@lenne.tech/nuxt-extensions 1.16.0 → 1.18.0

package/dist/module.d.mts

@@ -3,7 +3,7 @@ import { LtExtensionsModuleOptions } from '../dist/runtime/types/index.js';
 export * from '../dist/runtime/types/index.js';
 
 declare const name = "@lenne.tech/nuxt-extensions";
-declare const version = "1.16.0";
+declare const version = "1.18.0";
 declare const configKey = "ltExtensions";
 declare const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 declare const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "configKey": "ltExtensions",
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.16.0",
+  "version": "1.18.0",
   "builder": {
     "@nuxt/module-builder": "1.0.3",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -2,7 +2,7 @@ import { defineNuxtModule, createResolver, tryResolveModule, addImports, addComp
 import { pathToFileURL } from 'node:url';
 
 const name = "@lenne.tech/nuxt-extensions";
-const version = "1.16.0";
+const version = "1.18.0";
 const configKey = "ltExtensions";
 const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/runtime/composables/auth/use-lt-auth.js

@@ -61,7 +61,8 @@ export function useLtAuth() {
   const features = useState("lt-auth-features", () => ({}));
   const featuresFetched = useState("lt-auth-features-fetched", () => false);
   function setUser(userData, mode = "cookie") {
-    const newState = { user: userData, authMode: mode };
+    const normalised = userData ? { ...userData, image: userData.image ?? void 0 } : null;
+    const newState = { user: normalised, authMode: mode };
     if (import.meta.client || userData) {
       authState.value = newState;
     }

package/dist/runtime/composables/use-lt-error-translation.js

@@ -59,6 +59,10 @@ export function useLtErrorTranslation() {
       return errorOrMessage;
     }
     if (errorOrMessage instanceof Error) {
+      const body = errorOrMessage.data;
+      if (typeof body?.message === "string" && body.message) {
+        return body.message;
+      }
       return errorOrMessage.message;
     }
     if (typeof errorOrMessage === "object" && errorOrMessage !== null) {

package/dist/runtime/lib/auth-client.d.ts

@@ -329,6 +329,99 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
         listen: (signal: Omit<string, "$sessionSignal"> | "$sessionSignal", listener: (value: boolean, oldValue?: boolean | undefined) => void) => void;
         atoms: Record<string, import("better-auth/client").WritableAtom<any>>;
     };
+    /**
+     * Read the current session (`GET /get-session`).
+     *
+     * Carries no credential, so it is a bare passthrough.
+     */
+    getSession: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
+        disableCookieCache?: unknown;
+        disableRefresh?: unknown;
+    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
+        query?: {
+            disableCookieCache?: unknown;
+            disableRefresh?: unknown;
+        } | undefined;
+        fetchOptions?: FetchOptions | undefined;
+    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
+        user: import("better-auth").StripEmptyObjects<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            email: string;
+            emailVerified: boolean;
+            name: string;
+            image?: string | null | undefined;
+        }>;
+        session: import("better-auth").StripEmptyObjects<{
+            id: string;
+            createdAt: Date;
+            updatedAt: Date;
+            userId: string;
+            expiresAt: Date;
+            token: string;
+            ipAddress?: string | null | undefined;
+            userAgent?: string | null | undefined;
+        }>;
+    } | null, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+    /**
+     * Send (or re-send) an email-verification mail (`POST /send-verification-email`).
+     *
+     * A BARE passthrough, and it must stay one. `callbackURL` is the value Better Auth
+     * puts into the mail, and it MUST reach the server exactly as the caller wrote it:
+     * Better Auth resolves a relative value against the API origin, so `/auth/verify-email`
+     * lands on `api.<host>/auth/verify-email`, where the route does not exist. The mail
+     * still goes out, and the user follows a link to a 404 — the same silent failure
+     * `redirectTo` produces on the reset path.
+     *
+     * So do not normalise it here, do not supply a default, and do not resolve it against
+     * the client's `baseURL`. A library that quietly repairs the value hides the mistake
+     * until the next caller makes it somewhere we cannot see. Fixing it belongs to the
+     * caller (the lt starters use `appUrl()`, which throws rather than return something
+     * relative).
+     */
+    sendVerificationEmail: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
+        email: string;
+        callbackURL?: string | undefined;
+    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
+        email: string;
+        callbackURL?: string | undefined;
+    } & {
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
+        status: boolean;
+    }, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
+    /**
+     * Verify an email address from a token (`POST /verify-email`).
+     *
+     * Carries no credential, so it is a bare passthrough. Note what the endpoint does with
+     * the query, because it decides the shape of the answer: WITH a `callbackURL` it
+     * answers `302` to that URL (carrying neither token nor status), WITHOUT one it answers
+     * `{ status: true }` as JSON. Callers that want the result rather than a redirect must
+     * therefore omit `callbackURL` here — which is not the same parameter as the one
+     * `sendVerificationEmail` puts into the mail, and confusing the two is easy.
+     */
+    verifyEmail: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
+        token: string;
+        callbackURL?: string | undefined;
+    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
+        query: {
+            token: string;
+            callbackURL?: string | undefined;
+        };
+        fetchOptions?: FetchOptions | undefined;
+    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<NonNullable<void | {
+        status: boolean;
+    }>, {
+        code?: string | undefined;
+        message?: string | undefined;
+    }, FetchOptions["throw"] extends true ? true : false>>;
     requestPasswordReset: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
         email: string;
         redirectTo?: string | undefined;
@@ -519,91 +612,6 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
          * @see https://www.better-auth.com/docs/plugins/passkey
          */
         passkey: any;
-        social: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-            provider: (string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat";
-            callbackURL?: string | undefined;
-            newUserCallbackURL?: string | undefined;
-            errorCallbackURL?: string | undefined;
-            disableRedirect?: boolean | undefined;
-            idToken?: {
-                token: string;
-                nonce?: string | undefined;
-                accessToken?: string | undefined;
-                refreshToken?: string | undefined;
-                expiresAt?: number | undefined;
-                user?: {
-                    name?: {
-                        firstName?: string | undefined;
-                        lastName?: string | undefined;
-                    } | undefined;
-                    email?: string | undefined;
-                } | undefined;
-            } | undefined;
-            scopes?: string[] | undefined;
-            requestSignUp?: boolean | undefined;
-            loginHint?: string | undefined;
-            additionalParams?: Record<string, string> | undefined;
-            additionalData?: Record<string, any> | undefined;
-        }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<Omit<{
-            provider: (string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat";
-            callbackURL?: string | undefined;
-            newUserCallbackURL?: string | undefined;
-            errorCallbackURL?: string | undefined;
-            disableRedirect?: boolean | undefined;
-            idToken?: {
-                token: string;
-                nonce?: string | undefined;
-                accessToken?: string | undefined;
-                refreshToken?: string | undefined;
-                expiresAt?: number | undefined;
-                user?: {
-                    name?: {
-                        firstName?: string | undefined;
-                        lastName?: string | undefined;
-                    } | undefined;
-                    email?: string | undefined;
-                } | undefined;
-            } | undefined;
-            scopes?: string[] | undefined;
-            requestSignUp?: boolean | undefined;
-            loginHint?: string | undefined;
-            additionalParams?: Record<string, string> | undefined;
-            additionalData?: Record<string, any> | undefined;
-        } & {
-            fetchOptions?: FetchOptions | undefined;
-        }, "provider"> & {
-            provider: string | (string & {});
-            fetchOptions?: FetchOptions | undefined;
-        }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-            redirect: boolean;
-            url: string;
-        } | (Omit<{
-            redirect: boolean;
-            token: string;
-            url: undefined;
-            user: {
-                id: string;
-                createdAt: Date;
-                updatedAt: Date;
-                email: string;
-                emailVerified: boolean;
-                name: string;
-                image?: string | null | undefined | undefined;
-            };
-        }, "user"> & {
-            user: import("better-auth").StripEmptyObjects<{
-                id: string;
-                createdAt: Date;
-                updatedAt: Date;
-                email: string;
-                emailVerified: boolean;
-                name: string;
-                image?: string | null | undefined;
-            }>;
-        }), {
-            code?: string | undefined;
-            message?: string | undefined;
-        }, FetchOptions["throw"] extends true ? true : false>>;
     };
     signOut: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
         callbackURL?: string | undefined;
@@ -728,570 +736,33 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
             };
         }>;
     };
-    twoFactor: any;
-    verifyEmail: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
-        token: string;
-        callbackURL?: string | undefined;
-    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        query: {
-            token: string;
-            callbackURL?: string | undefined;
-        };
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<NonNullable<void | {
-        status: boolean;
-    }>, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    sendVerificationEmail: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        email: string;
-        callbackURL?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        email: string;
-        callbackURL?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    changeEmail: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        newEmail: string;
-        callbackURL?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        newEmail: string;
-        callbackURL?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    updateSession: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<Partial<{}>> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<import("better-auth/client").InferSessionUpdateCtx<{
-        basePath: string;
-        baseURL: any;
-        fetchOptions: {
-            customFetchImpl: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-        };
-        plugins: any[];
-    }, FetchOptions>> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        session: {
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            userId: string;
-            expiresAt: Date;
-            token: string;
-            ipAddress?: string | null | undefined;
-            userAgent?: string | null | undefined;
-        };
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    updateUser: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<Partial<{}> & {
-        name?: string | undefined;
-        image?: string | undefined | null;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<import("better-auth/client").InferUserUpdateCtx<{
-        basePath: string;
-        baseURL: any;
-        fetchOptions: {
-            customFetchImpl: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-        };
-        plugins: any[];
-    }, FetchOptions>> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    deleteUser: (<FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        callbackURL?: string | undefined;
-        password?: string | undefined;
-        token?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        callbackURL?: string | undefined;
-        password?: string | undefined;
-        token?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        success: boolean;
-        message: string;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>) & {
-        callback: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
-            token: string;
-            callbackURL?: string | undefined;
-        }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-            query: {
-                token: string;
-                callbackURL?: string | undefined;
-            };
-            fetchOptions?: FetchOptions | undefined;
-        }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-            success: boolean;
-            message: string;
-        }, {
-            code?: string | undefined;
-            message?: string | undefined;
-        }, FetchOptions["throw"] extends true ? true : false>>;
-    };
-    listSessions: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: Record<string, any> | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<import("better-auth").Prettify<{
-        id: string;
-        createdAt: Date;
-        updatedAt: Date;
-        userId: string;
-        expiresAt: Date;
-        token: string;
-        ipAddress?: string | null | undefined | undefined;
-        userAgent?: string | null | undefined | undefined;
-    }>[], {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    revokeSession: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        token: string;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        token: string;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    revokeSessions: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: Record<string, any> | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    revokeOtherSessions: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: Record<string, any> | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    linkSocial: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        provider: unknown;
-        callbackURL?: string | undefined;
-        idToken?: {
-            token: string;
-            nonce?: string | undefined;
-            accessToken?: string | undefined;
-            refreshToken?: string | undefined;
-        } | undefined;
-        requestSignUp?: boolean | undefined;
-        scopes?: string[] | undefined;
-        errorCallbackURL?: string | undefined;
-        disableRedirect?: boolean | undefined;
-        loginHint?: string | undefined;
-        additionalParams?: Record<string, string> | undefined;
-        additionalData?: Record<string, any> | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        provider: unknown;
-        callbackURL?: string | undefined;
-        idToken?: {
-            token: string;
-            nonce?: string | undefined;
-            accessToken?: string | undefined;
-            refreshToken?: string | undefined;
-        } | undefined;
-        requestSignUp?: boolean | undefined;
-        scopes?: string[] | undefined;
-        errorCallbackURL?: string | undefined;
-        disableRedirect?: boolean | undefined;
-        loginHint?: string | undefined;
-        additionalParams?: Record<string, string> | undefined;
-        additionalData?: Record<string, any> | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        url: string;
-        redirect: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    listAccounts: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: Record<string, any> | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        scopes: string[];
-        id: string;
-        createdAt: Date;
-        updatedAt: Date;
-        userId: string;
-        providerId: string;
-        issuer: string;
-        accountId: string;
-    }[], {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    unlinkAccount: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        accountId: string;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        accountId: string;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        status: boolean;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    refreshToken: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        accountId: string;
-        userId?: string | undefined;
-    } | {
-        useAccountCookie: true;
-        userId?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        accountId: string;
-        userId?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }> | import("better-auth").Prettify<{
-        useAccountCookie: true;
-        userId?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        accessToken: string | undefined;
-        refreshToken: string;
-        accessTokenExpiresAt: Date | undefined;
-        refreshTokenExpiresAt: Date | null | undefined;
-        scope: string | null | undefined;
-        idToken: string | null | undefined;
-        providerId: string;
-        accountId: string;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    getAccessToken: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-        accountId: string;
-        userId?: string | undefined;
-    } | {
-        useAccountCookie: true;
-        userId?: string | undefined;
-    }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        accountId: string;
-        userId?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }> | import("better-auth").Prettify<{
-        useAccountCookie: true;
-        userId?: string | undefined;
-    } & {
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        accessToken: string;
-        accessTokenExpiresAt: Date | undefined;
-        scopes: string[];
-        idToken: string | undefined;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    accountInfo: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
-        accountId: string;
-        userId?: string | undefined;
-    } | {
-        useAccountCookie: true;
-        userId?: string | undefined;
-    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<{
-        query: {
-            accountId: string;
-            userId?: string | undefined;
-        } | {
-            useAccountCookie: true;
-            userId?: string | undefined;
-        };
-        fetchOptions?: FetchOptions | undefined;
-    }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        account: {
-            id: string;
-            providerId: string;
-            issuer: string;
-            accountId: string;
-        };
-        user: import("better-auth").OAuth2UserInfo;
-        data: object;
-    }, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    getSession: <FetchOptions extends import("better-auth").ClientFetchOption<never, Partial<{
-        disableCookieCache?: unknown;
-        disableRefresh?: unknown;
-    }> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0?: import("better-auth").Prettify<{
-        query?: {
-            disableCookieCache?: unknown;
-            disableRefresh?: unknown;
-        } | undefined;
-        fetchOptions?: FetchOptions | undefined;
-    }> | undefined, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-        user: import("better-auth").StripEmptyObjects<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            email: string;
-            emailVerified: boolean;
-            name: string;
-            image?: string | null | undefined;
-        }>;
-        session: import("better-auth").StripEmptyObjects<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            userId: string;
-            expiresAt: Date;
-            token: string;
-            ipAddress?: string | null | undefined;
-            userAgent?: string | null | undefined;
-        }>;
-    } | null, {
-        code?: string | undefined;
-        message?: string | undefined;
-    }, FetchOptions["throw"] extends true ? true : false>>;
-    hydrateSession: (session: {
-        user: import("better-auth").StripEmptyObjects<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            email: string;
-            emailVerified: boolean;
-            name: string;
-            image?: string | null | undefined;
-        }>;
-        session: import("better-auth").StripEmptyObjects<{
-            id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            userId: string;
-            expiresAt: Date;
-            token: string;
-            ipAddress?: string | null | undefined;
-            userAgent?: string | null | undefined;
-        }>;
-    } | null) => void;
-    $ERROR_CODES: {
-        USER_NOT_FOUND: {
-            readonly code: "USER_NOT_FOUND";
-            message: string;
-        };
-        FAILED_TO_CREATE_USER: {
-            readonly code: "FAILED_TO_CREATE_USER";
-            message: string;
-        };
-        FAILED_TO_CREATE_SESSION: {
-            readonly code: "FAILED_TO_CREATE_SESSION";
-            message: string;
-        };
-        FAILED_TO_UPDATE_USER: {
-            readonly code: "FAILED_TO_UPDATE_USER";
-            message: string;
-        };
-        FAILED_TO_GET_SESSION: {
-            readonly code: "FAILED_TO_GET_SESSION";
-            message: string;
-        };
-        INVALID_PASSWORD: {
-            readonly code: "INVALID_PASSWORD";
-            message: string;
-        };
-        INVALID_EMAIL: {
-            readonly code: "INVALID_EMAIL";
-            message: string;
-        };
-        INVALID_EMAIL_OR_PASSWORD: {
-            readonly code: "INVALID_EMAIL_OR_PASSWORD";
-            message: string;
-        };
-        INVALID_USER: {
-            readonly code: "INVALID_USER";
-            message: string;
-        };
-        SOCIAL_ACCOUNT_ALREADY_LINKED: {
-            readonly code: "SOCIAL_ACCOUNT_ALREADY_LINKED";
-            message: string;
-        };
-        PROVIDER_NOT_FOUND: {
-            readonly code: "PROVIDER_NOT_FOUND";
-            message: string;
-        };
-        INVALID_TOKEN: {
-            readonly code: "INVALID_TOKEN";
-            message: string;
-        };
-        TOKEN_EXPIRED: {
-            readonly code: "TOKEN_EXPIRED";
-            message: string;
-        };
-        ID_TOKEN_NOT_SUPPORTED: {
-            readonly code: "ID_TOKEN_NOT_SUPPORTED";
-            message: string;
-        };
-        FAILED_TO_GET_USER_INFO: {
-            readonly code: "FAILED_TO_GET_USER_INFO";
-            message: string;
-        };
-        USER_EMAIL_NOT_FOUND: {
-            readonly code: "USER_EMAIL_NOT_FOUND";
-            message: string;
-        };
-        EMAIL_NOT_VERIFIED: {
-            readonly code: "EMAIL_NOT_VERIFIED";
-            message: string;
-        };
-        PASSWORD_TOO_SHORT: {
-            readonly code: "PASSWORD_TOO_SHORT";
-            message: string;
-        };
-        PASSWORD_TOO_LONG: {
-            readonly code: "PASSWORD_TOO_LONG";
-            message: string;
-        };
-        USER_ALREADY_EXISTS: {
-            readonly code: "USER_ALREADY_EXISTS";
-            message: string;
-        };
-        USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL: {
-            readonly code: "USER_ALREADY_EXISTS_USE_ANOTHER_EMAIL";
-            message: string;
-        };
-        EMAIL_CAN_NOT_BE_UPDATED: {
-            readonly code: "EMAIL_CAN_NOT_BE_UPDATED";
-            message: string;
-        };
-        CHANGE_EMAIL_DISABLED: {
-            readonly code: "CHANGE_EMAIL_DISABLED";
-            message: string;
-        };
-        CREDENTIAL_ACCOUNT_NOT_FOUND: {
-            readonly code: "CREDENTIAL_ACCOUNT_NOT_FOUND";
-            message: string;
-        };
-        ACCOUNT_NOT_FOUND: {
-            readonly code: "ACCOUNT_NOT_FOUND";
-            message: string;
-        };
-        SESSION_EXPIRED: {
-            readonly code: "SESSION_EXPIRED";
-            message: string;
-        };
-        FAILED_TO_UNLINK_LAST_ACCOUNT: {
-            readonly code: "FAILED_TO_UNLINK_LAST_ACCOUNT";
-            message: string;
-        };
-        USER_ALREADY_HAS_PASSWORD: {
-            readonly code: "USER_ALREADY_HAS_PASSWORD";
-            message: string;
-        };
-        CROSS_SITE_NAVIGATION_LOGIN_BLOCKED: {
-            readonly code: "CROSS_SITE_NAVIGATION_LOGIN_BLOCKED";
-            message: string;
-        };
-        VERIFICATION_EMAIL_NOT_ENABLED: {
-            readonly code: "VERIFICATION_EMAIL_NOT_ENABLED";
-            message: string;
-        };
-        EMAIL_ALREADY_VERIFIED: {
-            readonly code: "EMAIL_ALREADY_VERIFIED";
-            message: string;
-        };
-        EMAIL_MISMATCH: {
-            readonly code: "EMAIL_MISMATCH";
-            message: string;
-        };
-        SESSION_NOT_FRESH: {
-            readonly code: "SESSION_NOT_FRESH";
-            message: string;
-        };
-        LINKED_ACCOUNT_ALREADY_EXISTS: {
-            readonly code: "LINKED_ACCOUNT_ALREADY_EXISTS";
-            message: string;
-        };
-        INVALID_ORIGIN: {
-            readonly code: "INVALID_ORIGIN";
-            message: string;
-        };
-        INVALID_CALLBACK_URL: {
-            readonly code: "INVALID_CALLBACK_URL";
-            message: string;
-        };
-        INVALID_REDIRECT_URL: {
-            readonly code: "INVALID_REDIRECT_URL";
-            message: string;
-        };
-        INVALID_ERROR_CALLBACK_URL: {
-            readonly code: "INVALID_ERROR_CALLBACK_URL";
-            message: string;
-        };
-        INVALID_NEW_USER_CALLBACK_URL: {
-            readonly code: "INVALID_NEW_USER_CALLBACK_URL";
-            message: string;
-        };
-        MISSING_OR_NULL_ORIGIN: {
-            readonly code: "MISSING_OR_NULL_ORIGIN";
-            message: string;
-        };
-        CALLBACK_URL_REQUIRED: {
-            readonly code: "CALLBACK_URL_REQUIRED";
-            message: string;
-        };
-        FAILED_TO_CREATE_VERIFICATION: {
-            readonly code: "FAILED_TO_CREATE_VERIFICATION";
-            message: string;
-        };
-        FIELD_NOT_ALLOWED: {
-            readonly code: "FIELD_NOT_ALLOWED";
-            message: string;
-        };
-        ASYNC_VALIDATION_NOT_SUPPORTED: {
-            readonly code: "ASYNC_VALIDATION_NOT_SUPPORTED";
-            message: string;
-        };
-        VALIDATION_ERROR: {
-            readonly code: "VALIDATION_ERROR";
-            message: string;
-        };
-        MISSING_FIELD: {
-            readonly code: "MISSING_FIELD";
-            message: string;
-        };
-        METHOD_NOT_ALLOWED_DEFER_SESSION_REQUIRED: {
-            readonly code: "METHOD_NOT_ALLOWED_DEFER_SESSION_REQUIRED";
-            message: string;
-        };
-        BODY_MUST_BE_AN_OBJECT: {
-            readonly code: "BODY_MUST_BE_AN_OBJECT";
-            message: string;
-        };
-        PASSWORD_ALREADY_SET: {
-            readonly code: "PASSWORD_ALREADY_SET";
-            message: string;
-        };
+    twoFactor: {
+        /**
+         * Disable 2FA (password is hashed before sending)
+         */
+        disable: <T extends {
+            password: string;
+        }>(params: T, options?: any) => Promise<any>;
+        /**
+         * Enable 2FA (password is hashed before sending)
+         */
+        enable: <T extends {
+            password: string;
+        }>(params: T, options?: any) => Promise<any>;
+        /**
+         * Generate backup codes (password is hashed before sending)
+         */
+        generateBackupCodes: <T extends {
+            password: string;
+        }>(params: T, options?: any) => Promise<any>;
+        /**
+         * Verify TOTP code (pass through to base client)
+         */
+        verifyTotp: any;
+        /**
+         * Verify backup code (pass through to base client)
+         */
+        verifyBackupCode: any;
     };
 };
 export type LtAuthClient = ReturnType<typeof createLtAuthClient>;

package/dist/runtime/lib/auth-client.js

@@ -79,9 +79,6 @@ export function createLtAuthClient(config = {}) {
     plugins
   });
   return {
-    // Spread all base client properties and methods
-    ...baseClient,
-    // Explicitly pass through methods not captured by spread operator
     useSession: baseClient.useSession,
     passkey: baseClient.passkey,
     /**
@@ -108,6 +105,40 @@ export function createLtAuthClient(config = {}) {
     $Infer: baseClient.$Infer,
     $fetch: baseClient.$fetch,
     $store: baseClient.$store,
+    /**
+     * Read the current session (`GET /get-session`).
+     *
+     * Carries no credential, so it is a bare passthrough.
+     */
+    getSession: baseClient.getSession,
+    /**
+     * Send (or re-send) an email-verification mail (`POST /send-verification-email`).
+     *
+     * A BARE passthrough, and it must stay one. `callbackURL` is the value Better Auth
+     * puts into the mail, and it MUST reach the server exactly as the caller wrote it:
+     * Better Auth resolves a relative value against the API origin, so `/auth/verify-email`
+     * lands on `api.<host>/auth/verify-email`, where the route does not exist. The mail
+     * still goes out, and the user follows a link to a 404 — the same silent failure
+     * `redirectTo` produces on the reset path.
+     *
+     * So do not normalise it here, do not supply a default, and do not resolve it against
+     * the client's `baseURL`. A library that quietly repairs the value hides the mistake
+     * until the next caller makes it somewhere we cannot see. Fixing it belongs to the
+     * caller (the lt starters use `appUrl()`, which throws rather than return something
+     * relative).
+     */
+    sendVerificationEmail: baseClient.sendVerificationEmail,
+    /**
+     * Verify an email address from a token (`POST /verify-email`).
+     *
+     * Carries no credential, so it is a bare passthrough. Note what the endpoint does with
+     * the query, because it decides the shape of the answer: WITH a `callbackURL` it
+     * answers `302` to that URL (carrying neither token nor status), WITHOUT one it answers
+     * `{ status: true }` as JSON. Callers that want the result rather than a redirect must
+     * therefore omit `callbackURL` here — which is not the same parameter as the one
+     * `sendVerificationEmail` puts into the mail, and confusing the two is easy.
+     */
+    verifyEmail: baseClient.verifyEmail,
     // Deliberately a bare passthrough: it takes an email address, never a password, so
     // there is nothing to hash — and passing it through untouched is what keeps
     // `redirectTo` intact (see the note above `resetPassword`).
@@ -138,9 +169,14 @@ export function createLtAuthClient(config = {}) {
       }
       return baseClient.resetPassword({ ...params, newPassword: hashedPassword }, options);
     },
-    // Override signIn to hash password (keep passkey method from plugin)
+    // Override signIn to hash password (keep passkey method from plugin).
+    //
+    // No `...baseClient.signIn` here, for the reason given at the top of this object: the
+    // sub-objects are proxies too. `Object.keys(baseClient.signIn)` is `[]`, so the spread
+    // copied nothing while the type declared everything — `signIn.social` type-checked and
+    // was `undefined` when called. 1.17.0 removed the top-level spread and left these three,
+    // which is how the same defect survived its own fix.
     signIn: {
-      ...baseClient.signIn,
       /**
        * Sign in with email and password (password is hashed before sending)
        */
@@ -156,9 +192,8 @@ export function createLtAuthClient(config = {}) {
     },
     // Explicitly pass through signOut (not captured by spread operator)
     signOut: baseClient.signOut,
-    // Override signUp to hash password
+    // Override signUp to hash password. No spread — see `signIn` above.
     signUp: {
-      ...baseClient.signUp,
       /**
        * Sign up with email and password (password is hashed before sending)
        */
@@ -168,8 +203,12 @@ export function createLtAuthClient(config = {}) {
       }
     },
     // Override twoFactor to hash passwords (provided by twoFactorClient plugin)
+    // No spread — see `signIn` above. This is the sub-object where it mattered most:
+    // `getTotpUri`, `sendOtp` and `verifyOtp` were declared by the type and `undefined` at
+    // runtime, and `getTotpUri` is what a project reaches for to render the TOTP QR code.
+    // They are not added here because none has a caller yet; each listed method is a promise
+    // this package then keeps across versions. Ask, and it gets a line.
     twoFactor: {
-      ...baseClient.twoFactor,
       /**
        * Disable 2FA (password is hashed before sending)
        */

package/dist/runtime/types/auth.d.ts

@@ -10,6 +10,10 @@ export interface LtUser {
     email: string;
     emailVerified?: boolean;
     id: string;
+    /**
+     * Stored as `string | undefined`, never `null` — see {@link LtUserInput}, which is what
+     * `setUser` accepts. Reading code therefore has one empty case to handle, not two.
+     */
     image?: string;
     name?: string;
     /** Single-role shape (Better-Auth admin plugin). See also {@link LtUser.roles}. */
@@ -30,6 +34,24 @@ export interface LtUser {
     roles?: string[];
     twoFactorEnabled?: boolean;
 }
+/**
+ * What {@link UseLtAuthReturn.setUser} accepts: an {@link LtUser} whose `image` may also be
+ * `null`.
+ *
+ * Better Auth's session user declares `image?: string | null | undefined`
+ * (`@better-auth/core`), so handing `getSession().data.user` straight to `setUser` did not
+ * type-check — the two sides mean the same thing by "no picture" and write it differently.
+ * Every consumer combining them wrote the same normalising line, and this package's own call
+ * sites hid it behind `as LtUser`, which is why it went unnoticed until 1.17.0 exposed
+ * `getSession()` and gave that path a real type.
+ *
+ * `setUser` normalises `null` to `undefined` on the way in, so the stored user and every
+ * reader keep the single empty case. Widening `LtUser.image` itself would have done the
+ * opposite: pushed a second empty value onto everyone who only READS it.
+ */
+export type LtUserInput = Omit<LtUser, 'image'> & {
+    image?: null | string;
+};
 /**
  * Authentication mode for Cookie/JWT dual-mode authentication
  * - 'cookie': Primary mode using HttpOnly session cookies (more secure)
@@ -251,7 +273,14 @@ export interface UseLtAuthReturn {
         newPassword: string;
         token: string;
     }>(params: NoStrayCredential<T, 'newPassword'>, options?: unknown) => Promise<unknown>;
-    setUser: (userData: LtUser | null, mode?: LtAuthMode) => void;
+    /**
+     * Store the authenticated user.
+     *
+     * Accepts {@link LtUserInput}, so `getSession().data.user` can be handed over unchanged —
+     * Better Auth writes "no picture" as `image: null`, which this normalises to `undefined`
+     * before storing. Readers of {@link LtUser} keep a single empty case.
+     */
+    setUser: (userData: LtUserInput | null, mode?: LtAuthMode) => void;
     signIn: {
         email: <T extends {
             email: string;

package/dist/runtime/types/error.d.ts

@@ -31,7 +31,32 @@ export interface LtErrorTranslationModuleOptions {
  * Return type for useLtErrorTranslation composable
  */
 export interface UseLtErrorTranslationReturn {
-    /** Translate an error message or code to user-friendly message */
+    /**
+     * Translate an error message or code to a user-friendly message.
+     *
+     * ALWAYS returns a usable string, which has two consequences worth knowing before you
+     * write the call.
+     *
+     * **`translateError(x) || 'Fallback'` never reaches the fallback.** When the message
+     * carries no `#CODE:` marker, the original message is returned unchanged — non-empty,
+     * therefore truthy. Only an error with no message at all can produce `''`. The `||`
+     * reads like a safety net, catches nothing, and hides that the untranslated English text
+     * is what the user actually sees. Six pages in one starter had it before anyone noticed.
+     * If you want a fallback, decide on {@link LtParsedError.code} being `null`.
+     *
+     * **Branch on the code, not on the message.** Backends give one message per situation
+     * but not one situation per status: Better Auth answers `POST /reset-password` with five
+     * different errors under the same `400`. Only the code separates them, and only codes
+     * the backend has mapped arrive with a `#LTNS_` marker at all — anything unmapped falls
+     * through as raw English, by design rather than by omission.
+     *
+     * **A raw `$fetch` error can be passed straight in.** ofetch's `FetchError` keeps the
+     * transport line in `message` (`[POST] "/iam/reset-password": 400 Bad Request`) and the
+     * parsed response body in `data`; extraction reads `data.message` first, so the
+     * backend's own message is what gets translated. Unwrapping it at the call site
+     * (`err.data?.message ?? err`) is therefore no longer necessary — it stays harmless, but
+     * a helper built for it can go.
+     */
     translateError: (errorOrMessage: unknown) => string;
     /** Parse a backend error to extract code and messages */
     parseError: (errorOrMessage: unknown) => LtParsedError;

package/dist/runtime/types/index.d.ts

@@ -1,4 +1,4 @@
-export type { LtAuthClientConfig, LtAuthMode, LtAuthResponse, LtAuthState, LtPasskeyAuthResult, LtPasskeyRegisterResult, LtUser, UseLtAuthReturn } from './auth.js';
+export type { LtAuthClientConfig, LtAuthMode, LtAuthResponse, LtAuthState, LtPasskeyAuthResult, LtPasskeyRegisterResult, LtUser, LtUserInput, UseLtAuthReturn } from './auth.js';
 export type { LtFileInfo, LtUploadItem, LtUploadOptions, LtUploadProgress, LtUploadStatus, UseLtFileReturn, UseLtTusUploadReturn } from './upload.js';
 export type { LtAiModuleOptions, LtAuthCookieNamesOptions, LtAuthModuleOptions, LtErrorTranslationModuleOptions, LtExtensionsModuleOptions, LtExtensionsPublicRuntimeConfig, LtFormLabelAssociationOptions, LtI18nModuleOptions, LtPreHydrationInputOptions, LtSystemSetupModuleOptions, LtTusModuleOptions, } from './module.js';
 export type { LtErrorTranslationResponse, LtParsedError, UseLtErrorTranslationReturn } from './error.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.16.0",
+  "version": "1.18.0",
   "description": "Reusable Nuxt 4 composables, components, and Better-Auth integration for lenne.tech projects",
   "repository": {
     "type": "git",
@@ -51,9 +51,9 @@
     "prepack": "node scripts/sync-module-version.mjs && nuxt-module-build build",
     "c": "pnpm run check",
     "check": "node scripts/check.mjs",
-    "check:raw": "pnpm install --frozen-lockfile && pnpm audit && pnpm run format:check && pnpm run lint && pnpm run version:check && pnpm run dev:prepare && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
-    "check:fix": "pnpm install && pnpm audit --fix && pnpm run format && pnpm run lint:fix && pnpm run version:sync && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
-    "check:naf": "pnpm install && pnpm run format && pnpm run lint:fix && pnpm run version:sync && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
+    "check:raw": "pnpm install --frozen-lockfile && pnpm audit && pnpm peers check && pnpm run format:check && pnpm run lint && pnpm run version:check && pnpm run dev:prepare && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
+    "check:fix": "pnpm install && pnpm audit --fix && pnpm peers check && pnpm run format && pnpm run lint:fix && pnpm run version:sync && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
+    "check:naf": "pnpm install && pnpm peers check && pnpm run format && pnpm run lint:fix && pnpm run version:sync && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
     "cf": "pnpm run check:fix",
     "cnaf": "pnpm run check:naf",
     "dev": "pnpm dev:prepare && nuxt dev playground",