convex-better-auth@2.0.3

What’s Changed

• docs: add Blume docs site with Convex static-hosting by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/17
• docs: README hero, badges, and minimal release workflow by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/18
• docs: README status now says packages are on npm by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/20
• chore: mark convex-auth-tsconfig private by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/21
• chore: set Blume deployment site by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/22
• ci: add changesets for changelog and release automation by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/23
• feat: vendor convex better-auth adapter and support better-auth 1.7 by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/24
• docs: update README example to use vendored adapter by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/25
• ci: format vendored adapter tests and pin changesets action to v1.9.0 by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/26
• chore: version packages by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/27
• docs: add adapter to README, attribution, compatibility matrix, and migration guide by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/28
• docs: sync public status and compatibility versions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/29
• docs: convex-native auth strategy by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/30
• native: add email/password provider factory, ConvexAuthProvider, and useAuthActions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/31
• react: wire ConvexAuthProvider to Convex client setAuth; add README example by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/32
• chore: version packages by @github-actions[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/33
• ci: pass NODE_AUTH_TOKEN to changesets/action by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/34
• ci: build packages before publish; release 1.1.1 by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/35
• style: apply formatting by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/36
• feat: email verification and password reset by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/37
• changeset: email verification and password reset by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/38
• fix: include component module files in convex-auth package by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/41
• chore: remove in-repo tracking files by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/50
• milestone-2: native email verification, password reset, and session revocation by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/51
• Milestone 3: native GitHub OAuth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/52
• Milestone 4 slice: Google OAuth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/53
• Milestone 1-2 catch-up: Better Auth email/password parity by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/55
• Trigger CI on changeset release PRs by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/56
• chore: version packages by @github-actions[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/39
• Fix release workflow CI trigger filename by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/58
• Milestone 4: native TOTP 2FA with backup codes, trusted devices, and sign-in gating by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/62
• docs(agents): GitHub-only branch and PR workflow by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/63
• fix(auth): resolve milestone 2 open questions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/64
• refactor(auth): remove better-auth as a required peer of convex-auth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/65
• fix(auth): validate callback URL origins in native HTTP/OAuth routes by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/66
• fix(auth): validate sign-out callbackURL against trusted origins by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/67
• fix(auth): set session cookies on /api/auth/update-session by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/68
• fix(milestone-6): add CSRF protection to native auth HTTP routes by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/69
• feat: native AuthProvider and isAuthenticated query by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/71
• fix: drop better-auth/cookies from conformance by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/72
• fix: make convex-auth-react/native optional peers by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/73
• fix: split Better Auth testing helpers into convex-auth/better-auth/testing by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/74
• docs: ADR for #70 Convex Auth 2.0 alignment decisions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/75
• feat: signInMagicLink action with authVerifiers token store by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/76
• feat: verifyMagicLink action, HTTP route, and React client helper by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/77
• feat: native email-OTP sign-in by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/78
• fix: stop hand-rolling protocols and crypto in native runtime (#81) by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/85
• Adopt convex-helpers pagination and relationship helpers by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/87
• feat: native magic-link sign-in and React client helper by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/89
• feat: email OTP verification, reset, and change-email flows by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/80
• feat: OAuth client helpers in ConvexAuthProvider by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/90
• feat: changeEmail helper in useAuthActions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/91
• Add first-party Resend and Twilio providers by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/88
• feat: add initial token props to ConvexAuthProvider by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/92
• feat: ExpoConvexAuthProvider and convex-auth-react/client subpath by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/93
• chore: version packages by @github-actions[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/57
• refactor: split convexAuth component schema into feature modules by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/94
• fix: allow argon2 native build by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/95
• ci: make ci:publish idempotent via changeset publish by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/96
• feat: convexAuthCore component and components.core support by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/97
• feat: convexAuthOrganizations as components.core for convexAuth() by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/98
• feat: components bag for convexAuthOrganizationOperations by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/99
• feat: extract all feature-gated auth components by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/121
• chore(deps-dev): bump convex-test from 0.0.51 to 0.0.56 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/108
• chore(deps-dev): bump @types/node from 22.20.1 to 26.4.0 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/105
• chore(deps): bump lucide-react from 1.34.0 to 1.37.0 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/104
• chore(deps-dev): bump @types/semver from 7.7.1 to 7.8.0 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/102
• feat: split-component consumer fixture and docs by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/122
• chore(deps): bump zod from 4.4.3 to 4.5.4 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/101
• chore(deps-dev): bump next from 16.2.6 to 16.3.3 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/107
• chore(deps-dev): bump @changesets/cli from 2.31.1 to 3.0.1 by @dependabot[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/100
• chore: add changeset for feature-gated component split by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/123
• chore: version packages by @github-actions[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/124
• test: enforce convex-auth default entry is Better Auth-free by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/125
• feat(react): native ConvexBetterAuthClient facade over useAuthActions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/126
• feat(auth): remove better-auth from default packages and add migration docs by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/127
• refactor(auth): remove better-auth runtime artifacts from convex-auth default package by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/128
• refactor(auth): rename resolveLinkedBetterAuthMcpSession to resolveLinkedMcpSession by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/129
• refactor(auth): remove betterAuthUserId from native MCP public API and component schema by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/130
• refactor(auth): delete orphaned compat/convex/mcp migration runtime by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/131
• refactor(auth): remove non-migration Better Auth branding from native auth package by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/132
• refactor(auth): rotate OAuth token encryption salt away from better-auth branding by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/133
• test(react): add packaging guard to keep better-auth out of convex-auth-react dist by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/134
• test(react-native): add packaging guard to keep better-auth out of dist by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/135
• chore: version packages by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/136
• auth: default auth-md identity provider to convex-auth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/144
• feat(auth): one-time migration from Better Auth to native convex-auth tables by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/149
• docs: align password hashing strategy with Node-free @noble/hashes/argon2 by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/150
• fix(auth): preserve absolute URLs in OAuth error redirects and map provider errors by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/151
• test(bridge): bundle-size and memory regression tests by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/142
• chore(better-auth): mark bridge packages as migration-only by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/141
• auth: default auth-md identity provider to convex-auth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/146
• docs: update convex-native-auth-strategy with current runtime status by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/147
• docs: lead the docs index with the convex-auth native path by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/143
• docs: ADR for one-time Better Auth migration by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/148
• chore: add changeset for feature-gated component split by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/152
• chore: version packages by @github-actions[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/145
• Add native HIBP breached-password screening to convex-auth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/153
• feat(auth): use @convex-dev/rate-limiter for native sign-in rate limiting by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/155
• chore(knip): clean deps, add knip config, fix dead exports by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/159
• fix(auth): align preflight with the actual convexAuth API by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/160
• docs: align README, compatibility, and strategy versions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/164
• devin: add convex-auth agent skill by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/163
• docs: sync compatibility matrix with package versions by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/162
• feat: runnable examples/react consumer wired to live convex-auth deployment by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/165
• docs: add spec for one-time Better Auth migration CLI by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/157
• fix(auth): add POST /api/auth/sign-in/social route and fix social-login conformance by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/166
• fix(auth): make preflight discover web package in examples/react layout by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/167
• feat(auth): live webhook delivery proof using Convex scheduler and HTTP sink by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/169
• feat(auth): native multi-provider CAPTCHA support for convex-auth by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/168
• Make the Better Auth migration run end-to-end against a live deployment by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/170
• docs: add one-shot Better Auth migration CLI section by @shlomokabareti in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/171
• chore: version packages by @github-actions[bot] in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/154

New Contributors

• @github-actions[bot] made their first contribution in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/33
• @dependabot[bot] made their first contribution in https://github.com/shlomokabareti/convex-better-auth-2.0/pull/108

Full Changelog: https://github.com/shlomokabareti/convex-better-auth-2.0/compare/v0.1.0-alpha.0...convex-better-auth@2.0.3