@nuxt-customer-portal/core 0.3.0

package/migrations/meta/_journal.json

@@ -0,0 +1,13 @@
+{
+  "version": "7",
+  "dialect": "postgresql",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "7",
+      "when": 1786258239994,
+      "tag": "0000_baseline",
+      "breakpoints": true
+    }
+  ]
+}

package/nuxt.config.ts

@@ -0,0 +1,55 @@
+import { fileURLToPath } from 'node:url'
+
+const envFlag = (value: string | undefined, fallback = true) => (value === undefined ? fallback : value === 'true')
+const registrationMode = ['open', 'invitation-only', 'disabled'].includes(process.env.PORTAL_REGISTRATION_MODE || '')
+  ? (process.env.PORTAL_REGISTRATION_MODE as 'open' | 'invitation-only' | 'disabled')
+  : 'open'
+
+export default defineNuxtConfig({
+  $meta: { name: 'nuxt-customer-portal-core' },
+  compatibilityDate: '2025-10-24',
+  modules: ['@nuxtjs/i18n', '@vueuse/nuxt'],
+  i18n: {
+    defaultLocale: 'en',
+    strategy: 'no_prefix',
+    locales: [
+      { code: 'en', file: 'en.json' },
+      { code: 'nl', file: 'nl.json' }
+    ]
+  },
+  runtimeConfig: {
+    portalEmail: {
+      templateStorage: 'assets:portal-core',
+      brandingSource: 'runtime',
+      brandName: process.env.PORTAL_EMAIL_BRAND_NAME || 'Nuxt Customer Portal',
+      brandTagline: process.env.PORTAL_EMAIL_BRAND_TAGLINE || 'Customer workspace',
+      brandLogo: process.env.PORTAL_EMAIL_BRAND_LOGO || '',
+      brandLogoLight: process.env.PORTAL_EMAIL_BRAND_LOGO_LIGHT || process.env.PORTAL_EMAIL_BRAND_LOGO || '',
+      brandLogoDark: process.env.PORTAL_EMAIL_BRAND_LOGO_DARK || process.env.PORTAL_EMAIL_BRAND_LOGO || '',
+      brandIconLight: process.env.PORTAL_EMAIL_BRAND_ICON_LIGHT || '',
+      brandIconDark: process.env.PORTAL_EMAIL_BRAND_ICON_DARK || '',
+      primaryColor: process.env.PORTAL_EMAIL_PRIMARY_COLOR || '#0ea5e9'
+    },
+    portalAuth: {
+      registrationMode,
+      githubEnabled: envFlag(process.env.PORTAL_GITHUB_ENABLED),
+      googleEnabled: envFlag(process.env.PORTAL_GOOGLE_ENABLED)
+    },
+    public: {
+      portalAuth: {
+        registrationMode,
+        githubEnabled: envFlag(process.env.PORTAL_GITHUB_ENABLED),
+        googleEnabled: envFlag(process.env.PORTAL_GOOGLE_ENABLED),
+        termsUrl: process.env.PORTAL_TERMS_URL || '/'
+      }
+    }
+  },
+  nitro: {
+    serverAssets: [
+      {
+        baseName: 'portal-core',
+        dir: fileURLToPath(new URL('./server/utils', import.meta.url))
+      }
+    ]
+  }
+})

package/package.json

@@ -0,0 +1,66 @@
+{
+  "name": "@nuxt-customer-portal/core",
+  "version": "0.3.0",
+  "license": "MIT",
+  "homepage": "https://nuxt-customer-portal.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ludulicious/nuxt-customer-portal.git"
+  },
+  "type": "module",
+  "main": "./nuxt.config.ts",
+  "files": [
+    "LICENSE",
+    "CHANGELOG.md",
+    "app",
+    "i18n",
+    "migrations",
+    "server",
+    "shared",
+    "nuxt.config.ts",
+    "portal.manifest.mjs",
+    "README.md"
+  ],
+  "exports": {
+    ".": "./nuxt.config.ts",
+    "./feature": "./shared/types/feature.ts",
+    "./server": "./server/portal.ts",
+    "./schema": "./server/db/schema/index.ts",
+    "./route-meta": "./server/utils/route-meta.ts",
+    "./portal-manifest": "./portal.manifest.mjs",
+    "./app/types": "./app/types/index.d.ts",
+    "./app/*": "./app/*.ts",
+    "./server/*": "./server/*.ts",
+    "./shared/*": "./shared/*.ts"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@internationalized/date": "^3.10.0",
+    "@nuxtjs/i18n": "^10.6.0",
+    "@pinia/nuxt": "^1.0.1",
+    "@standard-schema/spec": "^1.1.0",
+    "@types/pg": "8.15.5",
+    "@vueuse/core": "^14.4.0",
+    "@vueuse/nuxt": "^14.4.0",
+    "better-auth": "1.6.25",
+    "date-fns": "^4.4.0",
+    "drizzle-orm": "^0.45.2",
+    "h3": "^1.15.4",
+    "nanoid": "^5.1.6",
+    "pg": "^8.22.0",
+    "pinia": "^4.0.2",
+    "resend": "^6.18.1",
+    "zod": "^4.4.3",
+    "@nuxt/ui": "^4.10.0"
+  },
+  "peerDependencies": {
+    "nuxt": "^4.5.1",
+    "vue": "^3.5.0"
+  },
+  "devDependencies": {
+    "nuxt": "^4.5.1",
+    "vue": "^3.5.0"
+  }
+}

package/portal.manifest.mjs

@@ -0,0 +1,8 @@
+export default {
+  id: 'core',
+  version: '0.3.0',
+  source: '@nuxt-customer-portal/core',
+  dependsOn: [],
+  schema: './server/db/schema/index.ts',
+  migrations: './migrations'
+}

package/server/api/auth/[...].ts

@@ -0,0 +1,18 @@
+import { auth } from '@nuxt-customer-portal/core/server/utils/auth'
+import { toWebRequest } from 'h3'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['Authentication'],
+    operationId: 'generalAuthAllAll',
+    summary: 'Handle an authentication request',
+    description:
+      'Better Auth catch-all transport. Concrete authentication routes are documented separately from Better Auth’s generated OpenAPI contract.',
+    'x-scalar-ignore': true
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  // The auth.handler expects a standard Request object
+  return auth.handler(toWebRequest(event))
+})

package/server/api/auth/permissions.get.ts

@@ -0,0 +1,64 @@
+import { defineEventHandler, createError } from 'h3'
+import { statement } from '@nuxt-customer-portal/core/shared/permissions'
+import { auth } from '@nuxt-customer-portal/core/server/utils/auth'
+import { getUserPermissions } from '@nuxt-customer-portal/core/server/utils/permissions'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['General'],
+    operationId: 'generalAuthPermissionsGet',
+    summary: 'Get current user permissions',
+    description:
+      'Get current user permissions. Uses the current authenticated session and enforces the relevant portal permissions.'
+  }
+})
+
+export default defineEventHandler(async (event) => {
+  // Get authenticated user
+  const session = await auth.api.getSession({ headers: event.headers })
+  if (!session?.user) {
+    throw createError({ statusCode: 401, statusMessage: 'Unauthorized' })
+  }
+
+  type SessionUserWithRole = { role?: string }
+  const currentUser = session.user as SessionUserWithRole
+  const currentRole = currentUser.role || 'user'
+
+  // Check organization role for both "user" and "admin" roles if activeOrganizationId exists
+  // auth.api.getSession() returns { user, session } where session has activeOrganizationId
+  type SessionWithOrg = { session?: { activeOrganizationId?: string }; activeOrganizationId?: string }
+  const sessionWithOrg = session as SessionWithOrg
+  const activeOrganizationId = sessionWithOrg?.session?.activeOrganizationId || sessionWithOrg?.activeOrganizationId
+
+  // Get user permissions using the shared utility
+  const {
+    permissions: rolePermissions,
+    orgRole,
+    organization: activeOrganization
+  } = await getUserPermissions(session.user.id, currentRole, activeOrganizationId || undefined)
+
+  // Get all permissions for the user
+  const permissions: Record<string, boolean> = {}
+
+  // Check each subject and permission combination
+  for (const [subject, actions] of Object.entries(statement)) {
+    if (Array.isArray(actions)) {
+      // Get permissions for this subject from the role
+      const rolePermissionsForSubject = rolePermissions[subject] || []
+
+      for (const action of actions) {
+        // Check if the role has this permission
+        permissions[`${subject}.${action}`] =
+          Array.isArray(rolePermissionsForSubject) && rolePermissionsForSubject.includes(action)
+      }
+    }
+  }
+
+  return {
+    permissions,
+    role: currentRole,
+    organizationRole: orgRole || null,
+    activeOrganization: activeOrganization,
+    organizationType: activeOrganization?.organizationType ?? null
+  }
+})

package/server/api/notifications.ts

@@ -0,0 +1,294 @@
+import { sub } from 'date-fns'
+
+defineRouteMeta({
+  openAPI: {
+    tags: ['General'],
+    operationId: 'generalNotificationsAll',
+    summary: 'List sample notifications',
+    description:
+      'List sample notifications. Uses the current authenticated session and enforces the relevant portal permissions.'
+  }
+})
+
+const notifications = [
+  {
+    id: 1,
+    unread: true,
+    sender: {
+      name: 'Jordan Brown',
+      email: 'jordan.brown@example.com',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=2'
+      }
+    },
+    body: 'sent you a message',
+    date: sub(new Date(), { minutes: 7 }).toISOString()
+  },
+  {
+    id: 2,
+    sender: {
+      name: 'Lindsay Walton'
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { hours: 1 }).toISOString()
+  },
+  {
+    id: 3,
+    unread: true,
+    sender: {
+      name: 'Taylor Green',
+      email: 'taylor.green@example.com',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=3'
+      }
+    },
+    body: 'sent you a message',
+    date: sub(new Date(), { hours: 3 }).toISOString()
+  },
+  {
+    id: 4,
+    sender: {
+      name: 'Courtney Henry',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=4'
+      }
+    },
+    body: 'added you to a project',
+    date: sub(new Date(), { hours: 3 }).toISOString()
+  },
+  {
+    id: 5,
+    sender: {
+      name: 'Tom Cook',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=5'
+      }
+    },
+    body: 'abandonned cart',
+    date: sub(new Date(), { hours: 7 }).toISOString()
+  },
+  {
+    id: 6,
+    sender: {
+      name: 'Casey Thomas',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=6'
+      }
+    },
+    body: 'purchased your product',
+    date: sub(new Date(), { days: 1, hours: 3 }).toISOString()
+  },
+  {
+    id: 7,
+    unread: true,
+    sender: {
+      name: 'Kelly Wilson',
+      email: 'kelly.wilson@example.com',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=8'
+      }
+    },
+    body: 'sent you a message',
+    date: sub(new Date(), { days: 2 }).toISOString()
+  },
+  {
+    id: 8,
+    sender: {
+      name: 'Jamie Johnson',
+      email: 'jamie.johnson@example.com',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=9'
+      }
+    },
+    body: 'requested a refund',
+    date: sub(new Date(), { days: 5, hours: 4 }).toISOString()
+  },
+  {
+    id: 9,
+    unread: true,
+    sender: {
+      name: 'Morgan Anderson',
+      email: 'morgan.anderson@example.com'
+    },
+    body: 'sent you a message',
+    date: sub(new Date(), { days: 6 }).toISOString()
+  },
+  {
+    id: 10,
+    sender: {
+      name: 'Drew Moore'
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 6 }).toISOString()
+  },
+  {
+    id: 11,
+    sender: {
+      name: 'Riley Davis'
+    },
+    body: 'abandonned cart',
+    date: sub(new Date(), { days: 7 }).toISOString()
+  },
+  {
+    id: 12,
+    sender: {
+      name: 'Jordan Taylor'
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 9 }).toISOString()
+  },
+  {
+    id: 13,
+    sender: {
+      name: 'Kelly Wilson',
+      email: 'kelly.wilson@example.com',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=8'
+      }
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 10 }).toISOString()
+  },
+  {
+    id: 14,
+    sender: {
+      name: 'Jamie Johnson',
+      email: 'jamie.johnson@example.com',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=9'
+      }
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 11 }).toISOString()
+  },
+  {
+    id: 15,
+    sender: {
+      name: 'Morgan Anderson'
+    },
+    body: 'purchased your product',
+    date: sub(new Date(), { days: 12 }).toISOString()
+  },
+  {
+    id: 16,
+    sender: {
+      name: 'Drew Moore',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=16'
+      }
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 13 }).toISOString()
+  },
+  {
+    id: 17,
+    sender: {
+      name: 'Riley Davis'
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 14 }).toISOString()
+  },
+  {
+    id: 18,
+    sender: {
+      name: 'Jordan Taylor'
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 15 }).toISOString()
+  },
+  {
+    id: 19,
+    sender: {
+      name: 'Kelly Wilson',
+      email: 'kelly.wilson@example.com',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=8'
+      }
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 16 }).toISOString()
+  },
+  {
+    id: 20,
+    sender: {
+      name: 'Jamie Johnson',
+      email: 'jamie.johnson@example.com',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=9'
+      }
+    },
+    body: 'purchased your product',
+    date: sub(new Date(), { days: 17 }).toISOString()
+  },
+  {
+    id: 21,
+    sender: {
+      name: 'Morgan Anderson'
+    },
+    body: 'abandonned cart',
+    date: sub(new Date(), { days: 17 }).toISOString()
+  },
+  {
+    id: 22,
+    sender: {
+      name: 'Drew Moore'
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 18 }).toISOString()
+  },
+  {
+    id: 23,
+    sender: {
+      name: 'Riley Davis'
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 19 }).toISOString()
+  },
+  {
+    id: 24,
+    sender: {
+      name: 'Jordan Taylor',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=24'
+      }
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 20 }).toISOString()
+  },
+  {
+    id: 25,
+    sender: {
+      name: 'Kelly Wilson',
+      email: 'kelly.wilson@example.com',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=8'
+      }
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 20 }).toISOString()
+  },
+  {
+    id: 26,
+    sender: {
+      name: 'Jamie Johnson',
+      email: 'jamie.johnson@example.com',
+      avatar: {
+        src: 'https://i.pravatar.cc/128?u=9'
+      }
+    },
+    body: 'abandonned cart',
+    date: sub(new Date(), { days: 21 }).toISOString()
+  },
+  {
+    id: 27,
+    sender: {
+      name: 'Morgan Anderson'
+    },
+    body: 'subscribed to your email list',
+    date: sub(new Date(), { days: 22 }).toISOString()
+  }
+]
+
+export default eventHandler(async () => {
+  return notifications
+})

package/server/db/core-schema.ts

@@ -0,0 +1 @@
+export { organization, user } from './schema/auth-schema'