@hanzo/dashboard 0.2.1 → 0.2.2

package/README.md

@@ -84,7 +84,7 @@ const config: OverviewConfig = {
   load: async ({ range }) => fromMyApi(await MyApi.overview(range)), // → OverviewData
 }
 
-<Overview config={config} isGlobalAdmin={amAdmin} />
+<Overview config={config} superAdmin={superAdmin(claims)} /> // @hanzo/iam's one reading
 ```
 
 The loader returns the normalized **`OverviewData`** (`kpi` / `series` / `distribution`
@@ -178,8 +178,8 @@ Extracted (and generalized: no `~/lib/*` / `~/config` imports) from
 
 - **Icons** are consumer-supplied (`IconComponent` = a `size`/`color` icon), replacing
   the console's `ProductIcon` from its registry.
-- **`Overview`** drops `~/lib/api` `ApiError`, `useIsGlobalAdmin`, `PageHeader`,
-  `FadeIn`, and `States` — `isGlobalAdmin` is now a prop and the header/fade/error
+- **`Overview`** drops `~/lib/api` `ApiError`, the console's SuperAdmin hook, `PageHeader`,
+  `FadeIn`, and `States` — `superAdmin` is now a prop (the host's verdict) and the header/fade/error
   chrome is inlined (self-contained).
 - **Landing** takes brand/docs/support/discord/accent from `LandingConfig` (was
   `~/config`). `LandingHero` inlines the hero graphic + accent button (was
@@ -205,7 +205,7 @@ per component:
    `@hanzo/dashboard`; `RailwayDeploy` + `LandingMetrics` import these hooks.
 3. **Overview** — replace `overview/living/{config,logic,tiles,LivingOverview}` with
    thin wrappers over the package. The console's `LivingOverviewModule` keeps its
-   registry-router wrapper and passes `isGlobalAdmin={useIsGlobalAdmin()}` +
+   registry-router wrapper and passes `superAdmin={useIsSuperAdmin()}` +
    maps `ApiError` into the driver's caught error. `PageHeader`/`FadeIn`/`States`
    stay in console (they're used elsewhere) — the driver now inlines its own.
 4. **Landing** — replace `products/landing/*` with the package; the console builds a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanzo/dashboard",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "type": "module",
   "description": "Hanzo Dashboard — the reusable dashboard layer on @hanzo/gui: monochrome SVG charts, a videogame-like LivingOverview (count-up KPIs, live sparklines, streaming feed, health), the ProductLanding kit, and a Pipeline deploy animation. Pure (data via props/loaders), typed, reduced-motion-guarded. Extracted from the Hanzo Cloud Console so every Hanzo app composes ONE dashboard system.",
   "exports": {

package/src/overview/Overview.tsx

@@ -35,7 +35,7 @@ const RANGES: { key: OverviewRange; label: string }[] = [
   { key: '30d', label: '30D' },
 ]
 
-export function Overview({ config, allOrgs, isGlobalAdmin = false }: { config: OverviewConfig; allOrgs?: boolean; isGlobalAdmin?: boolean }) {
+export function Overview({ config, allOrgs, superAdmin = false }: { config: OverviewConfig; allOrgs?: boolean; superAdmin?: boolean }) {
   const [range, setRange] = useState<OverviewRange>('24h')
   const [state, setState] = useState<Loadable<OverviewData>>({ s: 'loading' })
   const [refreshing, setRefreshing] = useState(false)
@@ -57,7 +57,7 @@ export function Overview({ config, allOrgs, isGlobalAdmin = false }: { config: O
     const first = state.s === 'loading'
     if (!first) setRefreshing(true)
     config
-      .load({ range, allOrgs, isGlobalAdmin })
+      .load({ range, allOrgs, superAdmin })
       .then((v) => {
         if (id === reqRef.current) setState({ s: 'ready', v })
       })
@@ -74,7 +74,7 @@ export function Overview({ config, allOrgs, isGlobalAdmin = false }: { config: O
         if (id === reqRef.current) setRefreshing(false)
       })
     // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [range, allOrgs, isGlobalAdmin, tick, config])
+  }, [range, allOrgs, superAdmin, tick, config])
 
   const onRange = (k: OverviewRange) => {
     setRange(k)

package/src/overview/config.ts

@@ -142,15 +142,16 @@ export type LiveConfig = {
 /** The context passed to a loader (range + org scope). */
 export type OverviewContext = {
   range: OverviewRange
-  /** Global-admin all-orgs god view. */
+  /** SuperAdmin all-orgs god view. */
   allOrgs?: boolean
   /**
-   * True when the viewer is a global (cross-tenant) admin. Loaders use this to
-   * SKIP admin-only aggregates that a tenant user's browser would only ever get a
-   * 403 from, going straight to the org-scoped source instead — the board renders
-   * the same, minus the console noise.
+   * The host's SuperAdmin verdict (a person whose home org is the reserved `admin`
+   * org, as the server or @hanzo/iam `superAdmin` states it — never derived here).
+   * Loaders use this to SKIP admin-only aggregates that a tenant user's browser
+   * would only ever get a 403 from, going straight to the org-scoped source
+   * instead — the board renders the same, minus the console noise.
    */
-  isGlobalAdmin?: boolean
+  superAdmin?: boolean
 }
 
 export type OverviewRange = '24h' | '7d' | '30d'

package/src/overview/superadmin.test.ts

@@ -0,0 +1,36 @@
+// The dashboard decides no authority. SuperAdmin is the HOST's verdict (the server's
+// `isSuperAdmin`, or @hanzo/iam `superAdmin(claims)` — a person whose home org is the
+// reserved `admin` org), and the overview only carries it to the product's loader
+// under that one name, so a loader can skip a fleet aggregate the viewer would be
+// refused. These hold the package to that: no predicate of its own, one name.
+import { describe, expect, test } from 'bun:test'
+import { readFileSync, readdirSync, statSync } from 'node:fs'
+import { join } from 'node:path'
+
+const SRC = join(import.meta.dir, '..')
+
+function sources(dir: string): string[] {
+  return readdirSync(dir).flatMap((name) => {
+    const p = join(dir, name)
+    if (statSync(p).isDirectory()) return sources(p)
+    return /\.(ts|tsx)$/.test(name) && !/\.test\.tsx?$/.test(name) ? [p] : []
+  })
+}
+
+describe('SuperAdmin in @hanzo/dashboard', () => {
+  test('the overview hands the loader the host verdict as superAdmin', () => {
+    const overview = readFileSync(join(SRC, 'overview', 'Overview.tsx'), 'utf8')
+    expect(overview).toMatch(/superAdmin = false \}: \{ config: OverviewConfig; allOrgs\?: boolean; superAdmin\?: boolean \}/)
+    expect(overview).toContain('.load({ range, allOrgs, superAdmin })')
+    const config = readFileSync(join(SRC, 'overview', 'config.ts'), 'utf8')
+    expect(config).toMatch(/\n  superAdmin\?: boolean\n/)
+  })
+
+  test('no source decides SuperAdmin itself or names it another way', () => {
+    for (const file of sources(SRC)) {
+      const text = readFileSync(file, 'utf8')
+      expect({ file, hit: /isGlobalAdmin|global[ -]admin/i.test(text) }).toEqual({ file, hit: false })
+      expect({ file, hit: /owner\s*===?\s*['"]admin['"]|orgs\?*\.?\[0\]/.test(text) }).toEqual({ file, hit: false })
+    }
+  })
+})