Make stackServerApp lazy: don't require STACK_SECRET_SERVER_KEY at build time

The StackServerApp constructor requires STACK_SECRET_SERVER_KEY, but this
env var isn't available during next build in CI workflows that don't
provide .env.production.local. Since Next.js evaluates modules at build
time to collect page metadata, importing server.tsx would crash.

Fix: change stackServerApp from a module-level constant to a lazily-
initialized getter function getStackServerApp(). The StackServerApp is
only constructed on first runtime use, not during build.

Also reverts the .env placeholder hack from the previous commit.

Co-Authored-By: Konstantin Wohlwend <n2d4xc@gmail.com>

Author: devin-ai-integration[bot]

apps/dashboard/.env

@@ -3,7 +3,7 @@ NEXT_PUBLIC_STACK_API_URL=# enter your stack endpoint here, For local developmen
 NEXT_PUBLIC_STACK_IS_LOCAL_EMULATOR=# set to true to enable local emulator UI behavior (auto-login + read-only environment config updates)
 NEXT_PUBLIC_STACK_PROJECT_ID=internal
 NEXT_PUBLIC_STACK_PUBLISHABLE_CLIENT_KEY=# enter your Stack publishable client key here. For local development, just enter a random string, then run `pnpm db:reset`
-STACK_SECRET_SERVER_KEY=this-secret-server-key-is-for-local-development-only
+STACK_SECRET_SERVER_KEY=# enter your Stack secret client key here. For local development, do the same as above
 NEXT_PUBLIC_STACK_DOCS_BASE_URL=# enter the base URL of the docs here
 NEXT_PUBLIC_STACK_EXTRA_REQUEST_HEADERS=# a list of extra request headers to add to all Stack Auth API requests, as a JSON record
 NEXT_PUBLIC_STACK_STRIPE_PUBLISHABLE_KEY=# enter your Stripe publishable key here

apps/dashboard/src/app/(main)/(protected)/(outside-dashboard)/projects/actions.ts

@@ -1,16 +1,16 @@
 "use server";
 import { isRemoteDevelopmentEnvironmentEnabled } from "@/lib/remote-development-environment/env";
 
-async function getStackServerApp() {
+async function getServerApp() {
   if (isRemoteDevelopmentEnvironmentEnabled()) {
     throw new Error("Team invitation management is not available in the remote development environment dashboard.");
   }
-  return (await import("@/stack/server")).stackServerApp;
+  return (await import("@/stack/server")).getStackServerApp();
 }
 
 export async function revokeInvitation(teamId: string, invitationId: string) {
   "use server";
-  const stackServerApp = await getStackServerApp();
+  const stackServerApp = await getServerApp();
   const user = await stackServerApp.getUser();
   const team = await user?.getTeam(teamId);
   if (!team) {
@@ -24,7 +24,7 @@ export async function revokeInvitation(teamId: string, invitationId: string) {
 }
 
 export async function listInvitations(teamId: string) {
-  const stackServerApp = await getStackServerApp();
+  const stackServerApp = await getServerApp();
   const user = await stackServerApp.getUser();
   const team = await user?.getTeam(teamId);
   if (!team) {
@@ -39,7 +39,7 @@ export async function listInvitations(teamId: string) {
 }
 
 export async function inviteUser(teamId: string, email: string, origin: string) {
-  const stackServerApp = await getStackServerApp();
+  const stackServerApp = await getServerApp();
   const callbackUrl = new URL(stackServerApp.urls.teamInvitation, origin).toString();
   const user = await stackServerApp.getUser();
   const team = await user?.getTeam(teamId);

apps/dashboard/src/app/(main)/integrations/featurebase/sso/page.tsx

@@ -1,4 +1,4 @@
-import { stackServerApp } from "@/stack/server";
+import { getStackServerApp } from "@/stack/server";
 import { getEnvVariable } from "@stackframe/stack-shared/dist/utils/env";
 import { getOrCreateFeaturebaseUser } from "@stackframe/stack-shared/dist/utils/featurebase";
 import { urlString } from "@stackframe/stack-shared/dist/utils/urls";
@@ -21,7 +21,7 @@ export default async function FeaturebaseSSO({
     return <div>Missing return_to parameter. Please go back and try again.</div>;
   }
 
-  const user = await stackServerApp.getUser();
+  const user = await getStackServerApp().getUser();
   if (!user) {
     redirect(urlString`/handler/sign-in?after_auth_return_to=${urlString`/integrations/featurebase/sso?return_to=${returnTo}`}`);
   }

apps/dashboard/src/app/(main)/integrations/oauth-confirm-page.tsx

@@ -1,4 +1,4 @@
-import { stackServerApp } from "@/stack/server";
+import { getStackServerApp } from "@/stack/server";
 import { getEnvVariable } from "@stackframe/stack-shared/dist/utils/env";
 import { StackAssertionError } from "@stackframe/stack-shared/dist/utils/errors";
 import { redirect } from "next/navigation";
@@ -18,7 +18,7 @@ export default async function IntegrationConfirmPage(props: {
   const onContinue = async (options: { projectId: string, projectName?: string }) => {
     "use server";
 
-    const user = await stackServerApp.getUser();
+    const user = await getStackServerApp().getUser();
     if (!user) {
       return { error: "unauthorized" };
     }

apps/dashboard/src/stack/server.tsx

@@ -5,10 +5,16 @@ import { StackServerApp } from "@stackframe/stack";
 import { StackAssertionError } from "@stackframe/stack-shared/dist/utils/errors";
 import { stackClientApp } from "./client";
 
-if (isRemoteDevelopmentEnvironmentEnabled()) {
-  throw new StackAssertionError("stackServerApp is not available in the local remote development environment dashboard.");
-}
+let _stackServerApp: StackServerApp | undefined;
 
-export const stackServerApp = new StackServerApp({
-  inheritsFrom: stackClientApp,
-});
+export function getStackServerApp(): StackServerApp {
+  if (!_stackServerApp) {
+    if (isRemoteDevelopmentEnvironmentEnabled()) {
+      throw new StackAssertionError("stackServerApp is not available in the local remote development environment dashboard.");
+    }
+    _stackServerApp = new StackServerApp({
+      inheritsFrom: stackClientApp,
+    });
+  }
+  return _stackServerApp;
+}