@nuxt/scripts 1.0.0-rc.1 → 1.0.0-rc.10

package/dist/runtime/components/ScriptStripePricingTable.d.vue.ts

@@ -7,15 +7,11 @@ type __VLS_Props = {
     customerEmail?: string;
     customerSessionClientSecret?: string;
 };
-declare var __VLS_1: {}, __VLS_3: {}, __VLS_5: {}, __VLS_7: {};
-type __VLS_Slots = {} & {
-    loading?: (props: typeof __VLS_1) => any;
-} & {
-    awaitingLoad?: (props: typeof __VLS_3) => any;
-} & {
-    error?: (props: typeof __VLS_5) => any;
-} & {
-    default?: (props: typeof __VLS_7) => any;
+type __VLS_Slots = {
+    default?: () => any;
+    loading?: () => any;
+    awaitingLoad?: () => any;
+    error?: () => any;
 };
 declare const __VLS_base: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {
     error: () => any;

package/dist/runtime/components/ScriptStripePricingTable.vue

@@ -11,6 +11,7 @@ const props = defineProps({
   customerSessionClientSecret: { type: String, required: false }
 });
 const emit = defineEmits(["ready", "error"]);
+defineSlots();
 const rootEl = ref();
 const containerEl = ref();
 const trigger = useScriptTriggerElement({ trigger: props.trigger, el: rootEl });

package/dist/runtime/components/ScriptStripePricingTable.vue.d.ts

@@ -7,15 +7,11 @@ type __VLS_Props = {
     customerEmail?: string;
     customerSessionClientSecret?: string;
 };
-declare var __VLS_1: {}, __VLS_3: {}, __VLS_5: {}, __VLS_7: {};
-type __VLS_Slots = {} & {
-    loading?: (props: typeof __VLS_1) => any;
-} & {
-    awaitingLoad?: (props: typeof __VLS_3) => any;
-} & {
-    error?: (props: typeof __VLS_5) => any;
-} & {
-    default?: (props: typeof __VLS_7) => any;
+type __VLS_Slots = {
+    default?: () => any;
+    loading?: () => any;
+    awaitingLoad?: () => any;
+    error?: () => any;
 };
 declare const __VLS_base: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {
     error: () => any;

package/dist/runtime/components/ScriptVimeoPlayer.d.vue.ts

@@ -44,17 +44,14 @@ type __VLS_Props = {
      */
     placeholderObjectFit?: 'cover' | 'contain' | 'fill' | 'none' | 'scale-down';
 };
-declare var __VLS_1: any, __VLS_3: {}, __VLS_10: {}, __VLS_12: {}, __VLS_14: {};
-type __VLS_Slots = {} & {
-    placeholder?: (props: typeof __VLS_1) => any;
-} & {
-    loading?: (props: typeof __VLS_3) => any;
-} & {
-    awaitingLoad?: (props: typeof __VLS_10) => any;
-} & {
-    error?: (props: typeof __VLS_12) => any;
-} & {
-    default?: (props: typeof __VLS_14) => any;
+type __VLS_Slots = {
+    default?: () => any;
+    placeholder?: (props: {
+        placeholder: string | undefined;
+    }) => any;
+    loading?: () => any;
+    awaitingLoad?: () => any;
+    error?: () => any;
 };
 declare const __VLS_base: import("vue").DefineComponent<__VLS_Props, {
     play: () => Promise<void> | undefined;

package/dist/runtime/components/ScriptVimeoPlayer.vue

@@ -17,6 +17,7 @@ const props = defineProps({
   placeholderObjectFit: { type: String, required: false, default: "contain" }
 });
 const emits = defineEmits(["play", "playing", "pause", "ended", "timeupdate", "progress", "seeking", "seeked", "texttrackchange", "chapterchange", "cuechange", "cuepoint", "volumechange", "playbackratechange", "bufferstart", "bufferend", "error", "loaded", "durationchange", "fullscreenchange", "qualitychange", "camerachange", "resize", "enterpictureinpicture", "leavepictureinpicture"]);
+defineSlots();
 const events = [
   "play",
   "playing",

package/dist/runtime/components/ScriptVimeoPlayer.vue.d.ts

@@ -44,17 +44,14 @@ type __VLS_Props = {
      */
     placeholderObjectFit?: 'cover' | 'contain' | 'fill' | 'none' | 'scale-down';
 };
-declare var __VLS_1: any, __VLS_3: {}, __VLS_10: {}, __VLS_12: {}, __VLS_14: {};
-type __VLS_Slots = {} & {
-    placeholder?: (props: typeof __VLS_1) => any;
-} & {
-    loading?: (props: typeof __VLS_3) => any;
-} & {
-    awaitingLoad?: (props: typeof __VLS_10) => any;
-} & {
-    error?: (props: typeof __VLS_12) => any;
-} & {
-    default?: (props: typeof __VLS_14) => any;
+type __VLS_Slots = {
+    default?: () => any;
+    placeholder?: (props: {
+        placeholder: string | undefined;
+    }) => any;
+    loading?: () => any;
+    awaitingLoad?: () => any;
+    error?: () => any;
 };
 declare const __VLS_base: import("vue").DefineComponent<__VLS_Props, {
     play: () => Promise<void> | undefined;

package/dist/runtime/components/ScriptXEmbed.d.vue.ts

@@ -18,14 +18,19 @@ type __VLS_Props = {
      */
     rootAttrs?: HTMLAttributes;
 };
-declare var __VLS_1: {}, __VLS_3: {
-    error: import("nuxt/app").NuxtError<unknown> | undefined;
-}, __VLS_5: {
+type __VLS_Slots = {
+    default?: (props: NonNullable<typeof slotProps.value>) => any;
+    loading?: () => any;
+    error?: (props: {
+        error: typeof error.value;
+    }) => any;
+};
+declare const error: import("vue").Ref<import("nuxt/app").NuxtError<unknown> | undefined, import("nuxt/app").NuxtError<unknown> | undefined>;
+declare const slotProps: import("vue").ComputedRef<{
     tweet: XEmbedTweetData;
     userName: string;
     userHandle: string;
     userAvatar: string;
-    userAvatarOriginal: string;
     isVerified: boolean | undefined;
     text: string;
     datetime: string;
@@ -54,14 +59,7 @@ declare var __VLS_1: {}, __VLS_3: {
     isReply: boolean;
     replyToUser: string | undefined;
     proxyImage: (url: string) => string;
-};
-type __VLS_Slots = {} & {
-    loading?: (props: typeof __VLS_1) => any;
-} & {
-    error?: (props: typeof __VLS_3) => any;
-} & {
-    default?: (props: typeof __VLS_5) => any;
-};
+} | null>;
 declare const __VLS_base: import("vue").DefineComponent<__VLS_Props, {
     tweet: import("vue").Ref<XEmbedTweetData | undefined, XEmbedTweetData | undefined>;
     status: import("vue").Ref<import("nuxt/app").AsyncDataRequestStatus, import("nuxt/app").AsyncDataRequestStatus>;

package/dist/runtime/components/ScriptXEmbed.vue

@@ -1,7 +1,8 @@
 <script setup>
 import { useAsyncData } from "nuxt/app";
 import { computed } from "vue";
-import { formatCount, formatTweetDate, proxyXImageUrl } from "../registry/x-embed";
+import { useScriptProxyUrl } from "../composables/useScriptProxyUrl";
+import { formatCount, formatTweetDate } from "../registry/x-embed";
 import { requireRegistryEndpoint, scriptsPrefix } from "../utils";
 const props = defineProps({
   tweetId: { type: String, required: true },
@@ -9,15 +10,17 @@ const props = defineProps({
   imageProxyEndpoint: { type: String, required: false, default: void 0 },
   rootAttrs: { type: Object, required: false }
 });
+defineSlots();
 const prefix = scriptsPrefix();
 const apiEndpoint = computed(() => props.apiEndpoint || `${prefix}/embed/x`);
 const resolvedImageProxyEndpoint = computed(() => props.imageProxyEndpoint || `${prefix}/embed/x-image`);
 if (!props.apiEndpoint)
   requireRegistryEndpoint("ScriptXEmbed", "xEmbed");
+const proxyUrl = useScriptProxyUrl();
 const cacheKey = computed(() => `x-embed-${props.tweetId}`);
 const { data: tweet, status, error } = useAsyncData(
   cacheKey,
-  () => $fetch(`${apiEndpoint.value}?id=${props.tweetId}`)
+  () => $fetch(proxyUrl(apiEndpoint.value, { id: props.tweetId }))
 );
 const slotProps = computed(() => {
   if (!tweet.value)
@@ -29,8 +32,7 @@ const slotProps = computed(() => {
     // User info
     userName: t.user.name,
     userHandle: t.user.screen_name,
-    userAvatar: proxyXImageUrl(t.user.profile_image_url_https, resolvedImageProxyEndpoint.value),
-    userAvatarOriginal: t.user.profile_image_url_https,
+    userAvatar: t.user.profile_image_url_https,
     isVerified: t.user.verified || t.user.is_blue_verified,
     // Tweet content
     text: t.text,
@@ -41,14 +43,14 @@ const slotProps = computed(() => {
     likesFormatted: formatCount(t.favorite_count),
     replies: t.conversation_count,
     repliesFormatted: formatCount(t.conversation_count),
-    // Media
+    // Media (already proxied)
     photos: t.photos?.map((p) => ({
       ...p,
-      proxiedUrl: proxyXImageUrl(p.url, resolvedImageProxyEndpoint.value)
+      proxiedUrl: p.url
     })),
     video: t.video ? {
       ...t.video,
-      posterProxied: proxyXImageUrl(t.video.poster, resolvedImageProxyEndpoint.value)
+      posterProxied: t.video.poster
     } : null,
     // Links
     tweetUrl: `https://x.com/${t.user.screen_name}/status/${t.id_str}`,
@@ -58,8 +60,9 @@ const slotProps = computed(() => {
     // Reply context
     isReply: !!t.parent,
     replyToUser: t.parent?.user.screen_name,
-    // Helpers
-    proxyImage: (url) => proxyXImageUrl(url, resolvedImageProxyEndpoint.value)
+    // Helpers — proxy an arbitrary URL through the image endpoint at runtime.
+    // Uses the page token emitted during SSR so client-generated URLs validate.
+    proxyImage: (url) => proxyUrl(resolvedImageProxyEndpoint.value, { url })
   };
 });
 defineExpose({

package/dist/runtime/components/ScriptXEmbed.vue.d.ts

@@ -18,14 +18,19 @@ type __VLS_Props = {
      */
     rootAttrs?: HTMLAttributes;
 };
-declare var __VLS_1: {}, __VLS_3: {
-    error: import("nuxt/app").NuxtError<unknown> | undefined;
-}, __VLS_5: {
+type __VLS_Slots = {
+    default?: (props: NonNullable<typeof slotProps.value>) => any;
+    loading?: () => any;
+    error?: (props: {
+        error: typeof error.value;
+    }) => any;
+};
+declare const error: import("vue").Ref<import("nuxt/app").NuxtError<unknown> | undefined, import("nuxt/app").NuxtError<unknown> | undefined>;
+declare const slotProps: import("vue").ComputedRef<{
     tweet: XEmbedTweetData;
     userName: string;
     userHandle: string;
     userAvatar: string;
-    userAvatarOriginal: string;
     isVerified: boolean | undefined;
     text: string;
     datetime: string;
@@ -54,14 +59,7 @@ declare var __VLS_1: {}, __VLS_3: {
     isReply: boolean;
     replyToUser: string | undefined;
     proxyImage: (url: string) => string;
-};
-type __VLS_Slots = {} & {
-    loading?: (props: typeof __VLS_1) => any;
-} & {
-    error?: (props: typeof __VLS_3) => any;
-} & {
-    default?: (props: typeof __VLS_5) => any;
-};
+} | null>;
 declare const __VLS_base: import("vue").DefineComponent<__VLS_Props, {
     tweet: import("vue").Ref<XEmbedTweetData | undefined, XEmbedTweetData | undefined>;
     status: import("vue").Ref<import("nuxt/app").AsyncDataRequestStatus, import("nuxt/app").AsyncDataRequestStatus>;

package/dist/runtime/components/ScriptYouTubePlayer.d.vue.ts

@@ -27,19 +27,14 @@ type __VLS_Props = {
      */
     placeholderObjectFit?: 'cover' | 'contain' | 'fill' | 'none' | 'scale-down';
 };
-declare var __VLS_1: {
-    placeholder: string;
-}, __VLS_3: {}, __VLS_10: {}, __VLS_12: {}, __VLS_14: {};
-type __VLS_Slots = {} & {
-    placeholder?: (props: typeof __VLS_1) => any;
-} & {
-    loading?: (props: typeof __VLS_3) => any;
-} & {
-    awaitingLoad?: (props: typeof __VLS_10) => any;
-} & {
-    error?: (props: typeof __VLS_12) => any;
-} & {
-    default?: (props: typeof __VLS_14) => any;
+type __VLS_Slots = {
+    default?: () => any;
+    placeholder?: (props: {
+        placeholder: string;
+    }) => any;
+    loading?: () => any;
+    awaitingLoad?: () => any;
+    error?: () => any;
 };
 declare const __VLS_base: import("vue").DefineComponent<__VLS_Props, {
     player: Ref<YT.Player | undefined, YT.Player | undefined>;

package/dist/runtime/components/ScriptYouTubePlayer.vue

@@ -22,6 +22,7 @@ const props = defineProps({
   placeholderObjectFit: { type: String, required: false, default: "cover" }
 });
 const emits = defineEmits(["ready", "state-change", "playback-quality-change", "playback-rate-change", "error", "api-change"]);
+defineSlots();
 const events = [
   "onReady",
   "onStateChange",

package/dist/runtime/components/ScriptYouTubePlayer.vue.d.ts

@@ -27,19 +27,14 @@ type __VLS_Props = {
      */
     placeholderObjectFit?: 'cover' | 'contain' | 'fill' | 'none' | 'scale-down';
 };
-declare var __VLS_1: {
-    placeholder: string;
-}, __VLS_3: {}, __VLS_10: {}, __VLS_12: {}, __VLS_14: {};
-type __VLS_Slots = {} & {
-    placeholder?: (props: typeof __VLS_1) => any;
-} & {
-    loading?: (props: typeof __VLS_3) => any;
-} & {
-    awaitingLoad?: (props: typeof __VLS_10) => any;
-} & {
-    error?: (props: typeof __VLS_12) => any;
-} & {
-    default?: (props: typeof __VLS_14) => any;
+type __VLS_Slots = {
+    default?: () => any;
+    placeholder?: (props: {
+        placeholder: string;
+    }) => any;
+    loading?: () => any;
+    awaitingLoad?: () => any;
+    error?: () => any;
 };
 declare const __VLS_base: import("vue").DefineComponent<__VLS_Props, {
     player: Ref<YT.Player | undefined, YT.Player | undefined>;

package/dist/runtime/composables/useScript.js

@@ -26,11 +26,22 @@ function toNetworkRequest(entry, proxyPrefix) {
     isProxied
   };
 }
-function createDomainMatcher(domains, proxyPrefix) {
+function createDomainMatcher(domains, proxyPrefix, scriptSrc) {
   const localHostname = window.location.hostname;
+  const scriptUrl = (() => {
+    if (!scriptSrc)
+      return "";
+    try {
+      return new URL(scriptSrc, window.location.origin).href;
+    } catch {
+      return "";
+    }
+  })();
   return function matchesScript(entry) {
     try {
       const entryUrl = new URL(entry.name, window.location.origin);
+      if (scriptUrl && entryUrl.href === scriptUrl)
+        return true;
       if (entryUrl.hostname !== localHostname && domains.has(entryUrl.hostname))
         return true;
       const proxyPath = `${proxyPrefix}/`;
@@ -46,12 +57,12 @@ function createDomainMatcher(domains, proxyPrefix) {
     return false;
   };
 }
-function observeNetworkRequests(payload, domains, onUpdate) {
+function observeNetworkRequests(payload, domains, onUpdate, scriptSrc) {
   if (typeof PerformanceObserver === "undefined")
     return () => {
     };
   const proxyPrefix = resolveProxyPrefix();
-  const matchesScript = createDomainMatcher(domains, proxyPrefix);
+  const matchesScript = createDomainMatcher(domains, proxyPrefix, scriptSrc);
   const seen = /* @__PURE__ */ new Set();
   function entryKey(entry) {
     return `${entry.name}@${entry.startTime}`;
@@ -148,7 +159,7 @@ export function useScript(input, options) {
         ],
         networkRequests: []
       };
-      disconnectObserver = observeNetworkRequests(payload, domains, syncScripts);
+      disconnectObserver = observeNetworkRequests(payload, domains, syncScripts, src);
       syncScripts();
     }
     return stub;
@@ -274,7 +285,7 @@ export function useScript(input, options) {
         ...scriptHostname ? [scriptHostname] : [],
         ...options.devtools?.domains || []
       ]);
-      let disconnectObserver = observeNetworkRequests(payload, domains, syncScripts);
+      let disconnectObserver = observeNetworkRequests(payload, domains, syncScripts, input.src);
       const _origRemove = instance.remove;
       const _origReload = instance.reload;
       instance.remove = () => {
@@ -284,7 +295,7 @@ export function useScript(input, options) {
       instance.reload = async () => {
         disconnectObserver();
         const result = await _origReload();
-        disconnectObserver = observeNetworkRequests(payload, domains, syncScripts);
+        disconnectObserver = observeNetworkRequests(payload, domains, syncScripts, input.src);
         return result;
       };
       syncScripts();

package/dist/runtime/composables/useScriptProxyToken.d.ts

@@ -0,0 +1,12 @@
+export interface ScriptProxyToken {
+    token: string;
+    ts: number;
+}
+/**
+ * Shared `useState` holding the proxy page token emitted during SSR.
+ *
+ * Populated by the `nuxt-scripts:proxy-token` server plugin when
+ * `runtimeConfig['nuxt-scripts'].proxySecret` is set, and hydrated to the
+ * client via the Nuxt payload. Stays null when signing is disabled.
+ */
+export declare function useScriptProxyToken(): import("vue").Ref<ScriptProxyToken | null, ScriptProxyToken | null>;

package/dist/runtime/composables/useScriptProxyToken.js

@@ -0,0 +1,4 @@
+import { useState } from "nuxt/app";
+export function useScriptProxyToken() {
+  return useState("nuxt-scripts:proxy-token", () => null);
+}

package/dist/runtime/composables/useScriptProxyUrl.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Build proxy URLs that the server's `withSigning` middleware accepts.
+ *
+ * Attaches the page token emitted during SSR (`_pt` + `_ts`) when one is
+ * available, so client-driven proxy calls (e.g. reactive fetches, dynamic
+ * image helpers exposed in slot props) authenticate without needing a
+ * server round-trip to sign each URL.
+ *
+ * When no token is present (signing disabled or no secret), emits plain
+ * `?url=...` URLs, matching the pre-signing behavior.
+ */
+export declare function useScriptProxyUrl(): (path: string, query?: Record<string, unknown>) => string;

package/dist/runtime/composables/useScriptProxyUrl.js

@@ -0,0 +1,27 @@
+import { PAGE_TOKEN_PARAM, PAGE_TOKEN_TS_PARAM } from "../server/utils/sign-constants.js";
+import { useScriptProxyToken } from "./useScriptProxyToken.js";
+export function useScriptProxyUrl() {
+  const token = useScriptProxyToken();
+  return (path, query = {}) => {
+    const parts = [];
+    for (const [key, value] of Object.entries(query)) {
+      if (value === void 0 || value === null)
+        continue;
+      const encodedKey = encodeURIComponent(key);
+      if (Array.isArray(value)) {
+        for (const item of value) {
+          if (item === void 0 || item === null)
+            continue;
+          parts.push(`${encodedKey}=${encodeURIComponent(String(item))}`);
+        }
+      } else {
+        parts.push(`${encodedKey}=${encodeURIComponent(String(value))}`);
+      }
+    }
+    if (token.value) {
+      parts.push(`${PAGE_TOKEN_PARAM}=${encodeURIComponent(token.value.token)}`);
+      parts.push(`${PAGE_TOKEN_TS_PARAM}=${token.value.ts}`);
+    }
+    return parts.length ? `${path}?${parts.join("&")}` : path;
+  };
+}

package/dist/runtime/plugins/proxy-token.server.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Emit a per-request proxy page token into the SSR payload.
+ *
+ * The token authorizes client-side proxy calls (`/embed/x-image?url=...`,
+ * `/embed/bluesky?url=...`, etc.) without needing each URL to be signed
+ * ahead of time. It stays null when no proxy secret is configured, in
+ * which case `withSigning` passes requests through unchecked.
+ */
+declare const _default: import("nuxt/app").Plugin<Record<string, unknown>> & import("nuxt/app").ObjectPlugin<Record<string, unknown>>;
+export default _default;

package/dist/runtime/plugins/proxy-token.server.js

@@ -0,0 +1,17 @@
+import { defineNuxtPlugin, useRuntimeConfig } from "nuxt/app";
+import { useScriptProxyToken } from "../composables/useScriptProxyToken.js";
+import { generateProxyToken } from "../server/utils/sign.js";
+export default defineNuxtPlugin({
+  name: "nuxt-scripts:proxy-token",
+  enforce: "pre",
+  setup() {
+    const secret = useRuntimeConfig()["nuxt-scripts"]?.proxySecret;
+    if (!secret)
+      return;
+    const ts = Math.floor(Date.now() / 1e3);
+    useScriptProxyToken().value = {
+      token: generateProxyToken(secret, ts),
+      ts
+    };
+  }
+});