github-actions[bot]
47b9a3a431
chore: update package versions
2026-06-15 22:30:42 +00:00
github-actions[bot]
e07c509f81
chore: update package versions
2026-06-15 19:57:58 +00:00
Armaan Jain
3c89bb8c19
Hosted components redesigned ( #1573 )
...
## Summary
Redesigns the hosted components app (`apps/hosted-components`) with a
new Tailwind-based UI: rebuilt auth pages (sign-in, sign-up, magic link,
forgot/reset password, MFA, email verification, team invitation, CLI
auth confirm) and a full hosted Account Settings suite (profile, emails
& auth, notifications, active sessions, API keys, payments, teams),
with dark mode support.
Also fixes found along the way: form error clearing in
forgot-password/password-reset, `runAsynchronouslyWithAlert` for the
notifications switch, a `CopyButton` DOM prop leak, a bogus
mobile-session icon check, and imports the app stylesheet in the root
route so the app's Tailwind styles actually apply.
## Before / after screenshots
Captured on the local dev setup (`internal` project). Onboarding is not
shown since it redirects without standalone UI in this setup.
<details>
<summary><b>Sign in</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>Sign up</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>Forgot password</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>Password reset</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>Email verification</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>MFA</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>Error</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>Team invitation</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>CLI auth confirm</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>Account settings — Profile</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>Account settings — Notifications</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>Account settings — Active sessions</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>Account settings — API keys</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>Account settings — Payments</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
<details>
<summary><b>Account settings — Emails & auth</b></summary>
| | Before | After |
|---|---|---|
| Light | 
| 
|
| Dark | 
| 
|
</details>
Link to Devin session:
https://app.devin.ai/sessions/1d2380aa55694f2fb12ed96e200a32ad
Requested by: @Developing-Gamer
---------
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: armaan <armaan@stack-auth.com>
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-06-15 04:25:33 +05:30
github-actions[bot]
7063aa2df7
chore: update package versions
2026-06-13 01:26:27 +00:00
github-actions[bot]
6de253633f
chore: update package versions
2026-06-13 00:25:03 +00:00
github-actions[bot]
5eedb484e1
chore: update package versions
2026-06-12 21:09:46 +00:00
github-actions[bot]
1999ad8be3
chore: update package versions
2026-06-11 17:19:24 +00:00
github-actions[bot]
3132de1cae
chore: update package versions
2026-06-10 18:10:23 +00:00
github-actions[bot]
96273a9d65
chore: update package versions
2026-06-08 18:18:54 +00:00
github-actions[bot]
4fdd2b3831
chore: update package versions
2026-06-08 17:36:50 +00:00
github-actions[bot]
468a221379
chore: update package versions
2026-06-06 00:07:24 +00:00
github-actions[bot]
461b9acd68
chore: update package versions
2026-06-05 23:54:49 +00:00
github-actions[bot]
5cb50721bd
chore: update package versions
2026-06-05 00:16:17 +00:00
github-actions[bot]
760cc4a826
chore: update package versions
2026-06-04 00:19:36 +00:00
github-actions[bot]
a21ba6b2f5
chore: update package versions
2026-06-03 18:09:27 +00:00
github-actions[bot]
fc7174d110
chore: update package versions
2026-06-03 01:10:42 +00:00
Konstantin Wohlwend
f9d081da09
Upgrade pnpm to v11.5.0
2026-06-01 15:33:25 -07:00
github-actions[bot]
64a38d0758
chore: update package versions
2026-06-01 21:41:58 +00:00
Konstantin Wohlwend
3961a9703e
Bump package versions
2026-06-01 14:22:56 -07:00
BilalG1
609579abab
feat(hexclave): PR 3 — native @hexclave/* source rename + delete dual-publish wiring ( #1482 )
all-good: Did all the other checks pass? / all-good (push) Has been cancelled
Ensure Prisma migrations are in sync with the schema / check_prisma_migrations (22.x) (push) Has been cancelled
DB migration compat / Check if migrations changed (push) Has been cancelled
Docker Server Build and Push / Docker Build and Push Server (push) Has been cancelled
Docker Server Build and Run / docker (push) Has been cancelled
Runs E2E API Tests (Local Emulator) / E2E Tests (Local Emulator, Node ${{ matrix.node-version }}) (22.x) (push) Has been cancelled
Runs E2E API Tests / E2E Tests (Node ${{ matrix.node-version }}, Freestyle ${{ matrix.freestyle-mode }}) (mock, 22.x) (push) Has been cancelled
Runs E2E API Tests / E2E Tests (Node ${{ matrix.node-version }}, Freestyle ${{ matrix.freestyle-mode }}) (prod, 22.x) (push) Has been cancelled
Runs E2E API Tests with custom port prefix / build (22.x) (push) Has been cancelled
Runs E2E Fallback Tests / E2E Fallback Tests (Node ${{ matrix.node-version }}) (22.x) (push) Has been cancelled
Lint & build / lint_and_build (24) (push) Has been cancelled
TOC Generator / TOC Generator (push) Has been cancelled
DB migration compat / Back-compat — Current branch migrations with ${{ needs.check-migrations-changed.outputs.base_branch }} branch code (push) Has been cancelled
DB migration compat / Forward-compat — Current branch code with ${{ needs.check-migrations-changed.outputs.base_branch }} branch migrations (push) Has been cancelled
DB migration compat / No migration changes (skipped) (push) Has been cancelled
2026-05-29 15:21:59 -07:00
github-actions[bot]
6a01c1bcc7
chore: update package versions
2026-05-26 22:26:55 +00:00
github-actions[bot]
18df895842
chore: update package versions
2026-05-26 21:59:38 +00:00
github-actions[bot]
5f3dc6d9ee
chore: update package versions
2026-05-26 20:37:35 +00:00
github-actions[bot]
ad197de7fe
chore: update package versions
2026-05-26 20:28:07 +00:00
github-actions[bot]
bef9452c95
chore: update package versions
2026-05-26 03:44:50 +00:00
github-actions[bot]
ed54832671
chore: update package versions
2026-05-26 00:59:48 +00:00
BilalG1
f7e389809e
feat(hexclave): PR 1 — wire compatibility layer (invisible) ( #1475 )
...
all-good: Did all the other checks pass? / all-good (push) Has been cancelled
Ensure Prisma migrations are in sync with the schema / check_prisma_migrations (22.x) (push) Has been cancelled
DB migration compat / Check if migrations changed (push) Has been cancelled
Docker Server Build and Push / Docker Build and Push Server (push) Has been cancelled
Docker Server Build and Run / docker (push) Has been cancelled
Runs E2E API Tests (Local Emulator) / E2E Tests (Local Emulator, Node ${{ matrix.node-version }}) (22.x) (push) Has been cancelled
Runs E2E API Tests / E2E Tests (Node ${{ matrix.node-version }}, Freestyle ${{ matrix.freestyle-mode }}) (mock, 22.x) (push) Has been cancelled
Runs E2E API Tests / E2E Tests (Node ${{ matrix.node-version }}, Freestyle ${{ matrix.freestyle-mode }}) (prod, 22.x) (push) Has been cancelled
Runs E2E API Tests with custom port prefix / build (22.x) (push) Has been cancelled
Runs E2E Fallback Tests / E2E Fallback Tests (Node ${{ matrix.node-version }}) (22.x) (push) Has been cancelled
Lint & build / lint_and_build (24) (push) Has been cancelled
TOC Generator / TOC Generator (push) Has been cancelled
DB migration compat / Back-compat — Current branch migrations with ${{ needs.check-migrations-changed.outputs.base_branch }} branch code (push) Has been cancelled
DB migration compat / Forward-compat — Current branch code with ${{ needs.check-migrations-changed.outputs.base_branch }} branch migrations (push) Has been cancelled
DB migration compat / No migration changes (skipped) (push) Has been cancelled
## Summary
**Stacked on #1468** (`docs/hexclave-rename-plan` — the plan doc). Diff
vs that base = the actual PR 1 code.
This is **PR 1 of the Hexclave rebrand: the invisible compatibility
layer**. Everything is additive. Old SDKs, old wire identifiers, and old
env var names keep working unchanged. The backend dual-accepts and
dual-emits; new SDK code emits `x-hexclave-*` headers and the
`hexclave_` Bearer prefix; cookies dual-write; env vars dual-read across
every category. **No user-visible rebranding lands here** — that's PR 2.
See [`RENAME-TO-HEXCLAVE.md`](./RENAME-TO-HEXCLAVE.md) → *"PR 1
implementation guide"* for the full per-work-area spec, file pointers,
and chosen approach.
## What's implemented (all 14 PR-1 work-areas)
- **SDK export aliases** — `Hexclave*` aliases for the user-facing
`Stack*` exports added in `packages/template`; codegen propagates them
to `@stackframe/{js,stack,react,tanstack-start}`. React-only aliases
correctly excluded from `@stackframe/js`. (`e60550a2`)
- **JWT issuer dual-accept** — `decodeAccessToken` accepts both
`api.stack-auth.com` and `api.hexclave.com` issuers. Signing unchanged.
(`fc781def`)
- **Request-header dual-accept** — backend + dashboard proxies normalize
`x-hexclave-*` → `x-stack-*` at the existing empty proxy hook (so
`smart-request.tsx` and every route schema keep working unchanged); CORS
allowlists extended via a derive-once helper. (`2a056eac`)
- **MCP `ask_hexclave`** — registered alongside `ask_stack_auth` via a
shared helper; `ask_stack_auth` behavior byte-identical. (`30ffd604`)
- **Dev-tool** — DOM ids + header emit switched.
`window.HexclaveDevTool` exposed alongside `window.StackDevTool`.
(`32131ea7`)
- **The big consolidated commit** (`7fed864a`):
- **Env vars** — central `getEnvVariable` prefix-transform (HEXCLAVE
first, STACK fallback); dashboard + template client env files dual-read;
`turbo.json` globalEnv; `NEXT_PUBLIC_STACK_PORT_PREFIX` renamed outright
across ~82 files including docker.
- **Cookies** — dual-write/dual-read auth (`stack-access`/`-refresh-*`
and custom-domain variants), OAuth-state
(`stack-oauth-{inner,outer}-*`), and low-risk cookies (`stack-is-https`,
`stack-last-seen-changelog-version`). Bypass sites patched (backend
OAuth callback, dashboard remote-dev auth route, impersonation snippets,
snapshot serializer).
- **Bearer prefix** — SDK token parser accepts both `stackauth_` and
`hexclave_`; emits `hexclave_`. Discovery correction: this is purely
SDK-internal — the backend never parses it.
- **Response headers** — backend dual-emits
`x-hexclave-{request-id,actual-status,known-error}`; SDKs dual-read (new
first, stack fallback).
- **SDK request-header emit switch** —
`client/server/admin-interface.ts` + dashboard `api-headers.ts` +
`internal-project-headers.ts` + `feedback-form.tsx` switched to
`x-hexclave-*`. Plus `stack_response_mode` query param.
- **Storage keys** — dev-tool / cli-auth / oauth-button / docs keys
renamed (straight); `stack:session-replay:v1` dual-read so in-progress
recordings survive SDK upgrades; `stack_mfa_attempt_code` dual-read.
- **Query params** — cross-domain params dual-emit/dual-accept via
shared helpers; backend `oauth/authorize` accepts
`hexclave_response_mode` and `stack_response_mode`; `stack-init-id`
renamed.
- **`Symbol.for`** — app-internals symbol gets a parallel
`Symbol.for("Hexclave--app-internals")` getter on each attach site (no
read-site churn — old symbol still attached). 3 file-private symbols
renamed outright.
- **Config discovery** — prefer `hexclave.config.ts`, fall back to
`stack.config.ts` at every discovery site (CLI / dashboard / backend /
local-emulator); `init` writes the new filename; CLI credentials path
migrates.
- **Internal renames** — `StackAssertionError`,
`StackClient/Server/AdminInterface` renamed outright (no alias, per the
"internal-only → rename" rule). ~264 files touched.
- **Review-pass fixes** (`21217fbe`) — three real bugs found by parallel
review agents and fixed:
- `snapshot-serializer.ts` was interpolating the whole
`keyedCookieNamePrefixes` array (`${arr}`) — adding a second prefix
would have corrupted **every** OAuth-cookie snapshot, not just new ones.
- **Docker port-prefix producer/consumer mismatch** —
`entrypoint.sh`/`run-emulator.sh`/cloud-init `user-data` were still
producing `NEXT_PUBLIC_STACK_PORT_PREFIX` while the dashboard sentinel +
consumers had been renamed; silent self-host regression (custom port
prefix would be ignored).
- **Missing `hexclave-oauth-inner-*` dual-write** in the OAuth authorize
route — callback's fallback masked it but the dual-write was specified
by the plan.
- Plus: `mcp.test.ts` tool-list assertions updated to include
`ask_hexclave`; two dashboard header-emit sites switched to
`x-hexclave-*` for consistency.
- **E2E snapshot serializer follow-up** (`4b16cc5d`) —
`x-hexclave-request-id` added to the hidden-headers list (mirroring
`x-stack-request-id` treatment), and 2 sample inline snapshots
regenerated in `projects.test.ts` to include the new dual-emitted
headers.
## Verification
- **`pnpm typecheck`** — clean (the fresh-worktree `@/.source` / Prisma
codegen gap in `stack-docs` is pre-existing and unrelated).
- **`pnpm lint`** — 29/29 packages green.
- **`pnpm exec turbo run build --filter=./packages/*`** — 13/13 packages
build (including `@stackframe/stack-cli` once the dashboard standalone
is present).
- **Live E2E** against a running backend on `cl/hexclave-pr1`:
- `pnpm test run
apps/e2e/tests/backend/endpoints/api/v1/internal/mcp.test.ts` — **6/6
pass** (verifies the new `ask_hexclave` tool — the hand-written inline
snapshot matched actual MCP server output).
- `pnpm test run
apps/e2e/tests/backend/endpoints/api/v1/internal/projects.test.ts` —
**11/11 pass** (verifies wire dual-accept + dual-emit end-to-end; the
snapshot serializer fix was found and applied during this check).
A four-agent parallel **review pass** also audited the full diff for
logic/runtime bugs across the work-areas (wire headers + JWT, cookies +
bearer + symbols, env vars, query params + config + MCP + aliases). All
in-slice review verdicts were ✓ except the three bugs listed above,
which are now fixed.
## Known follow-ups (out of scope for this PR)
- **E2E snapshots across the rest of the suite** — backend now
dual-emits `x-hexclave-{known-error,actual-status}` alongside
`x-stack-*`, which legitimately appears in inline snapshots throughout
`apps/e2e`. Two were regenerated here as a sample; the rest should regen
with `vitest -u` in CI.
- **Docker shell env vars beyond `PORT_PREFIX`** — `entrypoint.sh` still
reads `STACK_*` env vars directly (the JS-side `getEnvVariable`
transform doesn't help the shell). JS consumers dual-read so it works in
practice; full shell-level dual-read is a deeper self-host follow-up.
- **`@stackframe/stack-cli` build ordering** — pre-existing; needs
`build:rde-standalone` first. Not affected by this PR.
## Test plan
- [ ] CI runs full e2e suite (with `vitest -u` to absorb dual-emit
snapshot deltas, then committed back)
- [ ] Spot-check: an old SDK build (emitting only `x-stack-*`) still
authenticates against the new backend
- [ ] Spot-check: a new SDK (emitting `x-hexclave-*` / `Bearer
hexclave_*`) still authenticates against an old backend during deploy
ordering
- [ ] Manual: `npx @stackframe/stack-cli@latest init` (new onboarding
entrypoint) generates `hexclave.config.ts`
- [ ] Manual: existing `stack.config.ts`-only project still resolves (no
migration required)
---------
Co-authored-by: bilal <bilal@stack-auth.com>
2026-05-23 17:24:55 -07:00
github-actions[bot]
957a33a651
chore: update package versions
2026-05-23 18:13:12 +00:00
github-actions[bot]
6a0ded1340
chore: update package versions
2026-05-23 16:45:36 +00:00
github-actions[bot]
01948e2313
chore: update package versions
2026-05-23 03:30:16 +00:00
github-actions[bot]
62aa8616d5
chore: update package versions
2026-05-23 03:25:52 +00:00
github-actions[bot]
70999df64e
chore: update package versions
2026-05-23 01:02:03 +00:00
github-actions[bot]
9355c8665c
chore: update package versions
2026-05-22 23:02:49 +00:00
github-actions[bot]
cd29811456
chore: update package versions
2026-05-22 22:58:20 +00:00
github-actions[bot]
0c6e135c30
chore: update package versions
all-good: Did all the other checks pass? / all-good (push) Has been cancelled
Ensure Prisma migrations are in sync with the schema / check_prisma_migrations (22.x) (push) Has been cancelled
DB migration compat / Check if migrations changed (push) Has been cancelled
Docker Server Build and Push / Docker Build and Push Server (push) Has been cancelled
Docker Server Build and Run / docker (push) Has been cancelled
Runs E2E API Tests (Local Emulator) / E2E Tests (Local Emulator, Node ${{ matrix.node-version }}) (22.x) (push) Has been cancelled
Runs E2E API Tests / E2E Tests (Node ${{ matrix.node-version }}, Freestyle ${{ matrix.freestyle-mode }}) (mock, 22.x) (push) Has been cancelled
Runs E2E API Tests / E2E Tests (Node ${{ matrix.node-version }}, Freestyle ${{ matrix.freestyle-mode }}) (prod, 22.x) (push) Has been cancelled
Runs E2E API Tests with custom port prefix / build (22.x) (push) Has been cancelled
Runs E2E Fallback Tests / E2E Fallback Tests (Node ${{ matrix.node-version }}) (22.x) (push) Has been cancelled
Lint & build / lint_and_build (24) (push) Has been cancelled
TOC Generator / TOC Generator (push) Has been cancelled
DB migration compat / Back-compat — Current branch migrations with ${{ needs.check-migrations-changed.outputs.base_branch }} branch code (push) Has been cancelled
DB migration compat / Forward-compat — Current branch code with ${{ needs.check-migrations-changed.outputs.base_branch }} branch migrations (push) Has been cancelled
DB migration compat / No migration changes (skipped) (push) Has been cancelled
2026-05-22 01:35:39 +00:00
github-actions[bot]
d12968eb3d
chore: update package versions
2026-05-22 00:46:34 +00:00
github-actions[bot]
03e7b61308
chore: update package versions
2026-05-21 23:29:36 +00:00
Konstantin Wohlwend
bf8d0ece28
chore: update package versions
2026-05-21 16:23:12 -07:00
Konstantin Wohlwend
4ff24dea9b
chore: update package versions
2026-05-21 14:54:23 -07:00
Konstantin Wohlwend
90421431ee
chore: update package versions
2026-05-20 11:58:44 -07:00
Konstantin Wohlwend
48acb8c640
chore: update package versions
2026-05-19 16:22:10 -07:00
Konstantin Wohlwend
80a26ca15d
chore: update package versions
2026-05-11 10:10:47 -07:00
Konstantin Wohlwend
440c18c894
chore: update package versions
2026-05-06 11:43:03 -07:00
Konstantin Wohlwend
0ab2654051
chore: update package versions
2026-05-04 15:33:33 -07:00
Konstantin Wohlwend
3ea8052d35
chore: update package versions
2026-04-20 19:06:56 -07:00
Konstantin Wohlwend
91fbf63f7f
chore: update package versions
2026-04-18 14:20:39 -07:00
Konstantin Wohlwend
b68710e98e
chore: update package versions
2026-04-14 18:06:36 -07:00
Konstantin Wohlwend
f78b60bba2
chore: update package versions
all-good: Did all the other checks pass? / all-good (push) Has been cancelled
Ensure Prisma migrations are in sync with the schema / check_prisma_migrations (22.x) (push) Has been cancelled
Docker Server Build and Push / Docker Build and Push Server (push) Has been cancelled
Docker Server Build and Run / docker (push) Has been cancelled
Runs E2E API Tests (Local Emulator) / E2E Tests (Local Emulator, Node ${{ matrix.node-version }}) (22.x) (push) Has been cancelled
Runs E2E API Tests / E2E Tests (Node ${{ matrix.node-version }}, Freestyle ${{ matrix.freestyle-mode }}) (mock, 22.x) (push) Has been cancelled
Runs E2E API Tests / E2E Tests (Node ${{ matrix.node-version }}, Freestyle ${{ matrix.freestyle-mode }}) (prod, 22.x) (push) Has been cancelled
Runs E2E API Tests with custom port prefix / build (22.x) (push) Has been cancelled
Runs E2E Fallback Tests / E2E Fallback Tests (Node ${{ matrix.node-version }}) (22.x) (push) Has been cancelled
Lint & build / lint_and_build (24) (push) Has been cancelled
Mirror main branch to main-mirror-for-wdb / lint_and_build (push) Has been cancelled
Publish npm packages / publish (push) Has been cancelled
Publish Swift SDK to prerelease repo / publish (push) Has been cancelled
Sync Main to Dev / sync-commits (push) Has been cancelled
TOC Generator / TOC Generator (push) Has been cancelled
2026-04-13 19:29:35 -07:00
Konstantin Wohlwend
7fb660649d
chore: update package versions
2026-04-13 11:31:28 -07:00
Konstantin Wohlwend
27cd8bf56b
chore: update package versions
2026-04-09 13:36:23 -07:00
