAAA;IACpB,kBAAA,EAAoB,kBAAA;IACpB,kBAAA,EAAoB,kBAAA;IACpB,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,mBAAA,EAAqB,mBAAA;IACrB,mBAAA,EAAqB,mBAAA;IACrB,mBAAA,EAAqB,mBAAA;IACrB,gBAAA,EAAkB,gBAAA;IAClB,gBAAA,EAAkB,gBAAA;IAClB,gBAAA,EAAkB,gBAAA;IAClB,iBAAA,EAAmB,iBAAA;IACnB,mBAAA,EAAqB,sBAAA;IACrB,sBAAA,EAAwB,yBAAA;IACxB,sBAAA,EAAwB,2BAAA;IACxB,yBAAA,EAA2B,yBAAA;IAC3B,kBAAA,EAAoB;AACtB;AAEO,MAAMC,oBAAoB,CAACC,KAAAA,GAAAA;IAChC,OAAOF,WAAW,CAACE,KAAAA,CAAM,IAAIA,KAAAA;AAC/B;;;;"}
+{"version":3,"file":"getActionTypesDefaultMessages.mjs","sources":["../../../../../../../../../../ee/admin/src/pages/SettingsPage/pages/AuditLogs/utils/getActionTypesDefaultMessages.ts"],"sourcesContent":["export const actionTypes = {\n  'entry.create': 'Create entry{model, select, undefined {} other { ({model})}}',\n  'entry.update': 'Update entry{model, select, undefined {} other { ({model})}}',\n  'entry.delete': 'Delete entry{model, select, undefined {} other { ({model})}}',\n  'entry.publish': 'Publish entry{model, select, undefined {} other { ({model})}}',\n  'entry.unpublish': 'Unpublish entry{model, select, undefined {} other { ({model})}}',\n  'media.create': 'Create media',\n  'media.update': 'Update media',\n  'media.delete': 'Delete media',\n  'media-folder.create': 'Create media folder',\n  'media-folder.update': 'Update media folder',\n  'media-folder.delete': 'Delete media folder',\n  'user.create': 'Create user',\n  'user.update': 'Update user',\n  'user.delete': 'Delete user',\n  'admin.auth.success': 'Admin login',\n  'admin.logout': 'Admin logout',\n  'content-type.create': 'Create content type',\n  'content-type.update': 'Update content type',\n  'content-type.delete': 'Delete content type',\n  'component.create': 'Create component',\n  'component.update': 'Update component',\n  'component.delete': 'Delete component',\n  'role.create': 'Create role',\n  'role.update': 'Update role',\n  'role.delete': 'Delete role',\n  'permission.create': 'Create permission',\n  'permission.update': 'Update permission',\n  'permission.delete': 'Delete permission',\n  'release.create': 'Create release',\n  'release.update': 'Update release',\n  'release.delete': 'Delete release',\n  'release.trigger': 'Trigger release',\n  'release.entry.add': 'Add entry to release',\n  'release.entry.update': 'Change entry on release',\n  'release.entry.remove': 'Remove entry from release',\n  'release.settings.update': 'Update release settings',\n  'audit-log.export': 'Export audit logs',\n  'locale.create': 'Create locale',\n  'locale.update': 'Update locale',\n  'locale.delete': 'Delete locale',\n  'locale.default.update': 'Change default locale',\n};\n\nexport const getDefaultMessage = (value: keyof typeof actionTypes) => {\n  return actionTypes[value] || value;\n};\n"],"names":["actionTypes","getDefaultMessage","value"],"mappings":"MAAaA,WAAAA,GAAc;IACzB,cAAA,EAAgB,8DAAA;IAChB,cAAA,EAAgB,8DAAA;IAChB,cAAA,EAAgB,8DAAA;IAChB,eAAA,EAAiB,+DAAA;IACjB,iBAAA,EAAmB,iEAAA;IACnB,cAAA,EAAgB,cAAA;IAChB,cAAA,EAAgB,cAAA;IAChB,cAAA,EAAgB,cAAA;IAChB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,oBAAA,EAAsB,aAAA;IACtB,cAAA,EAAgB,cAAA;IAChB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,qBAAA,EAAuB,qBAAA;IACvB,kBAAA,EAAoB,kBAAA;IACpB,kBAAA,EAAoB,kBAAA;IACpB,kBAAA,EAAoB,kBAAA;IACpB,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,aAAA,EAAe,aAAA;IACf,mBAAA,EAAqB,mBAAA;IACrB,mBAAA,EAAqB,mBAAA;IACrB,mBAAA,EAAqB,mBAAA;IACrB,gBAAA,EAAkB,gBAAA;IAClB,gBAAA,EAAkB,gBAAA;IAClB,gBAAA,EAAkB,gBAAA;IAClB,iBAAA,EAAmB,iBAAA;IACnB,mBAAA,EAAqB,sBAAA;IACrB,sBAAA,EAAwB,yBAAA;IACxB,sBAAA,EAAwB,2BAAA;IACxB,yBAAA,EAA2B,yBAAA;IAC3B,kBAAA,EAAoB,mBAAA;IACpB,eAAA,EAAiB,eAAA;IACjB,eAAA,EAAiB,eAAA;IACjB,eAAA,EAAiB,eAAA;IACjB,uBAAA,EAAyB;AAC3B;AAEO,MAAMC,oBAAoB,CAACC,KAAAA,GAAAA;IAChC,OAAOF,WAAW,CAACE,KAAAA,CAAM,IAAIA,KAAAA;AAC/B;;;;"}

package/dist/admin/index.js

@@ -114,6 +114,7 @@ exports.attemptTokenRefresh = getFetchClient.attemptTokenRefresh;
 exports.getFetchClient = getFetchClient.getFetchClient;
 exports.isFetchError = getFetchClient.isFetchError;
 exports.refreshAccessToken = getFetchClient.refreshAccessToken;
+exports.resetSessionExpiredNotification = getFetchClient.resetSessionExpiredNotification;
 exports.setOnSessionExpired = getFetchClient.setOnSessionExpired;
 exports.setOnTokenUpdate = getFetchClient.setOnTokenUpdate;
 exports.storeToken = getFetchClient.storeToken;

package/dist/admin/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/admin/index.mjs

@@ -39,7 +39,7 @@ export { usePersistentState, usePersistentStateScope, useScopedPersistentState }
 export { useAdminUsers } from './admin/src/services/users.mjs';
 export { useGetCountDocumentsQuery } from './admin/src/services/homepage.mjs';
 export { translatedErrors } from './admin/src/utils/translatedErrors.mjs';
-export { ADMIN_REFRESH_LOCK, FetchError, attemptTokenRefresh, getFetchClient, isFetchError, refreshAccessToken, setOnSessionExpired, setOnTokenUpdate, storeToken, triggerSessionExpired } from './admin/src/utils/getFetchClient.mjs';
+export { ADMIN_REFRESH_LOCK, FetchError, attemptTokenRefresh, getFetchClient, isFetchError, refreshAccessToken, resetSessionExpiredNotification, setOnSessionExpired, setOnTokenUpdate, storeToken, triggerSessionExpired } from './admin/src/utils/getFetchClient.mjs';
 export { fetchBaseQuery, isBaseQueryError } from './admin/src/utils/baseQuery.mjs';
 export { createRulesEngine } from './admin/src/utils/rulesEngine.mjs';
 export { getDisplayName, getInitials, hashAdminUserEmail } from './admin/src/utils/users.mjs';

package/dist/admin/src/components/DismissibleBanner.d.ts

@@ -0,0 +1,8 @@
+interface DismissibleBannerProps {
+    message: React.ReactNode;
+    action?: React.ReactNode;
+    closeLabel: string;
+    onDismiss: () => void;
+}
+declare const DismissibleBanner: ({ message, action, closeLabel, onDismiss }: DismissibleBannerProps) => import("react/jsx-runtime").JSX.Element;
+export { DismissibleBanner };

package/dist/admin/src/components/MediaLibraryBanner.d.ts

@@ -0,0 +1,2 @@
+declare const MediaLibraryBanner: () => import("react/jsx-runtime").JSX.Element | null;
+export { MediaLibraryBanner };

package/dist/admin/src/hooks/useRegisterUnsavedChanges.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Registers whether the current surface has unsaved edits so session-expiry
+ * logout can warn before clearing auth state (which unmounts forms).
+ */
+declare const useRegisterUnsavedChanges: (id: string, enabled: boolean) => void;
+export { useRegisterUnsavedChanges };

package/dist/admin/src/hooks/useSessionKeepalive.d.ts

@@ -0,0 +1,88 @@
+declare const SESSION_EXPIRY_BUFFER_MS = 1000;
+/**
+ * How long before the access token's `exp` an active tab renews. Renewing
+ * ahead of expiry (rather than at it) means the refreshed token is already in
+ * shared storage by the time any *other* tab's post-expiry timer fires — so an
+ * idle sibling re-syncs instead of racing the refresh.
+ */
+declare const SESSION_RENEW_MARGIN_MS = 10000;
+interface UseSessionKeepaliveOptions {
+    /**
+     * The current admin access JWT (from Redux), or `null` when logged out.
+     */
+    token: string | null;
+    /**
+     * Called when a renewal attempt is rejected by the server (the session is
+     * truly over: refresh token idle/max window elapsed). This is a
+     * server-confirmed end of session, so it SHOULD broadcast a global logout to
+     * every tab.
+     */
+    onSessionDead?: () => void;
+    /**
+     * Read the access token currently in shared storage (localStorage/cookie).
+     * Because every open tab shares the same refresh cookie, an active tab that
+     * refreshes writes a newer access token here. When omitted, the hook never
+     * re-syncs across tabs.
+     */
+    getStoredToken?: () => string | null;
+    /**
+     * Adopt a newer shared token instead of treating this tab's token as stale.
+     * Typically dispatches `setToken`, which updates Redux and causes this hook
+     * to re-arm against the later `exp`. Only called when `getStoredToken`
+     * returns a token whose `exp` is later than the in-memory one.
+     */
+    onResync?: (token: string) => void;
+    /**
+     * Epoch ms of the user's last interaction (pointer, key, scroll, …). Used to
+     * decide whether to silently renew when the access token is about to expire.
+     * Idle tabs must NOT renew — that would defeat the server's
+     * `idleSessionLifespan` / `idleRefreshTokenLifespan`. When omitted, the hook
+     * never treats the tab as active.
+     */
+    getLastActivityAt?: () => number;
+    /**
+     * Silently renew the session (rotate the refresh token + mint a new access
+     * token). Resolves `true` on success — the resulting `setToken` re-arms this
+     * hook against the new `exp` — or `false` when the server rejects it. Only
+     * called when the user was active during the current token's lifetime.
+     */
+    renewSession?: () => Promise<boolean>;
+    /**
+     * Escape hatch for tests / dev environments where we don't want the
+     * automatic renew / re-sync behavior. Mirrors the existing `_disableRenewToken`
+     * prop on `<AuthProvider>`.
+     */
+    disabled?: boolean;
+}
+/**
+ * Keep the admin session alive while the user is active — without one tab
+ * tearing down another, and without logging anyone out because a short-lived
+ * access token aged out.
+ *
+ * The access token (`accessTokenLifespan`, e.g. 30 min) is transport plumbing,
+ * not the session length; the refresh token's idle/max window is the session.
+ * So expiry of the access JWT must never clear auth state or unmount the page:
+ * the next user-initiated request 401s, `withTokenRefresh` refreshes and
+ * retries, and only a *rejected* refresh ends the session (`onSessionDead`).
+ * Two timers are armed per token:
+ *
+ * - Renew (at `exp` minus a margin): if the user interacted during this token's
+ *   lifetime, silently renew *ahead* of expiry. The new `setToken` re-arms the
+ *   hook; a server rejection (`onSessionDead`) ends the session globally.
+ *   Renewing early guarantees the refreshed token reaches shared storage before
+ *   any sibling tab's post-expiry timer fires.
+ * - Post-expiry (just after `exp`): the fallback when this tab did not renew.
+ *   It first re-syncs from a token another tab refreshed (so an idle tab rides
+ *   on an active sibling), then renews if activity arrived late. If the tab is
+ *   still idle, it does nothing destructive — the stale access token stays in
+ *   place so form state survives until the next request.
+ *
+ * Idle tabs must not renew: a tab left open forever must not keep the session
+ * alive past the server's idle/max window.
+ *
+ * If the JWT can't be decoded (malformed, missing `exp`), the timers are skipped
+ * silently — the 401 refresh path still covers the next user-initiated request.
+ */
+declare const useSessionKeepalive: ({ token, onSessionDead, getStoredToken, onResync, getLastActivityAt, renewSession, disabled, }: UseSessionKeepaliveOptions) => void;
+export { useSessionKeepalive, SESSION_EXPIRY_BUFFER_MS, SESSION_RENEW_MARGIN_MS };
+export type { UseSessionKeepaliveOptions };

package/dist/admin/src/utils/getFetchClient.d.ts

@@ -15,18 +15,26 @@ export type ApiError = errors.ApplicationError | errors.ForbiddenError | errors.
 declare const setOnTokenUpdate: (callback: ((token: string) => void) | null) => void;
 /**
  * Set the callback that will be called when the active session is no longer
- * valid (refresh token rejected by the server, or detected idle on the
- * client). This lets the active tab redirect to /auth/login without waiting
- * for the next user-initiated request to fail.
+ * valid — i.e. the server rejected the refresh token, not merely that the
+ * short-lived access token expired. This lets the tab redirect to /auth/login
+ * (after any unsaved-changes guard) rather than sitting on a dead session.
  *
  * @param callback - Function to call when the session ends, or null to clear
  */
 declare const setOnSessionExpired: (callback: (() => void) | null) => void;
+/**
+ * Re-arm session-expired notifications after a new access token is stored
+ * (silent refresh) or after a successful login.
+ */
+declare const resetSessionExpiredNotification: () => void;
 /**
  * Trigger the registered session-expired callback, if any. Safe to call from
- * non-React code (e.g., the RTK Query baseQuery 401 handler).
+ * non-React code (e.g., the RTK Query baseQuery 401 handler). Returns `false`
+ * when nothing is listening, so callers can fall back to a hard redirect
+ * instead of leaving the user on a dead page. Subsequent calls during the same
+ * dead session return `true` without invoking the handler again.
  */
-declare const triggerSessionExpired: () => void;
+declare const triggerSessionExpired: () => boolean;
 /**
  * Store the new token in the appropriate storage (localStorage or cookie)
  * and notify the app to update its state.
@@ -124,5 +132,5 @@ type FetchClient = {
  * ```
  */
 declare const getFetchClient: (defaultOptions?: FetchConfig) => FetchClient;
-export { getFetchClient, isFetchError, FetchError, attemptTokenRefresh, refreshAccessToken, storeToken, setOnTokenUpdate, setOnSessionExpired, triggerSessionExpired, ADMIN_REFRESH_LOCK, };
+export { getFetchClient, isFetchError, FetchError, attemptTokenRefresh, refreshAccessToken, storeToken, setOnTokenUpdate, setOnSessionExpired, triggerSessionExpired, resetSessionExpiredNotification, ADMIN_REFRESH_LOCK, };
 export type { FetchOptions, FetchResponse, FetchConfig, FetchClient, ErrorResponse };

package/dist/admin/src/utils/unsavedChangesRegistry.d.ts

@@ -0,0 +1,11 @@
+type UnsavedChangesCheck = () => boolean;
+/**
+ * Register a callback that reports whether a form (or other surface) has unsaved
+ * edits. Used by the auth layer to warn before session-expiry logout discards
+ * in-memory state that route blockers never see (token clear unmounts the form).
+ */
+declare const registerUnsavedChangesCheck: (id: string, check: UnsavedChangesCheck) => (() => void);
+declare const hasUnsavedChanges: () => boolean;
+declare const clearUnsavedChangesChecks: () => void;
+export { registerUnsavedChangesCheck, hasUnsavedChanges, clearUnsavedChangesChecks };
+export type { UnsavedChangesCheck };

package/dist/ee/admin/src/pages/SettingsPage/pages/AuditLogs/utils/getActionTypesDefaultMessages.d.ts

@@ -36,5 +36,9 @@ export declare const actionTypes: {
     'release.entry.remove': string;
     'release.settings.update': string;
     'audit-log.export': string;
+    'locale.create': string;
+    'locale.update': string;
+    'locale.delete': string;
+    'locale.default.update': string;
 };
 export declare const getDefaultMessage: (value: keyof typeof actionTypes) => string;

package/dist/shared/contracts/shared.d.ts

@@ -60,4 +60,5 @@ export interface FieldContentSourceMap {
     locale: string | null;
     model?: UID.Schema;
     kind?: Struct.ContentTypeKind;
+    fieldPath?: string;
 }

package/dist/shared/contracts/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../shared/contracts/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAW,SAAQ,MAAM;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE;QACV,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACpB,CAAC;IACF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,SAAU,SAAQ,MAAM;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,2BAA2B,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IACnD,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,wBAAwB,GAAG,IAAI,CACzC,SAAS,EACT,MAAM,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAChD,GAAG;IACF,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG;IAC7E,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,SAAS,EACT,UAAU,GAAG,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAC5E,GAAG;IACF,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,SAAS,EACT,IAAI,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CACvD,CAAC;AACF,MAAM,WAAW,SAAU,SAAQ,MAAM;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,SAAS,EACT,OAAO,GAAG,aAAa,GAAG,WAAW,GAAG,WAAW,CACpD,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC;CAC/B"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../shared/contracts/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAW,SAAQ,MAAM;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE;QACV,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;KACpB,CAAC;IACF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,SAAU,SAAQ,MAAM;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,2BAA2B,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IACnD,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,wBAAwB,GAAG,IAAI,CACzC,SAAS,EACT,MAAM,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAChD,GAAG;IACF,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG;IAC7E,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,SAAS,EACT,UAAU,GAAG,oBAAoB,GAAG,6BAA6B,GAAG,OAAO,CAC5E,GAAG;IACF,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,SAAS,EACT,IAAI,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,OAAO,CACvD,CAAC;AACF,MAAM,WAAW,SAAU,SAAQ,MAAM;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,SAAS,EACT,OAAO,GAAG,aAAa,GAAG,WAAW,GAAG,WAAW,CACpD,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/admin",
-  "version": "5.53.0",
+  "version": "5.54.0",
   "description": "Strapi Admin",
   "homepage": "https://strapi.io",
   "bugs": {
@@ -91,10 +91,10 @@
     "@reduxjs/toolkit": "1.9.7",
     "@strapi/design-system": "2.2.4",
     "@strapi/icons": "2.2.4",
-    "@strapi/permissions": "5.53.0",
-    "@strapi/types": "5.53.0",
-    "@strapi/typescript-utils": "5.53.0",
-    "@strapi/utils": "5.53.0",
+    "@strapi/permissions": "5.54.0",
+    "@strapi/types": "5.54.0",
+    "@strapi/typescript-utils": "5.54.0",
+    "@strapi/utils": "5.54.0",
     "@testing-library/dom": "10.4.1",
     "@testing-library/react": "16.3.2",
     "@testing-library/user-event": "14.6.1",
@@ -148,8 +148,8 @@
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@strapi/admin-test-utils": "5.53.0",
-    "@strapi/data-transfer": "5.53.0",
+    "@strapi/admin-test-utils": "5.54.0",
+    "@strapi/data-transfer": "5.54.0",
     "@testing-library/jest-dom": "6.9.1",
     "@types/codemirror5": "npm:@types/codemirror@^5.60.15",
     "@types/fs-extra": "11.0.4",

package/dist/admin/admin/src/hooks/useIdleSessionLogout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"useIdleSessionLogout.js","sources":["../../../../../admin/src/hooks/useIdleSessionLogout.ts"],"sourcesContent":["import * as React from 'react';\n\nimport { decodeAccessTokenExpiry } from '../utils/jwt';\n\nconst SESSION_EXPIRY_BUFFER_MS = 1000;\n/**\n * How long before the access token's `exp` an active tab renews. Renewing\n * ahead of expiry (rather than at it) means the refreshed token is already in\n * shared storage by the time any *other* tab's logout timer fires — so an idle\n * sibling re-syncs instead of racing the refresh and logging itself out.\n */\nconst SESSION_RENEW_MARGIN_MS = 10_000;\n\ninterface UseIdleSessionLogoutOptions {\n  /**\n   * The current admin access JWT (from Redux), or `null` when logged out.\n   */\n  token: string | null;\n  /**\n   * Called when the timer fires and the user is genuinely idle. Should clear\n   * *this tab's* local auth state and navigate to /auth/login. It must NOT\n   * broadcast a global logout (e.g. by removing the shared `isLoggedIn` key),\n   * otherwise an idle tab firing on a stale token would log out other tabs that\n   * are still active — see the cross-tab handling below.\n   */\n  onExpired: () => void;\n  /**\n   * Called when a renewal attempt is rejected by the server (the session is\n   * truly over: refresh token idle/max window elapsed). This is a\n   * server-confirmed end of session, so unlike `onExpired` it SHOULD broadcast\n   * a global logout to every tab. Falls back to `onExpired` when omitted.\n   */\n  onSessionDead?: () => void;\n  /**\n   * Read the access token currently in shared storage (localStorage/cookie).\n   * Because every open tab shares the same refresh cookie, an active tab that\n   * refreshes writes a newer access token here. When omitted, the hook never\n   * re-syncs across tabs.\n   */\n  getStoredToken?: () => string | null;\n  /**\n   * Adopt a newer shared token instead of expiring. Typically dispatches\n   * `setToken`, which updates Redux and causes this hook to re-arm against the\n   * later `exp`. Only called when `getStoredToken` returns a token whose `exp`\n   * is later than the in-memory one.\n   */\n  onResync?: (token: string) => void;\n  /**\n   * Epoch ms of the user's last interaction (pointer, key, scroll, …). Used to\n   * decide whether to silently renew (active) or log out (idle) when the access\n   * token expires. When omitted, the hook always treats expiry as idle.\n   */\n  getLastActivityAt?: () => number;\n  /**\n   * Silently renew the session (rotate the refresh token + mint a new access\n   * token). Resolves `true` on success — the resulting `setToken` re-arms this\n   * hook against the new `exp` — or `false` when the server rejects it. Only\n   * called when the user was active during the current token's lifetime.\n   */\n  renewSession?: () => Promise<boolean>;\n  /**\n   * Escape hatch for tests / dev environments where we don't want the\n   * automatic logout behavior. Mirrors the existing `_disableRenewToken`\n   * prop on `<AuthProvider>`.\n   */\n  disabled?: boolean;\n}\n\n/**\n * Keep the admin session alive while the user is active, and end it when they\n * are genuinely idle — without one tab tearing down another.\n *\n * The access token is short-lived (`accessTokenLifespan`, e.g. 30 min) and is\n * meant to be refreshed, not to be the session length. Two timers are armed per\n * token:\n *\n * - Renew (at `exp` minus a margin): if the user interacted during this token's\n *   lifetime, silently renew *ahead* of expiry. The new `setToken` re-arms the\n *   hook; a server rejection (`onSessionDead`) ends the session globally.\n *   Renewing early guarantees the refreshed token reaches shared storage before\n *   any sibling tab's logout timer fires.\n * - Logout (just after `exp`): the fallback when this tab did not renew. It\n *   first re-syncs from a token another tab refreshed (so an idle tab rides on\n *   an active sibling), then renews if activity arrived late, and only otherwise\n *   logs out — locally, so idle tabs never force-logout active ones.\n *\n * If the JWT can't be decoded (malformed, missing `exp`), the timers are skipped\n * silently — the active-tab redirect on 401 still covers the symptom on the next\n * user-initiated request.\n */\nconst useIdleSessionLogout = ({\n  token,\n  onExpired,\n  onSessionDead,\n  getStoredToken,\n  onResync,\n  getLastActivityAt,\n  renewSession,\n  disabled = false,\n}: UseIdleSessionLogoutOptions): void => {\n  React.useEffect(() => {\n    if (!token || disabled) {\n      return undefined;\n    }\n\n    const expiry = decodeAccessTokenExpiry(token);\n    if (expiry === null) {\n      return undefined;\n    }\n\n    // When this token became active. Activity recorded after this point means\n    // the user was present during the token's lifetime.\n    const armedAt = Date.now();\n    const wasActive = () =>\n      typeof getLastActivityAt === 'function' && getLastActivityAt() >= armedAt;\n\n    // Adopt a fresher token another tab wrote to shared storage. Returns true\n    // when it re-synced (caller should stop).\n    const tryResync = (): boolean => {\n      const storedToken = getStoredToken?.() ?? null;\n      if (storedToken && storedToken !== token && onResync) {\n        const storedExpiry = decodeAccessTokenExpiry(storedToken);\n        if (storedExpiry !== null && storedExpiry > expiry) {\n          onResync(storedToken);\n          return true;\n        }\n      }\n      return false;\n    };\n\n    const renew = () => {\n      renewSession!().then((renewed) => {\n        if (!renewed) {\n          // Server rejected the refresh: the session is truly over.\n          (onSessionDead ?? onExpired)();\n        }\n        // On success, storeToken -> setToken updates the token prop, which\n        // re-runs this effect and re-arms against the new exp.\n      });\n    };\n\n    // Renew ahead of expiry while the user is active.\n    const renewDelay = Math.max(expiry - armedAt - SESSION_RENEW_MARGIN_MS, 0);\n    const renewTimeoutId = window.setTimeout(() => {\n      if (tryResync()) {\n        return;\n      }\n      if (wasActive() && renewSession) {\n        renew();\n      }\n    }, renewDelay);\n\n    // Fallback decision just after expiry, for tabs that did not renew.\n    const logoutDelay = Math.max(expiry - armedAt + SESSION_EXPIRY_BUFFER_MS, 0);\n    const logoutTimeoutId = window.setTimeout(() => {\n      if (tryResync()) {\n        return;\n      }\n      if (wasActive() && renewSession) {\n        renew();\n        return;\n      }\n      // Genuinely idle: log out only this tab.\n      onExpired();\n    }, logoutDelay);\n\n    return () => {\n      window.clearTimeout(renewTimeoutId);\n      window.clearTimeout(logoutTimeoutId);\n    };\n  }, [\n    token,\n    onExpired,\n    onSessionDead,\n    getStoredToken,\n    onResync,\n    getLastActivityAt,\n    renewSession,\n    disabled,\n  ]);\n};\n\nexport { useIdleSessionLogout, SESSION_EXPIRY_BUFFER_MS, SESSION_RENEW_MARGIN_MS };\nexport type { UseIdleSessionLogoutOptions };\n"],"names":["SESSION_EXPIRY_BUFFER_MS","SESSION_RENEW_MARGIN_MS","useIdleSessionLogout","token","onExpired","onSessionDead","getStoredToken","onResync","getLastActivityAt","renewSession","disabled","React","useEffect","undefined","expiry","decodeAccessTokenExpiry","armedAt","Date","now","wasActive","tryResync","storedToken","storedExpiry","renew","then","renewed","renewDelay","Math","max","renewTimeoutId","window","setTimeout","logoutDelay","logoutTimeoutId","clearTimeout"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAIA,MAAMA,wBAAAA,GAA2B;AACjC;;;;;AAKC,UACKC,uBAAAA,GAA0B;AAyDhC;;;;;;;;;;;;;;;;;;;;;IAsBA,MAAMC,uBAAuB,CAAC,EAC5BC,KAAK,EACLC,SAAS,EACTC,aAAa,EACbC,cAAc,EACdC,QAAQ,EACRC,iBAAiB,EACjBC,YAAY,EACZC,QAAAA,GAAW,KAAK,EACY,GAAA;AAC5BC,IAAAA,gBAAAA,CAAMC,SAAS,CAAC,IAAA;QACd,IAAI,CAACT,SAASO,QAAAA,EAAU;YACtB,OAAOG,SAAAA;AACT,QAAA;AAEA,QAAA,MAAMC,SAASC,2BAAAA,CAAwBZ,KAAAA,CAAAA;AACvC,QAAA,IAAIW,WAAW,IAAA,EAAM;YACnB,OAAOD,SAAAA;AACT,QAAA;;;QAIA,MAAMG,OAAAA,GAAUC,KAAKC,GAAG,EAAA;AACxB,QAAA,MAAMC,SAAAA,GAAY,IAChB,OAAOX,iBAAAA,KAAsB,cAAcA,iBAAAA,EAAAA,IAAuBQ,OAAAA;;;AAIpE,QAAA,MAAMI,SAAAA,GAAY,IAAA;AAChB,YAAA,MAAMC,cAAcf,cAAAA,IAAAA,IAAsB,IAAA;YAC1C,IAAIe,WAAAA,IAAeA,WAAAA,KAAgBlB,KAAAA,IAASI,QAAAA,EAAU;AACpD,gBAAA,MAAMe,eAAeP,2BAAAA,CAAwBM,WAAAA,CAAAA;gBAC7C,IAAIC,YAAAA,KAAiB,IAAA,IAAQA,YAAAA,GAAeR,MAAAA,EAAQ;oBAClDP,QAAAA,CAASc,WAAAA,CAAAA;oBACT,OAAO,IAAA;AACT,gBAAA;AACF,YAAA;YACA,OAAO,KAAA;AACT,QAAA,CAAA;AAEA,QAAA,MAAME,KAAAA,GAAQ,IAAA;YACZd,YAAAA,EAAAA,CAAgBe,IAAI,CAAC,CAACC,OAAAA,GAAAA;AACpB,gBAAA,IAAI,CAACA,OAAAA,EAAS;;AAEXpB,oBAAAA,CAAAA,iBAAiBD,SAAQ,GAAA;AAC5B,gBAAA;;;AAGF,YAAA,CAAA,CAAA;AACF,QAAA,CAAA;;AAGA,QAAA,MAAMsB,aAAaC,IAAAA,CAAKC,GAAG,CAACd,MAAAA,GAASE,UAAUf,uBAAAA,EAAyB,CAAA,CAAA;QACxE,MAAM4B,cAAAA,GAAiBC,MAAAA,CAAOC,UAAU,CAAC,IAAA;AACvC,YAAA,IAAIX,SAAAA,EAAAA,EAAa;AACf,gBAAA;AACF,YAAA;AACA,YAAA,IAAID,eAAeV,YAAAA,EAAc;AAC/Bc,gBAAAA,KAAAA,EAAAA;AACF,YAAA;QACF,CAAA,EAAGG,UAAAA,CAAAA;;AAGH,QAAA,MAAMM,cAAcL,IAAAA,CAAKC,GAAG,CAACd,MAAAA,GAASE,UAAUhB,wBAAAA,EAA0B,CAAA,CAAA;QAC1E,MAAMiC,eAAAA,GAAkBH,MAAAA,CAAOC,UAAU,CAAC,IAAA;AACxC,YAAA,IAAIX,SAAAA,EAAAA,EAAa;AACf,gBAAA;AACF,YAAA;AACA,YAAA,IAAID,eAAeV,YAAAA,EAAc;AAC/Bc,gBAAAA,KAAAA,EAAAA;AACA,gBAAA;AACF,YAAA;;AAEAnB,YAAAA,SAAAA,EAAAA;QACF,CAAA,EAAG4B,WAAAA,CAAAA;QAEH,OAAO,IAAA;AACLF,YAAAA,MAAAA,CAAOI,YAAY,CAACL,cAAAA,CAAAA;AACpBC,YAAAA,MAAAA,CAAOI,YAAY,CAACD,eAAAA,CAAAA;AACtB,QAAA,CAAA;IACF,CAAA,EAAG;AACD9B,QAAAA,KAAAA;AACAC,QAAAA,SAAAA;AACAC,QAAAA,aAAAA;AACAC,QAAAA,cAAAA;AACAC,QAAAA,QAAAA;AACAC,QAAAA,iBAAAA;AACAC,QAAAA,YAAAA;AACAC,QAAAA;AACD,KAAA,CAAA;AACH;;;;;;"}

package/dist/admin/admin/src/hooks/useIdleSessionLogout.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"useIdleSessionLogout.mjs","sources":["../../../../../admin/src/hooks/useIdleSessionLogout.ts"],"sourcesContent":["import * as React from 'react';\n\nimport { decodeAccessTokenExpiry } from '../utils/jwt';\n\nconst SESSION_EXPIRY_BUFFER_MS = 1000;\n/**\n * How long before the access token's `exp` an active tab renews. Renewing\n * ahead of expiry (rather than at it) means the refreshed token is already in\n * shared storage by the time any *other* tab's logout timer fires — so an idle\n * sibling re-syncs instead of racing the refresh and logging itself out.\n */\nconst SESSION_RENEW_MARGIN_MS = 10_000;\n\ninterface UseIdleSessionLogoutOptions {\n  /**\n   * The current admin access JWT (from Redux), or `null` when logged out.\n   */\n  token: string | null;\n  /**\n   * Called when the timer fires and the user is genuinely idle. Should clear\n   * *this tab's* local auth state and navigate to /auth/login. It must NOT\n   * broadcast a global logout (e.g. by removing the shared `isLoggedIn` key),\n   * otherwise an idle tab firing on a stale token would log out other tabs that\n   * are still active — see the cross-tab handling below.\n   */\n  onExpired: () => void;\n  /**\n   * Called when a renewal attempt is rejected by the server (the session is\n   * truly over: refresh token idle/max window elapsed). This is a\n   * server-confirmed end of session, so unlike `onExpired` it SHOULD broadcast\n   * a global logout to every tab. Falls back to `onExpired` when omitted.\n   */\n  onSessionDead?: () => void;\n  /**\n   * Read the access token currently in shared storage (localStorage/cookie).\n   * Because every open tab shares the same refresh cookie, an active tab that\n   * refreshes writes a newer access token here. When omitted, the hook never\n   * re-syncs across tabs.\n   */\n  getStoredToken?: () => string | null;\n  /**\n   * Adopt a newer shared token instead of expiring. Typically dispatches\n   * `setToken`, which updates Redux and causes this hook to re-arm against the\n   * later `exp`. Only called when `getStoredToken` returns a token whose `exp`\n   * is later than the in-memory one.\n   */\n  onResync?: (token: string) => void;\n  /**\n   * Epoch ms of the user's last interaction (pointer, key, scroll, …). Used to\n   * decide whether to silently renew (active) or log out (idle) when the access\n   * token expires. When omitted, the hook always treats expiry as idle.\n   */\n  getLastActivityAt?: () => number;\n  /**\n   * Silently renew the session (rotate the refresh token + mint a new access\n   * token). Resolves `true` on success — the resulting `setToken` re-arms this\n   * hook against the new `exp` — or `false` when the server rejects it. Only\n   * called when the user was active during the current token's lifetime.\n   */\n  renewSession?: () => Promise<boolean>;\n  /**\n   * Escape hatch for tests / dev environments where we don't want the\n   * automatic logout behavior. Mirrors the existing `_disableRenewToken`\n   * prop on `<AuthProvider>`.\n   */\n  disabled?: boolean;\n}\n\n/**\n * Keep the admin session alive while the user is active, and end it when they\n * are genuinely idle — without one tab tearing down another.\n *\n * The access token is short-lived (`accessTokenLifespan`, e.g. 30 min) and is\n * meant to be refreshed, not to be the session length. Two timers are armed per\n * token:\n *\n * - Renew (at `exp` minus a margin): if the user interacted during this token's\n *   lifetime, silently renew *ahead* of expiry. The new `setToken` re-arms the\n *   hook; a server rejection (`onSessionDead`) ends the session globally.\n *   Renewing early guarantees the refreshed token reaches shared storage before\n *   any sibling tab's logout timer fires.\n * - Logout (just after `exp`): the fallback when this tab did not renew. It\n *   first re-syncs from a token another tab refreshed (so an idle tab rides on\n *   an active sibling), then renews if activity arrived late, and only otherwise\n *   logs out — locally, so idle tabs never force-logout active ones.\n *\n * If the JWT can't be decoded (malformed, missing `exp`), the timers are skipped\n * silently — the active-tab redirect on 401 still covers the symptom on the next\n * user-initiated request.\n */\nconst useIdleSessionLogout = ({\n  token,\n  onExpired,\n  onSessionDead,\n  getStoredToken,\n  onResync,\n  getLastActivityAt,\n  renewSession,\n  disabled = false,\n}: UseIdleSessionLogoutOptions): void => {\n  React.useEffect(() => {\n    if (!token || disabled) {\n      return undefined;\n    }\n\n    const expiry = decodeAccessTokenExpiry(token);\n    if (expiry === null) {\n      return undefined;\n    }\n\n    // When this token became active. Activity recorded after this point means\n    // the user was present during the token's lifetime.\n    const armedAt = Date.now();\n    const wasActive = () =>\n      typeof getLastActivityAt === 'function' && getLastActivityAt() >= armedAt;\n\n    // Adopt a fresher token another tab wrote to shared storage. Returns true\n    // when it re-synced (caller should stop).\n    const tryResync = (): boolean => {\n      const storedToken = getStoredToken?.() ?? null;\n      if (storedToken && storedToken !== token && onResync) {\n        const storedExpiry = decodeAccessTokenExpiry(storedToken);\n        if (storedExpiry !== null && storedExpiry > expiry) {\n          onResync(storedToken);\n          return true;\n        }\n      }\n      return false;\n    };\n\n    const renew = () => {\n      renewSession!().then((renewed) => {\n        if (!renewed) {\n          // Server rejected the refresh: the session is truly over.\n          (onSessionDead ?? onExpired)();\n        }\n        // On success, storeToken -> setToken updates the token prop, which\n        // re-runs this effect and re-arms against the new exp.\n      });\n    };\n\n    // Renew ahead of expiry while the user is active.\n    const renewDelay = Math.max(expiry - armedAt - SESSION_RENEW_MARGIN_MS, 0);\n    const renewTimeoutId = window.setTimeout(() => {\n      if (tryResync()) {\n        return;\n      }\n      if (wasActive() && renewSession) {\n        renew();\n      }\n    }, renewDelay);\n\n    // Fallback decision just after expiry, for tabs that did not renew.\n    const logoutDelay = Math.max(expiry - armedAt + SESSION_EXPIRY_BUFFER_MS, 0);\n    const logoutTimeoutId = window.setTimeout(() => {\n      if (tryResync()) {\n        return;\n      }\n      if (wasActive() && renewSession) {\n        renew();\n        return;\n      }\n      // Genuinely idle: log out only this tab.\n      onExpired();\n    }, logoutDelay);\n\n    return () => {\n      window.clearTimeout(renewTimeoutId);\n      window.clearTimeout(logoutTimeoutId);\n    };\n  }, [\n    token,\n    onExpired,\n    onSessionDead,\n    getStoredToken,\n    onResync,\n    getLastActivityAt,\n    renewSession,\n    disabled,\n  ]);\n};\n\nexport { useIdleSessionLogout, SESSION_EXPIRY_BUFFER_MS, SESSION_RENEW_MARGIN_MS };\nexport type { UseIdleSessionLogoutOptions };\n"],"names":["SESSION_EXPIRY_BUFFER_MS","SESSION_RENEW_MARGIN_MS","useIdleSessionLogout","token","onExpired","onSessionDead","getStoredToken","onResync","getLastActivityAt","renewSession","disabled","React","useEffect","undefined","expiry","decodeAccessTokenExpiry","armedAt","Date","now","wasActive","tryResync","storedToken","storedExpiry","renew","then","renewed","renewDelay","Math","max","renewTimeoutId","window","setTimeout","logoutDelay","logoutTimeoutId","clearTimeout"],"mappings":";;;AAIA,MAAMA,wBAAAA,GAA2B;AACjC;;;;;AAKC,UACKC,uBAAAA,GAA0B;AAyDhC;;;;;;;;;;;;;;;;;;;;;IAsBA,MAAMC,uBAAuB,CAAC,EAC5BC,KAAK,EACLC,SAAS,EACTC,aAAa,EACbC,cAAc,EACdC,QAAQ,EACRC,iBAAiB,EACjBC,YAAY,EACZC,QAAAA,GAAW,KAAK,EACY,GAAA;AAC5BC,IAAAA,KAAAA,CAAMC,SAAS,CAAC,IAAA;QACd,IAAI,CAACT,SAASO,QAAAA,EAAU;YACtB,OAAOG,SAAAA;AACT,QAAA;AAEA,QAAA,MAAMC,SAASC,uBAAAA,CAAwBZ,KAAAA,CAAAA;AACvC,QAAA,IAAIW,WAAW,IAAA,EAAM;YACnB,OAAOD,SAAAA;AACT,QAAA;;;QAIA,MAAMG,OAAAA,GAAUC,KAAKC,GAAG,EAAA;AACxB,QAAA,MAAMC,SAAAA,GAAY,IAChB,OAAOX,iBAAAA,KAAsB,cAAcA,iBAAAA,EAAAA,IAAuBQ,OAAAA;;;AAIpE,QAAA,MAAMI,SAAAA,GAAY,IAAA;AAChB,YAAA,MAAMC,cAAcf,cAAAA,IAAAA,IAAsB,IAAA;YAC1C,IAAIe,WAAAA,IAAeA,WAAAA,KAAgBlB,KAAAA,IAASI,QAAAA,EAAU;AACpD,gBAAA,MAAMe,eAAeP,uBAAAA,CAAwBM,WAAAA,CAAAA;gBAC7C,IAAIC,YAAAA,KAAiB,IAAA,IAAQA,YAAAA,GAAeR,MAAAA,EAAQ;oBAClDP,QAAAA,CAASc,WAAAA,CAAAA;oBACT,OAAO,IAAA;AACT,gBAAA;AACF,YAAA;YACA,OAAO,KAAA;AACT,QAAA,CAAA;AAEA,QAAA,MAAME,KAAAA,GAAQ,IAAA;YACZd,YAAAA,EAAAA,CAAgBe,IAAI,CAAC,CAACC,OAAAA,GAAAA;AACpB,gBAAA,IAAI,CAACA,OAAAA,EAAS;;AAEXpB,oBAAAA,CAAAA,iBAAiBD,SAAQ,GAAA;AAC5B,gBAAA;;;AAGF,YAAA,CAAA,CAAA;AACF,QAAA,CAAA;;AAGA,QAAA,MAAMsB,aAAaC,IAAAA,CAAKC,GAAG,CAACd,MAAAA,GAASE,UAAUf,uBAAAA,EAAyB,CAAA,CAAA;QACxE,MAAM4B,cAAAA,GAAiBC,MAAAA,CAAOC,UAAU,CAAC,IAAA;AACvC,YAAA,IAAIX,SAAAA,EAAAA,EAAa;AACf,gBAAA;AACF,YAAA;AACA,YAAA,IAAID,eAAeV,YAAAA,EAAc;AAC/Bc,gBAAAA,KAAAA,EAAAA;AACF,YAAA;QACF,CAAA,EAAGG,UAAAA,CAAAA;;AAGH,QAAA,MAAMM,cAAcL,IAAAA,CAAKC,GAAG,CAACd,MAAAA,GAASE,UAAUhB,wBAAAA,EAA0B,CAAA,CAAA;QAC1E,MAAMiC,eAAAA,GAAkBH,MAAAA,CAAOC,UAAU,CAAC,IAAA;AACxC,YAAA,IAAIX,SAAAA,EAAAA,EAAa;AACf,gBAAA;AACF,YAAA;AACA,YAAA,IAAID,eAAeV,YAAAA,EAAc;AAC/Bc,gBAAAA,KAAAA,EAAAA;AACA,gBAAA;AACF,YAAA;;AAEAnB,YAAAA,SAAAA,EAAAA;QACF,CAAA,EAAG4B,WAAAA,CAAAA;QAEH,OAAO,IAAA;AACLF,YAAAA,MAAAA,CAAOI,YAAY,CAACL,cAAAA,CAAAA;AACpBC,YAAAA,MAAAA,CAAOI,YAAY,CAACD,eAAAA,CAAAA;AACtB,QAAA,CAAA;IACF,CAAA,EAAG;AACD9B,QAAAA,KAAAA;AACAC,QAAAA,SAAAA;AACAC,QAAAA,aAAAA;AACAC,QAAAA,cAAAA;AACAC,QAAAA,QAAAA;AACAC,QAAAA,iBAAAA;AACAC,QAAAA,YAAAA;AACAC,QAAAA;AACD,KAAA,CAAA;AACH;;;;"}

package/dist/admin/src/hooks/useIdleSessionLogout.d.ts

@@ -1,87 +0,0 @@
-declare const SESSION_EXPIRY_BUFFER_MS = 1000;
-/**
- * How long before the access token's `exp` an active tab renews. Renewing
- * ahead of expiry (rather than at it) means the refreshed token is already in
- * shared storage by the time any *other* tab's logout timer fires — so an idle
- * sibling re-syncs instead of racing the refresh and logging itself out.
- */
-declare const SESSION_RENEW_MARGIN_MS = 10000;
-interface UseIdleSessionLogoutOptions {
-    /**
-     * The current admin access JWT (from Redux), or `null` when logged out.
-     */
-    token: string | null;
-    /**
-     * Called when the timer fires and the user is genuinely idle. Should clear
-     * *this tab's* local auth state and navigate to /auth/login. It must NOT
-     * broadcast a global logout (e.g. by removing the shared `isLoggedIn` key),
-     * otherwise an idle tab firing on a stale token would log out other tabs that
-     * are still active — see the cross-tab handling below.
-     */
-    onExpired: () => void;
-    /**
-     * Called when a renewal attempt is rejected by the server (the session is
-     * truly over: refresh token idle/max window elapsed). This is a
-     * server-confirmed end of session, so unlike `onExpired` it SHOULD broadcast
-     * a global logout to every tab. Falls back to `onExpired` when omitted.
-     */
-    onSessionDead?: () => void;
-    /**
-     * Read the access token currently in shared storage (localStorage/cookie).
-     * Because every open tab shares the same refresh cookie, an active tab that
-     * refreshes writes a newer access token here. When omitted, the hook never
-     * re-syncs across tabs.
-     */
-    getStoredToken?: () => string | null;
-    /**
-     * Adopt a newer shared token instead of expiring. Typically dispatches
-     * `setToken`, which updates Redux and causes this hook to re-arm against the
-     * later `exp`. Only called when `getStoredToken` returns a token whose `exp`
-     * is later than the in-memory one.
-     */
-    onResync?: (token: string) => void;
-    /**
-     * Epoch ms of the user's last interaction (pointer, key, scroll, …). Used to
-     * decide whether to silently renew (active) or log out (idle) when the access
-     * token expires. When omitted, the hook always treats expiry as idle.
-     */
-    getLastActivityAt?: () => number;
-    /**
-     * Silently renew the session (rotate the refresh token + mint a new access
-     * token). Resolves `true` on success — the resulting `setToken` re-arms this
-     * hook against the new `exp` — or `false` when the server rejects it. Only
-     * called when the user was active during the current token's lifetime.
-     */
-    renewSession?: () => Promise<boolean>;
-    /**
-     * Escape hatch for tests / dev environments where we don't want the
-     * automatic logout behavior. Mirrors the existing `_disableRenewToken`
-     * prop on `<AuthProvider>`.
-     */
-    disabled?: boolean;
-}
-/**
- * Keep the admin session alive while the user is active, and end it when they
- * are genuinely idle — without one tab tearing down another.
- *
- * The access token is short-lived (`accessTokenLifespan`, e.g. 30 min) and is
- * meant to be refreshed, not to be the session length. Two timers are armed per
- * token:
- *
- * - Renew (at `exp` minus a margin): if the user interacted during this token's
- *   lifetime, silently renew *ahead* of expiry. The new `setToken` re-arms the
- *   hook; a server rejection (`onSessionDead`) ends the session globally.
- *   Renewing early guarantees the refreshed token reaches shared storage before
- *   any sibling tab's logout timer fires.
- * - Logout (just after `exp`): the fallback when this tab did not renew. It
- *   first re-syncs from a token another tab refreshed (so an idle tab rides on
- *   an active sibling), then renews if activity arrived late, and only otherwise
- *   logs out — locally, so idle tabs never force-logout active ones.
- *
- * If the JWT can't be decoded (malformed, missing `exp`), the timers are skipped
- * silently — the active-tab redirect on 401 still covers the symptom on the next
- * user-initiated request.
- */
-declare const useIdleSessionLogout: ({ token, onExpired, onSessionDead, getStoredToken, onResync, getLastActivityAt, renewSession, disabled, }: UseIdleSessionLogoutOptions) => void;
-export { useIdleSessionLogout, SESSION_EXPIRY_BUFFER_MS, SESSION_RENEW_MARGIN_MS };
-export type { UseIdleSessionLogoutOptions };