@lenne.tech/nuxt-extensions 1.16.0 → 1.17.0

package/dist/module.d.mts

@@ -3,7 +3,7 @@ import { LtExtensionsModuleOptions } from '../dist/runtime/types/index.js';
 export * from '../dist/runtime/types/index.js';
 
 declare const name = "@lenne.tech/nuxt-extensions";
-declare const version = "1.16.0";
+declare const version = "1.17.0";
 declare const configKey = "ltExtensions";
 declare const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 declare const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "configKey": "ltExtensions",
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.16.0",
+  "version": "1.17.0",
   "builder": {
     "@nuxt/module-builder": "1.0.3",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -2,7 +2,7 @@ import { defineNuxtModule, createResolver, tryResolveModule, addImports, addComp
 import { pathToFileURL } from 'node:url';
 
 const name = "@lenne.tech/nuxt-extensions";
-const version = "1.16.0";
+const version = "1.17.0";
 const configKey = "ltExtensions";
 const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/runtime/composables/use-lt-error-translation.js

@@ -59,6 +59,10 @@ export function useLtErrorTranslation() {
       return errorOrMessage;
     }
     if (errorOrMessage instanceof Error) {
+      const body = errorOrMessage.data;
+      if (typeof body?.message === "string" && body.message) {
+        return body.message;
+      }
       return errorOrMessage.message;
     }
     if (typeof errorOrMessage === "object" && errorOrMessage !== null) {

package/dist/runtime/lib/auth-client.d.ts

@@ -329,6 +329,99 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
         listen: (signal: Omit<string, "$sessionSignal"> | "$sessionSignal", listener: (value: boolean, oldValue?: boolean | undefined) => void) => void;
         atoms: Record<string, import("better-auth/client").WritableAtom<any>>;
     };
+    /**
+     * Read the current session (`GET /get-session`).
+     *
+     * Carries no credential, so it is a bare passthrough.
+     */
+    getSession: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
+        disableCookieCache?: unknown;
+        disableRefresh?: unknown;
+    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
+        query?: {
+            disableCookieCache?: unknown;
+            disableRefresh?: unknown;
+        } | undefined;
+        fetchOptions?: FetchOptions | undefined;
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
+        user: import("better-auth").StripEmptyObjects<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+        }>;
+        session: import("better-auth").StripEmptyObjects<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+        }>;
+    } | null, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+    /**
+     * Send (or re-send) an email-verification mail (`POST /send-verification-email`).
+     *
+     * A BARE passthrough, and it must stay one. `callbackURL` is the value Better Auth
+     * puts into the mail, and it MUST reach the server exactly as the caller wrote it:
+     * Better Auth resolves a relative value against the API origin, so `/auth/verify-email`
+     * lands on `api.<host>/auth/verify-email`, where the route does not exist. The mail
+     * still goes out, and the user follows a link to a 404 — the same silent failure
+     * `redirectTo` produces on the reset path.
+     *
+     * So do not normalise it here, do not supply a default, and do not resolve it against
+     * the client's `baseURL`. A library that quietly repairs the value hides the mistake
+     * until the next caller makes it somewhere we cannot see. Fixing it belongs to the
+     * caller (the lt starters use `appUrl()`, which throws rather than return something
+     * relative).
+     */
+    sendVerificationEmail: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        email: string;
+        callbackURL?: string | undefined;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
+        email: string;
+        callbackURL?: string | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
+        status: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+    /**
+     * Verify an email address from a token (`POST /verify-email`).
+     *
+     * Carries no credential, so it is a bare passthrough. Note what the endpoint does with
+     * the query, because it decides the shape of the answer: WITH a `callbackURL` it
+     * answers `302` to that URL (carrying neither token nor status), WITHOUT one it answers
+     * `{ status: true }` as JSON. Callers that want the result rather than a redirect must
+     * therefore omit `callbackURL` here — which is not the same parameter as the one
+     * `sendVerificationEmail` puts into the mail, and confusing the two is easy.
+     */
+    verifyEmail: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
+        token: string;
+        callbackURL?: string | undefined;
+    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
+        query: {
+            token: string;
+            callbackURL?: string | undefined;
+        };
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<NonNullable<void | {
+        status: boolean;
+    }>, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
     requestPasswordReset: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
         email: string;
         redirectTo?: string | undefined;
@@ -729,569 +822,5 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
         }>;
     };
     twoFactor: any;
-    verifyEmail: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
-        token: string;
-        callbackURL?: string | undefined;
-    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        query: {
-            token: string;
-            callbackURL?: string | undefined;
-        };
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<NonNullable<void | {
-        status: boolean;
-    }>, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    sendVerificationEmail: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        email: string;
-        callbackURL?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        email: string;
-        callbackURL?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    changeEmail: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        newEmail: string;
-        callbackURL?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        newEmail: string;
-        callbackURL?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    updateSession: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<Partial<{}>> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<import("better-auth/client").InferSessionUpdateCtx<{
-        basePath: string;
-        baseURL: any;
-        fetchOptions: {
-            customFetchImpl: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-        };
-        plugins: any[];
-    }, FetchOptions>> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        session: {
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            userId: string;
-            expiresAt: Date;
-            token: string;
-            ipAddress?: string | null | undefined;
-            userAgent?: string | null | undefined;
-        };
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    updateUser: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<Partial<{}> & {
-        name?: string | undefined;
-        image?: string | undefined | null;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<import("better-auth/client").InferUserUpdateCtx<{
-        basePath: string;
-        baseURL: any;
-        fetchOptions: {
-            customFetchImpl: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-        };
-        plugins: any[];
-    }, FetchOptions>> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    deleteUser: (<FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        callbackURL?: string | undefined;
-        password?: string | undefined;
-        token?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        callbackURL?: string | undefined;
-        password?: string | undefined;
-        token?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        success: boolean;
-        message: string;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>) & {
-        callback: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
-            token: string;
-            callbackURL?: string | undefined;
-        }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-            query: {
-                token: string;
-                callbackURL?: string | undefined;
-            };
-            fetchOptions?: FetchOptions | undefined;
-        }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-            success: boolean;
-            message: string;
-        }, {
-            code?: string | undefined;
-            message?: string | undefined;
-        }, FetchOptions["throw"] extends true ? true : false>>;
-    };
-    listSessions: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: Record<string, any> | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<import("better-auth").Prettify<{
-        id: string;
-        createdAt: Date;
-        updatedAt: Date;
-        userId: string;
-        expiresAt: Date;
-        token: string;
-        ipAddress?: string | null | undefined | undefined;
-        userAgent?: string | null | undefined | undefined;
-    }>[], {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    revokeSession: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        token: string;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        token: string;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    revokeSessions: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: Record<string, any> | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    revokeOtherSessions: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: Record<string, any> | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    linkSocial: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        provider: unknown;
-        callbackURL?: string | undefined;
-        idToken?: {
-            token: string;
-            nonce?: string | undefined;
-            accessToken?: string | undefined;
-            refreshToken?: string | undefined;
-        } | undefined;
-        requestSignUp?: boolean | undefined;
-        scopes?: string[] | undefined;
-        errorCallbackURL?: string | undefined;
-        disableRedirect?: boolean | undefined;
-        loginHint?: string | undefined;
-        additionalParams?: Record<string, string> | undefined;
-        additionalData?: Record<string, any> | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        provider: unknown;
-        callbackURL?: string | undefined;
-        idToken?: {
-            token: string;
-            nonce?: string | undefined;
-            accessToken?: string | undefined;
-            refreshToken?: string | undefined;
-        } | undefined;
-        requestSignUp?: boolean | undefined;
-        scopes?: string[] | undefined;
-        errorCallbackURL?: string | undefined;
-        disableRedirect?: boolean | undefined;
-        loginHint?: string | undefined;
-        additionalParams?: Record<string, string> | undefined;
-        additionalData?: Record<string, any> | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        url: string;
-        redirect: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    listAccounts: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: Record<string, any> | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        scopes: string[];
-        id: string;
-        createdAt: Date;
-        updatedAt: Date;
-        userId: string;
-        providerId: string;
-        issuer: string;
-        accountId: string;
-    }[], {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    unlinkAccount: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        accountId: string;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        accountId: string;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    refreshToken: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        accountId: string;
-        userId?: string | undefined;
-    } | {
-        useAccountCookie: true;
-        userId?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        accountId: string;
-        userId?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }> | import("better-auth").Prettify<{
-        useAccountCookie: true;
-        userId?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        accessToken: string | undefined;
-        refreshToken: string;
-        accessTokenExpiresAt: Date | undefined;
-        refreshTokenExpiresAt: Date | null | undefined;
-        scope: string | null | undefined;
-        idToken: string | null | undefined;
-        providerId: string;
-        accountId: string;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    getAccessToken: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        accountId: string;
-        userId?: string | undefined;
-    } | {
-        useAccountCookie: true;
-        userId?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        accountId: string;
-        userId?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }> | import("better-auth").Prettify<{
-        useAccountCookie: true;
-        userId?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        accessToken: string;
-        accessTokenExpiresAt: Date | undefined;
-        scopes: string[];
-        idToken: string | undefined;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    accountInfo: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
-        accountId: string;
-        userId?: string | undefined;
-    } | {
-        useAccountCookie: true;
-        userId?: string | undefined;
-    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        query: {
-            accountId: string;
-            userId?: string | undefined;
-        } | {
-            useAccountCookie: true;
-            userId?: string | undefined;
-        };
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        account: {
-            id: string;
-            providerId: string;
-            issuer: string;
-            accountId: string;
-        };
-        user: import("better-auth").OAuth2UserInfo;
-        data: object;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    getSession: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
-        disableCookieCache?: unknown;
-        disableRefresh?: unknown;
-    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: {
-            disableCookieCache?: unknown;
-            disableRefresh?: unknown;
-        } | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        user: import("better-auth").StripEmptyObjects<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            email: string;
-            emailVerified: boolean;
-            name: string;
-            image?: string | null | undefined;
-        }>;
-        session: import("better-auth").StripEmptyObjects<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            userId: string;
-            expiresAt: Date;
-            token: string;
-            ipAddress?: string | null | undefined;
-            userAgent?: string | null | undefined;
-        }>;
-    } | null, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    hydrateSession: (session: {
-        user: import("better-auth").StripEmptyObjects<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            email: string;
-            emailVerified: boolean;
-            name: string;
-            image?: string | null | undefined;
-        }>;
-        session: import("better-auth").StripEmptyObjects<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            userId: string;
-            expiresAt: Date;
-            token: string;
-            ipAddress?: string | null | undefined;
-            userAgent?: string | null | undefined;
-        }>;
-    } | null) => void;
-    $ERROR_CODES: {
-        USER_NOT_FOUND: {
-            readonly code: "USER_NOT_FOUND";
-            message: string;
-        };
-        FAILED_TO_CREATE_USER: {
-            readonly code: "FAILED_TO_CREATE_USER";
-            message: string;
-        };
-        FAILED_TO_CREATE_SESSION: {
-            readonly code: "FAILED_TO_CREATE_SESSION";
-            message: string;
-        };
-        FAILED_TO_UPDATE_USER: {
-            readonly code: "FAILED_TO_UPDATE_USER";
-            message: string;
-        };
-        FAILED_TO_GET_SESSION: {
-            readonly code: "FAILED_TO_GET_SESSION";
-            message: string;
-        };
-        INVALID_PASSWORD: {
-            readonly code: "INVALID_PASSWORD";
-            message: string;
-        };
-        INVALID_EMAIL: {
-            readonly code: "INVALID_EMAIL";
-            message: string;
-        };
-        INVALID_EMAIL_OR_PASSWORD: {
-            readonly code: "INVALID_EMAIL_OR_PASSWORD";
-            message: string;
-        };
-        INVALID_USER: {
-            readonly code: "INVALID_USER";
-            message: string;
-        };
-        SOCIAL_ACCOUNT_ALREADY_LINKED: {
-            readonly code: "SOCIAL_ACCOUNT_ALREADY_LINKED";
-            message: string;
-        };
-        PROVIDER_NOT_FOUND: {
-            readonly code: "PROVIDER_NOT_FOUND";
-            message: string;
-        };
-        INVALID_TOKEN: {
-            readonly code: "INVALID_TOKEN";
-            message: string;
-        };
-        TOKEN_EXPIRED: {
-            readonly code: "TOKEN_EXPIRED";
-            message: string;
-        };
-        ID_TOKEN_NOT_SUPPORTED: {
-            readonly code: "ID_TOKEN_NOT_SUPPORTED";
-            message: string;
-        };
-        FAILED_TO_GET_USER_INFO: {
-            readonly code: "FAILED_TO_GET_USER_INFO";
-            message: string;
-        };
-        USER_EMAIL_NOT_FOUND: {
-            readonly code: "USER_EMAIL_NOT_FOUND";
-            message: string;
-        };
-        EMAIL_NOT_VERIFIED: {
-            readonly code: "EMAIL_NOT_VERIFIED";
-            message: string;
-        };
-        PASSWORD_TOO_SHORT: {
-            readonly code: "PASSWORD_TOO_SHORT";
-            message: string;
-        };
-        PASSWORD_TOO_LONG: {
-            readonly code: "PASSWORD_TOO_LONG";
-            message: string;
-        };
-        USER_ALREADY_EXISTS: {
-            readonly code: "USER_ALREADY_EXISTS";
-            message: string;
-        };
-        USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL: {
-            readonly code: "USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL";
-            message: string;
-        };
-        EMAIL_CAN_NOT_BE_UPDATED: {
-            readonly code: "EMAIL_CAN_NOT_BE_UPDATED";
-            message: string;
-        };
-        CHANGE_EMAIL_DISABLED: {
-            readonly code: "CHANGE_EMAIL_DISABLED";
-            message: string;
-        };
-        CREDENTIAL_ACCOUNT_NOT_FOUND: {
-            readonly code: "CREDENTIAL_ACCOUNT_NOT_FOUND";
-            message: string;
-        };
-        ACCOUNT_NOT_FOUND: {
-            readonly code: "ACCOUNT_NOT_FOUND";
-            message: string;
-        };
-        SESSION_EXPIRED: {
-            readonly code: "SESSION_EXPIRED";
-            message: string;
-        };
-        FAILED_TO_UNLINK_LAST_ACCOUNT: {
-            readonly code: "FAILED_TO_UNLINK_LAST_ACCOUNT";
-            message: string;
-        };
-        USER_ALREADY_HAS_PASSWORD: {
-            readonly code: "USER_ALREADY_HAS_PASSWORD";
-            message: string;
-        };
-        CROSS_SITE_NAVIGATION_LOGIN_BLOCKED: {
-            readonly code: "CROSS_SITE_NAVIGATION_LOGIN_BLOCKED";
-            message: string;
-        };
-        VERIFICATION_EMAIL_NOT_ENABLED: {
-            readonly code: "VERIFICATION_EMAIL_NOT_ENABLED";
-            message: string;
-        };
-        EMAIL_ALREADY_VERIFIED: {
-            readonly code: "EMAIL_ALREADY_VERIFIED";
-            message: string;
-        };
-        EMAIL_MISMATCH: {
-            readonly code: "EMAIL_MISMATCH";
-            message: string;
-        };
-        SESSION_NOT_FRESH: {
-            readonly code: "SESSION_NOT_FRESH";
-            message: string;
-        };
-        LINKED_ACCOUNT_ALREADY_EXISTS: {
-            readonly code: "LINKED_ACCOUNT_ALREADY_EXISTS";
-            message: string;
-        };
-        INVALID_ORIGIN: {
-            readonly code: "INVALID_ORIGIN";
-            message: string;
-        };
-        INVALID_CALLBACK_URL: {
-            readonly code: "INVALID_CALLBACK_URL";
-            message: string;
-        };
-        INVALID_REDIRECT_URL: {
-            readonly code: "INVALID_REDIRECT_URL";
-            message: string;
-        };
-        INVALID_ERROR_CALLBACK_URL: {
-            readonly code: "INVALID_ERROR_CALLBACK_URL";
-            message: string;
-        };
-        INVALID_NEW_USER_CALLBACK_URL: {
-            readonly code: "INVALID_NEW_USER_CALLBACK_URL";
-            message: string;
-        };
-        MISSING_OR_NULL_ORIGIN: {
-            readonly code: "MISSING_OR_NULL_ORIGIN";
-            message: string;
-        };
-        CALLBACK_URL_REQUIRED: {
-            readonly code: "CALLBACK_URL_REQUIRED";
-            message: string;
-        };
-        FAILED_TO_CREATE_VERIFICATION: {
-            readonly code: "FAILED_TO_CREATE_VERIFICATION";
-            message: string;
-        };
-        FIELD_NOT_ALLOWED: {
-            readonly code: "FIELD_NOT_ALLOWED";
-            message: string;
-        };
-        ASYNC_VALIDATION_NOT_SUPPORTED: {
-            readonly code: "ASYNC_VALIDATION_NOT_SUPPORTED";
-            message: string;
-        };
-        VALIDATION_ERROR: {
-            readonly code: "VALIDATION_ERROR";
-            message: string;
-        };
-        MISSING_FIELD: {
-            readonly code: "MISSING_FIELD";
-            message: string;
-        };
-        METHOD_NOT_ALLOWED_DEFER_SESSION_REQUIRED: {
-            readonly code: "METHOD_NOT_ALLOWED_DEFER_SESSION_REQUIRED";
-            message: string;
-        };
-        BODY_MUST_BE_AN_OBJECT: {
-            readonly code: "BODY_MUST_BE_AN_OBJECT";
-            message: string;
-        };
-        PASSWORD_ALREADY_SET: {
-            readonly code: "PASSWORD_ALREADY_SET";
-            message: string;
-        };
-    };
 };
 export type LtAuthClient = ReturnType<typeof createLtAuthClient>;

package/dist/runtime/lib/auth-client.js

@@ -79,9 +79,6 @@ export function createLtAuthClient(config = {}) {
     plugins
   });
   return {
-    // Spread all base client properties and methods
-    ...baseClient,
-    // Explicitly pass through methods not captured by spread operator
     useSession: baseClient.useSession,
     passkey: baseClient.passkey,
     /**
@@ -108,6 +105,40 @@ export function createLtAuthClient(config = {}) {
     $Infer: baseClient.$Infer,
     $fetch: baseClient.$fetch,
     $store: baseClient.$store,
+    /**
+     * Read the current session (`GET /get-session`).
+     *
+     * Carries no credential, so it is a bare passthrough.
+     */
+    getSession: baseClient.getSession,
+    /**
+     * Send (or re-send) an email-verification mail (`POST /send-verification-email`).
+     *
+     * A BARE passthrough, and it must stay one. `callbackURL` is the value Better Auth
+     * puts into the mail, and it MUST reach the server exactly as the caller wrote it:
+     * Better Auth resolves a relative value against the API origin, so `/auth/verify-email`
+     * lands on `api.<host>/auth/verify-email`, where the route does not exist. The mail
+     * still goes out, and the user follows a link to a 404 — the same silent failure
+     * `redirectTo` produces on the reset path.
+     *
+     * So do not normalise it here, do not supply a default, and do not resolve it against
+     * the client's `baseURL`. A library that quietly repairs the value hides the mistake
+     * until the next caller makes it somewhere we cannot see. Fixing it belongs to the
+     * caller (the lt starters use `appUrl()`, which throws rather than return something
+     * relative).
+     */
+    sendVerificationEmail: baseClient.sendVerificationEmail,
+    /**
+     * Verify an email address from a token (`POST /verify-email`).
+     *
+     * Carries no credential, so it is a bare passthrough. Note what the endpoint does with
+     * the query, because it decides the shape of the answer: WITH a `callbackURL` it
+     * answers `302` to that URL (carrying neither token nor status), WITHOUT one it answers
+     * `{ status: true }` as JSON. Callers that want the result rather than a redirect must
+     * therefore omit `callbackURL` here — which is not the same parameter as the one
+     * `sendVerificationEmail` puts into the mail, and confusing the two is easy.
+     */
+    verifyEmail: baseClient.verifyEmail,
     // Deliberately a bare passthrough: it takes an email address, never a password, so
     // there is nothing to hash — and passing it through untouched is what keeps
     // `redirectTo` intact (see the note above `resetPassword`).

package/dist/runtime/types/error.d.ts

@@ -31,7 +31,32 @@ export interface LtErrorTranslationModuleOptions {
  * Return type for useLtErrorTranslation composable
  */
 export interface UseLtErrorTranslationReturn {
-    /** Translate an error message or code to user-friendly message */
+    /**
+     * Translate an error message or code to a user-friendly message.
+     *
+     * ALWAYS returns a usable string, which has two consequences worth knowing before you
+     * write the call.
+     *
+     * **`translateError(x) || 'Fallback'` never reaches the fallback.** When the message
+     * carries no `#CODE:` marker, the original message is returned unchanged — non-empty,
+     * therefore truthy. Only an error with no message at all can produce `''`. The `||`
+     * reads like a safety net, catches nothing, and hides that the untranslated English text
+     * is what the user actually sees. Six pages in one starter had it before anyone noticed.
+     * If you want a fallback, decide on {@link LtParsedError.code} being `null`.
+     *
+     * **Branch on the code, not on the message.** Backends give one message per situation
+     * but not one situation per status: Better Auth answers `POST /reset-password` with five
+     * different errors under the same `400`. Only the code separates them, and only codes
+     * the backend has mapped arrive with a `#LTNS_` marker at all — anything unmapped falls
+     * through as raw English, by design rather than by omission.
+     *
+     * **A raw `$fetch` error can be passed straight in.** ofetch's `FetchError` keeps the
+     * transport line in `message` (`[POST] "/iam/reset-password": 400 Bad Request`) and the
+     * parsed response body in `data`; extraction reads `data.message` first, so the
+     * backend's own message is what gets translated. Unwrapping it at the call site
+     * (`err.data?.message ?? err`) is therefore no longer necessary — it stays harmless, but
+     * a helper built for it can go.
+     */
     translateError: (errorOrMessage: unknown) => string;
     /** Parse a backend error to extract code and messages */
     parseError: (errorOrMessage: unknown) => LtParsedError;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.16.0",
+  "version": "1.17.0",
   "description": "Reusable Nuxt 4 composables, components, and Better-Auth integration for lenne.tech projects",
   "repository": {
     "type": "git",
@@ -51,9 +51,9 @@
     "prepack": "node scripts/sync-module-version.mjs && nuxt-module-build build",
     "c": "pnpm run check",
     "check": "node scripts/check.mjs",
-    "check:raw": "pnpm install --frozen-lockfile && pnpm audit && pnpm run format:check && pnpm run lint && pnpm run version:check && pnpm run dev:prepare && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
-    "check:fix": "pnpm install && pnpm audit --fix && pnpm run format && pnpm run lint:fix && pnpm run version:sync && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
-    "check:naf": "pnpm install && pnpm run format && pnpm run lint:fix && pnpm run version:sync && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
+    "check:raw": "pnpm install --frozen-lockfile && pnpm audit && pnpm peers check && pnpm run format:check && pnpm run lint && pnpm run version:check && pnpm run dev:prepare && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
+    "check:fix": "pnpm install && pnpm audit --fix && pnpm peers check && pnpm run format && pnpm run lint:fix && pnpm run version:sync && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
+    "check:naf": "pnpm install && pnpm peers check && pnpm run format && pnpm run lint:fix && pnpm run version:sync && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
     "cf": "pnpm run check:fix",
     "cnaf": "pnpm run check:naf",
     "dev": "pnpm dev:prepare && nuxt dev playground",