@bootstrapware/chat

Embeddable private messaging for small production SaaS: 1:1 and groups (max 20), read/unread, plain text with light markup, attachments.

Local / demo is free. BYO is $9.99 / month (you store messages and files). Hosted is $19.99 / month (Bootstrapware stores them). Bootstrapware does not authenticate end users. Wire the real session user.id. Never invent it.

Optional corner launcher (default off). Browser notifications stay off until the end user clicks Notify in the widget; permission is requested only on that click.

pnpm add @bootstrapware/chat

Peer dependencies: react and react-dom (>= 18).

Local / demo

import { Chat, createLocalAdapter } from "@bootstrapware/chat";
import "@bootstrapware/chat/styles.css";

<Chat
  user={{ id: session.user.id, name: session.user.name, avatarUrl: session.user.image }}
  people={workspaceMembers.map((m) => ({ id: m.id, name: m.name, avatarUrl: m.image }))}
  adapter={createLocalAdapter({ storageKey: "demo-chat" })}
/>

people is display and picker only. Identity stays user.id.

Hosted

Publishable keys may appear in the browser. Secret keys must stay server-side. If you have no publishable key, stop and mint one in the dashboard. Never mint keys via MCP.

<Chat
  appId="cha_..."
  publishableKey={process.env.NEXT_PUBLIC_BSW_CHAT_PUBLISHABLE_KEY}
  user={{ id: session.user.id, name: session.user.name }}
  people={workspaceMembers}
/>

Optional apiBaseUrl defaults to https://chat.bootstrapware.co.

BYO ($9.99): pass a ChatAdapter. Message bodies and file bytes stay on your backend. See the packaged AGENTS.md.

Security

• Do not put bsw_live_sec_ or bsw_test_sec_ in client code.
• user.id is a trust boundary. Prefer origins and requireAuthorToken in production Hosted.
• Never send message bodies or file bytes through MCP. MCP configures apps only.
• Hosted content is plain text plus allowed file types. You moderate it.

Docs

• Product: https://bootstrapware.co/chat
• Demo: https://bootstrapware.co/chat/demo
• Quickstart: https://bootstrapware.co/chat/docs/quickstart
• Agent rules (AGENTS.md): https://bootstrapware.co/chat/docs/agents
• Identity / authorToken: https://bootstrapware.co/chat/docs/identity

For coding agents, copy the packaged AGENTS.md into your repo rules, or point the agent at the docs URL above.

License

MIT