@hanzo/rooms 0.1.71 → 0.1.72

package/dist/lib/session.d.ts

@@ -123,11 +123,20 @@ export declare function own(sub: string | undefined): void;
  */
 export declare function follow(was: string | undefined, moved: () => void): () => void;
 /**
- * The organizations the token says this person belongs to, home first.
- * Empty for an account that has not made one: the SDK's own list falls back to
- * the `owner` claim, which is the application's org and nobody's to work in.
+ * The brands' directories (hanzoai/authz `IsDirectory`): the org a customer's
+ * account lives in, its home, and nobody's to work in. IAM lists the home first
+ * in the token's `orgs`; cloud opens a directory to no one.
+ */
+export declare const DIRECTORIES: readonly string[];
+/**
+ * The organizations this person works in, as the token names them: every org of
+ * its `orgs` but a directory, which is a home and nobody's tenant. Empty for an
+ * account that has not made one: the SDK's own list falls back to the `owner`
+ * claim, which is the application's org and nobody's to work in.
  */
 export declare function orgs(): string[];
+/** The org of the person's own row: the first entry of the token's `orgs`, a directory or not. */
+export declare function home(): string | null;
 /**
  * The reader's role in one organization as IAM signed it into the token's `orgs`
  * claim — owner, admin or member — or null where the token names no such org.

package/dist/lib/session.js

@@ -305,12 +305,14 @@ function claims() {
     return claimsOf(bearer());
 }
 /**
- * The organizations the token says this person belongs to, home first.
- * Empty for an account that has not made one: the SDK's own list falls back to
- * the `owner` claim, which is the application's org and nobody's to work in.
+ * The brands' directories (hanzoai/authz `IsDirectory`): the org a customer's
+ * account lives in, its home, and nobody's to work in. IAM lists the home first
+ * in the token's `orgs`; cloud opens a directory to no one.
  */
-export function orgs() {
-    const set = claims()?.orgs;
+export const DIRECTORIES = ['hanzo-id', 'lux-id', 'zoo-id', 'pars-id'];
+/** Every org the token's `orgs` names, home first, each once. */
+function listed(token) {
+    const set = claimsOf(token)?.orgs;
     const out = [];
     for (const ref of Array.isArray(set) ? set : []) {
         const o = ref?.org;
@@ -319,6 +321,19 @@ export function orgs() {
     }
     return out;
 }
+/**
+ * The organizations this person works in, as the token names them: every org of
+ * its `orgs` but a directory, which is a home and nobody's tenant. Empty for an
+ * account that has not made one: the SDK's own list falls back to the `owner`
+ * claim, which is the application's org and nobody's to work in.
+ */
+export function orgs() {
+    return listed(bearer()).filter((o) => !DIRECTORIES.includes(o));
+}
+/** The org of the person's own row: the first entry of the token's `orgs`, a directory or not. */
+export function home() {
+    return listed(bearer())[0] ?? null;
+}
 /**
  * The reader's role in one organization as IAM signed it into the token's `orgs`
  * claim — owner, admin or member — or null where the token names no such org.
@@ -354,8 +369,8 @@ export function named() {
  */
 export function me() {
     const name = claims()?.name;
-    const home = orgs()[0];
-    return typeof name === 'string' && name && home ? `${home}/${name}` : null;
+    const at = home();
+    return typeof name === 'string' && name && at ? `${at}/${name}` : null;
 }
 /** The organization this browser works in: the SDK's selection, when it is one of the token's. */
 export function org() {
@@ -435,7 +450,7 @@ export const ADMIN_ORG = 'admin';
  * organization and the step into one.
  */
 export function superAdmin() {
-    return orgs()[0] === ADMIN_ORG;
+    return home() === ADMIN_ORG;
 }
 /** The organization a SuperAdmin stepped into through IAM, from the token's `assumed` claim, or null. */
 export function assumed() {
@@ -471,15 +486,9 @@ export async function support(org) {
         throw new Error(body?.msg || `IAM answered ${res.status}.`);
     tokens().setItem(ACCESS, next);
     tokens().setItem(EXPIRES, String(exp * 1000));
-    pick(org ?? homeOf(next));
+    pick(org ?? listed(next).find((o) => !DIRECTORIES.includes(o)) ?? '');
     window.location.reload();
 }
-/** The org of the person's own row: the first entry of a token's `orgs`. */
-function homeOf(token) {
-    const set = claimsOf(token)?.orgs;
-    const first = Array.isArray(set) ? set[0]?.org : undefined;
-    return typeof first === 'string' ? first : '';
-}
 /**
  * Leave support mode when IAM cannot answer the step out: the stored token is
  * marked spent, so the SDK's refresh — which mints from the person's own grant

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanzo/rooms",
-  "version": "0.1.71",
+  "version": "0.1.72",
   "description": "The workspace rooms — Home, Chat, Inbox, Contacts, Meet, Cal, Drive, Board, Work, Bots — and the frame that holds them, once, for every Hanzo surface.",
   "type": "module",
   "main": "./dist/index.js",