Better Convex v0.8.0-beta.40

• Move all publishable packages to the @lupinum npm scope. This is a hard
  cutover: use @lupinum/better-convex-nuxt, @lupinum/better-convex-vue, and
  @lupinum/better-convex-mcp.
• Hard-cut Better Convex to one Vue-owned client lifecycle, one integrated
  Better Auth client, identity-partitioned SSR/query state, and direct callable
  mutation/action contracts without compatibility shims.
• Make authentication opt-in, keep no-auth installs free of Better Auth, and
  expose an opaque token-free attachment for embedded Vue consumers.
• Ship provider-neutral MCP request handling on the official server, exact
  OAuth resource verification, provider-owned live access checks, and the
  experimental Vue MCP App client boundary.
• Replace repeated release rehearsals with one clean hosted source
  certification followed by immutable artifact checks, protected staging, and
  exact npm byte comparison.
• Refresh every maintained candidate lock against the final package bytes, make
  the local candidate registry compatible with the 24-hour dependency policy,
  and replace the demo's vulnerable fontless esbuild version.

Note

This first npm version was created from the exact CI-certified artifact before npm trusted publishing could be configured. npm does not provide GitHub OIDC provenance for this bootstrap publication. The protected workflow verified the registry bytes. Later versions use trusted publishing with provenance.
Bootstrap packages: @lupinum/better-convex-vue,@lupinum/better-convex-nuxt,@lupinum/better-convex-mcp