[nicu-chiciuc]

Why

The identity hub at https://auth.samebase.com now serves POST /register (RFC 7591 client registration). It no longer serves POST /hub-clients. A new preview or a new development machine cannot register its hub client until this repository uses @samebase/alchemy-convex 0.40.0. Deployments that already have a client keep it.

Summary

• Pin @samebase/alchemy-convex to 0.40.0 and update pnpm-lock.yaml.
• Name POST /register (RFC 7591) in the comment in alchemy.run.ts and in docs/deploy.md.
• No prop of IdentityHub.Client changed. The saved state keeps its shape, so no resource rename or state change is needed.
• A second commit moves fast-xml-parser from 5.11.2 to 5.12.0 in the lockfile, the fix of the advisory GHSA-474x-hrwr-fgx4 of 2026-11-10. The advisory made pnpm audit --prod fail on each branch, also on main.

Validation

• pnpm run check: format, lint, and the three TypeScript projects pass. Tests: 115 files passed, 1 skipped; 1583 tests passed, 11 skipped.
• The preview deploy of this pull request registers its hub client through POST /register.

---

^{Open in [code]smith · Need help on this PR? Tag @codesmith-bot with what you need.}

[github-actions]

pr-274 zany-dragon-868.convex.site 5685006 2026-11-11 20:14 UTC

Sign-in with google: on

zany-dragon-868