@meistrari/chat-nuxt 1.5.1 → 1.7.0

package/README.md

@@ -103,6 +103,15 @@ These never appear in module options — set them via `.env`, Infisical, etc. Wh
 
 Set `chatNuxt.validateConfig` to `'warn'` to log a warning when keys for an enabled feature are missing, or `'error'` to fail fast at module setup. The check is off by default since some deployments inject runtime config after build.
 
+### Auth modes
+
+`@meistrari/chat-nuxt` can run with either auth mode exposed by `@meistrari/auth-nuxt`:
+
+- Application auth (`telaAuth.application.enabled: true`) delegates chat identity and workspace state to `useTelaApplicationAuth()`.
+- First-party auth delegates chat identity to `useTelaSession()` and workspace state to `useTelaOrganization()`.
+
+The module chooses the bridge during Nuxt setup. Host apps should keep registering `@meistrari/auth-nuxt` before `@meistrari/chat-nuxt`.
+
 ### Local mode (no database)
 
 When `databaseUrl` is empty, chat-nuxt runs an embedded [pglite](https://pglite.dev) instance — Postgres compiled to WASM, in-process, file-backed at `<rootDir>/.data/chat-nuxt.db`. Migrations are applied automatically on first boot. Tables live under a dedicated `chat` Postgres schema so the database can be safely shared with the host app's own Drizzle setup.
@@ -152,11 +161,18 @@ The chat workspace is resolved from the authenticated `activeOrganization` provi
 <MeistrariChatEmbed tela-agent-id="agent_123" />
 ```
 
+`conversationScope` works in both runtimes. In default chat mode, it isolates conversations inside the authenticated workspace without requiring a Tela agent:
+
+```vue
+<MeistrariChatEmbed :conversation-scope="`user:${userId}`" />
+```
+
 Host apps can also provide Tela agent inputs directly. When `telaAgentInputs` is non-null, the chat sends those inputs with each agent run and does not render the agent variables panel.
 
 ```vue
 <MeistrariChatEmbed
     tela-agent-id="agent_123"
+    :conversation-scope="`customer:${customerId}`"
     :tela-agent-inputs="[
         { type: 'text', name: 'customer_id', content: customerId },
     ]"
@@ -194,6 +210,7 @@ Key props for embedding:
 - **`:hide-sidebar="true"`** — removes the conversation list, keeps just the chat
 - **`v-model:conversation-id`** — sync the active conversation with your app's state
 - **`:initial-conversation-id`** — open a specific conversation on mount
+- **`conversation-scope`** — isolate conversation history inside the same workspace or Tela agent
 
 ## `<MeistrariChatEmbed>` Props
 
@@ -202,6 +219,7 @@ Key props for embedding:
 | `hideSidebar` | `boolean` | `false` | Hide conversation list sidebar |
 | `conversationId` | `string \| null` | `null` | Controlled conversation (supports v-model) |
 | `initialConversationId` | `string \| null` | `null` | Open this conversation on mount |
+| `conversationScope` | `string \| null` | `null` | Isolate conversation history by technical scope within the current workspace and runtime |
 | `telaAgentId` | `string` | — | Use Tela agent mode for this embed |
 | `telaAgentInputs` | `TelaAgentExecutionInput[] \| null` | `undefined` | Inputs sent with each Tela agent run; hides the variables panel when non-null |
 | `workspaceSettings` | `WorkspaceSettings \| null` | `null` | Override settings from host app |
@@ -212,6 +230,22 @@ Key props for embedding:
 
 `loadingMessagesMode` only applies when `loadingMessages` has at least one non-empty message.
 
+Use `conversationScope` when you need multiple chat surfaces to share the same authenticated workspace but keep separate histories. This is useful for per-user inboxes, record detail pages, customer workspaces, template previews, workflow steps, or any app route where the same chat should only show conversations for that route's domain object. The scope is applied together with the workspace and, when present, the `telaAgentId`.
+
+Scoped embeds only see conversations created with the same scope. Unscoped embeds only see unscoped conversations, so adding a scope will not mix with existing workspace-level history. Scope values are technical identifiers: they are trimmed, blank strings become `null`, and server requests accept 1-200 characters from `A-Z`, `a-z`, `0-9`, `.`, `_`, `:`, `/`, and `-`.
+
+```vue
+<!-- Default chat mode: workspace + scope -->
+<MeistrariChatEmbed :conversation-scope="`user:${userId}`" />
+<MeistrariChatEmbed :conversation-scope="`customer:${customerId}`" />
+
+<!-- Tela agent mode: workspace + telaAgentId + scope -->
+<MeistrariChatEmbed
+    tela-agent-id="agent_123"
+    :conversation-scope="`template:${templateId}`"
+/>
+```
+
 **Events:**
 
 | Event | Payload | Description |
@@ -256,8 +290,17 @@ runtimeConfig: {
 ```vue
 <script setup lang="ts">
 const { posthogPublicKey, posthogHost, posthogDefaults } = useRuntimeConfig().public
+
+// Application auth hosts:
 const { user, activeOrganization } = useTelaApplicationAuth()
 
+// First-party auth hosts can use this instead:
+// const session = useTelaSession()
+// const organization = useTelaOrganization()
+// const user = session.user
+// const activeOrganization = organization.activeOrganization
+// await organization.getActiveOrganization()
+
 onMounted(async () => {
     if (!posthogPublicKey || !posthogHost) return
     await initPosthog(posthogPublicKey, posthogHost, posthogDefaults)
@@ -335,6 +378,45 @@ export default async function resolveWorkspaceSettings(
 }
 ```
 
+## Optional: Agent API Environment Resolver
+
+When default chat mode starts a new Agent API session, `chat-nuxt` can attach `environmentVariables` to the Agent API create payload. Built-in workspace credentials still come from the `credentials` feature. Host apps can add server-only variables by creating `server/chat/resolve-agent-environment.ts`:
+
+```typescript
+import type { H3Event } from 'h3'
+
+export default async function resolveAgentEnvironment(
+    event: H3Event,
+    context: {
+        user: { id: string; email: string }
+        workspaceId: string
+        telaAgentId: string | null
+        conversationId: string
+        skills: readonly string[]
+    },
+) {
+    if (!context.skills.includes('github:meistrari/backoffice/skills/backoffice-admin')) {
+        return null
+    }
+
+    return {
+        BACKOFFICE_ADMIN_TOOL_URL: 'https://backoffice.example.com/api/admin-chat/tool',
+        BACKOFFICE_ADMIN_INVOCATION_GRANT: await mintInvocationGrant({
+            userId: context.user.id,
+            workspaceId: context.workspaceId,
+            conversationId: context.conversationId,
+            skills: context.skills,
+        }),
+    }
+}
+```
+
+The resolver runs on the server only. It is called for new default Agent API sessions, before `POST /v2/chat`. Continued sessions do not receive new environment variables.
+
+If the resolver returns the same environment variable name as a workspace credential, the resolver value wins.
+
+`chat-nuxt` only transports these variables to Agent API. A skill that calls a host backend must implement its own callback contract with the host backend. In short, callback authorization belongs to the skill and host backend, not `chat-nuxt`. The host backend remains responsible for validating invocation grants, allowed tools, schemas, replay protection, confirmation for writes, and audit logging.
+
 ## `<ChatConfigurationModal>`
 
 A reusable settings modal (system prompt, context files, Tela workstations, Tela skills, external skills, credentials) that any host app can open from any button. By default, the modal uses `useWorkspaceSettings()` to fetch and persist settings. If the host passes the `settings` prop, the host owns workspace settings state and persistence.

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@meistrari/chat-nuxt",
   "configKey": "chatNuxt",
-  "version": "1.5.1",
+  "version": "1.7.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "unknown"

package/dist/module.mjs

@@ -1,7 +1,33 @@
 import { existsSync, readFileSync, mkdirSync, symlinkSync } from 'node:fs';
 import { createRequire } from 'node:module';
 import { join, dirname } from 'node:path';
-import { defineNuxtModule, createResolver, addPlugin, addImportsDir, addComponent, addComponentsDir } from 'nuxt/kit';
+import { defineNuxtModule, createResolver, addTemplate, addTypeTemplate, addPlugin, addImportsDir, addComponent, addComponentsDir } from 'nuxt/kit';
+
+const agentEnvironmentResolverCandidates = [
+  "server/chat/resolve-agent-environment.ts",
+  "server/chat/resolve-agent-environment.mts",
+  "server/chat/resolve-agent-environment.mjs",
+  "server/chat/resolve-agent-environment.js"
+];
+const stubExtensions$1 = [".ts", ".mjs", ".js"];
+function resolveAgentEnvironmentResolverEntry(srcDir, fallbackResolverBase) {
+  for (const relativePath of agentEnvironmentResolverCandidates) {
+    const candidate = join(srcDir, relativePath);
+    if (existsSync(candidate)) {
+      return candidate;
+    }
+  }
+  for (const ext of stubExtensions$1) {
+    const candidate = fallbackResolverBase + ext;
+    if (existsSync(candidate)) {
+      return candidate;
+    }
+  }
+  const attempted = stubExtensions$1.map((ext) => fallbackResolverBase + ext).join(", ");
+  throw new Error(
+    `[@meistrari/chat-nuxt] Unable to resolve agent-environment stub. Tried: ${attempted}. This indicates a packaging bug - please report it.`
+  );
+}
 
 const localRequire = createRequire(import.meta.url);
 const runtimeAliasPackages = [
@@ -153,6 +179,75 @@ const DEFAULT_FEATURES = {
   generateTitle: false,
   credentials: false
 };
+const VUE_COMPONENT_EXTENSIONS = [".vue"];
+function resolveChatAuthMode(runtimeConfig) {
+  const publicConfig = runtimeConfig.public;
+  const telaAuth = publicConfig?.telaAuth;
+  return telaAuth?.application?.enabled ? "application" : "first-party";
+}
+function buildChatAuthTemplate(mode) {
+  if (mode === "application") {
+    return `
+import { useTelaApplicationAuth } from '#imports'
+
+export function useChatAuth() {
+    const auth = useTelaApplicationAuth()
+
+    return {
+        user: auth.user,
+        activeOrganization: auth.activeOrganization,
+        getToken: auth.getToken,
+        getAvailableOrganizations: auth.getAvailableOrganizations,
+        switchOrganization: auth.switchOrganization,
+    }
+}
+`.trimStart();
+  }
+  return `
+import { useState, useTelaOrganization, useTelaSession, watch } from '#imports'
+
+export function useChatAuth() {
+    const session = useTelaSession()
+    const organization = useTelaOrganization()
+    const isHydratingActiveOrganization = useState('chat-nuxt:auth:is-hydrating-active-organization', () => false)
+    const hasHydratedActiveOrganization = useState('chat-nuxt:auth:has-hydrated-active-organization', () => false)
+
+    if (import.meta.client) {
+        watch(
+            () => session.user.value,
+            async (user) => {
+                if (!user) {
+                    hasHydratedActiveOrganization.value = false
+                    return
+                }
+
+                if (organization.activeOrganization.value || hasHydratedActiveOrganization.value || isHydratingActiveOrganization.value) {
+                    return
+                }
+
+                isHydratingActiveOrganization.value = true
+                try {
+                    await organization.getActiveOrganization()
+                    hasHydratedActiveOrganization.value = true
+                }
+                finally {
+                    isHydratingActiveOrganization.value = false
+                }
+            },
+            { immediate: true },
+        )
+    }
+
+    return {
+        user: session.user,
+        activeOrganization: organization.activeOrganization,
+        getToken: session.getToken,
+        getAvailableOrganizations: organization.listOrganizations,
+        switchOrganization: organization.setActiveOrganization,
+    }
+}
+`.trimStart();
+}
 const ALWAYS_REQUIRED_KEYS = [
   "telaApiUrl",
   "agentApiUrl",
@@ -225,7 +320,7 @@ const module$1 = defineNuxtModule({
     const hasAuthModule = (nuxt.options.modules ?? []).some(isAuthModuleEntry);
     if (!hasAuthModule) {
       throw new Error(
-        '[@meistrari/chat-nuxt] Missing required module "@meistrari/auth-nuxt". Install and enable it so useTelaApplicationAuth() and event.context.auth are available.'
+        '[@meistrari/chat-nuxt] Missing required module "@meistrari/auth-nuxt". Install and enable it so chat auth composables and event.context.auth are available.'
       );
     }
     ensureIconifyPackages(nuxt.options.rootDir);
@@ -237,14 +332,41 @@ const module$1 = defineNuxtModule({
       nuxt.options.srcDir,
       join(runtimeDir, "internal/workspace-settings-resolver.stub")
     );
+    const agentEnvironmentResolverEntry = resolveAgentEnvironmentResolverEntry(
+      nuxt.options.srcDir,
+      join(runtimeDir, "internal/agent-environment-resolver.stub")
+    );
     const telaBuildPath = resolveTelaBuildLayer();
     const runtimeAliases = resolveRuntimeAliases(telaBuildPath);
+    const chatAuthMode = resolveChatAuthMode(nuxt.options.runtimeConfig);
+    const chatAuthTemplate = addTemplate({
+      filename: "chat-nuxt/auth.mjs",
+      getContents: () => buildChatAuthTemplate(chatAuthMode)
+    });
+    const chatAuthTypeTemplate = addTypeTemplate({
+      filename: "chat-nuxt/chat-auth.d.ts",
+      src: join(runtimeDir, "types/chat-auth.d.ts")
+    });
+    addTypeTemplate({
+      filename: "chat-nuxt/chat-agent-environment-resolver.d.ts",
+      src: join(runtimeDir, "types/chat-agent-environment-resolver.d.ts")
+    }, {
+      nitro: true,
+      nuxt: true
+    });
+    nuxt.hook("prepare:types", ({ tsConfig }) => {
+      tsConfig.compilerOptions ||= {};
+      tsConfig.compilerOptions.paths ||= {};
+      tsConfig.compilerOptions.paths["#chat-auth"] = [chatAuthTypeTemplate.dst];
+    });
     if (!Array.isArray(nuxt.options.extends)) {
       nuxt.options.extends = nuxt.options.extends ? [nuxt.options.extends] : [];
     }
     nuxt.options.extends.unshift(telaBuildPath);
     nuxt.options.alias = {
       ...nuxt.options.alias,
+      "#chat-auth": chatAuthTemplate.dst,
+      "#chat-agent-environment-resolver": agentEnvironmentResolverEntry,
       "#chat-workspace-settings-resolver": workspaceSettingsResolverEntry,
       "#chat-runtime": runtimeDir,
       "@iconify-json/ph": resolvePackageRoot("@iconify-json/ph")
@@ -296,10 +418,12 @@ const module$1 = defineNuxtModule({
       priority: 1e3
     });
     addComponentsDir({
-      path: join(runtimeDir, "components")
+      path: join(runtimeDir, "components"),
+      extensions: VUE_COMPONENT_EXTENSIONS
     });
     addComponentsDir({
       path: join(runtimeDir, "embed/components"),
+      extensions: VUE_COMPONENT_EXTENSIONS,
       pathPrefix: false
     });
     nuxt.hook("vite:extendConfig", (config, { isServer }) => {
@@ -349,6 +473,8 @@ export default globalThis.ELK;
       nitroConfig.scanDirs.push(serverDir);
       nitroConfig.alias = {
         ...nitroConfig.alias,
+        "#chat-auth": chatAuthTemplate.dst,
+        "#chat-agent-environment-resolver": agentEnvironmentResolverEntry,
         "#chat-runtime": runtimeDir,
         "#chat-workspace-settings-resolver": workspaceSettingsResolverEntry
       };

package/dist/runtime/components/MeistrariChatEmbed.vue

@@ -2,6 +2,7 @@
 defineProps({
   conversationId: { type: [String, null], required: false },
   initialConversationId: { type: [String, null], required: false },
+  conversationScope: { type: [String, null], required: false },
   hideSidebar: { type: Boolean, required: false },
   loadingMessages: { type: [Array, null], required: false },
   loadingMessagesMode: { type: [String, null], required: false },
@@ -23,6 +24,7 @@ defineEmits(["update:conversationId", "action"]);
         :tela-agent-inputs="telaAgentInputs"
         :conversation-id="conversationId"
         :initial-conversation-id="initialConversationId"
+        :conversation-scope="conversationScope"
         :hide-sidebar="hideSidebar"
         :features="features"
         :loading-messages="loadingMessages"
@@ -38,6 +40,7 @@ defineEmits(["update:conversationId", "action"]);
         :user="user"
         :conversation-id="conversationId"
         :initial-conversation-id="initialConversationId"
+        :conversation-scope="conversationScope"
         :hide-sidebar="hideSidebar"
         :features="features"
         :loading-messages="loadingMessages"

package/dist/runtime/components/chat/message-bubble.vue

@@ -1,11 +1,12 @@
 <script setup>
+import { useChatAuth } from "#chat-auth";
 import { parseContentWithFiles } from "../../utils/file";
 import ChatVaultLink from "./vault-link.vue";
 const props = defineProps({
   message: { type: Object, required: true }
 });
 const emit = defineEmits(["retry"]);
-const { user } = useTelaApplicationAuth();
+const { user } = useChatAuth();
 const { getMemberByEmail } = useWorkspaceMembers();
 const embedConfig = useEmbedConfig();
 const mergedCustomComponents = computed(() => ({

package/dist/runtime/composables/useChat.js

@@ -1,4 +1,5 @@
 import * as Sentry from "@sentry/nuxt";
+import { useChatAuth } from "#chat-auth";
 import { exportConversationToMarkdown } from "../utils/export-conversation.js";
 import { resolveChatStateScope } from "../utils/tela-chat.js";
 import { useConversationFileActions } from "./useConversationFiles.js";
@@ -150,12 +151,13 @@ function parseReasoningFromPolling(reasoning) {
 export function useChat() {
   const chatApi = useChatApi();
   const embedConfig = useEmbedConfig();
-  const { user: authUser, activeOrganization } = useTelaApplicationAuth();
+  const { user: authUser, activeOrganization } = useChatAuth();
   const { addFilesToConversation } = useConversationFileActions();
   const isTelaAgentMode = computed(() => !!embedConfig?.telaAgentId.value);
   const chatScope = computed(() => resolveChatStateScope(
     embedConfig?.workspaceId.value || activeOrganization.value?.id,
-    embedConfig?.telaAgentId.value
+    embedConfig?.telaAgentId.value,
+    embedConfig?.conversationScope?.value
   ));
   const currentConversationBuckets = useState("chat-current-conversation", () => ({}));
   const messageBuckets = useState("chat-messages", () => ({}));

package/dist/runtime/composables/useChatApi.js

@@ -1,6 +1,7 @@
+import { useChatAuth } from "#chat-auth";
 export function useChatApi() {
   const embedConfig = useEmbedConfig();
-  const { activeOrganization } = useTelaApplicationAuth();
+  const { activeOrganization } = useChatAuth();
   function buildHeaders(headers) {
     const mergedHeaders = {
       ...headers ?? {}
@@ -13,6 +14,10 @@ export function useChatApi() {
     if (telaAgentId) {
       mergedHeaders["x-chat-tela-agent-id"] = telaAgentId;
     }
+    const conversationScope = embedConfig?.conversationScope?.value?.trim();
+    if (conversationScope) {
+      mergedHeaders["x-chat-conversation-scope"] = conversationScope;
+    }
     return Object.keys(mergedHeaders).length > 0 ? mergedHeaders : void 0;
   }
   function withChatHeaders(options) {

package/dist/runtime/composables/useConversations.js

@@ -1,4 +1,5 @@
 import * as Sentry from "@sentry/nuxt";
+import { useChatAuth } from "#chat-auth";
 import { resolveChatStateScope } from "../utils/tela-chat.js";
 function sortConversationsByUpdatedAt(conversations) {
   return [...conversations].sort(
@@ -26,7 +27,7 @@ export function mergeFetchedConversations(fetchedConversations, localConversatio
 export function useConversations() {
   const chatApi = useChatApi();
   const embedConfig = useEmbedConfig();
-  const { activeOrganization } = useTelaApplicationAuth();
+  const { activeOrganization } = useChatAuth();
   const conversationBuckets = useState("conversations", () => ({}));
   const loadingBuckets = useState("conversations-loading", () => ({}));
   const errorBuckets = useState("conversations-error", () => ({}));
@@ -37,7 +38,8 @@ export function useConversations() {
   const isTelaAgentMode = computed(() => !!embedConfig?.telaAgentId.value);
   const workspaceScope = computed(() => resolveChatStateScope(
     embedConfig?.workspaceId.value || activeOrganization.value?.id,
-    embedConfig?.telaAgentId.value
+    embedConfig?.telaAgentId.value,
+    embedConfig?.conversationScope?.value
   ));
   const conversations = computed({
     get: () => conversationBuckets.value[workspaceScope.value] ?? [],
@@ -229,6 +231,7 @@ export function useConversations() {
         appliedSettingsSnapshot: cloneAppliedSettingsSnapshot(updated.appliedSettingsSnapshot),
         telaAgentId: updated.telaAgentId,
         createdBy: updated.createdBy,
+        conversationScope: updated.conversationScope,
         createdAt: updated.createdAt,
         updatedAt: updated.updatedAt
       };

package/dist/runtime/composables/useEmbedConfig.d.ts

@@ -6,6 +6,7 @@ type ConfiguredTelaAgentInputs = DeepReadonly<TelaAgentExecutionInput[]> | null
 export type EmbedConfig = {
     workspaceId: Ref<string>;
     telaAgentId: Ref<string | null>;
+    conversationScope: Ref<string | null>;
     telaAgentInputs: Ref<ConfiguredTelaAgentInputs>;
     workspaceSettings: Ref<DeepReadonly<WorkspaceSettings> | WorkspaceSettings | null | undefined>;
     hideSidebar: Ref<boolean>;
@@ -17,6 +18,7 @@ export type EmbedConfig = {
 type EmbedConfigInput = {
     workspaceId: MaybeRefOrGetter<string>;
     telaAgentId?: MaybeRefOrGetter<string | null | undefined>;
+    conversationScope?: MaybeRefOrGetter<string | null | undefined>;
     telaAgentInputs?: MaybeRefOrGetter<ConfiguredTelaAgentInputs>;
     workspaceSettings?: MaybeRefOrGetter<DeepReadonly<WorkspaceSettings> | WorkspaceSettings | null | undefined>;
     hideSidebar?: MaybeRefOrGetter<boolean | undefined>;

package/dist/runtime/composables/useEmbedConfig.js

@@ -1,3 +1,4 @@
+import { normalizeConversationScope } from "../utils/tela-chat.js";
 const EMBED_CONFIG_KEY = "embed-config";
 function useGlobalCustomComponentsState() {
   const nuxtApp = useNuxtApp();
@@ -9,6 +10,7 @@ function useGlobalEmbedConfigState() {
     provided: useState("chat-embed-config-provided", () => false),
     workspaceId: useState("chat-embed-config-workspace-id", () => ""),
     telaAgentId: useState("chat-embed-config-tela-agent-id", () => null),
+    conversationScope: useState("chat-embed-config-conversation-scope", () => null),
     telaAgentInputs: useState("chat-embed-config-tela-agent-inputs", () => void 0),
     workspaceSettings: useState("chat-embed-config-workspace-settings", () => void 0),
     hideSidebar: useState("chat-embed-config-hide-sidebar", () => void 0),
@@ -22,6 +24,7 @@ export function provideEmbedConfig(input, options = {}) {
   const config = {
     workspaceId: computed(() => toValue(input.workspaceId)),
     telaAgentId: computed(() => toValue(input.telaAgentId) ?? null),
+    conversationScope: computed(() => normalizeConversationScope(toValue(input.conversationScope))),
     telaAgentInputs: computed(() => toValue(input.telaAgentInputs)),
     workspaceSettings: computed(() => toValue(input.workspaceSettings)),
     hideSidebar: computed(() => toValue(input.hideSidebar) ?? true),
@@ -36,6 +39,7 @@ export function provideEmbedConfig(input, options = {}) {
       globalConfig.provided.value = true;
       globalConfig.workspaceId.value = config.workspaceId.value;
       globalConfig.telaAgentId.value = config.telaAgentId.value;
+      globalConfig.conversationScope.value = config.conversationScope.value;
       globalConfig.telaAgentInputs.value = config.telaAgentInputs.value;
       globalConfig.workspaceSettings.value = config.workspaceSettings.value;
       globalConfig.hideSidebar.value = config.hideSidebar.value;
@@ -57,6 +61,7 @@ export function useEmbedConfig() {
   return {
     workspaceId: computed(() => globalConfig.workspaceId.value),
     telaAgentId: computed(() => globalConfig.telaAgentId.value),
+    conversationScope: computed(() => globalConfig.conversationScope.value),
     telaAgentInputs: computed(() => globalConfig.telaAgentInputs.value),
     workspaceSettings: computed(() => globalConfig.workspaceSettings.value),
     hideSidebar: computed(() => globalConfig.hideSidebar.value ?? true),

package/dist/runtime/composables/useGitHubSkills.js

@@ -1,7 +1,8 @@
 import * as Sentry from "@sentry/nuxt";
+import { useChatAuth } from "#chat-auth";
 export function useGitHubSkills() {
   const config = useRuntimeConfig();
-  const { activeOrganization } = useTelaApplicationAuth();
+  const { activeOrganization } = useChatAuth();
   const { settings, updateSettings } = useWorkspaceSettings();
   const connection = useState("github-skills-connection", () => ({
     connected: false,

package/dist/runtime/composables/useWorkspaceExternalSkills.js

@@ -1,5 +1,6 @@
+import { useChatAuth } from "#chat-auth";
 export function useWorkspaceExternalSkills(currentExternalSkills, searchQuery) {
-  const { user } = useTelaApplicationAuth();
+  const { user } = useChatAuth();
   const { connection: skillsConnection, fetchConnection: fetchGitHubConnection, connect: connectGitHub } = useGitHubSkills();
   const pendingSkills = ref([]);
   const removedRefs = ref([]);

package/dist/runtime/composables/useWorkspaceMembers.js

@@ -1,5 +1,6 @@
+import { useChatAuth } from "#chat-auth";
 export function useWorkspaceMembers() {
-  const { activeOrganization } = useTelaApplicationAuth();
+  const { activeOrganization } = useChatAuth();
   const members = computed(() => activeOrganization.value?.members ?? []);
   const membersMap = computed(() => {
     const map = /* @__PURE__ */ new Map();

package/dist/runtime/composables/useWorkspaceSettings.js

@@ -1,4 +1,5 @@
 import * as Sentry from "@sentry/nuxt";
+import { useChatAuth } from "#chat-auth";
 function isNullableArray(value) {
   return value === null || Array.isArray(value);
 }
@@ -19,7 +20,7 @@ function assertWorkspaceSettingsResponse(value) {
 export function useWorkspaceSettings() {
   const chatApi = useChatApi();
   const embedConfig = useEmbedConfig();
-  const { activeOrganization } = useTelaApplicationAuth();
+  const { activeOrganization } = useChatAuth();
   const workspaceScope = computed(() => embedConfig?.workspaceId.value.trim() || activeOrganization.value?.id?.trim() || "default");
   const settingsBuckets = useState("workspace-settings", () => ({}));
   const loadingBuckets = useState("workspace-settings-loading", () => ({}));

package/dist/runtime/composables/useWorkspaces.js

@@ -1,5 +1,6 @@
+import { useChatAuth } from "#chat-auth";
 export function useWorkspaces() {
-  const { getAvailableOrganizations } = useTelaApplicationAuth();
+  const { getAvailableOrganizations } = useChatAuth();
   const { data: workspaces, status, refresh: refreshWorkspaces } = useAsyncData(
     "workspaces",
     () => getAvailableOrganizations(),

package/dist/runtime/embed/components/ChatEmbed.vue

@@ -1,11 +1,13 @@
 <script setup>
+import { useChatAuth } from "#chat-auth";
 import { provideEmbedConfig, useEmbedConfig } from "../../composables/useEmbedConfig";
 import { provideChatAction } from "../../composables/useChatAction";
-import { normalizeTelaAgentId } from "../../utils/tela-chat";
+import { normalizeConversationScope, normalizeTelaAgentId, resolveConversationScopeKeySegment } from "../../utils/tela-chat";
 import ChatEmbedInner from "./ChatEmbedInner.vue";
 const props = defineProps({
   conversationId: { type: [String, null], required: false },
   initialConversationId: { type: [String, null], required: false },
+  conversationScope: { type: [String, null], required: false },
   hideSidebar: { type: Boolean, required: false },
   loadingMessages: { type: [Array, null], required: false },
   loadingMessagesMode: { type: [String, null], required: false },
@@ -19,13 +21,15 @@ const props = defineProps({
 });
 const emit = defineEmits(["update:conversationId", "action"]);
 const parentEmbedConfig = useEmbedConfig();
-const { activeOrganization } = useTelaApplicationAuth();
+const { activeOrganization } = useChatAuth();
 const workspaceId = computed(() => activeOrganization.value?.id?.trim() ?? "");
 const normalizedTelaAgentId = computed(() => normalizeTelaAgentId(props.telaAgentId));
+const normalizedConversationScope = computed(() => normalizeConversationScope(props.conversationScope));
 const ignoredPropsWarningKey = ref(null);
 provideEmbedConfig({
   workspaceId,
   telaAgentId: normalizedTelaAgentId,
+  conversationScope: normalizedConversationScope,
   telaAgentInputs: computed(() => props.telaAgentInputs),
   workspaceSettings: computed(() => props.workspaceSettings),
   hideSidebar: computed(() => props.hideSidebar),
@@ -61,7 +65,7 @@ provideChatAction((payload) => {
 <template>
     <ChatEmbedInner
         v-if="workspaceId"
-        :key="`${workspaceId}:${normalizedTelaAgentId ?? 'default-chat'}`"
+        :key="`${workspaceId}:${normalizedTelaAgentId ?? 'default-chat'}:scope:${resolveConversationScopeKeySegment(normalizedConversationScope)}`"
         :conversation-id="conversationId"
         :initial-conversation-id="initialConversationId"
         :hide-sidebar="hideSidebar"

package/dist/runtime/embed/components/ChatEmbedInner.vue

@@ -1,4 +1,5 @@
 <script setup>
+import { useChatAuth } from "#chat-auth";
 import { exportConversationToMarkdown } from "../../utils/export-conversation";
 import { conversationListSkeletonRows } from "../../utils/conversation-list-skeleton";
 import {
@@ -16,7 +17,7 @@ const props = defineProps({
 const emit = defineEmits(["update:conversationId"]);
 const chatApi = useChatApi();
 const embedConfig = useEmbedConfig();
-const { user: authUser } = useTelaApplicationAuth();
+const { user: authUser } = useChatAuth();
 const { getMember } = useWorkspaceMembers();
 const statusToast = useStatusToast();
 const { conversations, loading: conversationsLoading, fetchConversations, createConversation, deleteConversation, renameConversation, duplicateConversation, updateConversationInList } = useConversations();

package/dist/runtime/internal/agent-environment-resolver.stub.d.ts

@@ -0,0 +1,2 @@
+declare const _default: null;
+export default _default;

package/dist/runtime/internal/agent-environment-resolver.stub.js

@@ -0,0 +1 @@
+export default null;

package/dist/runtime/server/api/conversations/[id]/duplicate.post.js

@@ -30,6 +30,7 @@ export default defineEventHandler(async (event) => {
       title: `${original.title} (copy)`,
       createdBy: context.user.email,
       telaAgentId: original.telaAgentId,
+      conversationScope: original.conversationScope,
       threadSessionId: null,
       model: original.telaAgentId ? null : original.model,
       appliedSettingsAt: trustedSettings ? getWorkspaceSettingsUpdatedAt(trustedSettings) : null,

package/dist/runtime/server/api/conversations/[id]/messages/[messageId]/retry.post.js

@@ -90,8 +90,12 @@ export default defineEventHandler(async (event) => {
         const environmentVariables = await resolveDefaultAgentEnvironmentVariables(
           event,
           context,
-          { conversationId, messageId },
-          "Failed to resolve workspace credentials on retry, proceeding without env vars"
+          {
+            conversationId,
+            skills: defaultAgentTurn.createPayload.skills ?? [],
+            logContext: { conversationId, messageId },
+            credentialsFailureMessage: "Failed to resolve workspace credentials on retry, proceeding without env vars"
+          }
         );
         const result = await createChatAgentSession(token, withEnvironmentVariables(defaultAgentTurn.createPayload, environmentVariables));
         if (result.success) {

package/dist/runtime/server/api/conversations/[id]/messages/index.post.js

@@ -115,8 +115,12 @@ export default defineEventHandler(async (event) => {
     const environmentVariables = await resolveDefaultAgentEnvironmentVariables(
       event,
       context,
-      { conversationId },
-      "Failed to resolve workspace credentials, proceeding without env vars"
+      {
+        conversationId,
+        skills: defaultAgentTurn.createPayload.skills ?? [],
+        logContext: { conversationId },
+        credentialsFailureMessage: "Failed to resolve workspace credentials, proceeding without env vars"
+      }
     );
     createChatAgentSession(token, withEnvironmentVariables(defaultAgentTurn.createPayload, environmentVariables)).then(async (result) => {
       if (result.success) {