@lenne.tech/nuxt-extensions 1.17.0 → 1.18.0

package/dist/module.d.mts

@@ -3,7 +3,7 @@ import { LtExtensionsModuleOptions } from '../dist/runtime/types/index.js';
 export * from '../dist/runtime/types/index.js';
 
 declare const name = "@lenne.tech/nuxt-extensions";
-declare const version = "1.17.0";
+declare const version = "1.18.0";
 declare const configKey = "ltExtensions";
 declare const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 declare const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "configKey": "ltExtensions",
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.17.0",
+  "version": "1.18.0",
   "builder": {
     "@nuxt/module-builder": "1.0.3",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -2,7 +2,7 @@ import { defineNuxtModule, createResolver, tryResolveModule, addImports, addComp
 import { pathToFileURL } from 'node:url';
 
 const name = "@lenne.tech/nuxt-extensions";
-const version = "1.17.0";
+const version = "1.18.0";
 const configKey = "ltExtensions";
 const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/runtime/composables/auth/use-lt-auth.js

@@ -61,7 +61,8 @@ export function useLtAuth() {
   const features = useState("lt-auth-features", () => ({}));
   const featuresFetched = useState("lt-auth-features-fetched", () => false);
   function setUser(userData, mode = "cookie") {
-    const newState = { user: userData, authMode: mode };
+    const normalised = userData ? { ...userData, image: userData.image ?? void 0 } : null;
+    const newState = { user: normalised, authMode: mode };
     if (import.meta.client || userData) {
       authState.value = newState;
     }

package/dist/runtime/lib/auth-client.d.ts

@@ -612,91 +612,6 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
          * @see https://www.better-auth.com/docs/plugins/passkey
          */
         passkey: any;
-        social: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
-            provider: (string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat";
-            callbackURL?: string | undefined;
-            newUserCallbackURL?: string | undefined;
-            errorCallbackURL?: string | undefined;
-            disableRedirect?: boolean | undefined;
-            idToken?: {
-                token: string;
-                nonce?: string | undefined;
-                accessToken?: string | undefined;
-                refreshToken?: string | undefined;
-                expiresAt?: number | undefined;
-                user?: {
-                    name?: {
-                        firstName?: string | undefined;
-                        lastName?: string | undefined;
-                    } | undefined;
-                    email?: string | undefined;
-                } | undefined;
-            } | undefined;
-            scopes?: string[] | undefined;
-            requestSignUp?: boolean | undefined;
-            loginHint?: string | undefined;
-            additionalParams?: Record<string, string> | undefined;
-            additionalData?: Record<string, any> | undefined;
-        }> & Record<string, any>, Partial<Record<string, any>> & Record<string, any>, Record<string, string | undefined> | undefined>>(data_0: import("better-auth").Prettify<Omit<{
-            provider: (string & {}) | "linear" | "huggingface" | "github" | "apple" | "atlassian" | "cognito" | "discord" | "facebook" | "figma" | "microsoft" | "google" | "slack" | "spotify" | "twitch" | "twitter" | "dropbox" | "kick" | "linkedin" | "gitlab" | "tiktok" | "reddit" | "roblox" | "salesforce" | "vk" | "zoom" | "notion" | "kakao" | "naver" | "line" | "paybin" | "paypal" | "polar" | "railway" | "vercel" | "wechat";
-            callbackURL?: string | undefined;
-            newUserCallbackURL?: string | undefined;
-            errorCallbackURL?: string | undefined;
-            disableRedirect?: boolean | undefined;
-            idToken?: {
-                token: string;
-                nonce?: string | undefined;
-                accessToken?: string | undefined;
-                refreshToken?: string | undefined;
-                expiresAt?: number | undefined;
-                user?: {
-                    name?: {
-                        firstName?: string | undefined;
-                        lastName?: string | undefined;
-                    } | undefined;
-                    email?: string | undefined;
-                } | undefined;
-            } | undefined;
-            scopes?: string[] | undefined;
-            requestSignUp?: boolean | undefined;
-            loginHint?: string | undefined;
-            additionalParams?: Record<string, string> | undefined;
-            additionalData?: Record<string, any> | undefined;
-        } & {
-            fetchOptions?: FetchOptions | undefined;
-        }, "provider"> & {
-            provider: string | (string & {});
-            fetchOptions?: FetchOptions | undefined;
-        }>, data_1?: FetchOptions | undefined) => Promise<import("better-auth/client").BetterFetchResponse<{
-            redirect: boolean;
-            url: string;
-        } | (Omit<{
-            redirect: boolean;
-            token: string;
-            url: undefined;
-            user: {
-                id: string;
-                createdAt: Date;
-                updatedAt: Date;
-                email: string;
-                emailVerified: boolean;
-                name: string;
-                image?: string | null | undefined | undefined;
-            };
-        }, "user"> & {
-            user: import("better-auth").StripEmptyObjects<{
-                id: string;
-                createdAt: Date;
-                updatedAt: Date;
-                email: string;
-                emailVerified: boolean;
-                name: string;
-                image?: string | null | undefined;
-            }>;
-        }), {
-            code?: string | undefined;
-            message?: string | undefined;
-        }, FetchOptions["throw"] extends true ? true : false>>;
     };
     signOut: <FetchOptions extends import("better-auth").ClientFetchOption<Partial<{
         callbackURL?: string | undefined;
@@ -821,6 +736,33 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
             };
         }>;
     };
-    twoFactor: any;
+    twoFactor: {
+        /**
+         * Disable 2FA (password is hashed before sending)
+         */
+        disable: <T extends {
+            password: string;
+        }>(params: T, options?: any) => Promise<any>;
+        /**
+         * Enable 2FA (password is hashed before sending)
+         */
+        enable: <T extends {
+            password: string;
+        }>(params: T, options?: any) => Promise<any>;
+        /**
+         * Generate backup codes (password is hashed before sending)
+         */
+        generateBackupCodes: <T extends {
+            password: string;
+        }>(params: T, options?: any) => Promise<any>;
+        /**
+         * Verify TOTP code (pass through to base client)
+         */
+        verifyTotp: any;
+        /**
+         * Verify backup code (pass through to base client)
+         */
+        verifyBackupCode: any;
+    };
 };
 export type LtAuthClient = ReturnType<typeof createLtAuthClient>;

package/dist/runtime/lib/auth-client.js

@@ -169,9 +169,14 @@ export function createLtAuthClient(config = {}) {
       }
       return baseClient.resetPassword({ ...params, newPassword: hashedPassword }, options);
     },
-    // Override signIn to hash password (keep passkey method from plugin)
+    // Override signIn to hash password (keep passkey method from plugin).
+    //
+    // No `...baseClient.signIn` here, for the reason given at the top of this object: the
+    // sub-objects are proxies too. `Object.keys(baseClient.signIn)` is `[]`, so the spread
+    // copied nothing while the type declared everything — `signIn.social` type-checked and
+    // was `undefined` when called. 1.17.0 removed the top-level spread and left these three,
+    // which is how the same defect survived its own fix.
     signIn: {
-      ...baseClient.signIn,
       /**
        * Sign in with email and password (password is hashed before sending)
        */
@@ -187,9 +192,8 @@ export function createLtAuthClient(config = {}) {
     },
     // Explicitly pass through signOut (not captured by spread operator)
     signOut: baseClient.signOut,
-    // Override signUp to hash password
+    // Override signUp to hash password. No spread — see `signIn` above.
     signUp: {
-      ...baseClient.signUp,
       /**
        * Sign up with email and password (password is hashed before sending)
        */
@@ -199,8 +203,12 @@ export function createLtAuthClient(config = {}) {
       }
     },
     // Override twoFactor to hash passwords (provided by twoFactorClient plugin)
+    // No spread — see `signIn` above. This is the sub-object where it mattered most:
+    // `getTotpUri`, `sendOtp` and `verifyOtp` were declared by the type and `undefined` at
+    // runtime, and `getTotpUri` is what a project reaches for to render the TOTP QR code.
+    // They are not added here because none has a caller yet; each listed method is a promise
+    // this package then keeps across versions. Ask, and it gets a line.
     twoFactor: {
-      ...baseClient.twoFactor,
       /**
        * Disable 2FA (password is hashed before sending)
        */

package/dist/runtime/types/auth.d.ts

@@ -10,6 +10,10 @@ export interface LtUser {
     email: string;
     emailVerified?: boolean;
     id: string;
+    /**
+     * Stored as `string | undefined`, never `null` — see {@link LtUserInput}, which is what
+     * `setUser` accepts. Reading code therefore has one empty case to handle, not two.
+     */
     image?: string;
     name?: string;
     /** Single-role shape (Better-Auth admin plugin). See also {@link LtUser.roles}. */
@@ -30,6 +34,24 @@ export interface LtUser {
     roles?: string[];
     twoFactorEnabled?: boolean;
 }
+/**
+ * What {@link UseLtAuthReturn.setUser} accepts: an {@link LtUser} whose `image` may also be
+ * `null`.
+ *
+ * Better Auth's session user declares `image?: string | null | undefined`
+ * (`@better-auth/core`), so handing `getSession().data.user` straight to `setUser` did not
+ * type-check — the two sides mean the same thing by "no picture" and write it differently.
+ * Every consumer combining them wrote the same normalising line, and this package's own call
+ * sites hid it behind `as LtUser`, which is why it went unnoticed until 1.17.0 exposed
+ * `getSession()` and gave that path a real type.
+ *
+ * `setUser` normalises `null` to `undefined` on the way in, so the stored user and every
+ * reader keep the single empty case. Widening `LtUser.image` itself would have done the
+ * opposite: pushed a second empty value onto everyone who only READS it.
+ */
+export type LtUserInput = Omit<LtUser, 'image'> & {
+    image?: null | string;
+};
 /**
  * Authentication mode for Cookie/JWT dual-mode authentication
  * - 'cookie': Primary mode using HttpOnly session cookies (more secure)
@@ -251,7 +273,14 @@ export interface UseLtAuthReturn {
         newPassword: string;
         token: string;
     }>(params: NoStrayCredential<T, 'newPassword'>, options?: unknown) => Promise<unknown>;
-    setUser: (userData: LtUser | null, mode?: LtAuthMode) => void;
+    /**
+     * Store the authenticated user.
+     *
+     * Accepts {@link LtUserInput}, so `getSession().data.user` can be handed over unchanged —
+     * Better Auth writes "no picture" as `image: null`, which this normalises to `undefined`
+     * before storing. Readers of {@link LtUser} keep a single empty case.
+     */
+    setUser: (userData: LtUserInput | null, mode?: LtAuthMode) => void;
     signIn: {
         email: <T extends {
             email: string;

package/dist/runtime/types/index.d.ts

@@ -1,4 +1,4 @@
-export type { LtAuthClientConfig, LtAuthMode, LtAuthResponse, LtAuthState, LtPasskeyAuthResult, LtPasskeyRegisterResult, LtUser, UseLtAuthReturn } from './auth.js';
+export type { LtAuthClientConfig, LtAuthMode, LtAuthResponse, LtAuthState, LtPasskeyAuthResult, LtPasskeyRegisterResult, LtUser, LtUserInput, UseLtAuthReturn } from './auth.js';
 export type { LtFileInfo, LtUploadItem, LtUploadOptions, LtUploadProgress, LtUploadStatus, UseLtFileReturn, UseLtTusUploadReturn } from './upload.js';
 export type { LtAiModuleOptions, LtAuthCookieNamesOptions, LtAuthModuleOptions, LtErrorTranslationModuleOptions, LtExtensionsModuleOptions, LtExtensionsPublicRuntimeConfig, LtFormLabelAssociationOptions, LtI18nModuleOptions, LtPreHydrationInputOptions, LtSystemSetupModuleOptions, LtTusModuleOptions, } from './module.js';
 export type { LtErrorTranslationResponse, LtParsedError, UseLtErrorTranslationReturn } from './error.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.17.0",
+  "version": "1.18.0",
   "description": "Reusable Nuxt 4 composables, components, and Better-Auth integration for lenne.tech projects",
   "repository": {
     "type": "git",