mirror of
https://github.com/stack-auth/stack.git
synced 2026-06-19 21:00:40 +08:00
501ae9fe61
## What
Continues the **Stack Auth → Hexclave** rename for a set of safe,
internal-only surfaces. This intentionally avoids public-contract names.
### Changes
- **Examples** — renamed the user-facing config module
`stack.ts`/`stack.tsx` (and the `convex` / `lovable` `stack/`
directories) to `hexclave`, and updated every importer across
`.ts`/`.tsx`/`.jsx`. The public `app/handler/[...stack]/` route segment
is left unchanged.
- **apps/{dashboard,backend,internal-tool}** — renamed app-local
SDK-init symbols `stackClientApp → hexclaveClientApp` and
`getStackServerApp → getHexclaveServerApp`, and the dashboard
`StackCompanion` component → `HexclaveCompanion` (incl.
`useStackCompanion`, context types). The public
`StackClientApp`/`StackServerApp` SDK classes are **unchanged**.
- **packages/stack-shared** — added comments to the crypto / JWT / vault
`stack-*` literals documenting that they must **not** be renamed (key
derivation / JWKS / KMS-alias stability). The literals are
byte-identical.
### Deliberately excluded
- **`STACK_*` → `HEXCLAVE_*` env-var rename** — `HEXCLAVE_*` already
resolves via the dual-read layers (SDK env, dashboard `_inlineEnvVars`,
`getEnvVariable`). The remaining holdout is the docker post-build
sentinel path, which the codebase authors explicitly deferred and which
is tightly coupled to `entrypoint.sh` + untestable here. A blind rename
there risks silently breaking self-host/emulator bootstrap for ~zero
functional gain.
- **All public-contract names** — SDK class names, env vars, HTTP
headers (`x-stack-*`), and the `/handler` route convention.
## Verification
- `pnpm lint` — **29/29 passing**.
- `pnpm typecheck` — **28/29 passing**; the only failure is
`@hexclave/docs` (pre-existing missing fumadocs `.source` codegen,
untouched by this PR).
- Two rounds of adversarial multi-agent review; findings fixed:
string-literal collateral from the symbol sweep (CLI test fixtures + an
AI-prompt template) reverted, and a missed `.jsx` importer in
`examples/cjs-test` corrected.
## Notes
- Based on a `dev` snapshot from when the branch was cut (a couple
commits behind tip); the diff contains only the changes above.
<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Complete the internal “Stack” → “Hexclave” rename across examples,
app-local code, config tooling, and setup docs, and standardize env
output to HEXCLAVE_* with correct default API URL handling. Public SDK
classes, handler routes, and legacy env names keep working.
- **Refactors**
- Examples/config: `stack.*` files and `stack/` dirs →
`hexclave.*`/`hexclave/`; imports updated; keep `app/handler/[...stack]`
route.
- Apps: backend/dashboard/internal-tool now use `getHexclaveServerApp`
and `hexclaveClientApp`; dashboard `StackCompanion` →
`HexclaveCompanion`. Public `StackClientApp`/`StackServerApp` unchanged.
- Env/setup: Next.js and CLI generators write HEXCLAVE_* and omit API
URL when using https://api.stack-auth.com; CLI `doctor` and auth
resolution prefer HEXCLAVE_* (e.g. `HEXCLAVE_SECRET_SERVER_KEY`,
`HEXCLAVE_PROJECT_ID`) with `STACK_*` fallback.
- Config tooling: `stack-config-file` → `hexclave-config-file`, emitting
`HexclaveConfig`; imports updated across backend/dashboard/tooling.
- Shared/docs: added “do not rename” notes for crypto/JWT/vault
`stack-*` literals; regenerated setup prompt/docs to use
`hexclave.config.ts`, `hexclave dev`, and `src/hexclave/`.
- Tests: updated snapshots/assertions to expect `HexclaveConfig` and
HEXCLAVE_* env names.
- **Migration**
- No action required. SDK and CLI read both HEXCLAVE_* and STACK_*.
<sup>Written for commit
|
||
|---|---|---|
| .. | ||
| __snapshots__ | ||
| auth | ||
| contact-channels | ||
| emails | ||
| integrations | ||
| internal | ||
| payments | ||
| ai-query.test.ts | ||
| analytics-config.test.ts | ||
| analytics-events-batch.test.ts | ||
| analytics-events.test.ts | ||
| analytics-query.test.ts | ||
| api-keys.test.ts | ||
| auth-flows.test.ts | ||
| check-feature-support.test.ts | ||
| connected-accounts.test.ts | ||
| data-vault.test.ts | ||
| email-themes.test.ts | ||
| external-db-sync-advanced.test.ts | ||
| external-db-sync-basics.test.ts | ||
| external-db-sync-high-volume.test.ts | ||
| external-db-sync-race.test.ts | ||
| external-db-sync-utils.ts | ||
| index.test.ts | ||
| internal-metrics.test.ts | ||
| internal-user-activity.test.ts | ||
| notification-preferences.test.ts | ||
| oauth-providers.test.ts | ||
| project-permission-definitions.test.ts | ||
| project-permissions.test.ts | ||
| projects.test.ts | ||
| render-email.test.ts | ||
| restricted-users.test.ts | ||
| risk-scores.test.ts | ||
| send-email.test.ts | ||
| session-replays.test.ts | ||
| stripe-webhooks.test.ts | ||
| support.test.ts | ||
| team-invitations.test.ts | ||
| team-member-profiles.test.ts | ||
| team-memberships.test.ts | ||
| team-permission-definitions.test.ts | ||
| team-permissions.test.ts | ||
| teams.test.ts | ||
| token-refresh-events.test.ts | ||
| unsubscribe-link.test.ts | ||
| users-primary-email.test.ts | ||
| users.test.ts | ||
