@hexclave/shared 1.0.10 → 1.0.11

package/dist/config/schema.d.ts

@@ -84,7 +84,7 @@ declare const branchConfigSchema: yup$1.Schema<Omit<Omit<{
   sourceOfTruth: {
     type: "hosted";
   };
-}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
   payments?: {
     blockNewPurchases?: boolean | undefined;
     autoPay?: {
@@ -134,9 +134,6 @@ declare const branchConfigSchema: yup$1.Schema<Omit<Omit<{
     otp: {
       allowSignIn?: boolean | undefined;
     };
-    passkey: {
-      allowSignIn?: boolean | undefined;
-    };
     oauth: {
       accountMergeStrategy?: "link_method" | "raise_error" | "allow_duplicates" | undefined;
       providers: Record<string, {
@@ -145,6 +142,9 @@ declare const branchConfigSchema: yup$1.Schema<Omit<Omit<{
         allowConnectedAccounts?: boolean | undefined;
       }>;
     };
+    passkey: {
+      allowSignIn?: boolean | undefined;
+    };
     signUpRules: Record<string, {
       displayName?: string | undefined;
       enabled?: boolean | undefined;
@@ -190,6 +190,7 @@ declare const branchConfigSchema: yup$1.Schema<Omit<Omit<{
   users: {
     allowClientUserDeletion?: boolean | undefined;
   };
+  domains: {};
   apiKeys: {
     enabled: {
       team?: boolean | undefined;
@@ -201,7 +202,6 @@ declare const branchConfigSchema: yup$1.Schema<Omit<Omit<{
       enabled?: boolean | undefined;
     }>;
   };
-  domains: {};
   dbSync: {
     externalDatabases: Record<string, {
       connectionString?: string | undefined;
@@ -218,7 +218,7 @@ declare const branchConfigSchema: yup$1.Schema<Omit<Omit<{
   project: {
     requirePublishableClientKey: undefined;
   };
-}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
   rbac: {
     permissions: undefined;
     defaultPermissions: {
@@ -293,7 +293,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
   sourceOfTruth: {
     type: "hosted";
   };
-}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
   payments?: {
     blockNewPurchases?: boolean | undefined;
     autoPay?: {
@@ -343,9 +343,6 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
     otp: {
       allowSignIn?: boolean | undefined;
     };
-    passkey: {
-      allowSignIn?: boolean | undefined;
-    };
     oauth: {
       accountMergeStrategy?: "link_method" | "raise_error" | "allow_duplicates" | undefined;
       providers: Record<string, {
@@ -354,6 +351,9 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
         allowConnectedAccounts?: boolean | undefined;
       }>;
     };
+    passkey: {
+      allowSignIn?: boolean | undefined;
+    };
     signUpRules: Record<string, {
       displayName?: string | undefined;
       enabled?: boolean | undefined;
@@ -399,6 +399,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
   users: {
     allowClientUserDeletion?: boolean | undefined;
   };
+  domains: {};
   apiKeys: {
     enabled: {
       team?: boolean | undefined;
@@ -410,7 +411,6 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
       enabled?: boolean | undefined;
     }>;
   };
-  domains: {};
   dbSync: {
     externalDatabases: Record<string, {
       connectionString?: string | undefined;
@@ -474,9 +474,6 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
     otp: {
       allowSignIn?: boolean | undefined;
     };
-    passkey: {
-      allowSignIn?: boolean | undefined;
-    };
     oauth: {
       accountMergeStrategy?: "link_method" | "raise_error" | "allow_duplicates" | undefined;
       providers: Record<string, {
@@ -485,6 +482,9 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
         allowConnectedAccounts?: boolean | undefined;
       }>;
     };
+    passkey: {
+      allowSignIn?: boolean | undefined;
+    };
     signUpRules: Record<string, {
       displayName?: string | undefined;
       enabled?: boolean | undefined;
@@ -535,10 +535,10 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
     server: {
       provider?: "resend" | "smtp" | "managed" | undefined;
       password?: string | undefined;
-      isShared?: boolean | undefined;
       host?: string | undefined;
       port?: number | undefined;
       username?: string | undefined;
+      isShared?: boolean | undefined;
       senderName?: string | undefined;
       senderEmail?: string | undefined;
       managedSubdomain?: string | undefined;
@@ -572,7 +572,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
   project: {
     requirePublishableClientKey: undefined;
   };
-}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
   rbac: {
     permissions: undefined;
     defaultPermissions: {
@@ -645,7 +645,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -718,7 +718,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
       project: {
         requirePublishableClientKey: undefined;
       };
-    }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+    }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
       rbac: {
         permissions: undefined;
         defaultPermissions: {
@@ -794,7 +794,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -880,7 +880,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -956,7 +956,7 @@ declare const environmentConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<Omit<{
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -1038,7 +1038,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
   sourceOfTruth: {
     type: "hosted";
   };
-}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
   payments?: {
     blockNewPurchases?: boolean | undefined;
     autoPay?: {
@@ -1088,9 +1088,6 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
     otp: {
       allowSignIn?: boolean | undefined;
     };
-    passkey: {
-      allowSignIn?: boolean | undefined;
-    };
     oauth: {
       accountMergeStrategy?: "link_method" | "raise_error" | "allow_duplicates" | undefined;
       providers: Record<string, {
@@ -1099,6 +1096,9 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
         allowConnectedAccounts?: boolean | undefined;
       }>;
     };
+    passkey: {
+      allowSignIn?: boolean | undefined;
+    };
     signUpRules: Record<string, {
       displayName?: string | undefined;
       enabled?: boolean | undefined;
@@ -1144,6 +1144,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
   users: {
     allowClientUserDeletion?: boolean | undefined;
   };
+  domains: {};
   apiKeys: {
     enabled: {
       team?: boolean | undefined;
@@ -1155,7 +1156,6 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
       enabled?: boolean | undefined;
     }>;
   };
-  domains: {};
   dbSync: {
     externalDatabases: Record<string, {
       connectionString?: string | undefined;
@@ -1219,9 +1219,6 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
     otp: {
       allowSignIn?: boolean | undefined;
     };
-    passkey: {
-      allowSignIn?: boolean | undefined;
-    };
     oauth: {
       accountMergeStrategy?: "link_method" | "raise_error" | "allow_duplicates" | undefined;
       providers: Record<string, {
@@ -1230,6 +1227,9 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
         allowConnectedAccounts?: boolean | undefined;
       }>;
     };
+    passkey: {
+      allowSignIn?: boolean | undefined;
+    };
     signUpRules: Record<string, {
       displayName?: string | undefined;
       enabled?: boolean | undefined;
@@ -1280,10 +1280,10 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
     server: {
       provider?: "resend" | "smtp" | "managed" | undefined;
       password?: string | undefined;
-      isShared?: boolean | undefined;
       host?: string | undefined;
       port?: number | undefined;
       username?: string | undefined;
+      isShared?: boolean | undefined;
       senderName?: string | undefined;
       senderEmail?: string | undefined;
       managedSubdomain?: string | undefined;
@@ -1317,7 +1317,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
   project: {
     requirePublishableClientKey: undefined;
   };
-}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+}, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
   rbac: {
     permissions: undefined;
     defaultPermissions: {
@@ -1390,7 +1390,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -1463,7 +1463,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
       project: {
         requirePublishableClientKey: undefined;
       };
-    }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+    }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
       rbac: {
         permissions: undefined;
         defaultPermissions: {
@@ -1539,7 +1539,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -1625,7 +1625,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -1701,7 +1701,7 @@ declare const organizationConfigSchema: yup$1.Schema<Omit<NonNullable<Omit<NonNu
     project: {
       requirePublishableClientKey: undefined;
     };
-  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "apiKeys" | "apps" | "domains" | "dbSync" | "dataVault"> & {
+  }, string>, "auth" | "onboarding" | "teams" | "rbac" | "payments" | "emails" | "users" | "domains" | "apiKeys" | "apps" | "dbSync" | "dataVault"> & {
     rbac: {
       permissions: undefined;
       defaultPermissions: {
@@ -2072,7 +2072,6 @@ declare function sanitizeOrganizationConfig(config: OrganizationRenderedConfigBe
         type: "allow" | "reject" | "restrict" | "log";
       };
     }>;
-    allowSignUp: boolean;
     password: {
       allowSignIn: boolean;
     };
@@ -2082,6 +2081,7 @@ declare function sanitizeOrganizationConfig(config: OrganizationRenderedConfigBe
     passkey: {
       allowSignIn: boolean;
     };
+    allowSignUp: boolean;
     signUpRulesDefaultAction: string;
   };
   emails: {
@@ -2102,10 +2102,10 @@ declare function sanitizeOrganizationConfig(config: OrganizationRenderedConfigBe
     server: {
       provider: "resend" | "smtp" | "managed";
       password: string | undefined;
-      isShared: boolean;
       host: string | undefined;
       port: number | undefined;
       username: string | undefined;
+      isShared: boolean;
       senderName: string | undefined;
       senderEmail: string | undefined;
       managedSubdomain: string | undefined;
@@ -2221,12 +2221,6 @@ declare function sanitizeOrganizationConfig(config: OrganizationRenderedConfigBe
   users: {
     allowClientUserDeletion: boolean;
   };
-  apiKeys: {
-    enabled: {
-      team: boolean;
-      user: boolean;
-    };
-  };
   domains: {
     allowLocalhost: boolean;
     trustedDomains: {
@@ -2236,6 +2230,12 @@ declare function sanitizeOrganizationConfig(config: OrganizationRenderedConfigBe
       };
     };
   };
+  apiKeys: {
+    enabled: {
+      team: boolean;
+      user: boolean;
+    };
+  };
   dbSync: {
     externalDatabases: {
       [x: string]: {

package/dist/config-rendering.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-rendering.d.ts","names":[],"sources":["../src/config-rendering.ts"],"mappings":";;;;AA4BA;;;;iBAAgB,yBAAA,CAA0B,YAAA;AAa1C;;;;AAAA,iBAAgB,0BAAA,CAA2B,GAAA"}
+{"version":3,"file":"config-rendering.d.ts","names":[],"sources":["../src/config-rendering.ts"],"mappings":";;;;AA6BA;;;;iBAAgB,yBAAA,CAA0B,YAAA;AAa1C;;;;AAAA,iBAAgB,0BAAA,CAA2B,GAAA"}

package/dist/config-rendering.js

@@ -16,6 +16,7 @@ let __hexclave_config_file_js = require("./hexclave-config-file.js");
 const CONFIG_IMPORT_PACKAGES = [
 	"@hexclave/next",
 	"@hexclave/react",
+	"@hexclave/tanstack-start",
 	"@hexclave/js",
 	"@hexclave/template",
 	"@stackframe/stack",
@@ -99,15 +100,19 @@ function detectImportPackageFromDir(dir) {
 	expect(() => (0, __hexclave_config_file_js.renderConfigFileContent)(null)).toThrowErrorMatchingInlineSnapshot(`[Error: Invalid config: expected a plain object.]`);
 });
 (void 0)?.test("renderConfigFileContent uses custom import package", ({ expect }) => {
-	expect((0, __hexclave_config_file_js.renderConfigFileContent)({}, "@hexclave/next")).toContain("import type { HexclaveConfig } from \"@hexclave/next\";");
+	expect((0, __hexclave_config_file_js.renderConfigFileContent)({}, "@hexclave/next")).toContain("import type { HexclaveConfig } from \"@hexclave/next/config\";");
 });
 (void 0)?.test("renderConfigFileContent defaults to @hexclave/js", ({ expect }) => {
-	expect((0, __hexclave_config_file_js.renderConfigFileContent)({})).toContain("import type { HexclaveConfig } from \"@hexclave/js\";");
+	expect((0, __hexclave_config_file_js.renderConfigFileContent)({})).toContain("import type { HexclaveConfig } from \"@hexclave/js/config\";");
+});
+(void 0)?.test("renderConfigFileContent keeps legacy @stackframe packages on their root entrypoint", ({ expect }) => {
+	expect((0, __hexclave_config_file_js.renderConfigFileContent)({}, "@stackframe/next")).toContain("import type { HexclaveConfig } from \"@stackframe/next\";");
 });
 (void 0)?.test("detectConfigImportPackage picks first matching package by priority", ({ expect }) => {
 	expect(detectConfigImportPackage(["@hexclave/next", "@hexclave/js"])).toBe("@hexclave/next");
 	expect(detectConfigImportPackage(["@hexclave/react", "@hexclave/js"])).toBe("@hexclave/react");
 	expect(detectConfigImportPackage(["@hexclave/js"])).toBe("@hexclave/js");
+	expect(detectConfigImportPackage(["@hexclave/tanstack-start"])).toBe("@hexclave/tanstack-start");
 	expect(detectConfigImportPackage(["@stackframe/stack", "@hexclave/next"])).toBe("@hexclave/next");
 	expect(detectConfigImportPackage(["@stackframe/stack"])).toBe("@stackframe/stack");
 	expect(detectConfigImportPackage(["@stackframe/template"])).toBe("@stackframe/template");

package/dist/config-rendering.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-rendering.js","names":[],"sources":["../src/config-rendering.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"fs\";\nimport path from \"path\";\nimport { parseHexclaveConfigFileContent, renderConfigFileContent } from \"./hexclave-config-file\";\nexport { parseHexclaveConfigFileContent, renderConfigFileContent };\n\n/**\n * Packages that export the `HexclaveConfig` type, in priority order.\n * The first match found in a project's dependencies wins. Hexclave-branded\n * packages come first (canonical); the legacy `@stackframe/*` names remain\n * so projects pinned to the last legacy release still render a config file\n * that compiles against their installed SDK.\n */\nconst CONFIG_IMPORT_PACKAGES = [\n  \"@hexclave/next\",\n  \"@hexclave/react\",\n  \"@hexclave/js\",\n  \"@hexclave/template\",\n  \"@stackframe/stack\",\n  \"@stackframe/react\",\n  \"@stackframe/js\",\n  \"@stackframe/template\",\n] as const;\n\n/**\n * Given a list of dependency names (from package.json), returns the SDK\n * package that should be used for the `HexclaveConfig` import, or `undefined`\n * if none of the known packages are installed.\n */\nexport function detectConfigImportPackage(dependencies: string[]): string | undefined {\n  for (const pkg of CONFIG_IMPORT_PACKAGES) {\n    if (dependencies.includes(pkg)) {\n      return pkg;\n    }\n  }\n  return undefined;\n}\n\n/**\n * Walks up from `dir` to find the nearest `package.json` and returns the\n * best SDK package to use for the `HexclaveConfig` type import.\n */\nexport function detectImportPackageFromDir(dir: string): string | undefined {\n  let current = dir;\n  while (true) {\n    const pkgPath = path.join(current, \"package.json\");\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, \"utf-8\"));\n        const deps = [\n          ...Object.keys(pkg.dependencies ?? {}),\n          ...Object.keys(pkg.devDependencies ?? {}),\n        ];\n        return detectConfigImportPackage(deps);\n      } catch {\n        return undefined;\n      }\n    }\n    const parent = path.dirname(current);\n    if (parent === current) break;\n    current = parent;\n  }\n  return undefined;\n}\n\nimport.meta.vitest?.test(\"renderConfigFileContent normalizes config exports\", ({ expect }) => {\n  expect(renderConfigFileContent({\n    \"payments.items.todos.displayName\": \"Todo Slots\",\n    \"payments.items.todos.customerType\": \"user\",\n  })).toContain(`export const config: HexclaveConfig = {\n  \"payments\": {\n    \"items\": {\n      \"todos\": {\n        \"displayName\": \"Todo Slots\",\n        \"customerType\": \"user\"\n      }\n    }\n  }\n};`);\n});\n\nimport.meta.vitest?.test(\"parseHexclaveConfigFileContent parses static config exports\", ({ expect }) => {\n  expect(parseHexclaveConfigFileContent(`\n    import type { StackConfig } from \"@hexclave/js\";\n    export const config: StackConfig = {\n      auth: { allowSignUp: true },\n      payments: { testMode: false },\n    };\n  `, \"stack.config.ts\")).toMatchInlineSnapshot(`\n    {\n      \"auth\": {\n        \"allowSignUp\": true,\n      },\n      \"payments\": {\n        \"testMode\": false,\n      },\n    }\n  `);\n});\n\nimport.meta.vitest?.test(\"parseHexclaveConfigFileContent parses show-onboarding\", ({ expect }) => {\n  expect(parseHexclaveConfigFileContent('export const config = \"show-onboarding\";', \"stack.config.ts\")).toBe(\"show-onboarding\");\n});\n\nimport.meta.vitest?.test(\"parseHexclaveConfigFileContent rejects dynamic config exports\", ({ expect }) => {\n  expect(() => parseHexclaveConfigFileContent(\"export const config = makeConfig();\", \"stack.config.ts\")).toThrow(/Unsupported config expression/);\n});\n\nimport.meta.vitest?.test(\"renderConfigFileContent rejects conflicting dotted keys\", ({ expect }) => {\n  expect(() => renderConfigFileContent({\n    \"a.b\": 1,\n    \"a.b.c\": 2,\n  })).toThrowError(/conflicting keys.*\"a\\.b\\.c\"/);\n});\n\nimport.meta.vitest?.test(\"renderConfigFileContent rejects invalid config exports\", ({ expect }) => {\n  expect(() => renderConfigFileContent(null)).toThrowErrorMatchingInlineSnapshot(\n    `[Error: Invalid config: expected a plain object.]`,\n  );\n});\n\nimport.meta.vitest?.test(\"renderConfigFileContent uses custom import package\", ({ expect }) => {\n  const content = renderConfigFileContent({}, \"@hexclave/next\");\n  expect(content).toContain('import type { HexclaveConfig } from \"@hexclave/next\";');\n});\n\nimport.meta.vitest?.test(\"renderConfigFileContent defaults to @hexclave/js\", ({ expect }) => {\n  const content = renderConfigFileContent({});\n  expect(content).toContain('import type { HexclaveConfig } from \"@hexclave/js\";');\n});\n\nimport.meta.vitest?.test(\"detectConfigImportPackage picks first matching package by priority\", ({ expect }) => {\n  expect(detectConfigImportPackage([\"@hexclave/next\", \"@hexclave/js\"])).toBe(\"@hexclave/next\");\n  expect(detectConfigImportPackage([\"@hexclave/react\", \"@hexclave/js\"])).toBe(\"@hexclave/react\");\n  expect(detectConfigImportPackage([\"@hexclave/js\"])).toBe(\"@hexclave/js\");\n  // Hexclave names take priority over legacy stackframe names when both appear.\n  expect(detectConfigImportPackage([\"@stackframe/stack\", \"@hexclave/next\"])).toBe(\"@hexclave/next\");\n  // Legacy fallback still works for projects pinned to the last @stackframe/* release.\n  expect(detectConfigImportPackage([\"@stackframe/stack\"])).toBe(\"@stackframe/stack\");\n  expect(detectConfigImportPackage([\"@stackframe/template\"])).toBe(\"@stackframe/template\");\n  expect(detectConfigImportPackage([\"lodash\", \"express\"])).toBeUndefined();\n  expect(detectConfigImportPackage([])).toBeUndefined();\n});\n"],"mappings":";;;;;;;;;;;;;;;AAYA,MAAM,yBAAyB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;AAOD,SAAgB,0BAA0B,cAA4C;AACpF,MAAK,MAAM,OAAO,uBAChB,KAAI,aAAa,SAAS,IAAI,CAC5B,QAAO;;;;;;AAUb,SAAgB,2BAA2B,KAAiC;CAC1E,IAAI,UAAU;AACd,QAAO,MAAM;EACX,MAAM,UAAU,aAAK,KAAK,SAAS,eAAe;AAClD,yBAAe,QAAQ,CACrB,KAAI;GACF,MAAM,MAAM,KAAK,2BAAmB,SAAS,QAAQ,CAAC;AAKtD,UAAO,0BAJM,CACX,GAAG,OAAO,KAAK,IAAI,gBAAgB,EAAE,CAAC,EACtC,GAAG,OAAO,KAAK,IAAI,mBAAmB,EAAE,CAAC,CAC1C,CACqC;UAChC;AACN;;EAGJ,MAAM,SAAS,aAAK,QAAQ,QAAQ;AACpC,MAAI,WAAW,QAAS;AACxB,YAAU;;;CAKd,SAAW,KAAC,sDAAwD,EAAA,aAAa;AAC/E,+DAA+B;EAC7B,oCAAoC;EACpC,qCAAqC;EACtC,CAAC,CAAC,CAAC,UAAU;;;;;;;;;IASZ;EACF;CAEF,SAAW,KAAC,gEAAkE,EAAA,aAAa;AACzF,sEAAsC;;;;;;KAMnC,kBAAkB,CAAC,CAAC,sBAAsB;;;;;;;;;IAS3C;EACF;CAEF,SAAW,KAAC,0DAAyD,EAAA,aAAgB;AACnF,sEAAsC,8CAA4C,kBAAkB,CAAC,CAAC,KAAK,kBAAkB;EAC7H;CAEF,SAAW,KAAC,kEAAoE,EAAA,aAAa;AAC3F,4EAA4C,uCAAuC,kBAAkB,CAAC,CAAC,QAAQ,gCAAgC;EAC/I;CAEF,SAAW,KAAC,4DAAgE,EAAC,aAAU;AACrF,qEAAqC;EACnC,OAAO;EACP,SAAS;EACV,CAAC,CAAC,CAAC,aAAa,8BAA8B;EAC/C;CAEF,SAAW,KAAC,2DAA6D,EAAA,aAAa;AACpF,qEAAqC,KAAK,CAAC,CAAC,mCAC1C,oDACD;EACD;CAEF,SAAW,KAAC,uDAAyD,EAAA,aAAa;AAEhF,+DADwC,EAAE,EAAE,iBAAiB,CAC9C,CAAC,UAAU,0DAAwD;EAClF;CAEF,SAAW,KAAC,qDAAmD,EAAQ,aAAS;AAE9E,+DADwC,EAAE,CAAC,CAC5B,CAAC,UAAU,wDAAsD;EAChF;CAEF,SAAW,KAAC,uEAAwE,EAAA,aAAc;AAChG,QAAO,0BAA0B,CAAC,kBAAkB,eAAe,CAAC,CAAC,CAAC,KAAK,iBAAiB;AAC5F,QAAO,0BAA0B,CAAC,mBAAmB,eAAe,CAAC,CAAC,CAAC,KAAK,kBAAkB;AAC9F,QAAO,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,eAAe;AAExE,QAAO,0BAA0B,CAAC,qBAAqB,iBAAiB,CAAC,CAAC,CAAC,KAAK,iBAAiB;AAEjG,QAAO,0BAA0B,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,oBAAoB;AAClF,QAAO,0BAA0B,CAAC,uBAAuB,CAAC,CAAC,CAAC,KAAK,uBAAuB;AACxF,QAAO,0BAA0B,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC,eAAe;AACxE,QAAO,0BAA0B,EAAE,CAAC,CAAC,CAAC,eAAe;EACrD"}
+{"version":3,"file":"config-rendering.js","names":[],"sources":["../src/config-rendering.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"fs\";\nimport path from \"path\";\nimport { parseHexclaveConfigFileContent, renderConfigFileContent } from \"./hexclave-config-file\";\nexport { parseHexclaveConfigFileContent, renderConfigFileContent };\n\n/**\n * Packages that export the `HexclaveConfig` type, in priority order.\n * The first match found in a project's dependencies wins. Hexclave-branded\n * packages come first (canonical); the legacy `@stackframe/*` names remain\n * so projects pinned to the last legacy release still render a config file\n * that compiles against their installed SDK.\n */\nconst CONFIG_IMPORT_PACKAGES = [\n  \"@hexclave/next\",\n  \"@hexclave/react\",\n  \"@hexclave/tanstack-start\",\n  \"@hexclave/js\",\n  \"@hexclave/template\",\n  \"@stackframe/stack\",\n  \"@stackframe/react\",\n  \"@stackframe/js\",\n  \"@stackframe/template\",\n] as const;\n\n/**\n * Given a list of dependency names (from package.json), returns the SDK\n * package that should be used for the `HexclaveConfig` import, or `undefined`\n * if none of the known packages are installed.\n */\nexport function detectConfigImportPackage(dependencies: string[]): string | undefined {\n  for (const pkg of CONFIG_IMPORT_PACKAGES) {\n    if (dependencies.includes(pkg)) {\n      return pkg;\n    }\n  }\n  return undefined;\n}\n\n/**\n * Walks up from `dir` to find the nearest `package.json` and returns the\n * best SDK package to use for the `HexclaveConfig` type import.\n */\nexport function detectImportPackageFromDir(dir: string): string | undefined {\n  let current = dir;\n  while (true) {\n    const pkgPath = path.join(current, \"package.json\");\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(readFileSync(pkgPath, \"utf-8\"));\n        const deps = [\n          ...Object.keys(pkg.dependencies ?? {}),\n          ...Object.keys(pkg.devDependencies ?? {}),\n        ];\n        return detectConfigImportPackage(deps);\n      } catch {\n        return undefined;\n      }\n    }\n    const parent = path.dirname(current);\n    if (parent === current) break;\n    current = parent;\n  }\n  return undefined;\n}\n\nimport.meta.vitest?.test(\"renderConfigFileContent normalizes config exports\", ({ expect }) => {\n  expect(renderConfigFileContent({\n    \"payments.items.todos.displayName\": \"Todo Slots\",\n    \"payments.items.todos.customerType\": \"user\",\n  })).toContain(`export const config: HexclaveConfig = {\n  \"payments\": {\n    \"items\": {\n      \"todos\": {\n        \"displayName\": \"Todo Slots\",\n        \"customerType\": \"user\"\n      }\n    }\n  }\n};`);\n});\n\nimport.meta.vitest?.test(\"parseHexclaveConfigFileContent parses static config exports\", ({ expect }) => {\n  expect(parseHexclaveConfigFileContent(`\n    import type { StackConfig } from \"@hexclave/js\";\n    export const config: StackConfig = {\n      auth: { allowSignUp: true },\n      payments: { testMode: false },\n    };\n  `, \"stack.config.ts\")).toMatchInlineSnapshot(`\n    {\n      \"auth\": {\n        \"allowSignUp\": true,\n      },\n      \"payments\": {\n        \"testMode\": false,\n      },\n    }\n  `);\n});\n\nimport.meta.vitest?.test(\"parseHexclaveConfigFileContent parses show-onboarding\", ({ expect }) => {\n  expect(parseHexclaveConfigFileContent('export const config = \"show-onboarding\";', \"stack.config.ts\")).toBe(\"show-onboarding\");\n});\n\nimport.meta.vitest?.test(\"parseHexclaveConfigFileContent rejects dynamic config exports\", ({ expect }) => {\n  expect(() => parseHexclaveConfigFileContent(\"export const config = makeConfig();\", \"stack.config.ts\")).toThrow(/Unsupported config expression/);\n});\n\nimport.meta.vitest?.test(\"renderConfigFileContent rejects conflicting dotted keys\", ({ expect }) => {\n  expect(() => renderConfigFileContent({\n    \"a.b\": 1,\n    \"a.b.c\": 2,\n  })).toThrowError(/conflicting keys.*\"a\\.b\\.c\"/);\n});\n\nimport.meta.vitest?.test(\"renderConfigFileContent rejects invalid config exports\", ({ expect }) => {\n  expect(() => renderConfigFileContent(null)).toThrowErrorMatchingInlineSnapshot(\n    `[Error: Invalid config: expected a plain object.]`,\n  );\n});\n\nimport.meta.vitest?.test(\"renderConfigFileContent uses custom import package\", ({ expect }) => {\n  const content = renderConfigFileContent({}, \"@hexclave/next\");\n  expect(content).toContain('import type { HexclaveConfig } from \"@hexclave/next/config\";');\n});\n\nimport.meta.vitest?.test(\"renderConfigFileContent defaults to @hexclave/js\", ({ expect }) => {\n  const content = renderConfigFileContent({});\n  expect(content).toContain('import type { HexclaveConfig } from \"@hexclave/js/config\";');\n});\n\nimport.meta.vitest?.test(\"renderConfigFileContent keeps legacy @stackframe packages on their root entrypoint\", ({ expect }) => {\n  // The lightweight `/config` subpath only exists on Hexclave-branded packages;\n  // already-published @stackframe/* releases predate it.\n  const content = renderConfigFileContent({}, \"@stackframe/next\");\n  expect(content).toContain('import type { HexclaveConfig } from \"@stackframe/next\";');\n});\n\nimport.meta.vitest?.test(\"detectConfigImportPackage picks first matching package by priority\", ({ expect }) => {\n  expect(detectConfigImportPackage([\"@hexclave/next\", \"@hexclave/js\"])).toBe(\"@hexclave/next\");\n  expect(detectConfigImportPackage([\"@hexclave/react\", \"@hexclave/js\"])).toBe(\"@hexclave/react\");\n  expect(detectConfigImportPackage([\"@hexclave/js\"])).toBe(\"@hexclave/js\");\n  expect(detectConfigImportPackage([\"@hexclave/tanstack-start\"])).toBe(\"@hexclave/tanstack-start\");\n  // Hexclave names take priority over legacy stackframe names when both appear.\n  expect(detectConfigImportPackage([\"@stackframe/stack\", \"@hexclave/next\"])).toBe(\"@hexclave/next\");\n  // Legacy fallback still works for projects pinned to the last @stackframe/* release.\n  expect(detectConfigImportPackage([\"@stackframe/stack\"])).toBe(\"@stackframe/stack\");\n  expect(detectConfigImportPackage([\"@stackframe/template\"])).toBe(\"@stackframe/template\");\n  expect(detectConfigImportPackage([\"lodash\", \"express\"])).toBeUndefined();\n  expect(detectConfigImportPackage([])).toBeUndefined();\n});\n"],"mappings":";;;;;;;;;;;;;;;AAYA,MAAM,yBAAyB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;AAOD,SAAgB,0BAA0B,cAA4C;AACpF,MAAK,MAAM,OAAO,uBAChB,KAAI,aAAa,SAAS,IAAI,CAC5B,QAAO;;;;;;AAUb,SAAgB,2BAA2B,KAAiC;CAC1E,IAAI,UAAU;AACd,QAAO,MAAM;EACX,MAAM,UAAU,aAAK,KAAK,SAAS,eAAe;AAClD,yBAAe,QAAQ,CACrB,KAAI;GACF,MAAM,MAAM,KAAK,2BAAmB,SAAS,QAAQ,CAAC;AAKtD,UAAO,0BAJM,CACX,GAAG,OAAO,KAAK,IAAI,gBAAgB,EAAE,CAAC,EACtC,GAAG,OAAO,KAAK,IAAI,mBAAmB,EAAE,CAAC,CAC1C,CACqC;UAChC;AACN;;EAGJ,MAAM,SAAS,aAAK,QAAQ,QAAQ;AACpC,MAAI,WAAW,QAAS;AACxB,YAAU;;;CAKd,SAAW,KAAC,sDAAwD,EAAA,aAAa;AAC/E,+DAA+B;EAC7B,oCAAoC;EACpC,qCAAqC;EACtC,CAAC,CAAC,CAAC,UAAU;;;;;;;;;IASZ;EACF;CAEF,SAAW,KAAC,gEAAkE,EAAA,aAAa;AACzF,sEAAsC;;;;;;KAMnC,kBAAkB,CAAC,CAAC,sBAAsB;;;;;;;;;IAS3C;EACF;CAEF,SAAW,KAAC,0DAAyD,EAAA,aAAgB;AACnF,sEAAsC,8CAA4C,kBAAkB,CAAC,CAAC,KAAK,kBAAkB;EAC7H;CAEF,SAAW,KAAC,kEAAoE,EAAA,aAAa;AAC3F,4EAA4C,uCAAuC,kBAAkB,CAAC,CAAC,QAAQ,gCAAgC;EAC/I;CAEF,SAAW,KAAC,4DAAgE,EAAC,aAAU;AACrF,qEAAqC;EACnC,OAAO;EACP,SAAS;EACV,CAAC,CAAC,CAAC,aAAa,8BAA8B;EAC/C;CAEF,SAAW,KAAC,2DAA6D,EAAA,aAAa;AACpF,qEAAqC,KAAK,CAAC,CAAC,mCAC1C,oDACD;EACD;CAEF,SAAW,KAAC,uDAAyD,EAAA,aAAa;AAEhF,+DADwC,EAAE,EAAE,iBAAiB,CAC9C,CAAC,UAAU,iEAA+D;EACzF;CAEF,SAAW,KAAC,qDAAmD,EAAQ,aAAS;AAE9E,+DADwC,EAAE,CAAC,CAC5B,CAAC,UAAU,+DAA6D;EACvF;CAEF,SAAW,KAAC,uFAAsF,EAAA,aAAgB;AAIhH,+DADwC,EAAE,EAAE,mBAAmB,CAChD,CAAC,UAAU,4DAA0D;EACpF;CAEF,SAAW,KAAC,uEAAwE,EAAA,aAAc;AAChG,QAAO,0BAA0B,CAAC,kBAAkB,eAAe,CAAC,CAAC,CAAC,KAAK,iBAAiB;AAC5F,QAAO,0BAA0B,CAAC,mBAAmB,eAAe,CAAC,CAAC,CAAC,KAAK,kBAAkB;AAC9F,QAAO,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,eAAe;AACxE,QAAO,0BAA0B,CAAC,2BAA2B,CAAC,CAAC,CAAC,KAAK,2BAA2B;AAEhG,QAAO,0BAA0B,CAAC,qBAAqB,iBAAiB,CAAC,CAAC,CAAC,KAAK,iBAAiB;AAEjG,QAAO,0BAA0B,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,oBAAoB;AAClF,QAAO,0BAA0B,CAAC,uBAAuB,CAAC,CAAC,CAAC,KAAK,uBAAuB;AACxF,QAAO,0BAA0B,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC,eAAe;AACxE,QAAO,0BAA0B,EAAE,CAAC,CAAC,CAAC,eAAe;EACrD"}

package/dist/esm/ai/unified-prompts/skill-site-prompt-parts/ai-setup-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai-setup-prompt.d.ts","names":[],"sources":["../../../../../src/ai/unified-prompts/skill-site-prompt-parts/ai-setup-prompt.ts"],"mappings":";cAEa,iBAAA;AAAA,cA6FA,mBAAA;AAAA,cAmKA,cAAA;AAAA,cA0QA,wBAAA;AAAA,cACA,yBAAA;AAAA,cAEA,8BAAA;AAAA,cAkCA,eAAA;AAAA,iBAIG,iBAAA,CAAkB,QAAA;AAAA,cAgdrB,aAAA"}
+{"version":3,"file":"ai-setup-prompt.d.ts","names":[],"sources":["../../../../../src/ai/unified-prompts/skill-site-prompt-parts/ai-setup-prompt.ts"],"mappings":";cAEa,iBAAA;AAAA,cA6FA,mBAAA;AAAA,cAmKA,cAAA;AAAA,cA4QA,wBAAA;AAAA,cACA,yBAAA;AAAA,cAEA,8BAAA;AAAA,cAkCA,eAAA;AAAA,iBAIG,iBAAA,CAAkB,QAAA;AAAA,cAsdrB,aAAA"}

package/dist/esm/ai/unified-prompts/skill-site-prompt-parts/ai-setup-prompt.js

@@ -351,11 +351,13 @@ function getRestBackendSetupPrompt(kind) {
             If this project already has a \`hexclave.config.ts\` file for another frontend or backend, reuse that same file so the whole project shares one Hexclave config. Otherwise, create a new \`hexclave.config.ts\` file in your workspace:
 
             \`\`\`ts hexclave.config.ts
-            import type { HexclaveConfig } from "@hexclave/js";
+            import type { HexclaveConfig } from "@hexclave/js/config";
 
             export const config: HexclaveConfig = "show-onboarding";
             \`\`\`
 
+            The \`/config\` entrypoint is lightweight and free of framework runtime code, so it can be safely loaded by tooling such as the local dashboard. If you later switch to a config object and want type-checking, wrap it with \`defineHexclaveConfig\` imported from the same \`@hexclave/js/config\` path (never from \`@hexclave/js\` directly, which would pull in the whole SDK and fail to load).
+
             Run your backend through the Hexclave CLI so it starts the local dashboard and injects the Hexclave environment variables:
 
             \`\`\`json package.json
@@ -642,6 +644,10 @@ function getSdkSetupPrompt(mainType) {
             },
           });
           \`\`\`
+
+          <Note>
+            The SDK auto-captures page-view and click analytics. To turn this off (and silence the \`ANALYTICS_NOT_ENABLED\` console warning that appears until you enable the Analytics app in your dashboard), pass \`analytics: { enabled: false }\`.
+          </Note>
         ` : ""}
 
         ${isMaybeBackend ? deindent`
@@ -699,12 +705,14 @@ function getSdkSetupPrompt(mainType) {
             First, create a \`hexclave.config.ts\` configuration file in the root directory of the workspace (or anywhere else):
 
             \`\`\`ts hexclave.config.ts
-            import type { HexclaveConfig } from "${packageName}";
+            import type { HexclaveConfig } from "${packageName}/config";
 
             // default: show-onboarding, which shows the onboarding flow for this project when Hexclave starts
             export const config: HexclaveConfig = "show-onboarding";
             \`\`\`
 
+            The \`/config\` entrypoint is lightweight and free of framework runtime code, so it can be safely loaded by tooling such as the local dashboard. If you later switch to a config object and want type-checking, wrap it with \`defineHexclaveConfig\` imported from the same \`${packageName}/config\` path (never from \`${packageName}\` directly, which would pull in the whole SDK and fail to load).
+
             To run your application with Hexclave, you can then start the dev environment and set environment variables expected by your application. Hexclave's CLI has a \`dev\` command does both of these, so let's install it as a dev dependency and wrap your existing \`dev\` script in your package.json:
 
             \`\`\`sh