@wtfalch/foundry 0.72.1 → 0.72.3

package/dist/plan/platform-diff.d.ts

@@ -74,8 +74,9 @@ export declare const PLATFORM_AUTH_TUNNEL_ROUTES_SCOPE_KEY = "auth_tunnel_routes
  * sign-in plans its step once more and the apps get the env. Never holds a value.
  * 1: the login apps send their own invite and verification mail (auth 0.35.0, foundry 0.68.0).
  * 2: a company's login apps get `LOGIN_PASSKEY_RP_ID` (foundry 0.70.2).
+ * 3: the login apps get `ZITADEL_DOMAIN` (foundry 0.72.2; written from 0.72.3).
  */
-export declare const AUTH_LOGIN_ENV_VERSION = "2";
+export declare const AUTH_LOGIN_ENV_VERSION = "3";
 /**
  * What the login apps' env is written for: the version, the sender address (`LOGIN_MAIL_FROM`) and the
  * passkey RP ID (`LOGIN_PASSKEY_RP_ID`, none for the platform and a company without its own domain).

package/dist/plan/platform-diff.js

@@ -81,8 +81,9 @@ export const PLATFORM_AUTH_TUNNEL_ROUTES_SCOPE_KEY = 'auth_tunnel_routes_applied
  * sign-in plans its step once more and the apps get the env. Never holds a value.
  * 1: the login apps send their own invite and verification mail (auth 0.35.0, foundry 0.68.0).
  * 2: a company's login apps get `LOGIN_PASSKEY_RP_ID` (foundry 0.70.2).
+ * 3: the login apps get `ZITADEL_DOMAIN` (foundry 0.72.2; written from 0.72.3).
  */
-export const AUTH_LOGIN_ENV_VERSION = '2';
+export const AUTH_LOGIN_ENV_VERSION = '3';
 /**
  * What the login apps' env is written for: the version, the sender address (`LOGIN_MAIL_FROM`) and the
  * passkey RP ID (`LOGIN_PASSKEY_RP_ID`, none for the platform and a company without its own domain).

package/dist/plan/platform-providers.js

@@ -2226,6 +2226,8 @@ export async function provisionAuthStack(scope, deps, target, input) {
             key: 'CUSTOM_REQUEST_HEADERS',
             value: `Host:${hostname},X-Forwarded-Proto:https`,
         },
+        // #1086: the login builds redirects for an unbound host from this, never from a header.
+        { key: 'ZITADEL_DOMAIN', value: hostname },
         { key: 'OTEL_NODE_RESOURCE_DETECTORS', value: 'none' },
         { key: 'API_CACHE_CONFIG', value: '{"defaultMinutes":2,"longMinutes":5}' },
         // #405: the login app's own requestId-free fallback (`resolveRedirectUri`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wtfalch/foundry",
-  "version": "0.72.1",
+  "version": "0.72.3",
   "description": "Foundry's SDK: the declared org's types, the plan and apply contracts, and the state store's interface.",
   "repository": {
     "type": "git",