@djangocfg/api 2.1.483 → 2.1.484

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@djangocfg/api",
-  "version": "2.1.483",
+  "version": "2.1.484",
   "description": "Auto-generated TypeScript API client with React hooks, SWR integration, and Zod validation for Django REST Framework backends",
   "keywords": [
     "django",
@@ -84,7 +84,7 @@
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@djangocfg/typescript-config": "^2.1.483",
+    "@djangocfg/typescript-config": "^2.1.484",
     "@testing-library/react": "^16.3.2",
     "@types/node": "^25.9.5",
     "@types/react": "19.2.15",

package/src/auth/context/AccountsContext.tsx

@@ -30,6 +30,25 @@ import { PatchedCfgUserUpdateRequestSchema } from '../../_api/generated/_cfg_acc
 import { clearProfileCache, getCachedProfile, setCachedProfile } from '../hooks/useProfileCache';
 import { authLogger } from '../utils/logger';
 
+/**
+ * Whether this build has a usable API origin.
+ *
+ * `NEXT_PUBLIC_API_URL` is inlined at build time; when it is missing the
+ * generated client falls back to `''`, and every request becomes relative to
+ * whatever page the user is on. A static build is same-origin by design, so
+ * relative paths ARE correct there.
+ */
+function hasApiOrigin(): boolean {
+  try {
+    if (typeof process === 'undefined' || !process.env) return false;
+    if (process.env.NEXT_PUBLIC_STATIC_BUILD === 'true') return true;
+    if (process.env.NEXT_PUBLIC_API_PROXY_URL !== undefined) return true;
+    return Boolean(process.env.NEXT_PUBLIC_API_URL);
+  } catch {
+    return false;
+  }
+}
+
 import type {
     User,
     CfgUserUpdateRequest,
@@ -96,6 +115,15 @@ export function AccountsProvider({ children }: AccountsProviderProps) {
   const refreshProfile = useCallback(async (options?: { callerId?: string; force?: boolean }): Promise<User | undefined> => {
     const { callerId, force } = options || {};
 
+    // No API origin configured → skip the request instead of letting it resolve
+    // against the current page. A relative URL on an i18n-prefixed route turns
+    // `/cfg/accounts/profile` into `/<locale>/cfg/accounts/profile` on the
+    // site's own origin — a 404 that only ever shows up in production.
+    if (!hasApiOrigin()) {
+      authLogger.debug(`No API origin configured, skipping profile fetch (caller: ${callerId})`);
+      return undefined;
+    }
+
     if (isLoadingRef.current) {
       authLogger.debug(`Profile loading in progress, skipping (caller: ${callerId})`);
       return profileRef.current;