24 Releases 30 Tags

RSS Feed

• v0.3.5 135ea21a61

  Compare

  v0.3.5 — Fresh-Box Experience Hotfix Stable

  coreci-bot released this 2026-09-13 00:05:37 +00:00 | 0 commits to main since this release

  Nextcraft v0.3.5 — Fresh-Box Experience Hotfix

  Fixes the three failures a fresh box hit with v0.3.4, and makes the stack reachable from other machines.

  Fixes

  1. CLI was silent when invoked as a bare PATH command

  Node SEA sets argv[1] to the typed word (nextcraft) rather than the exec path when invoked via PATH, so the direct-run guard never fired — every command exited 0 with zero output. Fixed with the canonical require("node:sea").isSea() probe. If v0.3.4 is installed, re-run the installer to upgrade.

  2. Bootstrap now survives (and explains) missing python3-venv

  • bootstrap.sh detects and removes a poisoned partial .venv left by a failed earlier attempt (previously re-runs skipped creation forever)
  • Impossible venv creation dies with the distro-specific fix instead of a raw ensurepip traceback: apt install python3.12-venv (or your python version)
  • doctor gains a venv-capability probe — the failure surfaces before bootstrap runs, with the apt hint
  • bootstrap preflights doctor's checks and aborts early with fix hints before touching anything

  3. Installer honesty gate

  A binary that produces no --version output is now rejected at install time ("do not use") — v0.3.4 printed a false "verified" for exactly that case.

  Network mode (new)

  • nextcraft dev binds 0.0.0.0:8420 — the stack is reachable from other machines (AI_HOST=127.0.0.1 reverts)
  • The web app derives the API host from the browser hostname at runtime — browse http://<your-host>:3000 from anywhere, zero config (NEXT_PUBLIC_AI_SERVICE_URL overrides)
  • CORS + WebSocket origin gates admit any origin by default (AI_CORS_ORIGINS=* — safe only because credentials are never enabled; set an explicit list to restrict)
  • Security note: this is an unauthenticated dev API — expose only on trusted networks until identity/KYC lands (v0.5). Abuse caps (per-learner sandbox limits, rate caps, learner allowlist) and telemetry flood control still apply.

  Upgrade

  curl -fsSL https://git.coreci.dev/coreci/nextcraft/raw/main/scripts/install.sh | sh
  nextcraft doctor        # now includes the venv-capability probe
  apt install python3.12-venv   # once, if doctor flags it (sudo needed)
  nextcraft bootstrap && nextcraft verify && nextcraft dev
  

  Test coverage

  38 CLI tests (incl. PATH bare-word regression + installer honesty), 3 web tests, 409 ai-service tests — build, typecheck, lint clean.

  Downloads

  • nextcraft-linux-x64
    117 MiB

    2026-09-13 00:05:58 +00:00
  • nextcraft-linux-x64.sha256
    86 B

    2026-09-13 00:05:58 +00:00
  • Source Code (ZIP)
  • Source Code (TAR.GZ)