nuxt-directus-sdk 6.0.0 → 6.1.0

package/README.md

@@ -4,6 +4,7 @@
 [![npm downloads][npm-downloads-src]][npm-downloads-href]
 [![CI][ci-src]][ci-href]
 [![Install size][install-size-src]][install-size-href]
+[![Nuxt Care][nuxt-care-src]][nuxt-care-href]
 [![License][license-src]][license-href]
 [![Nuxt][nuxt-src]][nuxt-href]
 
@@ -136,6 +137,9 @@ Contributions are welcome. Please target the `next` branch for new features and
 [install-size-src]: https://packagephobia.com/badge?p=nuxt-directus-sdk
 [install-size-href]: https://packagephobia.com/result?p=nuxt-directus-sdk
 
+[nuxt-care-src]: https://img.shields.io/endpoint?url=https%3A%2F%2Fnuxt.care%2Fapi%2Fv1%2Fbadge%3Fpackage%3Dnuxt-directus-sdk
+[nuxt-care-href]: https://nuxt.care/?search=nuxt-directus-sdk
+
 [license-src]: https://img.shields.io/npm/l/nuxt-directus-sdk.svg?style=flat&colorA=18181B&colorB=28CF8D
 [license-href]: https://npmjs.com/package/nuxt-directus-sdk
 

package/dist/cli/index.mjs

@@ -3,7 +3,7 @@ import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'node:fs';
 import { resolve, dirname } from 'node:path';
 import { parseArgs } from 'node:util';
 import { createDirectus, staticToken, rest } from '@directus/sdk';
-import { d as diffRemoteRules, e as formatDiff, c as compareRulesPayloads, f as fetchRemoteRules, k as loadRulesFromPayload, o as pushRules, g as formatPushResult, b as fetchRemoteRulesAsJson } from '../shared/nuxt-directus-sdk.CtcY1peN.mjs';
+import { d as diffRemoteRules, f as formatDiff, c as compareRulesPayloads, a as fetchRemoteRules, l as loadRulesFromPayload, p as pushRules, b as formatPushResult, e as fetchRemoteRulesAsJson } from '../shared/nuxt-directus-sdk.sBTh4hx5.mjs';
 import { generateTypesFromDirectus } from '../../dist/runtime/types/generate.js';
 
 function parseCsv(raw) {

package/dist/module.d.mts

@@ -7,6 +7,27 @@ type DirectusUrl = string | {
     server: string;
 };
 type ReadMeFields = Query<DirectusSchema, DirectusUser<DirectusSchema>>['fields'];
+/**
+ * Shape of the `proxy` (and deprecated `devProxy`) module option.
+ */
+type ProxyOption = boolean | {
+    /**
+     * Enable the proxy. Defaults to true in dev, false in production.
+     * Explicitly setting `true` enables HTTP proxying in production too.
+     */
+    enabled?: boolean;
+    /**
+     * HTTP proxy path (where the Nitro server handler is mounted).
+     * @default '/directus'
+     */
+    path?: string;
+    /**
+     * WebSocket proxy path (for realtime connections). Dev-mode only;
+     * ignored in production builds.
+     * @default '/directus-ws'
+     */
+    wsPath?: string;
+};
 interface ModuleOptions {
     /**
      * Directus API URL
@@ -18,29 +39,27 @@ interface ModuleOptions {
      */
     url: DirectusUrl;
     /**
-     * Development proxy configuration
-     * When enabled, creates a proxy at /directus that forwards to your Directus URL
-     * This solves CORS and cookie issues in development
-     * @default { enabled: true, path: '/directus', wsPath: '/directus-ws' } in dev mode
+     * Proxy configuration. When enabled, creates a Nitro server handler at
+     * `path` that forwards HTTP requests to your Directus URL. Useful for
+     * cookie-scope (login on the same origin) and CORS workarounds.
+     *
+     * - Defaults to on in dev, off in production.
+     * - Setting `true` (or `{ enabled: true }`) explicitly turns the HTTP
+     *   proxy on in production too.
+     * - The WebSocket proxy (for realtime) is dev-only; it relies on the
+     *   dev-server's upgrade hook which doesn't exist in production builds.
+     *   When the HTTP proxy is on in production, realtime connects directly
+     *   to Directus, so realtime auth still requires same-domain cookies
+     *   (or a public `realtimeAuthMode`).
+     *
+     * @default { enabled: <isDev>, path: '/directus', wsPath: '/directus-ws' (dev only) }
      * @type boolean | { enabled?: boolean, path?: string, wsPath?: string }
      */
-    devProxy?: boolean | {
-        /**
-         * Enable the development proxy
-         * @default true in dev mode, false in production
-         */
-        enabled?: boolean;
-        /**
-         * Proxy path (where the proxy will be mounted)
-         * @default '/directus'
-         */
-        path?: string;
-        /**
-         * WebSocket proxy path (for realtime connections)
-         * @default '/directus-ws'
-         */
-        wsPath?: string;
-    };
+    proxy?: ProxyOption;
+    /**
+     * @deprecated Use `proxy` instead. `devProxy` will be removed in the next major release.
+     */
+    devProxy?: ProxyOption;
     /**
      * Admin Auth Token used for generating types and server functions
      * @default process.env.DIRECTUS_ADMIN_TOKEN
@@ -227,4 +246,4 @@ declare module '@nuxt/schema' {
 }
 
 export { _default as default };
-export type { DirectusUrl, ModuleOptions, ReadMeFields };
+export type { DirectusUrl, ModuleOptions, ProxyOption, ReadMeFields };

package/dist/module.d.ts

@@ -7,6 +7,27 @@ type DirectusUrl = string | {
     server: string;
 };
 type ReadMeFields = Query<DirectusSchema, DirectusUser<DirectusSchema>>['fields'];
+/**
+ * Shape of the `proxy` (and deprecated `devProxy`) module option.
+ */
+type ProxyOption = boolean | {
+    /**
+     * Enable the proxy. Defaults to true in dev, false in production.
+     * Explicitly setting `true` enables HTTP proxying in production too.
+     */
+    enabled?: boolean;
+    /**
+     * HTTP proxy path (where the Nitro server handler is mounted).
+     * @default '/directus'
+     */
+    path?: string;
+    /**
+     * WebSocket proxy path (for realtime connections). Dev-mode only;
+     * ignored in production builds.
+     * @default '/directus-ws'
+     */
+    wsPath?: string;
+};
 interface ModuleOptions {
     /**
      * Directus API URL
@@ -18,29 +39,27 @@ interface ModuleOptions {
      */
     url: DirectusUrl;
     /**
-     * Development proxy configuration
-     * When enabled, creates a proxy at /directus that forwards to your Directus URL
-     * This solves CORS and cookie issues in development
-     * @default { enabled: true, path: '/directus', wsPath: '/directus-ws' } in dev mode
+     * Proxy configuration. When enabled, creates a Nitro server handler at
+     * `path` that forwards HTTP requests to your Directus URL. Useful for
+     * cookie-scope (login on the same origin) and CORS workarounds.
+     *
+     * - Defaults to on in dev, off in production.
+     * - Setting `true` (or `{ enabled: true }`) explicitly turns the HTTP
+     *   proxy on in production too.
+     * - The WebSocket proxy (for realtime) is dev-only; it relies on the
+     *   dev-server's upgrade hook which doesn't exist in production builds.
+     *   When the HTTP proxy is on in production, realtime connects directly
+     *   to Directus, so realtime auth still requires same-domain cookies
+     *   (or a public `realtimeAuthMode`).
+     *
+     * @default { enabled: <isDev>, path: '/directus', wsPath: '/directus-ws' (dev only) }
      * @type boolean | { enabled?: boolean, path?: string, wsPath?: string }
      */
-    devProxy?: boolean | {
-        /**
-         * Enable the development proxy
-         * @default true in dev mode, false in production
-         */
-        enabled?: boolean;
-        /**
-         * Proxy path (where the proxy will be mounted)
-         * @default '/directus'
-         */
-        path?: string;
-        /**
-         * WebSocket proxy path (for realtime connections)
-         * @default '/directus-ws'
-         */
-        wsPath?: string;
-    };
+    proxy?: ProxyOption;
+    /**
+     * @deprecated Use `proxy` instead. `devProxy` will be removed in the next major release.
+     */
+    devProxy?: ProxyOption;
     /**
      * Admin Auth Token used for generating types and server functions
      * @default process.env.DIRECTUS_ADMIN_TOKEN
@@ -227,4 +246,4 @@ declare module '@nuxt/schema' {
 }
 
 export { _default as default };
-export type { DirectusUrl, ModuleOptions, ReadMeFields };
+export type { DirectusUrl, ModuleOptions, ProxyOption, ReadMeFields };

package/dist/module.json

@@ -1,6 +1,6 @@
 {
   "name": "nuxt-directus-sdk",
-  "version": "6.0.0",
+  "version": "6.1.0",
   "configKey": "directus",
   "compatibility": {
     "nuxt": "^4.0.0"

package/dist/module.mjs

@@ -8,7 +8,7 @@ import { generateTypesFromDirectus } from '../dist/runtime/types/index.js';
 import { useUrl } from '../dist/runtime/utils/index.js';
 
 const name = "nuxt-directus-sdk";
-const version = "6.0.0";
+const version = "6.1.0";
 
 const SDK_CLIENT_FACTORIES = /* @__PURE__ */ new Set([
   "createDirectus",
@@ -68,8 +68,9 @@ const module$1 = defineNuxtModule({
   },
   defaults: {
     url: import.meta.env.DIRECTUS_URL ?? "",
+    proxy: void 0,
+    // Resolved in setup based on dev mode.
     devProxy: void 0,
-    // Will be set based on dev mode in setup
     adminToken: import.meta.env.DIRECTUS_ADMIN_TOKEN ?? "",
     devtools: true,
     visualEditor: true,
@@ -109,76 +110,93 @@ const module$1 = defineNuxtModule({
         nuxtApp.options[key] = defu(nuxtApp.options[key], moduleOptions);
       }
     }
-    const devProxyConfig = typeof options.devProxy === "boolean" ? { enabled: options.devProxy } : { ...options.devProxy };
+    if (options.proxy !== void 0 && options.devProxy !== void 0) {
+      logger.warn(
+        "Both `proxy` and `devProxy` are set in directus module config. `proxy` wins; `devProxy` is ignored. Remove the deprecated `devProxy` entry."
+      );
+    } else if (options.proxy === void 0 && options.devProxy !== void 0) {
+      logger.warn(
+        "`directus.devProxy` is deprecated and will be removed in a future major release. Rename it to `directus.proxy`."
+      );
+      options.proxy = options.devProxy;
+    }
+    options.devProxy = void 0;
+    const proxyConfig = typeof options.proxy === "boolean" ? { enabled: options.proxy } : { ...options.proxy };
     const directusUrl = serverUrl || clientUrl;
-    const devProxyEnabled = devProxyConfig.enabled ?? nuxtApp.options.dev;
-    const devProxyPath = devProxyConfig.path ?? "/directus";
-    const wsProxyPath = devProxyConfig.wsPath ?? `${devProxyPath}-ws`;
+    const proxyEnabled = proxyConfig.enabled ?? nuxtApp.options.dev;
+    const proxyPath = proxyConfig.path ?? "/directus";
+    const wsProxyPath = proxyConfig.wsPath ?? `${proxyPath}-ws`;
     const wsTarget = joinURL(directusUrl, "websocket");
-    if (devProxyEnabled && nuxtApp.options.dev) {
-      loggerMessage.push(`\u{1F310} Development Proxy Mode Enabled:`);
-      loggerMessage.push(`  - URL${colors.dim(` ${devProxyPath}`)} proxies ${colors.underline(colors.green(`${directusUrl}`))}`);
-      loggerMessage.push(`  - WS URL${colors.dim(` ${wsProxyPath}`)} proxies ${colors.underline(colors.green(`${wsTarget}`))}`, "");
-      nuxtApp.options.nitro = nuxtApp.options.nitro || {};
-      nuxtApp.options.nitro.devProxy = nuxtApp.options.nitro.devProxy || {};
-      nuxtApp.options.nitro.devProxy[wsProxyPath] = {
-        target: directusUrl,
-        changeOrigin: true,
-        ws: true
-      };
-      const httpProxy = await import('http-proxy');
-      const proxy = httpProxy.default.createProxyServer({
-        target: directusUrl,
-        changeOrigin: true,
-        ws: true,
-        secure: false
-        // Allow self-signed certificates
-      });
-      proxy.on("error", (err, _req, socket) => {
-        logger.error(`WebSocket proxy error:`, err.message);
-        if (socket && !socket.destroyed) {
-          socket.end();
-        }
-      });
-      proxy.on("proxyReqWs", (proxyReq, req, _socket) => {
-        proxyReq.path = "/websocket";
-        if (req.headers.cookie) {
-          proxyReq.setHeader("cookie", req.headers.cookie);
-        }
-      });
-      nuxtApp.hook("ready", () => {
-        const originalUpgrade = nuxtApp.server?.upgrade;
-        if (nuxtApp.server) {
-          nuxtApp.server.upgrade = (req, socket, head) => {
-            if (req.url?.startsWith(wsProxyPath)) {
-              try {
-                proxy.ws(req, socket, head);
-              } catch (error) {
-                logger.error("WebSocket proxy error:", error instanceof Error ? error.message : String(error));
-                if (!socket.destroyed) {
-                  socket.destroy();
-                }
-              }
-            } else if (originalUpgrade) {
-              return originalUpgrade(req, socket, head);
-            } else if (!socket.destroyed) {
-              socket.destroy();
-            }
-          };
-        }
-      });
+    const isDev = nuxtApp.options.dev;
+    if (proxyEnabled) {
+      const headerLabel = isDev ? "\u{1F310} Development Proxy Mode Enabled:" : "\u{1F310} Proxy Mode Enabled (production):";
+      loggerMessage.push(headerLabel);
+      loggerMessage.push(`  - URL${colors.dim(` ${proxyPath}`)} proxies ${colors.underline(colors.green(`${directusUrl}`))}`);
       addServerHandler({
-        route: `${devProxyPath}/**`,
+        route: `${proxyPath}/**`,
         handler: resolver.resolve("./runtime/server/routes/directus")
       });
-      options.devProxy = {
+      if (isDev) {
+        loggerMessage.push(`  - WS URL${colors.dim(` ${wsProxyPath}`)} proxies ${colors.underline(colors.green(`${wsTarget}`))}`, "");
+        nuxtApp.options.nitro = nuxtApp.options.nitro || {};
+        nuxtApp.options.nitro.devProxy = nuxtApp.options.nitro.devProxy || {};
+        nuxtApp.options.nitro.devProxy[wsProxyPath] = {
+          target: directusUrl,
+          changeOrigin: true,
+          ws: true
+        };
+        const httpProxy = await import('http-proxy');
+        const proxy = httpProxy.default.createProxyServer({
+          target: directusUrl,
+          changeOrigin: true,
+          ws: true,
+          secure: false
+          // Allow self-signed certificates
+        });
+        proxy.on("error", (err, _req, socket) => {
+          logger.error(`WebSocket proxy error:`, err.message);
+          if (socket && !socket.destroyed) {
+            socket.end();
+          }
+        });
+        proxy.on("proxyReqWs", (proxyReq, req, _socket) => {
+          proxyReq.path = "/websocket";
+          if (req.headers.cookie) {
+            proxyReq.setHeader("cookie", req.headers.cookie);
+          }
+        });
+        nuxtApp.hook("ready", () => {
+          const originalUpgrade = nuxtApp.server?.upgrade;
+          if (nuxtApp.server) {
+            nuxtApp.server.upgrade = (req, socket, head) => {
+              if (req.url?.startsWith(wsProxyPath)) {
+                try {
+                  proxy.ws(req, socket, head);
+                } catch (error) {
+                  logger.error("WebSocket proxy error:", error instanceof Error ? error.message : String(error));
+                  if (!socket.destroyed) {
+                    socket.destroy();
+                  }
+                }
+              } else if (originalUpgrade) {
+                return originalUpgrade(req, socket, head);
+              } else if (!socket.destroyed) {
+                socket.destroy();
+              }
+            };
+          }
+        });
+      } else {
+        loggerMessage.push(`  - ${colors.yellow("WebSocket proxy is disabled in production")}; connect realtime directly to ${colors.dim(`${wsTarget}`)}`, "");
+      }
+      options.proxy = {
         enabled: true,
-        path: devProxyPath,
-        wsPath: wsProxyPath
+        path: proxyPath,
+        wsPath: isDev ? wsProxyPath : void 0
       };
-    } else if (!nuxtApp.options.dev && directusUrl) {
+    } else if (!isDev && directusUrl) {
       loggerMessage.push(`\u{1F310} Production Mode:`, `  - SDK connects directly to ${colors.dim(`${directusUrl}`)}`, "");
-      options.devProxy = false;
+      options.proxy = false;
     }
     options.directusUrl = clientUrl;
     options.serverDirectusUrl = serverUrl || clientUrl;
@@ -187,12 +205,14 @@ const module$1 = defineNuxtModule({
     nuxtApp.options.runtimeConfig.public[configKey] = defu(nuxtApp.options.runtimeConfig.public[configKey], options);
     delete nuxtApp.options.runtimeConfig.public[configKey].adminToken;
     delete nuxtApp.options.runtimeConfig.public[configKey].serverDirectusUrl;
+    delete nuxtApp.options.runtimeConfig.public[configKey].devProxy;
+    delete nuxtApp.options.runtimeConfig[configKey].devProxy;
     const imageConfig = typeof options.image === "boolean" ? { enabled: options.image } : options.image;
     const imageEnabled = imageConfig?.enabled ?? true;
     const hasNuxtImage = imageEnabled && (hasNuxtModule("@nuxt/image") || await tryResolveModule("@nuxt/image", new URL(import.meta.url)));
     if (hasNuxtImage) {
       const { setDefaultProvider, modifiers } = imageConfig || {};
-      const imageBaseUrl = devProxyEnabled ? `${devProxyPath}/assets` : useUrl(clientUrl, "assets");
+      const imageBaseUrl = proxyEnabled ? `${proxyPath}/assets` : useUrl(clientUrl, "assets");
       await registerModule("@nuxt/image", "image", {
         // Set default provider if requested
         ...setDefaultProvider && { provider: "directus" },

package/dist/rules/index.mjs

@@ -1,11 +1,40 @@
-import { i as isStandardSchema } from '../shared/nuxt-directus-sdk.CtcY1peN.mjs';
-export { c as compareRulesPayloads, d as diffRemoteRules, a as diffRules, f as fetchRemoteRules, b as fetchRemoteRulesAsJson, e as formatDiff, g as formatPushResult, h as isValidationStandardSchema, l as loadRulesFromJson, j as loadRulesFromJsonFile, k as loadRulesFromPayload, m as loadRulesFromPayloadFile, n as normalizeRules, p as pullRules, o as pushRules, r as rulesToJson, s as serializeToDirectusApi, q as serializeToJson, t as toDirectusValidation } from '../shared/nuxt-directus-sdk.CtcY1peN.mjs';
+import { i as isStandardSchema } from '../shared/nuxt-directus-sdk.sBTh4hx5.mjs';
+export { c as compareRulesPayloads, d as diffRemoteRules, g as diffRules, a as fetchRemoteRules, e as fetchRemoteRulesAsJson, f as formatDiff, b as formatPushResult, h as isValidationStandardSchema, j as loadRulesFromJson, k as loadRulesFromJsonFile, l as loadRulesFromPayload, m as loadRulesFromPayloadFile, n as normalizeRules, o as pullRules, p as pushRules, r as rulesToJson, s as serializeToDirectusApi, q as serializeToJson, t as toDirectusValidation } from '../shared/nuxt-directus-sdk.sBTh4hx5.mjs';
 import '@directus/sdk';
 
 function isPolicyReference(input) {
   return "id" in input && !("name" in input);
 }
 
+function directusValidation(validation) {
+  return validation;
+}
+function field(fieldName, rules) {
+  return { [fieldName]: rules };
+}
+function allOf(...validations) {
+  return { _and: validations };
+}
+function oneOf(...validations) {
+  return { _or: validations };
+}
+function required(fieldName) {
+  return { [fieldName]: { _nnull: true } };
+}
+function pattern(fieldName, regex) {
+  const regexStr = regex instanceof RegExp ? regex.source : regex;
+  return { [fieldName]: { _regex: regexStr } };
+}
+function length(fieldName, options) {
+  const min = options.min ?? 0;
+  const max = options.max ?? "";
+  const regex = `^.{${min},${max}}$`;
+  return { [fieldName]: { _regex: regex } };
+}
+function oneOfValues(fieldName, values) {
+  return { [fieldName]: { _in: values } };
+}
+
 function parseRulesInput(input) {
   const policyRegistry = /* @__PURE__ */ new Map();
   const policies = (input.policies ?? []).map((p) => {
@@ -88,35 +117,6 @@ function defineDirectusRules(input) {
   return parseRulesInput(input);
 }
 
-function directusValidation(validation) {
-  return validation;
-}
-function field(fieldName, rules) {
-  return { [fieldName]: rules };
-}
-function allOf(...validations) {
-  return { _and: validations };
-}
-function oneOf(...validations) {
-  return { _or: validations };
-}
-function required(fieldName) {
-  return { [fieldName]: { _nnull: true } };
-}
-function pattern(fieldName, regex) {
-  const regexStr = regex instanceof RegExp ? regex.source : regex;
-  return { [fieldName]: { _regex: regexStr } };
-}
-function length(fieldName, options) {
-  const min = options.min ?? 0;
-  const max = options.max ?? "";
-  const regex = `^.{${min},${max}}$`;
-  return { [fieldName]: { _regex: regex } };
-}
-function oneOfValues(fieldName, values) {
-  return { [fieldName]: { _in: values } };
-}
-
 function evaluateFilter(filter, item, context = {}) {
   if (!filter || Object.keys(filter).length === 0) {
     return true;

package/dist/runtime/composables/directus.js

@@ -18,10 +18,10 @@ function resolveServerUrl() {
 }
 export function useDirectusUrl(path = "") {
   const config = useRuntimeConfig();
-  const devProxy = config.public.directus.devProxy;
-  const devProxyEnabled = typeof devProxy === "object" ? devProxy.enabled === true : devProxy === true;
-  if (devProxyEnabled) {
-    const proxyPath = typeof devProxy === "object" && devProxy.path ? devProxy.path : "/directus";
+  const proxy = config.public.directus.proxy;
+  const proxyEnabled = typeof proxy === "object" ? proxy.enabled === true : proxy === true;
+  if (proxyEnabled) {
+    const proxyPath = typeof proxy === "object" && proxy.path ? proxy.path : "/directus";
     if (import.meta.client) {
       return useUrl(`${window.location.origin}${proxyPath}`, path);
     } else {
@@ -58,8 +58,16 @@ function createDirectusClient() {
     return globalThis.$fetch(urlString, { ...options, credentials: "include" });
   };
   const baseUrl = useDirectusUrl();
-  const devProxy = config.public.directus.devProxy;
-  const devProxyWsUrl = devProxy && typeof devProxy === "object" && devProxy.wsPath && import.meta.client ? `${window.location.origin}${devProxy.wsPath}` : void 0;
+  const proxy = config.public.directus.proxy;
+  const proxyEnabled = typeof proxy === "object" ? proxy.enabled === true : proxy === true;
+  const proxyWsPath = typeof proxy === "object" ? proxy.wsPath : void 0;
+  let realtimeUrl;
+  if (proxyWsPath && import.meta.client) {
+    realtimeUrl = `${window.location.origin}${proxyWsPath}`;
+  } else if (proxyEnabled && import.meta.client) {
+    const directUrl = resolveClientUrl();
+    realtimeUrl = directUrl ? `${directUrl.replace(/^http/, "ws").replace(/\/$/, "")}/websocket` : void 0;
+  }
   const directus2 = createDirectus(baseUrl, {
     globals: {
       fetch: customFetch
@@ -73,8 +81,7 @@ function createDirectusClient() {
     credentials: authConfig.credentials || "include"
   })).with(realtime({
     authMode: authConfig.realtimeAuthMode || "public",
-    // Only set custom URL if we have a proxy path (dev mode with proxy enabled)
-    ...devProxyWsUrl ? { url: devProxyWsUrl } : {}
+    ...realtimeUrl ? { url: realtimeUrl } : {}
   }));
   return directus2;
 }

package/dist/runtime/server/routes/directus-cookie.d.ts

@@ -0,0 +1,28 @@
+export interface RewriteOptions {
+    /**
+     * Whether the incoming request reaching the proxy is HTTPS.
+     * - On HTTPS (production, staging): preserve `Secure` and `SameSite=None` as
+     *   Directus set them — they're valid and load-bearing for cross-context flows.
+     * - On HTTP (localhost dev): strip `Secure` (browser rejects on http://) and
+     *   downgrade `SameSite=None` to `Lax` (browser rejects `None` without `Secure`).
+     */
+    isHttps: boolean;
+}
+/**
+ * Rewrite a single `Set-Cookie` header value from a proxied Directus response
+ * so it works on the proxy origin (e.g. `your-app.vercel.app` or `localhost`).
+ *
+ * Always:
+ *  - Strips the `Domain` attribute. The cookie binds to the response origin
+ *    instead, which is what we want — it lets the browser store the cookie on
+ *    your Nuxt app's host rather than Directus's.
+ *
+ * On HTTP only:
+ *  - Strips `Secure` (browsers reject `Secure` cookies over plain HTTP).
+ *  - Downgrades `SameSite=None` to `SameSite=Lax` (browsers reject `None`
+ *    without `Secure`).
+ *  - Adds `SameSite=Lax` if the cookie has no `SameSite` directive at all
+ *    (Safari/Chrome treat missing `SameSite` as `Lax` anyway; making it
+ *    explicit avoids future warnings).
+ */
+export declare function rewriteProxiedSetCookie(cookie: string, options: RewriteOptions): string;

package/dist/runtime/server/routes/directus-cookie.js

@@ -0,0 +1,15 @@
+export function rewriteProxiedSetCookie(cookie, options) {
+  let result = cookie.replace(/;\s*Domain=[^;]+/gi, "");
+  if (options.isHttps) {
+    return result;
+  }
+  if (/SameSite=None/i.test(result)) {
+    result = result.replace(/;\s*SameSite=None/gi, "; SameSite=Lax").replace(/;\s*Secure\s*(?=;|$)/gi, "");
+  } else {
+    result = result.replace(/;\s*Secure\s*(?=;|$)/gi, "");
+    if (!/SameSite=/i.test(result)) {
+      result += "; SameSite=Lax";
+    }
+  }
+  return result;
+}

package/dist/runtime/server/routes/directus.js

@@ -1,30 +1,24 @@
 import { useRuntimeConfig } from "#imports";
-import { defineEventHandler, getRequestURL, proxyRequest, setResponseHeaders } from "h3";
+import { defineEventHandler, getRequestIP, getRequestURL, proxyRequest, setResponseHeaders } from "h3";
 import { joinURL } from "ufo";
+import { rewriteProxiedSetCookie } from "./directus-cookie.js";
 export default defineEventHandler(async (event) => {
   const config = useRuntimeConfig();
   const serverUrl = config.directus?.serverDirectusUrl;
   const directusUrl = serverUrl || config.public.directus.directusUrl;
   const url = getRequestURL(event);
   const path = url.pathname.replace(/^\/directus/, "") + url.search;
+  const isHttps = url.protocol === "https:";
+  const clientIp = getRequestIP(event, { xForwardedFor: true });
+  const forwardedHeaders = clientIp ? { "x-forwarded-for": clientIp } : {};
   await proxyRequest(event, joinURL(directusUrl, path), {
-    // Intercept response to rewrite cookies for local development
+    headers: forwardedHeaders,
     onResponse(proxyEvent, response) {
       const setCookieHeaders = response.headers.getSetCookie?.() || [];
       if (setCookieHeaders.length > 0) {
-        const rewrittenCookies = setCookieHeaders.map((cookie) => {
-          let rewrittenCookie = cookie.replace(/;\s*Domain=[^;]+/gi, "");
-          const hasSameSiteNone = rewrittenCookie.match(/SameSite=None/i);
-          if (hasSameSiteNone) {
-            rewrittenCookie = rewrittenCookie.replace(/;\s*SameSite=None/gi, "; SameSite=Lax").replace(/;\s*Secure\s*(?=;|$)/gi, "");
-          } else {
-            rewrittenCookie = rewrittenCookie.replace(/;\s*Secure\s*(?=;|$)/gi, "");
-            if (!rewrittenCookie.match(/SameSite=/i)) {
-              rewrittenCookie += "; SameSite=Lax";
-            }
-          }
-          return rewrittenCookie;
-        });
+        const rewrittenCookies = setCookieHeaders.map(
+          (cookie) => rewriteProxiedSetCookie(cookie, { isHttps })
+        );
         setResponseHeaders(proxyEvent, {
           "set-cookie": rewrittenCookies
         });

package/dist/runtime/types/generate.js

@@ -3,7 +3,7 @@ import { typegenExtensions } from "./extensions/index.js";
 export async function generateTypesFromDirectus(url, token, prefix, options = {}) {
   const logs = [];
   const client = createDirectus(url).with(rest()).with(staticToken(token));
-  let result = null;
+  let result;
   try {
     const [collections, fields, relations] = await Promise.all([
       client.request(readCollections()),

package/dist/shared/{nuxt-directus-sdk.CtcY1peN.mjs → nuxt-directus-sdk.sBTh4hx5.mjs}

@@ -1,19 +1,5 @@
 import { readRoles, readPolicies, readPermissions, createPolicy, updatePolicy, createRole, updateRole, createPermission, updatePermission, deletePermission, deleteRole, deletePolicy } from '@directus/sdk';
 
-function isStandardSchema(value) {
-  if (typeof value !== "object" || value === null) {
-    return false;
-  }
-  if (!("~standard" in value)) {
-    return false;
-  }
-  const standard = value["~standard"];
-  if (typeof standard !== "object" || standard === null) {
-    return false;
-  }
-  return standard.version === 1;
-}
-
 function loadRulesFromJson(json) {
   const data = typeof json === "string" ? JSON.parse(json) : json;
   return {
@@ -231,6 +217,20 @@ function convertPayloadRole(role, policies, originalPolicyIds) {
   };
 }
 
+function isStandardSchema(value) {
+  if (typeof value !== "object" || value === null) {
+    return false;
+  }
+  if (!("~standard" in value)) {
+    return false;
+  }
+  const standard = value["~standard"];
+  if (typeof standard !== "object" || standard === null) {
+    return false;
+  }
+  return standard.version === 1;
+}
+
 function toDirectusValidation(schema) {
   const vendor = schema["~standard"].vendor;
   switch (vendor) {
@@ -1404,4 +1404,4 @@ function formatPushResult(result) {
   return lines.join("\n");
 }
 
-export { diffRules as a, fetchRemoteRulesAsJson as b, compareRulesPayloads as c, diffRemoteRules as d, formatDiff as e, fetchRemoteRules as f, formatPushResult as g, isValidationStandardSchema as h, isStandardSchema as i, loadRulesFromJsonFile as j, loadRulesFromPayload as k, loadRulesFromJson as l, loadRulesFromPayloadFile as m, normalizeRules as n, pushRules as o, pullRules as p, serializeToJson as q, rulesToJson as r, serializeToDirectusApi as s, toDirectusValidation as t };
+export { fetchRemoteRules as a, formatPushResult as b, compareRulesPayloads as c, diffRemoteRules as d, fetchRemoteRulesAsJson as e, formatDiff as f, diffRules as g, isValidationStandardSchema as h, isStandardSchema as i, loadRulesFromJson as j, loadRulesFromJsonFile as k, loadRulesFromPayload as l, loadRulesFromPayloadFile as m, normalizeRules as n, pullRules as o, pushRules as p, serializeToJson as q, rulesToJson as r, serializeToDirectusApi as s, toDirectusValidation as t };

package/dist/types.d.mts

@@ -1,3 +1,3 @@
 export { default } from './module.mjs'
 
-export { type DirectusUrl, type ModuleOptions, type ReadMeFields } from './module.mjs'
+export { type DirectusUrl, type ModuleOptions, type ProxyOption, type ReadMeFields } from './module.mjs'

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "nuxt-directus-sdk",
   "type": "module",
-  "version": "6.0.0",
+  "version": "6.1.0",
   "packageManager": "pnpm@10.32.1",
   "description": "A Nuxt module for Directus with built-in authentication, realtime, file management, type generation, and visual editor support.",
   "author": "Matthew Rollinson <matt@rolley.io>",
@@ -61,9 +61,9 @@
     "docs:preview": "vitepress preview docs"
   },
   "peerDependencies": {
-    "@directus/sdk": ">=21.2.2",
-    "@directus/types": ">=15.0.2",
-    "@directus/visual-editing": ">=2.0.0",
+    "@directus/sdk": ">=22.0.0",
+    "@directus/types": ">=16.0.0",
+    "@directus/visual-editing": ">=2.1.0",
     "@nuxt/image": ">=2.0.0"
   },
   "peerDependenciesMeta": {
@@ -84,9 +84,9 @@
     "ufo": "^1.6.3"
   },
   "devDependencies": {
-    "@directus/sdk": "^21.2.2",
-    "@directus/types": "^15.0.2",
-    "@directus/visual-editing": "^2.0.0",
+    "@directus/sdk": "^22.0.0",
+    "@directus/types": "^16.0.0",
+    "@directus/visual-editing": "^2.1.0",
     "@nuxt/devtools": "^3.2.4",
     "@nuxt/eslint-config": "^1.15.2",
     "@nuxt/image": "^2.0.0",