@clerk/electron

Fix OAuth sign-in staying blocked after a user abandons the browser tab. Starting a new OAuth sign-in now replaces the pending one instead of failing with Clerk: an OAuth flow is already pending. until the 3-minute callback timeout. If the user later finishes the abandoned browser tab, its callback is ignored and no longer completes the newer sign-in.

OAuth sign-in without the renderer option in createClerkBridge() now throws a Clerk error that asks for it. Previously it failed with Electron's "No handler registered" error.

Export the StorageOptions, RendererSchemeOptions, and SetupPasskeysMainReturn types so consumers can type their configuration without reaching through CreateClerkBridgeOptions['renderer'].

Keep the current client token available for the lifetime of the Electron app when secure persistence is unavailable or fails.

Fixed a race where an older in-flight token write could replace a newer token when multiple requests completed at the same time.

Keep Clerk's navigation inside the renderer. ClerkProvider now always supplies routerPush/routerReplace, so Clerk routes through your application's router when you provide one, and never navigates the window to an internal /CLERK-ROUTER/VIRTUAL/... path — which no custom protocol handler can serve, and which reloaded the renderer and dropped the user out of sign-in.

Applications that worked around this by passing no-op router functions, or by filtering CLERK-ROUTER/VIRTUAL out themselves, can remove those workarounds.

Stop passkey autofill from opening a passkey prompt as soon as the sign-in form renders. Autofill now runs as a real background request when the window can service one (an https origin matching your RP ID), and is not attempted at all when it would route to the OS passkey dialog. Signing in with the explicit "Use passkey" action is unchanged.

Forward OAuth deep-link callbacks to the primary Electron process on Windows and Linux, and bring the

signing-in window to the front when the callback arrives.

Delivering those callbacks requires Electron's single-instance lock, so createClerkBridge now acquires it on Windows and Linux whenever renderer is configured, and quits secondary processes after forwarding their arguments. Applications that previously ran side-by-side instances on those platforms will become single-instance. macOS is unaffected. Two new escape hatches: the returned bridge exposes isPrimaryInstance so the application can stop its own bootstrap in a secondary process, and manageSingleInstanceLock: false leaves the lock to applications that manage it themselves.