MantraGitHubDevin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>mantraCursor
d699bdd2c7 fix/ask skill endpoint (#1696)
- **chore: use glm-5.2:nitro for unauthenticated AI tiers; document CLI
exec & config sync**
- **(fix) Ask Skill endpoint to directly call the unified ai endpoint**

<!--

Make sure you've read the CONTRIBUTING.md guidelines:
https://github.com/hexclave/hexclave/blob/dev/CONTRIBUTING.md

-->

<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Unifies the public `/ask` endpoint and the MCP `ask_hexclave` tool
behind a shared `callHexclaveAskAi` helper with strict timeouts,
plain‑text replies, and centralized Sentry error handling. Fixes OpenAPI
nullability by emitting 3.1 JSON Schema types, and refreshes
docs/webhooks accordingly.

- **New Features**
- `packages/shared`: New `callHexclaveAskAi` with 45s timeout, safe
public errors, and diagnostics; used by `apps/skills` and `apps/mcp`.
- OpenAPI: Generator now outputs OpenAPI 3.1 with JSON Schema type
arrays for nullable fields; added tests and regenerated webhooks specs.

- **Bug Fixes**
- `apps/backend`: Keeps docs fetch timeouts active until bodies are
consumed; captures errors with `StatusError` and Sentry.
- `apps/skills`: `/ask` `HEAD` returns 200 without backend calls;
consistent CORS and sanitized error responses.

<sup>Written for commit 6af6030646.
Summary will update on new commits.</sup>

<a
href="https://cubic.dev/pr/hexclave/hexclave/pull/1696?utm_source=github"
target="_blank" rel="noopener noreferrer"
data-no-image-dialog="true"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"><source
media="(prefers-color-scheme: light)"
srcset="https://www.cubic.dev/buttons/review-in-cubic-light.svg"><img
alt="Review in cubic"
src="https://www.cubic.dev/buttons/review-in-cubic-dark.svg"></picture></a>

<!-- End of auto-generated description by cubic. -->

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Added the public `/ask` endpoint for submitting questions and optional
context.
* Added conversation continuation support and clearer empty-response
handling.
* Added consistent error responses for timeouts, upstream failures, and
malformed responses.
  * Added improved request monitoring and diagnostics.

* **Bug Fixes**
  * Improved timeout handling when documentation or AI responses stall.
* Updated guidance to prioritize the public `/ask` endpoint, with full
documentation as a fallback.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Co-authored-by: mantra <[email protected]>
Co-authored-by: Cursor <[email protected]>
2026-07-22 17:28:13 -07:00
2026-01-12 15:21:56 -08:00
2026-07-22 10:39:05 -07:00
2026-07-22 15:13:10 -07:00
2026-07-22 17:28:13 -07:00
2026-07-22 17:28:13 -07:00
2026-07-22 22:18:26 +00:00
2026-07-22 17:28:13 -07:00
2025-02-21 19:39:22 +01:00
2026-07-22 22:18:26 +00:00
2026-05-19 10:27:53 -07:00
2026-07-17 16:57:40 -07:00
2026-05-27 18:09:52 -07:00
2026-05-19 23:03:46 -07:00
2026-07-10 11:27:57 -07:00
2026-03-10 11:29:05 -07:00

Hexclave

Hexclave

The user infrastructure platform.

Hexclave handles everything around your users: authentication, teams, payments, emails, analytics, and much more. Start in minutes on the hosted cloud. Your data is always yours to export and self-host.

Website · Docs · Dashboard · Discord

License SDKs Deploy


Where Hexclave fits in the infrastructure stack

Get started

Setting up Hexclave is one prompt. Paste this into your coding agent of choice:

Read skill.hexclave.com and help me setup hexclave in this project

For AI agents

If you're an AI coding agent, use your web fetch tool or curl the skill documentation for up-to-date integration instructions:

curl -sSL "https://skill.hexclave.com?question=<your-question>&context=<your-context>"

What's included

Hexclave ships as a catalog of apps you switch on as your product needs them. Each one is built on the same user model, and new apps land regularly.

  Authentication

Authentication that just works with passkeys, OAuth, and CLI auth. Drop in one component and ship the whole flow; auth methods toggle from the dashboard with no code changes needed.

Authentication

  Teams

Build for teams, not just users, with workspaces, email invites, and roles that actually gate the work. The workspace switcher remembers selection, invites auto sign up new users, and permissions hold up under audit.

Teams

  RBAC

Permissions, sorted: roles that nest and one permission check that works the same on server or client. Define them in the dashboard, check them anywhere in your code.

RBAC

  API Keys

API keys without the footguns: leaked keys get auto-revoked, work for users and teams, and show the full secret only once. We never keep the plaintext after creation.

API Keys

  Payments

Payments without the plumbing for subscriptions, one-time charges, and usage metering with credits. Bill a person or a whole team with one model, no separate codepath.

Payments

  Emails

Email that delivers and tells you so, handling transactional and marketing sends from one API. Edit templates with an AI editor, theme once, and track every open and click.

Emails

  Analytics

Know your users with no data stack required, with live active user counts and session replays out of the box. Ask in plain English to build dashboards or write SQL to save queries, all with one flag enabled.

Analytics

  Webhooks

React to every user event in real time with signed, tamper-proof webhooks. Retries and backoff are handled for you; verify in five lines and manage endpoints from the dashboard.

Webhooks

  Data Vault

A safe for the secrets your users hand you, locked with your secret so we never see the plaintext. Store and retrieve tokens in two lines each, server-only by design.

Data Vault

  Launch Checklist

Run through the must-do checks before flipping to production: domain setup, callbacks locked, secrets rotated. The progress tracker keeps your team aligned so nothing critical slips through on launch day.

Launch Checklist

Contributing

Hexclave is open source, and contributions are welcome. Read CONTRIBUTING.md to get started, and say hello in Discord before picking up anything large. Found a security issue? Email [email protected].

❤ Contributors

Contributors
S
Description
开源的用户管理解决方案,自带前端组件和管理后台。
Readme
119 MiB
Languages
TypeScript 91.7%
MDX 4.3%
Swift 2.2%
JavaScript 1%
PLpgSQL 0.3%
Other 0.5%