nuxt-convex-module 0.10.0 → 0.12.0

package/dist/runtime/better-auth/vue/auth-boundary.js

@@ -2,7 +2,7 @@ import { defineComponent, h, onErrorCaptured, ref, watch } from "vue";
 import { useConvexAuth } from "../../vue/auth/index.js";
 import { Authenticated } from "../../vue/auth/helpers.js";
 import { useQuery } from "../../vue/composables/use-query.js";
-const UserSubscription = defineComponent({
+const UserSubscription = /* @__PURE__ */ defineComponent({
   name: "UserSubscription",
   props: {
     getAuthUserFn: { type: Object, required: true }
@@ -15,7 +15,7 @@ const UserSubscription = defineComponent({
     };
   }
 });
-export const AuthBoundary = defineComponent({
+export const AuthBoundary = /* @__PURE__ */ defineComponent({
   name: "AuthBoundary",
   props: {
     /**

package/dist/runtime/better-auth/vue/client.d.ts

@@ -1,358 +1,6 @@
-export declare const authClient: import("better-auth/vue").VueAuthClient<{
-    plugins: {
-        id: "convex";
-        version: string;
-        $InferServerPlugin: ReturnType<(opts: {
-            authConfig: import("convex/server").AuthConfig;
-            jwt?: {
-                expirationSeconds?: number;
-                definePayload?: (session: {
-                    user: import("better-auth").User & Record<string, any>;
-                    session: import("better-auth").Session & Record<string, any>;
-                }) => Promise<Record<string, any>> | Record<string, any> | undefined;
-            };
-            jwtExpirationSeconds?: number;
-            jwks?: string;
-            jwksRotateOnTokenGenerationError?: boolean;
-            options?: import("better-auth").BetterAuthOptions;
-        }) => {
-            id: "convex";
-            version: string;
-            init: (ctx: import("better-auth").AuthContext) => void;
-            hooks: {
-                before: ({
-                    matcher(context: import("better-auth").HookEndpointContext): boolean;
-                    handler: (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
-                        context: {
-                            headers: Headers;
-                        };
-                    } | undefined>;
-                } | {
-                    matcher: (ctx: import("better-auth").HookEndpointContext) => boolean;
-                    handler: (inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
-                        context: import("better-auth").MiddlewareContext<import("better-auth").MiddlewareOptions, {
-                            returned?: unknown | undefined;
-                            responseHeaders?: Headers | undefined;
-                        } & import("better-auth").PluginContext<import("better-auth").BetterAuthOptions> & import("better-auth").InfoContext & {
-                            options: import("better-auth").BetterAuthOptions;
-                            trustedOrigins: string[];
-                            trustedProviders: string[];
-                            isTrustedOrigin: (url: string, settings?: {
-                                allowRelativePaths: boolean;
-                            }) => boolean;
-                            oauthConfig: {
-                                skipStateCookieCheck?: boolean | undefined;
-                                storeStateStrategy: "database" | "cookie";
-                            };
-                            newSession: {
-                                session: {
-                                    id: string;
-                                    createdAt: Date;
-                                    updatedAt: Date;
-                                    userId: string;
-                                    expiresAt: Date;
-                                    token: string;
-                                    ipAddress?: string | null | undefined;
-                                    userAgent?: string | null | undefined;
-                                } & Record<string, any>;
-                                user: {
-                                    id: string;
-                                    createdAt: Date;
-                                    updatedAt: Date;
-                                    email: string;
-                                    emailVerified: boolean;
-                                    name: string;
-                                    image?: string | null | undefined;
-                                } & Record<string, any>;
-                            } | null;
-                            session: {
-                                session: {
-                                    id: string;
-                                    createdAt: Date;
-                                    updatedAt: Date;
-                                    userId: string;
-                                    expiresAt: Date;
-                                    token: string;
-                                    ipAddress?: string | null | undefined;
-                                    userAgent?: string | null | undefined;
-                                } & Record<string, any>;
-                                user: {
-                                    id: string;
-                                    createdAt: Date;
-                                    updatedAt: Date;
-                                    email: string;
-                                    emailVerified: boolean;
-                                    name: string;
-                                    image?: string | null | undefined;
-                                } & Record<string, any>;
-                            } | null;
-                            setNewSession: (session: {
-                                session: {
-                                    id: string;
-                                    createdAt: Date;
-                                    updatedAt: Date;
-                                    userId: string;
-                                    expiresAt: Date;
-                                    token: string;
-                                    ipAddress?: string | null | undefined;
-                                    userAgent?: string | null | undefined;
-                                } & Record<string, any>;
-                                user: {
-                                    id: string;
-                                    createdAt: Date;
-                                    updatedAt: Date;
-                                    email: string;
-                                    emailVerified: boolean;
-                                    name: string;
-                                    image?: string | null | undefined;
-                                } & Record<string, any>;
-                            } | null) => void;
-                            socialProviders: import("better-auth").OAuthProvider[];
-                            authCookies: import("better-auth").BetterAuthCookies;
-                            logger: ReturnType<(options?: import("better-auth").Logger | undefined) => import("better-auth").InternalLogger>;
-                            rateLimit: {
-                                enabled: boolean;
-                                window: number;
-                                max: number;
-                                storage: "memory" | "database" | "secondary-storage";
-                            } & Omit<import("better-auth").BetterAuthRateLimitOptions, "enabled" | "window" | "max" | "storage">;
-                            adapter: import("better-auth").DBAdapter<import("better-auth").BetterAuthOptions>;
-                            internalAdapter: import("better-auth").InternalAdapter<import("better-auth").BetterAuthOptions>;
-                            createAuthCookie: (cookieName: string, overrideAttributes?: Partial<import("better-auth").CookieOptions> | undefined) => import("better-auth").BetterAuthCookie;
-                            secret: string;
-                            secretConfig: string | import("better-auth").SecretConfig;
-                            sessionConfig: {
-                                updateAge: number;
-                                expiresIn: number;
-                                freshAge: number;
-                                cookieRefreshCache: false | {
-                                    enabled: true;
-                                    updateAge: number;
-                                };
-                            };
-                            generateId: (options: {
-                                model: import("better-auth").ModelNames;
-                                size?: number | undefined;
-                            }) => string | false;
-                            secondaryStorage: import("better-auth").SecondaryStorage | undefined;
-                            password: {
-                                hash: (password: string) => Promise<string>;
-                                verify: (data: {
-                                    password: string;
-                                    hash: string;
-                                }) => Promise<boolean>;
-                                config: {
-                                    minPasswordLength: number;
-                                    maxPasswordLength: number;
-                                };
-                                checkPassword: (userId: string, ctx: import("better-auth").GenericEndpointContext<import("better-auth").BetterAuthOptions>) => Promise<boolean>;
-                            };
-                            tables: import("better-auth").BetterAuthDBSchema;
-                            runMigrations: () => Promise<void>;
-                            publishTelemetry: (event: {
-                                type: string;
-                                anonymousId?: string | undefined;
-                                payload: Record<string, any>;
-                            }) => Promise<void>;
-                            skipOriginCheck: boolean | string[];
-                            skipCSRFCheck: boolean;
-                            runInBackground: (promise: Promise<unknown>) => void;
-                            runInBackgroundOrAwait: (promise: Promise<unknown> | void) => import("better-auth").Awaitable<unknown>;
-                        }>;
-                    }>;
-                })[];
-                after: {
-                    matcher: (context: import("better-auth").HookEndpointContext) => boolean;
-                    handler: import("better-auth/api").AuthMiddleware;
-                }[];
-            };
-            endpoints: {
-                getOpenIdConfig: import("better-auth").StrictEndpoint<"/convex/.well-known/openid-configuration", {
-                    method: "GET";
-                    metadata: {
-                        isAction: false;
-                    };
-                }, import("better-auth/plugins/oidc-provider").OIDCMetadata>;
-                getJwks: import("better-auth").StrictEndpoint<"/convex/jwks", {
-                    method: "GET";
-                    metadata: {
-                        openapi: {
-                            description: string;
-                            responses: {
-                                "200": {
-                                    description: string;
-                                    content: {
-                                        "application/json": {
-                                            schema: {
-                                                type: "object";
-                                                properties: {
-                                                    keys: {
-                                                        type: string;
-                                                        description: string;
-                                                        items: {
-                                                            type: string;
-                                                            properties: {
-                                                                kid: {
-                                                                    type: string;
-                                                                    description: string;
-                                                                };
-                                                                kty: {
-                                                                    type: string;
-                                                                    description: string;
-                                                                };
-                                                                alg: {
-                                                                    type: string;
-                                                                    description: string;
-                                                                };
-                                                                use: {
-                                                                    type: string;
-                                                                    description: string;
-                                                                    enum: string[];
-                                                                    nullable: boolean;
-                                                                };
-                                                                n: {
-                                                                    type: string;
-                                                                    description: string;
-                                                                    nullable: boolean;
-                                                                };
-                                                                e: {
-                                                                    type: string;
-                                                                    description: string;
-                                                                    nullable: boolean;
-                                                                };
-                                                                crv: {
-                                                                    type: string;
-                                                                    description: string;
-                                                                    nullable: boolean;
-                                                                };
-                                                                x: {
-                                                                    type: string;
-                                                                    description: string;
-                                                                    nullable: boolean;
-                                                                };
-                                                                y: {
-                                                                    type: string;
-                                                                    description: string;
-                                                                    nullable: boolean;
-                                                                };
-                                                            };
-                                                            required: string[];
-                                                        };
-                                                    };
-                                                };
-                                                required: string[];
-                                            };
-                                        };
-                                    };
-                                };
-                            };
-                        };
-                    };
-                }, import("better-auth").JSONWebKeySet>;
-                getLatestJwks: import("better-auth").StrictEndpoint<"/convex/latest-jwks", {
-                    isAction: boolean;
-                    method: "POST";
-                    metadata: {
-                        SERVER_ONLY: true;
-                        openapi: {
-                            description: string;
-                        };
-                    };
-                }, any[]>;
-                rotateKeys: import("better-auth").StrictEndpoint<"/convex/rotate-keys", {
-                    isAction: boolean;
-                    method: "POST";
-                    metadata: {
-                        SERVER_ONLY: true;
-                        openapi: {
-                            description: string;
-                        };
-                    };
-                }, any[]>;
-                getToken: import("better-auth").StrictEndpoint<"/convex/token", {
-                    method: "GET";
-                    requireHeaders: true;
-                    use: ((inputContext: import("better-auth").MiddlewareInputContext<import("better-auth").MiddlewareOptions>) => Promise<{
-                        session: {
-                            session: Record<string, any> & {
-                                id: string;
-                                createdAt: Date;
-                                updatedAt: Date;
-                                userId: string;
-                                expiresAt: Date;
-                                token: string;
-                                ipAddress?: string | null | undefined;
-                                userAgent?: string | null | undefined;
-                            };
-                            user: Record<string, any> & {
-                                id: string;
-                                createdAt: Date;
-                                updatedAt: Date;
-                                email: string;
-                                emailVerified: boolean;
-                                name: string;
-                                image?: string | null | undefined;
-                            };
-                        };
-                    }>)[];
-                    metadata: {
-                        openapi: {
-                            description: string;
-                            responses: {
-                                200: {
-                                    description: string;
-                                    content: {
-                                        "application/json": {
-                                            schema: {
-                                                type: "object";
-                                                properties: {
-                                                    token: {
-                                                        type: string;
-                                                    };
-                                                };
-                                            };
-                                        };
-                                    };
-                                };
-                            };
-                        };
-                    };
-                }, {
-                    token: string;
-                }>;
-            };
-            schema: {
-                jwks: {
-                    fields: {
-                        publicKey: {
-                            type: "string";
-                            required: true;
-                        };
-                        privateKey: {
-                            type: "string";
-                            required: true;
-                        };
-                        createdAt: {
-                            type: "date";
-                            required: true;
-                        };
-                        expiresAt: {
-                            type: "date";
-                            required: false;
-                        };
-                    };
-                };
-                user: {
-                    readonly fields: {
-                        readonly userId: {
-                            readonly type: "string";
-                            readonly required: false;
-                            readonly input: false;
-                        };
-                    };
-                };
-            };
-        }>;
-    }[];
-}>;
+import { convexClient } from '@convex-dev/better-auth/client/plugins';
+import { createAuthClient } from 'better-auth/vue';
+export declare const authClient: ReturnType<typeof createAuthClient<{
+    plugins: ReturnType<typeof convexClient>[];
+}>>;
 export type AuthClient = typeof authClient;

package/dist/runtime/better-auth/vue/plugin.server.js

@@ -1,16 +1,15 @@
 import { computed } from "vue";
-import { setResponseHeader } from "h3";
-import { defineNuxtPlugin, useRuntimeConfig, useState, useRequestEvent } from "#app";
+import { defineNuxtPlugin, useRuntimeConfig, useState, useRequestEvent, useResponseHeader } from "#app";
 import { ConvexVueClient, ConvexClientKey } from "../../vue/client.js";
 import { CONVEX_INITIAL_TOKEN_KEY } from "../../nuxt/config.js";
 import { convexAuth } from "../nuxt/server.js";
 import { ConvexAuthStateKey } from "../../vue/auth/index.js";
-export async function prefetchAuthToken(event, initialToken) {
+export async function prefetchAuthToken(event, initialToken, cacheControl) {
   try {
     const token = await convexAuth(event).getToken();
     initialToken.value = token ?? null;
     if (token && event) {
-      setResponseHeader(event, "Cache-Control", "private, no-store");
+      cacheControl.value = "private, no-store";
     }
   } catch (error) {
     console.warn("[nuxt-convex-module] Failed to prefetch auth token for SSR:", error);
@@ -33,7 +32,7 @@ export default defineNuxtPlugin({
     nuxtApp.vueApp.provide(ConvexAuthStateKey, ssrAuthState);
     const event = useRequestEvent();
     if (event && !import.meta.prerender) {
-      await prefetchAuthToken(event, initialToken);
+      await prefetchAuthToken(event, initialToken, useResponseHeader("Cache-Control"));
     }
   }
 });

package/dist/runtime/better-auth/vue/use-better-auth.d.ts

@@ -1,70 +1,10 @@
 import type { AuthTokenFetcher } from 'convex/browser';
 import { type ComputedRef } from 'vue';
 import { type AuthClient } from '#convex/auth-client';
-declare const useClientSession: () => Readonly<import("vue").Ref<{
-    readonly data: {
-        readonly user: {
-            readonly id: string;
-            readonly createdAt: Date;
-            readonly updatedAt: Date;
-            readonly email: string;
-            readonly emailVerified: boolean;
-            readonly name: string;
-            readonly image?: string | null | undefined;
-            readonly userId?: string | null | undefined;
-        };
-        readonly session: {
-            readonly id: string;
-            readonly createdAt: Date;
-            readonly updatedAt: Date;
-            readonly userId: string;
-            readonly expiresAt: Date;
-            readonly token: string;
-            readonly ipAddress?: string | null | undefined;
-            readonly userAgent?: string | null | undefined;
-        };
-    } | null;
-    readonly isPending: boolean;
-    readonly isRefetching: boolean;
-    readonly error: import("better-auth/client").BetterFetchError | null;
-    readonly refetch: (queryParams
-    /** The Better Auth client from `#convex/auth-client` — sign-in, sign-out and every plugin flow live here. */
-    ?: {
-        query?: import("better-auth").SessionQueryParams;
-    } | undefined) => Promise<void>;
-}, {
-    readonly data: {
-        readonly user: {
-            readonly id: string;
-            readonly createdAt: Date;
-            readonly updatedAt: Date;
-            readonly email: string;
-            readonly emailVerified: boolean;
-            readonly name: string;
-            readonly image?: string | null | undefined;
-            readonly userId?: string | null | undefined;
-        };
-        readonly session: {
-            readonly id: string;
-            readonly createdAt: Date;
-            readonly updatedAt: Date;
-            readonly userId: string;
-            readonly expiresAt: Date;
-            readonly token: string;
-            readonly ipAddress?: string | null | undefined;
-            readonly userAgent?: string | null | undefined;
-        };
-    } | null;
-    readonly isPending: boolean;
-    readonly isRefetching: boolean;
-    readonly error: import("better-auth/client").BetterFetchError | null;
-    readonly refetch: (queryParams
-    /** The Better Auth client from `#convex/auth-client` — sign-in, sign-out and every plugin flow live here. */
-    ?: {
-        query?: import("better-auth").SessionQueryParams;
-    } | undefined) => Promise<void>;
-}>>;
-export type BetterAuthSession = ReturnType<typeof useClientSession>;
+export type BetterAuthSession = AuthClient['useSession'] extends {
+    (): infer R;
+    (useFetch: any): any;
+} ? R : never;
 /** The signed-in user (loose — exact fields depend on your auth schema). */
 export type BetterAuthUser = {
     id: string;
@@ -109,4 +49,3 @@ export interface UseBetterAuthReturn {
  * @public
  */
 export declare function useBetterAuth(initialToken?: string | null): UseBetterAuthReturn;
-export {};

package/dist/runtime/clerk/vue/index.js

@@ -7,7 +7,7 @@ export function provideConvexAuthFromClerk(options = {}) {
   const useAuth = options.useAuth ?? useClerkAuth;
   return provideConvexAuth({ client, useAuth: () => useAuthFromClerk(useAuth) });
 }
-export const ConvexProviderWithClerk = defineComponent({
+export const ConvexProviderWithClerk = /* @__PURE__ */ defineComponent({
   name: "ConvexProviderWithClerk",
   props: {
     client: { type: Object, default: void 0 },

package/dist/runtime/nuxt/app.d.ts

@@ -39,9 +39,6 @@
  * const messages: AsyncQueryReturn<Doc<'messages'>[]> = useAsyncQuery(api.messages.list, {})
  * ```
  *
- * Before 1.0 the composable was auto-imported but reachable from no subpath,
- * so neither the explicit form nor the types could be written at all.
- *
  * @module app
  */
 export { useAsyncQuery, useConvexAsyncQuery, type AsyncQueryData, type AsyncQueryOptions, type AsyncQueryReturn, type AsyncQueryStatus, } from './composables/use-async-query.js';

package/dist/runtime/nuxt/composables/use-async-paginated-query.js

@@ -17,20 +17,20 @@ export function useAsyncPaginatedQuery(query, args, options) {
     key,
     async () => {
       const currentArgs = toValue(args);
-      if (currentArgs === "skip" || !import.meta.server) {
-        return null;
-      }
-      if (!deploymentUrl) {
-        throw new Error(
-          "`useAsyncPaginatedQuery` could not fetch during SSR: no Convex deployment URL is configured. Set NUXT_PUBLIC_CONVEX_URL or `convex.url` in nuxt.config."
+      if (import.meta.server && currentArgs !== "skip") {
+        if (!deploymentUrl) {
+          throw new Error(
+            "`useAsyncPaginatedQuery` could not fetch during SSR: no Convex deployment URL is configured. Set NUXT_PUBLIC_CONVEX_URL or `convex.url` in nuxt.config."
+          );
+        }
+        const result2 = await fetchQuery(
+          query,
+          { ...currentArgs, paginationOpts: { numItems: initialNumItems, cursor: null } },
+          { token: await resolveToken(), url: deploymentUrl }
         );
+        return { page: convexToJson(result2.page), isDone: result2.isDone };
       }
-      const result2 = await fetchQuery(
-        query,
-        { ...currentArgs, paginationOpts: { numItems: initialNumItems, cursor: null } },
-        { token: await resolveToken(), url: deploymentUrl }
-      );
-      return { page: convexToJson(result2.page), isDone: result2.isDone };
+      return null;
     },
     { server, lazy, deep: false, immediate: initialArgs !== "skip" }
   );

package/dist/runtime/nuxt/composables/use-async-query.d.ts

@@ -1,5 +1,5 @@
 import { type ComputedRef, type MaybeRefOrGetter } from 'vue';
-import type { FunctionArgs, FunctionReference, FunctionReturnType } from 'convex/server';
+import type { FunctionArgs, FunctionReference, FunctionReference_future, FunctionReturnType } from 'convex/server';
 /**
  * Request status of a {@link useAsyncQuery} call — mirrors Nuxt's
  * `useAsyncData` statuses.
@@ -130,6 +130,6 @@ export type AsyncQueryData<T> = Pick<AsyncQueryReturn<T>, 'data' | 'error' | 'st
  *
  * @public
  */
-export declare function useAsyncQuery<Query extends FunctionReference<'query'>>(query: Query, args?: MaybeRefOrGetter<FunctionArgs<Query> | 'skip'>, options?: AsyncQueryOptions): AsyncQueryReturn<FunctionReturnType<Query>>;
+export declare function useAsyncQuery<Query extends FunctionReference<'query'> | FunctionReference_future<'query'>>(query: Query, args?: MaybeRefOrGetter<FunctionArgs<Query> | 'skip'>, options?: AsyncQueryOptions): AsyncQueryReturn<FunctionReturnType<Query>>;
 /** @public */
 export declare const useConvexAsyncQuery: typeof useAsyncQuery;

package/dist/runtime/nuxt/config.js

@@ -5,7 +5,7 @@ export function getConvexRuntimeConfig() {
     const config = useRuntimeConfig();
     return {
       url: config.public?.convex?.url,
-      siteUrl: config.convex?.siteUrl || config.public?.convex?.siteUrl
+      siteUrl: config.public?.convex?.siteUrl
     };
   } catch {
     return {};

package/dist/runtime/nuxt/index.d.ts

@@ -40,7 +40,7 @@
  *
  * @module server
  */
-import type { ArgsAndOptions, FunctionReference, FunctionReturnType } from 'convex/server';
+import type { ArgsAndOptions, FunctionReference, FunctionReference_future, FunctionReturnType } from 'convex/server';
 import type { Preloaded } from '../vue/index.js';
 /**
  * Options to {@link preloadQuery}, {@link fetchQuery}, {@link fetchMutation} and {@link fetchAction}.
@@ -85,7 +85,7 @@ export type NuxtOptions = {
  *
  * @public
  */
-export declare function preloadQuery<Query extends FunctionReference<'query'>>(query: Query, ...args: ArgsAndOptions<Query, NuxtOptions>): Promise<Preloaded<Query>>;
+export declare function preloadQuery<Query extends FunctionReference<'query'> | FunctionReference_future<'query'>>(query: Query, ...args: ArgsAndOptions<Query, NuxtOptions>): Promise<Preloaded<Query>>;
 /**
  * Returns the result of executing a query via {@link preloadQuery}.
  *
@@ -94,7 +94,7 @@ export declare function preloadQuery<Query extends FunctionReference<'query'>>(q
  *
  * @public
  */
-export declare function preloadedQueryResult<Query extends FunctionReference<'query'>>(preloaded: Preloaded<Query>): FunctionReturnType<Query>;
+export declare function preloadedQueryResult<Query extends FunctionReference<'query'> | FunctionReference_future<'query'>>(preloaded: Preloaded<Query>): FunctionReturnType<Query>;
 /**
  * Execute a Convex query function.
  *
@@ -107,7 +107,7 @@ export declare function preloadedQueryResult<Query extends FunctionReference<'qu
  *
  * @public
  */
-export declare function fetchQuery<Query extends FunctionReference<'query'>>(query: Query, ...args: ArgsAndOptions<Query, NuxtOptions>): Promise<FunctionReturnType<Query>>;
+export declare function fetchQuery<Query extends FunctionReference<'query'> | FunctionReference_future<'query'>>(query: Query, ...args: ArgsAndOptions<Query, NuxtOptions>): Promise<FunctionReturnType<Query>>;
 /**
  * Execute a Convex mutation function.
  *
@@ -120,7 +120,7 @@ export declare function fetchQuery<Query extends FunctionReference<'query'>>(que
  *
  * @public
  */
-export declare function fetchMutation<Mutation extends FunctionReference<'mutation'>>(mutation: Mutation, ...args: ArgsAndOptions<Mutation, NuxtOptions>): Promise<FunctionReturnType<Mutation>>;
+export declare function fetchMutation<Mutation extends FunctionReference<'mutation'> | FunctionReference_future<'mutation'>>(mutation: Mutation, ...args: ArgsAndOptions<Mutation, NuxtOptions>): Promise<FunctionReturnType<Mutation>>;
 /**
  * Execute a Convex action function.
  *
@@ -133,4 +133,4 @@ export declare function fetchMutation<Mutation extends FunctionReference<'mutati
  *
  * @public
  */
-export declare function fetchAction<Action extends FunctionReference<'action'>>(action: Action, ...args: ArgsAndOptions<Action, NuxtOptions>): Promise<FunctionReturnType<Action>>;
+export declare function fetchAction<Action extends FunctionReference<'action'> | FunctionReference_future<'action'>>(action: Action, ...args: ArgsAndOptions<Action, NuxtOptions>): Promise<FunctionReturnType<Action>>;

package/dist/runtime/nuxt/security.d.ts

@@ -21,7 +21,8 @@ export interface SecurityNitroApp {
  * origins are appended to whatever the app configured, whatever the order of
  * `modules`. nuxt-security sorts its own Nitro plugins last, so this listener
  * is in place before the hook fires. The deployment URL comes from runtime
- * config, so it need not be known at build time.
+ * config, so it need not be known at build time. `nuxt/server` is its only
+ * server import, so the same file runs on Nitro 2 and Nitro 3.
  *
  * `connect-src` is tightened only in production: creating it in dev would
  * block the Vite HMR and devtools WebSockets, which run on ports `'self'`

package/dist/runtime/nuxt/security.js

@@ -1,10 +1,10 @@
-import { getConvexRuntimeConfig } from "./config.js";
+import { useRuntimeConfig } from "nuxt/server";
 import { applyConvexSecurityDefaults, convexConnectSrc, convexResourceSrc } from "./csp.js";
 export default function convexSecurityPlugin(nitroApp) {
   nitroApp.hooks.hook("nuxt-security:routeRules", (rules) => {
     const global = rules["/**"];
     if (!global) return;
-    const { url, siteUrl } = getConvexRuntimeConfig();
+    const { url, siteUrl } = useRuntimeConfig().public?.convex ?? {};
     applyConvexSecurityDefaults(
       global,
       import.meta.dev ? [] : convexConnectSrc(url, siteUrl),