@meistrari/chat-nuxt 3.12.1 → 3.13.0-rc.0

package/dist/module.d.mts

@@ -13,6 +13,20 @@ interface ChatNuxtModuleOptions {
      * required runtime config keys are unset.
      */
     validateConfig?: ChatNuxtConfigValidationMode;
+    /**
+     * Path, relative to `srcDir`, of a module default-exporting the host app's
+     * auth bridge built with `defineChatAuth()` (from `@meistrari/chat-nuxt/auth`).
+     * Setting it switches `#chat-auth` to the host implementation and lifts the
+     * `@meistrari/auth-nuxt` module requirement.
+     */
+    authComposable?: string;
+    /**
+     * Name of the cookie holding the bearer token the server proxy routes
+     * forward to the chat-api. Only read when `authComposable` is set; without
+     * it the proxies keep relying on `event.context.auth` populated by
+     * `@meistrari/auth-nuxt`.
+     */
+    authTokenCookie?: string;
 }
 declare const _default: any;
 

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@meistrari/chat-nuxt",
   "configKey": "chatNuxt",
-  "version": "3.12.1-rc.0",
+  "version": "3.13.0-rc.0",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "unknown"

package/dist/module.mjs

@@ -1,6 +1,6 @@
 import { existsSync, readFileSync, mkdirSync, symlinkSync } from 'node:fs';
 import { createRequire } from 'node:module';
-import { join, dirname } from 'node:path';
+import { join, dirname, isAbsolute } from 'node:path';
 import { defineNuxtModule, createResolver, addTemplate, addTypeTemplate, addPlugin, addImportsDir, addComponent, addComponentsDir } from 'nuxt/kit';
 import { TOOL_ICON_SAFELIST } from '../dist/runtime/messages/tool-registry.js';
 export { ChatMessageStatus } from '../dist/runtime/messages/composables/chat-message-terminal.js';
@@ -193,7 +193,33 @@ function resolveChatAuthMode(runtimeConfig) {
   const telaAuth = publicConfig?.telaAuth;
   return telaAuth?.application?.enabled ? "application" : "first-party";
 }
-function buildChatAuthTemplate(mode) {
+const HOST_AUTH_COMPOSABLE_EXTENSIONS = ["", ".ts", ".mts", ".js", ".mjs"];
+function resolveHostAuthComposable(srcDir, authComposable) {
+  const base = isAbsolute(authComposable) ? authComposable : join(srcDir, authComposable);
+  for (const extension of HOST_AUTH_COMPOSABLE_EXTENSIONS) {
+    const candidate = `${base}${extension}`;
+    if (existsSync(candidate)) {
+      return candidate;
+    }
+  }
+  throw new Error(
+    `[@meistrari/chat-nuxt] authComposable not found: ${base}
+Create it with:
+
+  import { defineChatAuth } from '@meistrari/chat-nuxt/auth'
+
+  export default defineChatAuth(() => ({
+      user, activeOrganization, logout, getToken, getAvailableOrganizations, switchOrganization,
+  }))
+
+See docs/guides/host-auth.md in @meistrari/chat-nuxt.`
+  );
+}
+function buildChatAuthTemplate(mode, hostAuthComposablePath) {
+  if (mode === "host") {
+    return `export { default as useChatAuth } from ${JSON.stringify((hostAuthComposablePath ?? "").replace(/\\/g, "/"))}
+`;
+  }
   if (mode === "application") {
     return `
 import { useTelaApplicationAuth } from '#imports'
@@ -333,10 +359,11 @@ const module$1 = defineNuxtModule({
     validateConfig: false
   },
   setup(options, nuxt) {
+    const hostAuthComposablePath = options.authComposable ? resolveHostAuthComposable(nuxt.options.srcDir, options.authComposable) : void 0;
     const hasAuthModule = (nuxt.options.modules ?? []).some(isAuthModuleEntry);
-    if (!hasAuthModule) {
+    if (!hasAuthModule && !hostAuthComposablePath) {
       throw new Error(
-        '[@meistrari/chat-nuxt] Missing required module "@meistrari/auth-nuxt". Install and enable it so chat auth composables and event.context.auth are available.'
+        `[@meistrari/chat-nuxt] Missing required module "@meistrari/auth-nuxt". Install and enable it so chat auth composables and event.context.auth are available, or set chatNuxt.authComposable to provide the host app's own auth bridge.`
       );
     }
     ensureIconifyPackages(nuxt.options.rootDir);
@@ -356,10 +383,14 @@ const module$1 = defineNuxtModule({
     );
     const telaBuildPath = resolveTelaBuildLayer();
     const runtimeAliases = resolveRuntimeAliases(telaBuildPath);
-    const chatAuthMode = resolveChatAuthMode(nuxt.options.runtimeConfig);
+    const chatAuthMode = hostAuthComposablePath ? "host" : resolveChatAuthMode(nuxt.options.runtimeConfig);
+    console.info(
+      { mode: chatAuthMode, ...options.authComposable ? { authComposable: options.authComposable } : {} },
+      "[@meistrari/chat-nuxt] auth bridge resolved"
+    );
     const chatAuthTemplate = addTemplate({
       filename: "chat-nuxt/auth.mjs",
-      getContents: () => buildChatAuthTemplate(chatAuthMode)
+      getContents: () => buildChatAuthTemplate(chatAuthMode, hostAuthComposablePath)
     });
     const chatAuthTypeTemplate = addTypeTemplate({
       filename: "chat-nuxt/chat-auth.d.ts",
@@ -412,8 +443,14 @@ const module$1 = defineNuxtModule({
     rc.chatNuxt = {
       chatApiUrl: existingChatNuxtRuntimeConfig?.chatApiUrl || rc.chatApiUrl,
       source: options.source || existingChatNuxtRuntimeConfig?.source,
-      clientVersion: _chatNuxtPackageVersion
+      clientVersion: _chatNuxtPackageVersion,
+      authTokenCookie: hostAuthComposablePath ? options.authTokenCookie || existingChatNuxtRuntimeConfig?.authTokenCookie : void 0
     };
+    if (hostAuthComposablePath && !rc.chatNuxt.authTokenCookie) {
+      console.warn(
+        "[@meistrari/chat-nuxt] authComposable is set but authTokenCookie is not. Server proxy routes will only authenticate if the host populates event.context.auth.token through its own server middleware."
+      );
+    }
     validateRuntimeConfig(rc, options.validateConfig ?? false);
     nuxt.options.css = nuxt.options.css || [];
     for (const css of [
@@ -427,6 +464,14 @@ const module$1 = defineNuxtModule({
     }
     addPlugin(join(runtimeDir, "plugins/markstream"));
     addImportsDir(FEATURE_DIRS.map((feature) => join(runtimeDir, feature, "composables")));
+    const importsExtendNuxt = nuxt;
+    importsExtendNuxt.hook("imports:extend", (imports) => {
+      for (const entry of imports) {
+        if (entry.from?.startsWith(runtimeDir)) {
+          entry.priority ||= -100;
+        }
+      }
+    });
     addComponent({
       name: "MeistrariChatEmbed",
       filePath: join(runtimeDir, "embed/components/meistrari-chat-embed.vue"),

package/dist/runtime/auth/define.d.ts

@@ -0,0 +1,37 @@
+import type { Ref } from 'vue';
+export type ChatAuthUser = {
+    id: string;
+    email?: string | null;
+    name?: string | null;
+    image?: string | null;
+};
+export type ChatAuthMemberUser = {
+    name: string;
+    email: string;
+    image?: string;
+};
+export type ChatAuthMember = {
+    id: string;
+    userId: string;
+    user: ChatAuthMemberUser;
+};
+export type ChatAuthOrganization = {
+    id: string;
+    name?: string;
+    logo?: string | null;
+    members?: ChatAuthMember[];
+};
+export type ChatAuthBridge = {
+    user: Ref<ChatAuthUser | null>;
+    activeOrganization: Ref<ChatAuthOrganization | null>;
+    logout: () => Promise<void>;
+    getToken: () => Promise<string | null | undefined>;
+    getAvailableOrganizations: () => Promise<ChatAuthOrganization[]>;
+    switchOrganization: (organizationId: string) => Promise<void>;
+};
+/**
+ * Identity helper that types a host app's auth bridge against the `#chat-auth`
+ * contract at the definition site. Default-export the result from the file
+ * referenced by the `chatNuxt.authComposable` module option.
+ */
+export declare function defineChatAuth(bridge: () => ChatAuthBridge): () => ChatAuthBridge;

package/dist/runtime/auth/define.js

@@ -0,0 +1,3 @@
+export function defineChatAuth(bridge) {
+  return bridge;
+}

package/dist/runtime/embed/components/chat-embed-inner.vue

@@ -1,6 +1,7 @@
 <script setup>
 import { useChatAuth } from "#chat-auth";
 import { useBreakpoints } from "@vueuse/core";
+import { useCitationPanel } from "../../citations/composables/citation-panel";
 import { exportConversationToMarkdown } from "../../conversations/export";
 import { CHAT_MOBILE_BREAKPOINT } from "../../shared/breakpoints";
 import ChatMobileFilePreview from "./mobile/chat-mobile-file-preview.vue";

package/dist/runtime/server/utils/auth-token.js

@@ -1,15 +1,40 @@
 import { getCookie } from "h3";
 import { useRuntimeConfig } from "nitropack/runtime";
+import { parseAllowedEmailDomains } from "./domain-allow.js";
+import { logger } from "./logger.js";
 const DEFAULT_FIRST_PARTY_JWT_COOKIE_NAME = "tela-jwt";
 function resolveFirstPartyJwtCookieName(event) {
   const config = useRuntimeConfig(event);
   return config.public?.telaAuth?.jwtCookieName || DEFAULT_FIRST_PARTY_JWT_COOKIE_NAME;
 }
+function resolveHostAuthTokenCookieName(event) {
+  const config = useRuntimeConfig(event);
+  return config.chatNuxt?.authTokenCookie || void 0;
+}
+function hasEmailDomainRestrictions(event) {
+  const config = useRuntimeConfig(event);
+  return parseAllowedEmailDomains(config.auth?.allowedEmailDomains).length > 0;
+}
 export function resolveAuthToken(event) {
   const auth = event.context.auth;
   if (auth?.token) {
     return auth.token;
   }
+  const hostCookieName = resolveHostAuthTokenCookieName(event);
+  if (hostCookieName) {
+    if (hasEmailDomainRestrictions(event)) {
+      logger.warn(
+        { cookie: hostCookieName },
+        "authTokenCookie ignored: auth.allowedEmailDomains is set and the host cookie carries no user context for domain validation"
+      );
+      return void 0;
+    }
+    const token2 = getCookie(event, hostCookieName);
+    if (token2 && auth) {
+      auth.token = token2;
+    }
+    return token2 || void 0;
+  }
   if (!auth?.user || !auth.workspace) {
     return void 0;
   }

package/dist/runtime/types/chat-auth.d.ts

@@ -1,3 +1,5 @@
+// Keep these types in sync with ../auth/define.ts — the exported ChatAuthBridge
+// there is the same contract host apps implement via defineChatAuth().
 declare module '#chat-auth' {
     type ChatAuthUser = {
         id: string

package/package.json

@@ -1,12 +1,16 @@
 {
   "name": "@meistrari/chat-nuxt",
-  "version": "3.12.1",
+  "version": "3.13.0-rc.0",
   "type": "module",
   "exports": {
     ".": {
       "types": "./dist/types.d.mts",
       "import": "./dist/module.mjs"
     },
+    "./auth": {
+      "types": "./dist/runtime/auth/define.d.ts",
+      "import": "./dist/runtime/auth/define.js"
+    },
     "./components/MeistrariChatEmbed": {
       "types": "./dist/runtime/embed/components/meistrari-chat-embed.vue.d.ts",
       "import": "./dist/runtime/embed/components/meistrari-chat-embed.vue"