chore(deps): update Bun 1.3, tRPC v11, React 19.2, Better Auth 1.4

[koistya]

Summary

Major dependency updates with breaking changes to tRPC client configuration and passkey authentication flow.

Runtime & Build

• Bun 1.2.21 → 1.3.3 (minimum requirement now >=1.3.0)
• TypeScript 5.9.2 → 5.9.3
• React/React-DOM 19.x → 19.2.1

tRPC v11 Migration

• Migrate to createTRPCOptionsProxy pattern (replaces createTRPCReact)
• Remove api.Provider wrapper (no longer needed in v11)
• Move auth error handling to global mutations.onError

Better Auth 1.4+ Passkey

• Import passkey from @better-auth/passkey (now separate package)
• Simplify WebAuthn flow—no email required for passkey sign-in
• Gate conditional UI behind authConfig.passkey.enableConditionalUI
• Add passkey audit fields: lastUsedAt, deviceName, platform

Database Schema

• Add indexes on all FK columns for query performance
• Add composite unique constraints (member, team_member, identity, invitation)
• Add invitation_status enum with lifecycle timestamps
• Add updatedAt to all tables for consistent audit trails
• Rename WRANGLER_HYPERDRIVE_* → CLOUDFLARE_HYPERDRIVE_*

Other Improvements

• WebSocket protocol: use ws-kit canonical imports, add Ping/Pong timestamps
• UI scripts: replace execa/globby with Bun native APIs (Bun.spawn, Bun.Glob)
• ESLint: extend TS parser to .tsx, fix React config

---

Breaking Changes

tRPC v11 Client

// Before (v10)
import { createTRPCReact } from "@trpc/react-query";
const api = createTRPCReact<AppRouter>();

<api.Provider client={trpcClient} queryClient={queryClient}>
  <App />
</api.Provider>

// After (v11)
import { createTRPCClient } from "@trpc/client";
import { createTRPCOptionsProxy } from "@trpc/tanstack-react-query";

const trpcClient = createTRPCClient<AppRouter>({ links });
const api = createTRPCOptionsProxy<AppRouter>({ client: trpcClient, queryClient });

<QueryClientProvider client={queryClient}>
  <App />  {/* No api.Provider needed */}
</QueryClientProvider>

Passkey Authentication

// Before (pre-1.4)
import { passkey } from "better-auth/plugins/passkey";
await auth.signIn.passkey({ email });  // Email required

// After (1.4+)
import { passkey } from "@better-auth/passkey";
await auth.signIn.passkey();  // WebAuthn handles user discovery

Environment Variables

# Before
WRANGLER_HYPERDRIVE_LOCAL_CONNECTION_STRING_API

# After
CLOUDFLARE_HYPERDRIVE_LOCAL_CONNECTION_STRING_API

---

Migration Guide

1. Update Bun to 1.3.0 or later
2. tRPC v11: Remove api.Provider wrapper, update client creation pattern
3. Better Auth: Install @better-auth/passkey, remove email from passkey sign-in
4. Environment: Rename WRANGLER_HYPERDRIVE_* to CLOUDFLARE_HYPERDRIVE_*
5. Database: Run migrations for new indexes and constraints

Ref #2108 #2114