@hanzo/rooms 0.1.72 → 0.1.73

package/dist/lib/session.d.ts

@@ -180,16 +180,11 @@ export declare const PICKED = "hanzo:org:picked";
  * app's account menu — is one the gate does not ask for again.
  */
 export declare function pick(o: string): void;
-/** The reserved org whose own people are the platform's operators. */
-export declare const ADMIN_ORG = "admin";
-/**
- * Whether the signed-in person is a SUPERADMIN, as IAM signs it: the org of the
- * person's own row — the first entry of the token's `orgs`, which IAM always puts
- * first (hanzoai/iam internal/store/membership.go `MemberOrgRefs`) — is the
- * reserved `admin` org. It is the equality IAM decides `assume` and the
- * organization list on (pkg/schema/user.go `SuperAdmin`) and cloud's `Super`.
- * Not the `owner` claim: a sign-in token carries the APPLICATION's org there. A
- * membership of `admin` is not it either, and neither is being an org's admin.
+/**
+ * Whether the signed-in person is a SUPERADMIN: @hanzo/iam's `superAdmin`, which is
+ * hanzoai/authz `Claims.Sudo` exactly — a person (never a program) whose own row's
+ * org, the first entry of the token's `orgs`, is the reserved `admin` org, compared
+ * verbatim. Not the `owner` claim, not a membership of `admin`, not an org's admin.
  * It decides only what is drawn: IAM refuses everyone else the list of every
  * organization and the step into one.
  */

package/dist/lib/session.js

@@ -14,6 +14,7 @@
  * who was signed in, which reads as a permissions problem rather than a typo.
  * Two derivations of one name never agree; this is the one derivation.
  */
+import { superAdmin as sudo } from '@hanzo/iam/browser';
 import { api } from './api.js';
 import { where } from '../where.js';
 /** The SDK's own keys, `hanzo_iam_`-prefixed. The far side of a boundary. */
@@ -436,21 +437,16 @@ export function pick(o) {
     }
     window.dispatchEvent(new Event(ORG));
 }
-/** The reserved org whose own people are the platform's operators. */
-export const ADMIN_ORG = 'admin';
 /**
- * Whether the signed-in person is a SUPERADMIN, as IAM signs it: the org of the
- * person's own row — the first entry of the token's `orgs`, which IAM always puts
- * first (hanzoai/iam internal/store/membership.go `MemberOrgRefs`) — is the
- * reserved `admin` org. It is the equality IAM decides `assume` and the
- * organization list on (pkg/schema/user.go `SuperAdmin`) and cloud's `Super`.
- * Not the `owner` claim: a sign-in token carries the APPLICATION's org there. A
- * membership of `admin` is not it either, and neither is being an org's admin.
+ * Whether the signed-in person is a SUPERADMIN: @hanzo/iam's `superAdmin`, which is
+ * hanzoai/authz `Claims.Sudo` exactly — a person (never a program) whose own row's
+ * org, the first entry of the token's `orgs`, is the reserved `admin` org, compared
+ * verbatim. Not the `owner` claim, not a membership of `admin`, not an org's admin.
  * It decides only what is drawn: IAM refuses everyone else the list of every
  * organization and the step into one.
  */
 export function superAdmin() {
-    return home() === ADMIN_ORG;
+    return sudo(claims());
 }
 /** The organization a SuperAdmin stepped into through IAM, from the token's `assumed` claim, or null. */
 export function assumed() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hanzo/rooms",
-  "version": "0.1.72",
+  "version": "0.1.73",
   "description": "The workspace rooms — Home, Chat, Inbox, Contacts, Meet, Cal, Drive, Board, Work, Bots — and the frame that holds them, once, for every Hanzo surface.",
   "type": "module",
   "main": "./dist/index.js",
@@ -53,7 +53,7 @@
     "@hanzo/composer": ">=0.2.0",
     "@hanzo/event": ">=0.3.56",
     "@hanzo/gui": "^8.3.5",
-    "@hanzo/iam": ">=0.21.28",
+    "@hanzo/iam": ">=0.21.33",
     "@hanzo/logo": ">=1.0.26",
     "@hanzo/studio": ">=0.1.0",
     "@hanzo/ui": ">=8.27.67",
@@ -72,7 +72,7 @@
     "@hanzo/design": "0.5.34",
     "@hanzo/event": "0.3.56",
     "@hanzo/gui": "8.3.5",
-    "@hanzo/iam": "0.21.28",
+    "@hanzo/iam": "0.21.33",
     "@hanzo/logo": "1.0.26",
     "@hanzo/studio": "0.1.0",
     "@hanzo/ui": "8.27.67",