@hanzo/rooms 0.1.70 → 0.1.71

package/dist/lib/session.js

@@ -15,12 +15,22 @@
  * Two derivations of one name never agree; this is the one derivation.
  */
 import { api } from './api.js';
+import { where } from '../where.js';
 /** The SDK's own keys, `hanzo_iam_`-prefixed. The far side of a boundary. */
 const PREFIX = 'hanzo_iam_';
 const ACCESS = `${PREFIX}access_token`;
 const REFRESH = `${PREFIX}refresh_token`;
 const EXPIRES = `${PREFIX}expires_at`;
 const KEYS = [ACCESS, REFRESH, `${PREFIX}id_token`, EXPIRES];
+/**
+ * The store the SDK keeps the session in: the host's (`configure({ session })`,
+ * Hanzo Desktop's keychain, where no token reaches the webview's localStorage),
+ * else this page's localStorage. Only the SDK's own keys are read from it; the
+ * rooms' own choices (the organization, the person) stay in localStorage.
+ */
+function tokens() {
+    return where().session ?? window.localStorage;
+}
 /**
  * The access token, or null.
  *
@@ -32,7 +42,7 @@ export function bearer() {
     if (typeof window === 'undefined')
         return null;
     try {
-        return window.localStorage.getItem(ACCESS);
+        return tokens().getItem(ACCESS);
     }
     catch {
         return null;
@@ -48,7 +58,7 @@ export function live() {
     if (typeof window === 'undefined')
         return false;
     try {
-        const expires = window.localStorage.getItem(EXPIRES);
+        const expires = tokens().getItem(EXPIRES);
         return Boolean(bearer()) && (!expires || Date.now() < Number(expires));
     }
     catch {
@@ -386,7 +396,7 @@ export function scope() {
  */
 export function renew() {
     try {
-        window.localStorage.setItem(EXPIRES, '0');
+        tokens().setItem(EXPIRES, '0');
     }
     catch {
         /* no store to renew */
@@ -459,8 +469,8 @@ export async function support(org) {
     const exp = claimsOf(next ?? null)?.exp;
     if (!res.ok || !next || typeof exp !== 'number')
         throw new Error(body?.msg || `IAM answered ${res.status}.`);
-    window.localStorage.setItem(ACCESS, next);
-    window.localStorage.setItem(EXPIRES, String(exp * 1000));
+    tokens().setItem(ACCESS, next);
+    tokens().setItem(EXPIRES, String(exp * 1000));
     pick(org ?? homeOf(next));
     window.location.reload();
 }

package/dist/where.d.ts

@@ -33,6 +33,12 @@ export interface Addresses {
     brand?: string;
     /** The publishable key anonymous calls carry. */
     key?: string;
+    /**
+     * Where the IAM session is kept when it is not this page's `localStorage`:
+     * the `storage` the host hands its IamProvider (Hanzo Desktop's keychain).
+     * The rooms read the access token, its expiry and its claims from it.
+     */
+    session?: Storage;
     /** The plan catalogue as the host's build last read it: the first paint. */
     plans?: BillingPlan[];
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanzo/rooms",
-  "version": "0.1.70",
+  "version": "0.1.71",
   "description": "The workspace rooms — Home, Chat, Inbox, Contacts, Meet, Cal, Drive, Board, Work, Bots — and the frame that holds them, once, for every Hanzo surface.",
   "type": "module",
   "main": "./dist/index.js",