nuxt-convex-module 0.12.3 → 0.13.0

package/dist/devtools-client/index.html

@@ -1 +1 @@
-<!DOCTYPE html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><script type="importmap">{"imports":{"#entry":"/__nuxt-convex-module/_nuxt/COXexnyN.js"}}</script><link rel="stylesheet" href="/__nuxt-convex-module/_nuxt/entry.DsZySRVW.css" crossorigin><link rel="modulepreload" as="script" crossorigin href="/__nuxt-convex-module/_nuxt/COXexnyN.js"><script type="module" src="/__nuxt-convex-module/_nuxt/COXexnyN.js" crossorigin></script><link rel="prefetch" as="script" crossorigin href="/__nuxt-convex-module/_nuxt/BPtiIkWa.js"></head><body><div id="__nuxt"></div><div id="teleports"></div><script>window.__NUXT__={};window.__NUXT__.config={public:{},app:{baseURL:"/__nuxt-convex-module",buildId:"bfa6df52-caf6-46de-a611-bdf9d975bd3f",buildAssetsDir:"/_nuxt/",cdnURL:""}}</script><script type="application/json" data-nuxt-data="nuxt-app" data-ssr="false" id="__NUXT_DATA__">[{"prerenderedAt":1,"serverRendered":2},1793468157767,false]</script></body></html>
+<!DOCTYPE html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><script type="importmap">{"imports":{"#entry":"/__nuxt-convex-module/_nuxt/CtC_CmOY.js"}}</script><link rel="stylesheet" href="/__nuxt-convex-module/_nuxt/entry.jOWrhpYd.css" crossorigin><link rel="modulepreload" as="script" crossorigin href="/__nuxt-convex-module/_nuxt/CtC_CmOY.js"><script type="module" src="/__nuxt-convex-module/_nuxt/CtC_CmOY.js" crossorigin></script><link rel="prefetch" as="script" crossorigin href="/__nuxt-convex-module/_nuxt/C-J9qZjr.js"></head><body><div id="__nuxt"></div><div id="teleports"></div><script>window.__NUXT__={};window.__NUXT__.config={public:{},app:{baseURL:"/__nuxt-convex-module",buildId:"ad777e0e-9095-4e0e-9b9b-8010fe4e34c6",buildAssetsDir:"/_nuxt/",cdnURL:""}}</script><script type="application/json" data-nuxt-data="nuxt-app" data-ssr="false" id="__NUXT_DATA__">[{"prerenderedAt":1,"serverRendered":2},1794085598149,false]</script></body></html>

package/dist/module.json

@@ -5,7 +5,7 @@
   "compatibility": {
     "nuxt": ">=4.6.0"
   },
-  "version": "0.12.3",
+  "version": "0.13.0",
   "builder": {
     "@nuxt/module-builder": "1.0.3",
     "unbuild": "unknown"

package/dist/module.mjs

@@ -95,7 +95,7 @@ function integrationWarnings(flags, isInstalled) {
   }
   if (flags.polar && !isInstalled("@polar-sh/checkout")) {
     warnings.push(
-      "`@convex-dev/polar` is installed but its peer `@polar-sh/checkout` is not \u2014 `<CheckoutLink>` imports it and the build fails the moment the component is used. Run `npm install @polar-sh/checkout@~0.4.0`."
+      "`@convex-dev/polar` is installed but its peer `@polar-sh/checkout` is not \u2014 `<CheckoutLink>` imports it and the build fails the moment the component is used. Run `npm install @polar-sh/checkout@~0.6.0`."
     );
   }
   return warnings;
@@ -383,7 +383,7 @@ const module$1 = defineNuxtModule({
   // with no extra entry on the consumer's side. The Convex-aware CSP is applied
   // at runtime (see `registerSecurity`), so module order is irrelevant. Nothing
   // is declared otherwise: kit fails the build resolving an absent package.
-  moduleDependencies: (nuxt) => resolveSecurityState(nuxt, readSecurityOption(nuxt)).enabled ? { "nuxt-security": {} } : {},
+  moduleDependencies: (nuxt) => resolveSecurityState(nuxt, readSecurityOption(nuxt)).enabled ? { "nuxt-security": nuxt.options.dev ? { defaults: DEV_SECURITY_DEFAULTS } : {} } : {},
   async setup(options, nuxt) {
     const resolver = createResolver(import.meta.url);
     nuxt.options.build.transpile.push(resolver.resolve("./runtime"));
@@ -486,6 +486,13 @@ function registerIntegrations(resolver, nuxt, options, autoImports, authRoute) {
   }
   return flags;
 }
+const DEV_SECURITY_DEFAULTS = {
+  rateLimiter: false,
+  headers: {
+    contentSecurityPolicy: { "upgrade-insecure-requests": false },
+    strictTransportSecurity: false
+  }
+};
 function readSecurityOption(nuxt) {
   const opts = nuxt.options;
   return opts.convex?.security;

package/dist/runtime/better-auth/nuxt/server.js

@@ -44,6 +44,8 @@ const handler = async (request, siteUrl) => {
   headers.delete("connection");
   headers.set("accept-encoding", "application/json");
   headers.set("host", new URL(siteUrl).host);
+  headers.delete("x-forwarded-host");
+  headers.delete("x-forwarded-proto");
   headers.set("x-better-auth-forwarded-host", requestUrl.host);
   headers.set("x-better-auth-forwarded-proto", requestUrl.protocol.replace(/:$/, ""));
   const init = {

package/dist/runtime/better-auth/vue/client.d.ts

@@ -1,6 +1,6 @@
 import { convexClient } from '@convex-dev/better-auth/client/plugins';
-import { createAuthClient } from 'better-auth/vue';
-export declare const authClient: ReturnType<typeof createAuthClient<{
+import { type VueAuthClient } from 'better-auth/vue';
+export declare const authClient: VueAuthClient<{
     plugins: ReturnType<typeof convexClient>[];
-}>>;
+}>;
 export type AuthClient = typeof authClient;

package/dist/runtime/better-auth/vue/cross-domain.d.ts

@@ -1,3 +1,29 @@
+import { authClient } from '#convex/auth-client';
+/**
+ * An {@link AuthClient} that also includes the `crossDomainClient()` plugin.
+ *
+ * The aliased client's type only reflects the plugins the app installed (the
+ * bundled default omits `crossDomainClient()`), so this describes the
+ * cross-domain additions itself.
+ *
+ * @public
+ */
+export type AuthClientWithCrossDomain = typeof authClient & {
+    updateSession: () => void;
+    crossDomain?: {
+        oneTimeToken: {
+            verify: (args: {
+                token: string;
+            }) => Promise<{
+                data?: {
+                    session?: {
+                        token: string;
+                    } | null;
+                } | null;
+            }>;
+        };
+    };
+};
 /**
  * Options for {@link consumeCrossDomainOneTimeToken}.
  *

package/dist/runtime/better-auth/vue/index.d.ts

@@ -7,7 +7,7 @@
 export { useBetterAuth, type UseBetterAuthReturn, type BetterAuthSession, type BetterAuthUser } from './use-better-auth.js';
 export { authClient, type AuthClient } from '#convex/auth-client';
 export { usePreloadedAuthQuery } from './hydration.js';
-export { consumeCrossDomainOneTimeToken, type ConsumeCrossDomainOneTimeTokenOptions } from './cross-domain.js';
+export { consumeCrossDomainOneTimeToken, type AuthClientWithCrossDomain, type ConsumeCrossDomainOneTimeTokenOptions } from './cross-domain.js';
 export { resolveAuthRedirect } from './redirect.js';
 export { AuthBoundary } from './auth-boundary.js';
 export { convexClient, crossDomainClient } from '@convex-dev/better-auth/client/plugins';

package/dist/runtime/better-auth/vue/token-store.js

@@ -5,14 +5,34 @@ export function createBetterAuthTokenStore() {
     cachedTokenVersion: null,
     pendingToken: null,
     pendingTokenVersion: null,
-    initialTokenUsed: false
+    initialTokenUsed: false,
+    initialTokenSessionId: void 0
   };
 }
 export const BetterAuthTokenStoreKey = Symbol("BetterAuthTokenStore");
 export const PENDING_AUTH_VERSION = "__pending__";
+export function readTokenClaims(token) {
+  try {
+    const payload = token.split(".")[1].replace(/-/g, "+").replace(/_/g, "/");
+    return JSON.parse(atob(payload)) ?? void 0;
+  } catch {
+    return void 0;
+  }
+}
+const getTokenSessionId = (token) => {
+  const sessionId = readTokenClaims(token)?.sessionId;
+  return typeof sessionId === "string" ? sessionId : void 0;
+};
 export function seedInitialToken(store, initialToken) {
   if (store.initialTokenUsed || !initialToken) return;
   store.cachedToken.value = initialToken;
   store.cachedTokenVersion = PENDING_AUTH_VERSION;
+  store.initialTokenSessionId = getTokenSessionId(initialToken);
   store.initialTokenUsed = true;
 }
+export function clearToken(store) {
+  store.cachedToken.value = null;
+  store.cachedTokenVersion = null;
+  store.pendingToken = null;
+  store.pendingTokenVersion = null;
+}

package/dist/runtime/better-auth/vue/use-better-auth.d.ts

@@ -13,9 +13,9 @@ export type BetterAuthUser = {
 } & Record<string, unknown>;
 /** What `useBetterAuth()` returns. */
 export interface UseBetterAuthReturn {
-    /** `true` until the session is known and no prefetched token covers the gap. */
+    /** `true` until the session is known and no prefetched token covers the gap, or while a token from another user is replaced. */
     isLoading: ComputedRef<boolean>;
-    /** `true` when Better Auth reports a session, or a token is cached while it reloads. */
+    /** `true` when Better Auth reports a session, or the prefetched token covers the session loading. */
     isAuthenticated: ComputedRef<boolean>;
     /** Convex's token fetcher: the Better Auth JWT for the current session, or `null`. */
     fetchAccessToken: AuthTokenFetcher;
@@ -25,8 +25,8 @@ export interface UseBetterAuthReturn {
     session: BetterAuthSession;
     /** The current user, or `null` when signed out / still loading. */
     user: ComputedRef<BetterAuthUser | null>;
-    /** The session id (or user id); changes when the signed-in identity changes. */
-    authVersion: ComputedRef<string | null>;
+    /** The session id (or user id), `null` when signed out, `undefined` until the session settles. */
+    authVersion: ComputedRef<string | null | undefined>;
 }
 /**
  * The Better Auth service for the Vue/Nuxt runtime.

package/dist/runtime/better-auth/vue/use-better-auth.js

@@ -1,6 +1,6 @@
-import { computed, effectScope, hasInjectionContext, inject, shallowRef } from "vue";
+import { computed, effectScope, hasInjectionContext, inject, shallowRef, triggerRef, watch } from "vue";
 import { authClient } from "#convex/auth-client";
-import { BetterAuthTokenStoreKey, createBetterAuthTokenStore, PENDING_AUTH_VERSION, seedInitialToken } from "./token-store.js";
+import { BetterAuthTokenStoreKey, clearToken, createBetterAuthTokenStore, PENDING_AUTH_VERSION, readTokenClaims, seedInitialToken } from "./token-store.js";
 const browserStore = createBetterAuthTokenStore();
 function useTokenStore() {
   if (!import.meta.server) return browserStore;
@@ -19,7 +19,13 @@ let browserSessionScope;
 const useClientSession = () => {
   if (import.meta.server) return serverSession();
   browserSessionScope ??= effectScope(true);
-  return browserSession ??= browserSessionScope.run(() => authClient.useSession());
+  return browserSession ??= browserSessionScope.run(() => {
+    const session = authClient.useSession();
+    watch(session, ({ data, isPending }) => {
+      if (!data && !isPending) clearToken(browserStore);
+    }, { flush: "sync" });
+    return session;
+  });
 };
 export function useBetterAuth(initialToken) {
   const store = useTokenStore();
@@ -29,51 +35,76 @@ export function useBetterAuth(initialToken) {
   const client = authClient;
   const authVersion = computed(() => {
     const data = session.value.data;
-    return data?.session?.id ?? data?.user?.id ?? null;
+    const id = data?.session?.id ?? data?.user?.id ?? null;
+    return id === null && session.value.isPending ? void 0 : id;
+  });
+  const currentAuthVersion = () => authVersion.value === void 0 ? PENDING_AUTH_VERSION : authVersion.value;
+  const holdsAnotherSessionsToken = computed(() => {
+    const data = session.value.data;
+    if (!data || !cachedToken.value || store.cachedTokenVersion !== PENDING_AUTH_VERSION) return false;
+    if (store.initialTokenSessionId && data.session?.id) return store.initialTokenSessionId !== data.session.id;
+    const subject = readTokenClaims(cachedToken.value)?.sub;
+    return !!data.user?.id && subject !== void 0 && subject !== data.user.id;
   });
-  const currentAuthVersion = () => authVersion.value ?? (session.value.isPending ? PENDING_AUTH_VERSION : null);
+  const isServerTokenActive = () => session.value.isPending && cachedToken.value !== null && store.cachedTokenVersion === PENDING_AUTH_VERSION;
   const fetchAccessToken = async ({
     forceRefreshToken = false
   } = {}) => {
     const version = currentAuthVersion();
     if (version === null) {
-      cachedToken.value = null;
-      store.cachedTokenVersion = null;
-      store.pendingToken = null;
-      store.pendingTokenVersion = null;
+      clearToken(store);
       return null;
     }
-    if (cachedToken.value && !forceRefreshToken && store.cachedTokenVersion === version) {
-      return cachedToken.value;
+    if (store.cachedTokenVersion === PENDING_AUTH_VERSION && store.initialTokenSessionId === version) {
+      store.cachedTokenVersion = version;
     }
-    if (!forceRefreshToken && store.pendingToken && store.pendingTokenVersion === version) {
-      return store.pendingToken;
+    if (!forceRefreshToken) {
+      if (store.pendingToken && store.pendingTokenVersion === version) {
+        return store.pendingToken;
+      }
+      if (cachedToken.value && store.cachedTokenVersion === version) {
+        return cachedToken.value;
+      }
     }
+    const afterFailure = () => {
+      if (cachedToken.value && !holdsAnotherSessionsToken.value && (store.cachedTokenVersion === version || store.cachedTokenVersion === PENDING_AUTH_VERSION)) {
+        return cachedToken.value;
+      }
+      if (isLatest()) {
+        cachedToken.value = null;
+        store.cachedTokenVersion = version;
+      }
+      return null;
+    };
     store.pendingTokenVersion = version;
-    const pending = store.pendingToken = client.convex.token({ fetchOptions: { throw: false } }).then(({ data }) => {
+    const isLatest = () => store.pendingToken === pending;
+    const pending = store.pendingToken = client.convex.token({ fetchOptions: { throw: false } }).then(({ data, error }) => {
+      if (error && error.status !== 401) {
+        return afterFailure();
+      }
       const token = data?.token || null;
-      cachedToken.value = token;
-      store.cachedTokenVersion = version;
+      if (isLatest()) {
+        store.cachedTokenVersion = version;
+        cachedToken.value = token;
+        triggerRef(cachedToken);
+      }
       return token;
-    }).catch(() => {
-      cachedToken.value = null;
-      store.cachedTokenVersion = version;
-      return null;
-    }).finally(() => {
-      store.pendingToken = null;
-      store.pendingTokenVersion = null;
+    }).catch(afterFailure).finally(() => {
+      if (isLatest()) {
+        store.pendingToken = null;
+        store.pendingTokenVersion = null;
+      }
     });
     return pending;
   };
   return {
-    isLoading: computed(() => session.value.isPending && !cachedToken.value),
+    isLoading: computed(() => session.value.isPending && !isServerTokenActive() || holdsAnotherSessionsToken.value),
     // PARITY: D-03
-    // Diverges from upstream's `Boolean(session?.session) || cachedToken !== null`:
-    // a settled signed-out session must read unauthenticated immediately (Vue has
-    // no re-render to run upstream's cache-clearing effect first), and Better Auth
-    // session data without a nested `session` still counts as signed in.
+    // Diverges from upstream's `Boolean(session?.session) || isSsrTokenActive`:
+    // Better Auth session data without a nested `session` still counts as
+    // signed in.
     isAuthenticated: computed(
-      () => !!session.value.data || session.value.isPending && cachedToken.value !== null
+      () => !!session.value.data || isServerTokenActive()
     ),
     fetchAccessToken,
     // PARITY: A-06 — Vue-only service extensions.

package/dist/runtime/nuxt/composables/use-async-paginated-query.d.ts

@@ -32,7 +32,7 @@ export interface AsyncPaginatedQueryData<Item> {
     status: ComputedRef<PaginationStatus>;
     /** `true` while no page — server or live — is available yet, or more rows are loading. */
     isLoading: ComputedRef<boolean>;
-    /** The SSR fetch error or the live subscription's, `null` when none. Never thrown. */
+    /** The live subscription's error, or the SSR fetch error until the live query has a page; `null` when none. Never thrown. */
     error: ComputedRef<Error | null>;
     /**
      * Fetch `numItems` more rows. Takes effect once the live subscription has

package/dist/runtime/nuxt/composables/use-async-paginated-query.js

@@ -70,9 +70,11 @@ export function useAsyncPaginatedQuery(query, args, options) {
     return "LoadingFirstPage";
   });
   const isLoading = computed(() => status.value === "LoadingFirstPage" || status.value === "LoadingMore");
-  const error = computed(
-    () => liveState.value?.error ?? clientError.value ?? asyncData.error.value ?? null
-  );
+  const error = computed(() => {
+    const liveError = liveState.value?.error ?? clientError.value;
+    if (liveError) return liveError;
+    return liveHasPage.value ? null : asyncData.error.value ?? null;
+  });
   const loadMore = (numItems) => {
     live?.loadMore(numItems);
   };

package/dist/runtime/nuxt/composables/use-async-query.d.ts

@@ -66,7 +66,10 @@ export interface AsyncQueryReturn<T> extends PromiseLike<AsyncQueryData<T>> {
      * nothing has loaded (or while skipped).
      */
     data: ComputedRef<T | undefined>;
-    /** The initial-fetch or live-subscription error, `null` when none. */
+    /**
+     * The initial-fetch or live-subscription error, `null` when none. A failed
+     * initial fetch stops counting once the live subscription has a value.
+     */
     error: ComputedRef<Error | null>;
     /**
      * Initial-fetch status. Live pushes don't churn it: once data exists it

package/dist/runtime/nuxt/composables/use-async-query.js

@@ -75,9 +75,12 @@ export function useAsyncQuery(query, args, options = {}) {
   const data = computed(
     () => liveValue.value !== void 0 ? liveValue.value : payloadValue.value
   );
-  const error = computed(
-    () => liveError.value ?? asyncData.error.value ?? null
-  );
+  const error = computed(() => {
+    if (liveError.value) {
+      return liveError.value;
+    }
+    return liveValue.value !== void 0 ? null : asyncData.error.value ?? null;
+  });
   const status = computed(() => {
     if (liveError.value) {
       return "error";

package/dist/runtime/nuxt/csp.d.ts

@@ -37,7 +37,8 @@ export declare function convexResourceSrc(url?: string, siteUrl?: string): strin
  *
  * For each directive we keep any value the user already set and *append* the
  * Convex origins, so consumers extend (add their own third parties) rather than
- * fight the defaults, and the Convex origins are always present. A user who sets
+ * fight the defaults, and the Convex origins are always present. That covers a
+ * directive the user left to `default-src`, whose places carry over. A user who sets
  * `contentSecurityPolicy: false` (CSP disabled) is left untouched, as is a rule
  * set with nothing to add (no Convex URL).
  */

package/dist/runtime/nuxt/csp.js

@@ -39,8 +39,14 @@ export function applyConvexSecurityDefaults(rules, connectSrc, resourceSrc) {
   tightenDirective(csp, "media-src", ["'self'"], resourceSrc);
 }
 function tightenDirective(csp, name, baseline, additions) {
-  if (additions.length === 0) return;
-  const current = csp[name];
-  const existing = Array.isArray(current) ? current : typeof current === "string" ? current.split(/\s+/).filter(Boolean) : baseline;
+  if (additions.length === 0 || csp[name] === false) return;
+  const existing = sourcesOf(csp[name]) ?? [...baseline, ...inheritedSources(csp)];
   csp[name] = uniq([...existing, ...additions]);
 }
+function sourcesOf(value) {
+  if (Array.isArray(value)) return value;
+  return typeof value === "string" ? value.split(/\s+/).filter(Boolean) : void 0;
+}
+function inheritedSources(csp) {
+  return (sourcesOf(csp["default-src"]) ?? []).filter((source) => source === "'self'" || !source.startsWith("'"));
+}

package/dist/runtime/vue/auth/index.d.ts

@@ -66,7 +66,8 @@ export interface ConvexAuthProviderOptions {
          * Alternative re-authentication trigger for providers that hand out a
          * stable fetcher function: when this value changes, auth state transitions
          * back to loading, `clearAuth` runs, and `fetchAccessToken` is called
-         * again against the new auth context.
+         * again against the new auth context. `undefined` means the provider does
+         * not know the context yet, so the first value it learns is no change.
          */
         authVersion?: MaybeRefOrGetter<unknown>;
     };

package/dist/runtime/vue/auth/index.js

@@ -1,4 +1,4 @@
-import { computed, effectScope, inject, provide, ref, toValue, unref, watch, watchEffect } from "vue";
+import { computed, effectScope, inject, nextTick, provide, ref, toValue, unref, watch } from "vue";
 export const ConvexAuthStateKey = Symbol("ConvexAuthState");
 export function useConvexAuth() {
   const authContext = inject(ConvexAuthStateKey);
@@ -9,6 +9,27 @@ export function useConvexAuth() {
   }
   return authContext;
 }
+const pendingClears = /* @__PURE__ */ new WeakMap();
+function clearAuthLast(client, ended) {
+  const pending = pendingClears.get(client);
+  if (pending) {
+    if (pending.start === ended) {
+      pending.start = null;
+    }
+    return;
+  }
+  const clear = { start: null };
+  pendingClears.set(client, clear);
+  void nextTick(() => {
+    pendingClears.delete(client);
+    try {
+      client.clearAuth();
+    } catch {
+      return;
+    }
+    clear.start?.();
+  });
+}
 export function provideConvexAuth(options) {
   const authState = createConvexAuthState(options);
   provide(ConvexAuthStateKey, authState);
@@ -43,16 +64,37 @@ export function createConvexAuthState(options, scope) {
       },
       { immediate: true }
     );
-    watchEffect((onCleanup) => {
-      if (import.meta.server) {
-        return;
+    const authContext = ref(0);
+    watch(
+      () => toValue(authVersion),
+      (_version, previous) => {
+        if (previous !== void 0) authContext.value++;
       }
-      let isThisEffectRelevant = true;
-      void toValue(authProviderLoading);
-      void toValue(authVersion);
-      const fetchToken = unref(fetchAccessToken);
-      if (toValue(authProviderAuthenticated)) {
-        client.setAuth(
+    );
+    watch(
+      [
+        // The loading flag is here only so auth re-registers when it flips,
+        // mirroring upstream's effect deps. It must not gate `setAuth`: a
+        // provider may report a cached session (authenticated) while still
+        // revalidating (loading), and upstream authenticates the client
+        // immediately in that window.
+        () => toValue(authProviderLoading),
+        authContext,
+        // Unwrapping here tracks the ref, so a new fetcher identity
+        // re-registers auth: upstream's effect re-running when
+        // `fetchAccessToken` changes between renders.
+        () => unref(fetchAccessToken),
+        () => toValue(authProviderAuthenticated)
+      ],
+      ([, , fetchToken, authenticated], _previous, onCleanup) => {
+        if (import.meta.server) {
+          return;
+        }
+        if (!authenticated) {
+          return;
+        }
+        let isThisEffectRelevant = true;
+        const start = () => client.setAuth(
           fetchToken,
           (convexReportsIsAuthenticated) => {
             if (isThisEffectRelevant) {
@@ -67,14 +109,21 @@ export function createConvexAuthState(options, scope) {
             }
           }
         );
+        const pending = pendingClears.get(client);
+        if (pending) {
+          pending.start = start;
+        } else {
+          start();
+        }
         onCleanup(() => {
           isThisEffectRelevant = false;
-          client.clearAuth();
           isConvexAuthenticated.value = null;
           isRefreshing.value = false;
+          clearAuthLast(client, start);
         });
-      }
-    });
+      },
+      { immediate: true }
+    );
   };
   if (scope) {
     scope.run(register);

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "nuxt-convex-module",
-  "version": "0.12.3",
+  "version": "0.13.0",
   "description": "Convex backend integration with live queries, mutations, actions, pagination, file storage and SSR, auto-imported and typed against your deployment. The same Vue client runs without Nuxt; Better Auth, Clerk, Auth0 and Polar are opt-in.",
   "repository": {
     "type": "git",
@@ -157,10 +157,10 @@
   "peerDependencies": {
     "@auth0/auth0-vue": "^2.0.0",
     "@clerk/vue": "^2.0.0",
-    "@convex-dev/better-auth": ">=0.12.0 <0.13.0",
+    "@convex-dev/better-auth": ">=0.13.0 <0.14.0",
     "@convex-dev/polar": ">=0.9.0 <0.10.0",
-    "@polar-sh/checkout": "^0.4.0",
-    "better-auth": "~1.6.11",
+    "@polar-sh/checkout": "^0.6.0",
+    "better-auth": "~1.7.16",
     "convex": "^1.46.0",
     "nuxt-security": "^2.6.0",
     "vue": "^3.5.0"
@@ -191,10 +191,10 @@
   "devDependencies": {
     "@arethetypeswrong/cli": "^0.18.5",
     "@auth0/auth0-vue": "^2.11.0",
-    "@clerk/vue": "2.5.16",
+    "@clerk/vue": "2.5.19",
     "@commitlint/cli": "^21.2.4",
     "@commitlint/config-conventional": "^21.2.4",
-    "@convex-dev/better-auth": "^0.12.6",
+    "@convex-dev/better-auth": "^0.13.0",
     "@convex-dev/polar": "^0.9.2",
     "@nuxt/devtools": "^4.0.0",
     "@nuxt/devtools-kit": "^4.0.0",
@@ -203,25 +203,25 @@
     "@nuxt/module-builder": "^1.0.3",
     "@nuxt/schema": "^4.6.3",
     "@nuxt/test-utils": "^4.3.4",
-    "@polar-sh/checkout": "^0.4.3",
+    "@polar-sh/checkout": "^0.6.0",
     "@types/node": "^26.6.5",
     "@types/ws": "^8.18.2",
     "@unhead/vue": "^3.4.2",
     "@vitejs/devtools-kit": "^0.8.0",
     "@vitest/coverage-v8": "^5.0.5",
     "@vue/test-utils": "^2.5.1",
-    "better-auth": "~1.6.33",
+    "better-auth": "~1.7.18",
     "changelogen": "^0.6.2",
-    "convex": "^1.48.0",
+    "convex": "^1.49.0",
     "eslint": "^10.13.0",
-    "fallow": "3.37.0",
+    "fallow": "3.39.0",
     "happy-dom": "^21.0.4",
     "installed-check": "^11.0.0",
     "nuxt": "^4.6.3",
     "nuxt-security": "^2.6.0",
-    "pkg-pr-new": "^0.0.92",
+    "pkg-pr-new": "^0.0.93",
     "playwright-core": "^1.64.1",
-    "portless": "0.15.12",
+    "portless": "0.16.0",
     "publint": "^0.3.24",
     "taze": "^21.3.0",
     "typedoc": "^0.28.20",

package/dist/devtools-client/_nuxt/AqohFEu1.js

@@ -1 +0,0 @@
-import{t as e}from"./BPtiIkWa.js";var t=Symbol.for(`devframe:browser-agent-registry`),{tools:n,listeners:r}=globalThis[t]??={tools:new Map,listeners:new Set};function i(){return[...n.values()]}function a(e){return r.add(e),()=>r.delete(e)}var o=`devframe:client-id`,s;function c(t=globalThis.window){try{let n=t?.sessionStorage;if(n){let t=n.getItem(o);return t||(t=e(),n.setItem(o,t)),t}}catch{}return s??=e(),s}function l(e){e.client.register({name:`devframe:agent:invoke-client-tool`,type:`action`,jsonSerializable:!0,handler:async(e,t)=>{let n=i().find(t=>t.id===e);if(!n)throw Error(`[devframe/agent] browser tool "${e}" not found`);return await n.invoke(t)}});let t=!1,n=!1,r=0,o=()=>{t||n||(t=!0,queueMicrotask(async()=>{if(t=!1,n)return;let a=i().map(({invoke:e,...t})=>t);(a.length!==0||r!==0)&&(r=a.length,await e.callOptional(`devframe:agent:sync-client-tools`,c(),a).catch(()=>{}))}))},s=a(o),l=e.events.on(`connection:status`,e=>{e===`connected`&&o()});return o(),()=>{n=!0,s(),l()}}export{l as setupBrowserAgentRpcBridge};