From 031d7239d2c8252323d43721d4081ce922e6373f Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Tue, 4 Aug 2026 15:57:54 +1000
Subject: [PATCH 01/19] test: cover non-breaking script lifecycle

---
 test/unit/use-script-lifecycle.test.ts | 214 +++++++++++++++++++++++++
 vitest.config.ts                       |   2 +
 2 files changed, 216 insertions(+)
 create mode 100644 test/unit/use-script-lifecycle.test.ts

diff --git a/test/unit/use-script-lifecycle.test.ts b/test/unit/use-script-lifecycle.test.ts
new file mode 100644
index 00000000..ec31e7e5
--- /dev/null
+++ b/test/unit/use-script-lifecycle.test.ts
@@ -0,0 +1,214 @@
+/**
+ * @vitest-environment happy-dom
+ */
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { ref } from 'vue'
+import { useScript } from '../../packages/script/src/runtime/composables/useScript'
+
+const mocks = vi.hoisted(() => {
+  const baseRemove = vi.fn(() => true)
+  const baseLoad = vi.fn(() => Promise.resolve({}))
+  const shared = {
+    id: 'https://example.com/sdk.js',
+    status: { value: 'awaitingLoad' },
+    _statusRef: { value: 'awaitingLoad' },
+    signal: new AbortController().signal,
+    entry: undefined,
+    load: baseLoad,
+    remove: baseRemove,
+  }
+  const createHandle = (target = shared) => {
+    return new Proxy(target, {
+      get(_, key, receiver) {
+        return Reflect.get(_, key === 'status' ? '_statusRef' : key, receiver)
+      },
+    })
+  }
+  const head = {
+    hooks: {
+      hook: vi.fn(() => vi.fn()),
+    },
+  }
+  const appHookCallbacks = new Map<string, (() => void)[]>()
+  const app = {
+    $scripts: {} as Record<string, any>,
+    _scripts: {} as Record<string, any>,
+    hooks: {
+      hook: vi.fn((name: string, callback: () => void) => {
+        const callbacks = appHookCallbacks.get(name) || []
+        callbacks.push(callback)
+        appHookCallbacks.set(name, callbacks)
+        return vi.fn()
+      }),
+      callHook: vi.fn(),
+    },
+  }
+  return {
+    app,
+    appHookCallbacks,
+    baseLoad,
+    baseRemove,
+    createHandle,
+    head,
+    shared,
+    unheadUseScript: vi.fn(createHandle),
+  }
+})
+
+vi.mock('@unhead/vue/scripts', () => ({
+  useScript: mocks.unheadUseScript,
+}))
+
+vi.mock('nuxt/app', () => ({
+  injectHead: () => mocks.head,
+  onNuxtReady: vi.fn(),
+  useHead: vi.fn(),
+  useNuxtApp: () => mocks.app,
+  useRuntimeConfig: () => ({
+    public: {
+      'nuxt-scripts': { defaultScriptOptions: {} },
+      'nuxt-scripts-devtools': {},
+    },
+  }),
+}))
+
+vi.mock('#build/nuxt-scripts-trigger-resolver', () => ({
+  resolveTrigger: vi.fn(),
+}))
+
+describe('useScript shared instance lifecycle', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    mocks.app.$scripts = {}
+    mocks.app._scripts = {}
+    mocks.appHookCallbacks.clear()
+    Object.assign(mocks.shared, {
+      id: 'https://example.com/sdk.js',
+      status: { value: 'awaitingLoad' },
+      _statusRef: { value: 'awaitingLoad' },
+      signal: new AbortController().signal,
+      entry: undefined,
+      load: mocks.baseLoad,
+      remove: mocks.baseRemove,
+    })
+    delete (mocks.shared as any).reload
+    delete (mocks.shared as any).toJSON
+    mocks.unheadUseScript.mockImplementation(() => mocks.createHandle())
+  })
+
+  it('decorates a shared Unhead instance only once and removes its registry entry', () => {
+    const first = useScript('https://example.com/sdk.js')
+    const decoratedRemove = first.remove
+    const second = useScript('https://example.com/sdk.js')
+
+    // Unhead still sees both callers so Vue can bind their callbacks to the
+    // active component scope.
+    expect(mocks.unheadUseScript).toHaveBeenCalledTimes(2)
+    expect(second).not.toBe(first)
+    expect(second.remove).toBe(decoratedRemove)
+    expect(second.reload).toBe(first.reload)
+    const appInstance = mocks.app.$scripts['https://example.com/sdk.js']
+    expect(appInstance).toBe(first)
+    expect(appInstance.remove).toBe(decoratedRemove)
+    expect(mocks.app.hooks.hook).toHaveBeenCalledTimes(1)
+    expect(mocks.unheadUseScript.mock.calls[0]?.[1]).not.toHaveProperty('scope')
+
+    expect(first.remove()).toBe(true)
+    expect(mocks.baseRemove).toHaveBeenCalledOnce()
+    expect(mocks.app.$scripts).not.toHaveProperty('https://example.com/sdk.js')
+  })
+
+  it('preserves shared identity with older Unhead versions', () => {
+    mocks.unheadUseScript.mockReturnValue(mocks.shared as any)
+
+    const first = useScript('https://example.com/sdk.js')
+    const second = useScript('https://example.com/sdk.js')
+
+    expect(second).toBe(first)
+    expect(mocks.app.$scripts['https://example.com/sdk.js']).toBe(first)
+  })
+
+  it('releases event context added by older Vue integrations', () => {
+    mocks.unheadUseScript.mockImplementation((_input, options) => {
+      options.eventContext = { component: true }
+      return mocks.createHandle()
+    })
+
+    useScript('https://example.com/sdk.js')
+
+    expect(mocks.unheadUseScript.mock.calls[0]?.[1]).not.toHaveProperty('eventContext')
+  })
+
+  it('runs provider cleanup wrappers during app teardown', () => {
+    const instance = useScript('https://example.com/sdk.js')
+    const remove = instance.remove
+    const providerRemove = vi.fn(() => remove())
+    instance.remove = providerRemove
+
+    mocks.appHookCallbacks.get('app:unmount')?.[0]?.()
+
+    expect(providerRemove).toHaveBeenCalledOnce()
+    expect(mocks.baseRemove).toHaveBeenCalledOnce()
+  })
+
+  it('keeps the public status ref live across reloads without requesting a scope', async () => {
+    const reloadedStatus = ref('loading')
+    const reloadedLoad = vi.fn(() => {
+      reloadedStatus.value = 'loaded'
+      return Promise.resolve({ ready: true })
+    })
+    const reloaded = {
+      id: 'reload-script',
+      _statusRef: reloadedStatus,
+      status: 'loading',
+      entry: { dispose: vi.fn() },
+      load: reloadedLoad,
+      remove: vi.fn(() => true),
+    }
+    mocks.unheadUseScript
+      .mockImplementationOnce(() => mocks.createHandle())
+      .mockImplementationOnce(() => mocks.createHandle(reloaded as any))
+    const instance = useScript('https://example.com/sdk.js')
+    const status = instance.status
+
+    await expect((instance as any).reload()).resolves.toEqual({ ready: true })
+
+    expect(instance.status).toBe(status)
+    expect(status.value).toBe('loaded')
+    expect(instance.entry).toBe(reloaded.entry)
+    expect(reloadedLoad).toHaveBeenCalledOnce()
+    expect(mocks.unheadUseScript.mock.calls[1]?.[1]).not.toHaveProperty('scope')
+  })
+
+  it('releases event context added while reloading with older Unhead versions', async () => {
+    const reloaded = {
+      id: 'reload-script',
+      _statusRef: ref('loading'),
+      entry: undefined,
+      load: vi.fn(() => Promise.resolve({ ready: true })),
+      remove: vi.fn(() => true),
+    }
+    mocks.unheadUseScript
+      .mockImplementationOnce(() => mocks.createHandle())
+      .mockImplementationOnce((_input, options) => {
+        options.eventContext = { component: true }
+        return mocks.createHandle(reloaded as any)
+      })
+    const instance = useScript('https://example.com/sdk.js')
+
+    await (instance as any).reload()
+
+    expect(mocks.unheadUseScript.mock.calls[1]?.[1]).not.toHaveProperty('eventContext')
+  })
+
+  it('does not bypass validation when reload is called', async () => {
+    const validationError = { issues: [{ message: 'invalid test options' }] }
+    const instance = useScript('https://example.com/sdk.js', {
+      _validate: () => validationError,
+    } as any)
+
+    await expect((instance as any).reload()).rejects.toBe(validationError)
+    expect(mocks.baseRemove).not.toHaveBeenCalled()
+  })
+})
+
diff --git a/vitest.config.ts b/vitest.config.ts
index f2a03b26..fece8f8d 100644
--- a/vitest.config.ts
+++ b/vitest.config.ts
@@ -23,6 +23,7 @@ export default defineConfig({
       defineProject({
         resolve: {
           alias: {
+            '@unhead/vue/scripts': new URL('./packages/script/node_modules/@unhead/vue/dist/scripts.mjs', import.meta.url).pathname,
             '#nuxt-scripts/h3': 'h3',
             '#nuxt-scripts/nitro': new URL('./test/unit/__mocks__/empty.ts', import.meta.url).pathname,
             // Virtual emitted by the Nuxt module at build time; unit tests
@@ -30,6 +31,7 @@ export default defineConfig({
             // import must first resolve to *something* the bundler accepts.
             // The alias points at an empty placeholder.
             '#build/nuxt-scripts-snippets': new URL('./test/unit/__mocks__/empty.ts', import.meta.url).pathname,
+            '#build/nuxt-scripts-trigger-resolver': new URL('./test/unit/__mocks__/empty.ts', import.meta.url).pathname,
           },
         },
         test: {

From 6877f4c451f832118681f8e4096ce12e9bba2a54 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Thu, 16 Jul 2026 02:26:47 +1000
Subject: [PATCH 02/19] perf: memory leak hardening

---
 packages/devtools-app/composables/rpc.ts      | 107 +++++++++---
 packages/devtools-app/composables/state.ts    |  35 +++-
 packages/devtools-app/utils/fetch.ts          |   7 +-
 packages/script/src/devtools.ts               |  46 +++++-
 packages/script/src/module.ts                 |  20 +++
 .../GoogleMaps/ScriptGoogleMaps.vue           | 109 ++++++++++---
 .../GoogleMaps/useGoogleMapsResource.ts       |  55 ++++++-
 .../runtime/components/ScriptCarbonAds.vue    |  14 +-
 .../src/runtime/components/ScriptCrisp.vue    |   7 +-
 .../src/runtime/components/ScriptIntercom.vue |   7 +-
 .../runtime/components/ScriptLemonSqueezy.vue |  11 +-
 .../components/ScriptPayPalButtons.vue        |   7 +-
 .../components/ScriptPayPalMessages.vue       |   4 +
 .../components/ScriptStripePricingTable.vue   |   4 +-
 .../runtime/components/ScriptVimeoPlayer.vue  |  13 +-
 .../src/runtime/composables/useScript.ts      | 152 +++++++++++++-----
 .../runtime/composables/useScriptEventPage.ts |  39 +++--
 .../useScriptTriggerIdleTimeout.ts            |  30 +++-
 .../useScriptTriggerInteraction.ts            |  37 +++--
 .../useScriptTriggerServiceWorker.ts          |  42 ++---
 .../devtools-standalone-bridge.client.ts      |  31 +++-
 .../script/src/runtime/npm-script-stub.ts     |   8 +-
 .../script/src/runtime/registry/speedcurve.ts |  35 +++-
 .../src/runtime/registry/usercentrics.ts      |  61 +++++--
 .../src/runtime/registry/youtube-player.ts    |  13 +-
 .../src/runtime/server/instagram-embed.ts     |   2 +
 .../src/runtime/server/proxy-handler.ts       | 120 ++++++++++++--
 .../src/runtime/server/utils/cache-config.ts  |  10 ++
 .../runtime/server/utils/cached-upstream.ts   |   3 +
 .../src/runtime/utils/after-next-paint.ts     |  20 ++-
 test/unit/google-maps-lifecycle.test.ts       |  24 +++
 test/unit/speedcurve-after-next-paint.test.ts |  18 +++
 32 files changed, 905 insertions(+), 186 deletions(-)
 create mode 100644 packages/script/src/runtime/server/utils/cache-config.ts

diff --git a/packages/devtools-app/composables/rpc.ts b/packages/devtools-app/composables/rpc.ts
index 1dc4e930..651bf0cb 100644
--- a/packages/devtools-app/composables/rpc.ts
+++ b/packages/devtools-app/composables/rpc.ts
@@ -4,7 +4,7 @@ import type { $Fetch } from 'nitropack/types'
 import type { Ref } from 'vue'
 import { onDevtoolsClientConnected } from '@nuxt/devtools-kit/iframe-client'
 import { ofetch } from 'ofetch'
-import { onScopeDispose, ref, watch, watchEffect } from 'vue'
+import { ref, watch, watchEffect } from 'vue'
 import { firstPartyData, isConnected, path, query, refreshSources, standaloneUrl, syncScripts, version } from './state'
 
 export const appFetch: Ref<$Fetch | undefined> = ref()
@@ -12,7 +12,7 @@ export const devtools: Ref<NuxtDevtoolsClient | undefined> = ref()
 export const colorMode: Ref<'dark' | 'light'> = ref('dark')
 
 export interface DevtoolsConnectionOptions {
-  onConnected?: (client: any) => void
+  onConnected?: (client: any) => void | (() => void)
   onRouteChange?: (route: any) => void
 }
 
@@ -27,20 +27,33 @@ const STANDALONE_POLL_INTERVAL = 2000
  * - **Embedded**: running inside Nuxt DevTools iframe (automatic)
  * - **Standalone**: running directly in a browser tab with a manual dev server URL
  */
-export function useDevtoolsConnection(options: DevtoolsConnectionOptions = {}): void {
+export function useDevtoolsConnection(options: DevtoolsConnectionOptions = {}): () => void {
   const inIframe = window.parent !== window
+  let disposed = false
+  const connectionCleanups: Array<() => void> = []
+
+  const cleanupConnection = () => {
+    connectionCleanups.splice(0).forEach(cleanup => cleanup())
+    devtools.value = undefined
+  }
 
   // Embedded mode: connect via devtools-kit iframe client
+  let stopClientConnection = () => {}
   if (inIframe) {
-    onDevtoolsClientConnected(async (client) => {
+    stopClientConnection = onDevtoolsClientConnected((client) => {
+      if (disposed)
+        return
+      cleanupConnection()
       isConnected.value = true
       // @ts-expect-error untyped
       appFetch.value = client.host.app.$fetch
-      watchEffect(() => {
+      connectionCleanups.push(watchEffect(() => {
         colorMode.value = client.host.app.colorMode.value
-      })
+      }))
       devtools.value = client.devtools
-      options.onConnected?.(client)
+      const cleanupConnected = options.onConnected?.(client)
+      if (cleanupConnected)
+        connectionCleanups.push(cleanupConnected)
 
       if (options.onRouteChange) {
         const $route = client.host.nuxt.vueApp.config.globalProperties?.$route
@@ -48,22 +61,44 @@ export function useDevtoolsConnection(options: DevtoolsConnectionOptions = {}):
         const removeAfterEach = client.host.nuxt.$router.afterEach((route: any) => {
           options.onRouteChange!(route)
         })
-        // Clean up when devtools client disconnects
-        // @ts-expect-error app:unmount exists at runtime but is not in RuntimeNuxtHooks
-        client.host.nuxt.hook('app:unmount', removeAfterEach)
+        connectionCleanups.push(removeAfterEach)
       }
-    })
+      // @ts-expect-error app:unmount exists at runtime but is not in RuntimeNuxtHooks
+      connectionCleanups.push(client.host.nuxt.hook('app:unmount', cleanupConnection))
+    }) || (() => {})
   }
 
   // Standalone mode: create appFetch from manually entered URL and poll for state
   let pollTimer: ReturnType<typeof setInterval> | undefined
+  let pollController: AbortController | undefined
 
-  watch(() => standaloneUrl.value, (url) => {
-    // Clean up previous polling
+  const stopPolling = () => {
     if (pollTimer) {
       clearInterval(pollTimer)
       pollTimer = undefined
     }
+    pollController?.abort()
+    pollController = undefined
+  }
+
+  const poll = async (url: string) => {
+    // A slow/unreachable app must not accumulate overlapping interval requests.
+    if (pollController)
+      return
+    const controller = new AbortController()
+    pollController = controller
+    try {
+      await pollStandaloneState(url, controller.signal)
+    }
+    finally {
+      if (pollController === controller)
+        pollController = undefined
+    }
+  }
+
+  const stopStandaloneWatch = watch(() => standaloneUrl.value, (url) => {
+    // Clean up previous polling
+    stopPolling()
 
     if (url && !isConnected.value) {
       appFetch.value = ofetch.create({ baseURL: url }) as unknown as $Fetch
@@ -71,22 +106,32 @@ export function useDevtoolsConnection(options: DevtoolsConnectionOptions = {}):
       colorMode.value = window.matchMedia('(prefers-color-scheme: dark)').matches ? 'dark' : 'light'
       refreshSources()
       // Start polling the standalone API for script state
-      pollStandaloneState(url)
-      pollTimer = setInterval(pollStandaloneState, STANDALONE_POLL_INTERVAL, url)
+      void poll(url)
+      pollTimer = setInterval(() => void poll(url), STANDALONE_POLL_INTERVAL)
     }
   }, { immediate: true })
 
-  onScopeDispose(() => {
-    if (pollTimer) {
-      clearInterval(pollTimer)
-    }
-  })
+  return () => {
+    if (disposed)
+      return
+    disposed = true
+    stopPolling()
+    stopStandaloneWatch()
+    stopClientConnection()
+    cleanupConnection()
+    appFetch.value = undefined
+    isConnected.value = false
+  }
 }
 
-async function pollStandaloneState(baseUrl: string) {
+async function pollStandaloneState(baseUrl: string, signal: AbortSignal) {
+  const timeoutController = new AbortController()
+  const timeout = setTimeout(() => timeoutController.abort(), 3000)
+  const onAbort = () => timeoutController.abort()
+  signal.addEventListener('abort', onAbort, { once: true })
   try {
     const res = await fetch(`${baseUrl}${STANDALONE_API_PATH}`, {
-      signal: AbortSignal.timeout(3000),
+      signal: timeoutController.signal,
     })
     if (!res.ok)
       return
@@ -106,15 +151,29 @@ async function pollStandaloneState(baseUrl: string) {
   catch {
     // Standalone API not available or not enabled, silently ignore
   }
+  finally {
+    clearTimeout(timeout)
+    signal.removeEventListener('abort', onAbort)
+  }
 }
 
-useDevtoolsConnection({
+const disposeConnection = useDevtoolsConnection({
   onConnected: (client) => {
-    client.host.nuxt.hooks.hook('scripts:updated', (ctx: any) => {
+    const stopScriptsHook = client.host.nuxt.hooks.hook('scripts:updated', (ctx: any) => {
       syncScripts(ctx.scripts)
     })
     version.value = client.host.nuxt.$config.public['nuxt-scripts'].version
     firstPartyData.value = client.host.nuxt.$config.public['nuxt-scripts-devtools'] || null
     syncScripts(client.host.nuxt._scripts || {})
+    return stopScriptsHook
   },
 })
+
+function disposeModuleConnection() {
+  window.removeEventListener('beforeunload', disposeModuleConnection)
+  disposeConnection()
+}
+
+window.addEventListener('beforeunload', disposeModuleConnection, { once: true })
+if (import.meta.hot)
+  import.meta.hot.dispose(disposeModuleConnection)
diff --git a/packages/devtools-app/composables/state.ts b/packages/devtools-app/composables/state.ts
index 3275c6b8..79a37ce9 100644
--- a/packages/devtools-app/composables/state.ts
+++ b/packages/devtools-app/composables/state.ts
@@ -84,6 +84,7 @@ export const version = ref<string | null>(null)
 export const firstPartyData = ref<FirstPartyDevtoolsData | null>(null)
 
 let _lastSyncedScripts: any[] | null = null
+const scriptFetches = new Map<string, AbortController>()
 
 export async function initRegistry() {
   scriptRegistry.value = await _registryPromise
@@ -107,9 +108,16 @@ export function syncScripts(_scripts: any[]) {
   if (!_scripts || typeof _scripts !== 'object') {
     _lastSyncedScripts = null
     scripts.value = {}
+    pruneScriptState(new Set())
     return
   }
   _lastSyncedScripts = _scripts
+  const activeSources = new Set(
+    Object.values(_scripts)
+      .map((script: any) => script?.src)
+      .filter((src): src is string => typeof src === 'string' && !!src),
+  )
+  pruneScriptState(activeSources)
   scripts.value = Object.fromEntries(
     Object.entries({ ..._scripts })
       .map(([key, script]: [string, any]) => {
@@ -124,9 +132,13 @@ export function syncScripts(_scripts: any[]) {
           script.loadTime = msToHumanReadable(loadedAt - loadingAt)
         const scriptSizeKey = script.src
         // Skip size fetching in standalone mode (cross-origin fetch blocked by CORS)
-        if (!scriptSizes[scriptSizeKey] && script.src && !isStandalone.value) {
-          fetchScript(script.src)
+        if (!scriptSizes[scriptSizeKey] && !scriptErrors[scriptSizeKey] && script.src && !isStandalone.value && !scriptFetches.has(scriptSizeKey)) {
+          const controller = new AbortController()
+          scriptFetches.set(scriptSizeKey, controller)
+          fetchScript(script.src, controller.signal)
             .then((res) => {
+              if (controller.signal.aborted || !activeSources.has(scriptSizeKey))
+                return
               if (res.size) {
                 scriptSizes[scriptSizeKey] = res.size
                 script.size = res.size
@@ -136,12 +148,31 @@ export function syncScripts(_scripts: any[]) {
                 script.error = scriptErrors[scriptSizeKey]
               }
             })
+            .finally(() => {
+              if (scriptFetches.get(scriptSizeKey) === controller)
+                scriptFetches.delete(scriptSizeKey)
+            })
         }
         return [key, script]
       }),
   )
 }
 
+function pruneScriptState(activeSources: Set<string>) {
+  for (const [src, controller] of scriptFetches) {
+    if (!activeSources.has(src)) {
+      controller.abort()
+      scriptFetches.delete(src)
+    }
+  }
+  for (const state of [scriptSizes, scriptErrors, scriptTabs]) {
+    for (const src of Object.keys(state)) {
+      if (!activeSources.has(src))
+        delete state[src]
+    }
+  }
+}
+
 // Script status helper (handles both reactive refs from embedded mode and plain strings from standalone)
 export function getScriptStatus(script: any): string {
   const status = script?.$script?.status
diff --git a/packages/devtools-app/utils/fetch.ts b/packages/devtools-app/utils/fetch.ts
index 3d70db82..47d6d356 100644
--- a/packages/devtools-app/utils/fetch.ts
+++ b/packages/devtools-app/utils/fetch.ts
@@ -1,5 +1,8 @@
-export async function fetchScript(url: string) {
-  const compressedResponse = await fetch(url, { headers: { 'Accept-Encoding': 'gzip' } }).catch((err) => {
+export async function fetchScript(url: string, signal?: AbortSignal) {
+  const compressedResponse = await fetch(url, {
+    headers: { 'Accept-Encoding': 'gzip' },
+    signal,
+  }).catch((err) => {
     return {
       size: null,
       error: err,
diff --git a/packages/script/src/devtools.ts b/packages/script/src/devtools.ts
index 5a78d289..5e8a3fb0 100644
--- a/packages/script/src/devtools.ts
+++ b/packages/script/src/devtools.ts
@@ -7,6 +7,7 @@ import { createResolver, extendViteConfig } from '@nuxt/kit'
 const DEVTOOLS_UI_ROUTE = '/__nuxt-scripts'
 const DEVTOOLS_UI_LOCAL_PORT = 3030
 const DEVTOOLS_API_STATE_ROUTE = '/__nuxt-scripts-api/state'
+const DEVTOOLS_API_MAX_BODY_SIZE = 2 * 1024 * 1024
 
 export interface DevtoolsOptions {
   standalone?: boolean
@@ -82,10 +83,41 @@ function setupStandaloneApi(nuxt: Nuxt) {
 
       if (req.method === 'POST') {
         let body = ''
-        req.on('data', (chunk: Buffer) => {
+        let size = 0
+        let finished = false
+
+        function cleanup() {
+          req.off('data', onData)
+          req.off('end', onEnd)
+          req.off('aborted', onAborted)
+          req.off('error', onAborted)
+        }
+        function onAborted() {
+          finished = true
+          body = ''
+          cleanup()
+        }
+        function onData(chunk: Buffer) {
+          if (finished)
+            return
+          size += chunk.byteLength
+          if (size > DEVTOOLS_API_MAX_BODY_SIZE) {
+            finished = true
+            body = ''
+            cleanup()
+            // Drain the remainder so the keep-alive connection can be reused.
+            req.resume()
+            res.statusCode = 413
+            res.end('payload too large')
+            return
+          }
           body += chunk.toString()
-        })
-        req.on('end', () => {
+        }
+        function onEnd() {
+          if (finished)
+            return
+          finished = true
+          cleanup()
           try {
             const data = JSON.parse(body)
             scriptsState = { ...data, updatedAt: Date.now() }
@@ -96,7 +128,13 @@ function setupStandaloneApi(nuxt: Nuxt) {
             res.statusCode = 400
             res.end('invalid json')
           }
-        })
+          body = ''
+        }
+
+        req.on('data', onData)
+        req.on('end', onEnd)
+        req.on('aborted', onAborted)
+        req.on('error', onAborted)
         return
       }
 
diff --git a/packages/script/src/module.ts b/packages/script/src/module.ts
index 56be2ac1..c57b82c0 100644
--- a/packages/script/src/module.ts
+++ b/packages/script/src/module.ts
@@ -42,6 +42,12 @@ import { generateInterceptPluginContents } from './plugins/intercept'
 import { NuxtScriptBundleTransformer } from './plugins/transform'
 import { aliasProxyValue, buildDomainAliasMap, invertAliasMap, isSafeAliasSegment } from './proxy-alias'
 import { buildProxyConfigsFromRegistry, generatePartytownResolveUrl, getPartytownForwards, registry, resolveCapabilities } from './registry'
+import {
+  NUXT_SCRIPTS_CACHE_BASE,
+  NUXT_SCRIPTS_CACHE_MAX_ENTRIES,
+  NUXT_SCRIPTS_CACHE_MAX_ENTRY_SIZE,
+  NUXT_SCRIPTS_CACHE_MAX_SIZE,
+} from './runtime/server/utils/cache-config'
 import { registerTypeTemplates, templatePlugin, templateTriggerResolver } from './templates'
 import { validateScriptsEnvVars } from './validate-env'
 
@@ -1096,6 +1102,20 @@ export default defineNuxtModule<ModuleOptions>({
       }
     }
 
+    if (Object.keys(enabledEndpoints).length > 0) {
+      const nitroOptions = nuxt.options.nitro as any
+      nitroOptions.storage ||= {}
+      // Nitro's default memory storage has no eviction policy. Keep proxy and
+      // embed caches bounded unless the application supplied a dedicated
+      // persistent/distributed mount for this namespace.
+      nitroOptions.storage[NUXT_SCRIPTS_CACHE_BASE] ||= {
+        driver: 'lru-cache',
+        max: NUXT_SCRIPTS_CACHE_MAX_ENTRIES,
+        maxSize: NUXT_SCRIPTS_CACHE_MAX_SIZE,
+        maxEntrySize: NUXT_SCRIPTS_CACHE_MAX_ENTRY_SIZE,
+      }
+    }
+
     // Publish enabled endpoints to client for component opt-in checks
     nuxt.options.runtimeConfig.public['nuxt-scripts'] = defu(
       { endpoints: enabledEndpoints },
diff --git a/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue b/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue
index 702e8c02..292f0354 100644
--- a/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue
+++ b/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue
@@ -152,7 +152,7 @@ export interface ScriptGoogleMapsSlots {
 <script lang="ts" setup>
 import { defu } from 'defu'
 import { tryUseNuxtApp, useHead, useRuntimeConfig } from 'nuxt/app'
-import { computed, nextTick, onBeforeUnmount, onMounted, provide, ref, shallowRef, toRaw, useAttrs, useTemplateRef, watch } from 'vue'
+import { computed, nextTick, onBeforeUnmount, onMounted, onUnmounted, provide, ref, shallowRef, toRaw, useAttrs, useTemplateRef, watch } from 'vue'
 import { useScriptTriggerElement } from '#nuxt-scripts/composables/useScriptTriggerElement'
 import { useScriptGoogleMaps } from '#nuxt-scripts/registry/google-maps'
 import { scriptRuntimeConfig, scriptsPrefix } from '#nuxt-scripts/utils'
@@ -197,6 +197,8 @@ const currentColorScheme = computed<google.maps.ColorScheme | undefined>(() => {
 })
 
 const mapsApi = shallowRef<typeof google.maps | undefined>()
+const lifecycleController = new AbortController()
+let isUnmounted = false
 
 if (import.meta.dev) {
   if (!apiKey)
@@ -333,6 +335,7 @@ async function resolveQueryToLatLng(query: string) {
   if (endpoints?.googleMaps) {
     const data = await $fetch(`${scriptsPrefix()}/proxy/google-maps-geocode`, {
       params: { address: query },
+      signal: lifecycleController.signal,
     }) as GoogleMapsGeocodeProxyResponse
     if (data.status === 'OK' && data.results?.[0]?.geometry?.location) {
       const loc = data.results[0].geometry.location
@@ -347,7 +350,7 @@ async function resolveQueryToLatLng(query: string) {
   // Map instance: resolveQueryToLatLng is publicly exposed and may be called
   // before onLoaded has populated map.value, so constructing PlacesService
   // without map would throw.
-  await waitForMapsReady({ mapsApi, map, status, load })
+  await waitForMapsReady({ mapsApi, map, status, load, signal: lifecycleController.signal })
 
   const placesService = new mapsApi.value!.places.PlacesService(map.value!)
   const result = await new Promise<google.maps.LatLng>((resolve, reject) => {
@@ -382,12 +385,39 @@ function importLibrary(key: string): Promise<any>
 function importLibrary<T>(key: string): Promise<T> {
   if (libraries.has(key))
     return libraries.get(key)
-  const p = mapsApi.value?.importLibrary(key) || new Promise((resolve) => {
-    const stop = watch(mapsApi, (api) => {
+  if (lifecycleController.signal.aborted) {
+    const error = new Error(`Google Maps library import "${key}" was aborted`)
+    error.name = 'AbortError'
+    return Promise.reject(error)
+  }
+  const p = mapsApi.value?.importLibrary(key) || new Promise((resolve, reject) => {
+    let stop = () => {}
+    let settled = false
+    const cleanup = () => {
+      stop()
+      lifecycleController.signal.removeEventListener('abort', onAbort)
+    }
+    const settle = (fn: () => void) => {
+      if (settled)
+        return
+      settled = true
+      cleanup()
+      fn()
+    }
+    const onAbort = () => settle(() => {
+      const error = new Error(`Google Maps library import "${key}" was aborted`)
+      error.name = 'AbortError'
+      reject(error)
+    })
+
+    if (lifecycleController.signal.aborted) {
+      onAbort()
+      return
+    }
+    lifecycleController.signal.addEventListener('abort', onAbort, { once: true })
+    stop = watch(mapsApi, (api) => {
       if (api) {
-        const p = api.importLibrary(key)
-        resolve(p)
-        stop()
+        settle(() => resolve(api.importLibrary(key)))
       }
     }, { immediate: true })
   })
@@ -475,7 +505,9 @@ onMounted(() => {
     // guard skips the redundant setCenter.
     if (center)
       centerOverride.value = { lat: center.lat(), lng: center.lng() }
-    map.value.unbindAll()
+    const previousMap = map.value
+    mapsApi.value.event.clearInstanceListeners(previousMap)
+    previousMap.unbindAll()
     map.value = undefined
     slotMounted.value = false
     // Clear any DOM children left by the previous Map instance — Google Maps
@@ -510,31 +542,48 @@ onMounted(() => {
   watch([() => getCenterWatchKey(props.center), () => getCenterWatchKey(props.mapOptions?.center)], () => {
     centerOverride.value = undefined
   })
-  watch([controlledCenterKey, isMapReady, map], async () => {
-    if (!map.value) {
+  watch([controlledCenterKey, isMapReady, map], async (_, __, onCleanup) => {
+    const currentMap = map.value
+    if (!currentMap) {
       return
     }
+    let stale = false
+    onCleanup(() => {
+      stale = true
+    })
     let center = toRaw(options.value.center)
     if (center) {
       if (isLocationQuery(center) && isMapReady.value) {
-        center = await resolveQueryToLatLng(center as string)
+        try {
+          center = await resolveQueryToLatLng(center as string)
+        }
+        catch (error: any) {
+          if (error?.name === 'AbortError')
+            return
+          throw error
+        }
       }
+      if (stale || isUnmounted || map.value !== currentMap)
+        return
       // Skip setCenter if the map is already at the same position to avoid
       // resetting user pan interactions on unrelated re-renders.
-      const current = map.value!.getCenter()
+      const current = currentMap.getCenter()
       if (current) {
         const newLat = typeof (center as any).lat === 'function' ? (center as any).lat() : (center as any).lat
         const newLng = typeof (center as any).lng === 'function' ? (center as any).lng() : (center as any).lng
         if (current.lat() === newLat && current.lng() === newLng)
           return
       }
-      map.value!.setCenter(center as google.maps.LatLng)
+      currentMap.setCenter(center as google.maps.LatLng)
     }
   }, {
     immediate: true,
   })
   onLoaded(async (instance: any) => {
-    mapsApi.value = await instance.maps
+    const api = await instance.maps
+    if (isUnmounted || !mapEl.value)
+      return
+    mapsApi.value = api
     // may need to transform the center before we can init the map
     const center = options.value.center as string
     const _options: google.maps.MapOptions = {
@@ -542,11 +591,22 @@ onMounted(() => {
       // @ts-expect-error broken
       center: !center || isLocationQuery(center) ? undefined : center,
     }
-    map.value = new mapsApi.value!.Map(mapEl.value!, _options)
+    map.value = new api.Map(mapEl.value, _options)
     if (center && isLocationQuery(center)) {
-      centerOverride.value = await resolveQueryToLatLng(center)
-      if (centerOverride.value)
-        map.value?.setCenter(centerOverride.value)
+      let resolvedCenter
+      try {
+        resolvedCenter = await resolveQueryToLatLng(center)
+      }
+      catch (error: any) {
+        if (error?.name === 'AbortError')
+          return
+        throw error
+      }
+      if (isUnmounted)
+        return
+      centerOverride.value = resolvedCenter
+      if (resolvedCenter)
+        map.value?.setCenter(resolvedCenter)
     }
     isMapReady.value = true
   })
@@ -602,6 +662,8 @@ const rootAttrs = computed(() => {
 })
 
 onBeforeUnmount(() => {
+  isUnmounted = true
+  lifecycleController.abort()
   // Synchronous cleanup — Vue does not await async lifecycle hooks,
   // so anything after an `await` runs as a detached microtask.
   // Note: do NOT null mapsApi here — children unmount AFTER onBeforeUnmount
@@ -609,11 +671,20 @@ onBeforeUnmount(() => {
   // Note: do NOT remove map DOM here — during page transitions the leave
   // animation is still playing, and tearing out the iframe leaves blank
   // space. Vue removes the parent element on actual unmount.
-  map.value?.unbindAll()
+  if (map.value && mapsApi.value) {
+    mapsApi.value.event.clearInstanceListeners(map.value)
+    map.value.unbindAll()
+  }
   map.value = undefined
+  activeInfoWindow?.close()
+  activeInfoWindow = undefined
   libraries.clear()
   queryToLatLngCache.clear()
 })
+
+onUnmounted(() => {
+  mapsApi.value = undefined
+})
 </script>
 
 <template>
diff --git a/packages/script/src/runtime/components/GoogleMaps/useGoogleMapsResource.ts b/packages/script/src/runtime/components/GoogleMaps/useGoogleMapsResource.ts
index deb5b124..1d205b4e 100644
--- a/packages/script/src/runtime/components/GoogleMaps/useGoogleMapsResource.ts
+++ b/packages/script/src/runtime/components/GoogleMaps/useGoogleMapsResource.ts
@@ -135,21 +135,55 @@ export async function waitForMapsReady({
   map,
   status,
   load,
+  signal,
 }: {
   mapsApi: ShallowRef<typeof google.maps | undefined>
   map: ShallowRef<google.maps.Map | undefined>
   status: Ref<string>
   load: () => Promise<unknown> | unknown
+  signal?: AbortSignal
 }): Promise<void> {
+  const abortError = () => {
+    const error = new Error('Google Maps readiness wait was aborted')
+    error.name = 'AbortError'
+    return error
+  }
+  const throwIfAborted = () => {
+    if (signal?.aborted)
+      throw abortError()
+  }
+
+  throwIfAborted()
   if (mapsApi.value && map.value)
     return
   if (status.value === 'error')
     throw new Error('Google Maps script failed to load')
 
-  await load()
+  await new Promise<void>((resolve, reject) => {
+    let settled = false
+    let onAbort: (() => void) | undefined
+    const cleanup = () => {
+      if (onAbort)
+        signal?.removeEventListener('abort', onAbort)
+    }
+    const settle = (fn: () => void) => {
+      if (settled)
+        return
+      settled = true
+      cleanup()
+      fn()
+    }
+    onAbort = () => settle(() => reject(abortError()))
+    signal?.addEventListener('abort', onAbort, { once: true })
+    Promise.resolve(load()).then(
+      () => settle(resolve),
+      error => settle(() => reject(error)),
+    )
+  })
 
   // load() may have populated both refs synchronously — re-check before
   // installing a watcher to avoid the race that hangs the promise forever.
+  throwIfAborted()
   if (mapsApi.value && map.value)
     return
   if (status.value === 'error')
@@ -158,16 +192,31 @@ export async function waitForMapsReady({
   const scope = effectScope(true)
   try {
     await new Promise<void>((resolve, reject) => {
+      let settled = false
+      let onAbort: (() => void) | undefined
+      const cleanup = () => {
+        if (onAbort)
+          signal?.removeEventListener('abort', onAbort)
+      }
+      const settle = (fn: () => void) => {
+        if (settled)
+          return
+        settled = true
+        cleanup()
+        fn()
+      }
+      onAbort = () => settle(() => reject(abortError()))
+      signal?.addEventListener('abort', onAbort, { once: true })
       scope.run(() => {
         watch(
           [mapsApi, map, status],
           ([api, m, s]) => {
             if (api && m) {
-              resolve()
+              settle(resolve)
               return
             }
             if (s === 'error')
-              reject(new Error('Google Maps script failed to load'))
+              settle(() => reject(new Error('Google Maps script failed to load')))
           },
           { immediate: true },
         )
diff --git a/packages/script/src/runtime/components/ScriptCarbonAds.vue b/packages/script/src/runtime/components/ScriptCarbonAds.vue
index 2658bd5a..ad012f1c 100644
--- a/packages/script/src/runtime/components/ScriptCarbonAds.vue
+++ b/packages/script/src/runtime/components/ScriptCarbonAds.vue
@@ -29,6 +29,7 @@ const attrId = `_carbonads_js`
 const carbonadsEl = ref<HTMLElement | null>(import.meta.client ? document.getElementById(attrId) : null)
 // syncs to useScript status
 const status = ref('awaitingLoad')
+let scriptEl: HTMLScriptElement | undefined
 
 function loadCarbon() {
   if (!carbonadsEl.value) {
@@ -36,6 +37,7 @@ function loadCarbon() {
   }
   status.value = 'loading'
   const script = document.createElement('script')
+  scriptEl = script
   script.setAttribute('src', withQuery('https://cdn.carbonads.com/carbon.js', {
     serve: props.serve,
     placement: props.placement,
@@ -63,7 +65,10 @@ onMounted(() => {
     loadCarbon()
   }
   else {
-    trigger.then(loadCarbon)
+    trigger.then((triggered) => {
+      if (triggered)
+        loadCarbon()
+    })
   }
 })
 
@@ -74,8 +79,15 @@ const rootAttrs = computed(() => {
 })
 
 onBeforeUnmount(() => {
+  if (scriptEl) {
+    scriptEl.onload = null
+    scriptEl.onerror = null
+    scriptEl.remove()
+    scriptEl = undefined
+  }
   if (carbonadsEl.value) {
     carbonadsEl.value.remove()
+    carbonadsEl.value = null
   }
 })
 </script>
diff --git a/packages/script/src/runtime/components/ScriptCrisp.vue b/packages/script/src/runtime/components/ScriptCrisp.vue
index e6f5774a..23be1447 100644
--- a/packages/script/src/runtime/components/ScriptCrisp.vue
+++ b/packages/script/src/runtime/components/ScriptCrisp.vue
@@ -58,15 +58,17 @@ defineExpose({
   crisp,
 })
 
-let observer: MutationObserver
+let observer: MutationObserver | undefined
 onMounted(() => {
   watch(status, (status) => {
     if (status === 'loaded') {
+      observer?.disconnect()
       observer = new MutationObserver(() => {
         if (document.getElementById('crisp-chatbox')) {
           isReady.value = true
           emits('ready', crisp)
-          observer.disconnect()
+          observer?.disconnect()
+          observer = undefined
         }
       })
       observer.observe(document.body, { childList: true, subtree: true })
@@ -78,6 +80,7 @@ onMounted(() => {
 })
 onBeforeUnmount(() => {
   observer?.disconnect()
+  observer = undefined
 })
 
 const rootAttrs = computed(() => {
diff --git a/packages/script/src/runtime/components/ScriptIntercom.vue b/packages/script/src/runtime/components/ScriptIntercom.vue
index e68969a7..db3da57c 100644
--- a/packages/script/src/runtime/components/ScriptIntercom.vue
+++ b/packages/script/src/runtime/components/ScriptIntercom.vue
@@ -64,15 +64,17 @@ defineExpose({
   intercom,
 })
 
-let observer: MutationObserver
+let observer: MutationObserver | undefined
 onMounted(() => {
   watch(status, (status) => {
     if (status === 'loading') {
+      observer?.disconnect()
       observer = new MutationObserver(() => {
         if (document.getElementById('intercom-frame')) {
           isReady.value = true
           emits('ready', intercom)
-          observer.disconnect()
+          observer?.disconnect()
+          observer = undefined
         }
       })
       observer.observe(document.body, { childList: true, subtree: true })
@@ -84,6 +86,7 @@ onMounted(() => {
 })
 onBeforeUnmount(() => {
   observer?.disconnect()
+  observer = undefined
 })
 
 const rootAttrs = computed(() => {
diff --git a/packages/script/src/runtime/components/ScriptLemonSqueezy.vue b/packages/script/src/runtime/components/ScriptLemonSqueezy.vue
index 56a43f7b..57170f52 100644
--- a/packages/script/src/runtime/components/ScriptLemonSqueezy.vue
+++ b/packages/script/src/runtime/components/ScriptLemonSqueezy.vue
@@ -1,7 +1,7 @@
 <script lang="ts" setup>
 import type { LemonSqueezyEventPayload } from '../registry/lemon-squeezy'
 import type { ElementScriptTrigger } from '../types'
-import { computed, onMounted, ref } from 'vue'
+import { computed, onBeforeUnmount, onMounted, ref } from 'vue'
 import { useScriptTriggerElement } from '../composables/useScriptTriggerElement'
 import { useScriptLemonSqueezy } from '../registry/lemon-squeezy'
 
@@ -42,6 +42,15 @@ onMounted(() => {
   })
 })
 
+onBeforeUnmount(() => {
+  // Lemon.js `Setup()` stores a single global `eventHandler`, which captures
+  // this component's `emits` (and therefore the instance). Setup() replaces
+  // rather than appends, so resetting it to a noop on unmount releases the
+  // closure and lets the unmounted instance be garbage-collected.
+  if (import.meta.client && typeof window.LemonSqueezy?.Setup === 'function')
+    window.LemonSqueezy.Setup({ eventHandler() {} })
+})
+
 const rootAttrs = computed(() => {
   return {
     ...(trigger instanceof Promise ? trigger.ssrAttrs || {} : {}),
diff --git a/packages/script/src/runtime/components/ScriptPayPalButtons.vue b/packages/script/src/runtime/components/ScriptPayPalButtons.vue
index aead7926..4483d498 100644
--- a/packages/script/src/runtime/components/ScriptPayPalButtons.vue
+++ b/packages/script/src/runtime/components/ScriptPayPalButtons.vue
@@ -81,6 +81,7 @@ const rootEl = ref<HTMLDivElement | null>(null)
 const ready = ref(false)
 const failed = ref(false)
 const sdkInstance = shallowRef<SdkInstance<Components[]>>()
+let disposed = false
 
 const { onLoaded, status } = useScriptPayPal({
   ...(props.clientToken ? { clientToken: props.clientToken } : { clientId: props.clientId }),
@@ -103,7 +104,10 @@ onMounted(() => {
     } as CreateInstanceOptions<Components[]>
 
     try {
-      sdkInstance.value = await paypal.createInstance(instanceOptions)
+      const instance = await paypal.createInstance(instanceOptions)
+      if (disposed)
+        return
+      sdkInstance.value = instance
       ready.value = true
       emit('ready', sdkInstance.value)
     }
@@ -116,6 +120,7 @@ onMounted(() => {
 })
 
 onBeforeUnmount(() => {
+  disposed = true
   sdkInstance.value = undefined
 })
 
diff --git a/packages/script/src/runtime/components/ScriptPayPalMessages.vue b/packages/script/src/runtime/components/ScriptPayPalMessages.vue
index e5285bdc..613613c9 100644
--- a/packages/script/src/runtime/components/ScriptPayPalMessages.vue
+++ b/packages/script/src/runtime/components/ScriptPayPalMessages.vue
@@ -82,6 +82,7 @@ const rootEl = ref<HTMLDivElement | null>(null)
 const ready = ref(false)
 const failed = ref(false)
 const messagesSession = shallowRef<PayPalMessagesSession>()
+let disposed = false
 
 const { onLoaded, status } = useScriptPayPal({
   ...(props.clientToken ? { clientToken: props.clientToken } : { clientId: props.clientId }),
@@ -107,6 +108,8 @@ onMounted(() => {
 
     try {
       const instance = await paypal.createInstance(instanceOptions) as SdkInstance<['paypal-messages']>
+      if (disposed)
+        return
       messagesSession.value = instance.createPayPalMessages(props.messagesOptions)
       ready.value = true
       emit('ready', messagesSession.value)
@@ -120,6 +123,7 @@ onMounted(() => {
 })
 
 onBeforeUnmount(() => {
+  disposed = true
   messagesSession.value = undefined
 })
 
diff --git a/packages/script/src/runtime/components/ScriptStripePricingTable.vue b/packages/script/src/runtime/components/ScriptStripePricingTable.vue
index 6d9b8a3a..4e23aabc 100644
--- a/packages/script/src/runtime/components/ScriptStripePricingTable.vue
+++ b/packages/script/src/runtime/components/ScriptStripePricingTable.vue
@@ -38,6 +38,8 @@ const { onLoaded, status } = instance
 const pricingTable = ref<HTMLElement | undefined>()
 onMounted(() => {
   onLoaded(() => {
+    if (!rootEl.value)
+      return
     const StripePricingTable = window.customElements.get('stripe-pricing-table')!
     const stripePricingTable = new StripePricingTable()
     stripePricingTable.setAttribute('publishable-key', props.publishableKey)
@@ -49,7 +51,7 @@ onMounted(() => {
     if (props.customerSessionClientSecret)
       stripePricingTable.setAttribute('customer-session-client-secret', props.customerSessionClientSecret)
     pricingTable.value = stripePricingTable
-    rootEl.value!.appendChild(stripePricingTable)
+    rootEl.value.appendChild(stripePricingTable)
     emit('ready', instance)
   })
   watch(status, (status) => {
diff --git a/packages/script/src/runtime/components/ScriptVimeoPlayer.vue b/packages/script/src/runtime/components/ScriptVimeoPlayer.vue
index d00422c6..a5733000 100644
--- a/packages/script/src/runtime/components/ScriptVimeoPlayer.vue
+++ b/packages/script/src/runtime/components/ScriptVimeoPlayer.vue
@@ -319,7 +319,18 @@ const placeholderAttrs = computed(() => {
   } satisfies ImgHTMLAttributes)
 })
 
-onBeforeUnmount(() => player?.unload())
+// destroy() (not unload()) unbinds every player.on() handler and removes the
+// SDK's global window `message` listener; unload() only resets the video and
+// would leak the player instance + its handler closures on every unmount.
+onBeforeUnmount(() => {
+  const currentPlayer = player
+  player = undefined
+  void currentPlayer?.destroy().catch((error) => {
+    // The iframe may already have been detached by Vue; destroy is best-effort.
+    if (import.meta.dev)
+      console.warn('[nuxt-scripts] Vimeo player cleanup failed:', error)
+  })
+})
 </script>
 
 <template>
diff --git a/packages/script/src/runtime/composables/useScript.ts b/packages/script/src/runtime/composables/useScript.ts
index 49125468..b454545a 100644
--- a/packages/script/src/runtime/composables/useScript.ts
+++ b/packages/script/src/runtime/composables/useScript.ts
@@ -13,6 +13,15 @@ type NuxtScriptsApp = ReturnType<typeof useNuxtApp> & {
   _scripts: Record<string, NuxtDevToolsScriptInstance>
 }
 
+const DEVTOOLS_EVENT_LIMIT = 250
+const DEVTOOLS_NETWORK_REQUEST_LIMIT = 500
+
+function pushBounded<T>(items: T[], item: T, limit: number): void {
+  items.push(item)
+  if (items.length > limit)
+    items.splice(0, items.length - limit)
+}
+
 /**
  * Devtools network tracking utilities.
  * All functions below are only called inside `import.meta.dev` guards,
@@ -95,6 +104,7 @@ function observeNetworkRequests(
   const proxyPrefix = resolveProxyPrefix()
   const matchesScript = createDomainMatcher(domains, proxyPrefix, scriptSrc)
   const seen = new Set<string>()
+  const seenOrder: string[] = []
 
   function entryKey(entry: PerformanceResourceTiming): string {
     return `${entry.name}@${entry.startTime}`
@@ -107,7 +117,13 @@ function observeNetworkRequests(
     if (!matchesScript(entry))
       return false
     seen.add(key)
-    payload.networkRequests.push(toNetworkRequest(entry, proxyPrefix))
+    seenOrder.push(key)
+    if (seenOrder.length > DEVTOOLS_NETWORK_REQUEST_LIMIT) {
+      const oldest = seenOrder.shift()
+      if (oldest)
+        seen.delete(oldest)
+    }
+    pushBounded(payload.networkRequests, toNetworkRequest(entry, proxyPrefix), DEVTOOLS_NETWORK_REQUEST_LIMIT)
     return true
   }
 
@@ -180,14 +196,34 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
     })
     const nuxtApp = useNuxtApp() as NuxtScriptsApp
     ensureScripts(nuxtApp)
+    const existing = nuxtApp.$scripts[src]
+    if (existing)
+      return existing as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>>
+
     const status = ref('loaded')
     let disconnectObserver = () => {}
-    const stub = {
+    let stopAppUnmountHook = () => {}
+    let cleaned = false
+    let stub: UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>>
+    const cleanup = () => {
+      if (cleaned)
+        return
+      cleaned = true
+      disconnectObserver()
+      stopAppUnmountHook()
+      if (nuxtApp.$scripts[src] === stub)
+        delete nuxtApp.$scripts[src]
+      if (import.meta.dev && import.meta.client && nuxtApp._scripts?.[src]) {
+        delete nuxtApp._scripts[src]
+        nuxtApp.hooks.callHook('scripts:updated' as any, { scripts: nuxtApp._scripts })
+      }
+    }
+    stub = {
       id: src,
       status,
       load: () => Promise.resolve({} as T),
       remove: () => {
-        disconnectObserver()
+        cleanup()
         return false
       },
       entry: undefined,
@@ -214,6 +250,8 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
       }
 
       function syncScripts() {
+        if (cleaned)
+          return
         nuxtApp._scripts[src] = payload
         nuxtApp.hooks.callHook('scripts:updated' as any, { scripts: nuxtApp._scripts })
       }
@@ -222,6 +260,8 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
       syncScripts()
     }
 
+    stopAppUnmountHook = nuxtApp.hooks.hook('app:unmount' as any, cleanup)
+
     return stub
   }
 
@@ -274,40 +314,83 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
   }
 
   const instance = _useScript<T>(input, options as any as UseScriptOptions<T>) as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>> & { reload: () => Promise<T> }
-  const _remove = instance.remove
+
+  // _useScript still needs to run for repeated calls because @unhead/vue
+  // registers the caller's scoped callbacks. The shared instance itself must
+  // only be decorated once, otherwise every mount stacks app-global hooks and
+  // wrapper closures around the same object.
+  if (exists)
+    return instance as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>>
+
+  markRaw(instance as any)
+  ;(instance as any).toJSON = () => ({ id: instance.id, status: instance.status.value })
+
+  const cleanupFns = new Set<() => void>()
+  let cleaned = false
+  const addCleanup = (cleanup: () => void) => {
+    if (cleaned)
+      cleanup()
+    else
+      cleanupFns.add(cleanup)
+  }
+  const cleanupInstance = () => {
+    if (cleaned)
+      return
+    cleaned = true
+    for (const cleanup of cleanupFns)
+      cleanup()
+    cleanupFns.clear()
+    if (nuxtApp.$scripts[id] === instance)
+      delete nuxtApp.$scripts[id]
+    if (import.meta.dev && import.meta.client && nuxtApp._scripts?.[instance.id]) {
+      delete nuxtApp._scripts[instance.id]
+      nuxtApp.hooks.callHook('scripts:updated' as any, { scripts: nuxtApp._scripts })
+    }
+  }
+
+  let currentRemove = instance.remove
+  let currentLoad = instance.load
   instance.remove = () => {
-    nuxtApp.$scripts[id] = undefined
-    return _remove()
+    const result = currentRemove()
+    cleanupInstance()
+    return result
   }
-  const _load = instance.load
   instance.load = async () => {
     if (err) {
       return Promise.reject(err)
     }
-    return _load()
+    return currentLoad()
   }
   // Add reload method for scripts that need to re-execute (e.g., DOM-scanning scripts)
   instance.reload = async () => {
-    instance.remove()
+    // Remove only the current Unhead entry. Runtime observers/hooks belong to
+    // this stable public instance and remain active across the reload.
+    currentRemove()
     // Use unique key to bypass Unhead's deduplication
     const reloadInput = typeof input === 'string'
       ? { src: input, key: `${id}-${Date.now()}` }
       : { ...input, key: `${id}-${Date.now()}` }
     // Re-create the script entry
     const reloaded = _useScript<T>(reloadInput, { ...options, trigger: 'client' } as any as UseScriptOptions<T>)
+    currentRemove = reloaded.remove
+    currentLoad = reloaded.load
     // Copy over the new instance properties
     Object.assign(instance, {
       status: reloaded.status,
       entry: reloaded.entry,
     })
-    return reloaded.load()
+    return currentLoad()
   }
   nuxtApp.$scripts[id] = instance
+  addCleanup(nuxtApp.hooks.hook('app:unmount' as any, () => {
+    currentRemove()
+    cleanupInstance()
+  }))
 
   // Debug logging: emit a structured log per script lifecycle event when debug
   // is enabled at build-time (or in dev). Tagged with registryKey when present
   // (e.g. `googleTagManager`), else the script id (src/key).
-  if (import.meta.client && debugEnabled) {
+  if (import.meta.client && debugEnabled && !exists) {
     const registryKey = options?.devtools?.registryKey as string | undefined
     const src = (input as any)?.src
     const trigger = options?.trigger
@@ -325,7 +408,7 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
       ...ctx,
       trigger: typeof trigger === 'object' ? (trigger instanceof Promise ? 'promise' : JSON.stringify(trigger)) : trigger,
     })
-    headHooks.hook('script:updated', (entry) => {
+    addCleanup(headHooks.hook('script:updated', (entry) => {
       if (entry.script.id !== instance.id)
         return
       const status = entry.script.status
@@ -337,7 +420,7 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
         payload.loadMs = Math.round(performance.now() - tLoadStart)
       const fn = status === 'error' ? log.warn : log.debug
       fn(`status: ${status}`, payload)
-    })
+    }))
     const _origLoad = instance.load
     instance.load = () => {
       log.debug('load() called', ctx)
@@ -357,9 +440,6 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
 
   // used for devtools integration
   if (import.meta.dev && import.meta.client) {
-    if (exists) {
-      return instance as any as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>>
-    }
     // sync scripts to nuxtApp with debug details
     const payload: NuxtDevToolsScriptInstance = {
       ...options.devtools,
@@ -371,50 +451,52 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
     nuxtApp._scripts = nuxtApp._scripts! || {}
 
     function syncScripts() {
+      if (cleaned)
+        return
       nuxtApp._scripts[instance.id] = payload
       nuxtApp.hooks.callHook('scripts:updated' as any, { scripts: nuxtApp._scripts })
     }
 
     if (!nuxtApp._scripts[instance.id]) {
-      headHooks.hook('script:updated', (ctx) => {
+      addCleanup(headHooks.hook('script:updated', (ctx) => {
         if (ctx.script.id !== instance.id)
           return
         // convert the status to a timestamp
-        payload.events.push({
+        pushBounded(payload.events, {
           type: 'status',
           status: ctx.script.status,
           at: Date.now(),
-        })
+        }, DEVTOOLS_EVENT_LIMIT)
         payload.$script = instance
         syncScripts()
-      })
+      }))
       // @ts-expect-error untyped
-      headHooks.hook('script:instance-fn', (ctx) => {
+      addCleanup(headHooks.hook('script:instance-fn', (ctx) => {
         if (ctx.script.id !== instance.id || String(ctx.fn).startsWith('__v_'))
           return
         // log all events
-        payload.events.push({
+        pushBounded(payload.events, {
           type: 'fn-call',
           fn: ctx.fn,
           at: Date.now(),
-        })
+        }, DEVTOOLS_EVENT_LIMIT)
         syncScripts()
-      })
+      }))
       payload.$script = instance
       if (err) {
-        payload.events.push({
+        pushBounded(payload.events, {
           type: 'status',
           status: 'validation-failed',
           args: err,
           at: Date.now(),
-        })
+        }, DEVTOOLS_EVENT_LIMIT)
       }
-      payload.events.push({
+      pushBounded(payload.events, {
         type: 'status',
         status: 'awaitingLoad',
         trigger: options?.trigger,
         at: Date.now(),
-      })
+      }, DEVTOOLS_EVENT_LIMIT)
 
       // Network request tracking via Resource Timing API
       const scriptHostname = extractExternalHostname(input.src)
@@ -423,28 +505,20 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
         ...(options.devtools?.domains || []),
       ])
       let disconnectObserver = observeNetworkRequests(payload, domains, syncScripts, input.src)
+      addCleanup(() => disconnectObserver())
       // Clean up observer when script is removed, but keep it alive across reload()
-      const _origRemove = instance.remove
       const _origReload = instance.reload
-      instance.remove = () => {
-        disconnectObserver()
-        return _origRemove()
-      }
       instance.reload = async () => {
         // Disconnect before reload, reconnect after so new network entries are tracked
         disconnectObserver()
         const result = await _origReload()
-        disconnectObserver = observeNetworkRequests(payload, domains, syncScripts, input.src)
+        if (!cleaned)
+          disconnectObserver = observeNetworkRequests(payload, domains, syncScripts, input.src)
         return result
       }
 
       syncScripts()
     }
   }
-  // Prevent Vue from making the instance deeply reactive, and guard against
-  // circular JSON errors if anything calls JSON.stringify on it (Vue 3.5+
-  // refs have circular `.dep` properties).
-  markRaw(instance as any)
-  ;(instance as any).toJSON = () => ({ id: instance.id, status: instance.status.value })
   return instance as any as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>>
 }
diff --git a/packages/script/src/runtime/composables/useScriptEventPage.ts b/packages/script/src/runtime/composables/useScriptEventPage.ts
index 4c4b4b9b..9f900f7a 100644
--- a/packages/script/src/runtime/composables/useScriptEventPage.ts
+++ b/packages/script/src/runtime/composables/useScriptEventPage.ts
@@ -15,18 +15,28 @@ export function useScriptEventPage(onChange?: (payload: TrackedPage) => void) {
     return payload
 
   let lastPayload: TrackedPage = { path: '', title: '' }
-  let stopDomWatcher = () => {}
+  let disposed = false
+  const pendingCleanups = new Set<() => void>()
   // TODO make sure useAsyncData isn't running
   const stopPageFinishHook = nuxt.hooks.hook('page:finish', () => {
-    Promise.race([
-      // possibly no head update is needed
-      new Promise(resolve => setTimeout(resolve, 100)),
-      new Promise<void>((resolve) => {
-        stopDomWatcher = head.hooks!.hook('dom:rendered', () => resolve())
-      }),
-    ])
-      .finally(stopDomWatcher)
-      .then(() => {
+    let settled = false
+    let stopDomWatcher = () => {}
+    const timer = setTimeout(finish, 100)
+
+    function cleanup() {
+      clearTimeout(timer)
+      stopDomWatcher()
+      pendingCleanups.delete(cleanup)
+    }
+
+    function finish() {
+      if (settled)
+        return
+      settled = true
+      cleanup()
+      queueMicrotask(() => {
+        if (disposed)
+          return
         payload.value = {
           path: route.fullPath,
           title: document.title,
@@ -38,10 +48,17 @@ export function useScriptEventPage(onChange?: (payload: TrackedPage) => void) {
           lastPayload = payload.value
         }
       })
+    }
+
+    pendingCleanups.add(cleanup)
+    stopDomWatcher = head.hooks!.hook('dom:rendered', finish)
   })
 
   onScopeDispose(() => {
-    stopDomWatcher()
+    disposed = true
+    for (const cleanup of pendingCleanups)
+      cleanup()
+    pendingCleanups.clear()
     stopPageFinishHook()
   })
 
diff --git a/packages/script/src/runtime/composables/useScriptTriggerIdleTimeout.ts b/packages/script/src/runtime/composables/useScriptTriggerIdleTimeout.ts
index ec79e6e8..fffe08f6 100644
--- a/packages/script/src/runtime/composables/useScriptTriggerIdleTimeout.ts
+++ b/packages/script/src/runtime/composables/useScriptTriggerIdleTimeout.ts
@@ -20,17 +20,35 @@ export function useScriptTriggerIdleTimeout(options: IdleTimeoutScriptTriggerOpt
   const { timeout } = options
 
   return new Promise<boolean>((resolve) => {
+    let disposed = false
+    let settled = false
+    let stopTimer = () => {}
+
+    const settle = (value: boolean) => {
+      if (settled)
+        return
+      settled = true
+      stopTimer()
+      resolve(value)
+    }
+
+    // Register disposal while setup's effect scope is active. onNuxtReady may
+    // run later, when there is no active component scope to attach cleanup to.
+    tryOnScopeDispose(() => {
+      disposed = true
+      settle(false)
+    })
+
     onNuxtReady(() => {
+      if (disposed)
+        return
+
       const { start, stop } = useTimeoutFn(() => {
-        resolve(true)
+        settle(true)
       }, timeout, { immediate: false })
 
+      stopTimer = stop
       start()
-
-      tryOnScopeDispose(() => {
-        stop()
-        resolve(false)
-      })
     })
   })
 }
diff --git a/packages/script/src/runtime/composables/useScriptTriggerInteraction.ts b/packages/script/src/runtime/composables/useScriptTriggerInteraction.ts
index 8af93fea..0d362f9d 100644
--- a/packages/script/src/runtime/composables/useScriptTriggerInteraction.ts
+++ b/packages/script/src/runtime/composables/useScriptTriggerInteraction.ts
@@ -25,33 +25,48 @@ export function useScriptTriggerInteraction(options: InteractionScriptTriggerOpt
   const { events, target = document.documentElement } = options
 
   return new Promise<boolean>((resolve) => {
+    let disposed = false
+    let settled = false
+    const cleanupFns: Array<() => void> = []
+
+    const cleanup = () => {
+      cleanupFns.splice(0).forEach(fn => fn())
+    }
+    const settle = (value: boolean) => {
+      if (settled)
+        return
+      settled = true
+      cleanup()
+      resolve(value)
+    }
+
+    // onNuxtReady can run after the component scope has already been stopped,
+    // so disposal must be registered synchronously during setup.
+    tryOnScopeDispose(() => {
+      disposed = true
+      settle(false)
+    })
+
     onNuxtReady(() => {
+      if (disposed)
+        return
       if (!target) {
-        resolve(false)
+        settle(false)
         return
       }
 
-      const cleanupFns: Array<() => void> = []
-
       // Listen for all specified events
       events.forEach((event) => {
         const cleanup = useEventListener(
           target,
           event,
           () => {
-            // Clean up all listeners when any event triggers
-            cleanupFns.forEach(fn => fn())
-            resolve(true)
+            settle(true)
           },
           { once: true, passive: true },
         )
         cleanupFns.push(cleanup)
       })
-
-      tryOnScopeDispose(() => {
-        cleanupFns.forEach(fn => fn())
-        resolve(false)
-      })
     })
   })
 }
diff --git a/packages/script/src/runtime/composables/useScriptTriggerServiceWorker.ts b/packages/script/src/runtime/composables/useScriptTriggerServiceWorker.ts
index 475ebfc9..c24d386c 100644
--- a/packages/script/src/runtime/composables/useScriptTriggerServiceWorker.ts
+++ b/packages/script/src/runtime/composables/useScriptTriggerServiceWorker.ts
@@ -16,38 +16,42 @@ export function useScriptTriggerServiceWorker(options?: { timeout?: number }): P
       return
     }
 
-    let resolved = false
-    const done = () => {
-      if (resolved)
+    let settled = false
+    let timer: ReturnType<typeof setTimeout> | undefined
+    const cleanup = () => {
+      navigator.serviceWorker.removeEventListener('controllerchange', onControllerChange)
+      if (timer !== undefined) {
+        clearTimeout(timer)
+        timer = undefined
+      }
+    }
+    const done = (value: boolean) => {
+      if (settled)
         return
-      resolved = true
-      resolve(true)
+      settled = true
+      cleanup()
+      resolve(value)
     }
 
+    function onControllerChange() {
+      done(true)
+    }
+
+    tryOnScopeDispose(() => done(false))
+
     // If SW is already controlling, we're good
     if (navigator.serviceWorker.controller) {
-      done()
+      done(true)
       return
     }
 
     // Wait for SW to take control of this page
-    const onControllerChange = () => {
-      navigator.serviceWorker.removeEventListener('controllerchange', onControllerChange)
-      done()
-    }
     navigator.serviceWorker.addEventListener('controllerchange', onControllerChange)
 
     // Fallback timeout in case SW never takes control
-    const timer = setTimeout(() => {
-      navigator.serviceWorker.removeEventListener('controllerchange', onControllerChange)
+    timer = setTimeout(() => {
       console.warn('[nuxt-scripts] Service worker not controlling after timeout, loading scripts anyway')
-      done()
+      done(true)
     }, timeout)
-
-    tryOnScopeDispose(() => {
-      navigator.serviceWorker.removeEventListener('controllerchange', onControllerChange)
-      clearTimeout(timer)
-      resolve(false)
-    })
   })
 }
diff --git a/packages/script/src/runtime/devtools-standalone-bridge.client.ts b/packages/script/src/runtime/devtools-standalone-bridge.client.ts
index 66481a2e..1f6d91c8 100644
--- a/packages/script/src/runtime/devtools-standalone-bridge.client.ts
+++ b/packages/script/src/runtime/devtools-standalone-bridge.client.ts
@@ -13,17 +13,25 @@ export default defineNuxtPlugin(() => {
   const firstPartyData = (config.public['nuxt-scripts-devtools'] as any) || null
 
   let lastScripts: Record<string, any> = {}
+  let disposed = false
+  let requestController: AbortController | undefined
 
   function pushState(scripts?: Record<string, any>) {
+    if (disposed)
+      return
     if (scripts)
       lastScripts = scripts
     const route = nuxtApp.$router?.currentRoute?.value
     // Don't report the devtools UI route as the user's current page
     if (route?.path?.startsWith('/__nuxt-scripts'))
       return
+    requestController?.abort()
+    const controller = new AbortController()
+    requestController = controller
     fetch('/__nuxt-scripts-api/state', {
       method: 'POST',
       headers: { 'Content-Type': 'application/json' },
+      signal: controller.signal,
       body: JSON.stringify({
         scripts: serializeScripts(lastScripts),
         version,
@@ -31,20 +39,37 @@ export default defineNuxtPlugin(() => {
         route: route ? { path: route.path, fullPath: route.fullPath, query: route.query } : null,
       }),
     }).catch((error) => {
-      if (import.meta.dev)
+      if (import.meta.dev && error?.name !== 'AbortError')
         console.warn('[nuxt-scripts] Failed to sync standalone devtools state:', error)
+    }).finally(() => {
+      if (requestController === controller)
+        requestController = undefined
     })
   }
 
-  nuxtApp.hooks.hook('scripts:updated' as any, (ctx: { scripts: Record<string, any> }) => {
+  const stopScriptsHook = nuxtApp.hooks.hook('scripts:updated' as any, (ctx: { scripts: Record<string, any> }) => {
     pushState(ctx.scripts)
   })
 
   // Sync route changes
-  nuxtApp.$router?.afterEach(() => {
+  const stopRouterHook = nuxtApp.$router?.afterEach(() => {
     pushState()
   })
 
+  let stopUnmountHook = () => {}
+  const cleanup = () => {
+    if (disposed)
+      return
+    disposed = true
+    requestController?.abort()
+    requestController = undefined
+    lastScripts = {}
+    stopScriptsHook()
+    stopRouterHook?.()
+    stopUnmountHook()
+  }
+  stopUnmountHook = nuxtApp.hooks.hook('app:unmount' as any, cleanup)
+
   // Push initial state on load
   pushState((nuxtApp as any)._scripts || {})
 })
diff --git a/packages/script/src/runtime/npm-script-stub.ts b/packages/script/src/runtime/npm-script-stub.ts
index 28e1ba43..49eccfea 100644
--- a/packages/script/src/runtime/npm-script-stub.ts
+++ b/packages/script/src/runtime/npm-script-stub.ts
@@ -27,7 +27,6 @@ export function createNpmScriptStub<T = any>(
 ): NpmScriptStub<T> {
   const status = ref<'awaitingLoad' | 'loading' | 'loaded' | 'error'>('awaitingLoad')
   const loadedCallbacks: Array<(api: T) => void> = []
-  let initPromise: Promise<any> | null = null
   let hasInitialized = false
 
   // Get the proxy/API from use() function
@@ -50,8 +49,7 @@ export function createNpmScriptStub<T = any>(
         if (options.clientInit) {
           // eslint-disable-next-line no-console
           console.log(`[NpmScriptStub] Initializing ${options.key}...`)
-          initPromise = Promise.resolve(options.clientInit())
-          await initPromise
+          await options.clientInit()
           // eslint-disable-next-line no-console
           console.log(`[NpmScriptStub] ${options.key} initialized successfully`)
         }
@@ -59,7 +57,9 @@ export function createNpmScriptStub<T = any>(
         status.value = 'loaded'
 
         // Fire all onLoaded callbacks with the proxy
-        loadedCallbacks.forEach((cb) => {
+        // Release callback closures as soon as they have fired. Registry stubs
+        // can live for the app lifetime, while their callers may not.
+        loadedCallbacks.splice(0).forEach((cb) => {
           try {
             cb(proxy)
           }
diff --git a/packages/script/src/runtime/registry/speedcurve.ts b/packages/script/src/runtime/registry/speedcurve.ts
index a88098a5..70537788 100644
--- a/packages/script/src/runtime/registry/speedcurve.ts
+++ b/packages/script/src/runtime/registry/speedcurve.ts
@@ -31,6 +31,7 @@ const LUX_USER_CONFIG_KEYS = Object.keys(SpeedCurveOptions.entries).filter(
 ) as (keyof UserConfig)[]
 
 let luxWired = false
+let teardownAutoTracker = () => {}
 
 export function useScriptSpeedCurve<T extends SpeedCurveApi>(_options?: SpeedCurveInput): UseScriptContext<T> {
   return useRegistryScript<T, typeof SpeedCurveOptions>('speedcurve', options => ({
@@ -100,7 +101,7 @@ export function installAutoTracker(options?: SpeedCurveInput): void {
       ? options.label
       : (to: RouteLocationNormalized) => String(to.name ?? to.path)
 
-  router.beforeEach((to) => {
+  const stopBeforeEach = router.beforeEach((to) => {
     const lux = window.LUX
     if (!lux)
       return
@@ -122,7 +123,7 @@ export function installAutoTracker(options?: SpeedCurveInput): void {
   })
 
   // If a guard cancels navigation, seal the phantom beacon with a filterable tag.
-  router.afterEach((_to, _from, failure) => {
+  const stopAfterEach = router.afterEach((_to, _from, failure) => {
     if (!failure)
       return
     const lux = window.LUX
@@ -132,7 +133,33 @@ export function installAutoTracker(options?: SpeedCurveInput): void {
     lux.addData('luxNavFailed', '1')
   })
 
-  nuxt.hook('page:finish', () => {
-    afterNextPaint(() => window.LUX?.markLoadTime())
+  const pendingPaints = new Set<{ cancel: () => void }>()
+  const stopPageFinish = nuxt.hook('page:finish', () => {
+    const pending = { cancel: () => {} }
+    pendingPaints.add(pending)
+    pending.cancel = afterNextPaint(() => {
+      pendingPaints.delete(pending)
+      window.LUX?.markLoadTime()
+    })
   })
+
+  let stopAppUnmount = () => {}
+  const cleanup = () => {
+    if (!luxWired)
+      return
+    luxWired = false
+    stopBeforeEach()
+    stopAfterEach()
+    stopPageFinish()
+    stopAppUnmount()
+    for (const pending of pendingPaints)
+      pending.cancel()
+    pendingPaints.clear()
+    teardownAutoTracker = () => {}
+  }
+  stopAppUnmount = nuxt.hook('app:unmount' as any, cleanup)
+  teardownAutoTracker = cleanup
 }
+
+if (import.meta.hot)
+  import.meta.hot.dispose(() => teardownAutoTracker())
diff --git a/packages/script/src/runtime/registry/usercentrics.ts b/packages/script/src/runtime/registry/usercentrics.ts
index 5549a6d0..93275ba5 100644
--- a/packages/script/src/runtime/registry/usercentrics.ts
+++ b/packages/script/src/runtime/registry/usercentrics.ts
@@ -1,5 +1,7 @@
 import type { RegistryScriptInput, UseScriptContext } from '#nuxt-scripts/types'
 import { useHead } from '@unhead/vue'
+import { useNuxtApp } from 'nuxt/app'
+import { logger } from '../logger'
 import { useRegistryScript } from '../utils'
 import { UsercentricsOptions } from './schemas'
 
@@ -117,16 +119,57 @@ export function useScriptUsercentrics<T extends UsercentricsApi>(
   }, _options) as UseScriptContext<T, UsercentricsConsent>
 
   if (import.meta.client && !instance.consent) {
-    const whenReady = (): Promise<UsercentricsCmp> => new Promise((resolve) => {
-      // __ucCmp is present from loader bootstrap, but methods aren't callable
-      // until UC_CMP_API_READY fires. Resolve on that event (or now if it
-      // already fired and __ucCmp is bound).
-      const onReady = () => {
-        window.removeEventListener('UC_CMP_API_READY', onReady)
-        resolve(window.__ucCmp as UsercentricsCmp)
+    let readyApi: UsercentricsCmp | undefined
+    let readyPromise: Promise<UsercentricsCmp> | undefined
+    let resolveReady: ((api: UsercentricsCmp) => void) | undefined
+
+    const onReady = () => {
+      const api = window.__ucCmp
+      if (!api)
+        return
+      readyApi = api
+      window.removeEventListener('UC_CMP_API_READY', onReady)
+      resolveReady?.(api)
+      resolveReady = undefined
+    }
+    const cleanupReadyListener = () => {
+      window.removeEventListener('UC_CMP_API_READY', onReady)
+      resolveReady = undefined
+    }
+    const whenReady = (): Promise<UsercentricsCmp> => {
+      if (readyApi)
+        return Promise.resolve(readyApi)
+      if (!readyPromise) {
+        // Install the event listener before checking isInitialized() so an
+        // event fired during that async check cannot be missed.
+        readyPromise = new Promise((resolve) => {
+          resolveReady = resolve
+          window.addEventListener('UC_CMP_API_READY', onReady)
+        })
+        const api = window.__ucCmp
+        if (api?.isInitialized) {
+          Promise.resolve(api.isInitialized())
+            .then((initialized) => {
+              if (initialized)
+                onReady()
+            })
+            .catch((error) => {
+              // Some bootstrap stubs throw until the ready event; the event
+              // listener remains the authoritative readiness signal.
+              logger.debug('[usercentrics] Waiting for UC_CMP_API_READY after isInitialized() failed', error)
+            })
+        }
       }
-      window.addEventListener('UC_CMP_API_READY', onReady)
-    })
+      return readyPromise
+    }
+
+    const stopAppUnmount = useNuxtApp().hooks.hook('app:unmount' as any, cleanupReadyListener)
+    const originalRemove = instance.remove
+    instance.remove = () => {
+      cleanupReadyListener()
+      stopAppUnmount()
+      return originalRemove()
+    }
 
     instance.consent = {
       whenReady,
diff --git a/packages/script/src/runtime/registry/youtube-player.ts b/packages/script/src/runtime/registry/youtube-player.ts
index 757fb48d..b11ab422 100644
--- a/packages/script/src/runtime/registry/youtube-player.ts
+++ b/packages/script/src/runtime/registry/youtube-player.ts
@@ -56,7 +56,18 @@ export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: You
       ? undefined
       : () => {
           readyPromise = new Promise((resolve) => {
-            window.onYouTubeIframeAPIReady = resolve
+            const previousReady = window.onYouTubeIframeAPIReady
+            const onReady = () => {
+              if (window.onYouTubeIframeAPIReady === onReady) {
+                if (previousReady)
+                  window.onYouTubeIframeAPIReady = previousReady
+                else
+                  delete (window as any).onYouTubeIframeAPIReady
+              }
+              previousReady?.()
+              resolve()
+            }
+            window.onYouTubeIframeAPIReady = onReady
           })
         },
   }), _options)
diff --git a/packages/script/src/runtime/server/instagram-embed.ts b/packages/script/src/runtime/server/instagram-embed.ts
index 5ae052f6..ade0928e 100644
--- a/packages/script/src/runtime/server/instagram-embed.ts
+++ b/packages/script/src/runtime/server/instagram-embed.ts
@@ -3,6 +3,7 @@ import { hash } from 'ohash'
 import { ELEMENT_NODE, parse, renderSync, TEXT_NODE, walkSync } from 'ultrahtml'
 import { createError, defineEventHandler, getQuery, setHeader } from '#nuxt-scripts/h3'
 import { defineCachedFunction, useRuntimeConfig } from '#nuxt-scripts/nitro'
+import { NUXT_SCRIPTS_CACHE_BASE } from './utils/cache-config'
 import { createCachedJsonFetch } from './utils/cached-upstream'
 import { isEmbedShell, proxyAssetUrl, rewriteUrl, rewriteUrlsInText, RSRC_RE, scopeCss } from './utils/instagram-embed'
 import { withSigning } from './utils/withSigning'
@@ -27,6 +28,7 @@ const cachedEmbedFetch = defineCachedFunction(
     return html
   },
   {
+    base: NUXT_SCRIPTS_CACHE_BASE,
     // v2 — bump to evict any v1 entries that cached the empty JS shell
     // before the shell-detection / UA fix landed.
     name: 'nuxt-scripts-instagram-embed-v2',
diff --git a/packages/script/src/runtime/server/proxy-handler.ts b/packages/script/src/runtime/server/proxy-handler.ts
index 0619e986..667c9aed 100644
--- a/packages/script/src/runtime/server/proxy-handler.ts
+++ b/packages/script/src/runtime/server/proxy-handler.ts
@@ -1,5 +1,5 @@
 import type { ProxyPrivacyInput, ResolvedProxyPrivacy } from './utils/privacy'
-import { createError, defineEventHandler, getHeaders, getQuery, getRequestIP, getRequestWebStream, readBody, readRawBody, setResponseHeader, setResponseStatus } from '#nuxt-scripts/h3'
+import { createError, defineEventHandler, getHeaders, getQuery, getRequestIP, getRequestWebStream, setResponseHeader, setResponseStatus } from '#nuxt-scripts/h3'
 import { useNitroApp, useRuntimeConfig } from '#nuxt-scripts/nitro'
 import { matchDomain } from './utils/match-domain'
 import {
@@ -27,6 +27,7 @@ interface ProxyConfig {
 
 const COMPRESSION_RE = /gzip|deflate|br|compress|base64/i
 const CLIENT_HINT_VERSION_RE = /;v="(\d+)\.[^"]*"/g
+const MAX_TRANSFORM_BODY_SIZE = 2 * 1024 * 1024
 const SKIP_RESPONSE_HEADERS = new Set(['set-cookie', 'transfer-encoding', 'content-encoding', 'content-length'])
 // Hop-by-hop request headers per RFC 7230 §6.1 — must not be forwarded by a proxy
 export const SKIP_REQUEST_HEADERS = new Set([
@@ -40,6 +41,88 @@ export const SKIP_REQUEST_HEADERS = new Set([
   'upgrade',
 ])
 
+async function readTransformBody(event: Parameters<typeof getRequestWebStream>[0]): Promise<string | undefined> {
+  const contentLength = Number(getHeaders(event)['content-length'] || 0)
+  if (Number.isFinite(contentLength) && contentLength > MAX_TRANSFORM_BODY_SIZE) {
+    throw createError({ statusCode: 413, statusMessage: 'Proxy request body too large' })
+  }
+
+  const stream = getRequestWebStream(event)
+  if (!stream)
+    return undefined
+  const reader = stream.getReader()
+  const chunks: Uint8Array[] = []
+  let total = 0
+  try {
+    while (true) {
+      const { done, value } = await reader.read()
+      if (done)
+        break
+      if (!value)
+        continue
+      total += value.byteLength
+      if (total > MAX_TRANSFORM_BODY_SIZE) {
+        await reader.cancel('Proxy request body too large')
+        throw createError({ statusCode: 413, statusMessage: 'Proxy request body too large' })
+      }
+      chunks.push(value)
+    }
+  }
+  finally {
+    reader.releaseLock()
+  }
+
+  const body = new Uint8Array(total)
+  let offset = 0
+  for (const chunk of chunks) {
+    body.set(chunk, offset)
+    offset += chunk.byteLength
+  }
+  return new TextDecoder().decode(body)
+}
+
+function streamUpstreamResponse(
+  body: ReadableStream<Uint8Array>,
+  controller: AbortController,
+  timeoutId: ReturnType<typeof setTimeout>,
+): ReadableStream<Uint8Array> {
+  const reader = body.getReader()
+  let finished = false
+  const cleanup = () => {
+    if (finished)
+      return
+    finished = true
+    clearTimeout(timeoutId)
+  }
+
+  return new ReadableStream<Uint8Array>({
+    async pull(streamController) {
+      try {
+        const { done, value } = await reader.read()
+        if (done) {
+          cleanup()
+          reader.releaseLock()
+          streamController.close()
+        }
+        else if (value) {
+          streamController.enqueue(value)
+        }
+      }
+      catch (error) {
+        cleanup()
+        reader.releaseLock()
+        streamController.error(error)
+      }
+    },
+    async cancel(reason) {
+      cleanup()
+      controller.abort()
+      await reader.cancel(reason)
+      reader.releaseLock()
+    },
+  })
+}
+
 /**
  * Strip fingerprinting from URL query string.
  * Returns both the query string and the stripped record (to avoid re-computing for hooks).
@@ -285,7 +368,7 @@ export default defineEventHandler(async (event) => {
       passthroughBody = true
     }
     else if (transformableBodyType === 'form') {
-      const formBody = await readRawBody(event)
+      const formBody = await readTransformBody(event)
       rawBody = formBody
 
       if (formBody != null) {
@@ -320,7 +403,19 @@ export default defineEventHandler(async (event) => {
     }
     else {
       // JSON body with privacy transforms.
-      rawBody = await readBody(event)
+      const jsonBody = await readTransformBody(event)
+      if (jsonBody !== undefined) {
+        try {
+          rawBody = JSON.parse(jsonBody)
+        }
+        catch (error) {
+          throw createError({
+            statusCode: 400,
+            statusMessage: 'Invalid JSON proxy request body',
+            cause: error,
+          })
+        }
+      }
 
       if (Array.isArray(rawBody)) {
         // JSON array body (e.g. batch payloads) — strip each element individually
@@ -394,6 +489,7 @@ export default defineEventHandler(async (event) => {
     })
   }
   catch (err) {
+    clearTimeout(timeoutId)
     log('[proxy] Upstream error:', err)
     throw createError({
       statusCode: timedOut ? 504 : 502,
@@ -406,9 +502,6 @@ export default defineEventHandler(async (event) => {
       },
     })
   }
-  finally {
-    clearTimeout(timeoutId)
-  }
 
   log('[proxy] Response:', response.status, response.statusText)
 
@@ -421,14 +514,13 @@ export default defineEventHandler(async (event) => {
 
   setResponseStatus(event, response.status, response.statusText)
 
-  // Return the body as text for text-based content, otherwise as buffer
-  const responseContentType = response.headers.get('content-type') || ''
-  const isTextContent = responseContentType.includes('text') || responseContentType.includes('javascript') || responseContentType.includes('json')
-
-  if (isTextContent) {
-    return await response.text()
+  if (!response.body) {
+    clearTimeout(timeoutId)
+    return null
   }
 
-  // For binary content (images, etc.)
-  return Buffer.from(await response.arrayBuffer())
+  // Stream with cancellation propagation. This avoids buffering arbitrarily
+  // large responses and keeps the upstream timeout active until the body is
+  // consumed, cancelled, or errors.
+  return streamUpstreamResponse(response.body, controller, timeoutId)
 })
diff --git a/packages/script/src/runtime/server/utils/cache-config.ts b/packages/script/src/runtime/server/utils/cache-config.ts
new file mode 100644
index 00000000..372213b5
--- /dev/null
+++ b/packages/script/src/runtime/server/utils/cache-config.ts
@@ -0,0 +1,10 @@
+/** Dedicated Nitro storage mount used by Nuxt Scripts' upstream caches. */
+export const NUXT_SCRIPTS_CACHE_BASE = 'nuxt-scripts-cache'
+
+/**
+ * Conservative defaults for the in-process fallback. Applications can replace
+ * this mount with Redis, KV, filesystem, or their own storage configuration.
+ */
+export const NUXT_SCRIPTS_CACHE_MAX_ENTRIES = 500
+export const NUXT_SCRIPTS_CACHE_MAX_SIZE = 32 * 1024 * 1024
+export const NUXT_SCRIPTS_CACHE_MAX_ENTRY_SIZE = 8 * 1024 * 1024
diff --git a/packages/script/src/runtime/server/utils/cached-upstream.ts b/packages/script/src/runtime/server/utils/cached-upstream.ts
index eda9f657..465ae22e 100644
--- a/packages/script/src/runtime/server/utils/cached-upstream.ts
+++ b/packages/script/src/runtime/server/utils/cached-upstream.ts
@@ -2,6 +2,7 @@ import { Buffer } from 'node:buffer'
 import { $fetch } from 'ofetch'
 import { hash } from 'ohash'
 import { defineCachedFunction } from '#nuxt-scripts/nitro'
+import { NUXT_SCRIPTS_CACHE_BASE } from './cache-config'
 
 /**
  * Server-side caches for upstream proxy fetches.
@@ -70,6 +71,7 @@ export function createCachedBinaryFetch(
       }
     },
     {
+      base: NUXT_SCRIPTS_CACHE_BASE,
       name,
       maxAge,
       swr: true,
@@ -121,6 +123,7 @@ export function createCachedJsonFetch<T>(
       })
     },
     {
+      base: NUXT_SCRIPTS_CACHE_BASE,
       name,
       maxAge,
       swr: true,
diff --git a/packages/script/src/runtime/utils/after-next-paint.ts b/packages/script/src/runtime/utils/after-next-paint.ts
index e2633f87..365d0731 100644
--- a/packages/script/src/runtime/utils/after-next-paint.ts
+++ b/packages/script/src/runtime/utils/after-next-paint.ts
@@ -1,5 +1,21 @@
 // One rAF fires before the next paint; two fires after it has committed to screen.
 // Same pattern used by web-vitals.js — no Nuxt/Vue equivalent exists.
-export function afterNextPaint(callback: () => void): void {
-  requestAnimationFrame(() => requestAnimationFrame(callback))
+export function afterNextPaint(callback: () => void): () => void {
+  let cancelled = false
+  let innerFrame: number | undefined
+  const outerFrame = requestAnimationFrame(() => {
+    if (cancelled)
+      return
+    innerFrame = requestAnimationFrame(() => {
+      if (!cancelled)
+        callback()
+    })
+  })
+
+  return () => {
+    cancelled = true
+    cancelAnimationFrame(outerFrame)
+    if (innerFrame !== undefined)
+      cancelAnimationFrame(innerFrame)
+  }
 }
diff --git a/test/unit/google-maps-lifecycle.test.ts b/test/unit/google-maps-lifecycle.test.ts
index dfbd93ed..3637181d 100644
--- a/test/unit/google-maps-lifecycle.test.ts
+++ b/test/unit/google-maps-lifecycle.test.ts
@@ -475,4 +475,28 @@ describe('waitForMapsReady', () => {
     await expect(promise).resolves.toBeUndefined()
     expect(settled).toBe(true)
   })
+
+  it('stops a detached readiness watcher when its owner aborts', async () => {
+    const mapsApi = shallowRef<any>(undefined)
+    const map = shallowRef<any>(undefined)
+    const status = ref<string>('loading')
+    const controller = new AbortController()
+
+    const promise = waitForMapsReady({
+      mapsApi,
+      map,
+      status,
+      load: () => Promise.resolve(),
+      signal: controller.signal,
+    })
+
+    await nextTick()
+    controller.abort()
+
+    await expect(promise).rejects.toMatchObject({ name: 'AbortError' })
+    // Later ref changes must not revive or re-settle the stopped watcher.
+    mapsApi.value = { places: {} }
+    map.value = {}
+    await nextTick()
+  })
 })
diff --git a/test/unit/speedcurve-after-next-paint.test.ts b/test/unit/speedcurve-after-next-paint.test.ts
index 2308f53c..75ec5214 100644
--- a/test/unit/speedcurve-after-next-paint.test.ts
+++ b/test/unit/speedcurve-after-next-paint.test.ts
@@ -50,4 +50,22 @@ describe('afterNextPaint', () => {
     outerCb!(0)
     expect(cb).not.toHaveBeenCalled()
   })
+
+  it('cancels pending frames and releases the callback', () => {
+    const callbacks: FrameRequestCallback[] = []
+    vi.mocked(window.requestAnimationFrame).mockImplementation((cb) => {
+      callbacks.push(cb)
+      return callbacks.length
+    })
+    const cancel = vi.spyOn(window, 'cancelAnimationFrame')
+    const cb = vi.fn()
+
+    const stop = afterNextPaint(cb)
+    callbacks[0]!(0)
+    stop()
+    callbacks[1]!(0)
+
+    expect(cb).not.toHaveBeenCalled()
+    expect(cancel).toHaveBeenCalledTimes(2)
+  })
 })

From 4ae767ba47347bc36ea62d1ec44c509031139124 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Thu, 16 Jul 2026 11:01:18 +1000
Subject: [PATCH 03/19] fix: harden lifecycle cleanup

---
 packages/devtools-app/composables/rpc.ts      | 28 +++---
 packages/devtools-app/utils/fetch.ts          | 44 +++++++--
 packages/script/src/devtools.ts               |  3 +
 .../GoogleMaps/ScriptGoogleMaps.vue           |  2 +-
 .../GoogleMaps/useGoogleMapsResource.ts       | 42 +++++---
 .../runtime/components/ScriptLemonSqueezy.vue | 18 +++-
 .../components/ScriptPayPalButtons.vue        |  2 +
 .../components/ScriptPayPalMessages.vue       |  2 +
 .../src/runtime/composables/useScript.ts      | 14 ++-
 .../script/src/runtime/npm-script-stub.ts     |  3 +-
 .../src/runtime/registry/usercentrics.ts      | 30 +++++-
 .../src/runtime/registry/youtube-player.ts    | 56 +++++++++--
 .../src/runtime/server/proxy-handler.ts       | 26 ++++-
 test/unit/cached-upstream-lifecycle.test.ts   | 33 +++++++
 test/unit/fetch-script-lifecycle.test.ts      | 25 +++++
 test/unit/google-maps-lifecycle.test.ts       | 19 ++++
 test/unit/npm-script-stub-lifecycle.test.ts   | 27 +++++
 test/unit/script-trigger-lifecycle.test.ts    | 98 +++++++++++++++++++
 18 files changed, 408 insertions(+), 64 deletions(-)
 create mode 100644 test/unit/cached-upstream-lifecycle.test.ts
 create mode 100644 test/unit/fetch-script-lifecycle.test.ts
 create mode 100644 test/unit/npm-script-stub-lifecycle.test.ts
 create mode 100644 test/unit/script-trigger-lifecycle.test.ts

diff --git a/packages/devtools-app/composables/rpc.ts b/packages/devtools-app/composables/rpc.ts
index 651bf0cb..e1272236 100644
--- a/packages/devtools-app/composables/rpc.ts
+++ b/packages/devtools-app/composables/rpc.ts
@@ -31,10 +31,23 @@ export function useDevtoolsConnection(options: DevtoolsConnectionOptions = {}):
   const inIframe = window.parent !== window
   let disposed = false
   const connectionCleanups: Array<() => void> = []
+  let pollTimer: ReturnType<typeof setInterval> | undefined
+  let pollController: AbortController | undefined
+
+  const stopPolling = () => {
+    if (pollTimer) {
+      clearInterval(pollTimer)
+      pollTimer = undefined
+    }
+    pollController?.abort()
+    pollController = undefined
+  }
 
   const cleanupConnection = () => {
     connectionCleanups.splice(0).forEach(cleanup => cleanup())
     devtools.value = undefined
+    appFetch.value = undefined
+    isConnected.value = false
   }
 
   // Embedded mode: connect via devtools-kit iframe client
@@ -43,6 +56,7 @@ export function useDevtoolsConnection(options: DevtoolsConnectionOptions = {}):
     stopClientConnection = onDevtoolsClientConnected((client) => {
       if (disposed)
         return
+      stopPolling()
       cleanupConnection()
       isConnected.value = true
       // @ts-expect-error untyped
@@ -69,18 +83,6 @@ export function useDevtoolsConnection(options: DevtoolsConnectionOptions = {}):
   }
 
   // Standalone mode: create appFetch from manually entered URL and poll for state
-  let pollTimer: ReturnType<typeof setInterval> | undefined
-  let pollController: AbortController | undefined
-
-  const stopPolling = () => {
-    if (pollTimer) {
-      clearInterval(pollTimer)
-      pollTimer = undefined
-    }
-    pollController?.abort()
-    pollController = undefined
-  }
-
   const poll = async (url: string) => {
     // A slow/unreachable app must not accumulate overlapping interval requests.
     if (pollController)
@@ -119,8 +121,6 @@ export function useDevtoolsConnection(options: DevtoolsConnectionOptions = {}):
     stopStandaloneWatch()
     stopClientConnection()
     cleanupConnection()
-    appFetch.value = undefined
-    isConnected.value = false
   }
 }
 
diff --git a/packages/devtools-app/utils/fetch.ts b/packages/devtools-app/utils/fetch.ts
index 47d6d356..07d611f4 100644
--- a/packages/devtools-app/utils/fetch.ts
+++ b/packages/devtools-app/utils/fetch.ts
@@ -12,6 +12,7 @@ export async function fetchScript(url: string, signal?: AbortSignal) {
     return compressedResponse as { size: null, error: Error }
   }
   if (!compressedResponse.ok) {
+    await cancelResponseBody(compressedResponse)
     return {
       size: null,
       error: new Error(`Failed to fetch ${compressedResponse.status} ${compressedResponse.statusText}`),
@@ -20,9 +21,19 @@ export async function fetchScript(url: string, signal?: AbortSignal) {
   // Guard against measuring HTML error pages as script sizes
   const contentType = compressedResponse.headers.get('Content-Type') || ''
   if (contentType.includes('text/html')) {
+    await cancelResponseBody(compressedResponse)
     return { size: null }
   }
-  const size = await getResponseSize(compressedResponse)
+  let size: number | null
+  try {
+    size = await getResponseSize(compressedResponse)
+  }
+  catch (error) {
+    return {
+      size: null,
+      error: error instanceof Error ? error : new Error(String(error)),
+    }
+  }
   if (!size) {
     return {
       size: null,
@@ -34,23 +45,38 @@ export async function fetchScript(url: string, signal?: AbortSignal) {
 }
 
 async function getResponseSize(response: Response) {
-  const reader = response.body?.getReader()
   const contentLength = response.headers.get('Content-Length')
 
   if (contentLength) {
+    await cancelResponseBody(response)
     return Number(contentLength)
   }
+  const reader = response.body?.getReader()
   if (!reader) {
     return null
   }
-  let total = 0
-  let done = false
-  while (!done) {
-    const data = await reader.read()
-    done = data.done
-    total += data.value?.length || 0
+  try {
+    let total = 0
+    let done = false
+    while (!done) {
+      const data = await reader.read()
+      done = data.done
+      total += data.value?.length || 0
+    }
+    return total > 0 ? total : null
+  }
+  finally {
+    reader.releaseLock()
+  }
+}
+
+async function cancelResponseBody(response: Response) {
+  try {
+    await response.body?.cancel()
+  }
+  catch {
+    // The response is being discarded, so cancellation failure is non-fatal.
   }
-  return total > 0 ? total : null
 }
 
 function bytesToSize(bytes: number) {
diff --git a/packages/script/src/devtools.ts b/packages/script/src/devtools.ts
index 5e8a3fb0..215a5942 100644
--- a/packages/script/src/devtools.ts
+++ b/packages/script/src/devtools.ts
@@ -106,6 +106,9 @@ function setupStandaloneApi(nuxt: Nuxt) {
             body = ''
             cleanup()
             // Drain the remainder so the keep-alive connection can be reused.
+            // `cleanup()` removed the normal error handler, so keep one listener
+            // attached while the unread request bytes are being discarded.
+            req.once('error', () => {})
             req.resume()
             res.statusCode = 413
             res.end('payload too large')
diff --git a/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue b/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue
index 292f0354..5ca73132 100644
--- a/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue
+++ b/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue
@@ -517,7 +517,7 @@ onMounted(() => {
     await nextTick()
     // Component may have unmounted (or refs been torn down) during nextTick;
     // bail out so we don't spin up a Map against a detached container.
-    if (!mapEl.value || !mapsApi.value)
+    if (isUnmounted || !mapEl.value || !mapsApi.value)
       return
     const _options: google.maps.MapOptions = {
       ...options.value,
diff --git a/packages/script/src/runtime/components/GoogleMaps/useGoogleMapsResource.ts b/packages/script/src/runtime/components/GoogleMaps/useGoogleMapsResource.ts
index 1d205b4e..12b9a374 100644
--- a/packages/script/src/runtime/components/GoogleMaps/useGoogleMapsResource.ts
+++ b/packages/script/src/runtime/components/GoogleMaps/useGoogleMapsResource.ts
@@ -175,7 +175,15 @@ export async function waitForMapsReady({
     }
     onAbort = () => settle(() => reject(abortError()))
     signal?.addEventListener('abort', onAbort, { once: true })
-    Promise.resolve(load()).then(
+    let loading: Promise<unknown>
+    try {
+      loading = Promise.resolve(load())
+    }
+    catch (error) {
+      settle(() => reject(error))
+      return
+    }
+    loading.then(
       () => settle(resolve),
       error => settle(() => reject(error)),
     )
@@ -258,20 +266,26 @@ export function useGoogleMapsResource<T>({
   whenever(
     () => mapContext?.map.value && mapContext.mapsApi.value && (!ready || ready()),
     () => {
-      Promise.resolve(create({
-        map: mapContext!.map.value!,
-        mapsApi: mapContext!.mapsApi.value!,
-      }))
-        .then((result) => {
-          if (isUnmounted.value) {
-            // Resource was created during the async gap after unmount — clean it up immediately
-            if (cleanup && mapContext?.mapsApi.value) {
-              cleanup(result, { mapsApi: mapContext.mapsApi.value })
-            }
-            return
+      let creation: Promise<T>
+      try {
+        creation = Promise.resolve(create({
+          map: mapContext!.map.value!,
+          mapsApi: mapContext!.mapsApi.value!,
+        }))
+      }
+      catch (error) {
+        creation = Promise.reject(error)
+      }
+      creation.then((result) => {
+        if (isUnmounted.value) {
+          // Resource was created during the async gap after unmount — clean it up immediately
+          if (cleanup && mapContext?.mapsApi.value) {
+            cleanup(result, { mapsApi: mapContext.mapsApi.value })
           }
-          resource.value = result
-        })
+          return
+        }
+        resource.value = result
+      })
         .catch((err) => {
           if (import.meta.dev) {
             console.error('[nuxt-scripts] Google Maps resource creation failed:', err)
diff --git a/packages/script/src/runtime/components/ScriptLemonSqueezy.vue b/packages/script/src/runtime/components/ScriptLemonSqueezy.vue
index 57170f52..e594bc57 100644
--- a/packages/script/src/runtime/components/ScriptLemonSqueezy.vue
+++ b/packages/script/src/runtime/components/ScriptLemonSqueezy.vue
@@ -1,3 +1,7 @@
+<script lang="ts">
+let activeLemonSqueezyOwner: symbol | undefined
+</script>
+
 <script lang="ts" setup>
 import type { LemonSqueezyEventPayload } from '../registry/lemon-squeezy'
 import type { ElementScriptTrigger } from '../types'
@@ -21,6 +25,8 @@ defineSlots<{
 }>()
 
 const rootEl = ref<HTMLElement | null>(null)
+const owner = Symbol('ScriptLemonSqueezy')
+let disposed = false
 const trigger = useScriptTriggerElement({ trigger: props.trigger, el: rootEl })
 const instance = useScriptLemonSqueezy({
   scriptOptions: {
@@ -32,23 +38,29 @@ onMounted(() => {
     a.classList.add('lemonsqueezy-button')
   })
   instance.onLoaded(({ Setup, Refresh }) => {
+    if (disposed)
+      return
     Setup({
       eventHandler(event) {
         emits('lemonSqueezyEvent', event)
       },
     })
+    activeLemonSqueezyOwner = owner
     Refresh()
     emits('ready', instance)
   })
 })
 
 onBeforeUnmount(() => {
+  disposed = true
   // Lemon.js `Setup()` stores a single global `eventHandler`, which captures
   // this component's `emits` (and therefore the instance). Setup() replaces
-  // rather than appends, so resetting it to a noop on unmount releases the
-  // closure and lets the unmounted instance be garbage-collected.
-  if (import.meta.client && typeof window.LemonSqueezy?.Setup === 'function')
+  // rather than appends. Only the component that most recently installed the
+  // handler may clear it; an older instance can unmount after a newer one.
+  if (activeLemonSqueezyOwner === owner && import.meta.client && typeof window.LemonSqueezy?.Setup === 'function') {
     window.LemonSqueezy.Setup({ eventHandler() {} })
+    activeLemonSqueezyOwner = undefined
+  }
 })
 
 const rootAttrs = computed(() => {
diff --git a/packages/script/src/runtime/components/ScriptPayPalButtons.vue b/packages/script/src/runtime/components/ScriptPayPalButtons.vue
index 4483d498..7cc4eed5 100644
--- a/packages/script/src/runtime/components/ScriptPayPalButtons.vue
+++ b/packages/script/src/runtime/components/ScriptPayPalButtons.vue
@@ -112,6 +112,8 @@ onMounted(() => {
       emit('ready', sdkInstance.value)
     }
     catch (err) {
+      if (disposed)
+        return
       sdkInstance.value = undefined
       failed.value = true
       emit('error', err)
diff --git a/packages/script/src/runtime/components/ScriptPayPalMessages.vue b/packages/script/src/runtime/components/ScriptPayPalMessages.vue
index 613613c9..e64783d8 100644
--- a/packages/script/src/runtime/components/ScriptPayPalMessages.vue
+++ b/packages/script/src/runtime/components/ScriptPayPalMessages.vue
@@ -115,6 +115,8 @@ onMounted(() => {
       emit('ready', messagesSession.value)
     }
     catch (err) {
+      if (disposed)
+        return
       messagesSession.value = undefined
       failed.value = true
       emit('error', err)
diff --git a/packages/script/src/runtime/composables/useScript.ts b/packages/script/src/runtime/composables/useScript.ts
index b454545a..d8aa0ea4 100644
--- a/packages/script/src/runtime/composables/useScript.ts
+++ b/packages/script/src/runtime/composables/useScript.ts
@@ -363,6 +363,9 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
   }
   // Add reload method for scripts that need to re-execute (e.g., DOM-scanning scripts)
   instance.reload = async () => {
+    if (err)
+      return Promise.reject(err)
+
     // Remove only the current Unhead entry. Runtime observers/hooks belong to
     // this stable public instance and remain active across the reload.
     currentRemove()
@@ -511,10 +514,13 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
       instance.reload = async () => {
         // Disconnect before reload, reconnect after so new network entries are tracked
         disconnectObserver()
-        const result = await _origReload()
-        if (!cleaned)
-          disconnectObserver = observeNetworkRequests(payload, domains, syncScripts, input.src)
-        return result
+        try {
+          return await _origReload()
+        }
+        finally {
+          if (!cleaned)
+            disconnectObserver = observeNetworkRequests(payload, domains, syncScripts, input.src)
+        }
       }
 
       syncScripts()
diff --git a/packages/script/src/runtime/npm-script-stub.ts b/packages/script/src/runtime/npm-script-stub.ts
index 49eccfea..1f59f5e5 100644
--- a/packages/script/src/runtime/npm-script-stub.ts
+++ b/packages/script/src/runtime/npm-script-stub.ts
@@ -69,6 +69,7 @@ export function createNpmScriptStub<T = any>(
         })
       }
       catch (error) {
+        loadedCallbacks.splice(0)
         logger.error(`[NpmScriptStub] Failed to initialize ${options.key}:`, error)
         status.value = 'error'
       }
@@ -79,7 +80,7 @@ export function createNpmScriptStub<T = any>(
         // Already loaded, call immediately
         callback(proxy)
       }
-      else {
+      else if (status.value !== 'error') {
         // Queue for when load completes
         loadedCallbacks.push(callback)
       }
diff --git a/packages/script/src/runtime/registry/usercentrics.ts b/packages/script/src/runtime/registry/usercentrics.ts
index 93275ba5..e5aacabd 100644
--- a/packages/script/src/runtime/registry/usercentrics.ts
+++ b/packages/script/src/runtime/registry/usercentrics.ts
@@ -122,8 +122,18 @@ export function useScriptUsercentrics<T extends UsercentricsApi>(
     let readyApi: UsercentricsCmp | undefined
     let readyPromise: Promise<UsercentricsCmp> | undefined
     let resolveReady: ((api: UsercentricsCmp) => void) | undefined
+    let rejectReady: ((error: Error) => void) | undefined
+    let disposed = false
+
+    const abortError = () => {
+      const error = new Error('Usercentrics readiness wait was aborted')
+      error.name = 'AbortError'
+      return error
+    }
 
     const onReady = () => {
+      if (disposed)
+        return
       const api = window.__ucCmp
       if (!api)
         return
@@ -131,32 +141,44 @@ export function useScriptUsercentrics<T extends UsercentricsApi>(
       window.removeEventListener('UC_CMP_API_READY', onReady)
       resolveReady?.(api)
       resolveReady = undefined
+      rejectReady = undefined
     }
     const cleanupReadyListener = () => {
+      if (disposed)
+        return
+      disposed = true
       window.removeEventListener('UC_CMP_API_READY', onReady)
+      const reject = rejectReady
       resolveReady = undefined
+      rejectReady = undefined
+      reject?.(abortError())
     }
     const whenReady = (): Promise<UsercentricsCmp> => {
+      if (disposed)
+        return Promise.reject(abortError())
       if (readyApi)
         return Promise.resolve(readyApi)
       if (!readyPromise) {
         // Install the event listener before checking isInitialized() so an
         // event fired during that async check cannot be missed.
-        readyPromise = new Promise((resolve) => {
+        readyPromise = new Promise((resolve, reject) => {
           resolveReady = resolve
+          rejectReady = reject
           window.addEventListener('UC_CMP_API_READY', onReady)
         })
         const api = window.__ucCmp
         if (api?.isInitialized) {
-          Promise.resolve(api.isInitialized())
+          Promise.resolve()
+            .then(() => api.isInitialized())
             .then((initialized) => {
-              if (initialized)
+              if (initialized && !disposed)
                 onReady()
             })
             .catch((error) => {
               // Some bootstrap stubs throw until the ready event; the event
               // listener remains the authoritative readiness signal.
-              logger.debug('[usercentrics] Waiting for UC_CMP_API_READY after isInitialized() failed', error)
+              if (!disposed)
+                logger.debug('[usercentrics] Waiting for UC_CMP_API_READY after isInitialized() failed', error)
             })
         }
       }
diff --git a/packages/script/src/runtime/registry/youtube-player.ts b/packages/script/src/runtime/registry/youtube-player.ts
index b11ab422..1c4506b6 100644
--- a/packages/script/src/runtime/registry/youtube-player.ts
+++ b/packages/script/src/runtime/registry/youtube-player.ts
@@ -35,9 +35,11 @@ declare global {
 }
 
 export type YouTubePlayerInput = RegistryScriptInput
+const cleanupDecoratedInstances = new WeakSet<object>()
 
 export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: YouTubePlayerInput): UseScriptContext<T> {
   let readyPromise: Promise<void> = Promise.resolve()
+  let cleanupReady = () => {}
   const instance = useRegistryScript<T>('youtubePlayer', () => ({
     scriptInput: {
       src: 'https://www.youtube.com/iframe_api',
@@ -55,22 +57,58 @@ export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: You
     clientInit: import.meta.server
       ? undefined
       : () => {
-          readyPromise = new Promise((resolve) => {
+          readyPromise = new Promise((resolve, reject) => {
             const previousReady = window.onYouTubeIframeAPIReady
-            const onReady = () => {
-              if (window.onYouTubeIframeAPIReady === onReady) {
-                if (previousReady)
-                  window.onYouTubeIframeAPIReady = previousReady
-                else
-                  delete (window as any).onYouTubeIframeAPIReady
+            let settled = false
+            let onReady: () => void
+            const restoreReady = () => {
+              if (window.onYouTubeIframeAPIReady !== onReady)
+                return
+              if (previousReady)
+                window.onYouTubeIframeAPIReady = previousReady
+              else
+                delete (window as any).onYouTubeIframeAPIReady
+            }
+            onReady = () => {
+              if (settled)
+                return
+              settled = true
+              restoreReady()
+              cleanupReady = () => {}
+              try {
+                previousReady?.()
+              }
+              finally {
+                resolve()
               }
-              previousReady?.()
-              resolve()
+            }
+            cleanupReady = () => {
+              if (settled)
+                return
+              settled = true
+              restoreReady()
+              cleanupReady = () => {}
+              const error = new Error('YouTube API readiness wait was aborted')
+              error.name = 'AbortError'
+              reject(error)
             }
             window.onYouTubeIframeAPIReady = onReady
           })
+          // Removal can reject readiness before any caller has requested YT.
+          // Mark the internal promise handled while preserving rejection for
+          // consumers that do await the promise returned by `use()`.
+          void readyPromise.then(undefined, () => undefined)
         },
   }), _options)
+  if (import.meta.client && !cleanupDecoratedInstances.has(instance)) {
+    cleanupDecoratedInstances.add(instance)
+    const originalRemove = instance.remove
+    instance.remove = () => {
+      cleanupReady()
+      cleanupDecoratedInstances.delete(instance)
+      return originalRemove()
+    }
+  }
   // insert preconnect once we start loading the script
   if (import.meta.client) {
     const _ = watch(instance.status, (status) => {
diff --git a/packages/script/src/runtime/server/proxy-handler.ts b/packages/script/src/runtime/server/proxy-handler.ts
index 667c9aed..1d001131 100644
--- a/packages/script/src/runtime/server/proxy-handler.ts
+++ b/packages/script/src/runtime/server/proxy-handler.ts
@@ -62,7 +62,12 @@ async function readTransformBody(event: Parameters<typeof getRequestWebStream>[0
         continue
       total += value.byteLength
       if (total > MAX_TRANSFORM_BODY_SIZE) {
-        await reader.cancel('Proxy request body too large')
+        try {
+          await reader.cancel('Proxy request body too large')
+        }
+        catch {
+          // The size-limit response takes precedence over cancellation errors.
+        }
         throw createError({ statusCode: 413, statusMessage: 'Proxy request body too large' })
       }
       chunks.push(value)
@@ -88,6 +93,13 @@ function streamUpstreamResponse(
 ): ReadableStream<Uint8Array> {
   const reader = body.getReader()
   let finished = false
+  let readerReleased = false
+  const releaseReader = () => {
+    if (readerReleased)
+      return
+    readerReleased = true
+    reader.releaseLock()
+  }
   const cleanup = () => {
     if (finished)
       return
@@ -101,7 +113,7 @@ function streamUpstreamResponse(
         const { done, value } = await reader.read()
         if (done) {
           cleanup()
-          reader.releaseLock()
+          releaseReader()
           streamController.close()
         }
         else if (value) {
@@ -110,15 +122,19 @@ function streamUpstreamResponse(
       }
       catch (error) {
         cleanup()
-        reader.releaseLock()
+        releaseReader()
         streamController.error(error)
       }
     },
     async cancel(reason) {
       cleanup()
       controller.abort()
-      await reader.cancel(reason)
-      reader.releaseLock()
+      try {
+        await reader.cancel(reason)
+      }
+      finally {
+        releaseReader()
+      }
     },
   })
 }
diff --git a/test/unit/cached-upstream-lifecycle.test.ts b/test/unit/cached-upstream-lifecycle.test.ts
new file mode 100644
index 00000000..3d26ed54
--- /dev/null
+++ b/test/unit/cached-upstream-lifecycle.test.ts
@@ -0,0 +1,33 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { NUXT_SCRIPTS_CACHE_BASE } from '../../packages/script/src/runtime/server/utils/cache-config'
+import { createCachedBinaryFetch, createCachedJsonFetch } from '../../packages/script/src/runtime/server/utils/cached-upstream'
+
+const { defineCachedFunction } = vi.hoisted(() => ({
+  defineCachedFunction: vi.fn((fn: (...args: any[]) => any) => fn),
+}))
+
+vi.mock('nitropack/runtime', () => ({ defineCachedFunction }))
+
+describe('upstream cache storage ownership', () => {
+  beforeEach(() => {
+    defineCachedFunction.mockClear()
+  })
+
+  it('puts binary proxy payloads in the bounded Nuxt Scripts cache mount', () => {
+    createCachedBinaryFetch('binary-test', 60)
+
+    expect(defineCachedFunction).toHaveBeenCalledWith(
+      expect.any(Function),
+      expect.objectContaining({ base: NUXT_SCRIPTS_CACHE_BASE }),
+    )
+  })
+
+  it('puts JSON proxy payloads in the same bounded cache mount', () => {
+    createCachedJsonFetch('json-test', 60, url => url)
+
+    expect(defineCachedFunction).toHaveBeenCalledWith(
+      expect.any(Function),
+      expect.objectContaining({ base: NUXT_SCRIPTS_CACHE_BASE }),
+    )
+  })
+})
diff --git a/test/unit/fetch-script-lifecycle.test.ts b/test/unit/fetch-script-lifecycle.test.ts
new file mode 100644
index 00000000..189034fc
--- /dev/null
+++ b/test/unit/fetch-script-lifecycle.test.ts
@@ -0,0 +1,25 @@
+import { afterEach, describe, expect, it, vi } from 'vitest'
+import { fetchScript } from '../../packages/devtools-app/utils/fetch'
+
+describe('devtools script-size fetch lifecycle', () => {
+  afterEach(() => {
+    vi.unstubAllGlobals()
+  })
+
+  it('returns body-stream failures instead of rejecting', async () => {
+    const error = new Error('response body aborted')
+    const body = new ReadableStream<Uint8Array>({
+      pull(controller) {
+        controller.error(error)
+      },
+    })
+    vi.stubGlobal('fetch', vi.fn(() => Promise.resolve(new Response(body, {
+      headers: { 'Content-Type': 'application/javascript' },
+    }))))
+
+    await expect(fetchScript('https://example.com/script.js')).resolves.toEqual({
+      size: null,
+      error,
+    })
+  })
+})
diff --git a/test/unit/google-maps-lifecycle.test.ts b/test/unit/google-maps-lifecycle.test.ts
index 3637181d..db355b18 100644
--- a/test/unit/google-maps-lifecycle.test.ts
+++ b/test/unit/google-maps-lifecycle.test.ts
@@ -499,4 +499,23 @@ describe('waitForMapsReady', () => {
     map.value = {}
     await nextTick()
   })
+
+  it('removes the abort listener when load throws synchronously', async () => {
+    const mapsApi = shallowRef<any>(undefined)
+    const map = shallowRef<any>(undefined)
+    const status = ref<string>('loading')
+    const controller = new AbortController()
+    const removeEventListener = vi.spyOn(controller.signal, 'removeEventListener')
+    const error = new Error('load failed synchronously')
+
+    await expect(waitForMapsReady({
+      mapsApi,
+      map,
+      status,
+      load: () => { throw error },
+      signal: controller.signal,
+    })).rejects.toBe(error)
+
+    expect(removeEventListener).toHaveBeenCalledWith('abort', expect.any(Function))
+  })
 })
diff --git a/test/unit/npm-script-stub-lifecycle.test.ts b/test/unit/npm-script-stub-lifecycle.test.ts
new file mode 100644
index 00000000..b0f473c3
--- /dev/null
+++ b/test/unit/npm-script-stub-lifecycle.test.ts
@@ -0,0 +1,27 @@
+import { describe, expect, it, vi } from 'vitest'
+import { createNpmScriptStub } from '../../packages/script/src/runtime/npm-script-stub'
+
+vi.mock('../../packages/script/src/runtime/logger', () => ({
+  logger: { error: vi.fn() },
+}))
+
+describe('npm script stub lifecycle', () => {
+  it('does not retain callbacks registered after initialization fails', async () => {
+    vi.spyOn(console, 'log').mockImplementation(() => {})
+    const beforeFailure = vi.fn()
+    const afterFailure = vi.fn()
+    const stub = createNpmScriptStub({
+      key: 'failing-script',
+      clientInit: () => Promise.reject(new Error('initialization failed')),
+    })
+
+    stub.onLoaded(beforeFailure)
+    await stub.load()
+    stub.onLoaded(afterFailure)
+    await stub.load()
+
+    expect(stub.status.value).toBe('error')
+    expect(beforeFailure).not.toHaveBeenCalled()
+    expect(afterFailure).not.toHaveBeenCalled()
+  })
+})
diff --git a/test/unit/script-trigger-lifecycle.test.ts b/test/unit/script-trigger-lifecycle.test.ts
new file mode 100644
index 00000000..55f19e69
--- /dev/null
+++ b/test/unit/script-trigger-lifecycle.test.ts
@@ -0,0 +1,98 @@
+/**
+ * @vitest-environment happy-dom
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { effectScope } from 'vue'
+import { useScriptTriggerIdleTimeout } from '../../packages/script/src/runtime/composables/useScriptTriggerIdleTimeout'
+import { useScriptTriggerInteraction } from '../../packages/script/src/runtime/composables/useScriptTriggerInteraction'
+import { useScriptTriggerServiceWorker } from '../../packages/script/src/runtime/composables/useScriptTriggerServiceWorker'
+
+const readyCallbacks: Array<() => void> = []
+
+vi.mock('nuxt/app', () => ({
+  onNuxtReady: (callback: () => void) => readyCallbacks.push(callback),
+}))
+
+describe('script trigger lifecycle cleanup', () => {
+  beforeEach(() => {
+    readyCallbacks.length = 0
+    vi.useFakeTimers()
+  })
+
+  afterEach(() => {
+    vi.useRealTimers()
+    vi.restoreAllMocks()
+  })
+
+  it('does not start an idle timer after its scope is disposed before Nuxt is ready', async () => {
+    const scope = effectScope()
+    let trigger!: Promise<boolean>
+    scope.run(() => {
+      trigger = useScriptTriggerIdleTimeout({ timeout: 1000 })
+    })
+
+    scope.stop()
+    await expect(trigger).resolves.toBe(false)
+    readyCallbacks[0]!()
+    await vi.advanceTimersByTimeAsync(1000)
+
+    expect(vi.getTimerCount()).toBe(0)
+  })
+
+  it('does not install interaction listeners after its scope was disposed', async () => {
+    const target = new EventTarget()
+    const addEventListener = vi.spyOn(target, 'addEventListener')
+    const scope = effectScope()
+    let trigger!: Promise<boolean>
+    scope.run(() => {
+      trigger = useScriptTriggerInteraction({ events: ['click', 'pointerdown'], target })
+    })
+
+    scope.stop()
+    await expect(trigger).resolves.toBe(false)
+    readyCallbacks[0]!()
+
+    expect(addEventListener).not.toHaveBeenCalled()
+  })
+
+  it('removes every interaction listener when one event settles the trigger', async () => {
+    const target = new EventTarget()
+    const removeEventListener = vi.spyOn(target, 'removeEventListener')
+    const scope = effectScope()
+    let trigger!: Promise<boolean>
+    scope.run(() => {
+      trigger = useScriptTriggerInteraction({ events: ['click', 'pointerdown'], target })
+    })
+
+    readyCallbacks[0]!()
+    target.dispatchEvent(new Event('click'))
+
+    await expect(trigger).resolves.toBe(true)
+    expect(removeEventListener.mock.calls.map(([event]) => event)).toEqual(
+      expect.arrayContaining(['click', 'pointerdown']),
+    )
+    scope.stop()
+  })
+
+  it('clears the service-worker fallback timer once controllerchange fires', async () => {
+    const serviceWorker = Object.assign(new EventTarget(), { controller: null })
+    Object.defineProperty(navigator, 'serviceWorker', {
+      configurable: true,
+      value: serviceWorker,
+    })
+    const warn = vi.spyOn(console, 'warn').mockImplementation(() => {})
+    const scope = effectScope()
+    let trigger!: Promise<boolean>
+    scope.run(() => {
+      trigger = useScriptTriggerServiceWorker({ timeout: 1000 })
+    })
+
+    serviceWorker.dispatchEvent(new Event('controllerchange'))
+    await expect(trigger).resolves.toBe(true)
+    await vi.advanceTimersByTimeAsync(1000)
+
+    expect(warn).not.toHaveBeenCalled()
+    expect(vi.getTimerCount()).toBe(0)
+    scope.stop()
+  })
+})

From 691cc49c3ed5199c88b161b10640f01d9ec96098 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Thu, 16 Jul 2026 11:05:36 +1000
Subject: [PATCH 04/19] test: avoid generated devtools tsconfig dependency

---
 test/unit/fetch-script-lifecycle.test.ts | 25 ------------------------
 1 file changed, 25 deletions(-)
 delete mode 100644 test/unit/fetch-script-lifecycle.test.ts

diff --git a/test/unit/fetch-script-lifecycle.test.ts b/test/unit/fetch-script-lifecycle.test.ts
deleted file mode 100644
index 189034fc..00000000
--- a/test/unit/fetch-script-lifecycle.test.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-import { afterEach, describe, expect, it, vi } from 'vitest'
-import { fetchScript } from '../../packages/devtools-app/utils/fetch'
-
-describe('devtools script-size fetch lifecycle', () => {
-  afterEach(() => {
-    vi.unstubAllGlobals()
-  })
-
-  it('returns body-stream failures instead of rejecting', async () => {
-    const error = new Error('response body aborted')
-    const body = new ReadableStream<Uint8Array>({
-      pull(controller) {
-        controller.error(error)
-      },
-    })
-    vi.stubGlobal('fetch', vi.fn(() => Promise.resolve(new Response(body, {
-      headers: { 'Content-Type': 'application/javascript' },
-    }))))
-
-    await expect(fetchScript('https://example.com/script.js')).resolves.toEqual({
-      size: null,
-      error,
-    })
-  })
-})

From 330962a181abd566d1406e983da2a3814d6ca3e9 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Thu, 16 Jul 2026 11:46:23 +1000
Subject: [PATCH 05/19] refactor: centralize abortable readiness

---
 .../GoogleMaps/ScriptGoogleMaps.vue           | 42 +++------
 .../GoogleMaps/useGoogleMapsResource.ts       | 92 +++++--------------
 .../src/runtime/registry/usercentrics.ts      | 76 +++++++--------
 .../src/runtime/registry/youtube-player.ts    | 28 ++----
 .../src/runtime/utils/abortable-promise.ts    | 64 +++++++++++++
 test/unit/abortable-promise.test.ts           | 51 ++++++++++
 6 files changed, 190 insertions(+), 163 deletions(-)
 create mode 100644 packages/script/src/runtime/utils/abortable-promise.ts
 create mode 100644 test/unit/abortable-promise.test.ts

diff --git a/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue b/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue
index 5ca73132..4bb54fd0 100644
--- a/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue
+++ b/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue
@@ -156,6 +156,7 @@ import { computed, nextTick, onBeforeUnmount, onMounted, onUnmounted, provide, r
 import { useScriptTriggerElement } from '#nuxt-scripts/composables/useScriptTriggerElement'
 import { useScriptGoogleMaps } from '#nuxt-scripts/registry/google-maps'
 import { scriptRuntimeConfig, scriptsPrefix } from '#nuxt-scripts/utils'
+import { createAbortablePromise } from '../../utils/abortable-promise'
 import ScriptAriaLoadingIndicator from '../ScriptAriaLoadingIndicator.vue'
 import { defineDeprecatedAlias, MAP_INJECTION_KEY, waitForMapsReady, warnDeprecatedTopLevelMapProps } from './useGoogleMapsResource'
 
@@ -385,41 +386,22 @@ function importLibrary(key: string): Promise<any>
 function importLibrary<T>(key: string): Promise<T> {
   if (libraries.has(key))
     return libraries.get(key)
-  if (lifecycleController.signal.aborted) {
-    const error = new Error(`Google Maps library import "${key}" was aborted`)
-    error.name = 'AbortError'
-    return Promise.reject(error)
-  }
-  const p = mapsApi.value?.importLibrary(key) || new Promise((resolve, reject) => {
+  const p = mapsApi.value?.importLibrary(key) || createAbortablePromise((resolve, reject) => {
     let stop = () => {}
-    let settled = false
-    const cleanup = () => {
-      stop()
-      lifecycleController.signal.removeEventListener('abort', onAbort)
-    }
-    const settle = (fn: () => void) => {
-      if (settled)
-        return
-      settled = true
-      cleanup()
-      fn()
-    }
-    const onAbort = () => settle(() => {
-      const error = new Error(`Google Maps library import "${key}" was aborted`)
-      error.name = 'AbortError'
-      reject(error)
-    })
-
-    if (lifecycleController.signal.aborted) {
-      onAbort()
-      return
-    }
-    lifecycleController.signal.addEventListener('abort', onAbort, { once: true })
     stop = watch(mapsApi, (api) => {
       if (api) {
-        settle(() => resolve(api.importLibrary(key)))
+        try {
+          resolve(api.importLibrary(key))
+        }
+        catch (error) {
+          reject(error)
+        }
       }
     }, { immediate: true })
+    return () => stop()
+  }, {
+    signal: lifecycleController.signal,
+    abortMessage: `Google Maps library import "${key}" was aborted`,
   })
   // Clear cache on failure to allow retry
   const cached = Promise.resolve(p).catch((err) => {
diff --git a/packages/script/src/runtime/components/GoogleMaps/useGoogleMapsResource.ts b/packages/script/src/runtime/components/GoogleMaps/useGoogleMapsResource.ts
index 12b9a374..96bd9472 100644
--- a/packages/script/src/runtime/components/GoogleMaps/useGoogleMapsResource.ts
+++ b/packages/script/src/runtime/components/GoogleMaps/useGoogleMapsResource.ts
@@ -1,6 +1,7 @@
 import type { InjectionKey, Ref, ShallowRef } from 'vue'
 import { whenever } from '@vueuse/core'
 import { effectScope, inject, onUnmounted, ref, shallowRef, watch } from 'vue'
+import { createAbortablePromise, createAbortError } from '../../utils/abortable-promise'
 
 export const MAP_INJECTION_KEY = Symbol('map') as InjectionKey<{
   map: ShallowRef<google.maps.Map | undefined>
@@ -143,14 +144,10 @@ export async function waitForMapsReady({
   load: () => Promise<unknown> | unknown
   signal?: AbortSignal
 }): Promise<void> {
-  const abortError = () => {
-    const error = new Error('Google Maps readiness wait was aborted')
-    error.name = 'AbortError'
-    return error
-  }
+  const abortMessage = 'Google Maps readiness wait was aborted'
   const throwIfAborted = () => {
     if (signal?.aborted)
-      throw abortError()
+      throw createAbortError(abortMessage)
   }
 
   throwIfAborted()
@@ -159,35 +156,9 @@ export async function waitForMapsReady({
   if (status.value === 'error')
     throw new Error('Google Maps script failed to load')
 
-  await new Promise<void>((resolve, reject) => {
-    let settled = false
-    let onAbort: (() => void) | undefined
-    const cleanup = () => {
-      if (onAbort)
-        signal?.removeEventListener('abort', onAbort)
-    }
-    const settle = (fn: () => void) => {
-      if (settled)
-        return
-      settled = true
-      cleanup()
-      fn()
-    }
-    onAbort = () => settle(() => reject(abortError()))
-    signal?.addEventListener('abort', onAbort, { once: true })
-    let loading: Promise<unknown>
-    try {
-      loading = Promise.resolve(load())
-    }
-    catch (error) {
-      settle(() => reject(error))
-      return
-    }
-    loading.then(
-      () => settle(resolve),
-      error => settle(() => reject(error)),
-    )
-  })
+  await createAbortablePromise<void>((resolve, reject) => {
+    Promise.resolve(load()).then(() => resolve(), reject)
+  }, { signal, abortMessage })
 
   // load() may have populated both refs synchronously — re-check before
   // installing a watcher to avoid the race that hangs the promise forever.
@@ -198,42 +169,23 @@ export async function waitForMapsReady({
     throw new Error('Google Maps script failed to load')
 
   const scope = effectScope(true)
-  try {
-    await new Promise<void>((resolve, reject) => {
-      let settled = false
-      let onAbort: (() => void) | undefined
-      const cleanup = () => {
-        if (onAbort)
-          signal?.removeEventListener('abort', onAbort)
-      }
-      const settle = (fn: () => void) => {
-        if (settled)
-          return
-        settled = true
-        cleanup()
-        fn()
-      }
-      onAbort = () => settle(() => reject(abortError()))
-      signal?.addEventListener('abort', onAbort, { once: true })
-      scope.run(() => {
-        watch(
-          [mapsApi, map, status],
-          ([api, m, s]) => {
-            if (api && m) {
-              settle(resolve)
-              return
-            }
-            if (s === 'error')
-              settle(() => reject(new Error('Google Maps script failed to load')))
-          },
-          { immediate: true },
-        )
-      })
+  await createAbortablePromise<void>((resolve, reject) => {
+    scope.run(() => {
+      watch(
+        [mapsApi, map, status],
+        ([api, m, s]) => {
+          if (api && m) {
+            resolve()
+            return
+          }
+          if (s === 'error')
+            reject(new Error('Google Maps script failed to load'))
+        },
+        { immediate: true },
+      )
     })
-  }
-  finally {
-    scope.stop()
-  }
+    return () => scope.stop()
+  }, { signal, abortMessage })
 }
 
 /**
diff --git a/packages/script/src/runtime/registry/usercentrics.ts b/packages/script/src/runtime/registry/usercentrics.ts
index e5aacabd..7c1acb83 100644
--- a/packages/script/src/runtime/registry/usercentrics.ts
+++ b/packages/script/src/runtime/registry/usercentrics.ts
@@ -3,6 +3,7 @@ import { useHead } from '@unhead/vue'
 import { useNuxtApp } from 'nuxt/app'
 import { logger } from '../logger'
 import { useRegistryScript } from '../utils'
+import { createAbortablePromise, createAbortError } from '../utils/abortable-promise'
 import { UsercentricsOptions } from './schemas'
 
 export { UsercentricsOptions }
@@ -121,66 +122,51 @@ export function useScriptUsercentrics<T extends UsercentricsApi>(
   if (import.meta.client && !instance.consent) {
     let readyApi: UsercentricsCmp | undefined
     let readyPromise: Promise<UsercentricsCmp> | undefined
-    let resolveReady: ((api: UsercentricsCmp) => void) | undefined
-    let rejectReady: ((error: Error) => void) | undefined
+    const readyController = new AbortController()
     let disposed = false
-
-    const abortError = () => {
-      const error = new Error('Usercentrics readiness wait was aborted')
-      error.name = 'AbortError'
-      return error
-    }
-
-    const onReady = () => {
-      if (disposed)
-        return
-      const api = window.__ucCmp
-      if (!api)
-        return
-      readyApi = api
-      window.removeEventListener('UC_CMP_API_READY', onReady)
-      resolveReady?.(api)
-      resolveReady = undefined
-      rejectReady = undefined
-    }
     const cleanupReadyListener = () => {
       if (disposed)
         return
       disposed = true
-      window.removeEventListener('UC_CMP_API_READY', onReady)
-      const reject = rejectReady
-      resolveReady = undefined
-      rejectReady = undefined
-      reject?.(abortError())
+      readyController.abort()
     }
     const whenReady = (): Promise<UsercentricsCmp> => {
       if (disposed)
-        return Promise.reject(abortError())
+        return Promise.reject(createAbortError('Usercentrics readiness wait was aborted'))
       if (readyApi)
         return Promise.resolve(readyApi)
       if (!readyPromise) {
         // Install the event listener before checking isInitialized() so an
         // event fired during that async check cannot be missed.
-        readyPromise = new Promise((resolve, reject) => {
-          resolveReady = resolve
-          rejectReady = reject
+        readyPromise = createAbortablePromise<UsercentricsCmp>((resolve) => {
+          const onReady = () => {
+            const api = window.__ucCmp
+            if (!api)
+              return
+            readyApi = api
+            resolve(api)
+          }
           window.addEventListener('UC_CMP_API_READY', onReady)
+          const api = window.__ucCmp
+          if (api?.isInitialized) {
+            Promise.resolve()
+              .then(() => api.isInitialized())
+              .then((initialized) => {
+                if (initialized && !readyController.signal.aborted)
+                  onReady()
+              })
+              .catch((error) => {
+                // Some bootstrap stubs throw until the ready event; the event
+                // listener remains the authoritative readiness signal.
+                if (!readyController.signal.aborted)
+                  logger.debug('[usercentrics] Waiting for UC_CMP_API_READY after isInitialized() failed', error)
+              })
+          }
+          return () => window.removeEventListener('UC_CMP_API_READY', onReady)
+        }, {
+          signal: readyController.signal,
+          abortMessage: 'Usercentrics readiness wait was aborted',
         })
-        const api = window.__ucCmp
-        if (api?.isInitialized) {
-          Promise.resolve()
-            .then(() => api.isInitialized())
-            .then((initialized) => {
-              if (initialized && !disposed)
-                onReady()
-            })
-            .catch((error) => {
-              // Some bootstrap stubs throw until the ready event; the event
-              // listener remains the authoritative readiness signal.
-              if (!disposed)
-                logger.debug('[usercentrics] Waiting for UC_CMP_API_READY after isInitialized() failed', error)
-            })
-        }
       }
       return readyPromise
     }
diff --git a/packages/script/src/runtime/registry/youtube-player.ts b/packages/script/src/runtime/registry/youtube-player.ts
index 1c4506b6..b4013e2a 100644
--- a/packages/script/src/runtime/registry/youtube-player.ts
+++ b/packages/script/src/runtime/registry/youtube-player.ts
@@ -4,6 +4,7 @@ import { useHead } from '@unhead/vue'
 /// <reference types="youtube" />
 import { watch } from 'vue'
 import { useRegistryScript } from '../utils'
+import { createAbortablePromise } from '../utils/abortable-promise'
 
 export interface YouTubePlayerApi {
   YT: MaybePromise<{
@@ -39,7 +40,7 @@ const cleanupDecoratedInstances = new WeakSet<object>()
 
 export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: YouTubePlayerInput): UseScriptContext<T> {
   let readyPromise: Promise<void> = Promise.resolve()
-  let cleanupReady = () => {}
+  let readyController: AbortController | undefined
   const instance = useRegistryScript<T>('youtubePlayer', () => ({
     scriptInput: {
       src: 'https://www.youtube.com/iframe_api',
@@ -57,9 +58,10 @@ export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: You
     clientInit: import.meta.server
       ? undefined
       : () => {
-          readyPromise = new Promise((resolve, reject) => {
+          readyController?.abort()
+          readyController = new AbortController()
+          readyPromise = createAbortablePromise((resolve) => {
             const previousReady = window.onYouTubeIframeAPIReady
-            let settled = false
             let onReady: () => void
             const restoreReady = () => {
               if (window.onYouTubeIframeAPIReady !== onReady)
@@ -70,11 +72,7 @@ export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: You
                 delete (window as any).onYouTubeIframeAPIReady
             }
             onReady = () => {
-              if (settled)
-                return
-              settled = true
               restoreReady()
-              cleanupReady = () => {}
               try {
                 previousReady?.()
               }
@@ -82,17 +80,11 @@ export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: You
                 resolve()
               }
             }
-            cleanupReady = () => {
-              if (settled)
-                return
-              settled = true
-              restoreReady()
-              cleanupReady = () => {}
-              const error = new Error('YouTube API readiness wait was aborted')
-              error.name = 'AbortError'
-              reject(error)
-            }
             window.onYouTubeIframeAPIReady = onReady
+            return restoreReady
+          }, {
+            signal: readyController.signal,
+            abortMessage: 'YouTube API readiness wait was aborted',
           })
           // Removal can reject readiness before any caller has requested YT.
           // Mark the internal promise handled while preserving rejection for
@@ -104,7 +96,7 @@ export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: You
     cleanupDecoratedInstances.add(instance)
     const originalRemove = instance.remove
     instance.remove = () => {
-      cleanupReady()
+      readyController?.abort()
       cleanupDecoratedInstances.delete(instance)
       return originalRemove()
     }
diff --git a/packages/script/src/runtime/utils/abortable-promise.ts b/packages/script/src/runtime/utils/abortable-promise.ts
new file mode 100644
index 00000000..1f6d2f3f
--- /dev/null
+++ b/packages/script/src/runtime/utils/abortable-promise.ts
@@ -0,0 +1,64 @@
+export interface AbortablePromiseOptions {
+  signal?: AbortSignal
+  abortMessage?: string
+}
+
+type PromiseSetup<T> = (
+  resolve: (value: T | PromiseLike<T>) => void,
+  reject: (reason?: unknown) => void,
+) => void | (() => void)
+
+export function createAbortError(message = 'Operation aborted'): Error {
+  const error = new Error(message)
+  error.name = 'AbortError'
+  return error
+}
+
+export function createAbortablePromise<T>(
+  setup: PromiseSetup<T>,
+  options: AbortablePromiseOptions = {},
+): Promise<T> {
+  const { signal, abortMessage } = options
+  return new Promise<T>((outerResolve, outerReject) => {
+    let settled = false
+    let cleanup: (() => void) | undefined
+    let onAbort: () => void
+
+    const finish = (settle: (value: any) => void, value?: unknown) => {
+      if (settled)
+        return
+      settled = true
+      signal?.removeEventListener('abort', onAbort)
+      const currentCleanup = cleanup
+      cleanup = undefined
+      try {
+        currentCleanup?.()
+      }
+      catch (error) {
+        outerReject(error)
+        return
+      }
+      settle(value)
+    }
+    const resolve = (value: T | PromiseLike<T>) => finish(outerResolve, value)
+    const reject = (reason?: unknown) => finish(outerReject, reason)
+    onAbort = () => reject(createAbortError(abortMessage))
+
+    if (signal?.aborted) {
+      onAbort()
+      return
+    }
+
+    signal?.addEventListener('abort', onAbort, { once: true })
+    try {
+      cleanup = setup(resolve, reject) || undefined
+      if (settled) {
+        cleanup?.()
+        cleanup = undefined
+      }
+    }
+    catch (error) {
+      reject(error)
+    }
+  })
+}
diff --git a/test/unit/abortable-promise.test.ts b/test/unit/abortable-promise.test.ts
new file mode 100644
index 00000000..7dc1fc64
--- /dev/null
+++ b/test/unit/abortable-promise.test.ts
@@ -0,0 +1,51 @@
+import { describe, expect, it, vi } from 'vitest'
+import { createAbortablePromise } from '../../packages/script/src/runtime/utils/abortable-promise'
+
+describe('createAbortablePromise', () => {
+  it('runs cleanup once when resolved', async () => {
+    const cleanup = vi.fn()
+    const promise = createAbortablePromise<number>((resolve) => {
+      resolve(42)
+      return cleanup
+    })
+
+    await expect(promise).resolves.toBe(42)
+    expect(cleanup).toHaveBeenCalledOnce()
+  })
+
+  it('rejects with AbortError and runs cleanup when aborted', async () => {
+    const controller = new AbortController()
+    const cleanup = vi.fn()
+    const promise = createAbortablePromise<void>(() => cleanup, {
+      signal: controller.signal,
+      abortMessage: 'SDK readiness wait was aborted',
+    })
+
+    controller.abort()
+
+    await expect(promise).rejects.toMatchObject({
+      name: 'AbortError',
+      message: 'SDK readiness wait was aborted',
+    })
+    expect(cleanup).toHaveBeenCalledOnce()
+  })
+
+  it('does not run setup for an already-aborted signal', async () => {
+    const controller = new AbortController()
+    const setup = vi.fn()
+    controller.abort()
+
+    await expect(createAbortablePromise(setup, { signal: controller.signal })).rejects.toMatchObject({
+      name: 'AbortError',
+    })
+    expect(setup).not.toHaveBeenCalled()
+  })
+
+  it('routes synchronous setup failures to rejection', async () => {
+    const error = new Error('setup failed')
+
+    await expect(createAbortablePromise(() => {
+      throw error
+    })).rejects.toBe(error)
+  })
+})

From d58a44c1d743ce6cbb5835211e9ab830dae262e1 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Thu, 16 Jul 2026 11:49:38 +1000
Subject: [PATCH 06/19] fix: isolate readiness callback failures

---
 packages/script/src/runtime/registry/youtube-player.ts | 4 ++++
 test/unit/npm-script-stub-lifecycle.test.ts            | 6 +++++-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/packages/script/src/runtime/registry/youtube-player.ts b/packages/script/src/runtime/registry/youtube-player.ts
index b4013e2a..167afe4b 100644
--- a/packages/script/src/runtime/registry/youtube-player.ts
+++ b/packages/script/src/runtime/registry/youtube-player.ts
@@ -76,6 +76,10 @@ export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: You
               try {
                 previousReady?.()
               }
+              catch (error) {
+                if (import.meta.dev)
+                  console.error('[nuxt-scripts] Previous onYouTubeIframeAPIReady handler failed:', error)
+              }
               finally {
                 resolve()
               }
diff --git a/test/unit/npm-script-stub-lifecycle.test.ts b/test/unit/npm-script-stub-lifecycle.test.ts
index b0f473c3..1408a9a9 100644
--- a/test/unit/npm-script-stub-lifecycle.test.ts
+++ b/test/unit/npm-script-stub-lifecycle.test.ts
@@ -1,4 +1,4 @@
-import { describe, expect, it, vi } from 'vitest'
+import { afterEach, describe, expect, it, vi } from 'vitest'
 import { createNpmScriptStub } from '../../packages/script/src/runtime/npm-script-stub'
 
 vi.mock('../../packages/script/src/runtime/logger', () => ({
@@ -6,6 +6,10 @@ vi.mock('../../packages/script/src/runtime/logger', () => ({
 }))
 
 describe('npm script stub lifecycle', () => {
+  afterEach(() => {
+    vi.restoreAllMocks()
+  })
+
   it('does not retain callbacks registered after initialization fails', async () => {
     vi.spyOn(console, 'log').mockImplementation(() => {})
     const beforeFailure = vi.fn()

From d82ac7768b76f25716e749420112fa13110e2284 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Thu, 16 Jul 2026 12:10:47 +1000
Subject: [PATCH 07/19] fix: keep adopted readiness promises abortable

---
 .../GoogleMaps/ScriptGoogleMaps.vue           |  4 ++--
 .../src/runtime/utils/abortable-promise.ts    | 21 ++++++++++++++++++-
 test/unit/abortable-promise.test.ts           | 17 +++++++++++++++
 3 files changed, 39 insertions(+), 3 deletions(-)

diff --git a/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue b/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue
index 4bb54fd0..bd9d624e 100644
--- a/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue
+++ b/packages/script/src/runtime/components/GoogleMaps/ScriptGoogleMaps.vue
@@ -386,12 +386,12 @@ function importLibrary(key: string): Promise<any>
 function importLibrary<T>(key: string): Promise<T> {
   if (libraries.has(key))
     return libraries.get(key)
-  const p = mapsApi.value?.importLibrary(key) || createAbortablePromise((resolve, reject) => {
+  const p = createAbortablePromise<T>((resolve, reject) => {
     let stop = () => {}
     stop = watch(mapsApi, (api) => {
       if (api) {
         try {
-          resolve(api.importLibrary(key))
+          resolve(api.importLibrary(key) as Promise<T>)
         }
         catch (error) {
           reject(error)
diff --git a/packages/script/src/runtime/utils/abortable-promise.ts b/packages/script/src/runtime/utils/abortable-promise.ts
index 1f6d2f3f..054e4319 100644
--- a/packages/script/src/runtime/utils/abortable-promise.ts
+++ b/packages/script/src/runtime/utils/abortable-promise.ts
@@ -40,8 +40,27 @@ export function createAbortablePromise<T>(
       }
       settle(value)
     }
-    const resolve = (value: T | PromiseLike<T>) => finish(outerResolve, value)
     const reject = (reason?: unknown) => finish(outerReject, reason)
+    const resolve = (value: T | PromiseLike<T>) => {
+      if ((typeof value === 'object' && value !== null) || typeof value === 'function') {
+        let then: unknown
+        try {
+          then = (value as PromiseLike<T>).then
+        }
+        catch (error) {
+          reject(error)
+          return
+        }
+        if (typeof then === 'function') {
+          Promise.resolve(value).then(
+            resolved => finish(outerResolve, resolved),
+            reject,
+          )
+          return
+        }
+      }
+      finish(outerResolve, value)
+    }
     onAbort = () => reject(createAbortError(abortMessage))
 
     if (signal?.aborted) {
diff --git a/test/unit/abortable-promise.test.ts b/test/unit/abortable-promise.test.ts
index 7dc1fc64..3f860c46 100644
--- a/test/unit/abortable-promise.test.ts
+++ b/test/unit/abortable-promise.test.ts
@@ -30,6 +30,23 @@ describe('createAbortablePromise', () => {
     expect(cleanup).toHaveBeenCalledOnce()
   })
 
+  it('keeps abort handling active while adopting a pending promise', async () => {
+    const controller = new AbortController()
+    const cleanup = vi.fn()
+    const inner = Promise.withResolvers<number>()
+    const promise = createAbortablePromise<number>((resolve) => {
+      resolve(inner.promise)
+      return cleanup
+    }, { signal: controller.signal })
+
+    controller.abort()
+
+    await expect(promise).rejects.toMatchObject({ name: 'AbortError' })
+    inner.resolve(42)
+    await inner.promise
+    expect(cleanup).toHaveBeenCalledOnce()
+  })
+
   it('does not run setup for an already-aborted signal', async () => {
     const controller = new AbortController()
     const setup = vi.fn()

From 5309879ed6912fbb3e0184b663c5f33bd05860f5 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Sun, 19 Jul 2026 14:05:38 +1000
Subject: [PATCH 08/19] fix(script): separate app and consumer lifecycles

---
 .../src/runtime/composables/useScript.ts      | 74 ++++++++++++-------
 1 file changed, 47 insertions(+), 27 deletions(-)

diff --git a/packages/script/src/runtime/composables/useScript.ts b/packages/script/src/runtime/composables/useScript.ts
index d8aa0ea4..223b0fa0 100644
--- a/packages/script/src/runtime/composables/useScript.ts
+++ b/packages/script/src/runtime/composables/useScript.ts
@@ -313,8 +313,13 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
     }
   }
 
+  // Nuxt returns a caller-owned handle while Unhead keeps the script resource
+  // shared on the request/app-local head instance.
+  ;(options as any).scope = true
   const instance = _useScript<T>(input, options as any as UseScriptOptions<T>) as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>> & { reload: () => Promise<T> }
-
+  // Unhead v3 returns a consumer scope whose `script` property is the shared
+  // backing instance. Older Unhead versions return that shared instance directly.
+  const sharedInstance = ((instance as any).script || instance) as typeof instance
   // _useScript still needs to run for repeated calls because @unhead/vue
   // registers the caller's scoped callbacks. The shared instance itself must
   // only be decorated once, otherwise every mount stacks app-global hooks and
@@ -322,8 +327,15 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
   if (exists)
     return instance as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>>
 
+  // `$scripts` is app-owned and must not retain the first component's disposable
+  // scope. Its reactive status is shared, while lifecycle methods inherit from
+  // the stable Unhead resource.
+  const appInstance = (instance as any).script
+    ? Object.assign(Object.create(sharedInstance), { status: instance.status }) as typeof instance
+    : instance
   markRaw(instance as any)
-  ;(instance as any).toJSON = () => ({ id: instance.id, status: instance.status.value })
+  markRaw(appInstance as any)
+  ;(sharedInstance as any).toJSON = () => ({ id: instance.id, status: instance.status.value })
 
   const cleanupFns = new Set<() => void>()
   let cleaned = false
@@ -340,7 +352,7 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
     for (const cleanup of cleanupFns)
       cleanup()
     cleanupFns.clear()
-    if (nuxtApp.$scripts[id] === instance)
+    if (nuxtApp.$scripts[id] === appInstance)
       delete nuxtApp.$scripts[id]
     if (import.meta.dev && import.meta.client && nuxtApp._scripts?.[instance.id]) {
       delete nuxtApp._scripts[instance.id]
@@ -348,21 +360,21 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
     }
   }
 
-  let currentRemove = instance.remove
-  let currentLoad = instance.load
-  instance.remove = () => {
+  let currentRemove = sharedInstance.remove
+  let currentLoad = sharedInstance.load
+  sharedInstance.remove = () => {
     const result = currentRemove()
     cleanupInstance()
     return result
   }
-  instance.load = async () => {
+  sharedInstance.load = async () => {
     if (err) {
       return Promise.reject(err)
     }
     return currentLoad()
   }
   // Add reload method for scripts that need to re-execute (e.g., DOM-scanning scripts)
-  instance.reload = async () => {
+  sharedInstance.reload = async () => {
     if (err)
       return Promise.reject(err)
 
@@ -374,17 +386,25 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
       ? { src: input, key: `${id}-${Date.now()}` }
       : { ...input, key: `${id}-${Date.now()}` }
     // Re-create the script entry
-    const reloaded = _useScript<T>(reloadInput, { ...options, trigger: 'client' } as any as UseScriptOptions<T>)
-    currentRemove = reloaded.remove
-    currentLoad = reloaded.load
-    // Copy over the new instance properties
-    Object.assign(instance, {
-      status: reloaded.status,
-      entry: reloaded.entry,
-    })
+    const reloaded = _useScript<T>(reloadInput, { ...options, scope: false, trigger: 'client' } as any as UseScriptOptions<T>)
+    const reloadedShared = ((reloaded as any).script || reloaded) as typeof reloaded
+    currentRemove = reloadedShared.remove
+    currentLoad = reloadedShared.load
+    // Vue scopes expose status through their shared script's private ref. Keep
+    // the stable public instance wired to the replacement script across reloads.
+    if ((instance as any).script) {
+      ;(sharedInstance as any)._statusRef = reloaded.status
+      sharedInstance.entry = reloadedShared.entry
+    }
+    else {
+      Object.assign(sharedInstance, {
+        status: reloaded.status,
+        entry: reloaded.entry,
+      })
+    }
     return currentLoad()
   }
-  nuxtApp.$scripts[id] = instance
+  nuxtApp.$scripts[id] = appInstance
   addCleanup(nuxtApp.hooks.hook('app:unmount' as any, () => {
     currentRemove()
     cleanupInstance()
@@ -424,18 +444,18 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
       const fn = status === 'error' ? log.warn : log.debug
       fn(`status: ${status}`, payload)
     }))
-    const _origLoad = instance.load
-    instance.load = () => {
+    const _origLoad = sharedInstance.load
+    sharedInstance.load = () => {
       log.debug('load() called', ctx)
       return _origLoad()
     }
-    const _origRemove = instance.remove
-    instance.remove = () => {
+    const _origRemove = sharedInstance.remove
+    sharedInstance.remove = () => {
       log.debug('remove() called', ctx)
       return _origRemove()
     }
-    const _origReload = instance.reload
-    instance.reload = async () => {
+    const _origReload = sharedInstance.reload
+    sharedInstance.reload = async () => {
       log.debug('reload() called', ctx)
       return _origReload()
     }
@@ -470,7 +490,7 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
           status: ctx.script.status,
           at: Date.now(),
         }, DEVTOOLS_EVENT_LIMIT)
-        payload.$script = instance
+        payload.$script = appInstance
         syncScripts()
       }))
       // @ts-expect-error untyped
@@ -485,7 +505,7 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
         }, DEVTOOLS_EVENT_LIMIT)
         syncScripts()
       }))
-      payload.$script = instance
+      payload.$script = appInstance
       if (err) {
         pushBounded(payload.events, {
           type: 'status',
@@ -510,8 +530,8 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
       let disconnectObserver = observeNetworkRequests(payload, domains, syncScripts, input.src)
       addCleanup(() => disconnectObserver())
       // Clean up observer when script is removed, but keep it alive across reload()
-      const _origReload = instance.reload
-      instance.reload = async () => {
+      const _origReload = sharedInstance.reload
+      sharedInstance.reload = async () => {
         // Disconnect before reload, reconnect after so new network entries are tracked
         disconnectObserver()
         try {

From 6ba70b8120fbc648e7ea86bac43b5ce9489db641 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Sun, 19 Jul 2026 15:54:33 +1000
Subject: [PATCH 09/19] fix: preserve shared useScript behavior

---
 .../src/runtime/composables/useScript.ts      | 86 ++++++++-----------
 1 file changed, 34 insertions(+), 52 deletions(-)

diff --git a/packages/script/src/runtime/composables/useScript.ts b/packages/script/src/runtime/composables/useScript.ts
index 223b0fa0..12bf15ad 100644
--- a/packages/script/src/runtime/composables/useScript.ts
+++ b/packages/script/src/runtime/composables/useScript.ts
@@ -313,29 +313,20 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
     }
   }
 
-  // Nuxt returns a caller-owned handle while Unhead keeps the script resource
-  // shared on the request/app-local head instance.
-  ;(options as any).scope = true
-  const instance = _useScript<T>(input, options as any as UseScriptOptions<T>) as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>> & { reload: () => Promise<T> }
-  // Unhead v3 returns a consumer scope whose `script` property is the shared
-  // backing instance. Older Unhead versions return that shared instance directly.
-  const sharedInstance = ((instance as any).script || instance) as typeof instance
-  // _useScript still needs to run for repeated calls because @unhead/vue
-  // registers the caller's scoped callbacks. The shared instance itself must
-  // only be decorated once, otherwise every mount stacks app-global hooks and
-  // wrapper closures around the same object.
+  const unheadOptions = { ...options }
+  const instance = _useScript<T>(input, unheadOptions as any as UseScriptOptions<T>) as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>> & { reload: () => Promise<T> }
+  // @unhead/vue v2 mutates the passed object with the current component. The
+  // core script keeps that options object, so release the component reference
+  // after event handlers have been bound. Newer Unhead versions clone it.
+  delete (unheadOptions as any).eventContext
+  // _useScript still needs to run for repeated calls so @unhead/vue can bind
+  // caller callbacks to the active Vue scope. Decorate the shared resource only
+  // once so repeated mounts do not stack app-global hooks and wrappers.
   if (exists)
     return instance as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>>
 
-  // `$scripts` is app-owned and must not retain the first component's disposable
-  // scope. Its reactive status is shared, while lifecycle methods inherit from
-  // the stable Unhead resource.
-  const appInstance = (instance as any).script
-    ? Object.assign(Object.create(sharedInstance), { status: instance.status }) as typeof instance
-    : instance
   markRaw(instance as any)
-  markRaw(appInstance as any)
-  ;(sharedInstance as any).toJSON = () => ({ id: instance.id, status: instance.status.value })
+  ;(instance as any).toJSON = () => ({ id: instance.id, status: instance.status.value })
 
   const cleanupFns = new Set<() => void>()
   let cleaned = false
@@ -352,7 +343,7 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
     for (const cleanup of cleanupFns)
       cleanup()
     cleanupFns.clear()
-    if (nuxtApp.$scripts[id] === appInstance)
+    if (nuxtApp.$scripts[id] === instance)
       delete nuxtApp.$scripts[id]
     if (import.meta.dev && import.meta.client && nuxtApp._scripts?.[instance.id]) {
       delete nuxtApp._scripts[instance.id]
@@ -360,21 +351,21 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
     }
   }
 
-  let currentRemove = sharedInstance.remove
-  let currentLoad = sharedInstance.load
-  sharedInstance.remove = () => {
+  let currentRemove = instance.remove
+  let currentLoad = instance.load
+  instance.remove = () => {
     const result = currentRemove()
     cleanupInstance()
     return result
   }
-  sharedInstance.load = async () => {
+  instance.load = async () => {
     if (err) {
       return Promise.reject(err)
     }
     return currentLoad()
   }
   // Add reload method for scripts that need to re-execute (e.g., DOM-scanning scripts)
-  sharedInstance.reload = async () => {
+  instance.reload = async () => {
     if (err)
       return Promise.reject(err)
 
@@ -386,25 +377,16 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
       ? { src: input, key: `${id}-${Date.now()}` }
       : { ...input, key: `${id}-${Date.now()}` }
     // Re-create the script entry
-    const reloaded = _useScript<T>(reloadInput, { ...options, scope: false, trigger: 'client' } as any as UseScriptOptions<T>)
-    const reloadedShared = ((reloaded as any).script || reloaded) as typeof reloaded
-    currentRemove = reloadedShared.remove
-    currentLoad = reloadedShared.load
-    // Vue scopes expose status through their shared script's private ref. Keep
-    // the stable public instance wired to the replacement script across reloads.
-    if ((instance as any).script) {
-      ;(sharedInstance as any)._statusRef = reloaded.status
-      sharedInstance.entry = reloadedShared.entry
-    }
-    else {
-      Object.assign(sharedInstance, {
-        status: reloaded.status,
-        entry: reloaded.entry,
-      })
-    }
+    const reloaded = _useScript<T>(reloadInput, { ...options, trigger: 'client' } as any as UseScriptOptions<T>)
+    currentRemove = reloaded.remove
+    currentLoad = reloaded.load
+    // Both supported @unhead/vue majors expose status through `_statusRef`.
+    // Repoint it without overwriting the core script's string status.
+    ;(instance as any)._statusRef = reloaded.status
+    instance.entry = reloaded.entry
     return currentLoad()
   }
-  nuxtApp.$scripts[id] = appInstance
+  nuxtApp.$scripts[id] = instance
   addCleanup(nuxtApp.hooks.hook('app:unmount' as any, () => {
     currentRemove()
     cleanupInstance()
@@ -444,18 +426,18 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
       const fn = status === 'error' ? log.warn : log.debug
       fn(`status: ${status}`, payload)
     }))
-    const _origLoad = sharedInstance.load
-    sharedInstance.load = () => {
+    const _origLoad = instance.load
+    instance.load = () => {
       log.debug('load() called', ctx)
       return _origLoad()
     }
-    const _origRemove = sharedInstance.remove
-    sharedInstance.remove = () => {
+    const _origRemove = instance.remove
+    instance.remove = () => {
       log.debug('remove() called', ctx)
       return _origRemove()
     }
-    const _origReload = sharedInstance.reload
-    sharedInstance.reload = async () => {
+    const _origReload = instance.reload
+    instance.reload = async () => {
       log.debug('reload() called', ctx)
       return _origReload()
     }
@@ -490,7 +472,7 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
           status: ctx.script.status,
           at: Date.now(),
         }, DEVTOOLS_EVENT_LIMIT)
-        payload.$script = appInstance
+        payload.$script = instance
         syncScripts()
       }))
       // @ts-expect-error untyped
@@ -505,7 +487,7 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
         }, DEVTOOLS_EVENT_LIMIT)
         syncScripts()
       }))
-      payload.$script = appInstance
+      payload.$script = instance
       if (err) {
         pushBounded(payload.events, {
           type: 'status',
@@ -530,8 +512,8 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
       let disconnectObserver = observeNetworkRequests(payload, domains, syncScripts, input.src)
       addCleanup(() => disconnectObserver())
       // Clean up observer when script is removed, but keep it alive across reload()
-      const _origReload = sharedInstance.reload
-      sharedInstance.reload = async () => {
+      const _origReload = instance.reload
+      instance.reload = async () => {
         // Disconnect before reload, reconnect after so new network entries are tracked
         disconnectObserver()
         try {

From 460a54419d2defe2ef5aa0f1b56f97b828f8231f Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Sun, 19 Jul 2026 16:15:17 +1000
Subject: [PATCH 10/19] fix(script): keep reload lifecycle live

---
 .../src/runtime/composables/useScript.ts      | 22 +++++---
 .../src/runtime/registry/youtube-player.ts    |  8 +--
 test/unit/youtube-player-lifecycle.test.ts    | 51 +++++++++++++++++++
 3 files changed, 70 insertions(+), 11 deletions(-)
 create mode 100644 test/unit/youtube-player-lifecycle.test.ts

diff --git a/packages/script/src/runtime/composables/useScript.ts b/packages/script/src/runtime/composables/useScript.ts
index 12bf15ad..148b15d4 100644
--- a/packages/script/src/runtime/composables/useScript.ts
+++ b/packages/script/src/runtime/composables/useScript.ts
@@ -3,7 +3,8 @@ import type { NuxtDevToolsNetworkRequest, NuxtDevToolsScriptInstance, NuxtUseScr
 import { useScript as _useScript } from '@unhead/vue/scripts'
 import { defu } from 'defu'
 import { injectHead, onNuxtReady, useHead, useNuxtApp, useRuntimeConfig } from 'nuxt/app'
-import { markRaw, ref } from 'vue'
+import { markRaw, ref, watch } from 'vue'
+// @ts-expect-error virtual template
 import { resolveTrigger } from '#build/nuxt-scripts-trigger-resolver'
 import { debugEnabled } from '../debug'
 import { logger } from '../logger'
@@ -330,6 +331,8 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
 
   const cleanupFns = new Set<() => void>()
   let cleaned = false
+  const publicStatus = instance.status
+  let stopStatusSync = () => {}
   const addCleanup = (cleanup: () => void) => {
     if (cleaned)
       cleanup()
@@ -353,6 +356,7 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
 
   let currentRemove = instance.remove
   let currentLoad = instance.load
+  addCleanup(() => stopStatusSync())
   instance.remove = () => {
     const result = currentRemove()
     cleanupInstance()
@@ -377,19 +381,22 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
       ? { src: input, key: `${id}-${Date.now()}` }
       : { ...input, key: `${id}-${Date.now()}` }
     // Re-create the script entry
-    const reloaded = _useScript<T>(reloadInput, { ...options, trigger: 'client' } as any as UseScriptOptions<T>)
+    const reloadOptions = { ...options, trigger: 'client' }
+    const reloaded = _useScript<T>(reloadInput, reloadOptions as any as UseScriptOptions<T>)
+    delete (reloadOptions as any).eventContext
     currentRemove = reloaded.remove
     currentLoad = reloaded.load
-    // Both supported @unhead/vue majors expose status through `_statusRef`.
-    // Repoint it without overwriting the core script's string status.
-    ;(instance as any)._statusRef = reloaded.status
+    stopStatusSync()
+    stopStatusSync = watch(reloaded.status, status => publicStatus.value = status, {
+      flush: 'sync',
+      immediate: true,
+    })
     instance.entry = reloaded.entry
     return currentLoad()
   }
   nuxtApp.$scripts[id] = instance
   addCleanup(nuxtApp.hooks.hook('app:unmount' as any, () => {
-    currentRemove()
-    cleanupInstance()
+    instance.remove()
   }))
 
   // Debug logging: emit a structured log per script lifecycle event when debug
@@ -530,3 +537,4 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
   }
   return instance as any as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>>
 }
+
diff --git a/packages/script/src/runtime/registry/youtube-player.ts b/packages/script/src/runtime/registry/youtube-player.ts
index 167afe4b..fa8ae446 100644
--- a/packages/script/src/runtime/registry/youtube-player.ts
+++ b/packages/script/src/runtime/registry/youtube-player.ts
@@ -36,7 +36,7 @@ declare global {
 }
 
 export type YouTubePlayerInput = RegistryScriptInput
-const cleanupDecoratedInstances = new WeakSet<object>()
+const cleanupDecoration = Symbol('nuxt-scripts:youtube-cleanup')
 
 export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: YouTubePlayerInput): UseScriptContext<T> {
   let readyPromise: Promise<void> = Promise.resolve()
@@ -96,12 +96,12 @@ export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: You
           void readyPromise.then(undefined, () => undefined)
         },
   }), _options)
-  if (import.meta.client && !cleanupDecoratedInstances.has(instance)) {
-    cleanupDecoratedInstances.add(instance)
+  if (import.meta.client && !(instance as any)[cleanupDecoration]) {
+    ;(instance as any)[cleanupDecoration] = true
     const originalRemove = instance.remove
     instance.remove = () => {
       readyController?.abort()
-      cleanupDecoratedInstances.delete(instance)
+      delete (instance as any)[cleanupDecoration]
       return originalRemove()
     }
   }
diff --git a/test/unit/youtube-player-lifecycle.test.ts b/test/unit/youtube-player-lifecycle.test.ts
new file mode 100644
index 00000000..2e8e102f
--- /dev/null
+++ b/test/unit/youtube-player-lifecycle.test.ts
@@ -0,0 +1,51 @@
+/**
+ * @vitest-environment happy-dom
+ */
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { ref } from 'vue'
+import { useScriptYouTubePlayer } from '../../packages/script/src/runtime/registry/youtube-player'
+
+const mocks = vi.hoisted(() => {
+  const remove = vi.fn(() => true)
+  const shared: any = {
+    status: undefined,
+    remove,
+  }
+  const createHandle = () => new Proxy(shared, {})
+  return {
+    createHandle,
+    remove,
+    shared,
+    useRegistryScript: vi.fn(() => createHandle()),
+  }
+})
+
+vi.mock('@unhead/vue', () => ({ useHead: vi.fn() }))
+
+vi.mock('../../packages/script/src/runtime/utils', () => ({
+  useRegistryScript: mocks.useRegistryScript,
+}))
+
+describe('youtube player lifecycle', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    mocks.shared.status = ref('loaded')
+    mocks.shared.remove = mocks.remove
+    for (const symbol of Object.getOwnPropertySymbols(mocks.shared))
+      delete (mocks.shared as any)[symbol]
+    mocks.useRegistryScript.mockImplementation(() => mocks.createHandle() as any)
+  })
+
+  it('decorates the shared remove method only once across Vue proxies', () => {
+    const first = useScriptYouTubePlayer({})
+    const decoratedRemove = mocks.shared.remove
+    const second = useScriptYouTubePlayer({})
+
+    expect(first).not.toBe(second)
+    expect(mocks.shared.remove).toBe(decoratedRemove)
+    expect(second.remove).toBe(decoratedRemove)
+
+    expect(first.remove()).toBe(true)
+    expect(mocks.remove).toHaveBeenCalledOnce()
+  })
+})

From 2ec41d60042b195119e6163e58549624a6d67b83 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Sun, 19 Jul 2026 16:41:00 +1000
Subject: [PATCH 11/19] fix(script): retain shared cleanup marker

---
 packages/script/src/runtime/registry/youtube-player.ts | 1 -
 test/unit/youtube-player-lifecycle.test.ts             | 3 +++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/packages/script/src/runtime/registry/youtube-player.ts b/packages/script/src/runtime/registry/youtube-player.ts
index fa8ae446..cf64c67c 100644
--- a/packages/script/src/runtime/registry/youtube-player.ts
+++ b/packages/script/src/runtime/registry/youtube-player.ts
@@ -101,7 +101,6 @@ export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: You
     const originalRemove = instance.remove
     instance.remove = () => {
       readyController?.abort()
-      delete (instance as any)[cleanupDecoration]
       return originalRemove()
     }
   }
diff --git a/test/unit/youtube-player-lifecycle.test.ts b/test/unit/youtube-player-lifecycle.test.ts
index 2e8e102f..d43c5fa3 100644
--- a/test/unit/youtube-player-lifecycle.test.ts
+++ b/test/unit/youtube-player-lifecycle.test.ts
@@ -47,5 +47,8 @@ describe('youtube player lifecycle', () => {
 
     expect(first.remove()).toBe(true)
     expect(mocks.remove).toHaveBeenCalledOnce()
+
+    const afterRemove = useScriptYouTubePlayer({})
+    expect(afterRemove.remove).toBe(decoratedRemove)
   })
 })

From df3c5b709fbacd45d3066f900d82027b31c0fcf8 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Tue, 4 Aug 2026 16:07:34 +1000
Subject: [PATCH 12/19] test: exercise Unhead 3.3 script proxy

---
 .nuxtrc                                       |   2 +-
 .../src/runtime/composables/useScript.ts      |   2 -
 pnpm-lock.yaml                                | 776 ++++++++++++++----
 pnpm-workspace.yaml                           |   8 +-
 test/e2e/unhead-v3-compat.test.ts             |  14 +-
 test/fixtures/unhead-v3/app.vue               |  31 +
 test/fixtures/unhead-v3/nuxt.config.ts        |   5 +-
 test/fixtures/unhead-v3/package.json          |   2 +-
 test/fixtures/unhead-v3/public/fixture-api.js |  11 +
 test/unit/cached-upstream-lifecycle.test.ts   |   2 +-
 10 files changed, 678 insertions(+), 175 deletions(-)
 create mode 100644 test/fixtures/unhead-v3/public/fixture-api.js

diff --git a/.nuxtrc b/.nuxtrc
index 21d58a32..bf04de47 100644
--- a/.nuxtrc
+++ b/.nuxtrc
@@ -1,3 +1,3 @@
 imports.autoImport=true
 modules.0="@nuxt/scripts"
-setups.@nuxt/test-utils="4.0.3"
\ No newline at end of file
+setups.@nuxt/test-utils="4.1.0"
\ No newline at end of file
diff --git a/packages/script/src/runtime/composables/useScript.ts b/packages/script/src/runtime/composables/useScript.ts
index 148b15d4..c3808f76 100644
--- a/packages/script/src/runtime/composables/useScript.ts
+++ b/packages/script/src/runtime/composables/useScript.ts
@@ -4,7 +4,6 @@ import { useScript as _useScript } from '@unhead/vue/scripts'
 import { defu } from 'defu'
 import { injectHead, onNuxtReady, useHead, useNuxtApp, useRuntimeConfig } from 'nuxt/app'
 import { markRaw, ref, watch } from 'vue'
-// @ts-expect-error virtual template
 import { resolveTrigger } from '#build/nuxt-scripts-trigger-resolver'
 import { debugEnabled } from '../debug'
 import { logger } from '../logger'
@@ -537,4 +536,3 @@ export function useScript<T extends Record<symbol | string, any> = Record<symbol
   }
   return instance as any as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>>
 }
-
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 5ca1af0d..e2314c20 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -168,7 +168,7 @@ catalogs:
 
 overrides:
   '@nuxt/scripts': workspace:*
-  unhead-v3-fixture>@unhead/vue: ^3.0.0
+  unhead-v3-fixture>@unhead/vue: 3.3.0
   vitest-environment-nuxt: 2.0.0
 
 importers:
@@ -234,7 +234,7 @@ importers:
         version: 6.5.2
       nuxt:
         specifier: 'catalog:'
-        version: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.2))(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
+        version: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.2))(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
       ofetch:
         specifier: 'catalog:'
         version: 1.5.1
@@ -297,7 +297,7 @@ importers:
         version: 14.4.0(vue@3.5.40(typescript@6.0.3))
       nuxt:
         specifier: 'catalog:'
-        version: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
+        version: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
       ofetch:
         specifier: 'catalog:'
         version: 1.5.1
@@ -430,7 +430,7 @@ importers:
         version: 4.10.0(aab1a353175973b09ffc8888cc1606bb)
       nuxt:
         specifier: 'catalog:'
-        version: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
+        version: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
     devDependencies:
       '@nuxt/kit':
         specifier: 'catalog:'
@@ -442,11 +442,11 @@ importers:
         specifier: workspace:*
         version: link:../../../packages/script
       '@unhead/vue':
-        specifier: ^3.0.0
-        version: 3.1.0(crossws@0.4.10(srvx@0.12.5))(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
+        specifier: 3.3.0
+        version: 3.3.0(@oxc-project/types@0.142.0)(@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(esbuild@0.28.1)(lightningcss@1.32.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
       nuxt:
         specifier: 'catalog:'
-        version: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
+        version: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(cac@7.0.0)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
 
 packages:
 
@@ -3626,6 +3626,36 @@ packages:
       webpack:
         optional: true
 
+  '@unhead/bundler@3.3.0':
+    resolution: {integrity: sha512-H5Zvq5PjT6/ojRROs2PqE4MOrvwuTcMfYUQTx9HUdmS3uqfqK9pKZEkZTLC/8WUVWyiyPv6NW3+CK+3w0IUaww==}
+    peerDependencies:
+      '@unhead/cli': ^3.3.0
+      '@vitejs/devtools-kit': ^0.4.1
+      esbuild: '>=0.17.0'
+      lightningcss: '>=1.20.0'
+      oxc-parser: '>=0.98.0'
+      rolldown: '>=1.0.0'
+      unhead: ^3.3.0
+      vite: '>=6.4.2'
+      webpack: '>=5.0.0'
+    peerDependenciesMeta:
+      '@unhead/cli':
+        optional: true
+      '@vitejs/devtools-kit':
+        optional: true
+      esbuild:
+        optional: true
+      lightningcss:
+        optional: true
+      oxc-parser:
+        optional: true
+      rolldown:
+        optional: true
+      vite:
+        optional: true
+      webpack:
+        optional: true
+
   '@unhead/vue@2.1.15':
     resolution: {integrity: sha512-SSByXfEjhzPn8gXdEdgpYqpLMPSkLUH2HVE0GxZfOtNsJ0GgOHQs0g9T67ZZ1z0kTELLKdtOtYrzrbv9+ffF7g==}
     peerDependencies:
@@ -3655,6 +3685,18 @@ packages:
       webpack:
         optional: true
 
+  '@unhead/vue@3.3.0':
+    resolution: {integrity: sha512-VUCYDCAIt7+izwxVqkHdZ4vP/gsrNYCUZ3Jp5/k8oDPAqbv/gu2p40NrQbM7OXNrUlHCCvJ0qZE+0nXrVtHTqg==}
+    peerDependencies:
+      vite: '>=6.4.2'
+      vue: '>=3.5.18'
+      webpack: '>=5.0.0'
+    peerDependenciesMeta:
+      vite:
+        optional: true
+      webpack:
+        optional: true
+
   '@valibot/to-json-schema@1.7.0':
     resolution: {integrity: sha512-Y3pPVibbIOHzohrlxSINvO7w/bvXkoYS3BQHoImV9ynE+bXKf171bdMucPurV2zp7gdmt0L1HCcNAsbo7cFRQw==}
     peerDependencies:
@@ -4324,14 +4366,6 @@ packages:
       srvx:
         optional: true
 
-  crossws@0.4.6:
-    resolution: {integrity: sha512-/Wxe9Z007EbJ496j88nToZEvyPZ8PY/wjZJ18Agh/GCA9cYHyLbxtrpdFlFzAw3TV20F0SUYGl0g6PzChbwUrg==}
-    peerDependencies:
-      srvx: '>=0.11.5'
-    peerDependenciesMeta:
-      srvx:
-        optional: true
-
   css-declaration-sorter@7.3.1:
     resolution: {integrity: sha512-gz6x+KkgNCjxq3Var03pRYLhyNfwhkKF1g/yoLgDNtFvVu0/fOLV9C8fFEZRjACp/XQLumjAYo7JVjzH3wLbxA==}
     engines: {node: ^14 || ^16 || >=18}
@@ -7282,6 +7316,14 @@ packages:
       vite:
         optional: true
 
+  unhead@3.3.0:
+    resolution: {integrity: sha512-cMqydgLO/qSJBshSM8nVFpihwjefJ5X+G3xhw5QwyPtkcS4+G1c3WFJ+UP9QEYor/2NfZ5hzGXl8iUMpsRxXkA==}
+    peerDependencies:
+      vite: '>=6.4.2'
+    peerDependenciesMeta:
+      vite:
+        optional: true
+
   unicorn-magic@0.3.0:
     resolution: {integrity: sha512-+QBBXBCvifc56fsbuxZQ6Sic3wqqc3WWaqxs58gvJrcOuN83HGTCwz3oS5phzU9LthRNE9VrJCFCLUgHeeFnfA==}
     engines: {node: '>=18'}
@@ -8150,6 +8192,11 @@ snapshots:
       cac: 6.7.14
       citty: 0.2.2
 
+  '@bomb.sh/tab@0.0.19(cac@7.0.0)(citty@0.2.2)':
+    optionalDependencies:
+      cac: 7.0.0
+      citty: 0.2.2
+
   '@capsizecss/unpack@4.0.0':
     dependencies:
       fontkitten: 1.0.3
@@ -8182,6 +8229,17 @@ snapshots:
 
   '@colordx/core@5.5.0': {}
 
+  '@devframes/hub@0.7.16(devframe@0.7.16(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3))':
+    dependencies:
+      birpc: 4.0.0
+      destr: 2.0.5
+      devframe: 0.7.16(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)
+      nostics: 1.2.0
+      pathe: 2.0.3
+      perfect-debounce: 2.1.0
+      tinyexec: 1.2.4
+      zigpty: 0.2.1
+
   '@devframes/hub@0.7.16(devframe@0.7.16(srvx@0.11.22)(typescript@6.0.3))':
     dependencies:
       birpc: 4.0.0
@@ -8193,6 +8251,15 @@ snapshots:
       tinyexec: 1.2.4
       zigpty: 0.2.1
 
+  '@devframes/json-render@0.7.16(@devframes/hub@0.7.16(devframe@0.7.16(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)))(devframe@0.7.16(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3))':
+    dependencies:
+      '@json-render/core': 0.19.0(zod@4.4.3)
+      devframe: 0.7.16(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)
+      nostics: 1.2.0
+      zod: 4.4.3
+    optionalDependencies:
+      '@devframes/hub': 0.7.16(devframe@0.7.16(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3))
+
   '@devframes/json-render@0.7.16(@devframes/hub@0.7.16(devframe@0.7.16(srvx@0.11.22)(typescript@6.0.3)))(devframe@0.7.16(srvx@0.11.22)(typescript@6.0.3))':
     dependencies:
       '@json-render/core': 0.19.0(zod@4.4.3)
@@ -8843,7 +8910,83 @@ snapshots:
       giget: 3.3.0
       jiti: 2.7.0
       listhen: 1.10.0(srvx@0.11.22)
-      nypm: 0.6.8
+      nypm: 0.6.9
+      ofetch: 1.5.1
+      ohash: 2.0.11
+      pathe: 2.0.3
+      perfect-debounce: 2.1.0
+      pkg-types: 2.3.1
+      scule: 1.3.0
+      semver: 7.8.5
+      srvx: 0.11.22
+      std-env: 4.2.0
+      tinyclip: 0.1.15
+      tinyexec: 1.2.4
+      ufo: 1.6.4
+      youch: 4.1.1
+    optionalDependencies:
+      '@nuxt/schema': 4.5.1
+    transitivePeerDependencies:
+      - cac
+      - commander
+      - magicast
+      - supports-color
+
+  '@nuxt/cli@3.37.0(@nuxt/schema@4.5.1)(cac@7.0.0)(magicast@0.5.3)(supports-color@10.2.2)':
+    dependencies:
+      '@bomb.sh/tab': 0.0.19(cac@7.0.0)(citty@0.2.2)
+      '@clack/prompts': 1.7.0
+      c12: 3.3.4(magicast@0.5.3)
+      citty: 0.2.2
+      confbox: 0.2.4
+      consola: 3.4.2
+      debug: 4.4.3(supports-color@10.2.2)
+      defu: 6.1.7
+      exsolve: 1.1.0
+      fuse.js: 7.5.0
+      fzf: 0.5.2
+      giget: 3.3.0
+      jiti: 2.7.0
+      listhen: 1.10.0(srvx@0.11.22)
+      nypm: 0.6.9
+      ofetch: 1.5.1
+      ohash: 2.0.11
+      pathe: 2.0.3
+      perfect-debounce: 2.1.0
+      pkg-types: 2.3.1
+      scule: 1.3.0
+      semver: 7.8.5
+      srvx: 0.11.22
+      std-env: 4.2.0
+      tinyclip: 0.1.15
+      tinyexec: 1.2.4
+      ufo: 1.6.4
+      youch: 4.1.1
+    optionalDependencies:
+      '@nuxt/schema': 4.5.1
+    transitivePeerDependencies:
+      - cac
+      - commander
+      - magicast
+      - supports-color
+
+  '@nuxt/cli@3.37.0(@nuxt/schema@4.5.1)(magicast@0.5.3)(supports-color@10.2.2)':
+    dependencies:
+      '@bomb.sh/tab': 0.0.19(cac@7.0.0)(citty@0.2.2)
+      '@clack/prompts': 1.7.0
+      c12: 3.3.4(magicast@0.5.3)
+      citty: 0.2.2
+      confbox: 0.2.4
+      consola: 3.4.2
+      debug: 4.4.3(supports-color@10.2.2)
+      defu: 6.1.7
+      exsolve: 1.1.0
+      fuse.js: 7.5.0
+      fzf: 0.5.2
+      giget: 3.3.0
+      jiti: 2.7.0
+      listhen: 1.10.0(srvx@0.11.22)
+      nypm: 0.6.9
       ofetch: 1.5.1
       ohash: 2.0.11
       pathe: 2.0.3
@@ -9514,11 +9657,97 @@ snapshots:
       - vue-tsc
       - webpack
 
-  '@nuxt/nitro-server@4.5.1(4549c35e3444b194893082cd95f5a08f)':
+  '@nuxt/nitro-server@4.5.1(9624a64adb827c26ae711b79172e7c09)':
+    dependencies:
+      '@nuxt/devalue': 2.0.2
+      '@nuxt/kit': 4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
+      '@unhead/vue': 3.2.3(@oxc-project/types@0.142.0)(cac@7.0.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
+      '@vue/shared': 3.5.40
+      consola: 3.4.2
+      defu: 6.1.7
+      destr: 2.0.5
+      devalue: 5.9.0
+      errx: 0.1.0
+      escape-string-regexp: 5.0.0
+      exsolve: 1.1.0
+      h3: 1.15.11
+      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      klona: 2.0.6
+      mocked-exports: 0.1.1
+      nitropack: 2.13.4(oxc-parser@0.142.0)(rolldown@1.2.0)(srvx@0.12.5)(supports-color@10.2.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      nostics: 1.2.0
+      nuxt: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(cac@7.0.0)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
+      nypm: 0.6.8
+      ohash: 2.0.11
+      pathe: 2.0.3
+      rou3: 0.9.1
+      std-env: 4.2.0
+      ufo: 1.6.4
+      unctx: 3.0.0(magic-string@1.0.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
+      unstorage: 1.17.5(db0@0.3.4)(ioredis@5.11.1(supports-color@10.2.2))
+      vue: 3.5.40(typescript@6.0.3)
+      vue-bundle-renderer: 2.3.1
+      vue-devtools-stub: 0.1.0
+    optionalDependencies:
+      '@babel/plugin-syntax-typescript': 7.29.7(@babel/core@7.29.7(supports-color@10.2.2))
+    transitivePeerDependencies:
+      - '@azure/app-configuration'
+      - '@azure/cosmos'
+      - '@azure/data-tables'
+      - '@azure/identity'
+      - '@azure/keyvault-secrets'
+      - '@azure/storage-blob'
+      - '@capacitor/preferences'
+      - '@deno/kv'
+      - '@electric-sql/pglite'
+      - '@farmfe/core'
+      - '@libsql/client'
+      - '@modelcontextprotocol/sdk'
+      - '@netlify/blobs'
+      - '@oxc-project/types'
+      - '@planetscale/database'
+      - '@rspack/core'
+      - '@unhead/cli'
+      - '@upstash/redis'
+      - '@vercel/blob'
+      - '@vercel/functions'
+      - '@vercel/kv'
+      - aws4fetch
+      - bare-abort-controller
+      - bare-buffer
+      - better-sqlite3
+      - bun-types-no-globals
+      - cac
+      - db0
+      - drizzle-orm
+      - encoding
+      - esbuild
+      - idb-keyval
+      - ioredis
+      - lightningcss
+      - magic-string
+      - magicast
+      - mysql2
+      - oxc-parser
+      - react-native-b4a
+      - rolldown
+      - rollup
+      - sqlite3
+      - srvx
+      - supports-color
+      - typescript
+      - unloader
+      - unplugin
+      - uploadthing
+      - vite
+      - webpack
+      - xml2js
+
+  '@nuxt/nitro-server@4.5.1(9fc00658e17b041a99c5eb814c8e30e4)':
     dependencies:
       '@nuxt/devalue': 2.0.2
       '@nuxt/kit': 4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
-      '@unhead/vue': 3.2.3(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
+      '@unhead/vue': 3.2.3(@oxc-project/types@0.142.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
       '@vue/shared': 3.5.40
       consola: 3.4.2
       defu: 6.1.7
@@ -9533,7 +9762,7 @@ snapshots:
       mocked-exports: 0.1.1
       nitropack: 2.13.4(oxc-parser@0.142.0)(rolldown@1.2.0)(srvx@0.12.5)(supports-color@10.2.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       nostics: 1.2.0
-      nuxt: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
+      nuxt: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
       nypm: 0.6.8
       ohash: 2.0.11
       pathe: 2.0.3
@@ -9561,6 +9790,7 @@ snapshots:
       - '@libsql/client'
       - '@modelcontextprotocol/sdk'
       - '@netlify/blobs'
+      - '@oxc-project/types'
       - '@planetscale/database'
       - '@rspack/core'
       - '@unhead/cli'
@@ -9599,11 +9829,11 @@ snapshots:
       - webpack
       - xml2js
 
-  '@nuxt/nitro-server@4.5.1(5fec8c5ddb777c271b76cab67ff6d6da)':
+  '@nuxt/nitro-server@4.5.1(ba0deaa7e1642d5fddd8522253384830)':
     dependencies:
       '@nuxt/devalue': 2.0.2
       '@nuxt/kit': 4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
-      '@unhead/vue': 3.2.3(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.2)(srvx@0.11.22)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
+      '@unhead/vue': 3.2.3(@oxc-project/types@0.142.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.2)(srvx@0.11.22)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
       '@vue/shared': 3.5.40
       consola: 3.4.2
       defu: 6.1.7
@@ -9618,7 +9848,7 @@ snapshots:
       mocked-exports: 0.1.1
       nitropack: 2.13.4(oxc-parser@0.142.0)(rolldown@1.2.0)(srvx@0.11.22)(supports-color@10.2.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       nostics: 1.2.0
-      nuxt: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.2))(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
+      nuxt: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.2))(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
       nypm: 0.6.8
       ohash: 2.0.11
       pathe: 2.0.3
@@ -9646,6 +9876,7 @@ snapshots:
       - '@libsql/client'
       - '@modelcontextprotocol/sdk'
       - '@netlify/blobs'
+      - '@oxc-project/types'
       - '@planetscale/database'
       - '@rspack/core'
       - '@unhead/cli'
@@ -9939,9 +10170,9 @@ snapshots:
       - vue
       - webpack
 
-  '@nuxt/vite-builder@4.5.1(85cc76cde05b9b2549afd74187c80f9f)':
+  '@nuxt/vite-builder@4.5.1(33ddb5c44e24b9f2fa56a922ca89b031)':
     dependencies:
-      '@nuxt/kit': 4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
+      '@nuxt/kit': 4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
       '@vitejs/plugin-vue': 6.0.8(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
       '@vitejs/plugin-vue-jsx': 5.1.6(supports-color@10.2.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
       autoprefixer: 10.5.4(postcss@8.5.25)
@@ -9957,7 +10188,7 @@ snapshots:
       knitwork: 1.3.0
       mlly: 1.8.2
       mocked-exports: 0.1.1
-      nuxt: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.2))(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
+      nuxt: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
       nypm: 0.6.8
       pathe: 2.0.3
       pkg-types: 2.3.1
@@ -9975,7 +10206,7 @@ snapshots:
     optionalDependencies:
       '@babel/plugin-syntax-jsx': 7.29.7(@babel/core@7.29.7(supports-color@10.2.2))
       rolldown: 1.2.0
-      rollup-plugin-visualizer: 7.0.1(rolldown@1.2.0)(rollup@4.62.2)
+      rollup-plugin-visualizer: 7.0.1(rolldown@1.2.0)(rollup@4.62.4)
     transitivePeerDependencies:
       - '@biomejs/biome'
       - '@types/node'
@@ -10002,9 +10233,9 @@ snapshots:
       - vue-tsc
       - yaml
 
-  '@nuxt/vite-builder@4.5.1(d29a46be00794e371f6a6c05df9d8a48)':
+  '@nuxt/vite-builder@4.5.1(5089f7341ddcba38f19a083f62ee7a6b)':
     dependencies:
-      '@nuxt/kit': 4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
+      '@nuxt/kit': 4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
       '@vitejs/plugin-vue': 6.0.8(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
       '@vitejs/plugin-vue-jsx': 5.1.6(supports-color@10.2.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
       autoprefixer: 10.5.4(postcss@8.5.25)
@@ -10020,7 +10251,7 @@ snapshots:
       knitwork: 1.3.0
       mlly: 1.8.2
       mocked-exports: 0.1.1
-      nuxt: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
+      nuxt: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.2))(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
       nypm: 0.6.8
       pathe: 2.0.3
       pkg-types: 2.3.1
@@ -10038,7 +10269,7 @@ snapshots:
     optionalDependencies:
       '@babel/plugin-syntax-jsx': 7.29.7(@babel/core@7.29.7(supports-color@10.2.2))
       rolldown: 1.2.0
-      rollup-plugin-visualizer: 7.0.1(rolldown@1.2.0)(rollup@4.62.4)
+      rollup-plugin-visualizer: 7.0.1(rolldown@1.2.0)(rollup@4.62.2)
     transitivePeerDependencies:
       - '@biomejs/biome'
       - '@types/node'
@@ -10065,21 +10296,84 @@ snapshots:
       - vue-tsc
       - yaml
 
-  '@nuxtjs/color-mode@4.0.1(magic-string@0.30.21)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))':
+  '@nuxt/vite-builder@4.5.1(f6556efd673db3211a7b3164b522e116)':
     dependencies:
-      '@nuxt/kit': 4.5.0(magic-string@0.30.21)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
+      '@nuxt/kit': 4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
+      '@vitejs/plugin-vue': 6.0.8(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
+      '@vitejs/plugin-vue-jsx': 5.1.6(supports-color@10.2.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
+      autoprefixer: 10.5.4(postcss@8.5.25)
+      consola: 3.4.2
+      cssnano: 8.0.2(postcss@8.5.25)
+      defu: 6.1.7
+      escape-string-regexp: 5.0.0
       exsolve: 1.1.0
+      generic-names: 4.0.0
+      get-port-please: 3.2.0
+      jiti: 2.7.0
+      js-tokens: 10.0.0
+      knitwork: 1.3.0
+      mlly: 1.8.2
+      mocked-exports: 0.1.1
+      nuxt: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(cac@7.0.0)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
+      nypm: 0.6.8
       pathe: 2.0.3
       pkg-types: 2.3.1
-      semver: 7.8.5
-    transitivePeerDependencies:
-      - magic-string
-      - magicast
-      - oxc-parser
-      - rolldown
-      - unplugin
-
-  '@nuxtjs/partytown@2.0.0(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(supports-color@10.2.2)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))':
+      postcss: 8.5.25
+      rolldown-string: 0.3.1(rolldown@1.2.0)
+      seroval: 1.6.0
+      std-env: 4.2.0
+      ufo: 1.6.4
+      unenv: 2.0.0-rc.24
+      vite: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)
+      vite-node: 6.0.0(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)
+      vite-plugin-checker: 0.14.5(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(optionator@0.9.4)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))
+      vue: 3.5.40(typescript@6.0.3)
+      vue-bundle-renderer: 2.3.1
+    optionalDependencies:
+      '@babel/plugin-syntax-jsx': 7.29.7(@babel/core@7.29.7(supports-color@10.2.2))
+      rolldown: 1.2.0
+      rollup-plugin-visualizer: 7.0.1(rolldown@1.2.0)(rollup@4.62.4)
+    transitivePeerDependencies:
+      - '@biomejs/biome'
+      - '@types/node'
+      - '@vitejs/devtools'
+      - esbuild
+      - eslint
+      - less
+      - magic-string
+      - magicast
+      - meow
+      - optionator
+      - oxc-parser
+      - oxlint
+      - sass
+      - sass-embedded
+      - stylelint
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - typescript
+      - unplugin
+      - vue-tsc
+      - yaml
+
+  '@nuxtjs/color-mode@4.0.1(magic-string@0.30.21)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))':
+    dependencies:
+      '@nuxt/kit': 4.5.0(magic-string@0.30.21)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
+      exsolve: 1.1.0
+      pathe: 2.0.3
+      pkg-types: 2.3.1
+      semver: 7.8.5
+    transitivePeerDependencies:
+      - magic-string
+      - magicast
+      - oxc-parser
+      - rolldown
+      - unplugin
+
+  '@nuxtjs/partytown@2.0.0(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(supports-color@10.2.2)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))':
     dependencies:
       '@nuxt/kit': 4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
       '@qwik.dev/partytown': 0.11.2
@@ -11533,14 +11827,14 @@ snapshots:
       - unloader
       - utf-8-validate
 
-  '@unhead/bundler@3.1.0(crossws@0.4.10(srvx@0.12.5))(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(typescript@6.0.3)(unhead@3.1.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))':
+  '@unhead/bundler@3.2.3(@oxc-project/types@0.142.0)(cac@7.0.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(unhead@3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))':
     dependencies:
-      '@vitejs/devtools-kit': 0.1.24(crossws@0.4.10(srvx@0.12.5))(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
-      magic-string: 0.30.21
-      oxc-parser: 0.127.0
-      oxc-walker: 0.7.0(oxc-parser@0.127.0)
+      '@vitejs/devtools-kit': 0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      magic-string: 1.1.0
+      oxc-parser: 0.140.0
+      oxc-walker: 1.1.1(@oxc-project/types@0.142.0)(oxc-parser@0.140.0)(rolldown@1.2.0)
       ufo: 1.6.4
-      unhead: 3.1.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      unhead: 3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
     optionalDependencies:
       esbuild: 0.28.1
@@ -11550,21 +11844,21 @@ snapshots:
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@modelcontextprotocol/sdk'
+      - '@oxc-project/types'
       - '@rspack/core'
-      - bufferutil
       - bun-types-no-globals
-      - crossws
+      - cac
       - rollup
+      - srvx
       - typescript
       - unloader
-      - utf-8-validate
 
-  '@unhead/bundler@3.2.3(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.2)(srvx@0.11.22)(typescript@6.0.3)(unhead@3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))':
+  '@unhead/bundler@3.2.3(@oxc-project/types@0.142.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.2)(srvx@0.11.22)(typescript@6.0.3)(unhead@3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))':
     dependencies:
       '@vitejs/devtools-kit': 0.4.10(srvx@0.11.22)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
-      magic-string: 1.0.0
+      magic-string: 1.1.0
       oxc-parser: 0.140.0
-      oxc-walker: 1.0.0(esbuild@0.28.1)(oxc-parser@0.140.0)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      oxc-walker: 1.1.1(@oxc-project/types@0.142.0)(oxc-parser@0.140.0)(rolldown@1.2.0)
       ufo: 1.6.4
       unhead: 3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
@@ -11576,6 +11870,7 @@ snapshots:
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@modelcontextprotocol/sdk'
+      - '@oxc-project/types'
       - '@rspack/core'
       - bun-types-no-globals
       - cac
@@ -11584,12 +11879,12 @@ snapshots:
       - typescript
       - unloader
 
-  '@unhead/bundler@3.2.3(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(unhead@3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))':
+  '@unhead/bundler@3.2.3(@oxc-project/types@0.142.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(unhead@3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))':
     dependencies:
       '@vitejs/devtools-kit': 0.4.10(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
-      magic-string: 1.0.0
+      magic-string: 1.1.0
       oxc-parser: 0.140.0
-      oxc-walker: 1.0.0(esbuild@0.28.1)(oxc-parser@0.140.0)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      oxc-walker: 1.1.1(@oxc-project/types@0.142.0)(oxc-parser@0.140.0)(rolldown@1.2.0)
       ufo: 1.6.4
       unhead: 3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
@@ -11601,6 +11896,7 @@ snapshots:
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@modelcontextprotocol/sdk'
+      - '@oxc-project/types'
       - '@rspack/core'
       - bun-types-no-globals
       - cac
@@ -11609,6 +11905,27 @@ snapshots:
       - typescript
       - unloader
 
+  '@unhead/bundler@3.3.0(@oxc-project/types@0.142.0)(@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(esbuild@0.28.1)(lightningcss@1.32.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(unhead@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))':
+    dependencies:
+      magic-string: 1.1.0
+      oxc-walker: 1.1.1(@oxc-project/types@0.142.0)(oxc-parser@0.142.0)(rolldown@1.2.0)
+      unhead: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+    optionalDependencies:
+      '@vitejs/devtools-kit': 0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      esbuild: 0.28.1
+      lightningcss: 1.32.0
+      oxc-parser: 0.142.0
+      rolldown: 1.2.0
+      vite: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)
+    transitivePeerDependencies:
+      - '@farmfe/core'
+      - '@oxc-project/types'
+      - '@rspack/core'
+      - bun-types-no-globals
+      - rollup
+      - unloader
+
   '@unhead/vue@2.1.15(vue@3.5.40(typescript@6.0.3))':
     dependencies:
       hookable: 6.1.1
@@ -11640,11 +11957,11 @@ snapshots:
       - unloader
       - utf-8-validate
 
-  '@unhead/vue@3.1.0(crossws@0.4.10(srvx@0.12.5))(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))':
+  '@unhead/vue@3.2.3(@oxc-project/types@0.142.0)(cac@7.0.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))':
     dependencies:
-      '@unhead/bundler': 3.1.0(crossws@0.4.10(srvx@0.12.5))(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(typescript@6.0.3)(unhead@3.1.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      '@unhead/bundler': 3.2.3(@oxc-project/types@0.142.0)(cac@7.0.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(unhead@3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       hookable: 6.1.1
-      unhead: 3.1.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      unhead: 3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       vue: 3.5.40(typescript@6.0.3)
     optionalDependencies:
@@ -11652,22 +11969,22 @@ snapshots:
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@modelcontextprotocol/sdk'
+      - '@oxc-project/types'
       - '@rspack/core'
       - '@unhead/cli'
-      - bufferutil
       - bun-types-no-globals
-      - crossws
+      - cac
       - esbuild
       - lightningcss
       - rolldown
       - rollup
+      - srvx
       - typescript
       - unloader
-      - utf-8-validate
 
-  '@unhead/vue@3.2.3(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.2)(srvx@0.11.22)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))':
+  '@unhead/vue@3.2.3(@oxc-project/types@0.142.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.2)(srvx@0.11.22)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))':
     dependencies:
-      '@unhead/bundler': 3.2.3(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.2)(srvx@0.11.22)(typescript@6.0.3)(unhead@3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      '@unhead/bundler': 3.2.3(@oxc-project/types@0.142.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.2)(srvx@0.11.22)(typescript@6.0.3)(unhead@3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       hookable: 6.1.1
       unhead: 3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
@@ -11677,6 +11994,7 @@ snapshots:
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@modelcontextprotocol/sdk'
+      - '@oxc-project/types'
       - '@rspack/core'
       - '@unhead/cli'
       - bun-types-no-globals
@@ -11689,9 +12007,9 @@ snapshots:
       - typescript
       - unloader
 
-  '@unhead/vue@3.2.3(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))':
+  '@unhead/vue@3.2.3(@oxc-project/types@0.142.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))':
     dependencies:
-      '@unhead/bundler': 3.2.3(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(unhead@3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      '@unhead/bundler': 3.2.3(@oxc-project/types@0.142.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(unhead@3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       hookable: 6.1.1
       unhead: 3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
@@ -11701,6 +12019,7 @@ snapshots:
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@modelcontextprotocol/sdk'
+      - '@oxc-project/types'
       - '@rspack/core'
       - '@unhead/cli'
       - bun-types-no-globals
@@ -11713,6 +12032,29 @@ snapshots:
       - typescript
       - unloader
 
+  '@unhead/vue@3.3.0(@oxc-project/types@0.142.0)(@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(esbuild@0.28.1)(lightningcss@1.32.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))':
+    dependencies:
+      '@unhead/bundler': 3.3.0(@oxc-project/types@0.142.0)(@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(esbuild@0.28.1)(lightningcss@1.32.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(unhead@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      hookable: 6.1.1
+      unhead: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      vue: 3.5.40(typescript@6.0.3)
+    optionalDependencies:
+      vite: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)
+    transitivePeerDependencies:
+      - '@farmfe/core'
+      - '@oxc-project/types'
+      - '@rspack/core'
+      - '@unhead/cli'
+      - '@vitejs/devtools-kit'
+      - bun-types-no-globals
+      - esbuild
+      - lightningcss
+      - oxc-parser
+      - rolldown
+      - rollup
+      - unloader
+
   '@valibot/to-json-schema@1.7.0(valibot@1.4.2(typescript@6.0.3))':
     dependencies:
       valibot: 1.4.2(typescript@6.0.3)
@@ -11765,30 +12107,21 @@ snapshots:
       - utf-8-validate
       - webpack
 
-  '@vitejs/devtools-kit@0.1.24(crossws@0.4.10(srvx@0.12.5))(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))':
+  '@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))':
     dependencies:
-      birpc: 4.0.0
-      devframe: 0.2.2(crossws@0.4.10(srvx@0.12.5))(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
-      logs-sdk: 0.0.6(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      '@devframes/hub': 0.7.16(devframe@0.7.16(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3))
+      '@devframes/json-render': 0.7.16(@devframes/hub@0.7.16(devframe@0.7.16(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)))(devframe@0.7.16(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3))
+      devframe: 0.7.16(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)
+      local-pkg: 1.2.1
       mlly: 1.8.2
-      pathe: 2.0.3
-      perfect-debounce: 2.1.0
-      tinyexec: 1.2.4
+      nostics: 1.2.0
+      nypm: 0.6.9
       vite: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)
     transitivePeerDependencies:
-      - '@farmfe/core'
       - '@modelcontextprotocol/sdk'
-      - '@rspack/core'
-      - bufferutil
-      - bun-types-no-globals
-      - crossws
-      - esbuild
-      - rolldown
-      - rollup
+      - cac
+      - srvx
       - typescript
-      - unloader
-      - utf-8-validate
-      - webpack
 
   '@vitejs/devtools-kit@0.4.10(srvx@0.11.22)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))':
     dependencies:
@@ -11968,7 +12301,7 @@ snapshots:
       '@vue/shared': 3.5.40
       estree-walker: 2.0.2
       magic-string: 0.30.21
-      postcss: 8.5.19
+      postcss: 8.5.25
       source-map-js: 1.2.1
 
   '@vue/compiler-ssr@3.5.40':
@@ -12476,14 +12809,6 @@ snapshots:
     optionalDependencies:
       srvx: 0.12.5
 
-  crossws@0.4.6(srvx@0.11.22):
-    optionalDependencies:
-      srvx: 0.11.22
-
-  crossws@0.4.6(srvx@0.12.5):
-    optionalDependencies:
-      srvx: 0.12.5
-
   css-declaration-sorter@7.3.1(postcss@8.5.19):
     dependencies:
       postcss: 8.5.19
@@ -12670,31 +12995,23 @@ snapshots:
       - vite
       - webpack
 
-  devframe@0.2.2(crossws@0.4.10(srvx@0.12.5))(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)):
+  devframe@0.7.16(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3):
     dependencies:
-      '@valibot/to-json-schema': 1.7.0(valibot@1.4.2(typescript@6.0.3))
+      '@valibot/to-json-schema': 1.7.1(valibot@1.4.2(typescript@6.0.3))
       birpc: 4.0.0
-      cac: 7.0.0
-      h3: 2.0.1-rc.22(crossws@0.4.10(srvx@0.12.5))
-      logs-sdk: 0.0.6(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      crossws: 0.4.10(srvx@0.12.5)
+      destr: 2.0.5
+      h3: 2.0.1-rc.26(crossws@0.4.10(srvx@0.12.5))
       mrmime: 2.0.1
+      nostics: 1.2.0
       pathe: 2.0.3
+      ufo: 1.6.4
       valibot: 1.4.2(typescript@6.0.3)
-      ws: 8.21.0
+    optionalDependencies:
+      cac: 7.0.0
     transitivePeerDependencies:
-      - '@farmfe/core'
-      - '@rspack/core'
-      - bufferutil
-      - bun-types-no-globals
-      - crossws
-      - esbuild
-      - rolldown
-      - rollup
+      - srvx
       - typescript
-      - unloader
-      - utf-8-validate
-      - vite
-      - webpack
 
   devframe@0.7.16(srvx@0.11.22)(typescript@6.0.3):
     dependencies:
@@ -13535,19 +13852,19 @@ snapshots:
     optionalDependencies:
       crossws: 0.4.10(srvx@0.11.22)
 
-  h3@2.0.1-rc.22(crossws@0.4.10(srvx@0.12.5)):
+  h3@2.0.1-rc.26(crossws@0.4.10(srvx@0.11.22)):
     dependencies:
-      rou3: 0.8.1
-      srvx: 0.11.22
+      rou3: 0.9.1
+      srvx: 0.12.5
     optionalDependencies:
-      crossws: 0.4.10(srvx@0.12.5)
+      crossws: 0.4.10(srvx@0.11.22)
 
-  h3@2.0.1-rc.26(crossws@0.4.10(srvx@0.11.22)):
+  h3@2.0.1-rc.26(crossws@0.4.10(srvx@0.12.5)):
     dependencies:
       rou3: 0.9.1
       srvx: 0.12.5
     optionalDependencies:
-      crossws: 0.4.10(srvx@0.11.22)
+      crossws: 0.4.10(srvx@0.12.5)
 
   happy-dom@20.11.1:
     dependencies:
@@ -13946,7 +14263,7 @@ snapshots:
       '@parcel/watcher-wasm': 2.5.6
       citty: 0.2.2
       consola: 3.4.2
-      crossws: 0.4.6(srvx@0.11.22)
+      crossws: 0.4.10(srvx@0.11.22)
       defu: 6.1.7
       get-port-please: 3.2.0
       h3: 1.15.11
@@ -13969,7 +14286,7 @@ snapshots:
       '@parcel/watcher-wasm': 2.5.6
       citty: 0.2.2
       consola: 3.4.2
-      crossws: 0.4.6(srvx@0.12.5)
+      crossws: 0.4.10(srvx@0.12.5)
       defu: 6.1.7
       get-port-please: 3.2.0
       h3: 1.15.11
@@ -14824,17 +15141,158 @@ snapshots:
     dependencies:
       boolbase: 1.0.0
 
-  nuxt@4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.2))(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0):
+  nuxt@4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(cac@7.0.0)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0):
+    dependencies:
+      '@dxup/nuxt': 0.5.3(esbuild@0.28.1)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      '@nuxt/cli': 3.37.0(@nuxt/schema@4.5.1)(cac@7.0.0)(magicast@0.5.3)(supports-color@10.2.2)
+      '@nuxt/devtools': 3.4.0(db0@0.3.4)(ioredis@5.11.1(supports-color@10.2.2))(magic-string@1.0.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(supports-color@10.2.2)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
+      '@nuxt/kit': 4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
+      '@nuxt/nitro-server': 4.5.1(9624a64adb827c26ae711b79172e7c09)
+      '@nuxt/schema': 4.5.1
+      '@nuxt/telemetry': 2.8.0(@nuxt/kit@4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))))
+      '@nuxt/vite-builder': 4.5.1(f6556efd673db3211a7b3164b522e116)
+      '@unhead/vue': 3.2.3(@oxc-project/types@0.142.0)(cac@7.0.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
+      '@vue/shared': 3.5.40
+      chokidar: 5.0.0
+      compatx: 0.2.0
+      consola: 3.4.2
+      cookie-es: 3.1.1
+      defu: 6.1.7
+      devalue: 5.9.0
+      errx: 0.1.0
+      escape-string-regexp: 5.0.0
+      exsolve: 1.1.0
+      fnv1a-64: 0.1.1
+      hookable: 6.1.1
+      ignore: 7.0.6
+      impound: 1.1.6(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      jiti: 2.7.0
+      klona: 2.0.6
+      knitwork: 1.3.0
+      magic-string: 1.0.0
+      mlly: 1.8.2
+      nanotar: 0.3.0
+      nostics: 1.2.0
+      nypm: 0.6.8
+      object-identity: 0.2.3
+      ofetch: 1.5.1
+      ohash: 2.0.11
+      on-change: 6.0.2
+      oxc-walker: 1.0.0(esbuild@0.28.1)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      pathe: 2.0.3
+      perfect-debounce: 2.1.0
+      picomatch: 4.0.5
+      pkg-types: 2.3.1
+      rolldown: 1.2.0
+      rolldown-string: 0.3.1(rolldown@1.2.0)
+      rou3: 0.9.1
+      scule: 1.3.0
+      std-env: 4.2.0
+      tinyglobby: 0.2.17
+      ufo: 1.6.4
+      ultrahtml: 1.7.0
+      uncrypto: 0.1.3
+      unctx: 3.0.0(magic-string@1.0.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
+      undici: 8.9.0
+      unhead: 3.2.3(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      unimport: 6.4.0(esbuild@0.28.1)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      unrouting: 0.2.2
+      untyped: 2.0.0
+      verkit: 0.2.0
+      vue: 3.5.40(typescript@6.0.3)
+      vue-router: 5.2.0(@vue/compiler-sfc@3.5.40)(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
+    optionalDependencies:
+      '@parcel/watcher': 2.5.6
+      '@types/node': 26.1.2
+    transitivePeerDependencies:
+      - '@azure/app-configuration'
+      - '@azure/cosmos'
+      - '@azure/data-tables'
+      - '@azure/identity'
+      - '@azure/keyvault-secrets'
+      - '@azure/storage-blob'
+      - '@babel/plugin-proposal-decorators'
+      - '@babel/plugin-syntax-jsx'
+      - '@babel/plugin-syntax-typescript'
+      - '@biomejs/biome'
+      - '@capacitor/preferences'
+      - '@deno/kv'
+      - '@electric-sql/pglite'
+      - '@farmfe/core'
+      - '@libsql/client'
+      - '@modelcontextprotocol/sdk'
+      - '@netlify/blobs'
+      - '@oxc-project/types'
+      - '@pinia/colada'
+      - '@planetscale/database'
+      - '@rollup/plugin-babel'
+      - '@rspack/core'
+      - '@unhead/cli'
+      - '@upstash/redis'
+      - '@vercel/blob'
+      - '@vercel/functions'
+      - '@vercel/kv'
+      - '@vitejs/devtools'
+      - '@vue/compiler-sfc'
+      - aws4fetch
+      - bare-abort-controller
+      - bare-buffer
+      - better-sqlite3
+      - bufferutil
+      - bun-types-no-globals
+      - cac
+      - commander
+      - db0
+      - drizzle-orm
+      - encoding
+      - esbuild
+      - eslint
+      - idb-keyval
+      - ioredis
+      - less
+      - lightningcss
+      - magicast
+      - meow
+      - mysql2
+      - optionator
+      - oxc-parser
+      - oxlint
+      - pinia
+      - react-native-b4a
+      - rollup
+      - rollup-plugin-visualizer
+      - sass
+      - sass-embedded
+      - sqlite3
+      - srvx
+      - stylelint
+      - stylus
+      - sugarss
+      - supports-color
+      - terser
+      - tsx
+      - typescript
+      - unloader
+      - uploadthing
+      - utf-8-validate
+      - vite
+      - vue-tsc
+      - webpack
+      - xml2js
+      - yaml
+
+  nuxt@4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.2))(rollup@4.62.2)(srvx@0.11.22)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0):
     dependencies:
       '@dxup/nuxt': 0.5.3(esbuild@0.28.1)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
-      '@nuxt/cli': 3.37.0(@nuxt/schema@4.5.1)(cac@6.7.14)(magicast@0.5.3)(supports-color@10.2.2)
+      '@nuxt/cli': 3.37.0(@nuxt/schema@4.5.1)(magicast@0.5.3)(supports-color@10.2.2)
       '@nuxt/devtools': 3.4.0(db0@0.3.4)(ioredis@5.11.1(supports-color@10.2.2))(magic-string@1.0.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(supports-color@10.2.2)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
       '@nuxt/kit': 4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
-      '@nuxt/nitro-server': 4.5.1(5fec8c5ddb777c271b76cab67ff6d6da)
+      '@nuxt/nitro-server': 4.5.1(ba0deaa7e1642d5fddd8522253384830)
       '@nuxt/schema': 4.5.1
       '@nuxt/telemetry': 2.8.0(@nuxt/kit@4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))))
-      '@nuxt/vite-builder': 4.5.1(85cc76cde05b9b2549afd74187c80f9f)
-      '@unhead/vue': 3.2.3(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.2)(srvx@0.11.22)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
+      '@nuxt/vite-builder': 4.5.1(5089f7341ddcba38f19a083f62ee7a6b)
+      '@unhead/vue': 3.2.3(@oxc-project/types@0.142.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.2)(srvx@0.11.22)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
       '@vue/shared': 3.5.40
       chokidar: 5.0.0
       compatx: 0.2.0
@@ -14906,6 +15364,7 @@ snapshots:
       - '@libsql/client'
       - '@modelcontextprotocol/sdk'
       - '@netlify/blobs'
+      - '@oxc-project/types'
       - '@pinia/colada'
       - '@planetscale/database'
       - '@rollup/plugin-babel'
@@ -14964,17 +15423,17 @@ snapshots:
       - xml2js
       - yaml
 
-  nuxt@4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0):
+  nuxt@4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0):
     dependencies:
       '@dxup/nuxt': 0.5.3(esbuild@0.28.1)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
-      '@nuxt/cli': 3.37.0(@nuxt/schema@4.5.1)(cac@6.7.14)(magicast@0.5.3)(supports-color@10.2.2)
+      '@nuxt/cli': 3.37.0(@nuxt/schema@4.5.1)(magicast@0.5.3)(supports-color@10.2.2)
       '@nuxt/devtools': 3.4.0(db0@0.3.4)(ioredis@5.11.1(supports-color@10.2.2))(magic-string@1.0.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(supports-color@10.2.2)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
       '@nuxt/kit': 4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))
-      '@nuxt/nitro-server': 4.5.1(4549c35e3444b194893082cd95f5a08f)
+      '@nuxt/nitro-server': 4.5.1(9fc00658e17b041a99c5eb814c8e30e4)
       '@nuxt/schema': 4.5.1
       '@nuxt/telemetry': 2.8.0(@nuxt/kit@4.5.1(magic-string@1.0.0)(magicast@0.5.3)(oxc-parser@0.142.0)(rolldown@1.2.0)(unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))))
-      '@nuxt/vite-builder': 4.5.1(d29a46be00794e371f6a6c05df9d8a48)
-      '@unhead/vue': 3.2.3(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
+      '@nuxt/vite-builder': 4.5.1(33ddb5c44e24b9f2fa56a922ca89b031)
+      '@unhead/vue': 3.2.3(@oxc-project/types@0.142.0)(esbuild@0.28.1)(lightningcss@1.32.0)(rolldown@1.2.0)(rollup@4.62.4)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
       '@vue/shared': 3.5.40
       chokidar: 5.0.0
       compatx: 0.2.0
@@ -15046,6 +15505,7 @@ snapshots:
       - '@libsql/client'
       - '@modelcontextprotocol/sdk'
       - '@netlify/blobs'
+      - '@oxc-project/types'
       - '@pinia/colada'
       - '@planetscale/database'
       - '@rollup/plugin-babel'
@@ -15275,38 +15735,6 @@ snapshots:
       magic-regexp: 0.10.0
       oxc-parser: 0.127.0
 
-  oxc-walker@1.0.0(esbuild@0.28.1)(oxc-parser@0.140.0)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)):
-    dependencies:
-      magic-regexp: 0.11.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
-    optionalDependencies:
-      oxc-parser: 0.140.0
-      rolldown: 1.2.0
-    transitivePeerDependencies:
-      - '@farmfe/core'
-      - '@rspack/core'
-      - bun-types-no-globals
-      - esbuild
-      - rollup
-      - unloader
-      - vite
-      - webpack
-
-  oxc-walker@1.0.0(esbuild@0.28.1)(oxc-parser@0.140.0)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)):
-    dependencies:
-      magic-regexp: 0.11.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
-    optionalDependencies:
-      oxc-parser: 0.140.0
-      rolldown: 1.2.0
-    transitivePeerDependencies:
-      - '@farmfe/core'
-      - '@rspack/core'
-      - bun-types-no-globals
-      - esbuild
-      - rollup
-      - unloader
-      - vite
-      - webpack
-
   oxc-walker@1.0.0(esbuild@0.28.1)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)):
     dependencies:
       magic-regexp: 0.11.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.2)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
@@ -15339,6 +15767,12 @@ snapshots:
       - vite
       - webpack
 
+  oxc-walker@1.1.1(@oxc-project/types@0.142.0)(oxc-parser@0.140.0)(rolldown@1.2.0):
+    optionalDependencies:
+      '@oxc-project/types': 0.142.0
+      oxc-parser: 0.140.0
+      rolldown: 1.2.0
+
   oxc-walker@1.1.1(@oxc-project/types@0.142.0)(oxc-parser@0.142.0)(rolldown@1.2.0):
     optionalDependencies:
       '@oxc-project/types': 0.142.0
@@ -16451,7 +16885,7 @@ snapshots:
   terser@5.48.0:
     dependencies:
       '@jridgewell/source-map': 0.3.11
-      acorn: 8.17.0
+      acorn: 8.18.0
       commander: 2.20.3
       source-map-support: 0.5.21
 
@@ -16682,6 +17116,22 @@ snapshots:
       - unloader
       - webpack
 
+  unhead@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)):
+    dependencies:
+      hookable: 6.1.1
+      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+    optionalDependencies:
+      vite: 8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)
+    transitivePeerDependencies:
+      - '@farmfe/core'
+      - '@rspack/core'
+      - bun-types-no-globals
+      - esbuild
+      - rolldown
+      - rollup
+      - unloader
+      - webpack
+
   unicorn-magic@0.3.0: {}
 
   unicorn-magic@0.4.0: {}
@@ -17068,7 +17518,7 @@ snapshots:
     dependencies:
       lightningcss: 1.32.0
       picomatch: 4.0.5
-      postcss: 8.5.19
+      postcss: 8.5.25
       rolldown: 1.1.5
       tinyglobby: 0.2.17
     optionalDependencies:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index d6ee11f4..571805fe 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -29,6 +29,9 @@ minimumReleaseAgeExclude:
   - '@nuxt/schema@4.5.0'
   - '@nuxt/vite-builder@4.5.0'
   - nuxt@4.5.0
+  - '@unhead/bundler@3.3.0'
+  - '@unhead/vue@3.3.0'
+  - unhead@3.3.0
 shellEmulator: true
 
 trustPolicy: no-downgrade
@@ -41,9 +44,8 @@ packages:
   - '!examples/**'
 overrides:
   '@nuxt/scripts': 'workspace:*'
-  # Force unhead v3 only inside the unhead-v3 regression fixture; the rest of
-  # the workspace stays on v2 via Nuxt's transitive resolution.
-  unhead-v3-fixture>@unhead/vue: ^3.0.0
+  # Force the latest supported Unhead only inside its regression fixture.
+  unhead-v3-fixture>@unhead/vue: 3.3.0
   vitest-environment-nuxt: 2.0.0
 catalog:
   '@antfu/eslint-config': ^9.2.0
diff --git a/test/e2e/unhead-v3-compat.test.ts b/test/e2e/unhead-v3-compat.test.ts
index b72eb487..9cf00a4d 100644
--- a/test/e2e/unhead-v3-compat.test.ts
+++ b/test/e2e/unhead-v3-compat.test.ts
@@ -1,8 +1,8 @@
 import { readFileSync } from 'node:fs'
 import { fileURLToPath } from 'node:url'
 import { createResolver } from '@nuxt/kit'
-import { $fetch, setup } from '@nuxt/test-utils/e2e'
-import { describe, expect, it } from 'vitest'
+import { $fetch, createPage, setup } from '@nuxt/test-utils/e2e'
+import { describe, expect, it, onTestFinished } from 'vitest'
 
 const { resolve } = createResolver(import.meta.url)
 
@@ -26,7 +26,7 @@ if (!skip) {
   await setup({
     rootDir: resolve('../fixtures/unhead-v3'),
     dev: true,
-    browser: false,
+    browser: true,
   })
 }
 
@@ -40,4 +40,12 @@ describe.skipIf(skip)('unhead v3 compat', () => {
     // error from PR #795). If a regression silently drops the tag, this fails.
     expect(html).toMatch(/<link[^>]+rel="(preconnect|dns-prefetch)"[^>]+example\.com/)
   })
+
+  it('keeps a retained script proxy live across load', async () => {
+    const page = await createPage('/')
+    onTestFinished(() => page.close())
+    await page.waitForFunction(() => document.querySelector('#proxy-result')?.textContent === 'passed')
+
+    expect(await page.textContent('#proxy-result')).toBe('passed')
+  }, 15_000)
 })
diff --git a/test/fixtures/unhead-v3/app.vue b/test/fixtures/unhead-v3/app.vue
index e7f98792..16691c5d 100644
--- a/test/fixtures/unhead-v3/app.vue
+++ b/test/fixtures/unhead-v3/app.vue
@@ -31,10 +31,41 @@ useScript(
   { src: 'https://example.com/partytown.js', key: 'partytown-probe' },
   { partytown: true, trigger: 'manual' },
 )
+
+type FixtureApi = {
+  count: number
+  increment: () => void
+}
+
+declare global {
+  interface Window {
+    fixtureApi?: FixtureApi
+  }
+}
+
+const proxyResult = ref('pending')
+const { load, proxy } = useScript<FixtureApi>('/fixture-api.js', {
+  trigger: 'manual',
+  use: () => window.fixtureApi as FixtureApi,
+})
+const retainedProxy = proxy
+
+onMounted(() => {
+  retainedProxy.increment()
+  load()
+    .then(() => {
+      retainedProxy.increment()
+      proxyResult.value = window.fixtureApi?.count === 2 ? 'passed' : `failed:${window.fixtureApi?.count}`
+    })
+    .catch((error: unknown) => {
+      proxyResult.value = error instanceof Error ? error.message : String(error)
+    })
+})
 </script>
 
 <template>
   <div>
     <div id="probe-status">{{ status }}</div>
+    <div id="proxy-result">{{ proxyResult }}</div>
   </div>
 </template>
diff --git a/test/fixtures/unhead-v3/nuxt.config.ts b/test/fixtures/unhead-v3/nuxt.config.ts
index 04f1f6fe..4e28aa08 100644
--- a/test/fixtures/unhead-v3/nuxt.config.ts
+++ b/test/fixtures/unhead-v3/nuxt.config.ts
@@ -1,9 +1,12 @@
 import { defineNuxtConfig } from 'nuxt/config'
 
-// Regression fixture pinned to @unhead/vue@^3 via the
+// Regression fixture pinned to @unhead/vue@3.3.0 via the
 // `unhead-v3-fixture>@unhead/vue` override in pnpm-workspace.yaml.
 // Module resolution picks v3 up through the fixture's own node_modules symlink.
 export default defineNuxtConfig({
+  alias: {
+    '@unhead/vue/scripts': import.meta.resolve('@unhead/vue/scripts'),
+  },
   modules: ['@nuxt/scripts'],
   future: {
     compatibilityVersion: 5,
diff --git a/test/fixtures/unhead-v3/package.json b/test/fixtures/unhead-v3/package.json
index f8dba4ab..8e9e821d 100644
--- a/test/fixtures/unhead-v3/package.json
+++ b/test/fixtures/unhead-v3/package.json
@@ -4,7 +4,7 @@
   "type": "module",
   "dependencies": {
     "@nuxt/scripts": "workspace:*",
-    "@unhead/vue": "^3.0.0",
+    "@unhead/vue": "3.3.0",
     "nuxt": "catalog:"
   }
 }
diff --git a/test/fixtures/unhead-v3/public/fixture-api.js b/test/fixtures/unhead-v3/public/fixture-api.js
new file mode 100644
index 00000000..7dfe0334
--- /dev/null
+++ b/test/fixtures/unhead-v3/public/fixture-api.js
@@ -0,0 +1,11 @@
+const owners = new WeakSet()
+const api = {
+  count: 0,
+  increment() {
+    if (!owners.has(this))
+      throw new TypeError('Illegal invocation')
+    this.count++
+  },
+}
+owners.add(api)
+window.fixtureApi = api
diff --git a/test/unit/cached-upstream-lifecycle.test.ts b/test/unit/cached-upstream-lifecycle.test.ts
index 3d26ed54..8d2daca9 100644
--- a/test/unit/cached-upstream-lifecycle.test.ts
+++ b/test/unit/cached-upstream-lifecycle.test.ts
@@ -6,7 +6,7 @@ const { defineCachedFunction } = vi.hoisted(() => ({
   defineCachedFunction: vi.fn((fn: (...args: any[]) => any) => fn),
 }))
 
-vi.mock('nitropack/runtime', () => ({ defineCachedFunction }))
+vi.mock('#nuxt-scripts/nitro', () => ({ defineCachedFunction }))
 
 describe('upstream cache storage ownership', () => {
   beforeEach(() => {

From 70586e5d71c24ae9476cfa4c3f18af5e3bf40bc9 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Tue, 4 Aug 2026 16:12:41 +1000
Subject: [PATCH 13/19] test: fix lifecycle test formatting

---
 test/unit/use-script-lifecycle.test.ts | 2 --
 1 file changed, 2 deletions(-)

diff --git a/test/unit/use-script-lifecycle.test.ts b/test/unit/use-script-lifecycle.test.ts
index ec31e7e5..279daf26 100644
--- a/test/unit/use-script-lifecycle.test.ts
+++ b/test/unit/use-script-lifecycle.test.ts
@@ -54,7 +54,6 @@ const mocks = vi.hoisted(() => {
     unheadUseScript: vi.fn(createHandle),
   }
 })
-
 vi.mock('@unhead/vue/scripts', () => ({
   useScript: mocks.unheadUseScript,
 }))
@@ -211,4 +210,3 @@ describe('useScript shared instance lifecycle', () => {
     expect(mocks.baseRemove).not.toHaveBeenCalled()
   })
 })
-

From 7c31d15478214332112a7e6ae8995aa77ba5b27b Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Tue, 4 Aug 2026 16:38:31 +1000
Subject: [PATCH 14/19] test: cover review lifecycle findings

---
 packages/script/src/devtools.ts               |   2 +-
 .../src/runtime/registry/usercentrics.ts      | 164 ++++++++++--------
 .../script-component-lifecycle.nuxt.test.ts   |  81 +++++++++
 test/unit/devtools-lifecycle.test.ts          |  50 ++++++
 test/unit/script-trigger-lifecycle.test.ts    |   6 +
 test/unit/usercentrics-lifecycle.test.ts      |  50 ++++++
 test/unit/youtube-player-lifecycle.test.ts    |  24 ++-
 7 files changed, 302 insertions(+), 75 deletions(-)
 create mode 100644 test/nuxt-runtime/script-component-lifecycle.nuxt.test.ts
 create mode 100644 test/unit/devtools-lifecycle.test.ts
 create mode 100644 test/unit/usercentrics-lifecycle.test.ts

diff --git a/packages/script/src/devtools.ts b/packages/script/src/devtools.ts
index 215a5942..b4f72653 100644
--- a/packages/script/src/devtools.ts
+++ b/packages/script/src/devtools.ts
@@ -55,7 +55,7 @@ export async function setupDevtools(nuxt: Nuxt, options: DevtoolsOptions = {}) {
   })
 }
 
-function setupStandaloneApi(nuxt: Nuxt) {
+export function setupStandaloneApi(nuxt: Nuxt) {
   // In-memory store for serialized script state
   let scriptsState: { scripts: Record<string, any>, version?: string, firstPartyData?: any, updatedAt: number } = {
     scripts: {},
diff --git a/packages/script/src/runtime/registry/usercentrics.ts b/packages/script/src/runtime/registry/usercentrics.ts
index 7c1acb83..cf95ec0a 100644
--- a/packages/script/src/runtime/registry/usercentrics.ts
+++ b/packages/script/src/runtime/registry/usercentrics.ts
@@ -81,6 +81,95 @@ export interface UsercentricsConsent {
   denyAll: () => Promise<void> | void
 }
 
+interface UsercentricsEventTarget {
+  __ucCmp?: UsercentricsCmp
+  addEventListener: Window['addEventListener']
+  removeEventListener: Window['removeEventListener']
+}
+
+type HookAppUnmount = (callback: () => void) => () => void
+
+export function attachUsercentricsConsent<T extends UsercentricsApi>(
+  instance: UseScriptContext<T, UsercentricsConsent>,
+  target: UsercentricsEventTarget,
+  hookAppUnmount: HookAppUnmount,
+): void {
+  if (instance.consent)
+    return
+
+  let readyApi: UsercentricsCmp | undefined
+  let readyPromise: Promise<UsercentricsCmp> | undefined
+  const readyController = new AbortController()
+  let disposed = false
+  const cleanupReadyListener = () => {
+    if (disposed)
+      return
+    disposed = true
+    readyController.abort()
+  }
+  const whenReady = (): Promise<UsercentricsCmp> => {
+    if (disposed)
+      return Promise.reject(createAbortError('Usercentrics readiness wait was aborted'))
+    if (readyApi)
+      return Promise.resolve(readyApi)
+    if (!readyPromise) {
+      // Install the event listener before checking isInitialized() so an
+      // event fired during that async check cannot be missed.
+      readyPromise = createAbortablePromise<UsercentricsCmp>((resolve) => {
+        const onReady = () => {
+          const api = target.__ucCmp
+          if (!api)
+            return
+          readyApi = api
+          resolve(api)
+        }
+        target.addEventListener('UC_CMP_API_READY', onReady)
+        const api = target.__ucCmp
+        if (api?.isInitialized) {
+          Promise.resolve()
+            .then(() => api.isInitialized())
+            .then((initialized) => {
+              if (initialized && !readyController.signal.aborted)
+                onReady()
+            })
+            .catch((error) => {
+              // Some bootstrap stubs throw until the ready event; the event
+              // listener remains the authoritative readiness signal.
+              if (!readyController.signal.aborted)
+                logger.debug('[usercentrics] Waiting for UC_CMP_API_READY after isInitialized() failed', error)
+            })
+        }
+        return () => target.removeEventListener('UC_CMP_API_READY', onReady)
+      }, {
+        signal: readyController.signal,
+        abortMessage: 'Usercentrics readiness wait was aborted',
+      })
+    }
+    return readyPromise
+  }
+
+  const stopAppUnmount = hookAppUnmount(cleanupReadyListener)
+  const originalRemove = instance.remove
+  instance.remove = () => {
+    cleanupReadyListener()
+    stopAppUnmount()
+    return originalRemove()
+  }
+
+  instance.consent = {
+    whenReady,
+    onConsentChange(cb) {
+      const handler = (event: Event) => cb((event as CustomEvent).detail, event)
+      target.addEventListener('UC_UI_CMP_EVENT', handler)
+      return () => target.removeEventListener('UC_UI_CMP_EVENT', handler)
+    },
+    showFirstLayer: () => target.__ucCmp?.showFirstLayer?.(),
+    showSecondLayer: () => target.__ucCmp?.showSecondLayer?.(),
+    acceptAll: () => target.__ucCmp?.acceptAllConsents?.(),
+    denyAll: () => target.__ucCmp?.denyAllConsents?.(),
+  }
+}
+
 /**
  * Load the Usercentrics CMP v3 ("Web CMP") loader and expose typed access to
  * the `window.__ucCmp` programmatic API plus a `consent` helper with
@@ -119,79 +208,8 @@ export function useScriptUsercentrics<T extends UsercentricsApi>(
     }
   }, _options) as UseScriptContext<T, UsercentricsConsent>
 
-  if (import.meta.client && !instance.consent) {
-    let readyApi: UsercentricsCmp | undefined
-    let readyPromise: Promise<UsercentricsCmp> | undefined
-    const readyController = new AbortController()
-    let disposed = false
-    const cleanupReadyListener = () => {
-      if (disposed)
-        return
-      disposed = true
-      readyController.abort()
-    }
-    const whenReady = (): Promise<UsercentricsCmp> => {
-      if (disposed)
-        return Promise.reject(createAbortError('Usercentrics readiness wait was aborted'))
-      if (readyApi)
-        return Promise.resolve(readyApi)
-      if (!readyPromise) {
-        // Install the event listener before checking isInitialized() so an
-        // event fired during that async check cannot be missed.
-        readyPromise = createAbortablePromise<UsercentricsCmp>((resolve) => {
-          const onReady = () => {
-            const api = window.__ucCmp
-            if (!api)
-              return
-            readyApi = api
-            resolve(api)
-          }
-          window.addEventListener('UC_CMP_API_READY', onReady)
-          const api = window.__ucCmp
-          if (api?.isInitialized) {
-            Promise.resolve()
-              .then(() => api.isInitialized())
-              .then((initialized) => {
-                if (initialized && !readyController.signal.aborted)
-                  onReady()
-              })
-              .catch((error) => {
-                // Some bootstrap stubs throw until the ready event; the event
-                // listener remains the authoritative readiness signal.
-                if (!readyController.signal.aborted)
-                  logger.debug('[usercentrics] Waiting for UC_CMP_API_READY after isInitialized() failed', error)
-              })
-          }
-          return () => window.removeEventListener('UC_CMP_API_READY', onReady)
-        }, {
-          signal: readyController.signal,
-          abortMessage: 'Usercentrics readiness wait was aborted',
-        })
-      }
-      return readyPromise
-    }
-
-    const stopAppUnmount = useNuxtApp().hooks.hook('app:unmount' as any, cleanupReadyListener)
-    const originalRemove = instance.remove
-    instance.remove = () => {
-      cleanupReadyListener()
-      stopAppUnmount()
-      return originalRemove()
-    }
-
-    instance.consent = {
-      whenReady,
-      onConsentChange(cb) {
-        const handler = (e: Event) => cb((e as CustomEvent).detail, e)
-        window.addEventListener('UC_UI_CMP_EVENT', handler)
-        return () => window.removeEventListener('UC_UI_CMP_EVENT', handler)
-      },
-      showFirstLayer: () => window.__ucCmp?.showFirstLayer?.(),
-      showSecondLayer: () => window.__ucCmp?.showSecondLayer?.(),
-      acceptAll: () => window.__ucCmp?.acceptAllConsents?.(),
-      denyAll: () => window.__ucCmp?.denyAllConsents?.(),
-    }
-  }
+  if (import.meta.client)
+    attachUsercentricsConsent(instance, window, callback => useNuxtApp().hooks.hook('app:unmount' as any, callback))
 
   return instance
 }
diff --git a/test/nuxt-runtime/script-component-lifecycle.nuxt.test.ts b/test/nuxt-runtime/script-component-lifecycle.nuxt.test.ts
new file mode 100644
index 00000000..9a4ed753
--- /dev/null
+++ b/test/nuxt-runtime/script-component-lifecycle.nuxt.test.ts
@@ -0,0 +1,81 @@
+import type { VueWrapper } from '@vue/test-utils'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { mount } from '@vue/test-utils'
+import ScriptCarbonAds from '../../packages/script/src/runtime/components/ScriptCarbonAds.vue'
+import ScriptLemonSqueezy from '../../packages/script/src/runtime/components/ScriptLemonSqueezy.vue'
+
+const mocks = vi.hoisted(() => ({
+  loadedCallbacks: [] as Array<(api: any) => void>,
+  useScriptLemonSqueezy: vi.fn(() => ({
+    onLoaded: (callback: (api: any) => void) => mocks.loadedCallbacks.push(callback),
+  })),
+  useScriptTriggerElement: vi.fn(() => 'onNuxtReady'),
+}))
+
+vi.mock('../../packages/script/src/runtime/composables/useScriptTriggerElement', () => ({
+  useScriptTriggerElement: mocks.useScriptTriggerElement,
+}))
+
+vi.mock('../../packages/script/src/runtime/registry/lemon-squeezy', () => ({
+  useScriptLemonSqueezy: mocks.useScriptLemonSqueezy,
+}))
+
+const wrappers: VueWrapper[] = []
+let lemonSqueezyDescriptor: PropertyDescriptor | undefined
+
+describe('script component lifecycle', () => {
+  beforeEach(() => {
+    mocks.loadedCallbacks.length = 0
+    vi.clearAllMocks()
+    lemonSqueezyDescriptor = Object.getOwnPropertyDescriptor(window, 'LemonSqueezy')
+  })
+
+  afterEach(() => {
+    for (const wrapper of wrappers.splice(0))
+      wrapper.unmount()
+    if (lemonSqueezyDescriptor)
+      Object.defineProperty(window, 'LemonSqueezy', lemonSqueezyDescriptor)
+    else
+      delete (window as any).LemonSqueezy
+  })
+
+  it('leaves the Carbon Ads root for Vue to remove', () => {
+    const wrapper = mount(ScriptCarbonAds, {
+      props: { serve: 'test', placement: 'test', format: 'cover' },
+    })
+    wrappers.push(wrapper)
+    const removeRoot = vi.spyOn(wrapper.element, 'remove')
+
+    wrapper.unmount()
+
+    expect(removeRoot).not.toHaveBeenCalled()
+  })
+
+  it('fans Lemon Squeezy events out to every live component', () => {
+    const first = mount(ScriptLemonSqueezy)
+    const second = mount(ScriptLemonSqueezy)
+    wrappers.push(first, second)
+    const installedHandlers: Array<(event: any) => void> = []
+    const api = {
+      Refresh: vi.fn(),
+      Setup: vi.fn(({ eventHandler }) => installedHandlers.push(eventHandler)),
+    }
+    Object.defineProperty(window, 'LemonSqueezy', {
+      configurable: true,
+      value: api,
+    })
+
+    mocks.loadedCallbacks[0]!(api)
+    mocks.loadedCallbacks[1]!(api)
+    installedHandlers.at(-1)!({ event: 'Checkout.Success', data: { order: 1 } })
+
+    expect(first.emitted('lemonSqueezyEvent')).toHaveLength(1)
+    expect(second.emitted('lemonSqueezyEvent')).toHaveLength(1)
+
+    second.unmount()
+    installedHandlers.at(-1)!({ event: 'Checkout.Success', data: { order: 2 } })
+
+    expect(first.emitted('lemonSqueezyEvent')).toHaveLength(2)
+    expect(second.emitted('lemonSqueezyEvent')).toHaveLength(1)
+  })
+})
diff --git a/test/unit/devtools-lifecycle.test.ts b/test/unit/devtools-lifecycle.test.ts
new file mode 100644
index 00000000..410ae190
--- /dev/null
+++ b/test/unit/devtools-lifecycle.test.ts
@@ -0,0 +1,50 @@
+import type { IncomingMessage, ServerResponse } from 'node:http'
+import { Buffer } from 'node:buffer'
+import { EventEmitter } from 'node:events'
+import { describe, expect, it, vi } from 'vitest'
+import { setupStandaloneApi } from '../../packages/script/src/devtools'
+
+const createRequest = (method: string): IncomingMessage => Object.assign(new EventEmitter(), {
+  method,
+  resume: vi.fn(),
+}) as IncomingMessage
+
+function createResponse() {
+  let body: unknown
+  const response = {
+    statusCode: 0,
+    setHeader: vi.fn(),
+    end: vi.fn((value?: unknown) => {
+      body = value
+    }),
+  } as unknown as ServerResponse
+  return { response, body: () => body }
+}
+
+describe('standalone devtools lifecycle', () => {
+  it('decodes JSON after joining split UTF-8 chunks', async () => {
+    const hooks = new Map<string, (...args: any[]) => any>()
+    setupStandaloneApi({
+      hook: vi.fn((name: string, callback: (...args: any[]) => any) => hooks.set(name, callback)),
+    } as any)
+
+    const use = vi.fn()
+    hooks.get('vite:serverCreated')!({ middlewares: { use } })
+    const handler = use.mock.calls[0]![1]
+
+    const payload = Buffer.from(JSON.stringify({ scripts: { label: 'ready 😀' } }))
+    const emojiOffset = payload.indexOf(Buffer.from('😀'))
+    const postRequest = createRequest('POST')
+    const postResponse = createResponse()
+    handler(postRequest, postResponse.response)
+    postRequest.emit('data', payload.subarray(0, emojiOffset + 1))
+    postRequest.emit('data', payload.subarray(emojiOffset + 1))
+    postRequest.emit('end')
+
+    expect(postResponse.response.statusCode).toBe(200)
+
+    const getResponse = createResponse()
+    handler(createRequest('GET'), getResponse.response)
+    expect(JSON.parse(String(getResponse.body())).scripts.label).toBe('ready 😀')
+  })
+})
diff --git a/test/unit/script-trigger-lifecycle.test.ts b/test/unit/script-trigger-lifecycle.test.ts
index 55f19e69..95423a85 100644
--- a/test/unit/script-trigger-lifecycle.test.ts
+++ b/test/unit/script-trigger-lifecycle.test.ts
@@ -8,6 +8,7 @@ import { useScriptTriggerInteraction } from '../../packages/script/src/runtime/c
 import { useScriptTriggerServiceWorker } from '../../packages/script/src/runtime/composables/useScriptTriggerServiceWorker'
 
 const readyCallbacks: Array<() => void> = []
+let serviceWorkerDescriptor: PropertyDescriptor | undefined
 
 vi.mock('nuxt/app', () => ({
   onNuxtReady: (callback: () => void) => readyCallbacks.push(callback),
@@ -16,10 +17,15 @@ vi.mock('nuxt/app', () => ({
 describe('script trigger lifecycle cleanup', () => {
   beforeEach(() => {
     readyCallbacks.length = 0
+    serviceWorkerDescriptor = Object.getOwnPropertyDescriptor(navigator, 'serviceWorker')
     vi.useFakeTimers()
   })
 
   afterEach(() => {
+    if (serviceWorkerDescriptor)
+      Object.defineProperty(navigator, 'serviceWorker', serviceWorkerDescriptor)
+    else
+      delete (navigator as any).serviceWorker
     vi.useRealTimers()
     vi.restoreAllMocks()
   })
diff --git a/test/unit/usercentrics-lifecycle.test.ts b/test/unit/usercentrics-lifecycle.test.ts
new file mode 100644
index 00000000..8c84ca58
--- /dev/null
+++ b/test/unit/usercentrics-lifecycle.test.ts
@@ -0,0 +1,50 @@
+/**
+ * @vitest-environment happy-dom
+ */
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+import { attachUsercentricsConsent } from '../../packages/script/src/runtime/registry/usercentrics'
+
+vi.mock('@unhead/vue', () => ({ useHead: vi.fn() }))
+vi.mock('nuxt/app', () => ({ useNuxtApp: vi.fn() }))
+vi.mock('../../packages/script/src/runtime/utils', () => ({ useRegistryScript: vi.fn() }))
+
+const mocks = vi.hoisted(() => {
+  const remove = vi.fn(() => true)
+  const load = vi.fn(() => Promise.resolve({}))
+  const shared: any = { load, remove }
+  return {
+    hook: vi.fn((_name: string, _callback: () => void) => vi.fn()),
+    load,
+    remove,
+    shared,
+  }
+})
+
+describe('usercentrics lifecycle', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    mocks.shared.load = mocks.load
+    mocks.shared.remove = mocks.remove
+    delete mocks.shared.consent
+  })
+
+  afterEach(() => {
+    delete window.__ucCmp
+  })
+
+  it('re-arms readiness after remove and load', async () => {
+    const instance = mocks.shared
+    attachUsercentricsConsent(instance, window, callback => mocks.hook('app:unmount', callback))
+    const initialWait = instance.consent.whenReady()
+
+    instance.remove()
+    await expect(initialWait).rejects.toThrow('aborted')
+
+    const api = { isInitialized: vi.fn(() => Promise.resolve(true)) }
+    window.__ucCmp = api as any
+    await instance.load()
+
+    await expect(instance.consent.whenReady()).resolves.toBe(api)
+    expect(mocks.hook).toHaveBeenCalledTimes(2)
+  })
+})
diff --git a/test/unit/youtube-player-lifecycle.test.ts b/test/unit/youtube-player-lifecycle.test.ts
index d43c5fa3..856dd759 100644
--- a/test/unit/youtube-player-lifecycle.test.ts
+++ b/test/unit/youtube-player-lifecycle.test.ts
@@ -1,7 +1,7 @@
 /**
  * @vitest-environment happy-dom
  */
-import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { ref } from 'vue'
 import { useScriptYouTubePlayer } from '../../packages/script/src/runtime/registry/youtube-player'
 
@@ -36,6 +36,11 @@ describe('youtube player lifecycle', () => {
     mocks.useRegistryScript.mockImplementation(() => mocks.createHandle() as any)
   })
 
+  afterEach(() => {
+    delete (window as any).YT
+    delete (window as any).onYouTubeIframeAPIReady
+  })
+
   it('decorates the shared remove method only once across Vue proxies', () => {
     const first = useScriptYouTubePlayer({})
     const decoratedRemove = mocks.shared.remove
@@ -51,4 +56,21 @@ describe('youtube player lifecycle', () => {
     const afterRemove = useScriptYouTubePlayer({})
     expect(afterRemove.remove).toBe(decoratedRemove)
   })
+
+  it('cleans readiness installed by repeated calls through the shared instance', () => {
+    mocks.useRegistryScript.mockImplementation((_key: string, createOptions: () => any) => {
+      const options = createOptions()
+      options.clientInit?.()
+      return mocks.createHandle() as any
+    })
+
+    const first = useScriptYouTubePlayer({})
+    const firstReadyHandler = window.onYouTubeIframeAPIReady
+    useScriptYouTubePlayer({})
+
+    expect(window.onYouTubeIframeAPIReady).not.toBe(firstReadyHandler)
+    first.remove()
+
+    expect(window.onYouTubeIframeAPIReady).toBeUndefined()
+  })
 })

From 410e1c3c0c12854a6720e421cc012c5d594992cd Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Tue, 4 Aug 2026 16:50:00 +1000
Subject: [PATCH 15/19] fix(script): address lifecycle review findings

---
 packages/script/src/devtools.ts               |  13 +-
 .../runtime/components/ScriptCarbonAds.vue    |   4 -
 .../runtime/components/ScriptLemonSqueezy.vue |  46 +++++---
 .../src/runtime/registry/usercentrics.ts      |  92 +--------------
 .../src/runtime/registry/youtube-player.ts    |  58 +++------
 .../src/runtime/utils/usercentrics-consent.ts | 111 ++++++++++++++++++
 .../src/runtime/utils/youtube-readiness.ts    |  57 +++++++++
 .../script-component-lifecycle.nuxt.test.ts   |  20 ++--
 test/unit/devtools-lifecycle.test.ts          |  10 +-
 test/unit/usercentrics-lifecycle.test.ts      |   2 +-
 10 files changed, 241 insertions(+), 172 deletions(-)
 create mode 100644 packages/script/src/runtime/utils/usercentrics-consent.ts
 create mode 100644 packages/script/src/runtime/utils/youtube-readiness.ts

diff --git a/packages/script/src/devtools.ts b/packages/script/src/devtools.ts
index b4f72653..c8c4d4b4 100644
--- a/packages/script/src/devtools.ts
+++ b/packages/script/src/devtools.ts
@@ -1,6 +1,7 @@
 import type { Nuxt } from '@nuxt/schema'
 import type { IncomingMessage, ServerResponse } from 'node:http'
 import type { ProxyConfig, RegistryScript } from './runtime/types'
+import { Buffer } from 'node:buffer'
 import { existsSync } from 'node:fs'
 import { createResolver, extendViteConfig } from '@nuxt/kit'
 
@@ -82,7 +83,7 @@ export function setupStandaloneApi(nuxt: Nuxt) {
       }
 
       if (req.method === 'POST') {
-        let body = ''
+        let chunks: Buffer[] = []
         let size = 0
         let finished = false
 
@@ -94,7 +95,7 @@ export function setupStandaloneApi(nuxt: Nuxt) {
         }
         function onAborted() {
           finished = true
-          body = ''
+          chunks = []
           cleanup()
         }
         function onData(chunk: Buffer) {
@@ -103,7 +104,7 @@ export function setupStandaloneApi(nuxt: Nuxt) {
           size += chunk.byteLength
           if (size > DEVTOOLS_API_MAX_BODY_SIZE) {
             finished = true
-            body = ''
+            chunks = []
             cleanup()
             // Drain the remainder so the keep-alive connection can be reused.
             // `cleanup()` removed the normal error handler, so keep one listener
@@ -114,7 +115,7 @@ export function setupStandaloneApi(nuxt: Nuxt) {
             res.end('payload too large')
             return
           }
-          body += chunk.toString()
+          chunks.push(chunk)
         }
         function onEnd() {
           if (finished)
@@ -122,7 +123,7 @@ export function setupStandaloneApi(nuxt: Nuxt) {
           finished = true
           cleanup()
           try {
-            const data = JSON.parse(body)
+            const data = JSON.parse(Buffer.concat(chunks, size).toString('utf8'))
             scriptsState = { ...data, updatedAt: Date.now() }
             res.statusCode = 200
             res.end('ok')
@@ -131,7 +132,7 @@ export function setupStandaloneApi(nuxt: Nuxt) {
             res.statusCode = 400
             res.end('invalid json')
           }
-          body = ''
+          chunks = []
         }
 
         req.on('data', onData)
diff --git a/packages/script/src/runtime/components/ScriptCarbonAds.vue b/packages/script/src/runtime/components/ScriptCarbonAds.vue
index ad012f1c..820e8a09 100644
--- a/packages/script/src/runtime/components/ScriptCarbonAds.vue
+++ b/packages/script/src/runtime/components/ScriptCarbonAds.vue
@@ -85,10 +85,6 @@ onBeforeUnmount(() => {
     scriptEl.remove()
     scriptEl = undefined
   }
-  if (carbonadsEl.value) {
-    carbonadsEl.value.remove()
-    carbonadsEl.value = null
-  }
 })
 </script>
 
diff --git a/packages/script/src/runtime/components/ScriptLemonSqueezy.vue b/packages/script/src/runtime/components/ScriptLemonSqueezy.vue
index e594bc57..02a3b39e 100644
--- a/packages/script/src/runtime/components/ScriptLemonSqueezy.vue
+++ b/packages/script/src/runtime/components/ScriptLemonSqueezy.vue
@@ -1,9 +1,35 @@
 <script lang="ts">
-let activeLemonSqueezyOwner: symbol | undefined
+import type { LemonSqueezyApi, LemonSqueezyEventPayload } from '../registry/lemon-squeezy'
+
+type LemonSqueezyHandler = (event: LemonSqueezyEventPayload) => void
+
+const lemonSqueezyHandlers = new Map<symbol, LemonSqueezyHandler>()
+const dispatchLemonSqueezyEvent: LemonSqueezyHandler = (event) => {
+  for (const handler of [...lemonSqueezyHandlers.values()])
+    handler(event)
+}
+
+function registerLemonSqueezyHandler(
+  owner: symbol,
+  handler: LemonSqueezyHandler,
+  setup: LemonSqueezyApi['Setup'],
+) {
+  lemonSqueezyHandlers.set(owner, handler)
+  // Lemon.js replaces its global handler on load and reload. Reinstall the
+  // stable dispatcher each time while retaining every live subscriber.
+  setup({ eventHandler: dispatchLemonSqueezyEvent })
+}
+
+function unregisterLemonSqueezyHandler(owner: symbol) {
+  const removed = lemonSqueezyHandlers.delete(owner)
+  if (!removed || lemonSqueezyHandlers.size > 0)
+    return
+  if (import.meta.client && typeof window.LemonSqueezy?.Setup === 'function')
+    window.LemonSqueezy.Setup({ eventHandler() {} })
+}
 </script>
 
 <script lang="ts" setup>
-import type { LemonSqueezyEventPayload } from '../registry/lemon-squeezy'
 import type { ElementScriptTrigger } from '../types'
 import { computed, onBeforeUnmount, onMounted, ref } from 'vue'
 import { useScriptTriggerElement } from '../composables/useScriptTriggerElement'
@@ -40,12 +66,7 @@ onMounted(() => {
   instance.onLoaded(({ Setup, Refresh }) => {
     if (disposed)
       return
-    Setup({
-      eventHandler(event) {
-        emits('lemonSqueezyEvent', event)
-      },
-    })
-    activeLemonSqueezyOwner = owner
+    registerLemonSqueezyHandler(owner, event => emits('lemonSqueezyEvent', event), Setup)
     Refresh()
     emits('ready', instance)
   })
@@ -53,14 +74,7 @@ onMounted(() => {
 
 onBeforeUnmount(() => {
   disposed = true
-  // Lemon.js `Setup()` stores a single global `eventHandler`, which captures
-  // this component's `emits` (and therefore the instance). Setup() replaces
-  // rather than appends. Only the component that most recently installed the
-  // handler may clear it; an older instance can unmount after a newer one.
-  if (activeLemonSqueezyOwner === owner && import.meta.client && typeof window.LemonSqueezy?.Setup === 'function') {
-    window.LemonSqueezy.Setup({ eventHandler() {} })
-    activeLemonSqueezyOwner = undefined
-  }
+  unregisterLemonSqueezyHandler(owner)
 })
 
 const rootAttrs = computed(() => {
diff --git a/packages/script/src/runtime/registry/usercentrics.ts b/packages/script/src/runtime/registry/usercentrics.ts
index cf95ec0a..69879d1a 100644
--- a/packages/script/src/runtime/registry/usercentrics.ts
+++ b/packages/script/src/runtime/registry/usercentrics.ts
@@ -1,9 +1,8 @@
 import type { RegistryScriptInput, UseScriptContext } from '#nuxt-scripts/types'
 import { useHead } from '@unhead/vue'
 import { useNuxtApp } from 'nuxt/app'
-import { logger } from '../logger'
 import { useRegistryScript } from '../utils'
-import { createAbortablePromise, createAbortError } from '../utils/abortable-promise'
+import { attachUsercentricsConsent } from '../utils/usercentrics-consent'
 import { UsercentricsOptions } from './schemas'
 
 export { UsercentricsOptions }
@@ -81,95 +80,6 @@ export interface UsercentricsConsent {
   denyAll: () => Promise<void> | void
 }
 
-interface UsercentricsEventTarget {
-  __ucCmp?: UsercentricsCmp
-  addEventListener: Window['addEventListener']
-  removeEventListener: Window['removeEventListener']
-}
-
-type HookAppUnmount = (callback: () => void) => () => void
-
-export function attachUsercentricsConsent<T extends UsercentricsApi>(
-  instance: UseScriptContext<T, UsercentricsConsent>,
-  target: UsercentricsEventTarget,
-  hookAppUnmount: HookAppUnmount,
-): void {
-  if (instance.consent)
-    return
-
-  let readyApi: UsercentricsCmp | undefined
-  let readyPromise: Promise<UsercentricsCmp> | undefined
-  const readyController = new AbortController()
-  let disposed = false
-  const cleanupReadyListener = () => {
-    if (disposed)
-      return
-    disposed = true
-    readyController.abort()
-  }
-  const whenReady = (): Promise<UsercentricsCmp> => {
-    if (disposed)
-      return Promise.reject(createAbortError('Usercentrics readiness wait was aborted'))
-    if (readyApi)
-      return Promise.resolve(readyApi)
-    if (!readyPromise) {
-      // Install the event listener before checking isInitialized() so an
-      // event fired during that async check cannot be missed.
-      readyPromise = createAbortablePromise<UsercentricsCmp>((resolve) => {
-        const onReady = () => {
-          const api = target.__ucCmp
-          if (!api)
-            return
-          readyApi = api
-          resolve(api)
-        }
-        target.addEventListener('UC_CMP_API_READY', onReady)
-        const api = target.__ucCmp
-        if (api?.isInitialized) {
-          Promise.resolve()
-            .then(() => api.isInitialized())
-            .then((initialized) => {
-              if (initialized && !readyController.signal.aborted)
-                onReady()
-            })
-            .catch((error) => {
-              // Some bootstrap stubs throw until the ready event; the event
-              // listener remains the authoritative readiness signal.
-              if (!readyController.signal.aborted)
-                logger.debug('[usercentrics] Waiting for UC_CMP_API_READY after isInitialized() failed', error)
-            })
-        }
-        return () => target.removeEventListener('UC_CMP_API_READY', onReady)
-      }, {
-        signal: readyController.signal,
-        abortMessage: 'Usercentrics readiness wait was aborted',
-      })
-    }
-    return readyPromise
-  }
-
-  const stopAppUnmount = hookAppUnmount(cleanupReadyListener)
-  const originalRemove = instance.remove
-  instance.remove = () => {
-    cleanupReadyListener()
-    stopAppUnmount()
-    return originalRemove()
-  }
-
-  instance.consent = {
-    whenReady,
-    onConsentChange(cb) {
-      const handler = (event: Event) => cb((event as CustomEvent).detail, event)
-      target.addEventListener('UC_UI_CMP_EVENT', handler)
-      return () => target.removeEventListener('UC_UI_CMP_EVENT', handler)
-    },
-    showFirstLayer: () => target.__ucCmp?.showFirstLayer?.(),
-    showSecondLayer: () => target.__ucCmp?.showSecondLayer?.(),
-    acceptAll: () => target.__ucCmp?.acceptAllConsents?.(),
-    denyAll: () => target.__ucCmp?.denyAllConsents?.(),
-  }
-}
-
 /**
  * Load the Usercentrics CMP v3 ("Web CMP") loader and expose typed access to
  * the `window.__ucCmp` programmatic API plus a `consent` helper with
diff --git a/packages/script/src/runtime/registry/youtube-player.ts b/packages/script/src/runtime/registry/youtube-player.ts
index cf64c67c..cfd1991e 100644
--- a/packages/script/src/runtime/registry/youtube-player.ts
+++ b/packages/script/src/runtime/registry/youtube-player.ts
@@ -4,7 +4,7 @@ import { useHead } from '@unhead/vue'
 /// <reference types="youtube" />
 import { watch } from 'vue'
 import { useRegistryScript } from '../utils'
-import { createAbortablePromise } from '../utils/abortable-promise'
+import { armYouTubeReadiness, useYouTubeReadinessState } from '../utils/youtube-readiness'
 
 export interface YouTubePlayerApi {
   YT: MaybePromise<{
@@ -37,10 +37,9 @@ declare global {
 
 export type YouTubePlayerInput = RegistryScriptInput
 const cleanupDecoration = Symbol('nuxt-scripts:youtube-cleanup')
+const readinessDecoration = Symbol('nuxt-scripts:youtube-readiness')
 
 export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: YouTubePlayerInput): UseScriptContext<T> {
-  let readyPromise: Promise<void> = Promise.resolve()
-  let readyController: AbortController | undefined
   const instance = useRegistryScript<T>('youtubePlayer', () => ({
     scriptInput: {
       src: 'https://www.youtube.com/iframe_api',
@@ -48,8 +47,9 @@ export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: You
     },
     scriptOptions: {
       use() {
+        const readiness = useYouTubeReadinessState()
         return {
-          YT: window.YT || readyPromise.then(() => {
+          YT: window.YT || readiness.promise.then(() => {
             return window.YT
           }),
         }
@@ -58,49 +58,21 @@ export function useScriptYouTubePlayer<T extends YouTubePlayerApi>(_options: You
     clientInit: import.meta.server
       ? undefined
       : () => {
-          readyController?.abort()
-          readyController = new AbortController()
-          readyPromise = createAbortablePromise((resolve) => {
-            const previousReady = window.onYouTubeIframeAPIReady
-            let onReady: () => void
-            const restoreReady = () => {
-              if (window.onYouTubeIframeAPIReady !== onReady)
-                return
-              if (previousReady)
-                window.onYouTubeIframeAPIReady = previousReady
-              else
-                delete (window as any).onYouTubeIframeAPIReady
-            }
-            onReady = () => {
-              restoreReady()
-              try {
-                previousReady?.()
-              }
-              catch (error) {
-                if (import.meta.dev)
-                  console.error('[nuxt-scripts] Previous onYouTubeIframeAPIReady handler failed:', error)
-              }
-              finally {
-                resolve()
-              }
-            }
-            window.onYouTubeIframeAPIReady = onReady
-            return restoreReady
-          }, {
-            signal: readyController.signal,
-            abortMessage: 'YouTube API readiness wait was aborted',
-          })
-          // Removal can reject readiness before any caller has requested YT.
-          // Mark the internal promise handled while preserving rejection for
-          // consumers that do await the promise returned by `use()`.
-          void readyPromise.then(undefined, () => undefined)
+          armYouTubeReadiness(useYouTubeReadinessState())
         },
   }), _options)
-  if (import.meta.client && !(instance as any)[cleanupDecoration]) {
-    ;(instance as any)[cleanupDecoration] = true
+  const clientInstance = import.meta.server || typeof window === 'undefined'
+    ? undefined
+    : instance as UseScriptContext<T> & {
+      [cleanupDecoration]?: boolean
+      [readinessDecoration]?: ReturnType<typeof useYouTubeReadinessState>
+    }
+  if (clientInstance && !clientInstance[cleanupDecoration]) {
+    clientInstance[cleanupDecoration] = true
+    clientInstance[readinessDecoration] = useYouTubeReadinessState()
     const originalRemove = instance.remove
     instance.remove = () => {
-      readyController?.abort()
+      clientInstance[readinessDecoration]?.controller?.abort()
       return originalRemove()
     }
   }
diff --git a/packages/script/src/runtime/utils/usercentrics-consent.ts b/packages/script/src/runtime/utils/usercentrics-consent.ts
new file mode 100644
index 00000000..671c4160
--- /dev/null
+++ b/packages/script/src/runtime/utils/usercentrics-consent.ts
@@ -0,0 +1,111 @@
+import type { UseScriptContext } from '#nuxt-scripts/types'
+import type { UsercentricsApi, UsercentricsCmp, UsercentricsConsent } from '../registry/usercentrics'
+import { logger } from '../logger'
+import { createAbortablePromise, createAbortError } from './abortable-promise'
+
+interface UsercentricsEventTarget {
+  __ucCmp?: UsercentricsCmp
+  addEventListener: Window['addEventListener']
+  removeEventListener: Window['removeEventListener']
+}
+
+type HookAppUnmount = (callback: () => void) => () => void
+
+export function attachUsercentricsConsent<T extends UsercentricsApi>(
+  instance: UseScriptContext<T, UsercentricsConsent>,
+  target: UsercentricsEventTarget,
+  hookAppUnmount: HookAppUnmount,
+): void {
+  if (instance.consent)
+    return
+
+  let readyApi: UsercentricsCmp | undefined
+  let readyPromise: Promise<UsercentricsCmp> | undefined
+  let readyController: AbortController | undefined
+  let stopAppUnmount = () => {}
+  let disposed = true
+  const cleanupReadyListener = () => {
+    if (disposed)
+      return
+    disposed = true
+    readyController?.abort()
+    readyController = undefined
+    const stop = stopAppUnmount
+    stopAppUnmount = () => {}
+    stop()
+  }
+  const armReadyListener = () => {
+    readyApi = undefined
+    readyPromise = undefined
+    readyController = new AbortController()
+    disposed = false
+    stopAppUnmount = hookAppUnmount(cleanupReadyListener)
+  }
+  const whenReady = (): Promise<UsercentricsCmp> => {
+    const controller = readyController
+    if (disposed || !controller)
+      return Promise.reject(createAbortError('Usercentrics readiness wait was aborted'))
+    if (readyApi)
+      return Promise.resolve(readyApi)
+    if (!readyPromise) {
+      // Install the event listener before checking isInitialized() so an
+      // event fired during that async check cannot be missed.
+      readyPromise = createAbortablePromise<UsercentricsCmp>((resolve) => {
+        const onReady = () => {
+          const api = target.__ucCmp
+          if (!api)
+            return
+          readyApi = api
+          resolve(api)
+        }
+        target.addEventListener('UC_CMP_API_READY', onReady)
+        const api = target.__ucCmp
+        if (api?.isInitialized) {
+          Promise.resolve()
+            .then(() => api.isInitialized())
+            .then((initialized) => {
+              if (initialized && !controller.signal.aborted)
+                onReady()
+            })
+            .catch((error) => {
+              // Some bootstrap stubs throw until the ready event; the event
+              // listener remains the authoritative readiness signal.
+              if (!controller.signal.aborted)
+                logger.debug('[usercentrics] Waiting for UC_CMP_API_READY after isInitialized() failed', error)
+            })
+        }
+        return () => target.removeEventListener('UC_CMP_API_READY', onReady)
+      }, {
+        signal: controller.signal,
+        abortMessage: 'Usercentrics readiness wait was aborted',
+      })
+    }
+    return readyPromise
+  }
+
+  armReadyListener()
+  const originalRemove = instance.remove
+  const originalLoad = instance.load
+  instance.remove = () => {
+    cleanupReadyListener()
+    return originalRemove()
+  }
+  instance.load = () => {
+    if (disposed)
+      armReadyListener()
+    return originalLoad()
+  }
+
+  instance.consent = {
+    whenReady,
+    onConsentChange(cb) {
+      const handler = (event: Event) => cb((event as CustomEvent).detail, event)
+      target.addEventListener('UC_UI_CMP_EVENT', handler)
+      return () => target.removeEventListener('UC_UI_CMP_EVENT', handler)
+    },
+    showFirstLayer: () => target.__ucCmp?.showFirstLayer?.(),
+    showSecondLayer: () => target.__ucCmp?.showSecondLayer?.(),
+    acceptAll: () => target.__ucCmp?.acceptAllConsents?.(),
+    denyAll: () => target.__ucCmp?.denyAllConsents?.(),
+  }
+}
diff --git a/packages/script/src/runtime/utils/youtube-readiness.ts b/packages/script/src/runtime/utils/youtube-readiness.ts
new file mode 100644
index 00000000..e1ed6259
--- /dev/null
+++ b/packages/script/src/runtime/utils/youtube-readiness.ts
@@ -0,0 +1,57 @@
+import { createAbortablePromise } from './abortable-promise'
+
+interface YouTubeReadinessState {
+  controller?: AbortController
+  promise: Promise<void>
+}
+
+const readinessByWindow = new WeakMap<Window, YouTubeReadinessState>()
+
+export function useYouTubeReadinessState(): YouTubeReadinessState {
+  const existing = readinessByWindow.get(window)
+  if (existing)
+    return existing
+  const state = { promise: Promise.resolve() }
+  readinessByWindow.set(window, state)
+  return state
+}
+
+export function armYouTubeReadiness(state: YouTubeReadinessState) {
+  state.controller?.abort()
+  const controller = new AbortController()
+  const target = window
+  state.controller = controller
+  state.promise = createAbortablePromise((resolve) => {
+    const previousReady = target.onYouTubeIframeAPIReady
+    let onReady: () => void
+    const restoreReady = () => {
+      if (target.onYouTubeIframeAPIReady !== onReady)
+        return
+      if (previousReady)
+        target.onYouTubeIframeAPIReady = previousReady
+      else
+        delete (target as any).onYouTubeIframeAPIReady
+    }
+    onReady = () => {
+      restoreReady()
+      try {
+        previousReady?.()
+      }
+      catch (error) {
+        if (import.meta.dev)
+          console.error('[nuxt-scripts] Previous onYouTubeIframeAPIReady handler failed:', error)
+      }
+      finally {
+        resolve()
+      }
+    }
+    target.onYouTubeIframeAPIReady = onReady
+    return restoreReady
+  }, {
+    signal: controller.signal,
+    abortMessage: 'YouTube API readiness wait was aborted',
+  })
+  // Removal can reject readiness before any caller has requested YT.
+  // Mark the internal promise handled while preserving rejection for consumers.
+  void state.promise.then(undefined, () => undefined)
+}
diff --git a/test/nuxt-runtime/script-component-lifecycle.nuxt.test.ts b/test/nuxt-runtime/script-component-lifecycle.nuxt.test.ts
index 9a4ed753..7485acc3 100644
--- a/test/nuxt-runtime/script-component-lifecycle.nuxt.test.ts
+++ b/test/nuxt-runtime/script-component-lifecycle.nuxt.test.ts
@@ -1,6 +1,6 @@
 import type { VueWrapper } from '@vue/test-utils'
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import { mount } from '@vue/test-utils'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 import ScriptCarbonAds from '../../packages/script/src/runtime/components/ScriptCarbonAds.vue'
 import ScriptLemonSqueezy from '../../packages/script/src/runtime/components/ScriptLemonSqueezy.vue'
 
@@ -52,8 +52,14 @@ describe('script component lifecycle', () => {
   })
 
   it('fans Lemon Squeezy events out to every live component', () => {
-    const first = mount(ScriptLemonSqueezy)
-    const second = mount(ScriptLemonSqueezy)
+    const firstEvent = vi.fn()
+    const secondEvent = vi.fn()
+    const first = mount(ScriptLemonSqueezy, {
+      props: { onLemonSqueezyEvent: firstEvent } as any,
+    })
+    const second = mount(ScriptLemonSqueezy, {
+      props: { onLemonSqueezyEvent: secondEvent } as any,
+    })
     wrappers.push(first, second)
     const installedHandlers: Array<(event: any) => void> = []
     const api = {
@@ -69,13 +75,13 @@ describe('script component lifecycle', () => {
     mocks.loadedCallbacks[1]!(api)
     installedHandlers.at(-1)!({ event: 'Checkout.Success', data: { order: 1 } })
 
-    expect(first.emitted('lemonSqueezyEvent')).toHaveLength(1)
-    expect(second.emitted('lemonSqueezyEvent')).toHaveLength(1)
+    expect(firstEvent).toHaveBeenCalledTimes(1)
+    expect(secondEvent).toHaveBeenCalledTimes(1)
 
     second.unmount()
     installedHandlers.at(-1)!({ event: 'Checkout.Success', data: { order: 2 } })
 
-    expect(first.emitted('lemonSqueezyEvent')).toHaveLength(2)
-    expect(second.emitted('lemonSqueezyEvent')).toHaveLength(1)
+    expect(firstEvent).toHaveBeenCalledTimes(2)
+    expect(secondEvent).toHaveBeenCalledTimes(1)
   })
 })
diff --git a/test/unit/devtools-lifecycle.test.ts b/test/unit/devtools-lifecycle.test.ts
index 410ae190..3ebced30 100644
--- a/test/unit/devtools-lifecycle.test.ts
+++ b/test/unit/devtools-lifecycle.test.ts
@@ -4,10 +4,12 @@ import { EventEmitter } from 'node:events'
 import { describe, expect, it, vi } from 'vitest'
 import { setupStandaloneApi } from '../../packages/script/src/devtools'
 
-const createRequest = (method: string): IncomingMessage => Object.assign(new EventEmitter(), {
-  method,
-  resume: vi.fn(),
-}) as IncomingMessage
+function createRequest(method: string): IncomingMessage {
+  return Object.assign(new EventEmitter(), {
+    method,
+    resume: vi.fn(),
+  }) as IncomingMessage
+}
 
 function createResponse() {
   let body: unknown
diff --git a/test/unit/usercentrics-lifecycle.test.ts b/test/unit/usercentrics-lifecycle.test.ts
index 8c84ca58..cbe4f0e5 100644
--- a/test/unit/usercentrics-lifecycle.test.ts
+++ b/test/unit/usercentrics-lifecycle.test.ts
@@ -2,7 +2,7 @@
  * @vitest-environment happy-dom
  */
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
-import { attachUsercentricsConsent } from '../../packages/script/src/runtime/registry/usercentrics'
+import { attachUsercentricsConsent } from '../../packages/script/src/runtime/utils/usercentrics-consent'
 
 vi.mock('@unhead/vue', () => ({ useHead: vi.fn() }))
 vi.mock('nuxt/app', () => ({ useNuxtApp: vi.fn() }))

From a75f6100a53d339bd4d9dc222b87b2e4b19c6b34 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Tue, 4 Aug 2026 17:16:57 +1000
Subject: [PATCH 16/19] feat(script): use native source-less loaders

---
 packages/script/src/module.ts                 | 45 ++++++++++++----
 .../script/src/runtime/registry/posthog.ts    | 15 ++++--
 .../script/src/runtime/unhead-features.ts     |  6 +++
 packages/script/src/runtime/utils.ts          | 26 ++++++++--
 packages/script/src/unhead-features.ts        |  5 ++
 test/e2e/unhead-v3-compat.test.ts             |  8 +++
 test/fixtures/unhead-v3/app.vue               | 29 +++++++++++
 .../nuxt-runtime/consent-default.nuxt.test.ts | 14 +++++
 test/unit/unhead-features.test.ts             |  9 ++++
 test/unit/utils.test.ts                       | 51 +++++++++++++++++--
 10 files changed, 190 insertions(+), 18 deletions(-)
 create mode 100644 packages/script/src/runtime/unhead-features.ts
 create mode 100644 packages/script/src/unhead-features.ts
 create mode 100644 test/unit/unhead-features.test.ts

diff --git a/packages/script/src/module.ts b/packages/script/src/module.ts
index 6534f2a0..a870a82b 100644
--- a/packages/script/src/module.ts
+++ b/packages/script/src/module.ts
@@ -31,8 +31,8 @@ import {
   hasNuxtModule,
 } from '@nuxt/kit'
 import { defu } from 'defu'
-import { resolve as resolvePath_ } from 'pathe'
-import { readPackageJSON } from 'pkg-types'
+import { dirname, resolve as resolvePath_ } from 'pathe'
+import { readPackageJSON, resolvePackageJSON } from 'pkg-types'
 import { setupPublicAssetStrategy } from './assets'
 import { buildDevtoolsData, buildDevtoolsEntry, setupDevtools } from './devtools'
 import { installNuxtModule } from './kit'
@@ -52,6 +52,7 @@ import {
 } from './runtime/server/utils/cache-config'
 import { isPublicNetworkHostname } from './runtime/server/utils/network-host'
 import { registerTypeTemplates, templatePlugin, templateTriggerResolver } from './templates'
+import { hasUnheadSourceLessScriptLoader } from './unhead-features'
 import { validateScriptsEnvVars } from './validate-env'
 
 export type { FirstPartyPrivacy }
@@ -611,10 +612,27 @@ export default defineNuxtModule<ModuleOptions>({
         })
       }
     }
-    // couldn't be found for some reason, assume compatibility
-    const { version: unheadVersion } = await readPackageJSON('@unhead/vue', {
+    // If Unhead cannot be resolved, retain the compatibility implementation.
+    const unheadPackagePath = await resolvePackageJSON('@unhead/vue', {
       from: nuxt.options.modulesDir,
-    }).catch(() => ({ version: null }))
+    }).catch(() => {
+      // @unhead/vue is optional; unresolved installs use the local compatibility path.
+      return null
+    })
+    const unheadPackage = unheadPackagePath
+      ? await readPackageJSON(unheadPackagePath).catch(() => {
+          // An unreadable optional peer cannot safely advertise loader support.
+          return null
+        })
+      : null
+    const unheadVersion = unheadPackage?.version
+    const scriptsTypesExport = (unheadPackage?.exports as any)?.['./scripts']?.types
+    const scriptsTypesPath = unheadPackagePath && typeof scriptsTypesExport === 'string'
+      ? resolvePath_(dirname(unheadPackagePath), scriptsTypesExport)
+      : null
+    const unheadSourceLessScriptLoader = !!scriptsTypesPath
+      && existsSync(scriptsTypesPath)
+      && hasUnheadSourceLessScriptLoader(readFileSync(scriptsTypesPath, 'utf8'))
     if (unheadVersion?.startsWith('1')) {
       logger.error(`Nuxt Scripts requires Unhead >= 2, you are using v${unheadVersion}. Please run \`nuxi upgrade --clean\` to upgrade...`)
     }
@@ -696,13 +714,22 @@ export default defineNuxtModule<ModuleOptions>({
         : undefined,
     } as any
 
-    // Build-time constant: `__NUXT_SCRIPTS_DEBUG__` is replaced inline by the
-    // bundler, so debug branches DCE away in production when `debug: false`.
+    // Build-time constants are replaced inline so internal capability choices
+    // cannot be changed through public runtime config.
     const debugConst = JSON.stringify(!!config.debug)
+    const unheadSourceLessConst = JSON.stringify(unheadSourceLessScriptLoader)
     nuxt.options.vite ||= {}
-    nuxt.options.vite.define = { ...nuxt.options.vite.define, __NUXT_SCRIPTS_DEBUG__: debugConst }
+    nuxt.options.vite.define = {
+      ...nuxt.options.vite.define,
+      __NUXT_SCRIPTS_DEBUG__: debugConst,
+      __NUXT_SCRIPTS_UNHEAD_SOURCELESS__: unheadSourceLessConst,
+    }
     nuxt.options.nitro ||= {}
-    nuxt.options.nitro.replace = { ...nuxt.options.nitro.replace, __NUXT_SCRIPTS_DEBUG__: debugConst }
+    nuxt.options.nitro.replace = {
+      ...nuxt.options.nitro.replace,
+      __NUXT_SCRIPTS_DEBUG__: debugConst,
+      __NUXT_SCRIPTS_UNHEAD_SOURCELESS__: unheadSourceLessConst,
+    }
 
     // Register proxy handler unconditionally. The handler rejects unknown domains
     // at runtime, so it's safe to register even when no scripts use proxy.
diff --git a/packages/script/src/runtime/registry/posthog.ts b/packages/script/src/runtime/registry/posthog.ts
index c607f043..d97dad2c 100644
--- a/packages/script/src/runtime/registry/posthog.ts
+++ b/packages/script/src/runtime/registry/posthog.ts
@@ -68,7 +68,13 @@ export function useScriptPostHog<T extends PostHogApi>(_options?: PostHogInput):
       },
       clientInit: import.meta.server
         ? undefined
-        : async () => {
+        : async (ctx) => {
+          const throwIfAborted = () => {
+            if (ctx?.signal.aborted)
+              throw ctx.signal.reason || new Error('Loading PostHog was aborted')
+          }
+          throwIfAborted()
+
           // Use window for state to handle HMR correctly
           if (window.__posthogInitPromise || window.posthog)
             return
@@ -88,6 +94,7 @@ export function useScriptPostHog<T extends PostHogApi>(_options?: PostHogInput):
 
           window.__posthogInitPromise = import('posthog-js')
             .then(({ default: posthog }) => {
+              throwIfAborted()
               const config: Partial<PostHogConfig> = {
                 api_host: apiHost,
                 ...options?.config as Partial<PostHogConfig>,
@@ -124,9 +131,11 @@ export function useScriptPostHog<T extends PostHogApi>(_options?: PostHogInput):
               return window.posthog
             })
             .catch((e) => {
-              logger.error('Failed to load posthog-js:', e)
+              if (!ctx?.signal.aborted)
+                logger.error('Failed to load posthog-js:', e)
               delete window._posthogQueue
-              return undefined
+              delete window.__posthogInitPromise
+              throw e
             })
 
           // Return the promise so NPM stub knows when initialization completes
diff --git a/packages/script/src/runtime/unhead-features.ts b/packages/script/src/runtime/unhead-features.ts
new file mode 100644
index 00000000..7be486cd
--- /dev/null
+++ b/packages/script/src/runtime/unhead-features.ts
@@ -0,0 +1,6 @@
+declare const __NUXT_SCRIPTS_UNHEAD_SOURCELESS__: boolean
+
+export function isUnheadSourceLessScriptLoaderEnabled(): boolean {
+  return typeof __NUXT_SCRIPTS_UNHEAD_SOURCELESS__ !== 'undefined'
+    && __NUXT_SCRIPTS_UNHEAD_SOURCELESS__
+}
diff --git a/packages/script/src/runtime/utils.ts b/packages/script/src/runtime/utils.ts
index 812ca280..4c5cacf6 100644
--- a/packages/script/src/runtime/utils.ts
+++ b/packages/script/src/runtime/utils.ts
@@ -18,6 +18,7 @@ import { parse } from 'valibot'
 import { useScript } from './composables/useScript'
 import { createNpmScriptStub } from './npm-script-stub'
 import { attachGcmConsent } from './registry/_gcm-consent'
+import { isUnheadSourceLessScriptLoaderEnabled } from './unhead-features'
 
 // Dev-only: stack trace parsing for component location detection (only referenced inside import.meta.dev)
 const URL_MATCH_RE = /https?:\/\/[^/]+\/_nuxt\/(.+\.vue)(?:\?[^)]*)?:(\d+):(\d+)/
@@ -43,8 +44,8 @@ type OptionsFn<O> = (options: InferIfSchema<O>, ctx: { scriptInput?: UseScriptIn
   scriptInput?: UseScriptInput
   scriptOptions?: NuxtUseScriptOptions
   schema?: O extends ObjectSchema<any, any> | UnionSchema<any, any> ? O : undefined
-  clientInit?: () => void | Promise<any>
-  scriptMode?: 'external' | 'npm' // NEW: external = CDN script (default), npm = NPM package only
+  clientInit?: (ctx?: { signal: AbortSignal }) => any | Promise<any>
+  scriptMode?: 'external' | 'npm'
   /**
    * Opt-in: this script consumes GCMv2 Consent Mode. `useRegistryScript` auto-attaches
    * a `consent: { default, update }` API + dev validation against the canonical schema.
@@ -82,8 +83,27 @@ export function useRegistryScript<T extends Record<string | symbol, any>, O = Em
   const userOptions = defu(_userOptions || {}, typeof scriptConfig === 'object' ? scriptConfig : {})
   const options = optionsFn(userOptions as InferIfSchema<O>, { scriptInput: userOptions.scriptInput as UseScriptInput & { src?: string } })
 
-  // NEW: Handle NPM-only scripts differently
+  // Delegate keyed client resources to Unhead when its loader API is present.
+  // Older versions retain the existing local stub and public API.
   if (options.scriptMode === 'npm') {
+    if (isUnheadSourceLessScriptLoaderEnabled()) {
+      const scriptOptions = { ...userOptions.scriptOptions, ...options.scriptOptions } as NuxtUseScriptOptions<T>
+      const resolveApi = scriptOptions.use
+      delete scriptOptions.use
+      if (typeof scriptOptions.trigger === 'undefined')
+        scriptOptions.trigger = 'client'
+
+      return useScript<T>({
+        key: String(registryKey),
+        async loader({ signal }: { signal: AbortSignal }) {
+          const initialized = await options.clientInit?.({ signal })
+          if (signal.aborted)
+            throw signal.reason || new Error(`Loading ${String(registryKey)} was aborted`)
+          return (resolveApi?.() || initialized || {}) as T
+        },
+      } as any, scriptOptions) as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>>
+    }
+
     return createNpmScriptStub<T>({
       key: String(registryKey),
       use: resolveClientUse(options.scriptOptions?.use),
diff --git a/packages/script/src/unhead-features.ts b/packages/script/src/unhead-features.ts
new file mode 100644
index 00000000..20836023
--- /dev/null
+++ b/packages/script/src/unhead-features.ts
@@ -0,0 +1,5 @@
+const SOURCE_LESS_SCRIPT_LOADER_TYPE = /\bUseScriptLoaderInput\b/
+
+export function hasUnheadSourceLessScriptLoader(typesSource: string): boolean {
+  return SOURCE_LESS_SCRIPT_LOADER_TYPE.test(typesSource)
+}
diff --git a/test/e2e/unhead-v3-compat.test.ts b/test/e2e/unhead-v3-compat.test.ts
index 9cf00a4d..a754311e 100644
--- a/test/e2e/unhead-v3-compat.test.ts
+++ b/test/e2e/unhead-v3-compat.test.ts
@@ -48,4 +48,12 @@ describe.skipIf(skip)('unhead v3 compat', () => {
 
     expect(await page.textContent('#proxy-result')).toBe('passed')
   }, 15_000)
+
+  it('loads source-less registry SDKs through the compatible lifecycle', async () => {
+    const page = await createPage('/')
+    onTestFinished(() => page.close())
+    await page.waitForFunction(() => document.querySelector('#module-result')?.textContent === 'passed')
+
+    expect(await page.textContent('#module-result')).toBe('passed')
+  }, 15_000)
 })
diff --git a/test/fixtures/unhead-v3/app.vue b/test/fixtures/unhead-v3/app.vue
index 16691c5d..b1062e10 100644
--- a/test/fixtures/unhead-v3/app.vue
+++ b/test/fixtures/unhead-v3/app.vue
@@ -1,4 +1,6 @@
 <script setup lang="ts">
+import { useRegistryScript } from '#nuxt-scripts/utils'
+
 // Direct exercise of the codepaths that broke under @unhead/vue v3's stricter
 // types. Avoids registry components that surface unrelated pre-existing typing
 // issues; we want this fixture to be a clean v3 regression gate.
@@ -50,6 +52,25 @@ const { load, proxy } = useScript<FixtureApi>('/fixture-api.js', {
 })
 const retainedProxy = proxy
 
+type FixtureModule = {
+  ping: () => string
+}
+
+const moduleResult = ref('pending')
+const moduleApi: FixtureModule = {
+  ping: () => 'passed',
+}
+const moduleScript = useRegistryScript<FixtureModule>('fixture-module', () => ({
+  scriptMode: 'npm',
+  clientInit: async () => moduleApi,
+  scriptOptions: {
+    trigger: 'manual',
+    use: () => moduleApi,
+  },
+}), {
+  scriptOptions: { trigger: 'manual' },
+})
+
 onMounted(() => {
   retainedProxy.increment()
   load()
@@ -60,6 +81,13 @@ onMounted(() => {
     .catch((error: unknown) => {
       proxyResult.value = error instanceof Error ? error.message : String(error)
     })
+  moduleScript.load()
+    .then(() => {
+      moduleResult.value = moduleScript.proxy.ping()
+    })
+    .catch((error: unknown) => {
+      moduleResult.value = error instanceof Error ? error.message : String(error)
+    })
 })
 </script>
 
@@ -67,5 +95,6 @@ onMounted(() => {
   <div>
     <div id="probe-status">{{ status }}</div>
     <div id="proxy-result">{{ proxyResult }}</div>
+    <div id="module-result">{{ moduleResult }}</div>
   </div>
 </template>
diff --git a/test/nuxt-runtime/consent-default.nuxt.test.ts b/test/nuxt-runtime/consent-default.nuxt.test.ts
index dd3a1ea2..2c7e2648 100644
--- a/test/nuxt-runtime/consent-default.nuxt.test.ts
+++ b/test/nuxt-runtime/consent-default.nuxt.test.ts
@@ -75,6 +75,7 @@ vi.mock('../../packages/script/src/runtime/logger', () => {
 
 describe('consent defaults — clientInit ordering', () => {
   beforeEach(() => {
+    posthogInitImpl = undefined
     delete (window as any).dataLayer
     delete (window as any)._paq
     delete (window as any).mixpanel
@@ -541,4 +542,17 @@ describe('per-script consent object', () => {
     expect(optIn).toHaveBeenCalledOnce()
     expect(optOut).toHaveBeenCalledOnce()
   })
+
+  it('posthog: does not initialize after its source-less loader is aborted', async () => {
+    const init = vi.fn(() => ({ capture: vi.fn() }))
+    posthogInitImpl = init
+    const { useScriptPostHog } = await import('../../packages/script/src/runtime/registry/posthog')
+    const result: any = useScriptPostHog({ apiKey: 'phc_xxx' })
+    const controller = new AbortController()
+    const reason = new Error('consumer removed')
+    controller.abort(reason)
+
+    await expect(result._opts.clientInit({ signal: controller.signal })).rejects.toBe(reason)
+    expect(init).not.toHaveBeenCalled()
+  })
 })
diff --git a/test/unit/unhead-features.test.ts b/test/unit/unhead-features.test.ts
new file mode 100644
index 00000000..febd7f94
--- /dev/null
+++ b/test/unit/unhead-features.test.ts
@@ -0,0 +1,9 @@
+import { describe, expect, it } from 'vitest'
+import { hasUnheadSourceLessScriptLoader } from '../../packages/script/src/unhead-features'
+
+describe('unhead feature detection', () => {
+  it('detects the source-less loader type export', () => {
+    expect(hasUnheadSourceLessScriptLoader('export interface UseScriptLoaderInput<T> {}')).toBe(true)
+    expect(hasUnheadSourceLessScriptLoader('export interface UseScriptInput {}')).toBe(false)
+  })
+})
diff --git a/test/unit/utils.test.ts b/test/unit/utils.test.ts
index 0190a5cb..8d295568 100644
--- a/test/unit/utils.test.ts
+++ b/test/unit/utils.test.ts
@@ -1,15 +1,33 @@
-import { describe, expect, it, vi } from 'vitest'
+import { afterEach, describe, expect, it, vi } from 'vitest'
 import { useRegistryScript } from '../../packages/script/src/runtime/utils'
 
+const runtimeConfig = vi.hoisted(() => ({
+  public: {
+    scripts: {},
+  },
+}))
+
+const useScriptMock = vi.hoisted(() => vi.fn((input, options) => ({ input, options })))
+const unheadFeatures = vi.hoisted(() => ({ sourceLessScriptLoader: false }))
+
 // Mock dependencies
 vi.mock('nuxt/app', () => ({
-  useRuntimeConfig: () => ({ public: { scripts: {} } }),
+  useRuntimeConfig: () => runtimeConfig,
 }))
 
 vi.mock('../../packages/script/src/runtime/composables/useScript', () => ({
-  useScript: vi.fn((input, options) => ({ input, options })),
+  useScript: useScriptMock,
 }))
 
+vi.mock('../../packages/script/src/runtime/unhead-features', () => ({
+  isUnheadSourceLessScriptLoaderEnabled: () => unheadFeatures.sourceLessScriptLoader,
+}))
+
+afterEach(() => {
+  unheadFeatures.sourceLessScriptLoader = false
+  useScriptMock.mockClear()
+})
+
 describe('useRegistryScript scriptOptions', () => {
   it('should not mutate user-provided scriptOptions', () => {
     const mockOptionsFunction = vi.fn((_opts, _ctx) => ({
@@ -53,6 +71,33 @@ describe('useRegistryScript scriptOptions', () => {
     expect(result.proxy).toEqual({})
     expect(unsafeUse).not.toHaveBeenCalled()
   })
+
+  it('delegates npm mode to an Unhead source-less loader when supported', async () => {
+    unheadFeatures.sourceLessScriptLoader = true
+    const api = { track: vi.fn() }
+    const clientInit = vi.fn(async () => api)
+    const use = vi.fn(() => api)
+    const result = useRegistryScript('posthog', () => ({
+      scriptMode: 'npm' as const,
+      scriptOptions: { use },
+      clientInit,
+    }), {
+      scriptOptions: { trigger: 'manual' },
+    }) as any
+
+    expect(result.input).toMatchObject({
+      key: 'posthog',
+      loader: expect.any(Function),
+    })
+    expect(result.input).not.toHaveProperty('src')
+    expect(result.options).toMatchObject({ trigger: 'manual' })
+    expect(result.options).not.toHaveProperty('use')
+
+    const signal = new AbortController().signal
+    await expect(result.input.loader({ signal })).resolves.toBe(api)
+    expect(clientInit).toHaveBeenCalledWith({ signal })
+    expect(use).toHaveBeenCalledOnce()
+  })
 })
 
 describe('useRegistryScript query param merging', () => {

From e3cfda0a2c195527993409c27ab9b7b1e2a95746 Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Tue, 4 Aug 2026 17:43:21 +1000
Subject: [PATCH 17/19] fix(script): address final lifecycle review

---
 packages/script/src/module.ts                 | 30 +++++--------------
 .../src/runtime/server/utils/cache-config.ts  | 14 +++++++++
 .../src/runtime/utils/youtube-readiness.ts    |  2 +-
 packages/script/src/unhead-features.ts        | 14 +++++++++
 test/unit/cached-upstream-lifecycle.test.ts   | 17 ++++++++++-
 test/unit/unhead-features.test.ts             | 14 ++++++++-
 test/unit/youtube-player-lifecycle.test.ts    | 15 ++++++++++
 7 files changed, 80 insertions(+), 26 deletions(-)

diff --git a/packages/script/src/module.ts b/packages/script/src/module.ts
index a870a82b..618dd5dd 100644
--- a/packages/script/src/module.ts
+++ b/packages/script/src/module.ts
@@ -44,15 +44,10 @@ import { generateInterceptPluginContents } from './plugins/intercept'
 import { NuxtScriptBundleTransformer } from './plugins/transform'
 import { aliasProxyValue, buildDomainAliasMap, invertAliasMap, isSafeAliasSegment } from './proxy-alias'
 import { buildProxyConfigsFromRegistry, generatePartytownResolveUrl, getPartytownForwards, registry, resolveCapabilities } from './registry'
-import {
-  NUXT_SCRIPTS_CACHE_BASE,
-  NUXT_SCRIPTS_CACHE_MAX_ENTRIES,
-  NUXT_SCRIPTS_CACHE_MAX_ENTRY_SIZE,
-  NUXT_SCRIPTS_CACHE_MAX_SIZE,
-} from './runtime/server/utils/cache-config'
+import { ensureNuxtScriptsCacheStorage } from './runtime/server/utils/cache-config'
 import { isPublicNetworkHostname } from './runtime/server/utils/network-host'
 import { registerTypeTemplates, templatePlugin, templateTriggerResolver } from './templates'
-import { hasUnheadSourceLessScriptLoader } from './unhead-features'
+import { hasUnheadSourceLessScriptLoaderFile } from './unhead-features'
 import { validateScriptsEnvVars } from './validate-env'
 
 export type { FirstPartyPrivacy }
@@ -630,9 +625,7 @@ export default defineNuxtModule<ModuleOptions>({
     const scriptsTypesPath = unheadPackagePath && typeof scriptsTypesExport === 'string'
       ? resolvePath_(dirname(unheadPackagePath), scriptsTypesExport)
       : null
-    const unheadSourceLessScriptLoader = !!scriptsTypesPath
-      && existsSync(scriptsTypesPath)
-      && hasUnheadSourceLessScriptLoader(readFileSync(scriptsTypesPath, 'utf8'))
+    const unheadSourceLessScriptLoader = hasUnheadSourceLessScriptLoaderFile(scriptsTypesPath)
     if (unheadVersion?.startsWith('1')) {
       logger.error(`Nuxt Scripts requires Unhead >= 2, you are using v${unheadVersion}. Please run \`nuxi upgrade --clean\` to upgrade...`)
     }
@@ -1206,19 +1199,10 @@ export default defineNuxtModule<ModuleOptions>({
       }
     }
 
-    if (Object.keys(enabledEndpoints).length > 0) {
-      const nitroOptions = nuxt.options.nitro as any
-      nitroOptions.storage ||= {}
-      // Nitro's default memory storage has no eviction policy. Keep proxy and
-      // embed caches bounded unless the application supplied a dedicated
-      // persistent/distributed mount for this namespace.
-      nitroOptions.storage[NUXT_SCRIPTS_CACHE_BASE] ||= {
-        driver: 'lru-cache',
-        max: NUXT_SCRIPTS_CACHE_MAX_ENTRIES,
-        maxSize: NUXT_SCRIPTS_CACHE_MAX_SIZE,
-        maxEntrySize: NUXT_SCRIPTS_CACHE_MAX_ENTRY_SIZE,
-      }
-    }
+    // Nitro's default memory storage has no eviction policy. Every proxy and
+    // embed cache shares this bounded mount, including proxy-only registries
+    // without dedicated server handlers. Preserve application-supplied mounts.
+    ensureNuxtScriptsCacheStorage(nuxt.options.nitro as any)
 
     // Publish enabled endpoints to client for component opt-in checks
     nuxt.options.runtimeConfig.public['nuxt-scripts'] = defu(
diff --git a/packages/script/src/runtime/server/utils/cache-config.ts b/packages/script/src/runtime/server/utils/cache-config.ts
index 372213b5..b068bd61 100644
--- a/packages/script/src/runtime/server/utils/cache-config.ts
+++ b/packages/script/src/runtime/server/utils/cache-config.ts
@@ -8,3 +8,17 @@ export const NUXT_SCRIPTS_CACHE_BASE = 'nuxt-scripts-cache'
 export const NUXT_SCRIPTS_CACHE_MAX_ENTRIES = 500
 export const NUXT_SCRIPTS_CACHE_MAX_SIZE = 32 * 1024 * 1024
 export const NUXT_SCRIPTS_CACHE_MAX_ENTRY_SIZE = 8 * 1024 * 1024
+
+interface NitroOptionsWithStorage {
+  storage?: Record<string, unknown>
+}
+
+export function ensureNuxtScriptsCacheStorage(nitroOptions: NitroOptionsWithStorage): void {
+  nitroOptions.storage ||= {}
+  nitroOptions.storage[NUXT_SCRIPTS_CACHE_BASE] ||= {
+    driver: 'lru-cache',
+    max: NUXT_SCRIPTS_CACHE_MAX_ENTRIES,
+    maxSize: NUXT_SCRIPTS_CACHE_MAX_SIZE,
+    maxEntrySize: NUXT_SCRIPTS_CACHE_MAX_ENTRY_SIZE,
+  }
+}
diff --git a/packages/script/src/runtime/utils/youtube-readiness.ts b/packages/script/src/runtime/utils/youtube-readiness.ts
index e1ed6259..bbd2a3e2 100644
--- a/packages/script/src/runtime/utils/youtube-readiness.ts
+++ b/packages/script/src/runtime/utils/youtube-readiness.ts
@@ -35,7 +35,7 @@ export function armYouTubeReadiness(state: YouTubeReadinessState) {
     onReady = () => {
       restoreReady()
       try {
-        previousReady?.()
+        previousReady?.call(target)
       }
       catch (error) {
         if (import.meta.dev)
diff --git a/packages/script/src/unhead-features.ts b/packages/script/src/unhead-features.ts
index 20836023..0ebc7140 100644
--- a/packages/script/src/unhead-features.ts
+++ b/packages/script/src/unhead-features.ts
@@ -1,5 +1,19 @@
+import { existsSync, readFileSync } from 'node:fs'
+
 const SOURCE_LESS_SCRIPT_LOADER_TYPE = /\bUseScriptLoaderInput\b/
 
 export function hasUnheadSourceLessScriptLoader(typesSource: string): boolean {
   return SOURCE_LESS_SCRIPT_LOADER_TYPE.test(typesSource)
 }
+
+export function hasUnheadSourceLessScriptLoaderFile(typesPath: string | null): boolean {
+  if (!typesPath || !existsSync(typesPath))
+    return false
+  try {
+    return hasUnheadSourceLessScriptLoader(readFileSync(typesPath, 'utf8'))
+  }
+  catch {
+    // An unreadable optional peer must retain the compatibility implementation.
+    return false
+  }
+}
diff --git a/test/unit/cached-upstream-lifecycle.test.ts b/test/unit/cached-upstream-lifecycle.test.ts
index 26101be7..15f427da 100644
--- a/test/unit/cached-upstream-lifecycle.test.ts
+++ b/test/unit/cached-upstream-lifecycle.test.ts
@@ -1,5 +1,9 @@
 import { beforeEach, describe, expect, it, vi } from 'vitest'
-import { NUXT_SCRIPTS_CACHE_BASE } from '../../packages/script/src/runtime/server/utils/cache-config'
+import {
+  ensureNuxtScriptsCacheStorage,
+  NUXT_SCRIPTS_CACHE_BASE,
+  NUXT_SCRIPTS_CACHE_MAX_ENTRIES,
+} from '../../packages/script/src/runtime/server/utils/cache-config'
 import { createCachedBinaryFetch, createCachedJsonFetch } from '../../packages/script/src/runtime/server/utils/cached-upstream'
 
 const { defineCachedFunction } = vi.hoisted(() => ({
@@ -13,6 +17,17 @@ describe('upstream cache storage ownership', () => {
     defineCachedFunction.mockClear()
   })
 
+  it('installs a bounded cache mount without registry server endpoints', () => {
+    const nitroOptions: { storage?: Record<string, unknown> } = {}
+
+    ensureNuxtScriptsCacheStorage(nitroOptions)
+
+    expect(nitroOptions.storage?.[NUXT_SCRIPTS_CACHE_BASE]).toEqual(expect.objectContaining({
+      driver: 'lru-cache',
+      max: NUXT_SCRIPTS_CACHE_MAX_ENTRIES,
+    }))
+  })
+
   it('puts binary proxy payloads in the bounded Nuxt Scripts cache mount', () => {
     createCachedBinaryFetch('binary-test', 60)
 
diff --git a/test/unit/unhead-features.test.ts b/test/unit/unhead-features.test.ts
index febd7f94..f7e0b588 100644
--- a/test/unit/unhead-features.test.ts
+++ b/test/unit/unhead-features.test.ts
@@ -1,9 +1,21 @@
+import { mkdirSync, rmSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
 import { describe, expect, it } from 'vitest'
-import { hasUnheadSourceLessScriptLoader } from '../../packages/script/src/unhead-features'
+import { hasUnheadSourceLessScriptLoader, hasUnheadSourceLessScriptLoaderFile } from '../../packages/script/src/unhead-features'
 
 describe('unhead feature detection', () => {
   it('detects the source-less loader type export', () => {
     expect(hasUnheadSourceLessScriptLoader('export interface UseScriptLoaderInput<T> {}')).toBe(true)
     expect(hasUnheadSourceLessScriptLoader('export interface UseScriptInput {}')).toBe(false)
   })
+
+  it('falls back when the advertised types path cannot be read', () => {
+    const directoryPath = join(tmpdir(), `nuxt-scripts-unhead-types-${Date.now()}`)
+    mkdirSync(directoryPath)
+
+    expect(hasUnheadSourceLessScriptLoaderFile(directoryPath)).toBe(false)
+
+    rmSync(directoryPath, { recursive: true })
+  })
 })
diff --git a/test/unit/youtube-player-lifecycle.test.ts b/test/unit/youtube-player-lifecycle.test.ts
index 856dd759..18acbd16 100644
--- a/test/unit/youtube-player-lifecycle.test.ts
+++ b/test/unit/youtube-player-lifecycle.test.ts
@@ -73,4 +73,19 @@ describe('youtube player lifecycle', () => {
 
     expect(window.onYouTubeIframeAPIReady).toBeUndefined()
   })
+
+  it('preserves the receiver of a previous readiness callback', () => {
+    const previousReady = vi.fn()
+    window.onYouTubeIframeAPIReady = previousReady
+    mocks.useRegistryScript.mockImplementation((_key: string, createOptions: () => any) => {
+      const options = createOptions()
+      options.clientInit?.()
+      return mocks.createHandle() as any
+    })
+
+    useScriptYouTubePlayer({})
+    window.onYouTubeIframeAPIReady?.()
+
+    expect(previousReady.mock.contexts[0]).toBe(window)
+  })
 })

From 4ddf50ec372476ec24ce38a7394844f3953e2e8e Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Tue, 4 Aug 2026 18:19:39 +1000
Subject: [PATCH 18/19] fix(script): preserve native SDK proxy returns

---
 .../script/src/runtime/npm-script-proxy.ts    | 56 +++++++++++++++++++
 packages/script/src/runtime/utils.ts          | 19 ++++++-
 pnpm-lock.yaml                                | 34 +++++------
 pnpm-workspace.yaml                           |  8 +--
 test/e2e/unhead-v3-compat.test.ts             |  6 +-
 test/fixtures/unhead-v3/app.vue               | 21 +++++--
 test/fixtures/unhead-v3/nuxt.config.ts        |  2 +-
 test/fixtures/unhead-v3/package.json          |  2 +-
 test/unit/npm-script-proxy.test.ts            | 28 ++++++++++
 test/unit/utils.test.ts                       |  5 +-
 10 files changed, 148 insertions(+), 33 deletions(-)
 create mode 100644 packages/script/src/runtime/npm-script-proxy.ts
 create mode 100644 test/unit/npm-script-proxy.test.ts

diff --git a/packages/script/src/runtime/npm-script-proxy.ts b/packages/script/src/runtime/npm-script-proxy.ts
new file mode 100644
index 00000000..859bbcea
--- /dev/null
+++ b/packages/script/src/runtime/npm-script-proxy.ts
@@ -0,0 +1,56 @@
+type ScriptApi = Record<string | symbol, any>
+
+function walk(root: ScriptApi, path: Array<string | symbol>) {
+  let owner: any
+  let value: any = root
+  for (const key of path) {
+    if (value == null)
+      return { owner: undefined, value: undefined }
+    owner = value
+    value = Reflect.get(value, key, value)
+  }
+  return { owner, value }
+}
+
+/**
+ * Keeps Unhead's recording proxy while an SDK loads, then forwards calls to
+ * the resolved SDK without discarding their return values.
+ */
+export function createNpmScriptProxy<T extends ScriptApi>(fallback: T, getApi: () => T | undefined): T {
+  function node(path: Array<string | symbol>, fallbackValue: any): any {
+    const children = new Map<string | symbol, any>()
+    return new Proxy(() => {}, {
+      get(_, property) {
+        const api = getApi()
+        let value: any
+        if (api) {
+          const current = walk(api, path).value
+          value = current == null ? undefined : Reflect.get(current, property, current)
+        }
+        else {
+          value = Reflect.get(fallbackValue, property, fallbackValue)
+        }
+
+        if (typeof value !== 'function')
+          return value
+
+        let child = children.get(property)
+        if (!child) {
+          child = node([...path, property], value)
+          children.set(property, child)
+        }
+        return child
+      },
+      apply(_, thisArg, args) {
+        const api = getApi()
+        if (api) {
+          const { owner, value } = walk(api, path)
+          return Reflect.apply(value, owner, args)
+        }
+        return Reflect.apply(fallbackValue, thisArg, args)
+      },
+    })
+  }
+
+  return node([], fallback) as T
+}
diff --git a/packages/script/src/runtime/utils.ts b/packages/script/src/runtime/utils.ts
index 4c5cacf6..d56ba674 100644
--- a/packages/script/src/runtime/utils.ts
+++ b/packages/script/src/runtime/utils.ts
@@ -16,6 +16,7 @@ import { createError, useRuntimeConfig } from 'nuxt/app'
 import { parseQuery, parseURL, withQuery } from 'ufo'
 import { parse } from 'valibot'
 import { useScript } from './composables/useScript'
+import { createNpmScriptProxy } from './npm-script-proxy'
 import { createNpmScriptStub } from './npm-script-stub'
 import { attachGcmConsent } from './registry/_gcm-consent'
 import { isUnheadSourceLessScriptLoaderEnabled } from './unhead-features'
@@ -25,6 +26,7 @@ const URL_MATCH_RE = /https?:\/\/[^/]+\/_nuxt\/(.+\.vue)(?:\?[^)]*)?:(\d+):(\d+)
 const URL_PAREN_MATCH_RE = /\(https?:\/\/[^/]+\/_nuxt\/(.+\.vue)(?:\?[^)]*)?:(\d+):(\d+)\)/
 const VUE_MATCH_RE = /([^/\s]+\.vue):(\d+):(\d+)/
 const CLEAN_CALLER_RE = /^\s*at\s+/
+const NPM_SCRIPT_PROXY_DECORATED = Symbol('nuxt-scripts:npm-proxy-decorated')
 
 export type MaybePromise<T> = Promise<T> | T
 
@@ -89,19 +91,32 @@ export function useRegistryScript<T extends Record<string | symbol, any>, O = Em
     if (isUnheadSourceLessScriptLoaderEnabled()) {
       const scriptOptions = { ...userOptions.scriptOptions, ...options.scriptOptions } as NuxtUseScriptOptions<T>
       const resolveApi = scriptOptions.use
+      const clientUse = resolveClientUse(resolveApi)
       delete scriptOptions.use
       if (typeof scriptOptions.trigger === 'undefined')
         scriptOptions.trigger = 'client'
 
-      return useScript<T>({
+      let api: T | undefined
+      const instance = useScript<T>({
         key: String(registryKey),
         async loader({ signal }: { signal: AbortSignal }) {
           const initialized = await options.clientInit?.({ signal })
           if (signal.aborted)
             throw signal.reason || new Error(`Loading ${String(registryKey)} was aborted`)
-          return (resolveApi?.() || initialized || {}) as T
+          api = await Promise.resolve(api || resolveApi?.() || initialized || {}) as T
+          return api
         },
       } as any, scriptOptions) as UseScriptContext<UseFunctionType<NuxtUseScriptOptions<T>, T>>
+
+      const sharedInstance = ((instance as any).script || instance) as UseScriptContext<T> & {
+        [NPM_SCRIPT_PROXY_DECORATED]?: boolean
+      }
+      if (!sharedInstance[NPM_SCRIPT_PROXY_DECORATED]) {
+        api = clientUse?.() as T | undefined
+        sharedInstance.proxy = createNpmScriptProxy(sharedInstance.proxy, () => api)
+        Object.defineProperty(sharedInstance, NPM_SCRIPT_PROXY_DECORATED, { value: true })
+      }
+      return instance
     }
 
     return createNpmScriptStub<T>({
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 13b93774..ce6f8542 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -180,7 +180,7 @@ catalogs:
 
 overrides:
   '@nuxt/scripts': workspace:*
-  unhead-v3-fixture>@unhead/vue: 3.3.0
+  unhead-v3-fixture>@unhead/vue: 3.3.1
   vitest-environment-nuxt: 2.0.0
 
 importers:
@@ -475,8 +475,8 @@ importers:
         specifier: workspace:*
         version: link:../../../packages/script
       '@unhead/vue':
-        specifier: 3.3.0
-        version: 3.3.0(@oxc-project/types@0.142.0)(@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(esbuild@0.28.1)(lightningcss@1.32.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
+        specifier: 3.3.1
+        version: 3.3.1(@oxc-project/types@0.142.0)(@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(esbuild@0.28.1)(lightningcss@1.32.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))
       nuxt:
         specifier: 'catalog:'
         version: 4.5.1(@babel/plugin-syntax-jsx@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@babel/plugin-syntax-typescript@7.29.7(@babel/core@7.29.7(supports-color@10.2.2)))(@oxc-project/types@0.142.0)(@parcel/watcher@2.5.6)(@types/node@26.1.2)(@vue/compiler-sfc@3.5.40)(cac@7.0.0)(db0@0.3.4)(esbuild@0.28.1)(eslint@10.8.0(jiti@2.7.0)(supports-color@10.2.2))(ioredis@5.11.1(supports-color@10.2.2))(lightningcss@1.32.0)(magicast@0.5.3)(optionator@0.9.4)(oxc-parser@0.142.0)(rollup-plugin-visualizer@7.0.1(rolldown@1.2.0)(rollup@4.62.4))(rollup@4.62.4)(srvx@0.12.5)(supports-color@10.2.2)(terser@5.48.0)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue-tsc@3.3.9(typescript@6.0.3))(yaml@2.9.0)
@@ -3698,16 +3698,16 @@ packages:
       webpack:
         optional: true
 
-  '@unhead/bundler@3.3.0':
-    resolution: {integrity: sha512-H5Zvq5PjT6/ojRROs2PqE4MOrvwuTcMfYUQTx9HUdmS3uqfqK9pKZEkZTLC/8WUVWyiyPv6NW3+CK+3w0IUaww==}
+  '@unhead/bundler@3.3.1':
+    resolution: {integrity: sha512-F9gEgqpUKqHFzOv+7Pgm3TbmXhUdLX+WjZiPAK/huLDzblzZmvAUE9vRDymWaOST7jqGT/tPKkwl2kqbgb3nPw==}
     peerDependencies:
-      '@unhead/cli': ^3.3.0
+      '@unhead/cli': ^3.3.1
       '@vitejs/devtools-kit': ^0.4.1
       esbuild: '>=0.17.0'
       lightningcss: '>=1.20.0'
       oxc-parser: '>=0.98.0'
       rolldown: '>=1.0.0'
-      unhead: ^3.3.0
+      unhead: ^3.3.1
       vite: '>=6.4.2'
       webpack: '>=5.0.0'
     peerDependenciesMeta:
@@ -3757,8 +3757,8 @@ packages:
       webpack:
         optional: true
 
-  '@unhead/vue@3.3.0':
-    resolution: {integrity: sha512-VUCYDCAIt7+izwxVqkHdZ4vP/gsrNYCUZ3Jp5/k8oDPAqbv/gu2p40NrQbM7OXNrUlHCCvJ0qZE+0nXrVtHTqg==}
+  '@unhead/vue@3.3.1':
+    resolution: {integrity: sha512-iS+eiE1NehbV/eF7wzR7UUuUVTv8fIphFOCekQvEMuPqfKPCB8f3wf7sgPgUngYX6mdgM6PmkGmaOQgTBxqwbw==}
     peerDependencies:
       vite: '>=6.4.2'
       vue: '>=3.5.18'
@@ -7434,8 +7434,8 @@ packages:
       vite:
         optional: true
 
-  unhead@3.3.0:
-    resolution: {integrity: sha512-cMqydgLO/qSJBshSM8nVFpihwjefJ5X+G3xhw5QwyPtkcS4+G1c3WFJ+UP9QEYor/2NfZ5hzGXl8iUMpsRxXkA==}
+  unhead@3.3.1:
+    resolution: {integrity: sha512-eqHlbLyuvIXw898WopQmosTml4PdYW5ZhXDom/sf7ysAqQB9uvYrw2/dNvbrmkJTufSkmNmgGCjoQcvoT2mS/A==}
     peerDependencies:
       vite: '>=6.4.2'
     peerDependenciesMeta:
@@ -12068,11 +12068,11 @@ snapshots:
       - typescript
       - unloader
 
-  '@unhead/bundler@3.3.0(@oxc-project/types@0.142.0)(@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(esbuild@0.28.1)(lightningcss@1.32.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(unhead@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))':
+  '@unhead/bundler@3.3.1(@oxc-project/types@0.142.0)(@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(esbuild@0.28.1)(lightningcss@1.32.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(unhead@3.3.1(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))':
     dependencies:
       magic-string: 1.1.0
       oxc-walker: 1.1.1(@oxc-project/types@0.142.0)(oxc-parser@0.142.0)(rolldown@1.2.0)
-      unhead: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      unhead: 3.3.1(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
     optionalDependencies:
       '@vitejs/devtools-kit': 0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
@@ -12195,11 +12195,11 @@ snapshots:
       - typescript
       - unloader
 
-  '@unhead/vue@3.3.0(@oxc-project/types@0.142.0)(@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(esbuild@0.28.1)(lightningcss@1.32.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))':
+  '@unhead/vue@3.3.1(@oxc-project/types@0.142.0)(@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(esbuild@0.28.1)(lightningcss@1.32.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))(vue@3.5.40(typescript@6.0.3))':
     dependencies:
-      '@unhead/bundler': 3.3.0(@oxc-project/types@0.142.0)(@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(esbuild@0.28.1)(lightningcss@1.32.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(unhead@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      '@unhead/bundler': 3.3.1(@oxc-project/types@0.142.0)(@vitejs/devtools-kit@0.4.10(cac@7.0.0)(srvx@0.12.5)(typescript@6.0.3)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(esbuild@0.28.1)(lightningcss@1.32.0)(oxc-parser@0.142.0)(rolldown@1.2.0)(rollup@4.62.4)(unhead@3.3.1(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)))(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       hookable: 6.1.1
-      unhead: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
+      unhead: 3.3.1(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
       vue: 3.5.40(typescript@6.0.3)
     optionalDependencies:
@@ -17333,7 +17333,7 @@ snapshots:
       - unloader
       - webpack
 
-  unhead@3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)):
+  unhead@3.3.1(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0)):
     dependencies:
       hookable: 6.1.1
       unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.2.0)(rollup@4.62.4)(vite@8.1.5(@types/node@26.1.2)(esbuild@0.28.1)(jiti@2.7.0)(terser@5.48.0)(yaml@2.9.0))
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 17b2b63a..985709a1 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -29,9 +29,9 @@ minimumReleaseAgeExclude:
   - '@nuxt/schema@4.5.0'
   - '@nuxt/vite-builder@4.5.0'
   - nuxt@4.5.0
-  - '@unhead/bundler@3.3.0'
-  - '@unhead/vue@3.3.0'
-  - unhead@3.3.0
+  - '@unhead/bundler@3.3.1'
+  - '@unhead/vue@3.3.1'
+  - unhead@3.3.1
 shellEmulator: true
 
 trustPolicy: no-downgrade
@@ -45,7 +45,7 @@ packages:
 overrides:
   '@nuxt/scripts': 'workspace:*'
   # Force the latest supported Unhead only inside its regression fixture.
-  unhead-v3-fixture>@unhead/vue: 3.3.0
+  unhead-v3-fixture>@unhead/vue: 3.3.1
   vitest-environment-nuxt: 2.0.0
 catalog:
   '@antfu/eslint-config': ^9.2.0
diff --git a/test/e2e/unhead-v3-compat.test.ts b/test/e2e/unhead-v3-compat.test.ts
index a754311e..35055aac 100644
--- a/test/e2e/unhead-v3-compat.test.ts
+++ b/test/e2e/unhead-v3-compat.test.ts
@@ -49,11 +49,13 @@ describe.skipIf(skip)('unhead v3 compat', () => {
     expect(await page.textContent('#proxy-result')).toBe('passed')
   }, 15_000)
 
-  it('loads source-less registry SDKs through the compatible lifecycle', async () => {
+  it('loads and dedupes source-less registry SDKs through Unhead', async () => {
     const page = await createPage('/')
     onTestFinished(() => page.close())
-    await page.waitForFunction(() => document.querySelector('#module-result')?.textContent === 'passed')
+    await page.waitForFunction(() => document.querySelector('#module-result')?.textContent !== 'pending')
 
     expect(await page.textContent('#module-result')).toBe('passed')
+    expect(await page.textContent('#module-runtime')).toBe('native')
+    expect(await page.textContent('#module-init-count')).toBe('1')
   }, 15_000)
 })
diff --git a/test/fixtures/unhead-v3/app.vue b/test/fixtures/unhead-v3/app.vue
index b1062e10..78afe757 100644
--- a/test/fixtures/unhead-v3/app.vue
+++ b/test/fixtures/unhead-v3/app.vue
@@ -57,12 +57,17 @@ type FixtureModule = {
 }
 
 const moduleResult = ref('pending')
+const moduleRuntime = ref('pending')
+const moduleInitCount = ref(0)
 const moduleApi: FixtureModule = {
   ping: () => 'passed',
 }
-const moduleScript = useRegistryScript<FixtureModule>('fixture-module', () => ({
+const useFixtureModule = () => useRegistryScript<FixtureModule>('fixture-module', () => ({
   scriptMode: 'npm',
-  clientInit: async () => moduleApi,
+  clientInit: async () => {
+    moduleInitCount.value++
+    return moduleApi
+  },
   scriptOptions: {
     trigger: 'manual',
     use: () => moduleApi,
@@ -70,6 +75,8 @@ const moduleScript = useRegistryScript<FixtureModule>('fixture-module', () => ({
 }), {
   scriptOptions: { trigger: 'manual' },
 })
+const moduleScript = useFixtureModule()
+const duplicateModuleScript = useFixtureModule()
 
 onMounted(() => {
   retainedProxy.increment()
@@ -81,9 +88,13 @@ onMounted(() => {
     .catch((error: unknown) => {
       proxyResult.value = error instanceof Error ? error.message : String(error)
     })
-  moduleScript.load()
+  moduleRuntime.value = typeof moduleScript.remove === 'function' ? 'native' : 'fallback'
+  Promise.all([moduleScript.load(), duplicateModuleScript.load()])
     .then(() => {
-      moduleResult.value = moduleScript.proxy.ping()
+      const result = moduleScript.proxy.ping()
+      moduleResult.value = result === 'passed' && moduleInitCount.value === 1
+        ? 'passed'
+        : `failed:${result}:${moduleInitCount.value}`
     })
     .catch((error: unknown) => {
       moduleResult.value = error instanceof Error ? error.message : String(error)
@@ -96,5 +107,7 @@ onMounted(() => {
     <div id="probe-status">{{ status }}</div>
     <div id="proxy-result">{{ proxyResult }}</div>
     <div id="module-result">{{ moduleResult }}</div>
+    <div id="module-runtime">{{ moduleRuntime }}</div>
+    <div id="module-init-count">{{ moduleInitCount }}</div>
   </div>
 </template>
diff --git a/test/fixtures/unhead-v3/nuxt.config.ts b/test/fixtures/unhead-v3/nuxt.config.ts
index 4e28aa08..e5654b91 100644
--- a/test/fixtures/unhead-v3/nuxt.config.ts
+++ b/test/fixtures/unhead-v3/nuxt.config.ts
@@ -1,6 +1,6 @@
 import { defineNuxtConfig } from 'nuxt/config'
 
-// Regression fixture pinned to @unhead/vue@3.3.0 via the
+// Regression fixture pinned to @unhead/vue@3.3.1 via the
 // `unhead-v3-fixture>@unhead/vue` override in pnpm-workspace.yaml.
 // Module resolution picks v3 up through the fixture's own node_modules symlink.
 export default defineNuxtConfig({
diff --git a/test/fixtures/unhead-v3/package.json b/test/fixtures/unhead-v3/package.json
index 8e9e821d..1b9d7750 100644
--- a/test/fixtures/unhead-v3/package.json
+++ b/test/fixtures/unhead-v3/package.json
@@ -4,7 +4,7 @@
   "type": "module",
   "dependencies": {
     "@nuxt/scripts": "workspace:*",
-    "@unhead/vue": "3.3.0",
+    "@unhead/vue": "3.3.1",
     "nuxt": "catalog:"
   }
 }
diff --git a/test/unit/npm-script-proxy.test.ts b/test/unit/npm-script-proxy.test.ts
new file mode 100644
index 00000000..f25f34e8
--- /dev/null
+++ b/test/unit/npm-script-proxy.test.ts
@@ -0,0 +1,28 @@
+import { describe, expect, it, vi } from 'vitest'
+import { createNpmScriptProxy } from '../../packages/script/src/runtime/npm-script-proxy'
+
+describe('createNpmScriptProxy', () => {
+  it('preserves method return values and receivers after the SDK resolves', () => {
+    const queuedTrack = vi.fn()
+    const fallback = {
+      track: queuedTrack,
+    }
+    let api: { prefix: string, track: (value: string) => string } | undefined
+    const proxy = createNpmScriptProxy(fallback, () => api)
+    const retainedTrack = proxy.track
+
+    expect(retainedTrack('before')).toBeUndefined()
+    expect(queuedTrack).toHaveBeenCalledWith('before')
+
+    api = {
+      prefix: 'tracked',
+      track(value) {
+        return `${this.prefix}:${value}`
+      },
+    }
+
+    expect(proxy.track).toBe(retainedTrack)
+    expect(retainedTrack('after')).toBe('tracked:after')
+    expect(proxy.prefix).toBe('tracked')
+  })
+})
diff --git a/test/unit/utils.test.ts b/test/unit/utils.test.ts
index 8d295568..fe97bcb6 100644
--- a/test/unit/utils.test.ts
+++ b/test/unit/utils.test.ts
@@ -7,7 +7,7 @@ const runtimeConfig = vi.hoisted(() => ({
   },
 }))
 
-const useScriptMock = vi.hoisted(() => vi.fn((input, options) => ({ input, options })))
+const useScriptMock = vi.hoisted(() => vi.fn((input, options) => ({ input, options, proxy: {} })))
 const unheadFeatures = vi.hoisted(() => ({ sourceLessScriptLoader: false }))
 
 // Mock dependencies
@@ -74,7 +74,7 @@ describe('useRegistryScript scriptOptions', () => {
 
   it('delegates npm mode to an Unhead source-less loader when supported', async () => {
     unheadFeatures.sourceLessScriptLoader = true
-    const api = { track: vi.fn() }
+    const api = { track: vi.fn(() => 'tracked') }
     const clientInit = vi.fn(async () => api)
     const use = vi.fn(() => api)
     const result = useRegistryScript('posthog', () => ({
@@ -95,6 +95,7 @@ describe('useRegistryScript scriptOptions', () => {
 
     const signal = new AbortController().signal
     await expect(result.input.loader({ signal })).resolves.toBe(api)
+    expect(result.proxy.track()).toBe('tracked')
     expect(clientInit).toHaveBeenCalledWith({ signal })
     expect(use).toHaveBeenCalledOnce()
   })

From b7adbecdd03eaa87a034c83f922aae6c75cce94b Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Tue, 4 Aug 2026 18:19:40 +1000
Subject: [PATCH 19/19] fix(script): narrow MapLibre worker contract

---
 packages/script/src/runtime/maplibre-styles.ts | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/packages/script/src/runtime/maplibre-styles.ts b/packages/script/src/runtime/maplibre-styles.ts
index a61c437d..f18944e1 100644
--- a/packages/script/src/runtime/maplibre-styles.ts
+++ b/packages/script/src/runtime/maplibre-styles.ts
@@ -1,11 +1,9 @@
-import type * as MapLibre from 'maplibre-gl'
-
 export const MAPLIBRE_STYLESHEET_URL = 'https://unpkg.com/maplibre-gl@5.24.0/dist/maplibre-gl.css'
 export const MAPLIBRE_STYLESHEET_INTEGRITY = 'sha384-uTttxo/aOKbdE5RlD/SPzSDoDmNvGlUYPjONi2MN/b7c9HPSvW07OIuyP7uL6jxK'
 
 const MAPLIBRE_STYLE_ID = 'nuxt-scripts-maplibre-styles'
 
-export function configureMapLibreWorker(maplibre: typeof MapLibre | undefined, workerUrl?: string): void {
+export function configureMapLibreWorker(maplibre: { setWorkerUrl: (value: string) => void } | undefined, workerUrl?: string): void {
   if (maplibre && workerUrl)
     maplibre.setWorkerUrl(workerUrl)
 }