@lenne.tech/nuxt-extensions 1.21.0 → 1.22.0

package/CLAUDE.md

@@ -40,6 +40,7 @@ src/
 | `useLtAi()` | One-shot `prompt()` + streaming `promptStream()` (POST `/ai/prompt` / `/ai/stream`) |
 | `useLtAiChat()` | Multi-turn chat: streaming, budget summary, confirmation gate, `stop()`/`clear()`, optional `maxMessages` cap, auto-stop on unmount |
 | `useLtAiConnections()` | User-facing list of available connections + `select()` |
+| `useLtAiSettings()` | The user's own AI settings: MCP confirmation switch (`GET/PUT /ai/settings`, `enforced` → show disabled) |
 | `useLtAiUsage()` | Full token/prompt usage breakdown (`GET /ai/usage`) |
 | `useLtAiPrompts()` | User-facing CRUD for re-usable prompt snippets ("Vorlagen", `scope: 'user'` / `'tenant'`) |
 | `useLtAiPlaceholders()` | Loads the backend's `{{placeholder}}` registry for editor sidebars |

package/README.md

@@ -709,6 +709,45 @@ await load();
 is private to the owner; `scope: 'tenant'` is shared across the owner's tenant. The list
 returned by `load()` is already server-filtered to what the user is allowed to see.
 
+### MCP confirmation switch
+
+Over MCP (Claude Desktop, Claude Code and other clients), nest-server 12.3.0 or later asks the
+user before a destructive tool runs, and before a mutating one if the server is configured that
+way. Each user may switch the question off for themselves, like a "bypass permissions" mode.
+`useLtAiSettings()` reads and changes that switch (`GET/PUT /ai/settings`):
+
+```vue
+<script setup lang="ts">
+const { enforced, load, settings, update } = useLtAiSettings();
+await load();
+
+async function toggle(value: boolean) {
+  try {
+    await update({ mcpConfirmation: value });
+  } catch {
+    // `error` holds the message; `settings` keeps the previous value, so the switch snaps back
+  }
+}
+</script>
+
+<template>
+  <USwitch
+    :model-value="settings?.mcpConfirmation"
+    :disabled="enforced || !settings"
+    label="Ask before destructive AI actions over MCP"
+    @update:model-value="toggle"
+  />
+</template>
+```
+
+- `settings` is always the value as it takes effect, never just the stored choice. `update()`
+  adopts the server's answer instead of the input.
+- `enforced` is true when the server fixed the value (`ai.mcp.confirmation.enforced`). Show the
+  switch disabled. A change is refused with 403 `#LTNS_0609`, which `update()` throws.
+- Switching it off lets an MCP client run destructive tools in this user's name without asking.
+  Say so next to the switch. The tool's own `authorize()` check and the admin's `deny` / `ask`
+  rules still apply, and other users and the in-app chat are not affected.
+
 ### Lower-level + supporting composables
 
 | Composable | Purpose |
@@ -716,6 +755,7 @@ returned by `load()` is already server-filtered to what the user is allowed to s
 | `useLtAi()` | One-shot `prompt(input)` and streaming `promptStream(input, handlers)` (POST `/ai/stream`) |
 | `useLtAiChat()` | Multi-turn chat state, streaming, budget, confirmation, `stop()`/`clear()`, optional `maxMessages` cap, auto-stop on component unmount |
 | `useLtAiConnections()` | User self-service: available connections + `select()` (`selected`/`locked`) |
+| `useLtAiSettings()` | The user's own AI settings: the MCP confirmation switch + `update()` (`enforced`) |
 | `useLtAiUsage()` | Full token/prompt usage breakdown (`GET /ai/usage`) |
 | `useLtAiPrompts()` | User-facing CRUD for re-usable prompt snippets ("Vorlagen", `scope: 'user'` / `'tenant'`) |
 | `useLtAiPlaceholders()` | Loads `{{placeholder}}` registry from the backend so slot / prompt editors render a dynamic helper sidebar |
@@ -829,6 +869,7 @@ The package works **with or without** `@nuxtjs/i18n`:
 | `useLtAi()` | One-shot `prompt()` + streaming `promptStream()` for the nest-server AI module |
 | `useLtAiChat()` | Multi-turn chat state, streaming, budget summary, confirmation gate, `maxMessages` cap |
 | `useLtAiConnections()` | User self-service connection list + `select()` |
+| `useLtAiSettings()` | The user's own AI settings (MCP confirmation switch, nest-server >= 12.3.0) |
 | `useLtAiUsage()` | Token/prompt usage breakdown per user / tenant |
 | `useLtAiPrompts()` | User-facing prompt snippet CRUD (`'user'` / `'tenant'` scope) |
 | `useLtAiPlaceholders()` | Loads the backend's `{{placeholder}}` registry |

package/dist/module.d.mts

@@ -3,7 +3,7 @@ import { LtExtensionsModuleOptions } from '../dist/runtime/types/index.js';
 export * from '../dist/runtime/types/index.js';
 
 declare const name = "@lenne.tech/nuxt-extensions";
-declare const version = "1.21.0";
+declare const version = "1.22.0";
 declare const configKey = "ltExtensions";
 declare const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 declare const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "configKey": "ltExtensions",
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.21.0",
+  "version": "1.22.0",
   "builder": {
     "@nuxt/module-builder": "1.0.3",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -2,7 +2,7 @@ import { defineNuxtModule, createResolver, tryResolveModule, addImports, addComp
 import { pathToFileURL } from 'node:url';
 
 const name = "@lenne.tech/nuxt-extensions";
-const version = "1.21.0";
+const version = "1.22.0";
 const configKey = "ltExtensions";
 const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";
@@ -204,6 +204,7 @@ const module$1 = defineNuxtModule({
         { name: "useLtAi", from: resolve("./runtime/composables/use-lt-ai") },
         { name: "useLtAiChat", from: resolve("./runtime/composables/use-lt-ai-chat") },
         { name: "useLtAiConnections", from: resolve("./runtime/composables/use-lt-ai-connections") },
+        { name: "useLtAiSettings", from: resolve("./runtime/composables/use-lt-ai-settings") },
         { name: "useLtAiUsage", from: resolve("./runtime/composables/use-lt-ai-usage") },
         { name: "useLtAiPrompts", from: resolve("./runtime/composables/use-lt-ai-prompts") },
         { name: "useLtAiPlaceholders", from: resolve("./runtime/composables/use-lt-ai-placeholders") },

package/dist/runtime/composables/index.d.ts

@@ -8,6 +8,7 @@ export { useLtErrorTranslation } from './use-lt-error-translation.js';
 export { useLtAi } from './use-lt-ai.js';
 export { useLtAiChat } from './use-lt-ai-chat.js';
 export { useLtAiConnections } from './use-lt-ai-connections.js';
+export { useLtAiSettings } from './use-lt-ai-settings.js';
 export { useLtAiUsage } from './use-lt-ai-usage.js';
 export { useLtAiAdmin } from './use-lt-ai-admin.js';
 export { useLtAiPrompts } from './use-lt-ai-prompts.js';

package/dist/runtime/composables/index.js

@@ -8,6 +8,7 @@ export { useLtErrorTranslation } from "./use-lt-error-translation.js";
 export { useLtAi } from "./use-lt-ai.js";
 export { useLtAiChat } from "./use-lt-ai-chat.js";
 export { useLtAiConnections } from "./use-lt-ai-connections.js";
+export { useLtAiSettings } from "./use-lt-ai-settings.js";
 export { useLtAiUsage } from "./use-lt-ai-usage.js";
 export { useLtAiAdmin } from "./use-lt-ai-admin.js";
 export { useLtAiPrompts } from "./use-lt-ai-prompts.js";

package/dist/runtime/composables/use-lt-ai-settings.d.ts

@@ -0,0 +1,12 @@
+/**
+ * User self-service for the current user's own AI settings, today whether MCP
+ * asks before a destructive or mutating tool runs (a "bypass permissions"
+ * switch). Backed by `GET /ai/settings` and `PUT /ai/settings`
+ * (nest-server >= 12.3.0).
+ *
+ * The answer is always the setting as it takes effect. When the server fixes
+ * it (`ai.mcp.confirmation.enforced`), `enforced` is true, the switch should be
+ * shown disabled, and `update()` is refused with 403 (`#LTNS_0609`).
+ */
+import type { UseLtAiSettingsReturn } from '../types/ai.js';
+export declare function useLtAiSettings(): UseLtAiSettingsReturn;

package/dist/runtime/composables/use-lt-ai-settings.js

@@ -0,0 +1,32 @@
+import { computed, readonly, ref } from "#imports";
+import { ltAiRequest } from "../lib/ai.js";
+export function useLtAiSettings() {
+  const settings = ref(null);
+  const loading = ref(false);
+  const error = ref(null);
+  const enforced = computed(() => settings.value?.mcpConfirmationEnforced === true);
+  async function load() {
+    loading.value = true;
+    error.value = null;
+    try {
+      settings.value = await ltAiRequest("GET", "/settings");
+    } catch (err) {
+      error.value = err.message;
+    } finally {
+      loading.value = false;
+    }
+  }
+  async function update(input) {
+    loading.value = true;
+    error.value = null;
+    try {
+      settings.value = await ltAiRequest("PUT", "/settings", input);
+    } catch (err) {
+      error.value = err.message;
+      throw err;
+    } finally {
+      loading.value = false;
+    }
+  }
+  return { enforced, error: readonly(error), load, loading: readonly(loading), settings: readonly(settings), update };
+}

package/dist/runtime/types/ai.d.ts

@@ -126,6 +126,17 @@ export interface LtAiAvailableConnection {
     name?: string;
     selected?: boolean;
 }
+/** The current user's AI settings as they take effect (`GET/PUT /ai/settings`, nest-server >= 12.3.0). */
+export interface LtAiSettings {
+    /** Whether MCP asks this user before a destructive tool (and a mutating one, if configured) runs. */
+    mcpConfirmation: boolean;
+    /** Whether the server fixed `mcpConfirmation`, so the user cannot change it (a change answers 403 `#LTNS_0609`). */
+    mcpConfirmationEnforced: boolean;
+}
+/** The user's own choices for `PUT /ai/settings`; a field left out stays unchanged. */
+export interface LtAiSettingsInput {
+    mcpConfirmation?: boolean;
+}
 /** Usage for a single scope (user or tenant). */
 export interface LtAiUsageScope {
     maxPrompts?: number;
@@ -429,6 +440,16 @@ export interface UseLtAiConnectionsReturn {
     select: (connectionId: string) => Promise<void>;
     selected: ComputedRef<LtAiAvailableConnection | undefined>;
 }
+export interface UseLtAiSettingsReturn {
+    /** True when the server fixed the MCP confirmation: show the switch disabled. */
+    enforced: ComputedRef<boolean>;
+    error: DeepReadonly<Ref<null | string>>;
+    load: () => Promise<void>;
+    loading: DeepReadonly<Ref<boolean>>;
+    settings: DeepReadonly<Ref<LtAiSettings | null>>;
+    /** Stores the user's choice and adopts the answer; throws (and sets `error`) when refused. */
+    update: (input: LtAiSettingsInput) => Promise<void>;
+}
 export interface UseLtAiUsageReturn {
     error: DeepReadonly<Ref<null | string>>;
     loading: DeepReadonly<Ref<boolean>>;

package/dist/runtime/types/index.d.ts

@@ -3,4 +3,4 @@ export type { LtFileInfo, LtUploadItem, LtUploadOptions, LtUploadProgress, LtUpl
 export type { LtAiModuleOptions, LtAuthCookieNamesOptions, LtAuthModuleOptions, LtErrorTranslationModuleOptions, LtExtensionsModuleOptions, LtExtensionsPublicRuntimeConfig, LtFormLabelAssociationOptions, LtI18nModuleOptions, LtPreHydrationInputOptions, LtSystemSetupModuleOptions, LtTusModuleOptions, } from './module.js';
 export type { LtErrorTranslationResponse, LtParsedError, UseLtErrorTranslationReturn } from './error.js';
 export type { LtSyncConflict, LtSyncConflictResolution, LtSyncIdFormat, LtSyncItemStatus, LtSyncModuleOptions, LtSyncPushResult, LtSyncRecord, LtSyncResult, UseLtOfflineSyncOptions, UseLtOfflineSyncReturn, } from './sync.js';
-export type { LtAiAction, LtAiAvailableConnection, LtAiBudgetLimit, LtAiBudgetSummary, LtAiConnection, LtAiConnectionInput, LtAiConnectionPreference, LtAiEffectiveSlot, LtAiInteraction, LtAiMessage, LtAiMode, LtAiPlaceholder, LtAiPrompt, LtAiPromptHint, LtAiPromptHintInput, LtAiPromptInput, LtAiPromptRunInput, LtAiResponse, LtAiSlot, LtAiSlotInput, LtAiStreamEvent, LtAiStreamHandlers, LtAiUsage, LtAiUsageInfo, LtAiUsageScope, UseLtAiAdminReturn, UseLtAiChatOptions, UseLtAiChatReturn, UseLtAiConnectionsReturn, UseLtAiPlaceholdersReturn, UseLtAiPromptsReturn, UseLtAiReturn, UseLtAiUsageReturn, } from './ai.js';
+export type { LtAiAction, LtAiAvailableConnection, LtAiBudgetLimit, LtAiBudgetSummary, LtAiConnection, LtAiConnectionInput, LtAiConnectionPreference, LtAiEffectiveSlot, LtAiInteraction, LtAiMessage, LtAiMode, LtAiPlaceholder, LtAiPrompt, LtAiPromptHint, LtAiPromptHintInput, LtAiPromptInput, LtAiPromptRunInput, LtAiResponse, LtAiSettings, LtAiSettingsInput, LtAiSlot, LtAiSlotInput, LtAiStreamEvent, LtAiStreamHandlers, LtAiUsage, LtAiUsageInfo, LtAiUsageScope, UseLtAiAdminReturn, UseLtAiChatOptions, UseLtAiChatReturn, UseLtAiConnectionsReturn, UseLtAiPlaceholdersReturn, UseLtAiPromptsReturn, UseLtAiReturn, UseLtAiSettingsReturn, UseLtAiUsageReturn, } from './ai.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.21.0",
+  "version": "1.22.0",
   "description": "Reusable Nuxt 4 composables, components, and Better-Auth integration for lenne.tech projects",
   "repository": {
     "type": "git",
@@ -102,24 +102,24 @@
   "devDependencies": {
     "@better-auth/passkey": "1.7.12",
     "@nuxt/module-builder": "1.0.3",
-    "@nuxt/schema": "4.6.3",
+    "@nuxt/schema": "4.6.4",
     "@nuxt/ui": "4.12.0",
     "@playwright/test": "1.64.1",
     "@types/node": "26.6.6",
-    "@vitest/coverage-v8": "5.0.5",
+    "@vitest/coverage-v8": "5.1.0",
     "@vue/server-renderer": "3.5.44",
     "better-auth": "1.7.12",
     "cross-spawn": "7.0.6",
     "fake-indexeddb": "6.2.7",
     "happy-dom": "21.0.4",
-    "nuxt": "4.6.3",
+    "nuxt": "4.6.4",
     "oxfmt": "0.75.0",
     "oxlint": "1.90.0",
     "oxlint-tsgolint": "7.0.2005",
     "reka-ui": "2.11.0",
     "tus-js-client": "4.3.1",
     "typescript": "5.9.3",
-    "vitest": "5.0.5",
+    "vitest": "5.1.0",
     "vue-tsc": "3.3.14"
   },
   "keywords": [