@flamingo-stack/openframe-frontend-core 0.0.470 → 0.0.471-snapshot.20260724003551

package/dist/{chunk-XTCBRQN2.js.map → chunk-4GPWLGKT.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/platform-domains.ts","../src/utils/cn.ts"],"sourcesContent":["/**\n * Platform-Domain SSOT (single source of truth) + derivations.\n *\n * ONE registry maps each platform → its canonical production URL (`defaultUrl`,\n * the load-bearing source) with an optional per-deploy `NEXT_PUBLIC_*_URL`\n * OVERRIDE. Everything else — the reverse host→platform resolver, the cookie\n * base-domain set (the cross-subdomain SSO mechanism), www/apex expansion, the\n * URL→host parse, preview detection — derives from this one table.\n *\n * EDGE-SAFE + PURE: no React/clsx/tailwind, no `server-only`, no `node:`\n * builtins, no `'use client'`. So it is legal in the Edge middleware\n * (`proxy.ts`), in `'use client'` providers, AND in `server-only` modules\n * (e.g. cookie-domain-server.ts) simultaneously. The ONLY non-pure export is\n * `getAllPlatformBaseDomains`, which reads `typeof window`/`process.env` to\n * preserve byte-identical cookie behavior.\n */\n\nimport type { PlatformName } from './types/platform'\n\nexport type PlatformDomainKey = PlatformName | 'openframe-dashboard'\n\nexport interface PlatformDomainEntry {\n  /** Platform key (matches `PlatformName`, plus the forward-only `openframe-dashboard`). */\n  key: PlatformDomainKey\n  /** Canonical production URL — the LOAD-BEARING source of truth (today's hardcoded fallbacks). */\n  defaultUrl: string\n  /** `NEXT_PUBLIC_*_URL` per-deploy OVERRIDE. The `defaultUrl` covers it when unset. */\n  envVar: string\n  /** Legacy/secondary hosts that REVERSE-map to this key (no env var exists — NOT canonical). */\n  aliasHostnames?: string[]\n  /** Forward-only: no DB row, excluded from the reverse index + cookie set (e.g. the product-CTA dashboard). */\n  pseudo?: boolean\n}\n\nexport const PLATFORM_DOMAINS: readonly PlatformDomainEntry[] = [\n  { key: 'marketing-hub', defaultUrl: 'https://marketing-hub.flamingo.so', envVar: 'NEXT_PUBLIC_MARKETING_HUB_URL' },\n  { key: 'company-hub',   defaultUrl: 'https://company-hub.flamingo.so',   envVar: 'NEXT_PUBLIC_COMPANY_HUB_URL' },\n  { key: 'product-hub',   defaultUrl: 'https://product-hub.flamingo.so',   envVar: 'NEXT_PUBLIC_PRODUCT_HUB_URL' },\n  { key: 'revenue-hub',   defaultUrl: 'https://revenue-hub.flamingo.so',   envVar: 'NEXT_PUBLIC_REVENUE_HUB_URL' },\n  { key: 'people-hub',    defaultUrl: 'https://people-hub.flamingo.so',    envVar: 'NEXT_PUBLIC_PEOPLE_HUB_URL' },\n  { key: 'openmsp',       defaultUrl: 'https://www.openmsp.ai',            envVar: 'NEXT_PUBLIC_OPENMSP_URL' },\n  // ORDERING INVARIANT (first-wins, load-bearing): `flamingo` MUST precede `flamingo-teaser` + `universal`.\n  // All three resolve to www.flamingo.run; the reverse index is first-wins → flamingo claims the shared host,\n  // teaser keeps only its unique flamingo.cx aliases, universal contributes no unique host.\n  // ⚠️ DO NOT REORDER — enforced by the module-load self-check at the bottom of this file.\n  { key: 'flamingo',         defaultUrl: 'https://www.flamingo.run',  envVar: 'NEXT_PUBLIC_FLAMINGO_URL' },\n  { key: 'tmcg',             defaultUrl: 'https://www.tmcg.miami',    envVar: 'NEXT_PUBLIC_TMCG_URL' },\n  { key: 'flamingo-teaser',  defaultUrl: 'https://www.flamingo.run',  envVar: 'NEXT_PUBLIC_FLAMINGO_URL', aliasHostnames: ['flamingo.cx', 'www.flamingo.cx'] },\n  { key: 'openframe',        defaultUrl: 'https://openframe.ai',      envVar: 'NEXT_PUBLIC_OPENFRAME_URL', aliasHostnames: ['openframe.ai', 'www.openframe.ai', 'hub.openframe.ai'] },\n  { key: 'openframe-dashboard', defaultUrl: 'https://openframe.ai',   envVar: 'NEXT_PUBLIC_OPENFRAME_DASHBOARD_URL', pseudo: true },\n  { key: 'universal',        defaultUrl: 'https://www.flamingo.run',  envVar: 'NEXT_PUBLIC_FLAMINGO_URL' },\n]\n\n// ── Compile-time key guards (anchor the table on PlatformName, both directions) ──\n// (1) Removal/typo guard: every table key must be a valid PlatformDomainKey.\nconst _tableSatisfies = PLATFORM_DOMAINS satisfies readonly PlatformDomainEntry[]\nvoid _tableSatisfies\n// (2) Addition guard: a NEW PlatformName member that lacks a table row fails the build.\ntype _MissingKey = Exclude<PlatformName, (typeof PLATFORM_DOMAINS)[number]['key']>\nconst _exhaustive: [_MissingKey] extends [never] ? true : false = true\nvoid _exhaustive\n\n// ── Env overrides (the ONLY place env URLs enter — literal-key inlined + compile-time-guarded) ──\n// `process.env.NEXT_PUBLIC_X` is build-inlined ONLY with a LITERAL key, so the env-var name is the\n// irreducible two-copy (the registry `envVar` column + the literal access below). The `satisfies` makes\n// `tsc`/`next build` FAIL if this map is missing a registry env var OR carries a stale one (bidirectional).\ntype EnvVarKey = (typeof PLATFORM_DOMAINS)[number]['envVar']\nconst ENV_OVERRIDES = {\n  NEXT_PUBLIC_MARKETING_HUB_URL: process.env.NEXT_PUBLIC_MARKETING_HUB_URL,\n  NEXT_PUBLIC_COMPANY_HUB_URL: process.env.NEXT_PUBLIC_COMPANY_HUB_URL,\n  NEXT_PUBLIC_PRODUCT_HUB_URL: process.env.NEXT_PUBLIC_PRODUCT_HUB_URL,\n  NEXT_PUBLIC_REVENUE_HUB_URL: process.env.NEXT_PUBLIC_REVENUE_HUB_URL,\n  NEXT_PUBLIC_PEOPLE_HUB_URL: process.env.NEXT_PUBLIC_PEOPLE_HUB_URL,\n  NEXT_PUBLIC_OPENMSP_URL: process.env.NEXT_PUBLIC_OPENMSP_URL,\n  NEXT_PUBLIC_FLAMINGO_URL: process.env.NEXT_PUBLIC_FLAMINGO_URL,\n  NEXT_PUBLIC_TMCG_URL: process.env.NEXT_PUBLIC_TMCG_URL,\n  NEXT_PUBLIC_OPENFRAME_URL: process.env.NEXT_PUBLIC_OPENFRAME_URL,\n  NEXT_PUBLIC_OPENFRAME_DASHBOARD_URL: process.env.NEXT_PUBLIC_OPENFRAME_DASHBOARD_URL,\n} satisfies Record<EnvVarKey, string | undefined>\n\n/** The registry entry for a key (undefined for an unknown key). */\nexport function byKey(key: string): PlatformDomainEntry | undefined {\n  return PLATFORM_DOMAINS.find((e) => e.key === key)\n}\n\n/** Read a platform's `NEXT_PUBLIC_*_URL` override (or null). */\nfunction envOverrideFor(key: string): string | null {\n  const envVar = byKey(key)?.envVar\n  if (!envVar) return null\n  return (ENV_OVERRIDES as Record<string, string | undefined>)[envVar] || null\n}\n\n/**\n * Ensure a URL string carries a scheme. Per-deploy `NEXT_PUBLIC_*_URL` overrides are\n * stored SCHEME-LESS (bare host, e.g. `www.openmsp.ai` / `hub.openframe.ai`) — the\n * canonical convention in the Vercel shared-env store. This normalizes them to a full\n * `https://` URL so every downstream consumer (`hostOf`/`new URL`, hrefs, the cookie\n * base-domain derivation, CSP) receives a parseable URL. Full-URL inputs (the registry\n * `defaultUrl`s, any scheme'd override) pass through unchanged.\n *\n * EXPORTED as the single owner of the scheme-normalization rule (next.config.mjs keeps a\n * byte-identical local copy ONLY because Next evaluates its config outside the TS module\n * graph and cannot import this — see the comment there).\n *\n * Handles a (theoretical) protocol-relative `//host` too: strips the leading slashes so it\n * doesn't become `https:////host` (empty-host → hostOf null → silent platform drop).\n */\nexport function ensureScheme(url: string): string {\n  const trimmed = url.trim()\n  if (/^[a-z][a-z0-9+.-]*:\\/\\//i.test(trimmed)) return trimmed // already has a scheme\n  return `https://${trimmed.replace(/^\\/+/, '')}` // bare host or protocol-relative `//host`\n}\n\n/**\n * Canonical production URL for a platform: env override wins, else the `defaultUrl`.\n * NEVER throws / undefined — the default guarantees a host (this is what keeps the\n * cookie base-domains, the reverse map, and CSP intact even with every override unset).\n * The result ALWAYS carries a scheme (`ensureScheme`), so the scheme-less env overrides\n * resolve to valid URLs. Unknown-key fallback preserves cn.ts's flamingo.run default.\n */\nexport function getPlatformProductionUrl(platform: string): string {\n  const resolved =\n    envOverrideFor(platform) ??\n    byKey(platform)?.defaultUrl ??\n    envOverrideFor('flamingo') ??\n    'https://www.flamingo.run'\n  return ensureScheme(resolved)\n}\n\n// ── Single-owner host primitives ──\n\n/** Canonical URL→host parser: `.hostname` (PORT-STRIPPED, lowercased), null on parse failure. */\nexport function hostOf(value: string | null | undefined): string | null {\n  if (!value) return null\n  try {\n    return new URL(value).hostname.toLowerCase()\n  } catch {\n    return null\n  }\n}\n\n/** Expand a host into its `www.`/apex pair. 3+-label and single-label hosts return `[host]`. */\nexport function expandWwwApex(host: string): string[] {\n  if (host.startsWith('www.')) return [host, host.slice(4)]\n  if (host.split('.').length === 2) return [host, `www.${host}`]\n  return [host]\n}\n\n/** Registrable base domain (`parts.slice(-2).join('.')`), dotless; undefined for <2-label. */\nexport function toRegistrableBaseDomain(host: string): string | undefined {\n  const parts = host.split('.')\n  if (parts.length >= 2) return parts.slice(-2).join('.')\n  return undefined\n}\n\n/** An entry's alias hosts (single-owner reader). */\nexport function aliasHostsOf(key: string): string[] {\n  return byKey(key)?.aliasHostnames ?? []\n}\n\n/** All hosts an entry contributes to the reverse index (resolved host + optional aliases). */\nfunction hostsForEntry(entry: PlatformDomainEntry, opts: { includeAliases: boolean }): string[] {\n  const resolved = hostOf(getPlatformProductionUrl(entry.key))\n  const hosts = resolved ? expandWwwApex(resolved) : []\n  if (opts.includeAliases) hosts.push(...aliasHostsOf(entry.key))\n  return hosts\n}\n\n/**\n * Reverse resolver: hostname → platform key (first-wins over registry order, non-pseudo only).\n * Guarantees openframe.ai / www.openframe.ai / hub.openframe.ai → openframe in every env.\n * Replaces the hub `PLATFORM_DOMAIN_MAP`.\n */\nexport function getPlatformByHostname(hostname: string): PlatformDomainKey | null {\n  const host = hostname.toLowerCase()\n  for (const entry of PLATFORM_DOMAINS) {\n    if (entry.pseudo) continue\n    if (hostsForEntry(entry, { includeAliases: true }).includes(host)) return entry.key\n  }\n  return null\n}\n\n// ── Preview detection (two distinct predicates — env-form vs host-form) ──\n\n/** Env-form preview predicate (Vercel `VERCEL_ENV`). */\nexport function isPreviewEnv(): boolean {\n  return process.env.VERCEL_ENV === 'preview'\n}\n\n/** Host-form preview predicate (a `*.vercel.app` host). Dot-bounded suffix so a\n *  malicious `foo.vercel.app.evil.com` is NOT treated as preview. */\nexport function isPreviewHost(hostname: string): boolean {\n  return hostname.endsWith('.vercel.app')\n}\n\n/**\n * ALL unique cookie base domains (the cross-subdomain SSO mechanism).\n *\n * NON-PURE (the sole such export): reads `typeof window` + `process.env` to\n * preserve byte-identical cookie behavior. Keeps the original three branches:\n *   1. localhost / private IP → [] (host-only cookies)\n *   2. Vercel preview (env OR host) → ['.vercel.app','vercel.app']\n *   3. production → for each non-pseudo platform, registrable base of its resolved\n *      host, emitted as both `.base` and bare `base`.\n *\n * Because `getPlatformProductionUrl` always yields a host (override OR default),\n * `.flamingo.so` / `.flamingo.run` / `.openmsp.ai` / `.tmcg.miami` / `.openframe.ai`\n * are ALWAYS present → cross-hub SSO is byte-identical to today.\n */\nexport function getAllPlatformBaseDomains(): string[] {\n  if (typeof window === 'undefined') return []\n\n  const hostname = window.location.hostname\n\n  // Case 1: localhost / private IP — no domains\n  if (hostname === 'localhost' || hostname === '127.0.0.1' || hostname.startsWith('127.')) {\n    return []\n  }\n\n  // Case 2: Vercel preview — vercel.app domain\n  const previewEnv =\n    process.env.VERCEL_ENV === 'preview' ||\n    process.env.NEXT_PUBLIC_VERCEL_ENV === 'preview' ||\n    isPreviewHost(hostname)\n  if (previewEnv) {\n    return ['.vercel.app', 'vercel.app']\n  }\n\n  // Case 3: production — registrable base of every non-pseudo platform's resolved host\n  const baseDomains = new Set<string>()\n  for (const entry of PLATFORM_DOMAINS) {\n    if (entry.pseudo) continue\n    const host = hostOf(getPlatformProductionUrl(entry.key))\n    if (!host) continue\n    const base = toRegistrableBaseDomain(host)\n    if (base) {\n      baseDomains.add(`.${base}`)\n      baseDomains.add(base)\n    }\n  }\n  return Array.from(baseDomains)\n}\n\n// ── Cookie-domain guard + match (single owner; shared by the client cookie-domain.ts +\n//    server-only cookie-domain-server.ts resolvers, which previously hand-rolled both 3×) ──\n\n/**\n * Hosts that must NOT receive a `Domain=` cookie → the caller returns undefined (host-only):\n * localhost, loopback/private IPs, and any `*.vercel.app`. `vercel.app` is on the Public Suffix\n * List, so browsers SILENTLY drop `Set-Cookie: Domain=.vercel.app` — which broke the PKCE verifier\n * + session cookies on preview deploys. Host-only is sufficient there (the same preview host\n * round-trips the OAuth chain); production hosts (`.flamingo.so`/`.openmsp.ai`/…) fall through.\n */\nexport function isNonCookieableHost(hostname: string): boolean {\n  return (\n    hostname === 'localhost' ||\n    hostname === '127.0.0.1' ||\n    hostname.startsWith('127.') ||\n    hostname.startsWith('192.168.') ||\n    hostname.startsWith('10.') ||\n    hostname.includes('.vercel.app')\n  )\n}\n\n/**\n * Match a hostname against a set of registrable base domains → the dotted cookie `Domain`\n * (`.flamingo.so`), or undefined when none contains the host. Accepts bases with or without a\n * leading dot and always returns the dotted form. Single owner for the match loop both resolvers ran.\n */\nexport function matchCookieDomain(hostname: string, baseDomains: string[]): string | undefined {\n  for (const domain of baseDomains) {\n    const bare = domain.startsWith('.') ? domain.slice(1) : domain\n    if (hostname === bare || hostname.endsWith(`.${bare}`)) {\n      return domain.startsWith('.') ? domain : `.${domain}`\n    }\n  }\n  return undefined\n}\n\n// ── Module-load ordering self-check (NON-fatal — this module is imported by cn.ts → ~everything,\n// so a hard throw would be a total outage if the assertion were ever over-strict). Checks the REAL\n// invariant — table order — STRUCTURALLY (findIndex), NOT via getPlatformByHostname on a hardcoded\n// host: the latter false-positives when NEXT_PUBLIC_FLAMINGO_URL is overridden to a non-default host\n// (flamingo's resolved host changes, so `www.flamingo.run` no longer reverse-maps to it though the\n// ordering is fine). The alias checks below ARE env-immune (aliasHostnames are unique per key). The\n// authoritative guard is the reverse-map vitest. ⚠️ keep `flamingo` before `flamingo-teaser`/`universal`.\nconst _orderIdx = (k: PlatformDomainKey) => PLATFORM_DOMAINS.findIndex((e) => e.key === k)\nif (\n  _orderIdx('flamingo') > _orderIdx('flamingo-teaser') ||\n  _orderIdx('flamingo') > _orderIdx('universal') ||\n  getPlatformByHostname('flamingo.cx') !== 'flamingo-teaser' ||\n  getPlatformByHostname('hub.openframe.ai') !== 'openframe'\n) {\n  // eslint-disable-next-line no-console\n  console.error(\n    '[platform-domains] ⚠️ PLATFORM_DOMAINS ordering invariant violated — `flamingo` must precede ' +\n      '`flamingo-teaser`/`universal`, and the openframe/teaser aliases must be intact. Do not reorder the table.',\n  )\n}\n","import { clsx, type ClassValue } from \"clsx\"\nimport { extendTailwindMerge } from \"tailwind-merge\"\n// Platform→domain resolution moved to the SSOT module `src/platform-domains.ts`.\n// `getPlatformProductionUrl` / `getAllPlatformBaseDomains` now live there (re-exported\n// via the utils barrel for existing callers); `getBaseUrl` stays here because it owns the\n// dev-localhost + Vercel-self-origin branches, and delegates its platform branch.\nimport { getPlatformProductionUrl } from \"../platform-domains\"\n\nconst twMerge = extendTailwindMerge<'ods-typography'>({\n  extend: {\n    classGroups: {\n      'ods-typography': ['text-h1', 'text-h2', 'text-h3', 'text-h4', 'text-h5', 'text-h6'],\n    },\n  },\n})\n\n/**\n * Combine class names with Tailwind's merge utility\n */\nexport function cn(...inputs: ClassValue[]) {\n  return twMerge(clsx(inputs))\n}\n\n/**\n * Get the application base URL for the current environment\n *\n * @param platform - Optional platform name (openmsp, flamingo, tmcg, openframe, etc.)\n * @returns The base URL with protocol (https:// or http://)\n *\n * Priority order:\n * 1. Development (http://localhost:3000)\n * 2. Platform-specific URL via the SSOT (if `platform` provided) — env override ?? default\n * 3. VERCEL_PROJECT_PRODUCTION_URL (Vercel production domain)\n * 4. Production fallback: the DEPLOYING platform's canonical URL (NEXT_PUBLIC_APP_TYPE),\n *    openmsp if unset — sourced from the SSOT, no hardcoded literal.\n *\n * The per-platform canonical URLs + their `NEXT_PUBLIC_*_URL` overrides are the single\n * source of truth in `src/platform-domains.ts` (`PLATFORM_DOMAINS`).\n *\n * @example\n * getBaseUrl() // Current deployment's URL\n * getBaseUrl('flamingo') // https://www.flamingo.run (prod) or http://localhost:3000 (dev)\n */\nexport function getBaseUrl(platform?: string): string {\n  // In development, always use localhost (regardless of platform)\n  if (process.env.NODE_ENV !== 'production') {\n    return process.env.NEXT_PUBLIC_DEV_URL || 'http://localhost:3000'\n  }\n\n  // If platform is specified, return its production URL (env override ?? default)\n  if (platform) {\n    return getPlatformProductionUrl(platform)\n  }\n\n  // Production: Use Vercel domain if available\n  if (process.env.VERCEL_PROJECT_PRODUCTION_URL) {\n    return `https://${process.env.VERCEL_PROJECT_PRODUCTION_URL}`\n  }\n\n  // Production fallback: the deploying platform's canonical www domain (avoids Google\n  // \"Page with redirect\"). Derived from the SSOT for the current app type (openmsp when\n  // unset → 'https://www.openmsp.ai', byte-identical to the old hardcoded fallback).\n  return getPlatformProductionUrl(process.env.NEXT_PUBLIC_APP_TYPE || 'openmsp')\n}\n"],"mappings":";;;;;;AAiFO,SAAS,MAAM,KAA8C;AAClE,SAAO,iBAAiB,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AACnD;AAGA,SAAS,eAAe,KAA4B;AAClD,QAAM,SAAS,MAAM,GAAG,GAAG;AAC3B,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAQ,cAAqD,MAAM,KAAK;AAC1E;AAiBO,SAAS,aAAa,KAAqB;AAChD,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,2BAA2B,KAAK,OAAO,EAAG,QAAO;AACrD,SAAO,WAAW,QAAQ,QAAQ,QAAQ,EAAE,CAAC;AAC/C;AASO,SAAS,yBAAyB,UAA0B;AACjE,QAAM,WACJ,eAAe,QAAQ,KACvB,MAAM,QAAQ,GAAG,cACjB,eAAe,UAAU,KACzB;AACF,SAAO,aAAa,QAAQ;AAC9B;AAKO,SAAS,OAAO,OAAiD;AACtE,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,WAAO,IAAI,IAAI,KAAK,EAAE,SAAS,YAAY;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,cAAc,MAAwB;AACpD,MAAI,KAAK,WAAW,MAAM,EAAG,QAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AACxD,MAAI,KAAK,MAAM,GAAG,EAAE,WAAW,EAAG,QAAO,CAAC,MAAM,OAAO,IAAI,EAAE;AAC7D,SAAO,CAAC,IAAI;AACd;AAGO,SAAS,wBAAwB,MAAkC;AACxE,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,MAAM,UAAU,EAAG,QAAO,MAAM,MAAM,EAAE,EAAE,KAAK,GAAG;AACtD,SAAO;AACT;AAGO,SAAS,aAAa,KAAuB;AAClD,SAAO,MAAM,GAAG,GAAG,kBAAkB,CAAC;AACxC;AAGA,SAAS,cAAc,OAA4B,MAA6C;AAC9F,QAAM,WAAW,OAAO,yBAAyB,MAAM,GAAG,CAAC;AAC3D,QAAM,QAAQ,WAAW,cAAc,QAAQ,IAAI,CAAC;AACpD,MAAI,KAAK,eAAgB,OAAM,KAAK,GAAG,aAAa,MAAM,GAAG,CAAC;AAC9D,SAAO;AACT;AAOO,SAAS,sBAAsB,UAA4C;AAChF,QAAM,OAAO,SAAS,YAAY;AAClC,aAAW,SAAS,kBAAkB;AACpC,QAAI,MAAM,OAAQ;AAClB,QAAI,cAAc,OAAO,EAAE,gBAAgB,KAAK,CAAC,EAAE,SAAS,IAAI,EAAG,QAAO,MAAM;AAAA,EAClF;AACA,SAAO;AACT;AAWO,SAAS,cAAc,UAA2B;AACvD,SAAO,SAAS,SAAS,aAAa;AACxC;AAgBO,SAAS,4BAAsC;AACpD,MAAI,OAAO,WAAW,YAAa,QAAO,CAAC;AAE3C,QAAM,WAAW,OAAO,SAAS;AAGjC,MAAI,aAAa,eAAe,aAAa,eAAe,SAAS,WAAW,MAAM,GAAG;AACvF,WAAO,CAAC;AAAA,EACV;AAGA,QAAM,aACJ,QAAQ,IAAI,eAAe,aAC3B,QAAQ,IAAI,2BAA2B,aACvC,cAAc,QAAQ;AACxB,MAAI,YAAY;AACd,WAAO,CAAC,eAAe,YAAY;AAAA,EACrC;AAGA,QAAM,cAAc,oBAAI,IAAY;AACpC,aAAW,SAAS,kBAAkB;AACpC,QAAI,MAAM,OAAQ;AAClB,UAAM,OAAO,OAAO,yBAAyB,MAAM,GAAG,CAAC;AACvD,QAAI,CAAC,KAAM;AACX,UAAM,OAAO,wBAAwB,IAAI;AACzC,QAAI,MAAM;AACR,kBAAY,IAAI,IAAI,IAAI,EAAE;AAC1B,kBAAY,IAAI,IAAI;AAAA,IACtB;AAAA,EACF;AACA,SAAO,MAAM,KAAK,WAAW;AAC/B;AAjPA,IAkCa,kBAiCP,eA2NA;AA9RN;AAAA;AAAA;AAkCO,IAAM,mBAAmD;AAAA,MAC9D,EAAE,KAAK,iBAAiB,YAAY,qCAAqC,QAAQ,gCAAgC;AAAA,MACjH,EAAE,KAAK,eAAiB,YAAY,mCAAqC,QAAQ,8BAA8B;AAAA,MAC/G,EAAE,KAAK,eAAiB,YAAY,mCAAqC,QAAQ,8BAA8B;AAAA,MAC/G,EAAE,KAAK,eAAiB,YAAY,mCAAqC,QAAQ,8BAA8B;AAAA,MAC/G,EAAE,KAAK,cAAiB,YAAY,kCAAqC,QAAQ,6BAA6B;AAAA,MAC9G,EAAE,KAAK,WAAiB,YAAY,0BAAqC,QAAQ,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA,MAK3G,EAAE,KAAK,YAAoB,YAAY,4BAA6B,QAAQ,2BAA2B;AAAA,MACvG,EAAE,KAAK,QAAoB,YAAY,0BAA6B,QAAQ,uBAAuB;AAAA,MACnG,EAAE,KAAK,mBAAoB,YAAY,4BAA6B,QAAQ,4BAA4B,gBAAgB,CAAC,eAAe,iBAAiB,EAAE;AAAA,MAC3J,EAAE,KAAK,aAAoB,YAAY,wBAA6B,QAAQ,6BAA6B,gBAAgB,CAAC,gBAAgB,oBAAoB,kBAAkB,EAAE;AAAA,MAClL,EAAE,KAAK,uBAAuB,YAAY,wBAA0B,QAAQ,uCAAuC,QAAQ,KAAK;AAAA,MAChI,EAAE,KAAK,aAAoB,YAAY,4BAA6B,QAAQ,2BAA2B;AAAA,IACzG;AAgBA,IAAM,gBAAgB;AAAA,MACpB,+BAA+B,QAAQ,IAAI;AAAA,MAC3C,6BAA6B,QAAQ,IAAI;AAAA,MACzC,6BAA6B,QAAQ,IAAI;AAAA,MACzC,6BAA6B,QAAQ,IAAI;AAAA,MACzC,4BAA4B,QAAQ,IAAI;AAAA,MACxC,yBAAyB,QAAQ,IAAI;AAAA,MACrC,0BAA0B,QAAQ,IAAI;AAAA,MACtC,sBAAsB,QAAQ,IAAI;AAAA,MAClC,2BAA2B,QAAQ,IAAI;AAAA,MACvC,qCAAqC,QAAQ,IAAI;AAAA,IACnD;AAgNA,IAAM,YAAY,CAAC,MAAyB,iBAAiB,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;AACzF,QACE,UAAU,UAAU,IAAI,UAAU,iBAAiB,KACnD,UAAU,UAAU,IAAI,UAAU,WAAW,KAC7C,sBAAsB,aAAa,MAAM,qBACzC,sBAAsB,kBAAkB,MAAM,aAC9C;AAEA,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AAAA;AAAA;;;AC1SA,SAAS,YAA6B;AACtC,SAAS,2BAA2B;AAkB7B,SAAS,MAAM,QAAsB;AAC1C,SAAO,QAAQ,KAAK,MAAM,CAAC;AAC7B;AAsBO,SAAS,WAAW,UAA2B;AAEpD,MAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,WAAO,QAAQ,IAAI,uBAAuB;AAAA,EAC5C;AAGA,MAAI,UAAU;AACZ,WAAO,yBAAyB,QAAQ;AAAA,EAC1C;AAGA,MAAI,QAAQ,IAAI,+BAA+B;AAC7C,WAAO,WAAW,QAAQ,IAAI,6BAA6B;AAAA,EAC7D;AAKA,SAAO,yBAAyB,QAAQ,IAAI,wBAAwB,SAAS;AAC/E;AA/DA,IAQM;AARN;AAAA;AAAA;AAMA;AAEA,IAAM,UAAU,oBAAsC;AAAA,MACpD,QAAQ;AAAA,QACN,aAAa;AAAA,UACX,kBAAkB,CAAC,WAAW,WAAW,WAAW,WAAW,WAAW,SAAS;AAAA,QACrF;AAAA,MACF;AAAA,IACF,CAAC;AAAA;AAAA;","names":[]}
+{"version":3,"sources":["../src/platform-domains.ts","../src/utils/cn.ts"],"sourcesContent":["/**\n * Platform-Domain SSOT (single source of truth) + derivations.\n *\n * ONE registry maps each platform → its canonical production URL (`defaultUrl`,\n * the load-bearing source) with an optional per-deploy `NEXT_PUBLIC_*_URL`\n * OVERRIDE. Everything else — the reverse host→platform resolver, the cookie\n * base-domain set (the cross-subdomain SSO mechanism), www/apex expansion, the\n * URL→host parse, preview detection — derives from this one table.\n *\n * EDGE-SAFE + PURE: no React/clsx/tailwind, no `server-only`, no `node:`\n * builtins, no `'use client'`. So it is legal in the Edge middleware\n * (`proxy.ts`), in `'use client'` providers, AND in `server-only` modules\n * (e.g. cookie-domain-server.ts) simultaneously. The ONLY non-pure export is\n * `getAllPlatformBaseDomains`, which reads `typeof window`/`process.env` to\n * preserve byte-identical cookie behavior.\n */\n\nimport type { PlatformName } from './types/platform'\n\nexport type PlatformDomainKey = PlatformName | 'openframe-dashboard'\n\nexport interface PlatformDomainEntry {\n  /** Platform key (matches `PlatformName`, plus the forward-only `openframe-dashboard`). */\n  key: PlatformDomainKey\n  /** Canonical production URL — the LOAD-BEARING source of truth (today's hardcoded fallbacks). */\n  defaultUrl: string\n  /** `NEXT_PUBLIC_*_URL` per-deploy OVERRIDE. The `defaultUrl` covers it when unset. */\n  envVar: string\n  /** Legacy/secondary hosts that REVERSE-map to this key (no env var exists — NOT canonical). */\n  aliasHostnames?: string[]\n  /** Forward-only: no DB row, excluded from the reverse index + cookie set (e.g. the product-CTA dashboard). */\n  pseudo?: boolean\n}\n\nexport const PLATFORM_DOMAINS: readonly PlatformDomainEntry[] = [\n  { key: 'marketing-hub', defaultUrl: 'https://marketing-hub.flamingo.so', envVar: 'NEXT_PUBLIC_MARKETING_HUB_URL' },\n  { key: 'company-hub',   defaultUrl: 'https://company-hub.flamingo.so',   envVar: 'NEXT_PUBLIC_COMPANY_HUB_URL' },\n  { key: 'product-hub',   defaultUrl: 'https://product-hub.flamingo.so',   envVar: 'NEXT_PUBLIC_PRODUCT_HUB_URL' },\n  { key: 'revenue-hub',   defaultUrl: 'https://revenue-hub.flamingo.so',   envVar: 'NEXT_PUBLIC_REVENUE_HUB_URL' },\n  { key: 'people-hub',    defaultUrl: 'https://people-hub.flamingo.so',    envVar: 'NEXT_PUBLIC_PEOPLE_HUB_URL' },\n  { key: 'openmsp',       defaultUrl: 'https://www.openmsp.ai',            envVar: 'NEXT_PUBLIC_OPENMSP_URL' },\n  // ORDERING INVARIANT (first-wins, load-bearing): `flamingo` MUST precede `flamingo-teaser` + `universal`.\n  // All three resolve to www.flamingo.run; the reverse index is first-wins → flamingo claims the shared host,\n  // teaser keeps only its unique flamingo.cx aliases, universal contributes no unique host.\n  // ⚠️ DO NOT REORDER — enforced by the module-load self-check at the bottom of this file.\n  { key: 'flamingo',         defaultUrl: 'https://www.flamingo.run',  envVar: 'NEXT_PUBLIC_FLAMINGO_URL' },\n  { key: 'tmcg',             defaultUrl: 'https://www.tmcg.miami',    envVar: 'NEXT_PUBLIC_TMCG_URL' },\n  { key: 'flamingo-teaser',  defaultUrl: 'https://www.flamingo.run',  envVar: 'NEXT_PUBLIC_FLAMINGO_URL', aliasHostnames: ['flamingo.cx', 'www.flamingo.cx'] },\n  { key: 'openframe',        defaultUrl: 'https://openframe.ai',      envVar: 'NEXT_PUBLIC_OPENFRAME_URL', aliasHostnames: ['openframe.ai', 'www.openframe.ai', 'hub.openframe.ai'] },\n  { key: 'openframe-dashboard', defaultUrl: 'https://openframe.ai',   envVar: 'NEXT_PUBLIC_OPENFRAME_DASHBOARD_URL', pseudo: true },\n  { key: 'universal',        defaultUrl: 'https://www.flamingo.run',  envVar: 'NEXT_PUBLIC_FLAMINGO_URL' },\n]\n\n// ── Compile-time key guards (anchor the table on PlatformName, both directions) ──\n// (1) Removal/typo guard: every table key must be a valid PlatformDomainKey.\nconst _tableSatisfies = PLATFORM_DOMAINS satisfies readonly PlatformDomainEntry[]\nvoid _tableSatisfies\n// (2) Addition guard: a NEW PlatformName member that lacks a table row fails the build.\ntype _MissingKey = Exclude<PlatformName, (typeof PLATFORM_DOMAINS)[number]['key']>\nconst _exhaustive: [_MissingKey] extends [never] ? true : false = true\nvoid _exhaustive\n\n// ── Env overrides (the ONLY place env URLs enter — literal-key inlined + compile-time-guarded) ──\n// `process.env.NEXT_PUBLIC_X` is build-inlined ONLY with a LITERAL key, so the env-var name is the\n// irreducible two-copy (the registry `envVar` column + the literal access below). The `satisfies` makes\n// `tsc`/`next build` FAIL if this map is missing a registry env var OR carries a stale one (bidirectional).\ntype EnvVarKey = (typeof PLATFORM_DOMAINS)[number]['envVar']\nconst ENV_OVERRIDES = {\n  NEXT_PUBLIC_MARKETING_HUB_URL: process.env.NEXT_PUBLIC_MARKETING_HUB_URL,\n  NEXT_PUBLIC_COMPANY_HUB_URL: process.env.NEXT_PUBLIC_COMPANY_HUB_URL,\n  NEXT_PUBLIC_PRODUCT_HUB_URL: process.env.NEXT_PUBLIC_PRODUCT_HUB_URL,\n  NEXT_PUBLIC_REVENUE_HUB_URL: process.env.NEXT_PUBLIC_REVENUE_HUB_URL,\n  NEXT_PUBLIC_PEOPLE_HUB_URL: process.env.NEXT_PUBLIC_PEOPLE_HUB_URL,\n  NEXT_PUBLIC_OPENMSP_URL: process.env.NEXT_PUBLIC_OPENMSP_URL,\n  NEXT_PUBLIC_FLAMINGO_URL: process.env.NEXT_PUBLIC_FLAMINGO_URL,\n  NEXT_PUBLIC_TMCG_URL: process.env.NEXT_PUBLIC_TMCG_URL,\n  NEXT_PUBLIC_OPENFRAME_URL: process.env.NEXT_PUBLIC_OPENFRAME_URL,\n  NEXT_PUBLIC_OPENFRAME_DASHBOARD_URL: process.env.NEXT_PUBLIC_OPENFRAME_DASHBOARD_URL,\n} satisfies Record<EnvVarKey, string | undefined>\n\n/** The registry entry for a key (undefined for an unknown key). */\nexport function byKey(key: string): PlatformDomainEntry | undefined {\n  return PLATFORM_DOMAINS.find((e) => e.key === key)\n}\n\n/** Read a platform's `NEXT_PUBLIC_*_URL` override (or null). */\nfunction envOverrideFor(key: string): string | null {\n  const envVar = byKey(key)?.envVar\n  if (!envVar) return null\n  return (ENV_OVERRIDES as Record<string, string | undefined>)[envVar] || null\n}\n\n/**\n * Ensure a URL string carries a scheme. Per-deploy `NEXT_PUBLIC_*_URL` overrides are\n * stored SCHEME-LESS (bare host, e.g. `www.openmsp.ai` / `hub.openframe.ai`) — the\n * canonical convention in the Vercel shared-env store. This normalizes them to a full\n * `https://` URL so every downstream consumer (`hostOf`/`new URL`, hrefs, the cookie\n * base-domain derivation, CSP) receives a parseable URL. Full-URL inputs (the registry\n * `defaultUrl`s, any scheme'd override) pass through unchanged.\n *\n * EXPORTED as the single owner of the scheme-normalization rule (next.config.mjs keeps a\n * byte-identical local copy ONLY because Next evaluates its config outside the TS module\n * graph and cannot import this — see the comment there).\n *\n * Handles a (theoretical) protocol-relative `//host` too: strips the leading slashes so it\n * doesn't become `https:////host` (empty-host → hostOf null → silent platform drop).\n */\nexport function ensureScheme(url: string): string {\n  const trimmed = url.trim()\n  if (/^[a-z][a-z0-9+.-]*:\\/\\//i.test(trimmed)) return trimmed // already has a scheme\n  return `https://${trimmed.replace(/^\\/+/, '')}` // bare host or protocol-relative `//host`\n}\n\n/**\n * Canonical production URL for a platform: env override wins, else the `defaultUrl`.\n * NEVER throws / undefined — the default guarantees a host (this is what keeps the\n * cookie base-domains, the reverse map, and CSP intact even with every override unset).\n * The result ALWAYS carries a scheme (`ensureScheme`), so the scheme-less env overrides\n * resolve to valid URLs. Unknown-key fallback preserves cn.ts's flamingo.run default.\n */\nexport function getPlatformProductionUrl(platform: string): string {\n  const resolved =\n    envOverrideFor(platform) ??\n    byKey(platform)?.defaultUrl ??\n    envOverrideFor('flamingo') ??\n    'https://www.flamingo.run'\n  return ensureScheme(resolved)\n}\n\n// ── Single-owner host primitives ──\n\n/** Canonical URL→host parser: `.hostname` (PORT-STRIPPED, lowercased), null on parse failure. */\nexport function hostOf(value: string | null | undefined): string | null {\n  if (!value) return null\n  try {\n    return new URL(value).hostname.toLowerCase()\n  } catch {\n    return null\n  }\n}\n\n/** Expand a host into its `www.`/apex pair. 3+-label and single-label hosts return `[host]`. */\nexport function expandWwwApex(host: string): string[] {\n  if (host.startsWith('www.')) return [host, host.slice(4)]\n  if (host.split('.').length === 2) return [host, `www.${host}`]\n  return [host]\n}\n\n/** Registrable base domain (`parts.slice(-2).join('.')`), dotless; undefined for <2-label. */\nexport function toRegistrableBaseDomain(host: string): string | undefined {\n  const parts = host.split('.')\n  if (parts.length >= 2) return parts.slice(-2).join('.')\n  return undefined\n}\n\n/** An entry's alias hosts (single-owner reader). */\nexport function aliasHostsOf(key: string): string[] {\n  return byKey(key)?.aliasHostnames ?? []\n}\n\n/** All hosts an entry contributes to the reverse index (resolved host + optional aliases). */\nfunction hostsForEntry(entry: PlatformDomainEntry, opts: { includeAliases: boolean }): string[] {\n  const resolved = hostOf(getPlatformProductionUrl(entry.key))\n  const hosts = resolved ? expandWwwApex(resolved) : []\n  if (opts.includeAliases) hosts.push(...aliasHostsOf(entry.key))\n  return hosts\n}\n\n/**\n * Reverse resolver: hostname → platform key (first-wins over registry order, non-pseudo only).\n * Guarantees openframe.ai / www.openframe.ai / hub.openframe.ai → openframe in every env.\n * Replaces the hub `PLATFORM_DOMAIN_MAP`.\n */\nexport function getPlatformByHostname(hostname: string): PlatformDomainKey | null {\n  const host = hostname.toLowerCase()\n  for (const entry of PLATFORM_DOMAINS) {\n    if (entry.pseudo) continue\n    if (hostsForEntry(entry, { includeAliases: true }).includes(host)) return entry.key\n  }\n  return null\n}\n\n// ── Preview detection (two distinct predicates — env-form vs host-form) ──\n\n/** Env-form preview predicate (Vercel `VERCEL_ENV`). */\nexport function isPreviewEnv(): boolean {\n  return process.env.VERCEL_ENV === 'preview'\n}\n\n/** Host-form preview predicate (a `*.vercel.app` host). Dot-bounded suffix so a\n *  malicious `foo.vercel.app.evil.com` is NOT treated as preview. */\nexport function isPreviewHost(hostname: string): boolean {\n  return hostname.endsWith('.vercel.app')\n}\n\n/**\n * ALL unique cookie base domains (the cross-subdomain SSO mechanism).\n *\n * NON-PURE (the sole such export): reads `typeof window` + `process.env` to\n * preserve byte-identical cookie behavior. Keeps the original three branches:\n *   1. localhost / private IP → [] (host-only cookies)\n *   2. Vercel preview (env OR host) → ['.vercel.app','vercel.app']\n *   3. production → for each non-pseudo platform, registrable base of its resolved\n *      host, emitted as both `.base` and bare `base`.\n *\n * Because `getPlatformProductionUrl` always yields a host (override OR default),\n * `.flamingo.so` / `.flamingo.run` / `.openmsp.ai` / `.tmcg.miami` / `.openframe.ai`\n * are ALWAYS present → cross-hub SSO is byte-identical to today.\n */\nexport function getAllPlatformBaseDomains(): string[] {\n  if (typeof window === 'undefined') return []\n\n  const hostname = window.location.hostname\n\n  // Case 1: localhost / private IP — no domains\n  if (hostname === 'localhost' || hostname === '127.0.0.1' || hostname.startsWith('127.')) {\n    return []\n  }\n\n  // Case 2: Vercel preview — vercel.app domain\n  const previewEnv =\n    process.env.VERCEL_ENV === 'preview' ||\n    process.env.NEXT_PUBLIC_VERCEL_ENV === 'preview' ||\n    isPreviewHost(hostname)\n  if (previewEnv) {\n    return ['.vercel.app', 'vercel.app']\n  }\n\n  // Case 3: production — registrable base of every non-pseudo platform's resolved host\n  const baseDomains = new Set<string>()\n  for (const entry of PLATFORM_DOMAINS) {\n    if (entry.pseudo) continue\n    const host = hostOf(getPlatformProductionUrl(entry.key))\n    if (!host) continue\n    const base = toRegistrableBaseDomain(host)\n    if (base) {\n      baseDomains.add(`.${base}`)\n      baseDomains.add(base)\n    }\n  }\n  return Array.from(baseDomains)\n}\n\n// ── Cookie-domain guard + match (single owner; shared by the client cookie-domain.ts +\n//    server-only cookie-domain-server.ts resolvers, which previously hand-rolled both 3×) ──\n\n/**\n * Hosts that must NOT receive a `Domain=` cookie → the caller returns undefined (host-only):\n * localhost, loopback/private IPs, and any `*.vercel.app`. `vercel.app` is on the Public Suffix\n * List, so browsers SILENTLY drop `Set-Cookie: Domain=.vercel.app` — which broke the PKCE verifier\n * + session cookies on preview deploys. Host-only is sufficient there (the same preview host\n * round-trips the OAuth chain); production hosts (`.flamingo.so`/`.openmsp.ai`/…) fall through.\n */\nexport function isNonCookieableHost(hostname: string): boolean {\n  return (\n    hostname === 'localhost' ||\n    hostname === '127.0.0.1' ||\n    hostname.startsWith('127.') ||\n    hostname.startsWith('192.168.') ||\n    hostname.startsWith('10.') ||\n    hostname.includes('.vercel.app')\n  )\n}\n\n/**\n * Match a hostname against a set of registrable base domains → the dotted cookie `Domain`\n * (`.flamingo.so`), or undefined when none contains the host. Accepts bases with or without a\n * leading dot and always returns the dotted form. Single owner for the match loop both resolvers ran.\n */\nexport function matchCookieDomain(hostname: string, baseDomains: string[]): string | undefined {\n  for (const domain of baseDomains) {\n    const bare = domain.startsWith('.') ? domain.slice(1) : domain\n    if (hostname === bare || hostname.endsWith(`.${bare}`)) {\n      return domain.startsWith('.') ? domain : `.${domain}`\n    }\n  }\n  return undefined\n}\n\n// ── Module-load ordering self-check (NON-fatal — this module is imported by cn.ts → ~everything,\n// so a hard throw would be a total outage if the assertion were ever over-strict). Checks the REAL\n// invariant — table order — STRUCTURALLY (findIndex), NOT via getPlatformByHostname on a hardcoded\n// host: the latter false-positives when NEXT_PUBLIC_FLAMINGO_URL is overridden to a non-default host\n// (flamingo's resolved host changes, so `www.flamingo.run` no longer reverse-maps to it though the\n// ordering is fine). The alias checks below ARE env-immune (aliasHostnames are unique per key). The\n// authoritative guard is the reverse-map vitest. ⚠️ keep `flamingo` before `flamingo-teaser`/`universal`.\nconst _orderIdx = (k: PlatformDomainKey) => PLATFORM_DOMAINS.findIndex((e) => e.key === k)\nif (\n  _orderIdx('flamingo') > _orderIdx('flamingo-teaser') ||\n  _orderIdx('flamingo') > _orderIdx('universal') ||\n  getPlatformByHostname('flamingo.cx') !== 'flamingo-teaser' ||\n  getPlatformByHostname('hub.openframe.ai') !== 'openframe'\n) {\n  // eslint-disable-next-line no-console\n  console.error(\n    '[platform-domains] ⚠️ PLATFORM_DOMAINS ordering invariant violated — `flamingo` must precede ' +\n      '`flamingo-teaser`/`universal`, and the openframe/teaser aliases must be intact. Do not reorder the table.',\n  )\n}\n","import { clsx, type ClassValue } from \"clsx\"\nimport { extendTailwindMerge } from \"tailwind-merge\"\n// Platform→domain resolution moved to the SSOT module `src/platform-domains.ts`.\n// `getPlatformProductionUrl` / `getAllPlatformBaseDomains` now live there (re-exported\n// via the utils barrel for existing callers); `getBaseUrl` stays here because it owns the\n// dev-localhost + Vercel-self-origin branches, and delegates its platform branch.\nimport { getPlatformProductionUrl } from \"../platform-domains\"\n\n/**\n * EVERY custom `text-*` utility we add in `tailwind.config.ts` MUST be listed here.\n *\n * tailwind-merge has no knowledge of our utilities, and `text-<word>` is\n * indistinguishable from a text COLOUR to it. So an unlisted `text-badge` gets\n * filed in tailwind-merge's `text-color` group, where it and any real colour\n * class silently annihilate each other — last one wins, the other is dropped\n * from the output entirely:\n *\n *   cn('text-badge', 'text-ods-text-on-accent')  -> 'text-ods-text-on-accent'  (size lost)\n *   cn('text-[--some-colour]', 'text-badge')     -> 'text-badge'               (colour lost)\n *\n * Listing them in their own group makes them non-conflicting with colours, so\n * both survive. This is why `text-h1`…`text-h6` are here; `text-code` and\n * `text-badge` were added to the config later and missing them shipped exactly\n * the two failures above (huge badges, and badge text losing its colour).\n */\nconst twMerge = extendTailwindMerge<'ods-typography'>({\n  extend: {\n    classGroups: {\n      'ods-typography': [\n        'text-h1',\n        'text-h2',\n        'text-h3',\n        'text-h4',\n        'text-h5',\n        'text-h6',\n        'text-code',\n        'text-badge',\n      ],\n    },\n  },\n})\n\n/**\n * Combine class names with Tailwind's merge utility\n */\nexport function cn(...inputs: ClassValue[]) {\n  return twMerge(clsx(inputs))\n}\n\n/**\n * Get the application base URL for the current environment\n *\n * @param platform - Optional platform name (openmsp, flamingo, tmcg, openframe, etc.)\n * @returns The base URL with protocol (https:// or http://)\n *\n * Priority order:\n * 1. Development (http://localhost:3000)\n * 2. Platform-specific URL via the SSOT (if `platform` provided) — env override ?? default\n * 3. VERCEL_PROJECT_PRODUCTION_URL (Vercel production domain)\n * 4. Production fallback: the DEPLOYING platform's canonical URL (NEXT_PUBLIC_APP_TYPE),\n *    openmsp if unset — sourced from the SSOT, no hardcoded literal.\n *\n * The per-platform canonical URLs + their `NEXT_PUBLIC_*_URL` overrides are the single\n * source of truth in `src/platform-domains.ts` (`PLATFORM_DOMAINS`).\n *\n * @example\n * getBaseUrl() // Current deployment's URL\n * getBaseUrl('flamingo') // https://www.flamingo.run (prod) or http://localhost:3000 (dev)\n */\nexport function getBaseUrl(platform?: string): string {\n  // In development, always use localhost (regardless of platform)\n  if (process.env.NODE_ENV !== 'production') {\n    return process.env.NEXT_PUBLIC_DEV_URL || 'http://localhost:3000'\n  }\n\n  // If platform is specified, return its production URL (env override ?? default)\n  if (platform) {\n    return getPlatformProductionUrl(platform)\n  }\n\n  // Production: Use Vercel domain if available\n  if (process.env.VERCEL_PROJECT_PRODUCTION_URL) {\n    return `https://${process.env.VERCEL_PROJECT_PRODUCTION_URL}`\n  }\n\n  // Production fallback: the deploying platform's canonical www domain (avoids Google\n  // \"Page with redirect\"). Derived from the SSOT for the current app type (openmsp when\n  // unset → 'https://www.openmsp.ai', byte-identical to the old hardcoded fallback).\n  return getPlatformProductionUrl(process.env.NEXT_PUBLIC_APP_TYPE || 'openmsp')\n}\n"],"mappings":";;;;;;AAiFO,SAAS,MAAM,KAA8C;AAClE,SAAO,iBAAiB,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG;AACnD;AAGA,SAAS,eAAe,KAA4B;AAClD,QAAM,SAAS,MAAM,GAAG,GAAG;AAC3B,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAQ,cAAqD,MAAM,KAAK;AAC1E;AAiBO,SAAS,aAAa,KAAqB;AAChD,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,2BAA2B,KAAK,OAAO,EAAG,QAAO;AACrD,SAAO,WAAW,QAAQ,QAAQ,QAAQ,EAAE,CAAC;AAC/C;AASO,SAAS,yBAAyB,UAA0B;AACjE,QAAM,WACJ,eAAe,QAAQ,KACvB,MAAM,QAAQ,GAAG,cACjB,eAAe,UAAU,KACzB;AACF,SAAO,aAAa,QAAQ;AAC9B;AAKO,SAAS,OAAO,OAAiD;AACtE,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,WAAO,IAAI,IAAI,KAAK,EAAE,SAAS,YAAY;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,cAAc,MAAwB;AACpD,MAAI,KAAK,WAAW,MAAM,EAAG,QAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AACxD,MAAI,KAAK,MAAM,GAAG,EAAE,WAAW,EAAG,QAAO,CAAC,MAAM,OAAO,IAAI,EAAE;AAC7D,SAAO,CAAC,IAAI;AACd;AAGO,SAAS,wBAAwB,MAAkC;AACxE,QAAM,QAAQ,KAAK,MAAM,GAAG;AAC5B,MAAI,MAAM,UAAU,EAAG,QAAO,MAAM,MAAM,EAAE,EAAE,KAAK,GAAG;AACtD,SAAO;AACT;AAGO,SAAS,aAAa,KAAuB;AAClD,SAAO,MAAM,GAAG,GAAG,kBAAkB,CAAC;AACxC;AAGA,SAAS,cAAc,OAA4B,MAA6C;AAC9F,QAAM,WAAW,OAAO,yBAAyB,MAAM,GAAG,CAAC;AAC3D,QAAM,QAAQ,WAAW,cAAc,QAAQ,IAAI,CAAC;AACpD,MAAI,KAAK,eAAgB,OAAM,KAAK,GAAG,aAAa,MAAM,GAAG,CAAC;AAC9D,SAAO;AACT;AAOO,SAAS,sBAAsB,UAA4C;AAChF,QAAM,OAAO,SAAS,YAAY;AAClC,aAAW,SAAS,kBAAkB;AACpC,QAAI,MAAM,OAAQ;AAClB,QAAI,cAAc,OAAO,EAAE,gBAAgB,KAAK,CAAC,EAAE,SAAS,IAAI,EAAG,QAAO,MAAM;AAAA,EAClF;AACA,SAAO;AACT;AAWO,SAAS,cAAc,UAA2B;AACvD,SAAO,SAAS,SAAS,aAAa;AACxC;AAgBO,SAAS,4BAAsC;AACpD,MAAI,OAAO,WAAW,YAAa,QAAO,CAAC;AAE3C,QAAM,WAAW,OAAO,SAAS;AAGjC,MAAI,aAAa,eAAe,aAAa,eAAe,SAAS,WAAW,MAAM,GAAG;AACvF,WAAO,CAAC;AAAA,EACV;AAGA,QAAM,aACJ,QAAQ,IAAI,eAAe,aAC3B,QAAQ,IAAI,2BAA2B,aACvC,cAAc,QAAQ;AACxB,MAAI,YAAY;AACd,WAAO,CAAC,eAAe,YAAY;AAAA,EACrC;AAGA,QAAM,cAAc,oBAAI,IAAY;AACpC,aAAW,SAAS,kBAAkB;AACpC,QAAI,MAAM,OAAQ;AAClB,UAAM,OAAO,OAAO,yBAAyB,MAAM,GAAG,CAAC;AACvD,QAAI,CAAC,KAAM;AACX,UAAM,OAAO,wBAAwB,IAAI;AACzC,QAAI,MAAM;AACR,kBAAY,IAAI,IAAI,IAAI,EAAE;AAC1B,kBAAY,IAAI,IAAI;AAAA,IACtB;AAAA,EACF;AACA,SAAO,MAAM,KAAK,WAAW;AAC/B;AAjPA,IAkCa,kBAiCP,eA2NA;AA9RN;AAAA;AAAA;AAkCO,IAAM,mBAAmD;AAAA,MAC9D,EAAE,KAAK,iBAAiB,YAAY,qCAAqC,QAAQ,gCAAgC;AAAA,MACjH,EAAE,KAAK,eAAiB,YAAY,mCAAqC,QAAQ,8BAA8B;AAAA,MAC/G,EAAE,KAAK,eAAiB,YAAY,mCAAqC,QAAQ,8BAA8B;AAAA,MAC/G,EAAE,KAAK,eAAiB,YAAY,mCAAqC,QAAQ,8BAA8B;AAAA,MAC/G,EAAE,KAAK,cAAiB,YAAY,kCAAqC,QAAQ,6BAA6B;AAAA,MAC9G,EAAE,KAAK,WAAiB,YAAY,0BAAqC,QAAQ,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA,MAK3G,EAAE,KAAK,YAAoB,YAAY,4BAA6B,QAAQ,2BAA2B;AAAA,MACvG,EAAE,KAAK,QAAoB,YAAY,0BAA6B,QAAQ,uBAAuB;AAAA,MACnG,EAAE,KAAK,mBAAoB,YAAY,4BAA6B,QAAQ,4BAA4B,gBAAgB,CAAC,eAAe,iBAAiB,EAAE;AAAA,MAC3J,EAAE,KAAK,aAAoB,YAAY,wBAA6B,QAAQ,6BAA6B,gBAAgB,CAAC,gBAAgB,oBAAoB,kBAAkB,EAAE;AAAA,MAClL,EAAE,KAAK,uBAAuB,YAAY,wBAA0B,QAAQ,uCAAuC,QAAQ,KAAK;AAAA,MAChI,EAAE,KAAK,aAAoB,YAAY,4BAA6B,QAAQ,2BAA2B;AAAA,IACzG;AAgBA,IAAM,gBAAgB;AAAA,MACpB,+BAA+B,QAAQ,IAAI;AAAA,MAC3C,6BAA6B,QAAQ,IAAI;AAAA,MACzC,6BAA6B,QAAQ,IAAI;AAAA,MACzC,6BAA6B,QAAQ,IAAI;AAAA,MACzC,4BAA4B,QAAQ,IAAI;AAAA,MACxC,yBAAyB,QAAQ,IAAI;AAAA,MACrC,0BAA0B,QAAQ,IAAI;AAAA,MACtC,sBAAsB,QAAQ,IAAI;AAAA,MAClC,2BAA2B,QAAQ,IAAI;AAAA,MACvC,qCAAqC,QAAQ,IAAI;AAAA,IACnD;AAgNA,IAAM,YAAY,CAAC,MAAyB,iBAAiB,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC;AACzF,QACE,UAAU,UAAU,IAAI,UAAU,iBAAiB,KACnD,UAAU,UAAU,IAAI,UAAU,WAAW,KAC7C,sBAAsB,aAAa,MAAM,qBACzC,sBAAsB,kBAAkB,MAAM,aAC9C;AAEA,cAAQ;AAAA,QACN;AAAA,MAEF;AAAA,IACF;AAAA;AAAA;;;AC1SA,SAAS,YAA6B;AACtC,SAAS,2BAA2B;AA4C7B,SAAS,MAAM,QAAsB;AAC1C,SAAO,QAAQ,KAAK,MAAM,CAAC;AAC7B;AAsBO,SAAS,WAAW,UAA2B;AAEpD,MAAI,QAAQ,IAAI,aAAa,cAAc;AACzC,WAAO,QAAQ,IAAI,uBAAuB;AAAA,EAC5C;AAGA,MAAI,UAAU;AACZ,WAAO,yBAAyB,QAAQ;AAAA,EAC1C;AAGA,MAAI,QAAQ,IAAI,+BAA+B;AAC7C,WAAO,WAAW,QAAQ,IAAI,6BAA6B;AAAA,EAC7D;AAKA,SAAO,yBAAyB,QAAQ,IAAI,wBAAwB,SAAS;AAC/E;AAzFA,IAyBM;AAzBN;AAAA;AAAA;AAMA;AAmBA,IAAM,UAAU,oBAAsC;AAAA,MACpD,QAAQ;AAAA,QACN,aAAa;AAAA,UACX,kBAAkB;AAAA,YAChB;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAC;AAAA;AAAA;","names":[]}

package/dist/{chunk-27ZGHJDS.cjs → chunk-73CH4CZL.cjs}

@@ -4,14 +4,14 @@
 
 
 
-var _chunkCGUYR6DRcjs = require('./chunk-CGUYR6DR.cjs');
+var _chunkRIEAXUJXcjs = require('./chunk-RIEAXUJX.cjs');
 
 
 
 var _chunkBGD345ZVcjs = require('./chunk-BGD345ZV.cjs');
 
 
-var _chunkPYR4LVAFcjs = require('./chunk-PYR4LVAF.cjs');
+var _chunkG3UN2DXUcjs = require('./chunk-G3UN2DXU.cjs');
 
 // src/components/embeds/pdf-viewer.tsx
 var _lucidereact = require('lucide-react');
@@ -32,7 +32,7 @@ function PdfViewer({ src, fileName, onPreview, onDownload, height }) {
       ] }),
       /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, "div", { className: "flex items-center gap-2 w-full sm:w-auto", children: [
         /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
-          _chunkPYR4LVAFcjs.Button,
+          _chunkG3UN2DXUcjs.Button,
           {
             variant: "outline",
             size: "small-legacy",
@@ -45,7 +45,7 @@ function PdfViewer({ src, fileName, onPreview, onDownload, height }) {
           }
         ),
         /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
-          _chunkPYR4LVAFcjs.Button,
+          _chunkG3UN2DXUcjs.Button,
           {
             variant: "outline",
             size: "small-legacy",
@@ -59,7 +59,7 @@ function PdfViewer({ src, fileName, onPreview, onDownload, height }) {
         )
       ] })
     ] }),
-    /* @__PURE__ */ _jsxruntime.jsx.call(void 0, _chunkCGUYR6DRcjs.EmbedIframe, { src, title: displayName, height })
+    /* @__PURE__ */ _jsxruntime.jsx.call(void 0, _chunkRIEAXUJXcjs.EmbedIframe, { src, title: displayName, height })
   ] });
 }
 
@@ -81,11 +81,11 @@ function GoogleSheetsViewer({ externalUrl, fileName, height }) {
         /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "h2", { className: "text-h3 text-ods-text-primary truncate", children: displayName })
       ] }),
       /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
-        _chunkPYR4LVAFcjs.Button,
+        _chunkG3UN2DXUcjs.Button,
         {
           variant: "outline",
           size: "small-legacy",
-          href: _chunkCGUYR6DRcjs.toGoogleSheetsOriginalUrl.call(void 0, externalUrl),
+          href: _chunkRIEAXUJXcjs.toGoogleSheetsOriginalUrl.call(void 0, externalUrl),
           openInNewTab: true,
           leftIcon: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, _chunkBGD345ZVcjs.GoogleSheetsIcon, { className: "w-4 h-4" }),
           rightIcon: /* @__PURE__ */ _jsxruntime.jsx.call(void 0, _lucidereact.ExternalLink, { className: "w-4 h-4" }),
@@ -95,9 +95,9 @@ function GoogleSheetsViewer({ externalUrl, fileName, height }) {
       )
     ] }),
     /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
-      _chunkCGUYR6DRcjs.EmbedIframe,
+      _chunkRIEAXUJXcjs.EmbedIframe,
       {
-        src: _chunkCGUYR6DRcjs.toGoogleSheetsEmbedUrl.call(void 0, externalUrl),
+        src: _chunkRIEAXUJXcjs.toGoogleSheetsEmbedUrl.call(void 0, externalUrl),
         title: displayName,
         height
       }
@@ -120,11 +120,11 @@ function FileDownloadCard({
       /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "h3", { className: "text-h3 text-ods-text-primary", children: fileName || "File" }),
       /* @__PURE__ */ _jsxruntime.jsxs.call(void 0, "div", { className: "flex items-center justify-center gap-3 mt-2 text-h6 text-ods-text-secondary", children: [
         mimeType && /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "span", { children: mimeType }),
-        typeof fileSize === "number" && /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "span", { children: _chunkCGUYR6DRcjs.formatFileSize.call(void 0, fileSize) })
+        typeof fileSize === "number" && /* @__PURE__ */ _jsxruntime.jsx.call(void 0, "span", { children: _chunkRIEAXUJXcjs.formatFileSize.call(void 0, fileSize) })
       ] })
     ] }),
     fileUrl && /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
-      _chunkPYR4LVAFcjs.Button,
+      _chunkG3UN2DXUcjs.Button,
       {
         variant: "accent",
         href: fileUrl,
@@ -141,4 +141,4 @@ function FileDownloadCard({
 
 
 exports.PdfViewer = PdfViewer; exports.GoogleSheetsViewer = GoogleSheetsViewer; exports.FileDownloadCard = FileDownloadCard;
-//# sourceMappingURL=chunk-27ZGHJDS.cjs.map
+//# sourceMappingURL=chunk-73CH4CZL.cjs.map

package/dist/{chunk-27ZGHJDS.cjs.map → chunk-73CH4CZL.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-27ZGHJDS.cjs","../src/components/embeds/pdf-viewer.tsx","../src/components/embeds/google-sheets-viewer.tsx","../src/components/embeds/file-download-card.tsx"],"names":["jsxs","jsx","Download"],"mappings":"AAAA,qFAAY;AACZ;AACE;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACA;ACXA,2CAA8B;AAiBxB,+CAAA;AALC,SAAS,SAAA,CAAU,EAAE,GAAA,EAAK,QAAA,EAAU,SAAA,EAAW,UAAA,EAAY,OAAO,CAAA,EAAmB;AAC1F,EAAA,MAAM,YAAA,EAAc,SAAA,GAAY,cAAA;AAEhC,EAAA,GAAA,CAAI,CAAC,GAAA,EAAK;AACR,IAAA,uBACE,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,6DAAA,EACb,QAAA,EAAA;AAAA,sBAAA,6BAAA,8BAAC,EAAA,EAAa,SAAA,EAAU,yCAAA,CAAyC,CAAA;AAAA,sBACjE,6BAAA,GAAC,EAAA,EAAE,SAAA,EAAU,yBAAA,EAA0B,QAAA,EAAA,yBAAA,CAAsB;AAAA,IAAA,EAAA,CAC/D,CAAA;AAAA,EAEJ;AAEA,EAAA,uBACE,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,WAAA,EACb,QAAA,EAAA;AAAA,oBAAA,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,oEAAA,EACb,QAAA,EAAA;AAAA,sBAAA,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,iCAAA,EACb,QAAA,EAAA;AAAA,wBAAA,6BAAA,8BAAC,EAAA,EAAa,SAAA,EAAU,mBAAA,CAAmB,CAAA;AAAA,wBAC3C,6BAAA,IAAC,EAAA,EAAG,SAAA,EAAU,wCAAA,EAA0C,QAAA,EAAA,YAAA,CAAY;AAAA,MAAA,EAAA,CACtE,CAAA;AAAA,sBACA,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,0CAAA,EACb,QAAA,EAAA;AAAA,wBAAA,6BAAA;AAAA,UAAC,wBAAA;AAAA,UAAA;AAAA,YACC,OAAA,EAAQ,SAAA;AAAA,YACR,IAAA,EAAK,cAAA;AAAA,YACL,IAAA,EAAM,UAAA,EAAY,KAAA,EAAA,EAAY,GAAA;AAAA,YAC9B,YAAA,EAAc,CAAC,SAAA;AAAA,YACf,OAAA,EAAS,SAAA;AAAA,YACT,QAAA,kBAAU,6BAAA,gBAAC,EAAA,EAAI,SAAA,EAAU,UAAA,CAAU,CAAA;AAAA,YACnC,SAAA,EAAU,wBAAA;AAAA,YACX,QAAA,EAAA;AAAA,UAAA;AAAA,QAED,CAAA;AAAA,wBACA,6BAAA;AAAA,UAAC,wBAAA;AAAA,UAAA;AAAA,YACC,OAAA,EAAQ,SAAA;AAAA,YACR,IAAA,EAAK,cAAA;AAAA,YACL,IAAA,EAAM,WAAA,EAAa,KAAA,EAAA,EAAY,GAAA;AAAA,YAC/B,YAAA,EAAc,CAAC,UAAA;AAAA,YACf,OAAA,EAAS,UAAA;AAAA,YACT,QAAA,kBAAU,6BAAA,qBAAC,EAAA,EAAS,SAAA,EAAU,UAAA,CAAU,CAAA;AAAA,YACxC,SAAA,EAAU,wBAAA;AAAA,YACX,QAAA,EAAA;AAAA,UAAA;AAAA,QAED;AAAA,MAAA,EAAA,CACF;AAAA,IAAA,EAAA,CACF,CAAA;AAAA,oBACA,6BAAA,6BAAC,EAAA,EAAY,GAAA,EAAU,KAAA,EAAO,WAAA,EAAa,OAAA,CAAgB;AAAA,EAAA,EAAA,CAC7D,CAAA;AAEJ;ADCA;AACA;AE7DA;AAgBM;AALC,SAAS,kBAAA,CAAmB,EAAE,WAAA,EAAa,QAAA,EAAU,OAAO,CAAA,EAA4B;AAC7F,EAAA,MAAM,YAAA,EAAc,SAAA,GAAY,cAAA;AAEhC,EAAA,GAAA,CAAI,CAAC,WAAA,EAAa;AAChB,IAAA,uBACEA,8BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,6DAAA,EACb,QAAA,EAAA;AAAA,sBAAAC,6BAAAA,kCAAC,EAAA,EAAiB,SAAA,EAAU,yCAAA,CAAyC,CAAA;AAAA,sBACrEA,6BAAAA,GAAC,EAAA,EAAE,SAAA,EAAU,yBAAA,EAA0B,QAAA,EAAA,kCAAA,CAA+B;AAAA,IAAA,EAAA,CACxE,CAAA;AAAA,EAEJ;AAEA,EAAA,uBACED,8BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,WAAA,EACb,QAAA,EAAA;AAAA,oBAAAA,8BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,oEAAA,EACb,QAAA,EAAA;AAAA,sBAAAA,8BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,iCAAA,EACb,QAAA,EAAA;AAAA,wBAAAC,6BAAAA,kCAAC,EAAA,EAAiB,SAAA,EAAU,mBAAA,CAAmB,CAAA;AAAA,wBAC/CA,6BAAAA,IAAC,EAAA,EAAG,SAAA,EAAU,wCAAA,EAA0C,QAAA,EAAA,YAAA,CAAY;AAAA,MAAA,EAAA,CACtE,CAAA;AAAA,sBACAA,6BAAAA;AAAA,QAAC,wBAAA;AAAA,QAAA;AAAA,UACC,OAAA,EAAQ,SAAA;AAAA,UACR,IAAA,EAAK,cAAA;AAAA,UACL,IAAA,EAAM,yDAAA,WAAqC,CAAA;AAAA,UAC3C,YAAA,EAAY,IAAA;AAAA,UACZ,QAAA,kBAAUA,6BAAAA,kCAAC,EAAA,EAAiB,SAAA,EAAU,UAAA,CAAU,CAAA;AAAA,UAChD,SAAA,kBAAWA,6BAAAA,yBAAC,EAAA,EAAa,SAAA,EAAU,UAAA,CAAU,CAAA;AAAA,UAC7C,SAAA,EAAU,kBAAA;AAAA,UACX,QAAA,EAAA;AAAA,QAAA;AAAA,MAED;AAAA,IAAA,EAAA,CACF,CAAA;AAAA,oBACAA,6BAAAA;AAAA,MAAC,6BAAA;AAAA,MAAA;AAAA,QACC,GAAA,EAAK,sDAAA,WAAkC,CAAA;AAAA,QACvC,KAAA,EAAO,WAAA;AAAA,QACP;AAAA,MAAA;AAAA,IACF;AAAA,EAAA,EAAA,CACF,CAAA;AAEJ;AFqDA;AACA;AGzGA;AA4BQ;AATD,SAAS,gBAAA,CAAiB;AAAA,EAC/B,QAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAA,EAA0B;AACxB,EAAA,uBACEA,6BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,iDAAA,EACb,QAAA,kBAAAD,8BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,2FAAA,EACb,QAAA,EAAA;AAAA,oBAAAC,6BAAAA,qBAAC,EAAA,EAAS,SAAA,EAAU,4CAAA,CAA4C,CAAA;AAAA,oBAChED,8BAAAA,KAAC,EAAA,EACC,QAAA,EAAA;AAAA,sBAAAC,6BAAAA,IAAC,EAAA,EAAG,SAAA,EAAU,+BAAA,EACX,QAAA,EAAA,SAAA,GAAY,OAAA,CACf,CAAA;AAAA,sBACAD,8BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,6EAAA,EACZ,QAAA,EAAA;AAAA,QAAA,SAAA,mBAAYC,6BAAAA,MAAC,EAAA,EAAM,QAAA,EAAA,SAAA,CAAS,CAAA;AAAA,QAC5B,OAAO,SAAA,IAAa,SAAA,mBAAYA,6BAAAA,MAAC,EAAA,EAAM,QAAA,EAAA,8CAAA,QAAuB,EAAA,CAAE;AAAA,MAAA,EAAA,CACnE;AAAA,IAAA,EAAA,CACF,CAAA;AAAA,IACC,QAAA,mBACCA,6BAAAA;AAAA,MAAC,wBAAA;AAAA,MAAA;AAAA,QACC,OAAA,EAAQ,QAAA;AAAA,QACR,IAAA,EAAM,OAAA;AAAA,QACN,YAAA,EAAY,IAAA;AAAA,QACZ,QAAA,kBAAUA,6BAAAA,qBAACC,EAAA,EAAS,SAAA,EAAU,UAAA,CAAU,CAAA;AAAA,QACzC,QAAA,EAAA;AAAA,MAAA;AAAA,IAED;AAAA,EAAA,EAAA,CAEJ,EAAA,CACF,CAAA;AAEJ;AHoFA;AACA;AACE;AACA;AACA;AACF,4HAAC","file":"/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-27ZGHJDS.cjs","sourcesContent":[null,"\"use client\"\n\nimport React from 'react'\nimport { Button } from '../ui'\nimport { Download, Eye } from 'lucide-react'\nimport { AdobePdfIcon } from '../icons-v2-generated'\nimport { EmbedIframe } from './embed-iframe'\n\nexport interface PdfViewerProps {\n  src: string\n  fileName?: string\n  onPreview?: () => void\n  onDownload?: () => void\n  height?: string\n}\n\nexport function PdfViewer({ src, fileName, onPreview, onDownload, height }: PdfViewerProps) {\n  const displayName = fileName || 'PDF Document'\n\n  if (!src) {\n    return (\n      <div className=\"flex flex-col items-center justify-center py-16 text-center\">\n        <AdobePdfIcon className=\"w-16 h-16 text-ods-text-secondary mb-4\" />\n        <p className=\"text-ods-text-secondary\">PDF file not available</p>\n      </div>\n    )\n  }\n\n  return (\n    <div className=\"space-y-4\">\n      <div className=\"flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between\">\n        <div className=\"flex items-center gap-2 min-w-0\">\n          <AdobePdfIcon className=\"w-5 h-5 shrink-0\" />\n          <h2 className=\"text-h3 text-ods-text-primary truncate\">{displayName}</h2>\n        </div>\n        <div className=\"flex items-center gap-2 w-full sm:w-auto\">\n          <Button\n            variant=\"outline\"\n            size=\"small-legacy\"\n            href={onPreview ? undefined : src}\n            openInNewTab={!onPreview}\n            onClick={onPreview}\n            leftIcon={<Eye className=\"w-4 h-4\" />}\n            className=\"flex-1 sm:flex-initial\"\n          >\n            Preview\n          </Button>\n          <Button\n            variant=\"outline\"\n            size=\"small-legacy\"\n            href={onDownload ? undefined : src}\n            openInNewTab={!onDownload}\n            onClick={onDownload}\n            leftIcon={<Download className=\"w-4 h-4\" />}\n            className=\"flex-1 sm:flex-initial\"\n          >\n            Download\n          </Button>\n        </div>\n      </div>\n      <EmbedIframe src={src} title={displayName} height={height} />\n    </div>\n  )\n}\n","\"use client\"\n\nimport React from 'react'\nimport { Button } from '../ui'\nimport { ExternalLink } from 'lucide-react'\nimport { GoogleSheetsIcon } from '../icons-v2-generated'\nimport { EmbedIframe } from './embed-iframe'\nimport { toGoogleSheetsEmbedUrl, toGoogleSheetsOriginalUrl } from '../../utils/embed-url-converters'\n\nexport interface GoogleSheetsViewerProps {\n  externalUrl: string\n  fileName?: string\n  height?: string\n}\n\nexport function GoogleSheetsViewer({ externalUrl, fileName, height }: GoogleSheetsViewerProps) {\n  const displayName = fileName || 'Google Sheet'\n\n  if (!externalUrl) {\n    return (\n      <div className=\"flex flex-col items-center justify-center py-16 text-center\">\n        <GoogleSheetsIcon className=\"w-16 h-16 text-ods-text-secondary mb-4\" />\n        <p className=\"text-ods-text-secondary\">Google Sheet URL not configured</p>\n      </div>\n    )\n  }\n\n  return (\n    <div className=\"space-y-4\">\n      <div className=\"flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between\">\n        <div className=\"flex items-center gap-2 min-w-0\">\n          <GoogleSheetsIcon className=\"w-5 h-5 shrink-0\" />\n          <h2 className=\"text-h3 text-ods-text-primary truncate\">{displayName}</h2>\n        </div>\n        <Button\n          variant=\"outline\"\n          size=\"small-legacy\"\n          href={toGoogleSheetsOriginalUrl(externalUrl)}\n          openInNewTab\n          leftIcon={<GoogleSheetsIcon className=\"w-4 h-4\" />}\n          rightIcon={<ExternalLink className=\"w-4 h-4\" />}\n          className=\"w-full sm:w-auto\"\n        >\n          Open in Google Sheets\n        </Button>\n      </div>\n      <EmbedIframe\n        src={toGoogleSheetsEmbedUrl(externalUrl)}\n        title={displayName}\n        height={height}\n      />\n    </div>\n  )\n}\n","import React from 'react'\nimport { Button } from '../ui'\nimport { FileText, Download } from 'lucide-react'\nimport { formatFileSize } from '../../utils'\n\nexport interface FileDownloadCardProps {\n  fileName?: string\n  mimeType?: string\n  fileSize?: number\n  fileUrl?: string\n}\n\n/**\n * Generic downloadable-file card for the `file` document type. Used by\n * `<DocsHubPage>`'s default `documentTypeRenderers.file`. Embedders can\n * override the default by passing their own `file` renderer.\n *\n * When `fileUrl` is missing, the Download button is omitted (the card still\n * renders the filename + type + size so the user knows what they were\n * about to download).\n */\nexport function FileDownloadCard({\n  fileName,\n  mimeType,\n  fileSize,\n  fileUrl,\n}: FileDownloadCardProps) {\n  return (\n    <div className=\"flex flex-col items-center justify-center py-16\">\n      <div className=\"bg-ods-card border border-ods-border rounded-xl p-8 max-w-md w-full text-center space-y-4\">\n        <FileText className=\"w-16 h-16 text-ods-text-secondary mx-auto\" />\n        <div>\n          <h3 className=\"text-h3 text-ods-text-primary\">\n            {fileName || 'File'}\n          </h3>\n          <div className=\"flex items-center justify-center gap-3 mt-2 text-h6 text-ods-text-secondary\">\n            {mimeType && <span>{mimeType}</span>}\n            {typeof fileSize === 'number' && <span>{formatFileSize(fileSize)}</span>}\n          </div>\n        </div>\n        {fileUrl && (\n          <Button\n            variant=\"accent\"\n            href={fileUrl}\n            openInNewTab\n            leftIcon={<Download className=\"w-4 h-4\" />}\n          >\n            Download File\n          </Button>\n        )}\n      </div>\n    </div>\n  )\n}\n"]}
+{"version":3,"sources":["/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-73CH4CZL.cjs","../src/components/embeds/pdf-viewer.tsx","../src/components/embeds/google-sheets-viewer.tsx","../src/components/embeds/file-download-card.tsx"],"names":["jsxs","jsx","Download"],"mappings":"AAAA,qFAAY;AACZ;AACE;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACA;ACXA,2CAA8B;AAiBxB,+CAAA;AALC,SAAS,SAAA,CAAU,EAAE,GAAA,EAAK,QAAA,EAAU,SAAA,EAAW,UAAA,EAAY,OAAO,CAAA,EAAmB;AAC1F,EAAA,MAAM,YAAA,EAAc,SAAA,GAAY,cAAA;AAEhC,EAAA,GAAA,CAAI,CAAC,GAAA,EAAK;AACR,IAAA,uBACE,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,6DAAA,EACb,QAAA,EAAA;AAAA,sBAAA,6BAAA,8BAAC,EAAA,EAAa,SAAA,EAAU,yCAAA,CAAyC,CAAA;AAAA,sBACjE,6BAAA,GAAC,EAAA,EAAE,SAAA,EAAU,yBAAA,EAA0B,QAAA,EAAA,yBAAA,CAAsB;AAAA,IAAA,EAAA,CAC/D,CAAA;AAAA,EAEJ;AAEA,EAAA,uBACE,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,WAAA,EACb,QAAA,EAAA;AAAA,oBAAA,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,oEAAA,EACb,QAAA,EAAA;AAAA,sBAAA,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,iCAAA,EACb,QAAA,EAAA;AAAA,wBAAA,6BAAA,8BAAC,EAAA,EAAa,SAAA,EAAU,mBAAA,CAAmB,CAAA;AAAA,wBAC3C,6BAAA,IAAC,EAAA,EAAG,SAAA,EAAU,wCAAA,EAA0C,QAAA,EAAA,YAAA,CAAY;AAAA,MAAA,EAAA,CACtE,CAAA;AAAA,sBACA,8BAAA,KAAC,EAAA,EAAI,SAAA,EAAU,0CAAA,EACb,QAAA,EAAA;AAAA,wBAAA,6BAAA;AAAA,UAAC,wBAAA;AAAA,UAAA;AAAA,YACC,OAAA,EAAQ,SAAA;AAAA,YACR,IAAA,EAAK,cAAA;AAAA,YACL,IAAA,EAAM,UAAA,EAAY,KAAA,EAAA,EAAY,GAAA;AAAA,YAC9B,YAAA,EAAc,CAAC,SAAA;AAAA,YACf,OAAA,EAAS,SAAA;AAAA,YACT,QAAA,kBAAU,6BAAA,gBAAC,EAAA,EAAI,SAAA,EAAU,UAAA,CAAU,CAAA;AAAA,YACnC,SAAA,EAAU,wBAAA;AAAA,YACX,QAAA,EAAA;AAAA,UAAA;AAAA,QAED,CAAA;AAAA,wBACA,6BAAA;AAAA,UAAC,wBAAA;AAAA,UAAA;AAAA,YACC,OAAA,EAAQ,SAAA;AAAA,YACR,IAAA,EAAK,cAAA;AAAA,YACL,IAAA,EAAM,WAAA,EAAa,KAAA,EAAA,EAAY,GAAA;AAAA,YAC/B,YAAA,EAAc,CAAC,UAAA;AAAA,YACf,OAAA,EAAS,UAAA;AAAA,YACT,QAAA,kBAAU,6BAAA,qBAAC,EAAA,EAAS,SAAA,EAAU,UAAA,CAAU,CAAA;AAAA,YACxC,SAAA,EAAU,wBAAA;AAAA,YACX,QAAA,EAAA;AAAA,UAAA;AAAA,QAED;AAAA,MAAA,EAAA,CACF;AAAA,IAAA,EAAA,CACF,CAAA;AAAA,oBACA,6BAAA,6BAAC,EAAA,EAAY,GAAA,EAAU,KAAA,EAAO,WAAA,EAAa,OAAA,CAAgB;AAAA,EAAA,EAAA,CAC7D,CAAA;AAEJ;ADCA;AACA;AE7DA;AAgBM;AALC,SAAS,kBAAA,CAAmB,EAAE,WAAA,EAAa,QAAA,EAAU,OAAO,CAAA,EAA4B;AAC7F,EAAA,MAAM,YAAA,EAAc,SAAA,GAAY,cAAA;AAEhC,EAAA,GAAA,CAAI,CAAC,WAAA,EAAa;AAChB,IAAA,uBACEA,8BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,6DAAA,EACb,QAAA,EAAA;AAAA,sBAAAC,6BAAAA,kCAAC,EAAA,EAAiB,SAAA,EAAU,yCAAA,CAAyC,CAAA;AAAA,sBACrEA,6BAAAA,GAAC,EAAA,EAAE,SAAA,EAAU,yBAAA,EAA0B,QAAA,EAAA,kCAAA,CAA+B;AAAA,IAAA,EAAA,CACxE,CAAA;AAAA,EAEJ;AAEA,EAAA,uBACED,8BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,WAAA,EACb,QAAA,EAAA;AAAA,oBAAAA,8BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,oEAAA,EACb,QAAA,EAAA;AAAA,sBAAAA,8BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,iCAAA,EACb,QAAA,EAAA;AAAA,wBAAAC,6BAAAA,kCAAC,EAAA,EAAiB,SAAA,EAAU,mBAAA,CAAmB,CAAA;AAAA,wBAC/CA,6BAAAA,IAAC,EAAA,EAAG,SAAA,EAAU,wCAAA,EAA0C,QAAA,EAAA,YAAA,CAAY;AAAA,MAAA,EAAA,CACtE,CAAA;AAAA,sBACAA,6BAAAA;AAAA,QAAC,wBAAA;AAAA,QAAA;AAAA,UACC,OAAA,EAAQ,SAAA;AAAA,UACR,IAAA,EAAK,cAAA;AAAA,UACL,IAAA,EAAM,yDAAA,WAAqC,CAAA;AAAA,UAC3C,YAAA,EAAY,IAAA;AAAA,UACZ,QAAA,kBAAUA,6BAAAA,kCAAC,EAAA,EAAiB,SAAA,EAAU,UAAA,CAAU,CAAA;AAAA,UAChD,SAAA,kBAAWA,6BAAAA,yBAAC,EAAA,EAAa,SAAA,EAAU,UAAA,CAAU,CAAA;AAAA,UAC7C,SAAA,EAAU,kBAAA;AAAA,UACX,QAAA,EAAA;AAAA,QAAA;AAAA,MAED;AAAA,IAAA,EAAA,CACF,CAAA;AAAA,oBACAA,6BAAAA;AAAA,MAAC,6BAAA;AAAA,MAAA;AAAA,QACC,GAAA,EAAK,sDAAA,WAAkC,CAAA;AAAA,QACvC,KAAA,EAAO,WAAA;AAAA,QACP;AAAA,MAAA;AAAA,IACF;AAAA,EAAA,EAAA,CACF,CAAA;AAEJ;AFqDA;AACA;AGzGA;AA4BQ;AATD,SAAS,gBAAA,CAAiB;AAAA,EAC/B,QAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAA,EAA0B;AACxB,EAAA,uBACEA,6BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,iDAAA,EACb,QAAA,kBAAAD,8BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,2FAAA,EACb,QAAA,EAAA;AAAA,oBAAAC,6BAAAA,qBAAC,EAAA,EAAS,SAAA,EAAU,4CAAA,CAA4C,CAAA;AAAA,oBAChED,8BAAAA,KAAC,EAAA,EACC,QAAA,EAAA;AAAA,sBAAAC,6BAAAA,IAAC,EAAA,EAAG,SAAA,EAAU,+BAAA,EACX,QAAA,EAAA,SAAA,GAAY,OAAA,CACf,CAAA;AAAA,sBACAD,8BAAAA,KAAC,EAAA,EAAI,SAAA,EAAU,6EAAA,EACZ,QAAA,EAAA;AAAA,QAAA,SAAA,mBAAYC,6BAAAA,MAAC,EAAA,EAAM,QAAA,EAAA,SAAA,CAAS,CAAA;AAAA,QAC5B,OAAO,SAAA,IAAa,SAAA,mBAAYA,6BAAAA,MAAC,EAAA,EAAM,QAAA,EAAA,8CAAA,QAAuB,EAAA,CAAE;AAAA,MAAA,EAAA,CACnE;AAAA,IAAA,EAAA,CACF,CAAA;AAAA,IACC,QAAA,mBACCA,6BAAAA;AAAA,MAAC,wBAAA;AAAA,MAAA;AAAA,QACC,OAAA,EAAQ,QAAA;AAAA,QACR,IAAA,EAAM,OAAA;AAAA,QACN,YAAA,EAAY,IAAA;AAAA,QACZ,QAAA,kBAAUA,6BAAAA,qBAACC,EAAA,EAAS,SAAA,EAAU,UAAA,CAAU,CAAA;AAAA,QACzC,QAAA,EAAA;AAAA,MAAA;AAAA,IAED;AAAA,EAAA,EAAA,CAEJ,EAAA,CACF,CAAA;AAEJ;AHoFA;AACA;AACE;AACA;AACA;AACF,4HAAC","file":"/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-73CH4CZL.cjs","sourcesContent":[null,"\"use client\"\n\nimport React from 'react'\nimport { Button } from '../ui'\nimport { Download, Eye } from 'lucide-react'\nimport { AdobePdfIcon } from '../icons-v2-generated'\nimport { EmbedIframe } from './embed-iframe'\n\nexport interface PdfViewerProps {\n  src: string\n  fileName?: string\n  onPreview?: () => void\n  onDownload?: () => void\n  height?: string\n}\n\nexport function PdfViewer({ src, fileName, onPreview, onDownload, height }: PdfViewerProps) {\n  const displayName = fileName || 'PDF Document'\n\n  if (!src) {\n    return (\n      <div className=\"flex flex-col items-center justify-center py-16 text-center\">\n        <AdobePdfIcon className=\"w-16 h-16 text-ods-text-secondary mb-4\" />\n        <p className=\"text-ods-text-secondary\">PDF file not available</p>\n      </div>\n    )\n  }\n\n  return (\n    <div className=\"space-y-4\">\n      <div className=\"flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between\">\n        <div className=\"flex items-center gap-2 min-w-0\">\n          <AdobePdfIcon className=\"w-5 h-5 shrink-0\" />\n          <h2 className=\"text-h3 text-ods-text-primary truncate\">{displayName}</h2>\n        </div>\n        <div className=\"flex items-center gap-2 w-full sm:w-auto\">\n          <Button\n            variant=\"outline\"\n            size=\"small-legacy\"\n            href={onPreview ? undefined : src}\n            openInNewTab={!onPreview}\n            onClick={onPreview}\n            leftIcon={<Eye className=\"w-4 h-4\" />}\n            className=\"flex-1 sm:flex-initial\"\n          >\n            Preview\n          </Button>\n          <Button\n            variant=\"outline\"\n            size=\"small-legacy\"\n            href={onDownload ? undefined : src}\n            openInNewTab={!onDownload}\n            onClick={onDownload}\n            leftIcon={<Download className=\"w-4 h-4\" />}\n            className=\"flex-1 sm:flex-initial\"\n          >\n            Download\n          </Button>\n        </div>\n      </div>\n      <EmbedIframe src={src} title={displayName} height={height} />\n    </div>\n  )\n}\n","\"use client\"\n\nimport React from 'react'\nimport { Button } from '../ui'\nimport { ExternalLink } from 'lucide-react'\nimport { GoogleSheetsIcon } from '../icons-v2-generated'\nimport { EmbedIframe } from './embed-iframe'\nimport { toGoogleSheetsEmbedUrl, toGoogleSheetsOriginalUrl } from '../../utils/embed-url-converters'\n\nexport interface GoogleSheetsViewerProps {\n  externalUrl: string\n  fileName?: string\n  height?: string\n}\n\nexport function GoogleSheetsViewer({ externalUrl, fileName, height }: GoogleSheetsViewerProps) {\n  const displayName = fileName || 'Google Sheet'\n\n  if (!externalUrl) {\n    return (\n      <div className=\"flex flex-col items-center justify-center py-16 text-center\">\n        <GoogleSheetsIcon className=\"w-16 h-16 text-ods-text-secondary mb-4\" />\n        <p className=\"text-ods-text-secondary\">Google Sheet URL not configured</p>\n      </div>\n    )\n  }\n\n  return (\n    <div className=\"space-y-4\">\n      <div className=\"flex flex-col gap-3 sm:flex-row sm:items-center sm:justify-between\">\n        <div className=\"flex items-center gap-2 min-w-0\">\n          <GoogleSheetsIcon className=\"w-5 h-5 shrink-0\" />\n          <h2 className=\"text-h3 text-ods-text-primary truncate\">{displayName}</h2>\n        </div>\n        <Button\n          variant=\"outline\"\n          size=\"small-legacy\"\n          href={toGoogleSheetsOriginalUrl(externalUrl)}\n          openInNewTab\n          leftIcon={<GoogleSheetsIcon className=\"w-4 h-4\" />}\n          rightIcon={<ExternalLink className=\"w-4 h-4\" />}\n          className=\"w-full sm:w-auto\"\n        >\n          Open in Google Sheets\n        </Button>\n      </div>\n      <EmbedIframe\n        src={toGoogleSheetsEmbedUrl(externalUrl)}\n        title={displayName}\n        height={height}\n      />\n    </div>\n  )\n}\n","import React from 'react'\nimport { Button } from '../ui'\nimport { FileText, Download } from 'lucide-react'\nimport { formatFileSize } from '../../utils'\n\nexport interface FileDownloadCardProps {\n  fileName?: string\n  mimeType?: string\n  fileSize?: number\n  fileUrl?: string\n}\n\n/**\n * Generic downloadable-file card for the `file` document type. Used by\n * `<DocsHubPage>`'s default `documentTypeRenderers.file`. Embedders can\n * override the default by passing their own `file` renderer.\n *\n * When `fileUrl` is missing, the Download button is omitted (the card still\n * renders the filename + type + size so the user knows what they were\n * about to download).\n */\nexport function FileDownloadCard({\n  fileName,\n  mimeType,\n  fileSize,\n  fileUrl,\n}: FileDownloadCardProps) {\n  return (\n    <div className=\"flex flex-col items-center justify-center py-16\">\n      <div className=\"bg-ods-card border border-ods-border rounded-xl p-8 max-w-md w-full text-center space-y-4\">\n        <FileText className=\"w-16 h-16 text-ods-text-secondary mx-auto\" />\n        <div>\n          <h3 className=\"text-h3 text-ods-text-primary\">\n            {fileName || 'File'}\n          </h3>\n          <div className=\"flex items-center justify-center gap-3 mt-2 text-h6 text-ods-text-secondary\">\n            {mimeType && <span>{mimeType}</span>}\n            {typeof fileSize === 'number' && <span>{formatFileSize(fileSize)}</span>}\n          </div>\n        </div>\n        {fileUrl && (\n          <Button\n            variant=\"accent\"\n            href={fileUrl}\n            openInNewTab\n            leftIcon={<Download className=\"w-4 h-4\" />}\n          >\n            Download File\n          </Button>\n        )}\n      </div>\n    </div>\n  )\n}\n"]}

package/dist/{chunk-VWNYNJWU.js → chunk-74ZFCTRZ.js}

@@ -12,15 +12,15 @@ import {
   SelectValue,
   Textarea,
   useChatAttachments
-} from "./chunk-NPN4WYOI.js";
+} from "./chunk-TVMARS74.js";
 import {
   useContactSubmission,
   useHumanitySignals
-} from "./chunk-MK2YWJAA.js";
+} from "./chunk-OTV4A6NA.js";
 import {
   Button,
   Input
-} from "./chunk-6CITW5BD.js";
+} from "./chunk-SASR7SK5.js";
 
 // src/components/contact/contact-form.tsx
 import { useState } from "react";
@@ -372,4 +372,4 @@ function ContactForm({
 export {
   ContactForm
 };
-//# sourceMappingURL=chunk-VWNYNJWU.js.map
+//# sourceMappingURL=chunk-74ZFCTRZ.js.map

package/dist/{chunk-7HNLEZ6N.js → chunk-7D5KOJMF.js}

@@ -3,11 +3,11 @@ import {
   FileDownloadCard,
   GoogleSheetsViewer,
   PdfViewer
-} from "./chunk-ZWVQULAJ.js";
+} from "./chunk-XDBNMB5K.js";
 import {
   DocSearchBar,
   useDocSearch
-} from "./chunk-6O47KXGR.js";
+} from "./chunk-NY4WLKNU.js";
 import {
   DEFAULT_FOLDER_INDEX_FILE,
   FigmaEmbed,
@@ -19,13 +19,13 @@ import {
   findDocNodeByPath,
   getDocAncestorNodeIds,
   stripFolderIndexFromPath
-} from "./chunk-NPN4WYOI.js";
+} from "./chunk-TVMARS74.js";
 import {
   HUB_HEADER_OFFSET_PX,
   contentFetch,
   navigateSamePageHash,
   scrollElementIntoView
-} from "./chunk-MK2YWJAA.js";
+} from "./chunk-OTV4A6NA.js";
 import {
   useChatRuntime
 } from "./chunk-KFQXO7QB.js";
@@ -36,7 +36,7 @@ import {
 import {
   cn,
   init_cn
-} from "./chunk-XTCBRQN2.js";
+} from "./chunk-4GPWLGKT.js";
 
 // src/components/docs/doc-viewer.tsx
 import { useMemo as useMemo2 } from "react";
@@ -1845,4 +1845,4 @@ export {
   EmbedSkeleton,
   DocsHubPage
 };
-//# sourceMappingURL=chunk-7HNLEZ6N.js.map
+//# sourceMappingURL=chunk-7D5KOJMF.js.map

package/dist/{chunk-FIG2RKZF.cjs → chunk-A62C4C4V.cjs}

@@ -151,7 +151,16 @@ var init_cn = _chunkVRHGVLSLcjs.__esm.call(void 0, {
     twMerge = _tailwindmerge.extendTailwindMerge.call(void 0, {
       extend: {
         classGroups: {
-          "ods-typography": ["text-h1", "text-h2", "text-h3", "text-h4", "text-h5", "text-h6"]
+          "ods-typography": [
+            "text-h1",
+            "text-h2",
+            "text-h3",
+            "text-h4",
+            "text-h5",
+            "text-h6",
+            "text-code",
+            "text-badge"
+          ]
         }
       }
     });
@@ -166,4 +175,4 @@ var init_cn = _chunkVRHGVLSLcjs.__esm.call(void 0, {
 
 
 exports.getPlatformProductionUrl = getPlatformProductionUrl; exports.getAllPlatformBaseDomains = getAllPlatformBaseDomains; exports.init_platform_domains = init_platform_domains; exports.cn = cn; exports.getBaseUrl = getBaseUrl; exports.init_cn = init_cn;
-//# sourceMappingURL=chunk-FIG2RKZF.cjs.map
+//# sourceMappingURL=chunk-A62C4C4V.cjs.map

package/dist/chunk-A62C4C4V.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-A62C4C4V.cjs","../src/platform-domains.ts","../src/utils/cn.ts"],"names":[],"mappings":"AAAA,6rBAAY;AACZ;AACE;AACF,wDAA6B;AAC7B;AACA;AC4EO,SAAS,KAAA,CAAM,GAAA,EAA8C;AAClE,EAAA,OAAO,gBAAA,CAAiB,IAAA,CAAK,CAAC,CAAA,EAAA,GAAM,CAAA,CAAE,IAAA,IAAQ,GAAG,CAAA;AACnD;AAGA,SAAS,cAAA,CAAe,GAAA,EAA4B;AAClD,EAAA,MAAM,OAAA,kBAAS,KAAA,iBAAM,GAAG,CAAA,6BAAG,QAAA;AAC3B,EAAA,GAAA,CAAI,CAAC,MAAA,EAAQ,OAAO,IAAA;AACpB,EAAA,OAAQ,aAAA,CAAqD,MAAM,EAAA,GAAK,IAAA;AAC1E;AAiBO,SAAS,YAAA,CAAa,GAAA,EAAqB;AAChD,EAAA,MAAM,QAAA,EAAU,GAAA,CAAI,IAAA,CAAK,CAAA;AACzB,EAAA,GAAA,CAAI,0BAAA,CAA2B,IAAA,CAAK,OAAO,CAAA,EAAG,OAAO,OAAA;AACrD,EAAA,OAAO,CAAA,QAAA,EAAW,OAAA,CAAQ,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAC,CAAA,CAAA;AAC/C;AASmE;AAG/D,EAAA;AAG0B,EAAA;AAC9B;AAKwE;AACnD,EAAA;AACf,EAAA;AACyC,IAAA;AACrC,EAAA;AACC,IAAA;AACT,EAAA;AACF;AAGsD;AACT,EAAA;AACD,EAAA;AAC9B,EAAA;AACd;AAG0E;AAC5C,EAAA;AACkB,EAAA;AACvC,EAAA;AACT;AAGoD;AACZ,EAAA;AACxC;AAGgG;AACtE,EAAA;AACe,EAAA;AACA,EAAA;AAChC,EAAA;AACT;AAOkF;AAC9C,EAAA;AACI,EAAA;AAClB,IAAA;AACyB,IAAA;AAC7C,EAAA;AACO,EAAA;AACT;AAWyD;AACjB,EAAA;AACxC;AAgBsD;AACT,EAAA;AAEV,EAAA;AAGY,EAAA;AACnC,IAAA;AACV,EAAA;AAI6B,EAAA;AAGb,EAAA;AACqB,IAAA;AACrC,EAAA;AAGoC,EAAA;AACE,EAAA;AAClB,IAAA;AACE,IAAA;AACT,IAAA;AAC8B,IAAA;AAC/B,IAAA;AACkB,MAAA;AACN,MAAA;AACtB,IAAA;AACF,EAAA;AAC6B,EAAA;AAC/B;AA6CM;AA9RN;AAAA,EAAA;AAAA,IAAA;AAkCgE,IAAA;AAC1B,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AAAuE;AAAA;AAAA;AAAA;AAKpE,MAAA;AACA,MAAA;AACA,MAAA;AACA,MAAA;AACG,MAAA;AACH,MAAA;AACzC,IAAA;AAgBsB,IAAA;AACmB,MAAA;AACE,MAAA;AACA,MAAA;AACA,MAAA;AACD,MAAA;AACH,MAAA;AACC,MAAA;AACJ,MAAA;AACK,MAAA;AACF,MAAA;AACvC,IAAA;AAgN6D,IAAA;AAEzB,IAAA;AAM1B,MAAA;AACN,QAAA;AAEF,MAAA;AACF,IAAA;AAAA,EAAA;AAAA;AD5KgD;AACA;AE/HV;AACF;AA4CQ;AACf,EAAA;AAC7B;AAsBsD;AAET,EAAA;AACC,IAAA;AAC5C,EAAA;AAGc,EAAA;AAC4B,IAAA;AAC1C,EAAA;AAGgB,EAAA;AACgB,IAAA;AAChC,EAAA;AAK4C,EAAA;AAC9C;AAhEM;AAzBN;AAAA,EAAA;AAAA,IAAA;AAMA,IAAA;AAmBsD,IAAA;AAC5C,MAAA;AACO,QAAA;AACO,UAAA;AAChB,YAAA;AACA,YAAA;AACA,YAAA;AACA,YAAA;AACA,YAAA;AACA,YAAA;AACA,YAAA;AACA,YAAA;AACF,UAAA;AACF,QAAA;AACF,MAAA;AACD,IAAA;AAAA,EAAA;AAAA;AFgI+C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/openframe-oss-lib/openframe-oss-lib/openframe-frontend-core/dist/chunk-A62C4C4V.cjs","sourcesContent":[null,"/**\n * Platform-Domain SSOT (single source of truth) + derivations.\n *\n * ONE registry maps each platform → its canonical production URL (`defaultUrl`,\n * the load-bearing source) with an optional per-deploy `NEXT_PUBLIC_*_URL`\n * OVERRIDE. Everything else — the reverse host→platform resolver, the cookie\n * base-domain set (the cross-subdomain SSO mechanism), www/apex expansion, the\n * URL→host parse, preview detection — derives from this one table.\n *\n * EDGE-SAFE + PURE: no React/clsx/tailwind, no `server-only`, no `node:`\n * builtins, no `'use client'`. So it is legal in the Edge middleware\n * (`proxy.ts`), in `'use client'` providers, AND in `server-only` modules\n * (e.g. cookie-domain-server.ts) simultaneously. The ONLY non-pure export is\n * `getAllPlatformBaseDomains`, which reads `typeof window`/`process.env` to\n * preserve byte-identical cookie behavior.\n */\n\nimport type { PlatformName } from './types/platform'\n\nexport type PlatformDomainKey = PlatformName | 'openframe-dashboard'\n\nexport interface PlatformDomainEntry {\n  /** Platform key (matches `PlatformName`, plus the forward-only `openframe-dashboard`). */\n  key: PlatformDomainKey\n  /** Canonical production URL — the LOAD-BEARING source of truth (today's hardcoded fallbacks). */\n  defaultUrl: string\n  /** `NEXT_PUBLIC_*_URL` per-deploy OVERRIDE. The `defaultUrl` covers it when unset. */\n  envVar: string\n  /** Legacy/secondary hosts that REVERSE-map to this key (no env var exists — NOT canonical). */\n  aliasHostnames?: string[]\n  /** Forward-only: no DB row, excluded from the reverse index + cookie set (e.g. the product-CTA dashboard). */\n  pseudo?: boolean\n}\n\nexport const PLATFORM_DOMAINS: readonly PlatformDomainEntry[] = [\n  { key: 'marketing-hub', defaultUrl: 'https://marketing-hub.flamingo.so', envVar: 'NEXT_PUBLIC_MARKETING_HUB_URL' },\n  { key: 'company-hub',   defaultUrl: 'https://company-hub.flamingo.so',   envVar: 'NEXT_PUBLIC_COMPANY_HUB_URL' },\n  { key: 'product-hub',   defaultUrl: 'https://product-hub.flamingo.so',   envVar: 'NEXT_PUBLIC_PRODUCT_HUB_URL' },\n  { key: 'revenue-hub',   defaultUrl: 'https://revenue-hub.flamingo.so',   envVar: 'NEXT_PUBLIC_REVENUE_HUB_URL' },\n  { key: 'people-hub',    defaultUrl: 'https://people-hub.flamingo.so',    envVar: 'NEXT_PUBLIC_PEOPLE_HUB_URL' },\n  { key: 'openmsp',       defaultUrl: 'https://www.openmsp.ai',            envVar: 'NEXT_PUBLIC_OPENMSP_URL' },\n  // ORDERING INVARIANT (first-wins, load-bearing): `flamingo` MUST precede `flamingo-teaser` + `universal`.\n  // All three resolve to www.flamingo.run; the reverse index is first-wins → flamingo claims the shared host,\n  // teaser keeps only its unique flamingo.cx aliases, universal contributes no unique host.\n  // ⚠️ DO NOT REORDER — enforced by the module-load self-check at the bottom of this file.\n  { key: 'flamingo',         defaultUrl: 'https://www.flamingo.run',  envVar: 'NEXT_PUBLIC_FLAMINGO_URL' },\n  { key: 'tmcg',             defaultUrl: 'https://www.tmcg.miami',    envVar: 'NEXT_PUBLIC_TMCG_URL' },\n  { key: 'flamingo-teaser',  defaultUrl: 'https://www.flamingo.run',  envVar: 'NEXT_PUBLIC_FLAMINGO_URL', aliasHostnames: ['flamingo.cx', 'www.flamingo.cx'] },\n  { key: 'openframe',        defaultUrl: 'https://openframe.ai',      envVar: 'NEXT_PUBLIC_OPENFRAME_URL', aliasHostnames: ['openframe.ai', 'www.openframe.ai', 'hub.openframe.ai'] },\n  { key: 'openframe-dashboard', defaultUrl: 'https://openframe.ai',   envVar: 'NEXT_PUBLIC_OPENFRAME_DASHBOARD_URL', pseudo: true },\n  { key: 'universal',        defaultUrl: 'https://www.flamingo.run',  envVar: 'NEXT_PUBLIC_FLAMINGO_URL' },\n]\n\n// ── Compile-time key guards (anchor the table on PlatformName, both directions) ──\n// (1) Removal/typo guard: every table key must be a valid PlatformDomainKey.\nconst _tableSatisfies = PLATFORM_DOMAINS satisfies readonly PlatformDomainEntry[]\nvoid _tableSatisfies\n// (2) Addition guard: a NEW PlatformName member that lacks a table row fails the build.\ntype _MissingKey = Exclude<PlatformName, (typeof PLATFORM_DOMAINS)[number]['key']>\nconst _exhaustive: [_MissingKey] extends [never] ? true : false = true\nvoid _exhaustive\n\n// ── Env overrides (the ONLY place env URLs enter — literal-key inlined + compile-time-guarded) ──\n// `process.env.NEXT_PUBLIC_X` is build-inlined ONLY with a LITERAL key, so the env-var name is the\n// irreducible two-copy (the registry `envVar` column + the literal access below). The `satisfies` makes\n// `tsc`/`next build` FAIL if this map is missing a registry env var OR carries a stale one (bidirectional).\ntype EnvVarKey = (typeof PLATFORM_DOMAINS)[number]['envVar']\nconst ENV_OVERRIDES = {\n  NEXT_PUBLIC_MARKETING_HUB_URL: process.env.NEXT_PUBLIC_MARKETING_HUB_URL,\n  NEXT_PUBLIC_COMPANY_HUB_URL: process.env.NEXT_PUBLIC_COMPANY_HUB_URL,\n  NEXT_PUBLIC_PRODUCT_HUB_URL: process.env.NEXT_PUBLIC_PRODUCT_HUB_URL,\n  NEXT_PUBLIC_REVENUE_HUB_URL: process.env.NEXT_PUBLIC_REVENUE_HUB_URL,\n  NEXT_PUBLIC_PEOPLE_HUB_URL: process.env.NEXT_PUBLIC_PEOPLE_HUB_URL,\n  NEXT_PUBLIC_OPENMSP_URL: process.env.NEXT_PUBLIC_OPENMSP_URL,\n  NEXT_PUBLIC_FLAMINGO_URL: process.env.NEXT_PUBLIC_FLAMINGO_URL,\n  NEXT_PUBLIC_TMCG_URL: process.env.NEXT_PUBLIC_TMCG_URL,\n  NEXT_PUBLIC_OPENFRAME_URL: process.env.NEXT_PUBLIC_OPENFRAME_URL,\n  NEXT_PUBLIC_OPENFRAME_DASHBOARD_URL: process.env.NEXT_PUBLIC_OPENFRAME_DASHBOARD_URL,\n} satisfies Record<EnvVarKey, string | undefined>\n\n/** The registry entry for a key (undefined for an unknown key). */\nexport function byKey(key: string): PlatformDomainEntry | undefined {\n  return PLATFORM_DOMAINS.find((e) => e.key === key)\n}\n\n/** Read a platform's `NEXT_PUBLIC_*_URL` override (or null). */\nfunction envOverrideFor(key: string): string | null {\n  const envVar = byKey(key)?.envVar\n  if (!envVar) return null\n  return (ENV_OVERRIDES as Record<string, string | undefined>)[envVar] || null\n}\n\n/**\n * Ensure a URL string carries a scheme. Per-deploy `NEXT_PUBLIC_*_URL` overrides are\n * stored SCHEME-LESS (bare host, e.g. `www.openmsp.ai` / `hub.openframe.ai`) — the\n * canonical convention in the Vercel shared-env store. This normalizes them to a full\n * `https://` URL so every downstream consumer (`hostOf`/`new URL`, hrefs, the cookie\n * base-domain derivation, CSP) receives a parseable URL. Full-URL inputs (the registry\n * `defaultUrl`s, any scheme'd override) pass through unchanged.\n *\n * EXPORTED as the single owner of the scheme-normalization rule (next.config.mjs keeps a\n * byte-identical local copy ONLY because Next evaluates its config outside the TS module\n * graph and cannot import this — see the comment there).\n *\n * Handles a (theoretical) protocol-relative `//host` too: strips the leading slashes so it\n * doesn't become `https:////host` (empty-host → hostOf null → silent platform drop).\n */\nexport function ensureScheme(url: string): string {\n  const trimmed = url.trim()\n  if (/^[a-z][a-z0-9+.-]*:\\/\\//i.test(trimmed)) return trimmed // already has a scheme\n  return `https://${trimmed.replace(/^\\/+/, '')}` // bare host or protocol-relative `//host`\n}\n\n/**\n * Canonical production URL for a platform: env override wins, else the `defaultUrl`.\n * NEVER throws / undefined — the default guarantees a host (this is what keeps the\n * cookie base-domains, the reverse map, and CSP intact even with every override unset).\n * The result ALWAYS carries a scheme (`ensureScheme`), so the scheme-less env overrides\n * resolve to valid URLs. Unknown-key fallback preserves cn.ts's flamingo.run default.\n */\nexport function getPlatformProductionUrl(platform: string): string {\n  const resolved =\n    envOverrideFor(platform) ??\n    byKey(platform)?.defaultUrl ??\n    envOverrideFor('flamingo') ??\n    'https://www.flamingo.run'\n  return ensureScheme(resolved)\n}\n\n// ── Single-owner host primitives ──\n\n/** Canonical URL→host parser: `.hostname` (PORT-STRIPPED, lowercased), null on parse failure. */\nexport function hostOf(value: string | null | undefined): string | null {\n  if (!value) return null\n  try {\n    return new URL(value).hostname.toLowerCase()\n  } catch {\n    return null\n  }\n}\n\n/** Expand a host into its `www.`/apex pair. 3+-label and single-label hosts return `[host]`. */\nexport function expandWwwApex(host: string): string[] {\n  if (host.startsWith('www.')) return [host, host.slice(4)]\n  if (host.split('.').length === 2) return [host, `www.${host}`]\n  return [host]\n}\n\n/** Registrable base domain (`parts.slice(-2).join('.')`), dotless; undefined for <2-label. */\nexport function toRegistrableBaseDomain(host: string): string | undefined {\n  const parts = host.split('.')\n  if (parts.length >= 2) return parts.slice(-2).join('.')\n  return undefined\n}\n\n/** An entry's alias hosts (single-owner reader). */\nexport function aliasHostsOf(key: string): string[] {\n  return byKey(key)?.aliasHostnames ?? []\n}\n\n/** All hosts an entry contributes to the reverse index (resolved host + optional aliases). */\nfunction hostsForEntry(entry: PlatformDomainEntry, opts: { includeAliases: boolean }): string[] {\n  const resolved = hostOf(getPlatformProductionUrl(entry.key))\n  const hosts = resolved ? expandWwwApex(resolved) : []\n  if (opts.includeAliases) hosts.push(...aliasHostsOf(entry.key))\n  return hosts\n}\n\n/**\n * Reverse resolver: hostname → platform key (first-wins over registry order, non-pseudo only).\n * Guarantees openframe.ai / www.openframe.ai / hub.openframe.ai → openframe in every env.\n * Replaces the hub `PLATFORM_DOMAIN_MAP`.\n */\nexport function getPlatformByHostname(hostname: string): PlatformDomainKey | null {\n  const host = hostname.toLowerCase()\n  for (const entry of PLATFORM_DOMAINS) {\n    if (entry.pseudo) continue\n    if (hostsForEntry(entry, { includeAliases: true }).includes(host)) return entry.key\n  }\n  return null\n}\n\n// ── Preview detection (two distinct predicates — env-form vs host-form) ──\n\n/** Env-form preview predicate (Vercel `VERCEL_ENV`). */\nexport function isPreviewEnv(): boolean {\n  return process.env.VERCEL_ENV === 'preview'\n}\n\n/** Host-form preview predicate (a `*.vercel.app` host). Dot-bounded suffix so a\n *  malicious `foo.vercel.app.evil.com` is NOT treated as preview. */\nexport function isPreviewHost(hostname: string): boolean {\n  return hostname.endsWith('.vercel.app')\n}\n\n/**\n * ALL unique cookie base domains (the cross-subdomain SSO mechanism).\n *\n * NON-PURE (the sole such export): reads `typeof window` + `process.env` to\n * preserve byte-identical cookie behavior. Keeps the original three branches:\n *   1. localhost / private IP → [] (host-only cookies)\n *   2. Vercel preview (env OR host) → ['.vercel.app','vercel.app']\n *   3. production → for each non-pseudo platform, registrable base of its resolved\n *      host, emitted as both `.base` and bare `base`.\n *\n * Because `getPlatformProductionUrl` always yields a host (override OR default),\n * `.flamingo.so` / `.flamingo.run` / `.openmsp.ai` / `.tmcg.miami` / `.openframe.ai`\n * are ALWAYS present → cross-hub SSO is byte-identical to today.\n */\nexport function getAllPlatformBaseDomains(): string[] {\n  if (typeof window === 'undefined') return []\n\n  const hostname = window.location.hostname\n\n  // Case 1: localhost / private IP — no domains\n  if (hostname === 'localhost' || hostname === '127.0.0.1' || hostname.startsWith('127.')) {\n    return []\n  }\n\n  // Case 2: Vercel preview — vercel.app domain\n  const previewEnv =\n    process.env.VERCEL_ENV === 'preview' ||\n    process.env.NEXT_PUBLIC_VERCEL_ENV === 'preview' ||\n    isPreviewHost(hostname)\n  if (previewEnv) {\n    return ['.vercel.app', 'vercel.app']\n  }\n\n  // Case 3: production — registrable base of every non-pseudo platform's resolved host\n  const baseDomains = new Set<string>()\n  for (const entry of PLATFORM_DOMAINS) {\n    if (entry.pseudo) continue\n    const host = hostOf(getPlatformProductionUrl(entry.key))\n    if (!host) continue\n    const base = toRegistrableBaseDomain(host)\n    if (base) {\n      baseDomains.add(`.${base}`)\n      baseDomains.add(base)\n    }\n  }\n  return Array.from(baseDomains)\n}\n\n// ── Cookie-domain guard + match (single owner; shared by the client cookie-domain.ts +\n//    server-only cookie-domain-server.ts resolvers, which previously hand-rolled both 3×) ──\n\n/**\n * Hosts that must NOT receive a `Domain=` cookie → the caller returns undefined (host-only):\n * localhost, loopback/private IPs, and any `*.vercel.app`. `vercel.app` is on the Public Suffix\n * List, so browsers SILENTLY drop `Set-Cookie: Domain=.vercel.app` — which broke the PKCE verifier\n * + session cookies on preview deploys. Host-only is sufficient there (the same preview host\n * round-trips the OAuth chain); production hosts (`.flamingo.so`/`.openmsp.ai`/…) fall through.\n */\nexport function isNonCookieableHost(hostname: string): boolean {\n  return (\n    hostname === 'localhost' ||\n    hostname === '127.0.0.1' ||\n    hostname.startsWith('127.') ||\n    hostname.startsWith('192.168.') ||\n    hostname.startsWith('10.') ||\n    hostname.includes('.vercel.app')\n  )\n}\n\n/**\n * Match a hostname against a set of registrable base domains → the dotted cookie `Domain`\n * (`.flamingo.so`), or undefined when none contains the host. Accepts bases with or without a\n * leading dot and always returns the dotted form. Single owner for the match loop both resolvers ran.\n */\nexport function matchCookieDomain(hostname: string, baseDomains: string[]): string | undefined {\n  for (const domain of baseDomains) {\n    const bare = domain.startsWith('.') ? domain.slice(1) : domain\n    if (hostname === bare || hostname.endsWith(`.${bare}`)) {\n      return domain.startsWith('.') ? domain : `.${domain}`\n    }\n  }\n  return undefined\n}\n\n// ── Module-load ordering self-check (NON-fatal — this module is imported by cn.ts → ~everything,\n// so a hard throw would be a total outage if the assertion were ever over-strict). Checks the REAL\n// invariant — table order — STRUCTURALLY (findIndex), NOT via getPlatformByHostname on a hardcoded\n// host: the latter false-positives when NEXT_PUBLIC_FLAMINGO_URL is overridden to a non-default host\n// (flamingo's resolved host changes, so `www.flamingo.run` no longer reverse-maps to it though the\n// ordering is fine). The alias checks below ARE env-immune (aliasHostnames are unique per key). The\n// authoritative guard is the reverse-map vitest. ⚠️ keep `flamingo` before `flamingo-teaser`/`universal`.\nconst _orderIdx = (k: PlatformDomainKey) => PLATFORM_DOMAINS.findIndex((e) => e.key === k)\nif (\n  _orderIdx('flamingo') > _orderIdx('flamingo-teaser') ||\n  _orderIdx('flamingo') > _orderIdx('universal') ||\n  getPlatformByHostname('flamingo.cx') !== 'flamingo-teaser' ||\n  getPlatformByHostname('hub.openframe.ai') !== 'openframe'\n) {\n  // eslint-disable-next-line no-console\n  console.error(\n    '[platform-domains] ⚠️ PLATFORM_DOMAINS ordering invariant violated — `flamingo` must precede ' +\n      '`flamingo-teaser`/`universal`, and the openframe/teaser aliases must be intact. Do not reorder the table.',\n  )\n}\n","import { clsx, type ClassValue } from \"clsx\"\nimport { extendTailwindMerge } from \"tailwind-merge\"\n// Platform→domain resolution moved to the SSOT module `src/platform-domains.ts`.\n// `getPlatformProductionUrl` / `getAllPlatformBaseDomains` now live there (re-exported\n// via the utils barrel for existing callers); `getBaseUrl` stays here because it owns the\n// dev-localhost + Vercel-self-origin branches, and delegates its platform branch.\nimport { getPlatformProductionUrl } from \"../platform-domains\"\n\n/**\n * EVERY custom `text-*` utility we add in `tailwind.config.ts` MUST be listed here.\n *\n * tailwind-merge has no knowledge of our utilities, and `text-<word>` is\n * indistinguishable from a text COLOUR to it. So an unlisted `text-badge` gets\n * filed in tailwind-merge's `text-color` group, where it and any real colour\n * class silently annihilate each other — last one wins, the other is dropped\n * from the output entirely:\n *\n *   cn('text-badge', 'text-ods-text-on-accent')  -> 'text-ods-text-on-accent'  (size lost)\n *   cn('text-[--some-colour]', 'text-badge')     -> 'text-badge'               (colour lost)\n *\n * Listing them in their own group makes them non-conflicting with colours, so\n * both survive. This is why `text-h1`…`text-h6` are here; `text-code` and\n * `text-badge` were added to the config later and missing them shipped exactly\n * the two failures above (huge badges, and badge text losing its colour).\n */\nconst twMerge = extendTailwindMerge<'ods-typography'>({\n  extend: {\n    classGroups: {\n      'ods-typography': [\n        'text-h1',\n        'text-h2',\n        'text-h3',\n        'text-h4',\n        'text-h5',\n        'text-h6',\n        'text-code',\n        'text-badge',\n      ],\n    },\n  },\n})\n\n/**\n * Combine class names with Tailwind's merge utility\n */\nexport function cn(...inputs: ClassValue[]) {\n  return twMerge(clsx(inputs))\n}\n\n/**\n * Get the application base URL for the current environment\n *\n * @param platform - Optional platform name (openmsp, flamingo, tmcg, openframe, etc.)\n * @returns The base URL with protocol (https:// or http://)\n *\n * Priority order:\n * 1. Development (http://localhost:3000)\n * 2. Platform-specific URL via the SSOT (if `platform` provided) — env override ?? default\n * 3. VERCEL_PROJECT_PRODUCTION_URL (Vercel production domain)\n * 4. Production fallback: the DEPLOYING platform's canonical URL (NEXT_PUBLIC_APP_TYPE),\n *    openmsp if unset — sourced from the SSOT, no hardcoded literal.\n *\n * The per-platform canonical URLs + their `NEXT_PUBLIC_*_URL` overrides are the single\n * source of truth in `src/platform-domains.ts` (`PLATFORM_DOMAINS`).\n *\n * @example\n * getBaseUrl() // Current deployment's URL\n * getBaseUrl('flamingo') // https://www.flamingo.run (prod) or http://localhost:3000 (dev)\n */\nexport function getBaseUrl(platform?: string): string {\n  // In development, always use localhost (regardless of platform)\n  if (process.env.NODE_ENV !== 'production') {\n    return process.env.NEXT_PUBLIC_DEV_URL || 'http://localhost:3000'\n  }\n\n  // If platform is specified, return its production URL (env override ?? default)\n  if (platform) {\n    return getPlatformProductionUrl(platform)\n  }\n\n  // Production: Use Vercel domain if available\n  if (process.env.VERCEL_PROJECT_PRODUCTION_URL) {\n    return `https://${process.env.VERCEL_PROJECT_PRODUCTION_URL}`\n  }\n\n  // Production fallback: the deploying platform's canonical www domain (avoids Google\n  // \"Page with redirect\"). Derived from the SSOT for the current app type (openmsp when\n  // unset → 'https://www.openmsp.ai', byte-identical to the old hardcoded fallback).\n  return getPlatformProductionUrl(process.env.NEXT_PUBLIC_APP_TYPE || 'openmsp')\n}\n"]}

package/dist/{chunk-7WT3K34L.js → chunk-BY6TZ6KA.js}

@@ -2,14 +2,14 @@
 import {
   ArticleAuthorByline,
   DetailPageSkeleton
-} from "./chunk-QA5LN5NS.js";
+} from "./chunk-EK2VQXUN.js";
 import {
   DocSearchBar,
   useDocSearch
-} from "./chunk-6O47KXGR.js";
+} from "./chunk-NY4WLKNU.js";
 import {
   useSelfFetch
-} from "./chunk-ILUX3DXS.js";
+} from "./chunk-FPOHUGEK.js";
 import {
   EntityAuthorCard,
   EntityTagBadges,
@@ -26,10 +26,10 @@ import {
   resolveContentHref,
   toStripProfile,
   useVideoWarmup
-} from "./chunk-NPN4WYOI.js";
+} from "./chunk-TVMARS74.js";
 import {
   buildOgPlaceholderUrl
-} from "./chunk-MK2YWJAA.js";
+} from "./chunk-OTV4A6NA.js";
 import {
   useChatRuntime
 } from "./chunk-KFQXO7QB.js";
@@ -395,4 +395,4 @@ export {
   useOnboardingGuide,
   useOnboardingGuideSections
 };
-//# sourceMappingURL=chunk-7WT3K34L.js.map
+//# sourceMappingURL=chunk-BY6TZ6KA.js.map

package/dist/{chunk-WPNVOQ4O.cjs → chunk-CUBNUQPZ.cjs}

@@ -6,11 +6,11 @@
 
 
 
-var _chunkCGUYR6DRcjs = require('./chunk-CGUYR6DR.cjs');
+var _chunkRIEAXUJXcjs = require('./chunk-RIEAXUJX.cjs');
 
 
 
-var _chunkIOHQJOLRcjs = require('./chunk-IOHQJOLR.cjs');
+var _chunkTONMD7QXcjs = require('./chunk-TONMD7QX.cjs');
 
 
 var _chunk2B6773QMcjs = require('./chunk-2B6773QM.cjs');
@@ -34,7 +34,7 @@ function DocSearchResultRow({
 }) {
   const docType = _optionalChain([result, 'access', _ => _.metadata, 'optionalAccess', _2 => _2.documentType]) || void 0;
   const sourceRepo = _optionalChain([result, 'access', _3 => _3.metadata, 'optionalAccess', _4 => _4.sourceRepo]) || void 0;
-  const { Icon: SourceIcon, label: iconLabel } = _chunkCGUYR6DRcjs.resolveSourceIcon.call(void 0, {
+  const { Icon: SourceIcon, label: iconLabel } = _chunkRIEAXUJXcjs.resolveSourceIcon.call(void 0, {
     sourceRepo,
     documentType: docType
   });
@@ -77,7 +77,7 @@ function DocSearchBar({
   renderResult
 }) {
   return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, 
-    _chunkCGUYR6DRcjs.SearchInput,
+    _chunkRIEAXUJXcjs.SearchInput,
     {
       placeholder,
       value: query,
@@ -186,7 +186,7 @@ function resolveSearchResultAction(result, source, runtimeMode) {
   const externalUrl = meta.externalUrl;
   if (externalUrl) {
     const targetPlatform = meta.targetPlatform;
-    const isNewTab = _chunkCGUYR6DRcjs.decideNewTab.call(void 0, {
+    const isNewTab = _chunkRIEAXUJXcjs.decideNewTab.call(void 0, {
       href: externalUrl,
       targetPlatform,
       surface: "useUnifiedNav",
@@ -231,7 +231,7 @@ function useDocSearch(config) {
   const [query, setQuery] = _react.useState.call(void 0, "");
   const [results, setResults] = _react.useState.call(void 0, []);
   const [isFetching, setIsFetching] = _react.useState.call(void 0, false);
-  const debouncedQuery = _chunkIOHQJOLRcjs.useDebounce.call(void 0, query, 300);
+  const debouncedQuery = _chunkTONMD7QXcjs.useDebounce.call(void 0, query, 300);
   _react.useEffect.call(void 0, () => {
     if (!debouncedQuery || debouncedQuery.trim().length < 2) {
       setResults([]);
@@ -248,7 +248,7 @@ function useDocSearch(config) {
           limit: "10"
         });
         if (tableIdsKey) params.set("tableIds", tableIdsKey);
-        const response = await _chunkIOHQJOLRcjs.contentFetch.call(void 0, `${resolvedSearchEndpoint}?${params.toString()}`);
+        const response = await _chunkTONMD7QXcjs.contentFetch.call(void 0, `${resolvedSearchEndpoint}?${params.toString()}`);
         if (!response.ok) {
           throw new Error(`Search request failed: ${response.status}`);
         }
@@ -288,7 +288,7 @@ function useDocSearch(config) {
           if (_optionalChain([runtime, 'optionalAccess', _14 => _14.navigation, 'access', _15 => _15.mode]) === "embed") {
             setKeepOpen(true);
             const targetPlatform = _nullishCoalesce(_optionalChain([result, 'access', _16 => _16.metadata, 'optionalAccess', _17 => _17.targetPlatform]), () => ( null));
-            _chunkCGUYR6DRcjs.resolveExternalNavigation.call(void 0, {
+            _chunkRIEAXUJXcjs.resolveExternalNavigation.call(void 0, {
               href: action.href,
               targetPlatform,
               runtime
@@ -297,18 +297,18 @@ function useDocSearch(config) {
           }
           if (wantsNewTab) {
             setKeepOpen(true);
-            window.open(action.href, "_blank", _chunkCGUYR6DRcjs.NEW_TAB_FEATURES);
+            window.open(action.href, "_blank", _chunkRIEAXUJXcjs.NEW_TAB_FEATURES);
             return;
           }
           setKeepOpen(false);
           const path = baseRoute && action.href.startsWith(`${baseRoute}/`) ? action.href.slice(baseRoute.length + 1) : null;
           if (path && _optionalChain([onInPageSwap, 'optionalCall', _18 => _18(path)])) return;
-          router.push(_chunkCGUYR6DRcjs.stripSameOriginToPath.call(void 0, action.href));
+          router.push(_chunkRIEAXUJXcjs.stripSameOriginToPath.call(void 0, action.href));
           return;
         }
         case "navigate-new-tab":
           setKeepOpen(true);
-          window.open(action.href, "_blank", _chunkCGUYR6DRcjs.NEW_TAB_FEATURES);
+          window.open(action.href, "_blank", _chunkRIEAXUJXcjs.NEW_TAB_FEATURES);
           return;
         case "ask-ai":
           setKeepOpen(false);
@@ -347,4 +347,4 @@ function useDocSearch(config) {
 
 
 exports.formatRelativePath = formatRelativePath; exports.DocSearchResultRow = DocSearchResultRow; exports.DocSearchBar = DocSearchBar; exports.mapDocSearchResults = mapDocSearchResults; exports.resolveSearchResultAction = resolveSearchResultAction; exports.useDocSearch = useDocSearch;
-//# sourceMappingURL=chunk-WPNVOQ4O.cjs.map
+//# sourceMappingURL=chunk-CUBNUQPZ.cjs.map