chore(deps): upgrade next.js to 16.2.4

- Bump next and @next/env to 16.2.4 across root, apps/sim, apps/docs
- Replace next-runtime-env's env() helper (calls unstable_noStore(), rejected by Next 16.2 outside request scope) with a direct window.__ENV / process.env getter
- Add export const dynamic = 'force-dynamic' on landing /privacy and /terms pages so NEXT_PUBLIC_* runtime env reads aren't baked at build

Author: waleedlatif1

apps/docs/package.json

@@ -26,7 +26,7 @@
     "fumadocs-openapi": "10.3.13",
     "fumadocs-ui": "16.6.7",
     "lucide-react": "^0.511.0",
-    "next": "16.1.6",
+    "next": "16.2.4",
     "next-themes": "^0.4.6",
     "postgres": "^3.4.5",
     "react": "19.2.4",

apps/sim/app/(landing)/privacy/page.tsx

@@ -3,6 +3,10 @@ import Link from 'next/link'
 import { getEnv } from '@/lib/core/config/env'
 import { ExternalRedirect, LegalLayout } from '@/app/(landing)/components'
 
+/** Opt out of static prerendering so `NEXT_PUBLIC_PRIVACY_URL` is read from
+ * the live runtime environment (e.g. Docker-injected) rather than baked at build. */
+export const dynamic = 'force-dynamic'
+
 export const metadata: Metadata = {
   title: 'Privacy Policy',
   description:

apps/sim/app/(landing)/terms/page.tsx

@@ -3,6 +3,10 @@ import Link from 'next/link'
 import { getEnv } from '@/lib/core/config/env'
 import { ExternalRedirect, LegalLayout } from '@/app/(landing)/components'
 
+/** Opt out of static prerendering so `NEXT_PUBLIC_TERMS_URL` is read from
+ * the live runtime environment (e.g. Docker-injected) rather than baked at build. */
+export const dynamic = 'force-dynamic'
+
 export const metadata: Metadata = {
   title: 'Terms of Service',
   description:

apps/sim/lib/core/config/env.ts

@@ -1,14 +1,23 @@
 import { createEnv } from '@t3-oss/env-nextjs'
-import { env as runtimeEnv } from 'next-runtime-env'
 import { z } from 'zod'
 
 /**
  * Universal environment variable getter that works in both client and server contexts.
- * - Client-side: Uses next-runtime-env for runtime injection (supports Docker runtime vars)
- * - Server-side: Falls back to process.env when runtimeEnv returns undefined
- * - Provides seamless Docker runtime variable support for NEXT_PUBLIC_ vars
+ * - Client-side: reads from `window.__ENV`, which `<PublicEnvScript>` from
+ *   next-runtime-env populates before hydration (declared globally by that
+ *   package). Supports Docker runtime injection of `NEXT_PUBLIC_*` vars
+ *   without rebuilding.
+ * - Server-side: reads `process.env` directly.
+ *
+ * We deliberately do not import next-runtime-env's `env()` helper. It calls
+ * `unstable_noStore()` from `next/cache`, which Next 16.2+ rejects when
+ * invoked outside a request scope (e.g. during `next.config.ts` compilation
+ * or top-level module evaluation).
  */
-const getEnv = (variable: string) => runtimeEnv(variable) ?? process.env[variable]
+const getEnv = (variable: string): string | undefined => {
+  if (typeof window === 'undefined') return process.env[variable]
+  return window.__ENV?.[variable] ?? process.env[variable]
+}
 
 // biome-ignore format: keep alignment for readability
 export const env = createEnv({

apps/sim/next.config.ts

@@ -1,5 +1,5 @@
 import type { NextConfig } from 'next'
-import { env, getEnv, isTruthy } from './lib/core/config/env'
+import { env, isTruthy } from './lib/core/config/env'
 import { isDev } from './lib/core/config/feature-flags'
 import {
   getChatEmbedCSPPolicy,
@@ -40,13 +40,13 @@ const nextConfig: NextConfig = {
         hostname: 'lh3.googleusercontent.com',
       },
       // Brand logo domain if configured
-      ...(getEnv('NEXT_PUBLIC_BRAND_LOGO_URL')
+      ...(process.env.NEXT_PUBLIC_BRAND_LOGO_URL
         ? (() => {
             try {
               return [
                 {
                   protocol: 'https' as const,
-                  hostname: new URL(getEnv('NEXT_PUBLIC_BRAND_LOGO_URL')!).hostname,
+                  hostname: new URL(process.env.NEXT_PUBLIC_BRAND_LOGO_URL!).hostname,
                 },
               ]
             } catch {
@@ -55,13 +55,13 @@ const nextConfig: NextConfig = {
           })()
         : []),
       // Brand favicon domain if configured
-      ...(getEnv('NEXT_PUBLIC_BRAND_FAVICON_URL')
+      ...(process.env.NEXT_PUBLIC_BRAND_FAVICON_URL
         ? (() => {
             try {
               return [
                 {
                   protocol: 'https' as const,
-                  hostname: new URL(getEnv('NEXT_PUBLIC_BRAND_FAVICON_URL')!).hostname,
+                  hostname: new URL(process.env.NEXT_PUBLIC_BRAND_FAVICON_URL!).hostname,
                 },
               ]
             } catch {

apps/sim/package.json

@@ -160,7 +160,7 @@
     "mongodb": "6.19.0",
     "mysql2": "3.14.3",
     "neo4j-driver": "6.0.1",
-    "next": "16.1.6",
+    "next": "16.2.4",
     "next-mdx-remote": "^5.0.0",
     "next-runtime-env": "3.3.0",
     "next-themes": "^0.4.6",
@@ -250,8 +250,8 @@
     "sharp"
   ],
   "overrides": {
-    "next": "16.1.6",
-    "@next/env": "16.1.6",
+    "next": "16.2.4",
+    "@next/env": "16.2.4",
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.5",
     "react-floater": {

bun.lock

@@ -48,8 +48,8 @@
   "overrides": {
     "react": "19.2.4",
     "react-dom": "19.2.4",
-    "next": "16.1.6",
-    "@next/env": "16.1.6",
+    "next": "16.2.4",
+    "@next/env": "16.2.4",
     "drizzle-orm": "^0.45.2",
     "postgres": "^3.4.5"
   },