@meistrari/chat-nuxt 3.12.1 → 3.13.0-rc.1

package/dist/module.d.mts

@@ -13,6 +13,20 @@ interface ChatNuxtModuleOptions {
      * required runtime config keys are unset.
      */
     validateConfig?: ChatNuxtConfigValidationMode;
+    /**
+     * Path, relative to `srcDir`, of a module default-exporting the host app's
+     * auth bridge built with `defineChatAuth()` (from `@meistrari/chat-nuxt/auth`).
+     * Setting it switches `#chat-auth` to the host implementation and lifts the
+     * `@meistrari/auth-nuxt` module requirement.
+     */
+    authComposable?: string;
+    /**
+     * Name of the cookie holding the bearer token the server proxy routes
+     * forward to the chat-api. Only read when `authComposable` is set; without
+     * it the proxies keep relying on `event.context.auth` populated by
+     * `@meistrari/auth-nuxt`.
+     */
+    authTokenCookie?: string;
 }
 declare const _default: any;
 

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@meistrari/chat-nuxt",
   "configKey": "chatNuxt",
-  "version": "3.12.1-rc.0",
+  "version": "3.13.0-rc.1",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "unknown"

package/dist/module.mjs

@@ -1,6 +1,6 @@
 import { existsSync, readFileSync, mkdirSync, symlinkSync } from 'node:fs';
 import { createRequire } from 'node:module';
-import { join, dirname } from 'node:path';
+import { join, dirname, isAbsolute } from 'node:path';
 import { defineNuxtModule, createResolver, addTemplate, addTypeTemplate, addPlugin, addImportsDir, addComponent, addComponentsDir } from 'nuxt/kit';
 import { TOOL_ICON_SAFELIST } from '../dist/runtime/messages/tool-registry.js';
 export { ChatMessageStatus } from '../dist/runtime/messages/composables/chat-message-terminal.js';
@@ -193,7 +193,33 @@ function resolveChatAuthMode(runtimeConfig) {
   const telaAuth = publicConfig?.telaAuth;
   return telaAuth?.application?.enabled ? "application" : "first-party";
 }
-function buildChatAuthTemplate(mode) {
+const HOST_AUTH_COMPOSABLE_EXTENSIONS = ["", ".ts", ".mts", ".js", ".mjs"];
+function resolveHostAuthComposable(srcDir, authComposable) {
+  const base = isAbsolute(authComposable) ? authComposable : join(srcDir, authComposable);
+  for (const extension of HOST_AUTH_COMPOSABLE_EXTENSIONS) {
+    const candidate = `${base}${extension}`;
+    if (existsSync(candidate)) {
+      return candidate;
+    }
+  }
+  throw new Error(
+    `[@meistrari/chat-nuxt] authComposable not found: ${base}
+Create it with:
+
+  import { defineChatAuth } from '@meistrari/chat-nuxt/auth'
+
+  export default defineChatAuth(() => ({
+      user, activeOrganization, logout, getToken, getAvailableOrganizations, switchOrganization,
+  }))
+
+See docs/guides/host-auth.md in @meistrari/chat-nuxt.`
+  );
+}
+function buildChatAuthTemplate(mode, hostAuthComposablePath) {
+  if (mode === "host") {
+    return `export { default as useChatAuth } from ${JSON.stringify((hostAuthComposablePath ?? "").replace(/\\/g, "/"))}
+`;
+  }
   if (mode === "application") {
     return `
 import { useTelaApplicationAuth } from '#imports'
@@ -333,10 +359,11 @@ const module$1 = defineNuxtModule({
     validateConfig: false
   },
   setup(options, nuxt) {
+    const hostAuthComposablePath = options.authComposable ? resolveHostAuthComposable(nuxt.options.srcDir, options.authComposable) : void 0;
     const hasAuthModule = (nuxt.options.modules ?? []).some(isAuthModuleEntry);
-    if (!hasAuthModule) {
+    if (!hasAuthModule && !hostAuthComposablePath) {
       throw new Error(
-        '[@meistrari/chat-nuxt] Missing required module "@meistrari/auth-nuxt". Install and enable it so chat auth composables and event.context.auth are available.'
+        `[@meistrari/chat-nuxt] Missing required module "@meistrari/auth-nuxt". Install and enable it so chat auth composables and event.context.auth are available, or set chatNuxt.authComposable to provide the host app's own auth bridge.`
       );
     }
     ensureIconifyPackages(nuxt.options.rootDir);
@@ -356,10 +383,14 @@ const module$1 = defineNuxtModule({
     );
     const telaBuildPath = resolveTelaBuildLayer();
     const runtimeAliases = resolveRuntimeAliases(telaBuildPath);
-    const chatAuthMode = resolveChatAuthMode(nuxt.options.runtimeConfig);
+    const chatAuthMode = hostAuthComposablePath ? "host" : resolveChatAuthMode(nuxt.options.runtimeConfig);
+    console.info(
+      { mode: chatAuthMode, ...options.authComposable ? { authComposable: options.authComposable } : {} },
+      "[@meistrari/chat-nuxt] auth bridge resolved"
+    );
     const chatAuthTemplate = addTemplate({
       filename: "chat-nuxt/auth.mjs",
-      getContents: () => buildChatAuthTemplate(chatAuthMode)
+      getContents: () => buildChatAuthTemplate(chatAuthMode, hostAuthComposablePath)
     });
     const chatAuthTypeTemplate = addTypeTemplate({
       filename: "chat-nuxt/chat-auth.d.ts",
@@ -412,8 +443,14 @@ const module$1 = defineNuxtModule({
     rc.chatNuxt = {
       chatApiUrl: existingChatNuxtRuntimeConfig?.chatApiUrl || rc.chatApiUrl,
       source: options.source || existingChatNuxtRuntimeConfig?.source,
-      clientVersion: _chatNuxtPackageVersion
+      clientVersion: _chatNuxtPackageVersion,
+      authTokenCookie: hostAuthComposablePath ? options.authTokenCookie || existingChatNuxtRuntimeConfig?.authTokenCookie : void 0
     };
+    if (hostAuthComposablePath && !rc.chatNuxt.authTokenCookie) {
+      console.warn(
+        "[@meistrari/chat-nuxt] authComposable is set but authTokenCookie is not. Server proxy routes will only authenticate if the host populates event.context.auth.token through its own server middleware."
+      );
+    }
     validateRuntimeConfig(rc, options.validateConfig ?? false);
     nuxt.options.css = nuxt.options.css || [];
     for (const css of [
@@ -427,6 +464,14 @@ const module$1 = defineNuxtModule({
     }
     addPlugin(join(runtimeDir, "plugins/markstream"));
     addImportsDir(FEATURE_DIRS.map((feature) => join(runtimeDir, feature, "composables")));
+    const importsExtendNuxt = nuxt;
+    importsExtendNuxt.hook("imports:extend", (imports) => {
+      for (const entry of imports) {
+        if (entry.from?.startsWith(runtimeDir)) {
+          entry.priority ||= -100;
+        }
+      }
+    });
     addComponent({
       name: "MeistrariChatEmbed",
       filePath: join(runtimeDir, "embed/components/meistrari-chat-embed.vue"),

package/dist/runtime/auth/define.d.ts

@@ -0,0 +1,37 @@
+import type { Ref } from 'vue';
+export type ChatAuthUser = {
+    id: string;
+    email?: string | null;
+    name?: string | null;
+    image?: string | null;
+};
+export type ChatAuthMemberUser = {
+    name: string;
+    email: string;
+    image?: string;
+};
+export type ChatAuthMember = {
+    id: string;
+    userId: string;
+    user: ChatAuthMemberUser;
+};
+export type ChatAuthOrganization = {
+    id: string;
+    name?: string;
+    logo?: string | null;
+    members?: ChatAuthMember[];
+};
+export type ChatAuthBridge = {
+    user: Ref<ChatAuthUser | null>;
+    activeOrganization: Ref<ChatAuthOrganization | null>;
+    logout: () => Promise<void>;
+    getToken: () => Promise<string | null | undefined>;
+    getAvailableOrganizations: () => Promise<ChatAuthOrganization[]>;
+    switchOrganization: (organizationId: string) => Promise<void>;
+};
+/**
+ * Identity helper that types a host app's auth bridge against the `#chat-auth`
+ * contract at the definition site. Default-export the result from the file
+ * referenced by the `chatNuxt.authComposable` module option.
+ */
+export declare function defineChatAuth(bridge: () => ChatAuthBridge): () => ChatAuthBridge;

package/dist/runtime/auth/define.js

@@ -0,0 +1,3 @@
+export function defineChatAuth(bridge) {
+  return bridge;
+}

package/dist/runtime/citations/components/chat-citation.vue

@@ -1,5 +1,5 @@
 <script setup>
-import { onClickOutside } from "@vueuse/core";
+import { onClickOutside, useElementBounding, useWindowSize } from "@vueuse/core";
 import { useEmbedConfig } from "../../embed/composables/embed-config";
 import { useCitationPanel } from "../composables/citation-panel";
 import { useCitations } from "../composables/citations";
@@ -20,9 +20,55 @@ const status = computed(() => entry.value?.status.value ?? "loading");
 const meta = computed(() => entry.value?.meta.value ?? null);
 const displayLabel = computed(() => props.label?.trim() || meta.value?.identifier || meta.value?.title || "Documento");
 const rootEl = ref(null);
+const popoverEl = ref(null);
 const popoverOpen = ref(false);
 onClickOutside(rootEl, () => {
   popoverOpen.value = false;
+}, {
+  ignore: [popoverEl]
+});
+const POPOVER_WIDTH = 300;
+const POPOVER_GAP = 6;
+const VIEWPORT_PADDING = 8;
+const triggerBounds = useElementBounding(rootEl);
+const popoverBounds = useElementBounding(popoverEl);
+const viewport = useWindowSize();
+const popoverStyle = computed(() => {
+  const maxHeight = Math.max(
+    0,
+    viewport.height.value - VIEWPORT_PADDING * 2
+  );
+  const maxLeft = Math.max(
+    VIEWPORT_PADDING,
+    viewport.width.value - POPOVER_WIDTH - VIEWPORT_PADDING
+  );
+  const left = Math.min(
+    Math.max(triggerBounds.left.value, VIEWPORT_PADDING),
+    maxLeft
+  );
+  const fitsAbove = triggerBounds.top.value >= popoverBounds.height.value + POPOVER_GAP + VIEWPORT_PADDING;
+  const fitsBelow = viewport.height.value - triggerBounds.bottom.value >= popoverBounds.height.value + POPOVER_GAP + VIEWPORT_PADDING;
+  const constrainedStyle = {
+    left: `${left}px`,
+    maxHeight: `${maxHeight}px`,
+    overflowY: "auto"
+  };
+  if (fitsAbove) {
+    return {
+      ...constrainedStyle,
+      bottom: `${viewport.height.value - triggerBounds.top.value + POPOVER_GAP}px`
+    };
+  }
+  if (fitsBelow) {
+    return {
+      ...constrainedStyle,
+      top: `${triggerBounds.bottom.value + POPOVER_GAP}px`
+    };
+  }
+  return {
+    ...constrainedStyle,
+    top: `${VIEWPORT_PADDING}px`
+  };
 });
 function togglePopover() {
   if (status.value === "loading")
@@ -99,88 +145,92 @@ const badgeClasses = computed(() => BADGE_TONE_CLASSES[meta.value?.badge?.tone ?
             @click="togglePopover"
         ><span :class="chipIcon" class="citation-ref-icon" />{{ displayLabel }}</button>
 
-        <div
-            v-if="popoverOpen"
-            absolute bottom-full left-0 mb-6px z-50
-            w-300px
-            bg-white
-            border-0.5px border-solid border-neutral-300
-            rounded-12px p-12px
-            shadow-lg
-            cursor-default
-            flex="~ col" gap-8px
-        >
-            <template v-if="status === 'unresolved'">
-                <div flex items-start gap-6px>
-                    <span i-ph-warning-circle text-14px text-amber-600 mt-2px flex-shrink-0 />
-                    <p text-12px leading-16px text-neutral-700>
-                        Não foi possível verificar esta referência. Ela pode não existir ou não estar disponível para o seu perfil.
-                    </p>
-                </div>
-                <button
-                    type="button"
-                    self-start text-12px leading-16px text-neutral-700 underline cursor-pointer
-                    @click="retry"
-                >
-                    Tentar novamente
-                </button>
-            </template>
-
-            <template v-else-if="meta">
-                <div flex="~ col" gap-2px>
-                    <p text-13px leading-18px font-580 text-neutral-900>
-                        {{ meta.title }}
-                    </p>
-                    <p v-if="meta.sourceLabel || meta.identifier" text-12px leading-16px text-neutral-600>
-                        {{ [meta.sourceLabel, meta.identifier].filter(Boolean).join(" \xB7 ") }}
-                    </p>
-                    <p v-if="formattedDate" text-12px leading-16px text-neutral-500>
-                        {{ meta.dateLabel ? `${meta.dateLabel}: ` : "" }}{{ formattedDate }}
-                    </p>
-                </div>
-
-                <span
-                    v-if="meta.badge"
-                    self-start px-6px py-1px rounded-4px text-11px leading-15px font-580
-                    :class="badgeClasses"
-                >
-                    {{ meta.badge.label }}
-                </span>
-
-                <p v-if="meta.snippet" text-12px leading-17px text-neutral-600 line-clamp-3>
-                    {{ meta.snippet }}
-                </p>
-
-                <div v-if="canOpenDocument || safeSourceUrl" flex items-center gap-12px pt-2px>
+        <Teleport to="body">
+            <div
+                v-if="popoverOpen"
+                ref="popoverEl"
+                class="citation-ref-popover"
+                :style="popoverStyle"
+                w-300px
+                bg-white
+                border-0.5px border-solid border-neutral-300
+                rounded-12px p-12px
+                shadow-lg
+                cursor-default
+                flex="~ col" gap-8px
+            >
+                <template v-if="status === 'unresolved'">
+                    <div flex items-start gap-6px>
+                        <span i-ph-warning-circle text-14px text-amber-600 mt-2px flex-shrink-0 />
+                        <p text-12px leading-16px text-neutral-700>
+                            Não foi possível verificar esta referência. Ela pode não existir ou não estar disponível para o seu perfil.
+                        </p>
+                    </div>
                     <button
-                        v-if="canOpenDocument"
                         type="button"
-                        inline-flex items-center gap-4px
-                        text-12px leading-16px font-580 text-neutral-900
-                        cursor-pointer hover:underline
-                        @click="openDocument"
+                        self-start text-12px leading-16px text-neutral-700 underline cursor-pointer
+                        @click="retry"
                     >
-                        <span i-ph-file-magnifying-glass text-13px />
-                        Ver documento
+                        Tentar novamente
                     </button>
-                    <a
-                        v-if="safeSourceUrl"
-                        :href="safeSourceUrl"
-                        target="_blank"
-                        rel="noopener noreferrer"
-                        inline-flex items-center gap-4px
-                        text-12px leading-16px text-neutral-600
-                        hover:underline
+                </template>
+
+                <template v-else-if="meta">
+                    <div flex="~ col" gap-2px>
+                        <p text-13px leading-18px font-580 text-neutral-900>
+                            {{ meta.title }}
+                        </p>
+                        <p v-if="meta.sourceLabel || meta.identifier" text-12px leading-16px text-neutral-600>
+                            {{ [meta.sourceLabel, meta.identifier].filter(Boolean).join(" \xB7 ") }}
+                        </p>
+                        <p v-if="formattedDate" text-12px leading-16px text-neutral-500>
+                            {{ meta.dateLabel ? `${meta.dateLabel}: ` : "" }}{{ formattedDate }}
+                        </p>
+                    </div>
+
+                    <span
+                        v-if="meta.badge"
+                        self-start px-6px py-1px rounded-4px text-11px leading-15px font-580
+                        :class="badgeClasses"
                     >
-                        <span i-ph-arrow-square-out text-13px />
-                        Abrir na fonte
-                    </a>
-                </div>
-            </template>
-        </div>
+                        {{ meta.badge.label }}
+                    </span>
+
+                    <p v-if="meta.snippet" text-12px leading-17px text-neutral-600 line-clamp-3>
+                        {{ meta.snippet }}
+                    </p>
+
+                    <div v-if="canOpenDocument || safeSourceUrl" flex items-center gap-12px pt-2px>
+                        <button
+                            v-if="canOpenDocument"
+                            type="button"
+                            inline-flex items-center gap-4px
+                            text-12px leading-16px font-580 text-neutral-900
+                            cursor-pointer hover:underline
+                            @click="openDocument"
+                        >
+                            <span i-ph-file-magnifying-glass text-13px />
+                            Ver documento
+                        </button>
+                        <a
+                            v-if="safeSourceUrl"
+                            :href="safeSourceUrl"
+                            target="_blank"
+                            rel="noopener noreferrer"
+                            inline-flex items-center gap-4px
+                            text-12px leading-16px text-neutral-600
+                            hover:underline
+                        >
+                            <span i-ph-arrow-square-out text-13px />
+                            Abrir na fonte
+                        </a>
+                    </div>
+                </template>
+            </div>
+        </Teleport>
     </span>
 </template>
 
 <style scoped>
-.citation-ref{display:inline;position:relative}.citation-ref-anchor{background:transparent;border:0;border-radius:5px;color:inherit;cursor:pointer;display:inline;font:inherit;margin:0 -2px;padding:1px 3px;text-decoration:underline;text-decoration-color:#a3a3a3;text-decoration-style:dotted;text-decoration-thickness:1px;text-underline-offset:3px;transition:background-color .15s ease,text-decoration-color .15s ease}.citation-ref-anchor:hover{background-color:#f5f5f5;text-decoration-color:#525252}.citation-ref-anchor--loading{cursor:default;opacity:.6;text-decoration-color:#d4d4d4}.citation-ref-anchor--unresolved{text-decoration-color:#f59e0b}.citation-ref-anchor--unresolved:hover{background-color:#fffbeb}.citation-ref-icon{display:inline-block;font-size:.85em;margin-right:.25em;vertical-align:-.08em}
+.citation-ref{display:inline;position:relative}.citation-ref-popover{position:fixed;z-index:50}.citation-ref-anchor{background:transparent;border:0;border-radius:5px;color:inherit;cursor:pointer;display:inline;font:inherit;margin:0 -2px;padding:1px 3px;text-decoration:underline;text-decoration-color:#a3a3a3;text-decoration-style:dotted;text-decoration-thickness:1px;text-underline-offset:3px;transition:background-color .15s ease,text-decoration-color .15s ease}.citation-ref-anchor:hover{background-color:#f5f5f5;text-decoration-color:#525252}.citation-ref-anchor--loading{cursor:default;opacity:.6;text-decoration-color:#d4d4d4}.citation-ref-anchor--unresolved{text-decoration-color:#f59e0b}.citation-ref-anchor--unresolved:hover{background-color:#fffbeb}.citation-ref-icon{display:inline-block;font-size:.85em;margin-right:.25em;vertical-align:-.08em}
 </style>

package/dist/runtime/embed/components/chat-embed-inner.vue

@@ -1,6 +1,7 @@
 <script setup>
 import { useChatAuth } from "#chat-auth";
 import { useBreakpoints } from "@vueuse/core";
+import { useCitationPanel } from "../../citations/composables/citation-panel";
 import { exportConversationToMarkdown } from "../../conversations/export";
 import { CHAT_MOBILE_BREAKPOINT } from "../../shared/breakpoints";
 import ChatMobileFilePreview from "./mobile/chat-mobile-file-preview.vue";

package/dist/runtime/server/utils/auth-token.js

@@ -1,15 +1,40 @@
 import { getCookie } from "h3";
 import { useRuntimeConfig } from "nitropack/runtime";
+import { parseAllowedEmailDomains } from "./domain-allow.js";
+import { logger } from "./logger.js";
 const DEFAULT_FIRST_PARTY_JWT_COOKIE_NAME = "tela-jwt";
 function resolveFirstPartyJwtCookieName(event) {
   const config = useRuntimeConfig(event);
   return config.public?.telaAuth?.jwtCookieName || DEFAULT_FIRST_PARTY_JWT_COOKIE_NAME;
 }
+function resolveHostAuthTokenCookieName(event) {
+  const config = useRuntimeConfig(event);
+  return config.chatNuxt?.authTokenCookie || void 0;
+}
+function hasEmailDomainRestrictions(event) {
+  const config = useRuntimeConfig(event);
+  return parseAllowedEmailDomains(config.auth?.allowedEmailDomains).length > 0;
+}
 export function resolveAuthToken(event) {
   const auth = event.context.auth;
   if (auth?.token) {
     return auth.token;
   }
+  const hostCookieName = resolveHostAuthTokenCookieName(event);
+  if (hostCookieName) {
+    if (hasEmailDomainRestrictions(event)) {
+      logger.warn(
+        { cookie: hostCookieName },
+        "authTokenCookie ignored: auth.allowedEmailDomains is set and the host cookie carries no user context for domain validation"
+      );
+      return void 0;
+    }
+    const token2 = getCookie(event, hostCookieName);
+    if (token2 && auth) {
+      auth.token = token2;
+    }
+    return token2 || void 0;
+  }
   if (!auth?.user || !auth.workspace) {
     return void 0;
   }

package/dist/runtime/types/chat-auth.d.ts

@@ -1,3 +1,5 @@
+// Keep these types in sync with ../auth/define.ts — the exported ChatAuthBridge
+// there is the same contract host apps implement via defineChatAuth().
 declare module '#chat-auth' {
     type ChatAuthUser = {
         id: string

package/package.json

@@ -1,12 +1,16 @@
 {
   "name": "@meistrari/chat-nuxt",
-  "version": "3.12.1",
+  "version": "3.13.0-rc.1",
   "type": "module",
   "exports": {
     ".": {
       "types": "./dist/types.d.mts",
       "import": "./dist/module.mjs"
     },
+    "./auth": {
+      "types": "./dist/runtime/auth/define.d.ts",
+      "import": "./dist/runtime/auth/define.js"
+    },
     "./components/MeistrariChatEmbed": {
       "types": "./dist/runtime/embed/components/meistrari-chat-embed.vue.d.ts",
       "import": "./dist/runtime/embed/components/meistrari-chat-embed.vue"