@shubh90/app-runtime 0.5.0 → 0.6.0

package/dist/chat/index.d.ts

@@ -1,5 +1,17 @@
 import type { Brand } from "./widget/app.js";
 export { CHAT_BASE_PATH } from "./paths.js";
+/**
+ * Whether the bubble belongs on this host: the app as people use it, not a
+ * draft of it. The pane itself is covered by not mounting when framed; this is
+ * for the same draft opened in a tab of its own, which the pane's toolbar does.
+ *
+ * A draft is a working copy (`wc-<12 hex>.miis.run`) or the instance an agent is
+ * editing (`<sandbox>.app.miis.run`). Anything else keeps the bubble, including
+ * localhost: guessing wrong should leave a live app with its chat, not take it
+ * away. Vercel names a branch preview two ways and only one is recognisable
+ * here, which is the acceptable side to be wrong on.
+ */
+export declare function chatBelongsOnHost(hostname: string): boolean;
 export declare function MiiChat({ enabled }: {
     readonly enabled: boolean;
 }): null;

package/dist/chat/index.js

@@ -19,11 +19,36 @@ import { CHAT_CSS } from "./widget/styles.js";
 // someone to talk to, not with every page of the app.
 const ChatApp = lazy(() => import("./widget/app.js").then((module) => ({ default: module.ChatApp })));
 export { CHAT_BASE_PATH } from "./paths.js";
+/**
+ * Whether the bubble belongs on this host: the app as people use it, not a
+ * draft of it. The pane itself is covered by not mounting when framed; this is
+ * for the same draft opened in a tab of its own, which the pane's toolbar does.
+ *
+ * A draft is a working copy (`wc-<12 hex>.miis.run`) or the instance an agent is
+ * editing (`<sandbox>.app.miis.run`). Anything else keeps the bubble, including
+ * localhost: guessing wrong should leave a live app with its chat, not take it
+ * away. Vercel names a branch preview two ways and only one is recognisable
+ * here, which is the acceptable side to be wrong on.
+ */
+export function chatBelongsOnHost(hostname) {
+    const host = hostname.toLowerCase();
+    const [label = ""] = host.split(".");
+    if (/^wc-[0-9a-f]{12}$/.test(label))
+        return false;
+    if (host.endsWith(".app.miis.run"))
+        return false;
+    // Qualified, because a bare <project>.vercel.app is a live alias.
+    if (host.includes("-git-") && host.endsWith(".vercel.app"))
+        return false;
+    return true;
+}
 export function MiiChat({ enabled }) {
     useEffect(() => {
         // Inside Plaza's App pane, Plaza's own chat is already beside the app.
         if (!enabled || window.self !== window.top)
             return;
+        if (!chatBelongsOnHost(window.location.hostname))
+            return;
         const host = document.createElement("div");
         host.setAttribute("data-mii-chat", "");
         document.body.appendChild(host);

package/dist/chat/origins.d.ts

@@ -0,0 +1,9 @@
+export declare const MII_CHAT_MEDIA_ORIGINS: readonly string[];
+/**
+ * The policy directives chat needs, ready to join into a CSP.
+ *
+ * Apps compose their own policy; this only says what chat adds to it. Pass the
+ * app's own sources for a directive and they are kept — `img-src` in particular
+ * usually already carries `data:` and `blob:` for the app's own pictures.
+ */
+export declare function miiChatCspSources(directive: "img-src" | "media-src" | "connect-src", own?: readonly string[]): string;

package/dist/chat/origins.js

@@ -0,0 +1,37 @@
+// The one place outside this app's own origin that chat touches, for apps that
+// set a Content-Security-Policy.
+//
+// Chat is otherwise same-origin by design: the widget talks to the app's own
+// server, which forwards to Plaza. Files are the exception. mii hands the
+// browser a presigned URL on its media bucket and the browser posts the
+// attachment there itself, and the pictures and video already in a thread are
+// served from the same place. An agent's photo is a redirect from the app's own
+// avatar route to that bucket, which is a connect check rather than an img one
+// because the widget fetches it and renders a blob.
+//
+// So an app with a policy needs the bucket named in three directives:
+//
+//   import { MII_CHAT_MEDIA_ORIGINS } from "@shubh90/app-runtime/chat/origins";
+//   const media = MII_CHAT_MEDIA_ORIGINS.join(" ");
+//   `img-src 'self' data: blob: ${media}`
+//   `media-src 'self' ${media}`
+//   `connect-src 'self' ${media}`
+//
+// It lives here, versioned with the package, because the bucket has moved twice
+// (miiplaza-media -> -2 -> -3, us-east-1 -> us-west-2) and each move would
+// otherwise be a hunt through every app's config for a string that only fails
+// in production, only on attachments, and only after a deploy.
+export const MII_CHAT_MEDIA_ORIGINS = [
+    "https://miiplaza-media-3.s3.us-west-2.amazonaws.com"
+];
+/**
+ * The policy directives chat needs, ready to join into a CSP.
+ *
+ * Apps compose their own policy; this only says what chat adds to it. Pass the
+ * app's own sources for a directive and they are kept — `img-src` in particular
+ * usually already carries `data:` and `blob:` for the app's own pictures.
+ */
+export function miiChatCspSources(directive, own = ["'self'"]) {
+    const sources = [...own, ...MII_CHAT_MEDIA_ORIGINS];
+    return `${directive} ${sources.join(" ")}`;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shubh90/app-runtime",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "The platform contract every mii org app depends on — sign-in, chat with the org's agents, and the config an app must not diverge from. A versioned package, not files copied into each repo.",
   "license": "UNLICENSED",
   "type": "module",