@wervt/nuxt 0.3.12 → 0.3.14

package/dist/module.d.ts

@@ -63,6 +63,8 @@ export interface FeedbackOptions {
   lang?: 'de' | 'en';
   /** `none` hides the floating button; open the form with `useWervtFeedback().open()`. */
   position?: 'bottom-right' | 'bottom-left' | 'none';
+  /** With `position: 'none'`: the corner the form opens in, next to your own button. Defaults to `right`. */
+  side?: 'left' | 'right';
   label?: string;
   /** Accent color (any CSS color). */
   color?: string;

package/dist/module.js

@@ -3,6 +3,7 @@ import { PROCESS_ENV_TYPES } from "./env-types.js";
 import { dependencyNames, ogImageDefaults, ogImageWarning } from "./og-image.js";
 import { iconDefaults, iconSources, iconWarning } from "./icons.js";
 import { CONTENT_DATABASE, contentDependency, nuxtBundleManifest } from "./content.js";
+import { runtimeServesStatic } from "./static-files.js";
 import { findRouteTools } from "./route-tools.js";
 import { localFiles, previewManifest } from "./preview.js";
 import { LOCALES } from "./runtime/shared/i18n.js";
@@ -73,7 +74,7 @@ var module_default = defineNuxtModule({
 		const usesContent = () => !nuxt.options.dev && hasNuxtModule("@nuxt/content", nuxt);
 		nuxt.hook("nitro:config", (config) => {
 			const options = config;
-			if (!nuxt.options.dev) options.serveStatic = false;
+			if (!nuxt.options.dev && runtimeServesStatic(nitro.preset)) options.serveStatic = false;
 			options.externals = {
 				...options.externals,
 				inline: [

package/dist/runtime/server/cross-origin.d.ts

@@ -0,0 +1,2 @@
+/** Whether a changing request comes from a page on another origin. */
+export declare function isCrossOrigin(method: string, headers: Headers): boolean;

package/dist/runtime/server/cross-origin.js

@@ -0,0 +1,20 @@
+// src/runtime/server/cross-origin.ts
+const SAFE_METHODS = /* @__PURE__ */ new Set([
+	"GET",
+	"HEAD",
+	"OPTIONS"
+]);
+/** Whether a changing request comes from a page on another origin. */
+function isCrossOrigin(method, headers) {
+	if (SAFE_METHODS.has(method)) return false;
+	const site = headers.get("sec-fetch-site");
+	if (site) return site !== "same-origin" && site !== "none";
+	const origin = headers.get("origin");
+	if (!origin) return false;
+	try {
+		return new URL(origin).host !== headers.get("host");
+	} catch {
+		return true;
+	}
+}
+export { isCrossOrigin };

package/dist/runtime/server/index.d.ts

@@ -2,6 +2,7 @@ import { WervtRole, WervtUser } from "../shared/user.js";
 import { WervtInstance, wervtInstance } from "../shared/instance.js";
 import { EmailProps, RenderedEmail, renderEmail } from "../email/render.js";
 import { WervtAccess, WervtInvite, useWervtAccess } from "./access.js";
+import { isCrossOrigin } from "./cross-origin.js";
 import { useDb } from "./db.js";
 import { WorkloadIdentity, useWorkloadIdentity } from "./identity.js";
 import { createEvlogError, log, useLogger } from "./logger.js";
@@ -14,4 +15,4 @@ import { AccountMergedPayload, Task, TaskEvent, TaskResult, defineTask } from ".
 import { SafeResult, useSafeValidatedBody, useSafeValidatedParams, useSafeValidatedQuery, useValidatedBody, useValidatedParams, useValidatedQuery, vh } from "./validate.js";
 import { Tool, ToolRoute, defineTool, defineToolRoute } from "./tools.js";
 import { requireWervtRole, useWervtUser } from "./user.js";
-export { type AccountMergedPayload, type EmailProps, type McpTokenContext, type RenderedEmail, type SafeResult, type SendMailOptions, type ShapeOptions, type ShapeResponse, type ShapeRow, type Task, type TaskEvent, type TaskResult, type Tool, type ToolRoute, type WervtAccess, type WervtInstance, type WervtInvite, type WervtRole, type WervtUser, type WorkloadIdentity, createEvlogError, defineTask, defineTool, defineToolRoute, log, proxyShape, renderEmail, requireWervtRole, seedTable, sendMail, useDb, useLogger, useSafeValidatedBody, useSafeValidatedParams, useSafeValidatedQuery, useValidatedBody, useValidatedParams, useValidatedQuery, useWervtAccess, useWervtUser, useWorkloadIdentity, vh, wervtInstance };
+export { type AccountMergedPayload, type EmailProps, type McpTokenContext, type RenderedEmail, type SafeResult, type SendMailOptions, type ShapeOptions, type ShapeResponse, type ShapeRow, type Task, type TaskEvent, type TaskResult, type Tool, type ToolRoute, type WervtAccess, type WervtInstance, type WervtInvite, type WervtRole, type WervtUser, type WorkloadIdentity, createEvlogError, defineTask, defineTool, defineToolRoute, isCrossOrigin, log, proxyShape, renderEmail, requireWervtRole, seedTable, sendMail, useDb, useLogger, useSafeValidatedBody, useSafeValidatedParams, useSafeValidatedQuery, useValidatedBody, useValidatedParams, useValidatedQuery, useWervtAccess, useWervtUser, useWorkloadIdentity, vh, wervtInstance };

package/dist/runtime/server/index.js

@@ -1,6 +1,7 @@
 import { wervtInstance } from "../shared/instance.js";
 import { renderEmail } from "../email/render.js";
 import { useWervtAccess } from "./access.js";
+import { isCrossOrigin } from "./cross-origin.js";
 import { useDb } from "./db.js";
 import { useWorkloadIdentity } from "./identity.js";
 import { createEvlogError, log, useLogger } from "./logger.js";
@@ -11,4 +12,4 @@ import { defineTask } from "./tasks.js";
 import { useSafeValidatedBody, useSafeValidatedParams, useSafeValidatedQuery, useValidatedBody, useValidatedParams, useValidatedQuery, vh } from "./validate.js";
 import { defineTool, defineToolRoute } from "./tools.js";
 import { requireWervtRole, useWervtUser } from "./user.js";
-export { createEvlogError, defineTask, defineTool, defineToolRoute, log, proxyShape, renderEmail, requireWervtRole, seedTable, sendMail, useDb, useLogger, useSafeValidatedBody, useSafeValidatedParams, useSafeValidatedQuery, useValidatedBody, useValidatedParams, useValidatedQuery, useWervtAccess, useWervtUser, useWorkloadIdentity, vh, wervtInstance };
+export { createEvlogError, defineTask, defineTool, defineToolRoute, isCrossOrigin, log, proxyShape, renderEmail, requireWervtRole, seedTable, sendMail, useDb, useLogger, useSafeValidatedBody, useSafeValidatedParams, useSafeValidatedQuery, useValidatedBody, useValidatedParams, useValidatedQuery, useWervtAccess, useWervtUser, useWorkloadIdentity, vh, wervtInstance };

package/dist/runtime/server/user.js

@@ -15,7 +15,8 @@ function useWervtUser(event) {
 	const mcp = event.context[MCP_USER];
 	if (mcp) return mcp.role || header?.id !== mcp.id ? mcp : {
 		...mcp,
-		role: header.role
+		role: header.role,
+		...header.admin ? { admin: true } : {}
 	};
 	return header ?? devUser(getCookie(event, "wervt_dev_login") === "1");
 }

package/dist/static-files.js

@@ -0,0 +1,9 @@
+// src/static-files.ts
+/**
+* Whether the wervt runtime serves `public/` for a build with this Nitro preset. An app built for
+* a server of its own (studio on `node-server`) has nothing else in front of it, so Nitro has to.
+*/
+function runtimeServesStatic(preset) {
+	return preset?.replaceAll("_", "-") === "deno-server";
+}
+export { runtimeServesStatic };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wervt/nuxt",
-  "version": "0.3.12",
+  "version": "0.3.14",
   "description": "Nuxt module for apps hosted on wervt: database, live data, MCP and runtime setup.",
   "keywords": [
     "drizzle",
@@ -53,10 +53,10 @@
   "dependencies": {
     "@electric-sql/client": "^1.5.28",
     "@valibot/to-json-schema": "^1.8.0",
-    "@wervt/client": "^0.0.2",
-    "@wervt/core": "^0.0.2",
-    "@wervt/nitro": "^0.0.3",
-    "@wervt/platform": "^0.0.2",
+    "@wervt/client": "^0.0.3",
+    "@wervt/core": "^0.0.3",
+    "@wervt/nitro": "^0.0.5",
+    "@wervt/platform": "^0.0.4",
     "aws4fetch": "^1.0.20",
     "evlog": "^2.34.0",
     "h3-mcp": "0.2.0",