chore: commit pending admin-panel, api auth and parity doc changes

Co-Authored-By: Claude Haiku 5.5 <noreply@anthropic.com>

apps/api/src/modules/auth/auth.service.ts

@@ -14,11 +14,12 @@ import { AdminSessionService } from '../sessions/admin-session.service';
 import { envList, envOr, envOrNull, pickExactUri } from '../../common/env';
 import type { LoginDto } from './dto/login.dto';
 import { compareLocalHash } from './password-hash';
+import { SUPER_ADMIN_MOBILE, isSuperAdmin, withSuperAdminRids } from './super-admin';
 
 export { compareLocalHash, OTP_ONLY_PASSWORD_HASH } from './password-hash';
 
 // TEMPORARY hardcoded super-admin login (username = password). Remove before going live.
-const STATIC_ADMIN_MOBILE = '09128081392';
+const STATIC_ADMIN_MOBILE = SUPER_ADMIN_MOBILE;
 
 @Injectable()
 export class AuthService {
@@ -99,8 +100,11 @@ export class AuthService {
       role: user.role,
       ut: user.userTypeId,
       branch_id: user.branchId,
+      is_super_admin: isSuperAdmin(user.mobile),
       api_token: apiToken,
-      roles: (user.userType?.permissions ?? []).map((p) => ({ rid: p.rid })),
+      roles: withSuperAdminRids(user.mobile, (user.userType?.permissions ?? []).map((p) => p.rid)).map(
+        (rid) => ({ rid }),
+      ),
       ...(bootstrap ? { iamBootstrapUrl: bootstrap } : {}),
     };
   }
@@ -222,8 +226,11 @@ export class AuthService {
       role: user.role,
       ut: user.userTypeId,
       branch_id: user.branchId,
+      is_super_admin: isSuperAdmin(user.mobile),
       api_token: apiToken,
-      roles: (user.userType?.permissions ?? []).map((p) => ({ rid: p.rid })),
+      roles: withSuperAdminRids(user.mobile, (user.userType?.permissions ?? []).map((p) => p.rid)).map(
+        (rid) => ({ rid }),
+      ),
     };
   }
 
@@ -345,7 +352,8 @@ export class AuthService {
       ut: user.userTypeId,
       branch_id: user.branchId,
       user_type: user.userType ? { id: user.userType.id, title: user.userType.title } : null,
-      permission: (user.userType?.permissions ?? []).map((p) => p.rid),
+      is_super_admin: isSuperAdmin(user.mobile),
+      permission: withSuperAdminRids(user.mobile, (user.userType?.permissions ?? []).map((p) => p.rid)),
     };
   }
 }