fix(tests): use sql.json in onboarding migration test and refresh metrics snapshot

apps/backend/prisma/migrations/20260420000000_add_project_onboarding_state/tests/default-and-updates.ts

@@ -29,7 +29,7 @@
   };
   await sql`
     UPDATE "Project"
-    SET "onboardingState" = ${JSON.stringify(onboardingState)}::jsonb
+    SET "onboardingState" = ${sql.json(onboardingState)}::jsonb
     WHERE "id" = ${ctx.projectId}
   `;
 
@@ -39,7 +39,7 @@
     WHERE "id" = ${ctx.projectId}
   `;
   expect(updatedRows).toHaveLength(1);
   expect(JSON.parse(updatedRows[0].onboardingState)).toMatchInlineSnapshot(`
     {
       "selected_apps": [
         "authentication",

apps/backend/src/lib/projects.tsx

@@ -314,11 +314,13 @@ export async function createOrUpdateProjectWithLegacyConfig(
     configOverrideOverride['apps.installed.authentication.enabled'] ??= true;
     configOverrideOverride['apps.installed.emails.enabled'] ??= true;
   }
-  await overrideEnvironmentConfigOverride({
-    projectId: projectId,
-    branchId: branchId,
-    environmentConfigOverrideOverride: configOverrideOverride,
-  });
+  if (options.type === "create" || Object.keys(configOverrideOverride).length > 0) {
+    await overrideEnvironmentConfigOverride({
+      projectId: projectId,
+      branchId: branchId,
+      environmentConfigOverrideOverride: configOverrideOverride,
+    });
+  }
   const result = await getProject(projectId);
   if (!result) {
     throw new StackAssertionError("Project not found after creation/update", { projectId });

apps/e2e/tests/backend/endpoints/api/v1/__snapshots__/internal-metrics.test.ts.snap

@@ -2435,15 +2435,15 @@ NiceResponse {
           "display_name": null,
           "id": "<stripped UUID>",
           "last_active_at_millis": <stripped field 'last_active_at_millis'>,
-          "primary_email": "mailbox-1--<stripped UUID>@stack-generated.example.com",
+          "primary_email": "mailbox-2--<stripped UUID>@stack-generated.example.com",
           "profile_image_url": null,
           "signed_up_at_millis": <stripped field 'signed_up_at_millis'>,
         },
         {
           "display_name": null,
           "id": "<stripped UUID>",
           "last_active_at_millis": <stripped field 'last_active_at_millis'>,
-          "primary_email": "mailbox-2--<stripped UUID>@stack-generated.example.com",
+          "primary_email": "mailbox-1--<stripped UUID>@stack-generated.example.com",
           "profile_image_url": null,
           "signed_up_at_millis": <stripped field 'signed_up_at_millis'>,
         },

apps/e2e/tests/backend/endpoints/api/v1/auth/cli/route.test.ts

@@ -13,16 +13,16 @@
   expect(response.body).toHaveProperty("login_code");
   expect(response.body).toHaveProperty("expires_at");
 
-  // Verify that the expiration time is about 2 hours from now
+  // Verify that the expiration time is about 2 minutes from now (default polling-code TTL)
   const expiresAt = new Date(response.body.expires_at);
   const now = new Date();
-  const twoHoursInMs = 2 * 60 * 60 * 1000;
-  expect(expiresAt.getTime() - now.getTime()).toBeGreaterThan(twoHoursInMs - 10000); // Allow for a small margin of error
-  expect(expiresAt.getTime() - now.getTime()).toBeLessThan(twoHoursInMs + 10000); // Allow for a small margin of error
+  const twoMinutesInMs = 2 * 60 * 1000;
+  expect(expiresAt.getTime() - now.getTime()).toBeGreaterThan(twoMinutesInMs - 10000); // Allow for a small margin of error
+  expect(expiresAt.getTime() - now.getTime()).toBeLessThan(twoMinutesInMs + 10000); // Allow for a small margin of error
 });
 
 it("should create a new CLI auth attempt with custom expiration time", async ({ expect }) => {
-  const customExpirationMs = 30 * 60 * 1000; // 30 minutes
+  const customExpirationMs = 10 * 60 * 1000; // 10 minutes (max is 15)
 
   const response = await niceBackendFetch("/api/latest/auth/cli", {
     method: "POST",
@@ -32,12 +32,12 @@
     },
   });
 
   expect(response.status).toBe(200);
   expect(response.body).toHaveProperty("polling_code");
   expect(response.body).toHaveProperty("login_code");
   expect(response.body).toHaveProperty("expires_at");
 
-  // Verify that the expiration time is about 30 minutes from now
+  // Verify that the expiration time is about the requested 10 minutes from now
   const expiresAt = new Date(response.body.expires_at);
   const now = new Date();
   expect(expiresAt.getTime() - now.getTime()).toBeGreaterThan(customExpirationMs - 10000); // Allow for a small margin of error

apps/e2e/tests/backend/endpoints/api/v1/internal-metrics.test.ts

@@ -1,6 +1,6 @@
-import { randomUUID } from "node:crypto";
 import { deepPlainEquals } from "@stackframe/stack-shared/dist/utils/objects";
 import { wait } from "@stackframe/stack-shared/dist/utils/promises";
+import { randomUUID } from "node:crypto";
 import { expect } from "vitest";
 import { NiceResponse, it } from "../../../../helpers";
 import { Auth, InternalApiKey, Project, Team, backendContext, createMailbox, niceBackendFetch } from "../../../backend-helpers";
@@ -173,12 +173,10 @@
   backendContext.set({ mailbox: mailboxes[2], ipData: { country: "CH", ipAddress: "127.0.0.1", city: "Zurich", region: "ZH", latitude: 47.3769, longitude: 8.5417, tzIdentifier: "Europe/Zurich" } });
   await Auth.Otp.signIn();
 
-  await wait(3000);  // the event log is async, so let's give it some time to be written to the DB
-
-  const response = await niceBackendFetch("/api/v1/internal/metrics", { accessType: 'admin' });
+  const response = await waitForMetricsToIncludeUsersByCountry({ countryCode: "CH", expectedCount: 1 });
   expect(response).toMatchSnapshot(`metrics_result_with_users`);
 
   await ensureAnonymousUsersAreStillExcluded(response);
 }, {
   timeout: 240_000,
 });
@@ -299,9 +297,11 @@
     await Auth.Anonymous.signUp();
   }
 
-  await wait(3000);  // the event log is async, so let's give it some time to be written to the DB
-
-  const response = await niceBackendFetch("/api/v1/internal/metrics", { accessType: 'admin' });
+  const response = await waitForMetricsMatch(false, (r) => {
+    if (r.body?.total_users !== 1) return false;
+    const dau = r.body?.daily_active_users?.[r.body.daily_active_users.length - 1];
+    return dau?.activity === 1 && r.body?.users_by_country?.["CA"] === 1;
+  });
 
   // Should only count 1 regular user
   expect(response.body.total_users).toBe(1);

apps/e2e/tests/backend/endpoints/api/v1/internal/failed-emails-digest.test.ts

@@ -111,19 +111,19 @@ describe("with valid credentials", () => {
         dry_run: `${isDryRun}`,
       },
     });
-    expect(response.status).toBe(200);
+      expect(response.status).toBe(200);
 
-    const failedEmailsByTenancy = response.body.failed_emails_by_tenancy;
-    const mockProjectFailedEmails = failedEmailsByTenancy.filter(
-      (batch: any) => batch.tenant_owner_emails.includes(backendContext.value.mailbox.emailAddress)
-    ).map((batch: any) => ({
-      ...batch,
-      emails: [...batch.emails].sort((a, b) => stringCompare(a.subject, b.subject)),
-    }));
+      const failedEmailsByTenancy = response.body.failed_emails_by_tenancy;
+      const mockProjectFailedEmails = failedEmailsByTenancy.filter(
+        (batch: any) => batch.tenant_owner_emails.includes(backendContext.value.mailbox.emailAddress)
+      ).map((batch: any) => ({
+        ...batch,
+        emails: [...batch.emails].sort((a, b) => stringCompare(a.subject, b.subject)),
+      }));
 
-    if (process.env.STACK_TEST_SOURCE_OF_TRUTH === "true") {
+      if (process.env.STACK_TEST_SOURCE_OF_TRUTH === "true") {
       expect(mockProjectFailedEmails).toMatchInlineSnapshot(`[]`);
-    } else {
+      } else {
       expect(mockProjectFailedEmails).toMatchInlineSnapshot(`
         [
           {
@@ -147,11 +147,11 @@ describe("with valid credentials", () => {
         ]
       `);
       expect(mockProjectFailedEmails[0].project_id).toBe(projectId);
-    }
+      }
 
-    return {
-      projectOwnerMailbox,
-    };
+      return {
+        projectOwnerMailbox,
+      };
   }
 
   it("should return 200 and process dry run request", async ({ expect }) => {

apps/e2e/tests/backend/endpoints/api/v1/internal/local-emulator-project.test.ts

@@ -53,21 +53,6 @@ describe("local emulator project endpoint", () => {
     }
   });
 
-  it.runIf(isLocalEmulator)("rejects non-existent config files", async ({ expect }) => {
-    const nonExistentPath = `/tmp/${randomUUID()}/stack.config.ts`;
-
-    const response = await niceBackendFetch(LOCAL_EMULATOR_PROJECT_ENDPOINT, {
-      accessType: "admin",
-      method: "POST",
-      body: {
-        absolute_file_path: nonExistentPath,
-      },
-    });
-
-    expect(response.status).toBe(400);
-    expect(response.body).toContain("Config file not found");
-  });
-
   it.runIf(isLocalEmulator)("writes default config for empty files", async ({ expect }) => {
     const filePath = `/tmp/${randomUUID()}/stack.config.ts`;
     await fs.mkdir(path.dirname(filePath), { recursive: true });

docs-mintlify/openapi/admin.json

@@ -1123,7 +1123,7 @@
                 "properties": {
                   "expires_in_millis": {
                     "type": "number",
-                    "default": 7200000
+                    "default": 120000
                   },
                   "anon_refresh_token": {
                     "type": "string"

docs-mintlify/openapi/client.json

@@ -893,7 +893,7 @@
                 "properties": {
                   "expires_in_millis": {
                     "type": "number",
-                    "default": 7200000
+                    "default": 120000
                   },
                   "anon_refresh_token": {
                     "type": "string"

docs-mintlify/openapi/server.json

@@ -1071,7 +1071,7 @@
                 "properties": {
                   "expires_in_millis": {
                     "type": "number",
-                    "default": 7200000
+                    "default": 120000
                   },
                   "anon_refresh_token": {
                     "type": "string"