create-z3 0.0.55 → 0.0.56

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-z3",
-  "version": "0.0.55",
+  "version": "0.0.56",
   "type": "module",
   "description": "CLI for scaffolding Z3 Stack applications (TanStack/Next.js + Convex + Better Auth)",
   "bin": {

package/templates/nextjs/convex/auth/index.ts

@@ -14,7 +14,7 @@ import type { DataModel } from "../_generated/dataModel"
 
 import schema from "../schema"
 import { convexAdapter } from "./adapter"
-import betterAuthPlugins from "./plugins"
+import { createPlugins } from "./plugins"
 
 export const createAuth = (
   ctx: GenericActionCtx<DataModel>,
@@ -31,7 +31,7 @@ export const createAuth = (
     logger: {
       disabled: optionsOnly
     },
-    plugins: betterAuthPlugins,
+    plugins: createPlugins(),
     secret: process.env.BETTER_AUTH_SECRET,
     session: {
       modelName: TABLE_SLUG_SESSIONS

package/templates/nextjs/convex/auth/plugins/index.ts

@@ -5,7 +5,11 @@ import { convex } from "@convex-dev/better-auth/plugins"
 import { USER_ROLES } from "~/db/constants"
 import authConfig from "@convex/auth.config"
 
-const plugins = [
+// Return a new array each call so plugin initialization (including the convex()
+// factory which internally calls the deprecated oidc-provider plugin) runs inside
+// createAuth() rather than at module-eval time. This lets the console.warn filter
+// in http.ts suppress the deprecation noise before it fires.
+export const createPlugins = () => [
   admin({
     adminRoles: [USER_ROLES.admin],
     defaultRole: USER_ROLES.user,
@@ -14,5 +18,3 @@ const plugins = [
   nextCookies(),
   convex({ authConfig }),
 ]
-
-export default plugins

package/templates/nextjs/convex/http.ts

@@ -7,9 +7,22 @@ const http = httpRouter();
 
 // Auth request handler - basePath hardcoded to /api/auth for now
 const authRequestHandler = httpAction(async (ctx, request) => {
-	// eslint-disable-next-line @typescript-eslint/no-unsafe-argument
-	const auth = createAuth(ctx);
-	return await auth.handler(request);
+	// Suppress the oidc-provider deprecation warning spammed by @convex-dev/better-auth
+	// on every request. Convex wraps console.warn per-invocation, so this must run
+	// inside the handler (not at module level) to intercept after Convex's wrapper is set.
+	// Remove once @convex-dev/better-auth migrates to @better-auth/oauth-provider.
+	const _warn = console.warn;
+	console.warn = (...args: unknown[]) => {
+		if (typeof args[0] === "string" && args[0].includes("oidc-provider")) return;
+		_warn(...args);
+	};
+	try {
+		// eslint-disable-next-line @typescript-eslint/no-unsafe-argument
+		const auth = createAuth(ctx);
+		return await auth.handler(request);
+	} finally {
+		console.warn = _warn;
+	}
 });
 
 // Register auth routes for GET and POST

package/templates/tanstack-start/convex/auth/index.ts

@@ -14,7 +14,7 @@ import type { DataModel } from "../_generated/dataModel"
 
 import schema from "../schema"
 import { convexAdapter } from "./adapter"
-import betterAuthPlugins from "./plugins"
+import { createPlugins } from "./plugins"
 
 export const createAuth = (
   ctx: GenericActionCtx<DataModel>,
@@ -31,7 +31,7 @@ export const createAuth = (
     logger: {
       disabled: optionsOnly
     },
-    plugins: betterAuthPlugins,
+    plugins: createPlugins(),
     secret: process.env.BETTER_AUTH_SECRET,
     session: {
       modelName: TABLE_SLUG_SESSIONS

package/templates/tanstack-start/convex/auth/plugins/index.ts

@@ -4,7 +4,11 @@ import { convex } from "@convex-dev/better-auth/plugins"
 import authConfig from "@convex/auth.config"
 import { USER_ROLES } from "~/db/constants"
 
-const plugins = [
+// Return a new array each call so plugin initialization (including the convex()
+// factory which internally calls the deprecated oidc-provider plugin) runs inside
+// createAuth() rather than at module-eval time. This lets the console.warn filter
+// in http.ts suppress the deprecation noise before it fires.
+export const createPlugins = () => [
   admin({
     adminRoles: [USER_ROLES.admin],
     defaultRole: USER_ROLES.user
@@ -12,5 +16,3 @@ const plugins = [
   apiKey(),
   convex({ authConfig }),
 ]
-
-export default plugins

package/templates/tanstack-start/convex/http.ts

@@ -8,6 +8,15 @@ const http = httpRouter()
  * Auth handler - handles Better Auth requests with custom adapter
  */
 const authRequestHandler = httpAction(async (ctx, request) => {
+  // Suppress the oidc-provider deprecation warning spammed by @convex-dev/better-auth
+  // on every request. Convex wraps console.warn per-invocation, so this must run
+  // inside the handler (not at module level) to intercept after Convex's wrapper is set.
+  // Remove once @convex-dev/better-auth migrates to @better-auth/oauth-provider.
+  const _warn = console.warn
+  console.warn = (...args: unknown[]) => {
+    if (typeof args[0] === "string" && args[0].includes("oidc-provider")) return
+    _warn(...args)
+  }
   try {
     const auth = createAuth(ctx)
     const response = await auth.handler(request)
@@ -15,6 +24,8 @@ const authRequestHandler = httpAction(async (ctx, request) => {
   } catch (error) {
     console.error("❌ Auth error:", error)
     return new Response("Auth error", { status: 500 })
+  } finally {
+    console.warn = _warn
   }
 })