feat(tanstack-react-start): Add keyless mode support #7518
Conversation
🦋 Changeset detectedLatest commit: c9a3576 The changes in this PR will be included in the next version bump. This PR includes changesets to release 19 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
📝 WalkthroughWalkthroughThe PR removes keyless environment drift telemetry and its metadata header utilities, deletes detectKeylessEnvDrift and its client/server invocations, and consolidates keyless behavior behind a lazily-initialized Pre-merge checks | ✅ 2 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (2 passed)
✏️ Tip: You can configure your own custom Pre-merge Checks in the settings. 📜 Recent review detailsConfiguration used: Repository YAML (base), Organization UI (inherited) Review profile: CHILL Plan: Pro Disabled knowledge base sources:
📒 Files selected for processing (1)
🧰 Additional context used📓 Path-based instructions (11)**/*.{js,jsx,ts,tsx}📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Files:
**/*.{js,jsx,ts,tsx,json,md,yml,yaml}📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Files:
**/*.{ts,tsx,js,jsx}📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Files:
**/*.{test,spec}.{ts,tsx,js,jsx}📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Files:
**/*.ts?(x)📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Files:
**/*.{test,spec,e2e}.{ts,tsx,js,jsx}📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Files:
**/*.{ts,tsx}📄 CodeRabbit inference engine (.cursor/rules/typescript.mdc)
Files:
**/*.test.{ts,tsx}📄 CodeRabbit inference engine (.cursor/rules/monorepo.mdc)
Files:
**/*.{js,ts,jsx,tsx}📄 CodeRabbit inference engine (.cursor/rules/monorepo.mdc)
Files:
**/*.{js,ts,jsx,tsx,json,md,yml,yaml}📄 CodeRabbit inference engine (.cursor/rules/monorepo.mdc)
Files:
**/*⚙️ CodeRabbit configuration file
Files:
🧬 Code graph analysis (1)integration/tests/tanstack-start/keyless.test.ts (4)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (29)
Warning Tools execution failed with the following error: Failed to run tools: 13 INTERNAL: Received RST_STREAM with code 2 (Internal server error) Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🧹 Nitpick comments (4)
packages/tanstack-react-start/src/server/keyless/index.ts (2)
14-31: Silent error swallowing may hide important failures.Both
createAccountlessApplicationandcompleteOnboardingcatch all errors and returnnullwithout logging. This makes debugging difficult when keyless mode silently fails to initialize or complete onboarding.Consider logging errors at an appropriate level before returning
null:Suggested improvement
async createAccountlessApplication(requestHeaders?: Headers) { try { return await clerkClient().__experimental_accountlessApplications.createAccountlessApplication({ requestHeaders, }); - } catch { + } catch (error) { + console.warn('[Clerk] Failed to create accountless application:', error); return null; } }, async completeOnboarding(requestHeaders?: Headers) { try { return await clerkClient().__experimental_accountlessApplications.completeAccountlessApplicationOnboarding({ requestHeaders, }); - } catch { + } catch (error) { + console.warn('[Clerk] Failed to complete onboarding:', error); return null; } },
9-37: Consider adding explicit return type annotation.Per coding guidelines, public APIs should have explicit return types. The function relies on type inference from
createKeylessService.-export function keyless() { +export function keyless(): ReturnType<typeof createKeylessService> {packages/tanstack-react-start/src/server/keyless/fileStorage.ts (2)
101-113: Silent failure on lock contention could cause unexpected behavior.When
write()fails to acquire the lock, it silently returns without writing. The caller has no way to know the operation was skipped. This could lead to stale configuration being used.Consider returning a boolean to indicate success, or throwing an error:
Suggested approach
- write(data: string): void { + write(data: string): boolean { if (!lock()) { - return; + return false; } try { ensureDirectoryExists(); updateGitignore(); writeReadme(); fs.writeFileSync(getConfigPath(), data, { encoding: 'utf8', mode: 0o600 }); + return true; } finally { unlock(); } },
64-76: Verify .gitignore handling for edge cases.The
updateGitignorefunction appends to.gitignorewithout checking if the file ends with a newline. If the existing.gitignoredoesn't end with a newline, the entry will be appended to the last line.Suggested fix
const content = fs.readFileSync(gitignorePath, 'utf-8'); if (!content.includes(entry)) { - fs.appendFileSync(gitignorePath, `\n# clerk configuration (can include secrets)\n${entry}\n`); + const prefix = content.length > 0 && !content.endsWith('\n') ? '\n' : ''; + fs.appendFileSync(gitignorePath, `${prefix}\n# clerk configuration (can include secrets)\n${entry}\n`); }
📜 Review details
Configuration used: Repository YAML (base), Organization UI (inherited)
Review profile: CHILL
Plan: Pro
Disabled knowledge base sources:
- Linear integration is disabled by default for public repositories
You can enable these sources in your CodeRabbit configuration.
📒 Files selected for processing (26)
packages/nextjs/src/app-router/client/ClerkProvider.tsx(0 hunks)packages/nextjs/src/app-router/keyless-actions.ts(2 hunks)packages/nextjs/src/app-router/server/ClerkProvider.tsx(0 hunks)packages/nextjs/src/app-router/server/keyless-provider.tsx(4 hunks)packages/nextjs/src/server/keyless-custom-headers.ts(0 hunks)packages/nextjs/src/server/keyless-log-cache.ts(1 hunks)packages/nextjs/src/server/keyless-node.ts(1 hunks)packages/nextjs/src/server/keyless-telemetry.ts(0 hunks)packages/nextjs/src/utils/feature-flags.ts(1 hunks)packages/shared/docs/use-clerk.md(0 hunks)packages/shared/docs/use-session-list.md(0 hunks)packages/shared/docs/use-session.md(0 hunks)packages/shared/docs/use-user.md(0 hunks)packages/shared/package.json(1 hunks)packages/shared/src/keyless/devCache.ts(1 hunks)packages/shared/src/keyless/index.ts(1 hunks)packages/shared/src/keyless/service.ts(1 hunks)packages/shared/src/keyless/types.ts(1 hunks)packages/shared/tsdown.config.mts(1 hunks)packages/tanstack-react-start/src/client/ClerkProvider.tsx(2 hunks)packages/tanstack-react-start/src/client/utils.ts(3 hunks)packages/tanstack-react-start/src/server/clerkMiddleware.ts(2 hunks)packages/tanstack-react-start/src/server/keyless/fileStorage.ts(1 hunks)packages/tanstack-react-start/src/server/keyless/index.ts(1 hunks)packages/tanstack-react-start/src/server/loadOptions.ts(3 hunks)packages/tanstack-react-start/src/utils/feature-flags.ts(1 hunks)
💤 Files with no reviewable changes (8)
- packages/nextjs/src/app-router/client/ClerkProvider.tsx
- packages/nextjs/src/server/keyless-custom-headers.ts
- packages/shared/docs/use-user.md
- packages/shared/docs/use-session-list.md
- packages/shared/docs/use-clerk.md
- packages/nextjs/src/server/keyless-telemetry.ts
- packages/shared/docs/use-session.md
- packages/nextjs/src/app-router/server/ClerkProvider.tsx
🧰 Additional context used
📓 Path-based instructions (16)
**/*.{js,jsx,ts,tsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
All code must pass ESLint checks with the project's configuration
Files:
packages/shared/src/keyless/types.tspackages/tanstack-react-start/src/utils/feature-flags.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/server/keyless/index.tspackages/nextjs/src/app-router/keyless-actions.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/nextjs/src/server/keyless-log-cache.tspackages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/shared/src/keyless/devCache.tspackages/nextjs/src/server/keyless-node.tspackages/shared/src/keyless/service.tspackages/tanstack-react-start/src/server/loadOptions.tspackages/nextjs/src/utils/feature-flags.tspackages/tanstack-react-start/src/client/utils.tspackages/tanstack-react-start/src/server/keyless/fileStorage.tspackages/nextjs/src/app-router/server/keyless-provider.tsx
**/*.{js,jsx,ts,tsx,json,md,yml,yaml}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Use Prettier for consistent code formatting
Files:
packages/shared/src/keyless/types.tspackages/shared/package.jsonpackages/tanstack-react-start/src/utils/feature-flags.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/server/keyless/index.tspackages/nextjs/src/app-router/keyless-actions.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/nextjs/src/server/keyless-log-cache.tspackages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/shared/src/keyless/devCache.tspackages/nextjs/src/server/keyless-node.tspackages/shared/src/keyless/service.tspackages/tanstack-react-start/src/server/loadOptions.tspackages/nextjs/src/utils/feature-flags.tspackages/tanstack-react-start/src/client/utils.tspackages/tanstack-react-start/src/server/keyless/fileStorage.tspackages/nextjs/src/app-router/server/keyless-provider.tsx
packages/**/src/**/*.{ts,tsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
TypeScript is required for all packages
Files:
packages/shared/src/keyless/types.tspackages/tanstack-react-start/src/utils/feature-flags.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/server/keyless/index.tspackages/nextjs/src/app-router/keyless-actions.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/nextjs/src/server/keyless-log-cache.tspackages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/shared/src/keyless/devCache.tspackages/nextjs/src/server/keyless-node.tspackages/shared/src/keyless/service.tspackages/tanstack-react-start/src/server/loadOptions.tspackages/nextjs/src/utils/feature-flags.tspackages/tanstack-react-start/src/client/utils.tspackages/tanstack-react-start/src/server/keyless/fileStorage.tspackages/nextjs/src/app-router/server/keyless-provider.tsx
**/*.{ts,tsx,js,jsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Follow established naming conventions (PascalCase for components, camelCase for variables)
Files:
packages/shared/src/keyless/types.tspackages/tanstack-react-start/src/utils/feature-flags.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/server/keyless/index.tspackages/nextjs/src/app-router/keyless-actions.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/nextjs/src/server/keyless-log-cache.tspackages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/shared/src/keyless/devCache.tspackages/nextjs/src/server/keyless-node.tspackages/shared/src/keyless/service.tspackages/tanstack-react-start/src/server/loadOptions.tspackages/nextjs/src/utils/feature-flags.tspackages/tanstack-react-start/src/client/utils.tspackages/tanstack-react-start/src/server/keyless/fileStorage.tspackages/nextjs/src/app-router/server/keyless-provider.tsx
packages/**/src/**/*.{ts,tsx,js,jsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
packages/**/src/**/*.{ts,tsx,js,jsx}: Maintain comprehensive JSDoc comments for public APIs
Use tree-shaking friendly exports
Validate all inputs and sanitize outputs
All public APIs must be documented with JSDoc
Use dynamic imports for optional features
Provide meaningful error messages to developers
Include error recovery suggestions where applicable
Log errors appropriately for debugging
Lazy load components and features when possible
Implement proper caching strategies
Use efficient data structures and algorithms
Implement proper logging with different levels
Files:
packages/shared/src/keyless/types.tspackages/tanstack-react-start/src/utils/feature-flags.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/server/keyless/index.tspackages/nextjs/src/app-router/keyless-actions.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/nextjs/src/server/keyless-log-cache.tspackages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/shared/src/keyless/devCache.tspackages/nextjs/src/server/keyless-node.tspackages/shared/src/keyless/service.tspackages/tanstack-react-start/src/server/loadOptions.tspackages/nextjs/src/utils/feature-flags.tspackages/tanstack-react-start/src/client/utils.tspackages/tanstack-react-start/src/server/keyless/fileStorage.tspackages/nextjs/src/app-router/server/keyless-provider.tsx
**/*.ts?(x)
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Use proper TypeScript error types
Files:
packages/shared/src/keyless/types.tspackages/tanstack-react-start/src/utils/feature-flags.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/server/keyless/index.tspackages/nextjs/src/app-router/keyless-actions.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/nextjs/src/server/keyless-log-cache.tspackages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/shared/src/keyless/devCache.tspackages/nextjs/src/server/keyless-node.tspackages/shared/src/keyless/service.tspackages/tanstack-react-start/src/server/loadOptions.tspackages/nextjs/src/utils/feature-flags.tspackages/tanstack-react-start/src/client/utils.tspackages/tanstack-react-start/src/server/keyless/fileStorage.tspackages/nextjs/src/app-router/server/keyless-provider.tsx
**/*.{ts,tsx}
📄 CodeRabbit inference engine (.cursor/rules/typescript.mdc)
**/*.{ts,tsx}: Always define explicit return types for functions, especially public APIs
Use proper type annotations for variables and parameters where inference isn't clear
Avoidanytype - preferunknownwhen type is uncertain, then narrow with type guards
Implement type guards forunknowntypes using the patternfunction isType(value: unknown): value is Type
Useinterfacefor object shapes that might be extended
Usetypefor unions, primitives, and computed types
Preferreadonlyproperties for immutable data structures
Useprivatefor internal implementation details in classes
Useprotectedfor inheritance hierarchies
Usepublicexplicitly for clarity in public APIs
Use mixins for shared behavior across unrelated classes in TypeScript
Use generic constraints with bounded type parameters like<T extends { id: string }>
Use utility types likeOmit,Partial, andPickfor data transformation instead of manual type construction
Use discriminated unions instead of boolean flags for state management and API responses
Use mapped types for transforming object types
Use conditional types for type-level logic
Leverage template literal types for string manipulation at the type level
Use ES6 imports/exports consistently
Use default exports sparingly, prefer named exports
Document functions with JSDoc comments including @param, @returns, @throws, and @example tags
Create custom error classes that extend Error for specific error types
Use the Result pattern for error handling instead of throwing exceptions
Use optional chaining (?.) and nullish coalescing (??) operators for safe property access
Let TypeScript infer obvious types to reduce verbosity
Useconst assertionswithas constfor literal types
Usesatisfiesoperator for type checking without widening types
Declare readonly arrays and objects for immutable data structures
Use spread operator and array spread for immutable updates instead of mutations
Use lazy loading for large types...
Files:
packages/shared/src/keyless/types.tspackages/tanstack-react-start/src/utils/feature-flags.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/server/keyless/index.tspackages/nextjs/src/app-router/keyless-actions.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/nextjs/src/server/keyless-log-cache.tspackages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/shared/src/keyless/devCache.tspackages/nextjs/src/server/keyless-node.tspackages/shared/src/keyless/service.tspackages/tanstack-react-start/src/server/loadOptions.tspackages/nextjs/src/utils/feature-flags.tspackages/tanstack-react-start/src/client/utils.tspackages/tanstack-react-start/src/server/keyless/fileStorage.tspackages/nextjs/src/app-router/server/keyless-provider.tsx
**/*.{js,ts,jsx,tsx}
📄 CodeRabbit inference engine (.cursor/rules/monorepo.mdc)
Use ESLint with custom configurations tailored for different package types
Files:
packages/shared/src/keyless/types.tspackages/tanstack-react-start/src/utils/feature-flags.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/server/keyless/index.tspackages/nextjs/src/app-router/keyless-actions.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/nextjs/src/server/keyless-log-cache.tspackages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/shared/src/keyless/devCache.tspackages/nextjs/src/server/keyless-node.tspackages/shared/src/keyless/service.tspackages/tanstack-react-start/src/server/loadOptions.tspackages/nextjs/src/utils/feature-flags.tspackages/tanstack-react-start/src/client/utils.tspackages/tanstack-react-start/src/server/keyless/fileStorage.tspackages/nextjs/src/app-router/server/keyless-provider.tsx
**/*.{js,ts,jsx,tsx,json,md,yml,yaml}
📄 CodeRabbit inference engine (.cursor/rules/monorepo.mdc)
Use Prettier for code formatting across all packages
Files:
packages/shared/src/keyless/types.tspackages/shared/package.jsonpackages/tanstack-react-start/src/utils/feature-flags.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/server/keyless/index.tspackages/nextjs/src/app-router/keyless-actions.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/nextjs/src/server/keyless-log-cache.tspackages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/shared/src/keyless/devCache.tspackages/nextjs/src/server/keyless-node.tspackages/shared/src/keyless/service.tspackages/tanstack-react-start/src/server/loadOptions.tspackages/nextjs/src/utils/feature-flags.tspackages/tanstack-react-start/src/client/utils.tspackages/tanstack-react-start/src/server/keyless/fileStorage.tspackages/nextjs/src/app-router/server/keyless-provider.tsx
**/*
⚙️ CodeRabbit configuration file
If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.
**/*: Only comment on issues that would block merging, ignore minor or stylistic concerns.
Restrict feedback to errors, security risks, or functionality-breaking problems.
Do not post comments on code style, formatting, or non-critical improvements.
Keep reviews short: flag only issues that make the PR unsafe to merge.
Group similar issues into a single comment instead of posting multiple notes.
Skip repetition: if a pattern repeats, mention it once at a summary level only.
Do not add general suggestions, focus strictly on merge-blocking concerns.
If there are no critical problems, respond with minimal approval (e.g., 'Looks good'). Do not add additional review.
Avoid line-by-line commentary unless it highlights a critical bug or security hole.
Highlight only issues that could cause runtime errors, data loss, or severe maintainability issues.
Ignore minor optimization opportunities, focus solely on correctness and safety.
Provide a top-level summary of critical blockers rather than detailed per-line notes.
Comment only when the issue must be resolved before merge, otherwise remain silent.
When in doubt, err on the side of fewer comments, brevity and blocking issues only.
Avoid posting any refactoring issues.
Files:
packages/shared/src/keyless/types.tspackages/shared/package.jsonpackages/tanstack-react-start/src/utils/feature-flags.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/server/keyless/index.tspackages/shared/tsdown.config.mtspackages/nextjs/src/app-router/keyless-actions.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/nextjs/src/server/keyless-log-cache.tspackages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/shared/src/keyless/devCache.tspackages/nextjs/src/server/keyless-node.tspackages/shared/src/keyless/service.tspackages/tanstack-react-start/src/server/loadOptions.tspackages/nextjs/src/utils/feature-flags.tspackages/tanstack-react-start/src/client/utils.tspackages/tanstack-react-start/src/server/keyless/fileStorage.tspackages/nextjs/src/app-router/server/keyless-provider.tsx
packages/*/package.json
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
packages/*/package.json: Packages should export TypeScript types alongside runtime code
Follow semantic versioning for all packagesAll packages must be published under @clerk namespace
packages/*/package.json: Framework packages should depend on@clerk/clerk-jsfor core functionality
@clerk/sharedshould be a common dependency for most packages in the monorepo
Files:
packages/shared/package.json
**/package.json
📄 CodeRabbit inference engine (.cursor/rules/global.mdc)
Use pnpm as the package manager for this monorepo
Files:
packages/shared/package.json
**/index.ts
📄 CodeRabbit inference engine (.cursor/rules/typescript.mdc)
Avoid barrel files (index.ts re-exports) as they can cause circular dependencies
Files:
packages/shared/src/keyless/index.tspackages/tanstack-react-start/src/server/keyless/index.ts
**/*.tsx
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
**/*.tsx: Use error boundaries in React components
Minimize re-renders in React components
**/*.tsx: Use proper type definitions for props and state in React components
Leverage TypeScript's type inference where possible in React components
Use proper event types for handlers in React components
Implement proper generic types for reusable React components
Use proper type guards for conditional rendering in React components
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/nextjs/src/app-router/server/keyless-provider.tsx
**/*.{md,tsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Update documentation for API changes
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/nextjs/src/app-router/server/keyless-provider.tsx
**/*.{jsx,tsx}
📄 CodeRabbit inference engine (.cursor/rules/react.mdc)
**/*.{jsx,tsx}: Always use functional components with hooks instead of class components
Follow PascalCase naming for components (e.g.,UserProfile,NavigationMenu)
Keep components focused on a single responsibility - split large components
Limit component size to 150-200 lines; extract logic into custom hooks
Use composition over inheritance - prefer smaller, composable components
Export components as named exports for better tree-shaking
One component per file with matching filename and component name
Separate UI components from business logic components
Use useState for simple state management in React components
Use useReducer for complex state logic in React components
Implement proper state initialization in React components
Use proper state updates with callbacks in React components
Implement proper state cleanup in React components
Use Context API for theme/authentication state management
Implement proper state persistence in React applications
Use React.memo for expensive components
Implement proper useCallback for handlers in React components
Use proper useMemo for expensive computations in React components
Implement proper virtualization for lists in React components
Use proper code splitting with React.lazy in React applications
Implement proper cleanup in useEffect hooks
Use proper refs for DOM access in React components
Implement proper event listener cleanup in React components
Use proper abort controllers for fetch in React components
Implement proper subscription cleanup in React components
Use proper HTML elements for semantic HTML in React components
Implement proper ARIA attributes for accessibility in React components
Use proper heading hierarchy in React components
Implement proper form labels in React components
Use proper button types in React components
Implement proper focus management for keyboard navigation in React components
Use proper keyboard shortcuts in React components
Implement proper tab order in React components
Use proper ...
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/nextjs/src/app-router/server/keyless-provider.tsx
🧬 Code graph analysis (5)
packages/tanstack-react-start/src/utils/feature-flags.ts (3)
packages/nextjs/src/server/constants.ts (1)
KEYLESS_DISABLED(27-27)packages/shared/src/underscore.ts (1)
isTruthy(118-152)packages/shared/src/getEnvVariable.ts (1)
getEnvVariable(18-50)
packages/tanstack-react-start/src/client/ClerkProvider.tsx (1)
packages/tanstack-react-start/src/client/utils.ts (2)
pickFromClerkInitState(6-56)mergeWithPublicEnvs(58-72)
packages/shared/src/keyless/devCache.ts (3)
packages/shared/src/keyless/index.ts (7)
ClerkDevCache(7-7)createClerkDevCache(3-3)createKeylessModeMessage(5-5)AccountlessApplication(12-12)PublicKeylessApplication(12-12)createConfirmationMessage(4-4)clerkDevelopmentCache(2-2)packages/nextjs/src/server/keyless-log-cache.ts (4)
createClerkDevCache(7-7)createKeylessModeMessage(9-9)createConfirmationMessage(8-8)clerkDevelopmentCache(6-6)packages/shared/src/keyless/types.ts (2)
AccountlessApplication(5-10)PublicKeylessApplication(15-15)
packages/tanstack-react-start/src/server/loadOptions.ts (3)
packages/tanstack-react-start/src/utils/feature-flags.ts (1)
canUseKeyless(11-11)packages/clerk-js/src/core/clerk.ts (1)
isSatellite(324-329)packages/shared/src/keys.ts (1)
isDevelopmentFromSecretKey(230-232)
packages/nextjs/src/utils/feature-flags.ts (1)
packages/nextjs/src/server/constants.ts (1)
KEYLESS_DISABLED(27-27)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (15)
- GitHub Check: Integration Tests (nuxt, chrome)
- GitHub Check: Integration Tests (nextjs, chrome, 16)
- GitHub Check: Integration Tests (billing, chrome, RQ)
- GitHub Check: Integration Tests (handshake, chrome)
- GitHub Check: Integration Tests (react-router, chrome)
- GitHub Check: Integration Tests (quickstart, chrome, 15)
- GitHub Check: Integration Tests (tanstack-react-start, chrome)
- GitHub Check: Integration Tests (nextjs, chrome, 15)
- GitHub Check: Integration Tests (generic, chrome)
- GitHub Check: Integration Tests (handshake:staging, chrome)
- GitHub Check: Integration Tests (nextjs, chrome, 16, RQ)
- GitHub Check: Integration Tests (astro, chrome)
- GitHub Check: Integration Tests (machine, chrome, RQ)
- GitHub Check: semgrep-cloud-platform/scan
- GitHub Check: Analyze (javascript-typescript)
🔇 Additional comments (18)
packages/shared/tsdown.config.mts (1)
52-52: LGTM!Build configuration correctly adds the keyless module entry point.
packages/shared/src/keyless/devCache.ts (1)
1-109: LGTM!The development cache implementation with throttled logging and async caching is well-structured. The singleton pattern via
globalThisis appropriate for cross-module state in development.packages/tanstack-react-start/src/utils/feature-flags.ts (1)
1-11: LGTM!Feature flag correctly restricts keyless mode to development environments with an opt-out mechanism.
packages/tanstack-react-start/src/client/ClerkProvider.tsx (1)
36-73: LGTM!Keyless mode props are correctly conditionally passed to the provider only when available.
packages/shared/src/keyless/types.ts (1)
1-15: LGTM!Type definitions correctly separate full application data from public-facing data that excludes the secret key.
packages/nextjs/src/app-router/keyless-actions.ts (1)
51-93: LGTM!The migration to the new
keyless()service API with dynamic imports is implemented correctly. Error handling appropriately catches failures.packages/nextjs/src/utils/feature-flags.ts (1)
1-8: LGTM!The refactoring to use the shared
canUseKeylessutility centralizes the keyless logic appropriately. The public API remains unchanged.packages/tanstack-react-start/src/server/loadOptions.ts (1)
33-47: LGTM!The keyless mode guard correctly allows missing
secretKeywhencanUseKeylessis true. The addedsecretKeycheck on line 44 properly prevents callingisDevelopmentFromSecretKeywith undefined.packages/shared/package.json (1)
53-62: LGTM!The new
./keylessexport follows the established pattern used by other exports in this package.packages/tanstack-react-start/src/server/clerkMiddleware.ts (2)
16-46: LGTM!The keyless mode integration is well-structured. The flow correctly:
- Only activates when
canUseKeylessis true and keys are missing- Gracefully handles null response from
getOrCreateKeys()- Preserves user-provided keys via the
||operator
71-78: Consider using proper type augmentation for internal state.The double type cast
(clerkInitialState as Record<string, unknown>).__internal_clerk_stateis functional but loses type safety. Not blocking, but worth noting for future type improvements.packages/tanstack-react-start/src/client/utils.ts (1)
6-55: LGTM!The keyless URL fields are correctly added as optional properties and properly extracted from the clerk init state.
packages/shared/src/keyless/index.ts (1)
1-12: LGTM!This barrel file serves as the public API entry point for the
@clerk/shared/keylessmodule, consolidating exports from distinct leaf modules. The separation of runtime exports and type-only exports is clean.packages/nextjs/src/server/keyless-log-cache.ts (1)
1-10: LGTM!Clean re-export maintaining backward compatibility with existing imports while consolidating implementation in the shared module.
packages/nextjs/src/app-router/server/keyless-provider.tsx (3)
20-22: LGTM!Correctly migrated to the new keyless service API with appropriate optional chaining for null safety.
45-47: LGTM!Migration to
getOrCreateKeys()aligns with the new keyless service interface.
84-100: LGTM!The updated key retrieval and simplified onboarding call (without requestHeaders) align with the broader metadata header removal in this refactor.
packages/tanstack-react-start/src/server/keyless/fileStorage.ts (1)
1-128: Tests should be added for the file storage implementation.This file contains critical functionality (locking, file I/O, gitignore manipulation) that would benefit from unit tests covering:
- Lock acquisition/release
- Concurrent access scenarios
- Edge cases (missing directories, permission errors)
- Gitignore update logic
packages/tanstack-react-start/src/server/keyless/fileStorage.ts
Outdated
Show resolved
Hide resolved
@clerk/agent-toolkit
@clerk/astro
@clerk/backend
@clerk/chrome-extension
@clerk/clerk-js
@clerk/dev-cli
@clerk/expo
@clerk/expo-passkeys
@clerk/express
@clerk/fastify
@clerk/localizations
@clerk/nextjs
@clerk/nuxt
@clerk/react
@clerk/react-router
@clerk/shared
@clerk/tanstack-react-start
@clerk/testing
@clerk/ui
@clerk/upgrade
@clerk/vue
commit: |
github-actions
bot
added
clerk-js
react
actions
backend
localizations
integration
labels
- Fix import sorting in loadOptions.ts - Remove orphaned keyless-custom-headers.test.ts that referenced deleted module
There was a problem hiding this comment.
Actionable comments posted: 4
Fix all issues with AI Agents 🤖
In @.changeset/fix-react-peer-dependency-ranges.md:
- Around line 1-13: The changeset description falsely states React 19 peer
ranges were changed from `^` to `~`; update the
.changeset/fix-react-peer-dependency-ranges.md description to accurately state
that pnpm-workspace.yaml already uses `~` for React 19 (e.g., the existing
`react: ^18.0.0 || ~19.0.3 || ~19.1.4 || ~19.2.3 || ~19.3.0-0` pattern) and
either describe the real intent of this changeset (e.g., aligning package peer
ranges to the workspace policy or patching other packages) or remove the
misleading claim about changing `^` to `~` for React 19.
In @integration/presets/utils.ts:
- Around line 37-51: The exported function linkPackage lacks an explicit return
type; update its signature to include a return type (string) — e.g. change
export function linkPackage(pkg: string) to export function linkPackage(pkg:
string): string — and ensure all branches (CI '*' branch,
PACKAGES_REQUIRING_TARBALL branch calling createPackageTarball, and the link:...
return) return strings (verify createPackageTarball's signature/return type if
needed).
In @packages/localizations/src/sr-RS.ts:
- Around line 1356-1365: The waitlist translation entries (keys actionLink,
actionText, formButton, subtitle, title inside the waitlist object, and
success.message, success.subtitle, success.title) are written in Cyrillic while
the rest of sr-RS uses Latin; update those string values to their Latin-script
Serbian equivalents (e.g., replace "Пријави се", "Већ имаш приступ?", "Придружи
се листи чекања", "Унеси своју е-пошту..." and the success strings) so they
match the file's Latin script convention and preserve original meanings and
punctuation.
🧹 Nitpick comments (2)
.changeset/chatty-tigers-see.md (1)
6-6: Make the changeset description more specific and actionable.The current description is generic and focuses on internal implementation ("edge-based token generation") rather than user-facing benefits or breaking changes. Consider clarifying:
- What user experience improvement this provides (e.g., "Users remain authenticated even if Clerk's primary service is temporarily unavailable")
- Whether this is a breaking change or purely additive
- Any migration steps for developers integrating keyless mode
🔎 Example of a more specific description
-Improves resilience by keeping users logged in when Clerk's origin is temporarily unavailable using edge-based token generation +Improves resilience by keeping users logged in when Clerk's origin is temporarily unavailable, using edge-based token generation for the new keyless mode. Enables development and deployment without API keys.packages/ui/src/components/SessionTasks/tasks/TaskChooseOrganization/index.tsx (1)
130-140: Consider improving HOC type safety.The current HOC typing may not properly infer component props in some cases. The return type should be explicitly typed for better TypeScript support.
🔎 Suggested improvement
-export const withOrganizationCreationEnabledGuard = <T,>(Component: ComponentType<T>) => { - return (props: T) => { +export const withOrganizationCreationEnabledGuard = <T extends object>(Component: ComponentType<T>): ComponentType<T> => { + return function OrganizationCreationEnabledGuard(props: T) { const { user } = useUser(); if (!user?.createOrganizationEnabled) { return <OrganizationCreationDisabledScreen />; } return <Component {...props} />; }; };This adds:
extends objectconstraint for better type inference- Explicit return type
ComponentType<T>- Named function for better debugging in React DevTools
brkalow
force-pushed
the
brk.feat/keyless-tanstack-start
branch
from
8a8199c to
ff86a23
Compare
There was a problem hiding this comment.
Actionable comments posted: 1
📜 Review details
Configuration used: Repository YAML (base), Organization UI (inherited)
Review profile: CHILL
Plan: Pro
Disabled knowledge base sources:
- Linear integration is disabled by default for public repositories
You can enable these sources in your CodeRabbit configuration.
📒 Files selected for processing (26)
packages/nextjs/src/__tests__/keyless-custom-headers.test.tspackages/nextjs/src/app-router/client/ClerkProvider.tsxpackages/nextjs/src/app-router/keyless-actions.tspackages/nextjs/src/app-router/server/ClerkProvider.tsxpackages/nextjs/src/app-router/server/keyless-provider.tsxpackages/nextjs/src/server/keyless-custom-headers.tspackages/nextjs/src/server/keyless-log-cache.tspackages/nextjs/src/server/keyless-node.tspackages/nextjs/src/server/keyless-telemetry.tspackages/shared/docs/use-clerk.mdpackages/shared/docs/use-session-list.mdpackages/shared/docs/use-session.mdpackages/shared/docs/use-user.mdpackages/shared/package.jsonpackages/shared/src/keyless/devCache.tspackages/shared/src/keyless/index.tspackages/shared/src/keyless/service.tspackages/shared/src/keyless/types.tspackages/shared/tsdown.config.mtspackages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/tanstack-react-start/src/client/utils.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/tanstack-react-start/src/server/keyless/fileStorage.tspackages/tanstack-react-start/src/server/keyless/index.tspackages/tanstack-react-start/src/server/loadOptions.tspackages/tanstack-react-start/src/utils/feature-flags.ts
💤 Files with no reviewable changes (9)
- packages/shared/docs/use-user.md
- packages/nextjs/src/tests/keyless-custom-headers.test.ts
- packages/shared/docs/use-session.md
- packages/shared/docs/use-session-list.md
- packages/nextjs/src/app-router/server/ClerkProvider.tsx
- packages/nextjs/src/server/keyless-custom-headers.ts
- packages/nextjs/src/app-router/client/ClerkProvider.tsx
- packages/nextjs/src/server/keyless-telemetry.ts
- packages/shared/docs/use-clerk.md
🚧 Files skipped from review as they are similar to previous changes (9)
- packages/shared/src/keyless/index.ts
- packages/tanstack-react-start/src/server/keyless/fileStorage.ts
- packages/nextjs/src/server/keyless-log-cache.ts
- packages/shared/src/keyless/types.ts
- packages/shared/src/keyless/service.ts
- packages/shared/tsdown.config.mts
- packages/tanstack-react-start/src/client/utils.ts
- packages/tanstack-react-start/src/server/loadOptions.ts
- packages/shared/src/keyless/devCache.ts
🧰 Additional context used
📓 Path-based instructions (16)
**/*.{js,jsx,ts,tsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
All code must pass ESLint checks with the project's configuration
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/tanstack-react-start/src/utils/feature-flags.tspackages/nextjs/src/app-router/keyless-actions.tspackages/nextjs/src/server/keyless-node.tspackages/nextjs/src/app-router/server/keyless-provider.tsxpackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/tanstack-react-start/src/server/keyless/index.ts
**/*.{js,jsx,ts,tsx,json,md,yml,yaml}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Use Prettier for consistent code formatting
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/tanstack-react-start/src/utils/feature-flags.tspackages/nextjs/src/app-router/keyless-actions.tspackages/nextjs/src/server/keyless-node.tspackages/nextjs/src/app-router/server/keyless-provider.tsxpackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/package.jsonpackages/tanstack-react-start/src/server/keyless/index.ts
packages/**/src/**/*.{ts,tsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
TypeScript is required for all packages
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/tanstack-react-start/src/utils/feature-flags.tspackages/nextjs/src/app-router/keyless-actions.tspackages/nextjs/src/server/keyless-node.tspackages/nextjs/src/app-router/server/keyless-provider.tsxpackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/tanstack-react-start/src/server/keyless/index.ts
**/*.{ts,tsx,js,jsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Follow established naming conventions (PascalCase for components, camelCase for variables)
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/tanstack-react-start/src/utils/feature-flags.tspackages/nextjs/src/app-router/keyless-actions.tspackages/nextjs/src/server/keyless-node.tspackages/nextjs/src/app-router/server/keyless-provider.tsxpackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/tanstack-react-start/src/server/keyless/index.ts
packages/**/src/**/*.{ts,tsx,js,jsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
packages/**/src/**/*.{ts,tsx,js,jsx}: Maintain comprehensive JSDoc comments for public APIs
Use tree-shaking friendly exports
Validate all inputs and sanitize outputs
All public APIs must be documented with JSDoc
Use dynamic imports for optional features
Provide meaningful error messages to developers
Include error recovery suggestions where applicable
Log errors appropriately for debugging
Lazy load components and features when possible
Implement proper caching strategies
Use efficient data structures and algorithms
Implement proper logging with different levels
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/tanstack-react-start/src/utils/feature-flags.tspackages/nextjs/src/app-router/keyless-actions.tspackages/nextjs/src/server/keyless-node.tspackages/nextjs/src/app-router/server/keyless-provider.tsxpackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/tanstack-react-start/src/server/keyless/index.ts
**/*.ts?(x)
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Use proper TypeScript error types
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/tanstack-react-start/src/utils/feature-flags.tspackages/nextjs/src/app-router/keyless-actions.tspackages/nextjs/src/server/keyless-node.tspackages/nextjs/src/app-router/server/keyless-provider.tsxpackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/tanstack-react-start/src/server/keyless/index.ts
**/*.tsx
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
**/*.tsx: Use error boundaries in React components
Minimize re-renders in React components
**/*.tsx: Use proper type definitions for props and state in React components
Leverage TypeScript's type inference where possible in React components
Use proper event types for handlers in React components
Implement proper generic types for reusable React components
Use proper type guards for conditional rendering in React components
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/nextjs/src/app-router/server/keyless-provider.tsx
**/*.{md,tsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Update documentation for API changes
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/nextjs/src/app-router/server/keyless-provider.tsx
**/*.{jsx,tsx}
📄 CodeRabbit inference engine (.cursor/rules/react.mdc)
**/*.{jsx,tsx}: Always use functional components with hooks instead of class components
Follow PascalCase naming for components (e.g.,UserProfile,NavigationMenu)
Keep components focused on a single responsibility - split large components
Limit component size to 150-200 lines; extract logic into custom hooks
Use composition over inheritance - prefer smaller, composable components
Export components as named exports for better tree-shaking
One component per file with matching filename and component name
Separate UI components from business logic components
Use useState for simple state management in React components
Use useReducer for complex state logic in React components
Implement proper state initialization in React components
Use proper state updates with callbacks in React components
Implement proper state cleanup in React components
Use Context API for theme/authentication state management
Implement proper state persistence in React applications
Use React.memo for expensive components
Implement proper useCallback for handlers in React components
Use proper useMemo for expensive computations in React components
Implement proper virtualization for lists in React components
Use proper code splitting with React.lazy in React applications
Implement proper cleanup in useEffect hooks
Use proper refs for DOM access in React components
Implement proper event listener cleanup in React components
Use proper abort controllers for fetch in React components
Implement proper subscription cleanup in React components
Use proper HTML elements for semantic HTML in React components
Implement proper ARIA attributes for accessibility in React components
Use proper heading hierarchy in React components
Implement proper form labels in React components
Use proper button types in React components
Implement proper focus management for keyboard navigation in React components
Use proper keyboard shortcuts in React components
Implement proper tab order in React components
Use proper ...
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/nextjs/src/app-router/server/keyless-provider.tsx
**/*.{ts,tsx}
📄 CodeRabbit inference engine (.cursor/rules/typescript.mdc)
**/*.{ts,tsx}: Always define explicit return types for functions, especially public APIs
Use proper type annotations for variables and parameters where inference isn't clear
Avoidanytype - preferunknownwhen type is uncertain, then narrow with type guards
Implement type guards forunknowntypes using the patternfunction isType(value: unknown): value is Type
Useinterfacefor object shapes that might be extended
Usetypefor unions, primitives, and computed types
Preferreadonlyproperties for immutable data structures
Useprivatefor internal implementation details in classes
Useprotectedfor inheritance hierarchies
Usepublicexplicitly for clarity in public APIs
Use mixins for shared behavior across unrelated classes in TypeScript
Use generic constraints with bounded type parameters like<T extends { id: string }>
Use utility types likeOmit,Partial, andPickfor data transformation instead of manual type construction
Use discriminated unions instead of boolean flags for state management and API responses
Use mapped types for transforming object types
Use conditional types for type-level logic
Leverage template literal types for string manipulation at the type level
Use ES6 imports/exports consistently
Use default exports sparingly, prefer named exports
Document functions with JSDoc comments including @param, @returns, @throws, and @example tags
Create custom error classes that extend Error for specific error types
Use the Result pattern for error handling instead of throwing exceptions
Use optional chaining (?.) and nullish coalescing (??) operators for safe property access
Let TypeScript infer obvious types to reduce verbosity
Useconst assertionswithas constfor literal types
Usesatisfiesoperator for type checking without widening types
Declare readonly arrays and objects for immutable data structures
Use spread operator and array spread for immutable updates instead of mutations
Use lazy loading for large types...
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/tanstack-react-start/src/utils/feature-flags.tspackages/nextjs/src/app-router/keyless-actions.tspackages/nextjs/src/server/keyless-node.tspackages/nextjs/src/app-router/server/keyless-provider.tsxpackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/tanstack-react-start/src/server/keyless/index.ts
**/*.{js,ts,jsx,tsx}
📄 CodeRabbit inference engine (.cursor/rules/monorepo.mdc)
Use ESLint with custom configurations tailored for different package types
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/tanstack-react-start/src/utils/feature-flags.tspackages/nextjs/src/app-router/keyless-actions.tspackages/nextjs/src/server/keyless-node.tspackages/nextjs/src/app-router/server/keyless-provider.tsxpackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/tanstack-react-start/src/server/keyless/index.ts
**/*.{js,ts,jsx,tsx,json,md,yml,yaml}
📄 CodeRabbit inference engine (.cursor/rules/monorepo.mdc)
Use Prettier for code formatting across all packages
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/tanstack-react-start/src/utils/feature-flags.tspackages/nextjs/src/app-router/keyless-actions.tspackages/nextjs/src/server/keyless-node.tspackages/nextjs/src/app-router/server/keyless-provider.tsxpackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/package.jsonpackages/tanstack-react-start/src/server/keyless/index.ts
**/*
⚙️ CodeRabbit configuration file
If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.
**/*: Only comment on issues that would block merging, ignore minor or stylistic concerns.
Restrict feedback to errors, security risks, or functionality-breaking problems.
Do not post comments on code style, formatting, or non-critical improvements.
Keep reviews short: flag only issues that make the PR unsafe to merge.
Group similar issues into a single comment instead of posting multiple notes.
Skip repetition: if a pattern repeats, mention it once at a summary level only.
Do not add general suggestions, focus strictly on merge-blocking concerns.
If there are no critical problems, respond with minimal approval (e.g., 'Looks good'). Do not add additional review.
Avoid line-by-line commentary unless it highlights a critical bug or security hole.
Highlight only issues that could cause runtime errors, data loss, or severe maintainability issues.
Ignore minor optimization opportunities, focus solely on correctness and safety.
Provide a top-level summary of critical blockers rather than detailed per-line notes.
Comment only when the issue must be resolved before merge, otherwise remain silent.
When in doubt, err on the side of fewer comments, brevity and blocking issues only.
Avoid posting any refactoring issues.
Files:
packages/tanstack-react-start/src/client/ClerkProvider.tsxpackages/tanstack-react-start/src/utils/feature-flags.tspackages/nextjs/src/app-router/keyless-actions.tspackages/nextjs/src/server/keyless-node.tspackages/nextjs/src/app-router/server/keyless-provider.tsxpackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/package.jsonpackages/tanstack-react-start/src/server/keyless/index.ts
packages/*/package.json
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
packages/*/package.json: Packages should export TypeScript types alongside runtime code
Follow semantic versioning for all packagesAll packages must be published under @clerk namespace
packages/*/package.json: Framework packages should depend on@clerk/clerk-jsfor core functionality
@clerk/sharedshould be a common dependency for most packages in the monorepo
Files:
packages/shared/package.json
**/package.json
📄 CodeRabbit inference engine (.cursor/rules/global.mdc)
Use pnpm as the package manager for this monorepo
Files:
packages/shared/package.json
**/index.ts
📄 CodeRabbit inference engine (.cursor/rules/typescript.mdc)
Avoid barrel files (index.ts re-exports) as they can cause circular dependencies
Files:
packages/tanstack-react-start/src/server/keyless/index.ts
🧬 Code graph analysis (4)
packages/tanstack-react-start/src/client/ClerkProvider.tsx (1)
packages/tanstack-react-start/src/client/utils.ts (2)
pickFromClerkInitState(6-56)mergeWithPublicEnvs(58-72)
packages/tanstack-react-start/src/utils/feature-flags.ts (3)
packages/nextjs/src/server/constants.ts (1)
KEYLESS_DISABLED(27-27)packages/shared/src/underscore.ts (1)
isTruthy(118-152)packages/shared/src/getEnvVariable.ts (1)
getEnvVariable(18-50)
packages/tanstack-react-start/src/server/clerkMiddleware.ts (5)
packages/tanstack-react-start/src/server/types.ts (1)
ClerkMiddlewareOptions(11-24)packages/tanstack-react-start/src/server/utils/index.ts (1)
patchRequest(62-77)packages/tanstack-react-start/src/utils/feature-flags.ts (1)
canUseKeyless(11-11)packages/tanstack-react-start/src/server/keyless/index.ts (1)
keyless(9-37)packages/tanstack-react-start/src/server/loadOptions.ts (1)
loadOptions(13-63)
packages/tanstack-react-start/src/server/keyless/index.ts (1)
packages/tanstack-react-start/src/server/keyless/fileStorage.ts (1)
createFileStorage(16-128)
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (25)
- GitHub Check: Integration Tests (billing, chrome)
- GitHub Check: Integration Tests (billing, chrome, RQ)
- GitHub Check: Integration Tests (machine, chrome, RQ)
- GitHub Check: Integration Tests (quickstart, chrome, 16)
- GitHub Check: Integration Tests (nextjs, chrome, 16, RQ)
- GitHub Check: Integration Tests (nextjs, chrome, 16)
- GitHub Check: Integration Tests (nextjs, chrome, 15)
- GitHub Check: Integration Tests (nuxt, chrome)
- GitHub Check: Integration Tests (react-router, chrome)
- GitHub Check: Integration Tests (quickstart, chrome, 15)
- GitHub Check: Integration Tests (machine, chrome)
- GitHub Check: Integration Tests (tanstack-react-start, chrome)
- GitHub Check: Integration Tests (handshake:staging, chrome)
- GitHub Check: Integration Tests (custom, chrome)
- GitHub Check: Integration Tests (handshake, chrome)
- GitHub Check: Integration Tests (sessions, chrome)
- GitHub Check: Integration Tests (vue, chrome)
- GitHub Check: Integration Tests (ap-flows, chrome)
- GitHub Check: Integration Tests (express, chrome)
- GitHub Check: Integration Tests (generic, chrome)
- GitHub Check: Integration Tests (astro, chrome)
- GitHub Check: Integration Tests (sessions:staging, chrome)
- GitHub Check: Integration Tests (localhost, chrome)
- GitHub Check: Analyze (javascript-typescript)
- GitHub Check: semgrep-cloud-platform/scan
🔇 Additional comments (6)
packages/shared/package.json (1)
53-62: Looks good.The new keyless export follows the correct pattern and is consistent with other exports in the package.
packages/tanstack-react-start/src/client/ClerkProvider.tsx (1)
36-51: LGTM!The keyless mode integration correctly extracts keyless URLs from the clerk init state and conditionally passes them to the React ClerkProvider. The conditional object construction and spread pattern is appropriate.
Also applies to: 73-73
packages/tanstack-react-start/src/utils/feature-flags.ts (1)
1-11: LGTM!The feature flag correctly uses the Vite-specific environment variable prefix and follows the same pattern as the Next.js implementation. The JSDoc documentation clearly explains the behavior.
packages/tanstack-react-start/src/server/keyless/index.ts (1)
9-37: LGTM!The lazy singleton pattern is correctly implemented. The API wrappers appropriately catch errors and return null, which is suitable for the non-critical keyless development mode where failures should not block the application.
packages/tanstack-react-start/src/server/clerkMiddleware.ts (2)
16-46: LGTM!The keyless mode integration correctly attempts to retrieve or create keys when enabled and keys are missing. The fallback logic properly merges keyless-derived credentials with explicit options before passing to
loadOptions.
71-78: LGTM!The keyless URLs are correctly propagated to the internal clerk state for downstream consumption by the ClerkProvider on the client side.
There was a problem hiding this comment.
Actionable comments posted: 1
📜 Review details
Configuration used: Repository YAML (base), Organization UI (inherited)
Review profile: CHILL
Plan: Pro
Disabled knowledge base sources:
- Linear integration is disabled by default for public repositories
You can enable these sources in your CodeRabbit configuration.
📒 Files selected for processing (6)
packages/nextjs/src/server/keyless-node.tspackages/shared/src/keyless/index.tspackages/shared/src/keyless/types.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/tanstack-react-start/src/server/keyless/fileStorage.tspackages/tanstack-react-start/src/utils/feature-flags.ts
🚧 Files skipped from review as they are similar to previous changes (2)
- packages/tanstack-react-start/src/server/keyless/fileStorage.ts
- packages/shared/src/keyless/types.ts
🧰 Additional context used
📓 Path-based instructions (11)
**/*.{js,jsx,ts,tsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
All code must pass ESLint checks with the project's configuration
Files:
packages/nextjs/src/server/keyless-node.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/utils/feature-flags.ts
**/*.{js,jsx,ts,tsx,json,md,yml,yaml}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Use Prettier for consistent code formatting
Files:
packages/nextjs/src/server/keyless-node.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/utils/feature-flags.ts
packages/**/src/**/*.{ts,tsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
TypeScript is required for all packages
Files:
packages/nextjs/src/server/keyless-node.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/utils/feature-flags.ts
**/*.{ts,tsx,js,jsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Follow established naming conventions (PascalCase for components, camelCase for variables)
Files:
packages/nextjs/src/server/keyless-node.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/utils/feature-flags.ts
packages/**/src/**/*.{ts,tsx,js,jsx}
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
packages/**/src/**/*.{ts,tsx,js,jsx}: Maintain comprehensive JSDoc comments for public APIs
Use tree-shaking friendly exports
Validate all inputs and sanitize outputs
All public APIs must be documented with JSDoc
Use dynamic imports for optional features
Provide meaningful error messages to developers
Include error recovery suggestions where applicable
Log errors appropriately for debugging
Lazy load components and features when possible
Implement proper caching strategies
Use efficient data structures and algorithms
Implement proper logging with different levels
Files:
packages/nextjs/src/server/keyless-node.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/utils/feature-flags.ts
**/*.ts?(x)
📄 CodeRabbit inference engine (.cursor/rules/development.mdc)
Use proper TypeScript error types
Files:
packages/nextjs/src/server/keyless-node.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/utils/feature-flags.ts
**/*.{ts,tsx}
📄 CodeRabbit inference engine (.cursor/rules/typescript.mdc)
**/*.{ts,tsx}: Always define explicit return types for functions, especially public APIs
Use proper type annotations for variables and parameters where inference isn't clear
Avoidanytype - preferunknownwhen type is uncertain, then narrow with type guards
Implement type guards forunknowntypes using the patternfunction isType(value: unknown): value is Type
Useinterfacefor object shapes that might be extended
Usetypefor unions, primitives, and computed types
Preferreadonlyproperties for immutable data structures
Useprivatefor internal implementation details in classes
Useprotectedfor inheritance hierarchies
Usepublicexplicitly for clarity in public APIs
Use mixins for shared behavior across unrelated classes in TypeScript
Use generic constraints with bounded type parameters like<T extends { id: string }>
Use utility types likeOmit,Partial, andPickfor data transformation instead of manual type construction
Use discriminated unions instead of boolean flags for state management and API responses
Use mapped types for transforming object types
Use conditional types for type-level logic
Leverage template literal types for string manipulation at the type level
Use ES6 imports/exports consistently
Use default exports sparingly, prefer named exports
Document functions with JSDoc comments including @param, @returns, @throws, and @example tags
Create custom error classes that extend Error for specific error types
Use the Result pattern for error handling instead of throwing exceptions
Use optional chaining (?.) and nullish coalescing (??) operators for safe property access
Let TypeScript infer obvious types to reduce verbosity
Useconst assertionswithas constfor literal types
Usesatisfiesoperator for type checking without widening types
Declare readonly arrays and objects for immutable data structures
Use spread operator and array spread for immutable updates instead of mutations
Use lazy loading for large types...
Files:
packages/nextjs/src/server/keyless-node.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/utils/feature-flags.ts
**/*.{js,ts,jsx,tsx}
📄 CodeRabbit inference engine (.cursor/rules/monorepo.mdc)
Use ESLint with custom configurations tailored for different package types
Files:
packages/nextjs/src/server/keyless-node.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/utils/feature-flags.ts
**/*.{js,ts,jsx,tsx,json,md,yml,yaml}
📄 CodeRabbit inference engine (.cursor/rules/monorepo.mdc)
Use Prettier for code formatting across all packages
Files:
packages/nextjs/src/server/keyless-node.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/utils/feature-flags.ts
**/*
⚙️ CodeRabbit configuration file
If there are no tests added or modified as part of the PR, please suggest that tests be added to cover the changes.
**/*: Only comment on issues that would block merging, ignore minor or stylistic concerns.
Restrict feedback to errors, security risks, or functionality-breaking problems.
Do not post comments on code style, formatting, or non-critical improvements.
Keep reviews short: flag only issues that make the PR unsafe to merge.
Group similar issues into a single comment instead of posting multiple notes.
Skip repetition: if a pattern repeats, mention it once at a summary level only.
Do not add general suggestions, focus strictly on merge-blocking concerns.
If there are no critical problems, respond with minimal approval (e.g., 'Looks good'). Do not add additional review.
Avoid line-by-line commentary unless it highlights a critical bug or security hole.
Highlight only issues that could cause runtime errors, data loss, or severe maintainability issues.
Ignore minor optimization opportunities, focus solely on correctness and safety.
Provide a top-level summary of critical blockers rather than detailed per-line notes.
Comment only when the issue must be resolved before merge, otherwise remain silent.
When in doubt, err on the side of fewer comments, brevity and blocking issues only.
Avoid posting any refactoring issues.
Files:
packages/nextjs/src/server/keyless-node.tspackages/tanstack-react-start/src/server/clerkMiddleware.tspackages/shared/src/keyless/index.tspackages/tanstack-react-start/src/utils/feature-flags.ts
**/index.ts
📄 CodeRabbit inference engine (.cursor/rules/typescript.mdc)
Avoid barrel files (index.ts re-exports) as they can cause circular dependencies
Files:
packages/shared/src/keyless/index.ts
🧬 Code graph analysis (2)
packages/nextjs/src/server/keyless-node.ts (5)
packages/tanstack-react-start/src/server/keyless/fileStorage.ts (1)
createFileStorage(12-19)packages/nextjs/src/server/fs/utils.ts (3)
nodeFsOrThrow(29-29)nodePathOrThrow(29-29)nodeCwdOrThrow(29-29)packages/shared/src/keyless/index.ts (2)
createNodeFileStorage(9-9)createKeylessService(12-12)packages/shared/src/keyless/service.ts (1)
createKeylessService(148-206)packages/nextjs/src/server/createClerkClient.ts (1)
createClerkClientWithOptions(34-35)
packages/tanstack-react-start/src/utils/feature-flags.ts (3)
packages/nextjs/src/server/constants.ts (1)
KEYLESS_DISABLED(27-27)packages/shared/src/underscore.ts (1)
isTruthy(118-152)packages/shared/src/getEnvVariable.ts (1)
getEnvVariable(18-50)
🪛 GitHub Actions: CI
packages/shared/src/keyless/index.ts
[error] 1-1: @clerk/shared#build: pnpm run build exited with code 1.
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)
- GitHub Check: Analyze (javascript-typescript)
- GitHub Check: semgrep-cloud-platform/scan
🔇 Additional comments (1)
packages/nextjs/src/server/keyless-node.ts (1)
24-47: No action needed. TheframeworkVersionproperty is explicitly optional inKeylessServiceOptions(marked with?), and the code safely handles its absence—the metadata header is only set when the value is provided. This is intentional design, not a bug.Likely an incorrect or invalid review comment.
Adds keyless mode support to
@clerk/tanstack-react-start, enabling developers to get started without API keys in development.Changes
fileStorage.ts)clerkMiddlewareClerkProviderto pass keyless URLs to the clientcanUseKeylessfeature flag (respectsVITE_CLERK_KEYLESS_DISABLED)loadOptionsto handle missing keys in keyless modeImplementation
Uses the shared
createKeylessServicefrom@clerk/shared/keylesswith a lazy singleton pattern and proper error handling for API calls.Summary by CodeRabbit
✏️ Tip: You can customize this high-level summary in your review settings.