kandev 0.41.0 → 0.43.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/shared.js +13 -3
  2. package/package.json +6 -6
package/dist/shared.js CHANGED
@@ -60,9 +60,6 @@ function buildWebEnv(options) {
60
60
  ...process.env,
61
61
  // Server-side: full localhost URL for SSR fetches (Next.js SSR → Go backend)
62
62
  KANDEV_API_BASE_URL: ports.backendUrl,
63
- // Client-side: port injection for dev mode (browser on web port, API on backend port).
64
- // In production, the backend reverse-proxies Next.js so the client uses same-origin.
65
- NEXT_PUBLIC_KANDEV_API_PORT: String(ports.backendPort),
66
63
  PORT: String(ports.webPort),
67
64
  // Ensure Next.js standalone server binds to 127.0.0.1 so localhost health checks work.
68
65
  // Without this, HOSTNAME from the host environment can cause binding issues.
@@ -70,6 +67,19 @@ function buildWebEnv(options) {
70
67
  };
71
68
  if (production) {
72
69
  env.NODE_ENV = "production";
70
+ // Explicitly unset so a host-level NEXT_PUBLIC_KANDEV_API_PORT (from a .env
71
+ // file, Docker env, or CI variable) cannot leak through the process.env
72
+ // spread above and reintroduce the cross-origin URL problem.
73
+ delete env.NEXT_PUBLIC_KANDEV_API_PORT;
74
+ }
75
+ else {
76
+ // Dev mode only: browser hits the web port directly, so the client needs to
77
+ // know the backend port for API calls. In production the Go backend
78
+ // reverse-proxies Next.js on a single port, so the client uses same-origin
79
+ // and this var must NOT be set — otherwise the client builds cross-origin
80
+ // URLs like `https://host:38429/...` that aren't reachable behind a
81
+ // reverse proxy / ingress / Cloudflare tunnel.
82
+ env.NEXT_PUBLIC_KANDEV_API_PORT = String(ports.backendPort);
73
83
  }
74
84
  if (debug) {
75
85
  env.NEXT_PUBLIC_KANDEV_DEBUG = "true";
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "kandev",
3
- "version": "0.41.0",
3
+ "version": "0.43.0",
4
4
  "private": false,
5
5
  "description": "Launcher for Kandev — manage tasks, orchestrate agents, review changes, and ship value",
6
6
  "license": "AGPL-3.0-only",
@@ -22,11 +22,11 @@
22
22
  "npm": ">=7"
23
23
  },
24
24
  "optionalDependencies": {
25
- "@kdlbs/runtime-linux-x64": "0.41.0",
26
- "@kdlbs/runtime-linux-arm64": "0.41.0",
27
- "@kdlbs/runtime-darwin-x64": "0.41.0",
28
- "@kdlbs/runtime-darwin-arm64": "0.41.0",
29
- "@kdlbs/runtime-win32-x64": "0.41.0"
25
+ "@kdlbs/runtime-linux-x64": "0.43.0",
26
+ "@kdlbs/runtime-linux-arm64": "0.43.0",
27
+ "@kdlbs/runtime-darwin-x64": "0.43.0",
28
+ "@kdlbs/runtime-darwin-arm64": "0.43.0",
29
+ "@kdlbs/runtime-win32-x64": "0.43.0"
30
30
  },
31
31
  "dependencies": {
32
32
  "tar": "^7.5.11",