stack/apps/backend/src/lib
BilalG1 b8fc04bdbd
feat: link Stack Auth projects to GitHub and push config from the dashboard (#1450)
End-to-end flow for managing Stack Auth config via GitHub: link a repo
during onboarding, edit settings in the dashboard, and have the change
committed to your repo + synced back via a GitHub Actions workflow.


![demo](https://gist.githubusercontent.com/BilalG1/29d1188fc581e87d1311baec6e2ae770/raw/demo-2x.gif)

## What this adds

- **CLI** — `stack config push --source github --source-repo
--source-path --source-workflow-path`. Records the source on the config
row so the dashboard knows where the file lives. Reads `GITHUB_SHA` /
`GITHUB_REF_NAME` for commit + branch.
- **Onboarding "Link existing project"** — searchable repo/branch
comboboxes, auto-detects candidate `stack.config.{ts,js}` paths, writes
`STACK_AUTH_PROJECT_ID` + `STACK_AUTH_SECRET_SERVER_KEY` secrets, and
commits a generated workflow YAML that re-runs `stack config push` on
every change to the config file.
- **Dashboard "Push to GitHub" dialog** — replaces the prior TODO
buttons. Pre-flights `repo`+`workflow` scopes on the user's GitHub
connection; if missing, the button flips to "Reconnect with GitHub". On
push, commits the dashboard's edit straight to the linked repo/branch
via the Contents API (with `cache: "no-store"` to dodge GitHub's 60s GET
cache so consecutive pushes don't 409). Suspense boundary scoped to the
dialog body so opening it doesn't blank the dashboard.
- **Project settings** — surface the linked workflow file as a clickable
GitHub link when the source carries `workflow_path`.

## Test plan

- `pnpm lint` (29/29) ✓
- `pnpm typecheck` (29/29) ✓
- `pnpm --filter @stackframe/stack-cli test` (111/111) ✓
- Dashboard vitest on the three relevant files
(`link-existing-onboarding-workflow`, `github-api`,
`github-config-push`) — 37/37 ✓
- Live end-to-end: `BilalG1/lex-lookup` linked to a local dev project;
passkey toggled, push committed `0bb958bd`
([commit](0bb958bda3)).

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
  * Persist workflow file paths for GitHub-backed config sync
* Dashboard “Push” flow to commit config updates with trimmed/default
commit messages
* CLI options to declare GitHub source (repo/path/workflow) and persist
selectable package runner for manual pushes
  * Show workflow-file link in project configuration when present

* **Improvements**
* Robust config-path normalization, existence checks, debounced
repo/branch search, and better GitHub rate-limit handling
* New GitHub API utilities for safe file read/commit and import-package
detection

* **Tests**
* Expanded tests covering GitHub API, config rendering/merge, and push
behaviors

<!-- review_stack_entry_start -->

[![Review Change
Stack](https://storage.googleapis.com/coderabbit_public_assets/review-stack-in-coderabbit-ui.svg)](https://app.coderabbit.ai/change-stack/hexclave/stack-auth/pull/1450?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack)

<!-- review_stack_entry_end -->
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-05-21 13:47:46 -07:00
..
ai Update AI chat models 2026-05-20 13:43:28 -07:00
bulldozer Make Bulldozer SQL statements deterministic 2026-04-18 16:43:26 -07:00
payments payments: rework refund flow to three-knob API (#1429) 2026-05-15 19:29:21 -07:00
cache.tsx Upgrade Prisma to v7 (#1064) 2025-12-26 08:13:34 -08:00
cel-evaluator.ts Turnstile integration for fraud protection (#1239) 2026-03-20 21:26:45 +00:00
clickhouse-errors.ts Classify ClickHouse NO_COMMON_TYPE (386) as unsafe (#1380) 2026-04-24 12:07:16 -07:00
clickhouse.tsx Fix /internal/metrics ClickHouse OOM (#1457) 2026-05-21 13:47:32 -07:00
config.tsx Fix flaky tests and preexisting CI failures (#1443) 2026-05-20 10:00:11 -07:00
contact-channel.tsx External db sync (#1036) 2026-02-05 12:04:31 -08:00
conversation-types.ts [Apps] Adding support app alpha and dogfooding (#1368) 2026-05-13 11:36:11 -05:00
conversations-api.ts [Apps] Adding support app alpha and dogfooding (#1368) 2026-05-13 11:36:11 -05:00
conversations.tsx [Apps] Adding support app alpha and dogfooding (#1368) 2026-05-13 11:36:11 -05:00
dev-perf-stats.tsx Fix dev-perf-stats 2026-02-04 13:59:31 -08:00
dev-request-stats.tsx Fix dev stats accuracy 2025-12-29 17:15:08 +01:00
development-environment.ts Remote dev envs (#1435) 2026-05-19 15:54:18 -07:00
email-delivery-stats.tsx [Refactor][Feat][Fix] Rework Email Section With New Sent Page, Better Drafts Page, and Settings Page (#1221) 2026-03-11 12:01:36 -07:00
email-drafts.tsx fix types 2025-12-26 18:11:37 +01:00
email-queue-step.test.tsx fix(email-queue): recover stuck sending without duplicate retry (#1356) 2026-04-24 11:00:46 -07:00
email-queue-step.tsx Fix flaky tests and preexisting CI failures (#1443) 2026-05-20 10:00:11 -07:00
email-rendering.test.tsx [Refactor][Feat][Fix] Rework Email Section With New Sent Page, Better Drafts Page, and Settings Page (#1221) 2026-03-11 12:01:36 -07:00
email-rendering.tsx Improved StackAssertionError error logging 2026-05-07 13:29:01 -07:00
email-template-rewrite.ts Custom dashboards and unified ai no playground (#1243) 2026-03-13 20:24:40 +00:00
emailable.tsx Add more error messages for 249 Emailable errors 2026-04-09 11:06:27 -07:00
emails-low-level.tsx [Refactor] Make all SMTP 4yz Errors Retryable (#1293) 2026-04-07 16:20:39 +00:00
emails.tsx Backend fallback (cloud run) (#1306) 2026-04-11 00:57:37 +00:00
end-users.tsx Backend fallback (cloud run) (#1306) 2026-04-11 00:57:37 +00:00
events.tsx Improved StackAssertionError error logging 2026-05-07 13:29:01 -07:00
external-db-sync-metadata.ts [Refactor] Improve CI Run Times by Reducing Test Flakiness and Speeding up Test Suite (#1166) 2026-02-10 19:43:10 -08:00
external-db-sync-queue.ts [Fix] recover stale external db requests (#1428) 2026-05-12 17:55:44 -07:00
external-db-sync.ts clickhouse new syncs and verify-data (#1304) 2026-04-08 14:43:22 -07:00
featurebase.tsx Replace Web3Forms with internal feedback emails (#1244) 2026-03-23 17:07:37 -07:00
images.tsx Project logo upload (#817) 2025-08-19 04:45:16 +02:00
internal-api-keys.tsx "Require publishable client key" toggle (#1158) 2026-02-19 10:23:16 -08:00
internal-feedback-emails.tsx dev tool indicator (#1272) 2026-04-13 17:43:03 -07:00
js-execution.tsx Improved StackAssertionError error logging 2026-05-07 13:29:01 -07:00
local-emulator.test.ts Remote dev envs (#1435) 2026-05-19 15:54:18 -07:00
local-emulator.ts Remote dev envs (#1435) 2026-05-19 15:54:18 -07:00
managed-email-domains.tsx Redesign Email Server settings + managed domain flow (#1373) 2026-04-24 13:35:03 -07:00
managed-email-onboarding.tsx Redesign Email Server settings + managed domain flow (#1373) 2026-04-24 13:35:03 -07:00
metrics-activity-split.ts Overview revamp (#1238) 2026-04-15 09:36:00 -07:00
notification-categories.ts Email outbox backend (#1030) 2025-12-12 10:26:38 -08:00
oauth.tsx Turnstile integration for fraud protection (#1239) 2026-03-20 21:26:45 +00:00
openapi.tsx Data-grid overhaul + session-replays / team-payments dashboard surfaces (#1424) 2026-05-15 14:16:47 -07:00
payments.test.tsx payments: rework refund flow to three-knob API (#1429) 2026-05-15 19:29:21 -07:00
payments.tsx [Refactor] [Fix] Remove default prod creation (#1350) 2026-05-15 10:38:33 -07:00
permissions.tsx clickhouse new syncs and verify-data (#1304) 2026-04-08 14:43:22 -07:00
plan-entitlements.test.ts [Feat]: set flag to disable billing (#1417) 2026-05-06 14:58:06 -07:00
plan-entitlements.ts [Feat]: set flag to disable billing (#1417) 2026-05-06 14:58:06 -07:00
preview-mode.ts stack auth preview mode (#1307) 2026-04-08 16:57:42 -07:00
product-versions.tsx [Fix] [Refactor] Implement Base Settings for Stack-Auth Plans and Move Metadata from Stripe Webhook Event to Table (#1214) 2026-02-23 22:09:27 -08:00
projects.tsx Remote dev envs (#1435) 2026-05-19 15:54:18 -07:00
redirect-urls.test.tsx [Fix] [Feat] Update OAuth Sign-In and Get Token Functions to Work (#1130) 2026-01-28 02:17:27 +00:00
redirect-urls.tsx [Fix] [Feat] Update OAuth Sign-In and Get Token Functions to Work (#1130) 2026-01-28 02:17:27 +00:00
request-checks.tsx Upgrade Prisma to v7 (#1064) 2025-12-26 08:13:34 -08:00
risk-scores.tsx rework weights for same name signups (#1298) 2026-04-12 23:30:55 +00:00
seed-dummy-data.test.ts [codex] Fix preview dummy payments customer types (#1398) 2026-05-01 09:44:30 -07:00
seed-dummy-data.ts feat: link Stack Auth projects to GitHub and push config from the dashboard (#1450) 2026-05-21 13:47:46 -07:00
session-replays.tsx Analytics event tracking (#1208) 2026-02-17 18:33:01 -08:00
sign-up-context.ts Turnstile integration for fraud protection (#1239) 2026-03-20 21:26:45 +00:00
sign-up-heuristics.tsx Turnstile integration for fraud protection (#1239) 2026-03-20 21:26:45 +00:00
sign-up-rules.ts [Refactor][Feat] Implement Plan Limits for Hard-and-Soft Item Caps (#1215) 2026-05-04 18:25:13 -07:00
stripe-proxy.tsx one time payments (#865) 2025-09-12 17:14:09 -07:00
stripe.tsx Improved StackAssertionError error logging 2026-05-07 13:29:01 -07:00
telegram.tsx payment email templates (#1106) 2026-01-20 18:45:01 -08:00
tenancies.tsx Make most queries readonly 2026-01-02 04:25:05 +01:00
tokens.tsx [Refactor][Feat] Implement Plan Limits for Hard-and-Soft Item Caps (#1215) 2026-05-04 18:25:13 -07:00
turnstile.tsx Turnstile integration for fraud protection (#1239) 2026-03-20 21:26:45 +00:00
types.tsx Upgrade Prisma to v7 (#1064) 2025-12-26 08:13:34 -08:00
upstash.tsx local emulator security and features fixes (#1247) 2026-04-14 15:36:24 -07:00
users.tsx Enhance error handling and logging in Emailable response validation (#1292) 2026-04-01 09:21:43 -07:00
webhooks.tsx stack auth preview mode (#1307) 2026-04-08 16:57:42 -07:00