@flamingo-stack/openframe-frontend-core 0.0.840 → 0.0.842

package/dist/utils/index.cjs

@@ -80150,16 +80150,7 @@ function getPlatformByHostname(hostname) {
 function isPreviewHost(hostname) {
   return hostname.endsWith(".vercel.app");
 }
-function getAllPlatformBaseDomains() {
-  if (typeof window === "undefined") return [];
-  const hostname = window.location.hostname;
-  if (hostname === "localhost" || hostname === "127.0.0.1" || hostname.startsWith("127.")) {
-    return [];
-  }
-  const previewEnv = process.env.VERCEL_ENV === "preview" || process.env.NEXT_PUBLIC_VERCEL_ENV === "preview" || isPreviewHost(hostname);
-  if (previewEnv) {
-    return [".vercel.app", "vercel.app"];
-  }
+function getPlatformBaseDomains() {
   const baseDomains = /* @__PURE__ */ new Set();
   for (const entry of PLATFORM_DOMAINS) {
     if (entry.pseudo) continue;
@@ -80173,6 +80164,18 @@ function getAllPlatformBaseDomains() {
   }
   return Array.from(baseDomains);
 }
+function getAllPlatformBaseDomains() {
+  if (typeof window === "undefined") return [];
+  const hostname = window.location.hostname;
+  if (hostname === "localhost" || hostname === "127.0.0.1" || hostname.startsWith("127.")) {
+    return [];
+  }
+  const previewEnv = process.env.VERCEL_ENV === "preview" || process.env.NEXT_PUBLIC_VERCEL_ENV === "preview" || isPreviewHost(hostname);
+  if (previewEnv) {
+    return [".vercel.app", "vercel.app"];
+  }
+  return getPlatformBaseDomains();
+}
 var _orderIdx = (k) => PLATFORM_DOMAINS.findIndex((e) => e.key === k);
 if (_orderIdx("flamingo") > _orderIdx("universal") || getPlatformByHostname("flamingo.cx") !== "flamingo" || getPlatformByHostname("hub.openframe.ai") !== "openframe") {
   console.error(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flamingo-stack/openframe-frontend-core",
-  "version": "0.0.840",
+  "version": "0.0.842",
   "description": "Shared design system and components for all Flamingo platforms",
   "type": "module",
   "sideEffects": [

package/src/platform-domains.ts

@@ -309,18 +309,37 @@ export function isPreviewHost(hostname: string): boolean {
 }
 
 /**
- * ALL unique cookie base domains (the cross-subdomain SSO mechanism).
+ * The registrable base of every site in the registry, each as `.base` and bare `base`: for each non-pseudo platform,
+ * the base of its resolved host. It reads the registry only, so it answers the same on a server and in a browser;
+ * a server's cookie rule reads it directly.
+ *
+ * Because `getPlatformProductionUrl` always yields a host (override OR default),
+ * `.flamingo.so` / `.flamingo.run` / `.openmsp.ai` / `.tmcg.miami` / `.openframe.ai`
+ * are ALWAYS present → cross-hub SSO is byte-identical to today.
+ */
+export function getPlatformBaseDomains(): string[] {
+  const baseDomains = new Set<string>();
+  for (const entry of PLATFORM_DOMAINS) {
+    if (entry.pseudo) continue;
+    const host = hostOf(getPlatformProductionUrl(entry.key));
+    if (!host) continue;
+    const base = toRegistrableBaseDomain(host);
+    if (base) {
+      baseDomains.add(`.${base}`);
+      baseDomains.add(base);
+    }
+  }
+  return Array.from(baseDomains);
+}
+
+/**
+ * ALL unique cookie base domains for the PAGE this runs on (the cross-subdomain SSO mechanism).
  *
  * NON-PURE (the sole such export): reads `typeof window` + `process.env` to
  * preserve byte-identical cookie behavior. Keeps the original three branches:
  *   1. localhost / private IP → [] (host-only cookies)
  *   2. Vercel preview (env OR host) → ['.vercel.app','vercel.app']
- *   3. production → for each non-pseudo platform, registrable base of its resolved
- *      host, emitted as both `.base` and bare `base`.
- *
- * Because `getPlatformProductionUrl` always yields a host (override OR default),
- * `.flamingo.so` / `.flamingo.run` / `.openmsp.ai` / `.tmcg.miami` / `.openframe.ai`
- * are ALWAYS present → cross-hub SSO is byte-identical to today.
+ *   3. production → `getPlatformBaseDomains`.
  */
 export function getAllPlatformBaseDomains(): string[] {
   if (typeof window === 'undefined') return [];
@@ -339,19 +358,8 @@ export function getAllPlatformBaseDomains(): string[] {
     return ['.vercel.app', 'vercel.app'];
   }
 
-  // Case 3: production — registrable base of every non-pseudo platform's resolved host
-  const baseDomains = new Set<string>();
-  for (const entry of PLATFORM_DOMAINS) {
-    if (entry.pseudo) continue;
-    const host = hostOf(getPlatformProductionUrl(entry.key));
-    if (!host) continue;
-    const base = toRegistrableBaseDomain(host);
-    if (base) {
-      baseDomains.add(`.${base}`);
-      baseDomains.add(base);
-    }
-  }
-  return Array.from(baseDomains);
+  // Case 3: production
+  return getPlatformBaseDomains();
 }
 
 // ── Cookie-domain guard + match (single owner; shared by the client cookie-domain.ts +