@lenne.tech/nuxt-extensions 1.18.2 → 1.18.4

package/CLAUDE.md

@@ -347,7 +347,7 @@ fields at `app:beforeMount` and restores them at `app:mounted`, dispatching a sy
    Handling" below).
 3. **Check existing composables** before creating new ones — this module may already provide what you need
 4. **Peer dependencies** (`better-auth`, `@better-auth/passkey`, `tus-js-client`) must be installed in the consuming project.
-   `better-auth` and `@better-auth/passkey` are pinned to **`>=1.7.1 <1.8.0`** — deliberately not a caret.
+   `better-auth` and `@better-auth/passkey` are pinned to **`>=1.7.7 <1.8.0`** — deliberately not a caret.
    **They move in lock-step with `@lenne.tech/nest-server`.** better-auth is one protocol with two ends;
    this module is the client end, nest-server the server end, and both declare the *same* narrow range.
    Raising it means raising it in **both** framework repos and pinning the new version in **both** starters,

package/README.md

@@ -29,8 +29,8 @@ Reusable Nuxt 4 composables, components, and Better-Auth integration for lenne.t
 |---|---|---|
 | Node | `>= 22` | |
 | Nuxt | `^4.0.0` | |
-| `better-auth` | `>=1.7.1 <1.8.0` | **required peer** — pin it, see below |
-| `@better-auth/passkey` | `>=1.7.1 <1.8.0` | optional peer, passkey/WebAuthn only |
+| `better-auth` | `>=1.7.7 <1.8.0` | **required peer** — pin it, see below |
+| `@better-auth/passkey` | `>=1.7.7 <1.8.0` | optional peer, passkey/WebAuthn only |
 | `tus-js-client` | `>=4.0.0` | optional peer, resumable uploads only |
 | `@lenne.tech/nest-server` | `>= 11.37.0` | **only if you use the backend** — see the lock-step rule |
 
@@ -38,7 +38,7 @@ Reusable Nuxt 4 composables, components, and Better-Auth integration for lenne.t
 better-auth is one protocol with two ends. This module is the client end and
 `@lenne.tech/nest-server` is the server end, and they must resolve the **same**
 better-auth minor. better-auth breaks in *minor* releases — 1.7 removed subpath
-exports and changed the 2FA response shape — so a caret (`^1.7.1`) would re-open the
+exports and changed the 2FA response shape — so a caret (`^1.7.7`) would re-open the
 hole at 1.8. If the api and the app drift apart, 2FA activation fails at runtime with a
 generic client error while **both** projects' checks stay green: each is internally
 consistent, and only the assembled workspace has both halves.
@@ -46,12 +46,17 @@ consistent, and only the assembled workspace has both halves.
 Raising better-auth therefore means raising it in `@lenne.tech/nest-server` **and**
 `@lenne.tech/nuxt-extensions` in one step.
 
+**Why the floor is 1.7.7:** better-auth below 1.7.7 is affected by
+[GHSA-965c-763c-88jm](https://github.com/better-auth/better-auth/security/advisories/GHSA-965c-763c-88jm)
+(critical): the OAuth state can be used as a magic link to sign in as another user. The flaw
+is in the server end, so your API must run 1.7.7 too, and the pin below keeps both halves on it.
+
 ## Installation
 
 ```bash
-npm install @lenne.tech/nuxt-extensions better-auth@1.7.1
+npm install @lenne.tech/nuxt-extensions better-auth@1.7.7
 # Optional: For passkey support
-npm install @better-auth/passkey@1.7.1
+npm install @better-auth/passkey@1.7.7
 # Optional: For TUS file uploads
 npm install tus-js-client
 ```
@@ -61,8 +66,8 @@ In a fullstack monorepo, pin it workspace-wide so the api and the app cannot dri
 ```yaml
 # pnpm-workspace.yaml
 overrides:
-  better-auth: 1.7.1
-  '@better-auth/passkey': 1.7.1
+  better-auth: 1.7.7
+  '@better-auth/passkey': 1.7.7
 ```
 
 ## Features

package/dist/module.d.mts

@@ -3,7 +3,7 @@ import { LtExtensionsModuleOptions } from '../dist/runtime/types/index.js';
 export * from '../dist/runtime/types/index.js';
 
 declare const name = "@lenne.tech/nuxt-extensions";
-declare const version = "1.18.2";
+declare const version = "1.18.4";
 declare const configKey = "ltExtensions";
 declare const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 declare const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "configKey": "ltExtensions",
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.18.2",
+  "version": "1.18.4",
   "builder": {
     "@nuxt/module-builder": "1.0.3",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -2,7 +2,7 @@ import { defineNuxtModule, createResolver, tryResolveModule, addImports, addComp
 import { pathToFileURL } from 'node:url';
 
 const name = "@lenne.tech/nuxt-extensions";
-const version = "1.18.2";
+const version = "1.18.4";
 const configKey = "ltExtensions";
 const DEFAULT_LT_AUTH_STATE_COOKIE = "lt-auth-state";
 const DEFAULT_LT_JWT_TOKEN_COOKIE = "lt-jwt-token";

package/dist/runtime/components/transition/LtTransitionFade.d.vue.ts

@@ -26,8 +26,8 @@ type __VLS_Slots = {} & {
     default?: (props: typeof __VLS_7) => any;
 };
 declare const __VLS_base: import("@vue/runtime-core").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("@vue/runtime-core").ComponentOptionsMixin, import("@vue/runtime-core").ComponentOptionsMixin, {}, string, import("@vue/runtime-core").PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {
-    leaveDuration: `${number}` | number;
-    startDuration: `${number}` | number;
+    leaveDuration: number | `${number}`;
+    startDuration: number | `${number}`;
 }, {}, {}, {}, string, import("@vue/runtime-core").ComponentProvideOptions, false, {}, any>;
 declare const __VLS_export: __VLS_WithSlots<typeof __VLS_base, __VLS_Slots>;
 declare const _default: typeof __VLS_export;

package/dist/runtime/components/transition/LtTransitionFade.vue.d.ts

@@ -26,8 +26,8 @@ type __VLS_Slots = {} & {
     default?: (props: typeof __VLS_7) => any;
 };
 declare const __VLS_base: import("@vue/runtime-core").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("@vue/runtime-core").ComponentOptionsMixin, import("@vue/runtime-core").ComponentOptionsMixin, {}, string, import("@vue/runtime-core").PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {
-    leaveDuration: `${number}` | number;
-    startDuration: `${number}` | number;
+    leaveDuration: number | `${number}`;
+    startDuration: number | `${number}`;
 }, {}, {}, {}, string, import("@vue/runtime-core").ComponentProvideOptions, false, {}, any>;
 declare const __VLS_export: __VLS_WithSlots<typeof __VLS_base, __VLS_Slots>;
 declare const _default: typeof __VLS_export;

package/dist/runtime/components/transition/LtTransitionFadeScale.d.vue.ts

@@ -29,8 +29,8 @@ type __VLS_Slots = {} & {
     default?: (props: typeof __VLS_7) => any;
 };
 declare const __VLS_base: import("@vue/runtime-core").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("@vue/runtime-core").ComponentOptionsMixin, import("@vue/runtime-core").ComponentOptionsMixin, {}, string, import("@vue/runtime-core").PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {
-    leaveDuration: `${number}` | number;
-    startDuration: `${number}` | number;
+    leaveDuration: number | `${number}`;
+    startDuration: number | `${number}`;
 }, {}, {}, {}, string, import("@vue/runtime-core").ComponentProvideOptions, false, {}, any>;
 declare const __VLS_export: __VLS_WithSlots<typeof __VLS_base, __VLS_Slots>;
 declare const _default: typeof __VLS_export;

package/dist/runtime/components/transition/LtTransitionFadeScale.vue.d.ts

@@ -29,8 +29,8 @@ type __VLS_Slots = {} & {
     default?: (props: typeof __VLS_7) => any;
 };
 declare const __VLS_base: import("@vue/runtime-core").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("@vue/runtime-core").ComponentOptionsMixin, import("@vue/runtime-core").ComponentOptionsMixin, {}, string, import("@vue/runtime-core").PublicProps, Readonly<__VLS_Props> & Readonly<{}>, {
-    leaveDuration: `${number}` | number;
-    startDuration: `${number}` | number;
+    leaveDuration: number | `${number}`;
+    startDuration: number | `${number}`;
 }, {}, {}, {}, string, import("@vue/runtime-core").ComponentProvideOptions, false, {}, any>;
 declare const __VLS_export: __VLS_WithSlots<typeof __VLS_base, __VLS_Slots>;
 declare const _default: typeof __VLS_export;

package/dist/runtime/lib/auth-client.d.ts

@@ -169,7 +169,14 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
                 query?: import("better-auth").SessionQueryParams;
             } | undefined) => Promise<void>;
         }>>;
-        <F extends (...args: any) => any>(useFetch: F): Promise<{
+        (useFetch: (url: string, options: {
+            headers?: HeadersInit;
+            key: string;
+            watch: import("vue").WatchSource<unknown>[];
+        }) => Promise<{
+            data: import("vue").Ref<unknown>;
+            error: import("vue").Ref<unknown>;
+        }>): Promise<{
             data: import("vue").Ref<{
                 user: import("better-auth").StripEmptyObjects<{
                     id: string;
@@ -281,17 +288,17 @@ export declare function createLtAuthClient(config?: LtAuthClientConfig): {
                 onResponse: ((context: import("better-auth/client").ResponseContext) => Promise<Response | void | import("better-auth/client").ResponseContext> | Response | import("better-auth/client").ResponseContext | void) | undefined;
             };
         })[];
-        priority?: RequestPriority | undefined;
         cache?: RequestCache | undefined;
         credentials?: RequestCredentials;
         integrity?: string | undefined;
         keepalive?: boolean | undefined;
         method: string;
         mode?: RequestMode | undefined;
+        priority?: RequestPriority | undefined;
         redirect?: RequestRedirect | undefined;
         referrer?: string | undefined;
         referrerPolicy?: ReferrerPolicy | undefined;
-        signal?: (AbortSignal | null) | undefined;
+        signal?: AbortSignal | null;
         window?: null | undefined;
         onRetry?: ((response: import("better-auth/client").ResponseContext) => Promise<void> | void) | undefined;
         hookOptions?: {

package/dist/runtime/plugins/auth-interceptor.client.d.ts

@@ -16,6 +16,6 @@
  * Note: This is a client-only plugin (.client.ts) since auth state
  * management only makes sense in the browser context.
  */
-import type { NuxtApp } from '#app';
-declare const _default: (nuxtApp: NuxtApp) => void;
+import type { ObjectPlugin, Plugin } from '#app';
+declare const _default: Plugin & ObjectPlugin;
 export default _default;

package/dist/runtime/plugins/auth-interceptor.client.js

@@ -1,6 +1,7 @@
+import { defineNuxtPlugin } from "#imports";
 import { useLtAuth } from "../composables/auth/use-lt-auth.js";
 import { getLtApiBase } from "../lib/auth-state.js";
-export default (nuxtApp) => {
+export default defineNuxtPlugin((nuxtApp) => {
   if (import.meta.server) return;
   let _authInstance = null;
   function getAuth() {
@@ -154,4 +155,4 @@ export default (nuxtApp) => {
     };
   }
   nuxtApp.provide("ltHandleUnauthorized", handleUnauthorized);
-};
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lenne.tech/nuxt-extensions",
-  "version": "1.18.2",
+  "version": "1.18.4",
   "description": "Reusable Nuxt 4 composables, components, and Better-Auth integration for lenne.tech projects",
   "repository": {
     "type": "git",
@@ -51,8 +51,8 @@
     "prepack": "node scripts/sync-module-version.mjs && nuxt-module-build build",
     "c": "pnpm run check",
     "check": "node scripts/check.mjs",
-    "check:raw": "pnpm install --frozen-lockfile && pnpm audit && pnpm peers check && pnpm run format:check && pnpm run lint && pnpm run version:check && pnpm run dev:prepare && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
-    "check:fix": "pnpm install && pnpm audit --fix && pnpm peers check && pnpm run format && pnpm run lint:fix && pnpm run version:sync && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
+    "check:raw": "pnpm install --frozen-lockfile && pnpm audit && pnpm run check:suppressions && pnpm peers check && pnpm run format:check && pnpm run lint && pnpm run version:check && pnpm run dev:prepare && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
+    "check:fix": "pnpm install && pnpm audit --fix && pnpm run check:suppressions && pnpm peers check && pnpm run format && pnpm run lint:fix && pnpm run version:sync && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
     "check:naf": "pnpm install && pnpm peers check && pnpm run format && pnpm run lint:fix && pnpm run version:sync && pnpm test:types && pnpm test && pnpm run build && pnpm run check:manifest",
     "cf": "pnpm run check:fix",
     "cnaf": "pnpm run check:naf",
@@ -72,15 +72,16 @@
     "test:types": "vue-tsc --noEmit && cd playground && vue-tsc --noEmit",
     "release": "pnpm format:check && pnpm lint && pnpm run version:check && pnpm test:types && pnpm test && pnpm run check:consumer && pnpm prepack",
     "check:consumer": "node scripts/check-consumer-build.mjs",
-    "check:manifest": "node scripts/check-package-manifest.mjs"
+    "check:manifest": "node scripts/check-package-manifest.mjs",
+    "check:suppressions": "node scripts/check-suppressions.mjs"
   },
   "dependencies": {
     "@nuxt/kit": "^4.0.0"
   },
   "peerDependencies": {
-    "@better-auth/passkey": ">=1.7.1 <1.8.0",
+    "@better-auth/passkey": ">=1.7.7 <1.8.0",
     "@playwright/test": ">=1.0.0",
-    "better-auth": ">=1.7.1 <1.8.0",
+    "better-auth": ">=1.7.7 <1.8.0",
     "nuxt": "^4.0.0",
     "tus-js-client": ">=4.0.0"
   },
@@ -99,25 +100,25 @@
     }
   },
   "devDependencies": {
-    "@better-auth/passkey": "1.7.1",
+    "@better-auth/passkey": "1.7.7",
     "@nuxt/module-builder": "1.0.3",
     "@nuxt/schema": "4.5.2",
-    "@nuxt/ui": "4.11.2",
+    "@nuxt/ui": "4.11.3",
     "@playwright/test": "1.63.0",
-    "@types/node": "26.6.3",
-    "@vitest/coverage-v8": "4.1.11",
+    "@types/node": "26.6.4",
+    "@vitest/coverage-v8": "5.0.3",
     "@vue/server-renderer": "3.5.43",
-    "better-auth": "1.7.1",
+    "better-auth": "1.7.7",
     "cross-spawn": "7.0.6",
     "happy-dom": "20.14.5",
     "nuxt": "4.5.2",
-    "oxfmt": "0.70.0",
-    "oxlint": "1.85.0",
-    "reka-ui": "2.10.4",
+    "oxfmt": "0.71.0",
+    "oxlint": "1.86.0",
+    "reka-ui": "2.10.5",
     "tus-js-client": "4.3.1",
     "typescript": "5.9.3",
-    "vitest": "4.1.11",
-    "vue-tsc": "3.3.11"
+    "vitest": "5.0.3",
+    "vue-tsc": "3.3.12"
   },
   "keywords": [
     "nuxt",