@strapi/admin 5.53.0 → 5.55.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@strapi/admin",
-  "version": "5.53.0",
+  "version": "5.55.0",
   "description": "Strapi Admin",
   "homepage": "https://strapi.io",
   "bugs": {
@@ -91,10 +91,10 @@
     "@reduxjs/toolkit": "1.9.7",
     "@strapi/design-system": "2.2.4",
     "@strapi/icons": "2.2.4",
-    "@strapi/permissions": "5.53.0",
-    "@strapi/types": "5.53.0",
-    "@strapi/typescript-utils": "5.53.0",
-    "@strapi/utils": "5.53.0",
+    "@strapi/permissions": "5.55.0",
+    "@strapi/types": "5.55.0",
+    "@strapi/typescript-utils": "5.55.0",
+    "@strapi/utils": "5.55.0",
     "@testing-library/dom": "10.4.1",
     "@testing-library/react": "16.3.2",
     "@testing-library/user-event": "14.6.1",
@@ -148,8 +148,8 @@
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@strapi/admin-test-utils": "5.53.0",
-    "@strapi/data-transfer": "5.53.0",
+    "@strapi/admin-test-utils": "5.55.0",
+    "@strapi/data-transfer": "5.55.0",
     "@testing-library/jest-dom": "6.9.1",
     "@types/codemirror5": "npm:@types/codemirror@^5.60.15",
     "@types/fs-extra": "11.0.4",

package/dist/admin/admin/src/hooks/useIdleSessionLogout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"useIdleSessionLogout.js","sources":["../../../../../admin/src/hooks/useIdleSessionLogout.ts"],"sourcesContent":["import * as React from 'react';\n\nimport { decodeAccessTokenExpiry } from '../utils/jwt';\n\nconst SESSION_EXPIRY_BUFFER_MS = 1000;\n/**\n * How long before the access token's `exp` an active tab renews. Renewing\n * ahead of expiry (rather than at it) means the refreshed token is already in\n * shared storage by the time any *other* tab's logout timer fires — so an idle\n * sibling re-syncs instead of racing the refresh and logging itself out.\n */\nconst SESSION_RENEW_MARGIN_MS = 10_000;\n\ninterface UseIdleSessionLogoutOptions {\n  /**\n   * The current admin access JWT (from Redux), or `null` when logged out.\n   */\n  token: string | null;\n  /**\n   * Called when the timer fires and the user is genuinely idle. Should clear\n   * *this tab's* local auth state and navigate to /auth/login. It must NOT\n   * broadcast a global logout (e.g. by removing the shared `isLoggedIn` key),\n   * otherwise an idle tab firing on a stale token would log out other tabs that\n   * are still active — see the cross-tab handling below.\n   */\n  onExpired: () => void;\n  /**\n   * Called when a renewal attempt is rejected by the server (the session is\n   * truly over: refresh token idle/max window elapsed). This is a\n   * server-confirmed end of session, so unlike `onExpired` it SHOULD broadcast\n   * a global logout to every tab. Falls back to `onExpired` when omitted.\n   */\n  onSessionDead?: () => void;\n  /**\n   * Read the access token currently in shared storage (localStorage/cookie).\n   * Because every open tab shares the same refresh cookie, an active tab that\n   * refreshes writes a newer access token here. When omitted, the hook never\n   * re-syncs across tabs.\n   */\n  getStoredToken?: () => string | null;\n  /**\n   * Adopt a newer shared token instead of expiring. Typically dispatches\n   * `setToken`, which updates Redux and causes this hook to re-arm against the\n   * later `exp`. Only called when `getStoredToken` returns a token whose `exp`\n   * is later than the in-memory one.\n   */\n  onResync?: (token: string) => void;\n  /**\n   * Epoch ms of the user's last interaction (pointer, key, scroll, …). Used to\n   * decide whether to silently renew (active) or log out (idle) when the access\n   * token expires. When omitted, the hook always treats expiry as idle.\n   */\n  getLastActivityAt?: () => number;\n  /**\n   * Silently renew the session (rotate the refresh token + mint a new access\n   * token). Resolves `true` on success — the resulting `setToken` re-arms this\n   * hook against the new `exp` — or `false` when the server rejects it. Only\n   * called when the user was active during the current token's lifetime.\n   */\n  renewSession?: () => Promise<boolean>;\n  /**\n   * Escape hatch for tests / dev environments where we don't want the\n   * automatic logout behavior. Mirrors the existing `_disableRenewToken`\n   * prop on `<AuthProvider>`.\n   */\n  disabled?: boolean;\n}\n\n/**\n * Keep the admin session alive while the user is active, and end it when they\n * are genuinely idle — without one tab tearing down another.\n *\n * The access token is short-lived (`accessTokenLifespan`, e.g. 30 min) and is\n * meant to be refreshed, not to be the session length. Two timers are armed per\n * token:\n *\n * - Renew (at `exp` minus a margin): if the user interacted during this token's\n *   lifetime, silently renew *ahead* of expiry. The new `setToken` re-arms the\n *   hook; a server rejection (`onSessionDead`) ends the session globally.\n *   Renewing early guarantees the refreshed token reaches shared storage before\n *   any sibling tab's logout timer fires.\n * - Logout (just after `exp`): the fallback when this tab did not renew. It\n *   first re-syncs from a token another tab refreshed (so an idle tab rides on\n *   an active sibling), then renews if activity arrived late, and only otherwise\n *   logs out — locally, so idle tabs never force-logout active ones.\n *\n * If the JWT can't be decoded (malformed, missing `exp`), the timers are skipped\n * silently — the active-tab redirect on 401 still covers the symptom on the next\n * user-initiated request.\n */\nconst useIdleSessionLogout = ({\n  token,\n  onExpired,\n  onSessionDead,\n  getStoredToken,\n  onResync,\n  getLastActivityAt,\n  renewSession,\n  disabled = false,\n}: UseIdleSessionLogoutOptions): void => {\n  React.useEffect(() => {\n    if (!token || disabled) {\n      return undefined;\n    }\n\n    const expiry = decodeAccessTokenExpiry(token);\n    if (expiry === null) {\n      return undefined;\n    }\n\n    // When this token became active. Activity recorded after this point means\n    // the user was present during the token's lifetime.\n    const armedAt = Date.now();\n    const wasActive = () =>\n      typeof getLastActivityAt === 'function' && getLastActivityAt() >= armedAt;\n\n    // Adopt a fresher token another tab wrote to shared storage. Returns true\n    // when it re-synced (caller should stop).\n    const tryResync = (): boolean => {\n      const storedToken = getStoredToken?.() ?? null;\n      if (storedToken && storedToken !== token && onResync) {\n        const storedExpiry = decodeAccessTokenExpiry(storedToken);\n        if (storedExpiry !== null && storedExpiry > expiry) {\n          onResync(storedToken);\n          return true;\n        }\n      }\n      return false;\n    };\n\n    const renew = () => {\n      renewSession!().then((renewed) => {\n        if (!renewed) {\n          // Server rejected the refresh: the session is truly over.\n          (onSessionDead ?? onExpired)();\n        }\n        // On success, storeToken -> setToken updates the token prop, which\n        // re-runs this effect and re-arms against the new exp.\n      });\n    };\n\n    // Renew ahead of expiry while the user is active.\n    const renewDelay = Math.max(expiry - armedAt - SESSION_RENEW_MARGIN_MS, 0);\n    const renewTimeoutId = window.setTimeout(() => {\n      if (tryResync()) {\n        return;\n      }\n      if (wasActive() && renewSession) {\n        renew();\n      }\n    }, renewDelay);\n\n    // Fallback decision just after expiry, for tabs that did not renew.\n    const logoutDelay = Math.max(expiry - armedAt + SESSION_EXPIRY_BUFFER_MS, 0);\n    const logoutTimeoutId = window.setTimeout(() => {\n      if (tryResync()) {\n        return;\n      }\n      if (wasActive() && renewSession) {\n        renew();\n        return;\n      }\n      // Genuinely idle: log out only this tab.\n      onExpired();\n    }, logoutDelay);\n\n    return () => {\n      window.clearTimeout(renewTimeoutId);\n      window.clearTimeout(logoutTimeoutId);\n    };\n  }, [\n    token,\n    onExpired,\n    onSessionDead,\n    getStoredToken,\n    onResync,\n    getLastActivityAt,\n    renewSession,\n    disabled,\n  ]);\n};\n\nexport { useIdleSessionLogout, SESSION_EXPIRY_BUFFER_MS, SESSION_RENEW_MARGIN_MS };\nexport type { UseIdleSessionLogoutOptions };\n"],"names":["SESSION_EXPIRY_BUFFER_MS","SESSION_RENEW_MARGIN_MS","useIdleSessionLogout","token","onExpired","onSessionDead","getStoredToken","onResync","getLastActivityAt","renewSession","disabled","React","useEffect","undefined","expiry","decodeAccessTokenExpiry","armedAt","Date","now","wasActive","tryResync","storedToken","storedExpiry","renew","then","renewed","renewDelay","Math","max","renewTimeoutId","window","setTimeout","logoutDelay","logoutTimeoutId","clearTimeout"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAIA,MAAMA,wBAAAA,GAA2B;AACjC;;;;;AAKC,UACKC,uBAAAA,GAA0B;AAyDhC;;;;;;;;;;;;;;;;;;;;;IAsBA,MAAMC,uBAAuB,CAAC,EAC5BC,KAAK,EACLC,SAAS,EACTC,aAAa,EACbC,cAAc,EACdC,QAAQ,EACRC,iBAAiB,EACjBC,YAAY,EACZC,QAAAA,GAAW,KAAK,EACY,GAAA;AAC5BC,IAAAA,gBAAAA,CAAMC,SAAS,CAAC,IAAA;QACd,IAAI,CAACT,SAASO,QAAAA,EAAU;YACtB,OAAOG,SAAAA;AACT,QAAA;AAEA,QAAA,MAAMC,SAASC,2BAAAA,CAAwBZ,KAAAA,CAAAA;AACvC,QAAA,IAAIW,WAAW,IAAA,EAAM;YACnB,OAAOD,SAAAA;AACT,QAAA;;;QAIA,MAAMG,OAAAA,GAAUC,KAAKC,GAAG,EAAA;AACxB,QAAA,MAAMC,SAAAA,GAAY,IAChB,OAAOX,iBAAAA,KAAsB,cAAcA,iBAAAA,EAAAA,IAAuBQ,OAAAA;;;AAIpE,QAAA,MAAMI,SAAAA,GAAY,IAAA;AAChB,YAAA,MAAMC,cAAcf,cAAAA,IAAAA,IAAsB,IAAA;YAC1C,IAAIe,WAAAA,IAAeA,WAAAA,KAAgBlB,KAAAA,IAASI,QAAAA,EAAU;AACpD,gBAAA,MAAMe,eAAeP,2BAAAA,CAAwBM,WAAAA,CAAAA;gBAC7C,IAAIC,YAAAA,KAAiB,IAAA,IAAQA,YAAAA,GAAeR,MAAAA,EAAQ;oBAClDP,QAAAA,CAASc,WAAAA,CAAAA;oBACT,OAAO,IAAA;AACT,gBAAA;AACF,YAAA;YACA,OAAO,KAAA;AACT,QAAA,CAAA;AAEA,QAAA,MAAME,KAAAA,GAAQ,IAAA;YACZd,YAAAA,EAAAA,CAAgBe,IAAI,CAAC,CAACC,OAAAA,GAAAA;AACpB,gBAAA,IAAI,CAACA,OAAAA,EAAS;;AAEXpB,oBAAAA,CAAAA,iBAAiBD,SAAQ,GAAA;AAC5B,gBAAA;;;AAGF,YAAA,CAAA,CAAA;AACF,QAAA,CAAA;;AAGA,QAAA,MAAMsB,aAAaC,IAAAA,CAAKC,GAAG,CAACd,MAAAA,GAASE,UAAUf,uBAAAA,EAAyB,CAAA,CAAA;QACxE,MAAM4B,cAAAA,GAAiBC,MAAAA,CAAOC,UAAU,CAAC,IAAA;AACvC,YAAA,IAAIX,SAAAA,EAAAA,EAAa;AACf,gBAAA;AACF,YAAA;AACA,YAAA,IAAID,eAAeV,YAAAA,EAAc;AAC/Bc,gBAAAA,KAAAA,EAAAA;AACF,YAAA;QACF,CAAA,EAAGG,UAAAA,CAAAA;;AAGH,QAAA,MAAMM,cAAcL,IAAAA,CAAKC,GAAG,CAACd,MAAAA,GAASE,UAAUhB,wBAAAA,EAA0B,CAAA,CAAA;QAC1E,MAAMiC,eAAAA,GAAkBH,MAAAA,CAAOC,UAAU,CAAC,IAAA;AACxC,YAAA,IAAIX,SAAAA,EAAAA,EAAa;AACf,gBAAA;AACF,YAAA;AACA,YAAA,IAAID,eAAeV,YAAAA,EAAc;AAC/Bc,gBAAAA,KAAAA,EAAAA;AACA,gBAAA;AACF,YAAA;;AAEAnB,YAAAA,SAAAA,EAAAA;QACF,CAAA,EAAG4B,WAAAA,CAAAA;QAEH,OAAO,IAAA;AACLF,YAAAA,MAAAA,CAAOI,YAAY,CAACL,cAAAA,CAAAA;AACpBC,YAAAA,MAAAA,CAAOI,YAAY,CAACD,eAAAA,CAAAA;AACtB,QAAA,CAAA;IACF,CAAA,EAAG;AACD9B,QAAAA,KAAAA;AACAC,QAAAA,SAAAA;AACAC,QAAAA,aAAAA;AACAC,QAAAA,cAAAA;AACAC,QAAAA,QAAAA;AACAC,QAAAA,iBAAAA;AACAC,QAAAA,YAAAA;AACAC,QAAAA;AACD,KAAA,CAAA;AACH;;;;;;"}

package/dist/admin/admin/src/hooks/useIdleSessionLogout.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"useIdleSessionLogout.mjs","sources":["../../../../../admin/src/hooks/useIdleSessionLogout.ts"],"sourcesContent":["import * as React from 'react';\n\nimport { decodeAccessTokenExpiry } from '../utils/jwt';\n\nconst SESSION_EXPIRY_BUFFER_MS = 1000;\n/**\n * How long before the access token's `exp` an active tab renews. Renewing\n * ahead of expiry (rather than at it) means the refreshed token is already in\n * shared storage by the time any *other* tab's logout timer fires — so an idle\n * sibling re-syncs instead of racing the refresh and logging itself out.\n */\nconst SESSION_RENEW_MARGIN_MS = 10_000;\n\ninterface UseIdleSessionLogoutOptions {\n  /**\n   * The current admin access JWT (from Redux), or `null` when logged out.\n   */\n  token: string | null;\n  /**\n   * Called when the timer fires and the user is genuinely idle. Should clear\n   * *this tab's* local auth state and navigate to /auth/login. It must NOT\n   * broadcast a global logout (e.g. by removing the shared `isLoggedIn` key),\n   * otherwise an idle tab firing on a stale token would log out other tabs that\n   * are still active — see the cross-tab handling below.\n   */\n  onExpired: () => void;\n  /**\n   * Called when a renewal attempt is rejected by the server (the session is\n   * truly over: refresh token idle/max window elapsed). This is a\n   * server-confirmed end of session, so unlike `onExpired` it SHOULD broadcast\n   * a global logout to every tab. Falls back to `onExpired` when omitted.\n   */\n  onSessionDead?: () => void;\n  /**\n   * Read the access token currently in shared storage (localStorage/cookie).\n   * Because every open tab shares the same refresh cookie, an active tab that\n   * refreshes writes a newer access token here. When omitted, the hook never\n   * re-syncs across tabs.\n   */\n  getStoredToken?: () => string | null;\n  /**\n   * Adopt a newer shared token instead of expiring. Typically dispatches\n   * `setToken`, which updates Redux and causes this hook to re-arm against the\n   * later `exp`. Only called when `getStoredToken` returns a token whose `exp`\n   * is later than the in-memory one.\n   */\n  onResync?: (token: string) => void;\n  /**\n   * Epoch ms of the user's last interaction (pointer, key, scroll, …). Used to\n   * decide whether to silently renew (active) or log out (idle) when the access\n   * token expires. When omitted, the hook always treats expiry as idle.\n   */\n  getLastActivityAt?: () => number;\n  /**\n   * Silently renew the session (rotate the refresh token + mint a new access\n   * token). Resolves `true` on success — the resulting `setToken` re-arms this\n   * hook against the new `exp` — or `false` when the server rejects it. Only\n   * called when the user was active during the current token's lifetime.\n   */\n  renewSession?: () => Promise<boolean>;\n  /**\n   * Escape hatch for tests / dev environments where we don't want the\n   * automatic logout behavior. Mirrors the existing `_disableRenewToken`\n   * prop on `<AuthProvider>`.\n   */\n  disabled?: boolean;\n}\n\n/**\n * Keep the admin session alive while the user is active, and end it when they\n * are genuinely idle — without one tab tearing down another.\n *\n * The access token is short-lived (`accessTokenLifespan`, e.g. 30 min) and is\n * meant to be refreshed, not to be the session length. Two timers are armed per\n * token:\n *\n * - Renew (at `exp` minus a margin): if the user interacted during this token's\n *   lifetime, silently renew *ahead* of expiry. The new `setToken` re-arms the\n *   hook; a server rejection (`onSessionDead`) ends the session globally.\n *   Renewing early guarantees the refreshed token reaches shared storage before\n *   any sibling tab's logout timer fires.\n * - Logout (just after `exp`): the fallback when this tab did not renew. It\n *   first re-syncs from a token another tab refreshed (so an idle tab rides on\n *   an active sibling), then renews if activity arrived late, and only otherwise\n *   logs out — locally, so idle tabs never force-logout active ones.\n *\n * If the JWT can't be decoded (malformed, missing `exp`), the timers are skipped\n * silently — the active-tab redirect on 401 still covers the symptom on the next\n * user-initiated request.\n */\nconst useIdleSessionLogout = ({\n  token,\n  onExpired,\n  onSessionDead,\n  getStoredToken,\n  onResync,\n  getLastActivityAt,\n  renewSession,\n  disabled = false,\n}: UseIdleSessionLogoutOptions): void => {\n  React.useEffect(() => {\n    if (!token || disabled) {\n      return undefined;\n    }\n\n    const expiry = decodeAccessTokenExpiry(token);\n    if (expiry === null) {\n      return undefined;\n    }\n\n    // When this token became active. Activity recorded after this point means\n    // the user was present during the token's lifetime.\n    const armedAt = Date.now();\n    const wasActive = () =>\n      typeof getLastActivityAt === 'function' && getLastActivityAt() >= armedAt;\n\n    // Adopt a fresher token another tab wrote to shared storage. Returns true\n    // when it re-synced (caller should stop).\n    const tryResync = (): boolean => {\n      const storedToken = getStoredToken?.() ?? null;\n      if (storedToken && storedToken !== token && onResync) {\n        const storedExpiry = decodeAccessTokenExpiry(storedToken);\n        if (storedExpiry !== null && storedExpiry > expiry) {\n          onResync(storedToken);\n          return true;\n        }\n      }\n      return false;\n    };\n\n    const renew = () => {\n      renewSession!().then((renewed) => {\n        if (!renewed) {\n          // Server rejected the refresh: the session is truly over.\n          (onSessionDead ?? onExpired)();\n        }\n        // On success, storeToken -> setToken updates the token prop, which\n        // re-runs this effect and re-arms against the new exp.\n      });\n    };\n\n    // Renew ahead of expiry while the user is active.\n    const renewDelay = Math.max(expiry - armedAt - SESSION_RENEW_MARGIN_MS, 0);\n    const renewTimeoutId = window.setTimeout(() => {\n      if (tryResync()) {\n        return;\n      }\n      if (wasActive() && renewSession) {\n        renew();\n      }\n    }, renewDelay);\n\n    // Fallback decision just after expiry, for tabs that did not renew.\n    const logoutDelay = Math.max(expiry - armedAt + SESSION_EXPIRY_BUFFER_MS, 0);\n    const logoutTimeoutId = window.setTimeout(() => {\n      if (tryResync()) {\n        return;\n      }\n      if (wasActive() && renewSession) {\n        renew();\n        return;\n      }\n      // Genuinely idle: log out only this tab.\n      onExpired();\n    }, logoutDelay);\n\n    return () => {\n      window.clearTimeout(renewTimeoutId);\n      window.clearTimeout(logoutTimeoutId);\n    };\n  }, [\n    token,\n    onExpired,\n    onSessionDead,\n    getStoredToken,\n    onResync,\n    getLastActivityAt,\n    renewSession,\n    disabled,\n  ]);\n};\n\nexport { useIdleSessionLogout, SESSION_EXPIRY_BUFFER_MS, SESSION_RENEW_MARGIN_MS };\nexport type { UseIdleSessionLogoutOptions };\n"],"names":["SESSION_EXPIRY_BUFFER_MS","SESSION_RENEW_MARGIN_MS","useIdleSessionLogout","token","onExpired","onSessionDead","getStoredToken","onResync","getLastActivityAt","renewSession","disabled","React","useEffect","undefined","expiry","decodeAccessTokenExpiry","armedAt","Date","now","wasActive","tryResync","storedToken","storedExpiry","renew","then","renewed","renewDelay","Math","max","renewTimeoutId","window","setTimeout","logoutDelay","logoutTimeoutId","clearTimeout"],"mappings":";;;AAIA,MAAMA,wBAAAA,GAA2B;AACjC;;;;;AAKC,UACKC,uBAAAA,GAA0B;AAyDhC;;;;;;;;;;;;;;;;;;;;;IAsBA,MAAMC,uBAAuB,CAAC,EAC5BC,KAAK,EACLC,SAAS,EACTC,aAAa,EACbC,cAAc,EACdC,QAAQ,EACRC,iBAAiB,EACjBC,YAAY,EACZC,QAAAA,GAAW,KAAK,EACY,GAAA;AAC5BC,IAAAA,KAAAA,CAAMC,SAAS,CAAC,IAAA;QACd,IAAI,CAACT,SAASO,QAAAA,EAAU;YACtB,OAAOG,SAAAA;AACT,QAAA;AAEA,QAAA,MAAMC,SAASC,uBAAAA,CAAwBZ,KAAAA,CAAAA;AACvC,QAAA,IAAIW,WAAW,IAAA,EAAM;YACnB,OAAOD,SAAAA;AACT,QAAA;;;QAIA,MAAMG,OAAAA,GAAUC,KAAKC,GAAG,EAAA;AACxB,QAAA,MAAMC,SAAAA,GAAY,IAChB,OAAOX,iBAAAA,KAAsB,cAAcA,iBAAAA,EAAAA,IAAuBQ,OAAAA;;;AAIpE,QAAA,MAAMI,SAAAA,GAAY,IAAA;AAChB,YAAA,MAAMC,cAAcf,cAAAA,IAAAA,IAAsB,IAAA;YAC1C,IAAIe,WAAAA,IAAeA,WAAAA,KAAgBlB,KAAAA,IAASI,QAAAA,EAAU;AACpD,gBAAA,MAAMe,eAAeP,uBAAAA,CAAwBM,WAAAA,CAAAA;gBAC7C,IAAIC,YAAAA,KAAiB,IAAA,IAAQA,YAAAA,GAAeR,MAAAA,EAAQ;oBAClDP,QAAAA,CAASc,WAAAA,CAAAA;oBACT,OAAO,IAAA;AACT,gBAAA;AACF,YAAA;YACA,OAAO,KAAA;AACT,QAAA,CAAA;AAEA,QAAA,MAAME,KAAAA,GAAQ,IAAA;YACZd,YAAAA,EAAAA,CAAgBe,IAAI,CAAC,CAACC,OAAAA,GAAAA;AACpB,gBAAA,IAAI,CAACA,OAAAA,EAAS;;AAEXpB,oBAAAA,CAAAA,iBAAiBD,SAAQ,GAAA;AAC5B,gBAAA;;;AAGF,YAAA,CAAA,CAAA;AACF,QAAA,CAAA;;AAGA,QAAA,MAAMsB,aAAaC,IAAAA,CAAKC,GAAG,CAACd,MAAAA,GAASE,UAAUf,uBAAAA,EAAyB,CAAA,CAAA;QACxE,MAAM4B,cAAAA,GAAiBC,MAAAA,CAAOC,UAAU,CAAC,IAAA;AACvC,YAAA,IAAIX,SAAAA,EAAAA,EAAa;AACf,gBAAA;AACF,YAAA;AACA,YAAA,IAAID,eAAeV,YAAAA,EAAc;AAC/Bc,gBAAAA,KAAAA,EAAAA;AACF,YAAA;QACF,CAAA,EAAGG,UAAAA,CAAAA;;AAGH,QAAA,MAAMM,cAAcL,IAAAA,CAAKC,GAAG,CAACd,MAAAA,GAASE,UAAUhB,wBAAAA,EAA0B,CAAA,CAAA;QAC1E,MAAMiC,eAAAA,GAAkBH,MAAAA,CAAOC,UAAU,CAAC,IAAA;AACxC,YAAA,IAAIX,SAAAA,EAAAA,EAAa;AACf,gBAAA;AACF,YAAA;AACA,YAAA,IAAID,eAAeV,YAAAA,EAAc;AAC/Bc,gBAAAA,KAAAA,EAAAA;AACA,gBAAA;AACF,YAAA;;AAEAnB,YAAAA,SAAAA,EAAAA;QACF,CAAA,EAAG4B,WAAAA,CAAAA;QAEH,OAAO,IAAA;AACLF,YAAAA,MAAAA,CAAOI,YAAY,CAACL,cAAAA,CAAAA;AACpBC,YAAAA,MAAAA,CAAOI,YAAY,CAACD,eAAAA,CAAAA;AACtB,QAAA,CAAA;IACF,CAAA,EAAG;AACD9B,QAAAA,KAAAA;AACAC,QAAAA,SAAAA;AACAC,QAAAA,aAAAA;AACAC,QAAAA,cAAAA;AACAC,QAAAA,QAAAA;AACAC,QAAAA,iBAAAA;AACAC,QAAAA,YAAAA;AACAC,QAAAA;AACD,KAAA,CAAA;AACH;;;;"}

package/dist/admin/src/hooks/useIdleSessionLogout.d.ts

@@ -1,87 +0,0 @@
-declare const SESSION_EXPIRY_BUFFER_MS = 1000;
-/**
- * How long before the access token's `exp` an active tab renews. Renewing
- * ahead of expiry (rather than at it) means the refreshed token is already in
- * shared storage by the time any *other* tab's logout timer fires — so an idle
- * sibling re-syncs instead of racing the refresh and logging itself out.
- */
-declare const SESSION_RENEW_MARGIN_MS = 10000;
-interface UseIdleSessionLogoutOptions {
-    /**
-     * The current admin access JWT (from Redux), or `null` when logged out.
-     */
-    token: string | null;
-    /**
-     * Called when the timer fires and the user is genuinely idle. Should clear
-     * *this tab's* local auth state and navigate to /auth/login. It must NOT
-     * broadcast a global logout (e.g. by removing the shared `isLoggedIn` key),
-     * otherwise an idle tab firing on a stale token would log out other tabs that
-     * are still active — see the cross-tab handling below.
-     */
-    onExpired: () => void;
-    /**
-     * Called when a renewal attempt is rejected by the server (the session is
-     * truly over: refresh token idle/max window elapsed). This is a
-     * server-confirmed end of session, so unlike `onExpired` it SHOULD broadcast
-     * a global logout to every tab. Falls back to `onExpired` when omitted.
-     */
-    onSessionDead?: () => void;
-    /**
-     * Read the access token currently in shared storage (localStorage/cookie).
-     * Because every open tab shares the same refresh cookie, an active tab that
-     * refreshes writes a newer access token here. When omitted, the hook never
-     * re-syncs across tabs.
-     */
-    getStoredToken?: () => string | null;
-    /**
-     * Adopt a newer shared token instead of expiring. Typically dispatches
-     * `setToken`, which updates Redux and causes this hook to re-arm against the
-     * later `exp`. Only called when `getStoredToken` returns a token whose `exp`
-     * is later than the in-memory one.
-     */
-    onResync?: (token: string) => void;
-    /**
-     * Epoch ms of the user's last interaction (pointer, key, scroll, …). Used to
-     * decide whether to silently renew (active) or log out (idle) when the access
-     * token expires. When omitted, the hook always treats expiry as idle.
-     */
-    getLastActivityAt?: () => number;
-    /**
-     * Silently renew the session (rotate the refresh token + mint a new access
-     * token). Resolves `true` on success — the resulting `setToken` re-arms this
-     * hook against the new `exp` — or `false` when the server rejects it. Only
-     * called when the user was active during the current token's lifetime.
-     */
-    renewSession?: () => Promise<boolean>;
-    /**
-     * Escape hatch for tests / dev environments where we don't want the
-     * automatic logout behavior. Mirrors the existing `_disableRenewToken`
-     * prop on `<AuthProvider>`.
-     */
-    disabled?: boolean;
-}
-/**
- * Keep the admin session alive while the user is active, and end it when they
- * are genuinely idle — without one tab tearing down another.
- *
- * The access token is short-lived (`accessTokenLifespan`, e.g. 30 min) and is
- * meant to be refreshed, not to be the session length. Two timers are armed per
- * token:
- *
- * - Renew (at `exp` minus a margin): if the user interacted during this token's
- *   lifetime, silently renew *ahead* of expiry. The new `setToken` re-arms the
- *   hook; a server rejection (`onSessionDead`) ends the session globally.
- *   Renewing early guarantees the refreshed token reaches shared storage before
- *   any sibling tab's logout timer fires.
- * - Logout (just after `exp`): the fallback when this tab did not renew. It
- *   first re-syncs from a token another tab refreshed (so an idle tab rides on
- *   an active sibling), then renews if activity arrived late, and only otherwise
- *   logs out — locally, so idle tabs never force-logout active ones.
- *
- * If the JWT can't be decoded (malformed, missing `exp`), the timers are skipped
- * silently — the active-tab redirect on 401 still covers the symptom on the next
- * user-initiated request.
- */
-declare const useIdleSessionLogout: ({ token, onExpired, onSessionDead, getStoredToken, onResync, getLastActivityAt, renewSession, disabled, }: UseIdleSessionLogoutOptions) => void;
-export { useIdleSessionLogout, SESSION_EXPIRY_BUFFER_MS, SESSION_RENEW_MARGIN_MS };
-export type { UseIdleSessionLogoutOptions };