@hanzo/rooms 0.1.70 → 0.1.72

package/dist/lib/session.d.ts

@@ -123,11 +123,20 @@ export declare function own(sub: string | undefined): void;
  */
 export declare function follow(was: string | undefined, moved: () => void): () => void;
 /**
- * The organizations the token says this person belongs to, home first.
- * Empty for an account that has not made one: the SDK's own list falls back to
- * the `owner` claim, which is the application's org and nobody's to work in.
+ * The brands' directories (hanzoai/authz `IsDirectory`): the org a customer's
+ * account lives in, its home, and nobody's to work in. IAM lists the home first
+ * in the token's `orgs`; cloud opens a directory to no one.
+ */
+export declare const DIRECTORIES: readonly string[];
+/**
+ * The organizations this person works in, as the token names them: every org of
+ * its `orgs` but a directory, which is a home and nobody's tenant. Empty for an
+ * account that has not made one: the SDK's own list falls back to the `owner`
+ * claim, which is the application's org and nobody's to work in.
  */
 export declare function orgs(): string[];
+/** The org of the person's own row: the first entry of the token's `orgs`, a directory or not. */
+export declare function home(): string | null;
 /**
  * The reader's role in one organization as IAM signed it into the token's `orgs`
  * claim — owner, admin or member — or null where the token names no such org.

package/dist/lib/session.js

@@ -15,12 +15,22 @@
  * Two derivations of one name never agree; this is the one derivation.
  */
 import { api } from './api.js';
+import { where } from '../where.js';
 /** The SDK's own keys, `hanzo_iam_`-prefixed. The far side of a boundary. */
 const PREFIX = 'hanzo_iam_';
 const ACCESS = `${PREFIX}access_token`;
 const REFRESH = `${PREFIX}refresh_token`;
 const EXPIRES = `${PREFIX}expires_at`;
 const KEYS = [ACCESS, REFRESH, `${PREFIX}id_token`, EXPIRES];
+/**
+ * The store the SDK keeps the session in: the host's (`configure({ session })`,
+ * Hanzo Desktop's keychain, where no token reaches the webview's localStorage),
+ * else this page's localStorage. Only the SDK's own keys are read from it; the
+ * rooms' own choices (the organization, the person) stay in localStorage.
+ */
+function tokens() {
+    return where().session ?? window.localStorage;
+}
 /**
  * The access token, or null.
  *
@@ -32,7 +42,7 @@ export function bearer() {
     if (typeof window === 'undefined')
         return null;
     try {
-        return window.localStorage.getItem(ACCESS);
+        return tokens().getItem(ACCESS);
     }
     catch {
         return null;
@@ -48,7 +58,7 @@ export function live() {
     if (typeof window === 'undefined')
         return false;
     try {
-        const expires = window.localStorage.getItem(EXPIRES);
+        const expires = tokens().getItem(EXPIRES);
         return Boolean(bearer()) && (!expires || Date.now() < Number(expires));
     }
     catch {
@@ -295,12 +305,14 @@ function claims() {
     return claimsOf(bearer());
 }
 /**
- * The organizations the token says this person belongs to, home first.
- * Empty for an account that has not made one: the SDK's own list falls back to
- * the `owner` claim, which is the application's org and nobody's to work in.
+ * The brands' directories (hanzoai/authz `IsDirectory`): the org a customer's
+ * account lives in, its home, and nobody's to work in. IAM lists the home first
+ * in the token's `orgs`; cloud opens a directory to no one.
  */
-export function orgs() {
-    const set = claims()?.orgs;
+export const DIRECTORIES = ['hanzo-id', 'lux-id', 'zoo-id', 'pars-id'];
+/** Every org the token's `orgs` names, home first, each once. */
+function listed(token) {
+    const set = claimsOf(token)?.orgs;
     const out = [];
     for (const ref of Array.isArray(set) ? set : []) {
         const o = ref?.org;
@@ -309,6 +321,19 @@ export function orgs() {
     }
     return out;
 }
+/**
+ * The organizations this person works in, as the token names them: every org of
+ * its `orgs` but a directory, which is a home and nobody's tenant. Empty for an
+ * account that has not made one: the SDK's own list falls back to the `owner`
+ * claim, which is the application's org and nobody's to work in.
+ */
+export function orgs() {
+    return listed(bearer()).filter((o) => !DIRECTORIES.includes(o));
+}
+/** The org of the person's own row: the first entry of the token's `orgs`, a directory or not. */
+export function home() {
+    return listed(bearer())[0] ?? null;
+}
 /**
  * The reader's role in one organization as IAM signed it into the token's `orgs`
  * claim — owner, admin or member — or null where the token names no such org.
@@ -344,8 +369,8 @@ export function named() {
  */
 export function me() {
     const name = claims()?.name;
-    const home = orgs()[0];
-    return typeof name === 'string' && name && home ? `${home}/${name}` : null;
+    const at = home();
+    return typeof name === 'string' && name && at ? `${at}/${name}` : null;
 }
 /** The organization this browser works in: the SDK's selection, when it is one of the token's. */
 export function org() {
@@ -386,7 +411,7 @@ export function scope() {
  */
 export function renew() {
     try {
-        window.localStorage.setItem(EXPIRES, '0');
+        tokens().setItem(EXPIRES, '0');
     }
     catch {
         /* no store to renew */
@@ -425,7 +450,7 @@ export const ADMIN_ORG = 'admin';
  * organization and the step into one.
  */
 export function superAdmin() {
-    return orgs()[0] === ADMIN_ORG;
+    return home() === ADMIN_ORG;
 }
 /** The organization a SuperAdmin stepped into through IAM, from the token's `assumed` claim, or null. */
 export function assumed() {
@@ -459,17 +484,11 @@ export async function support(org) {
     const exp = claimsOf(next ?? null)?.exp;
     if (!res.ok || !next || typeof exp !== 'number')
         throw new Error(body?.msg || `IAM answered ${res.status}.`);
-    window.localStorage.setItem(ACCESS, next);
-    window.localStorage.setItem(EXPIRES, String(exp * 1000));
-    pick(org ?? homeOf(next));
+    tokens().setItem(ACCESS, next);
+    tokens().setItem(EXPIRES, String(exp * 1000));
+    pick(org ?? listed(next).find((o) => !DIRECTORIES.includes(o)) ?? '');
     window.location.reload();
 }
-/** The org of the person's own row: the first entry of a token's `orgs`. */
-function homeOf(token) {
-    const set = claimsOf(token)?.orgs;
-    const first = Array.isArray(set) ? set[0]?.org : undefined;
-    return typeof first === 'string' ? first : '';
-}
 /**
  * Leave support mode when IAM cannot answer the step out: the stored token is
  * marked spent, so the SDK's refresh — which mints from the person's own grant

package/dist/where.d.ts

@@ -33,6 +33,12 @@ export interface Addresses {
     brand?: string;
     /** The publishable key anonymous calls carry. */
     key?: string;
+    /**
+     * Where the IAM session is kept when it is not this page's `localStorage`:
+     * the `storage` the host hands its IamProvider (Hanzo Desktop's keychain).
+     * The rooms read the access token, its expiry and its claims from it.
+     */
+    session?: Storage;
     /** The plan catalogue as the host's build last read it: the first paint. */
     plans?: BillingPlan[];
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanzo/rooms",
-  "version": "0.1.70",
+  "version": "0.1.72",
   "description": "The workspace rooms — Home, Chat, Inbox, Contacts, Meet, Cal, Drive, Board, Work, Bots — and the frame that holds them, once, for every Hanzo surface.",
   "type": "module",
   "main": "./dist/index.js",