Use custom backend URL even if dev token is present (#4212)

* allow custom backend URL in dev envs

* add changeset

Author: pandemicsyn

.changeset/better-stamps-fall.md

@@ -0,0 +1,5 @@
+---
+"@roo-code/types": patch
+---
+
+Fix to respect KILOCODE_BACKEND_BASE_URL when dev tokens are present

packages/types/src/kilocode/kilocode.ts

@@ -57,7 +57,16 @@ export function getKiloBaseUriFromToken(kilocodeToken?: string) {
 				typeof atob !== "undefined" ? atob(payload_string) : Buffer.from(payload_string, "base64").toString()
 			const payload = JSON.parse(payload_json)
 			//note: this is UNTRUSTED, so we need to make sure we're OK with this being manipulated by an attacker; e.g. we should not read uri's from the JWT directly.
-			if (payload.env === "development") return "http://localhost:3000"
+			// For dev tokens, check if KILOCODE_BACKEND_BASE_URL is set to a custom value
+			if (payload.env === "development") {
+				const baseUrl = getGlobalKilocodeBackendUrl()
+				// This allows pointing to custom dev backends beyond just those accessible on localhost
+				// (e.g., 192.168.x.x, staging servers)
+				if (baseUrl !== DEFAULT_KILOCODE_BACKEND_URL) {
+					return baseUrl
+				}
+				return "http://localhost:3000"
+			}
 		} catch (_error) {
 			console.warn("Failed to get base URL from Kilo Code token")
 		}