refactor(platform-domains): every URL rule lives once beside the registry; getBaseUrl deleted

[michaelassraf]

Why

Every app resolved its URLs itself, and the rules had drifted apart:

• The lib's getBaseUrl(): with a platform it returned the registry URL. Without one it returned VERCEL_PROJECT_PRODUCTION_URL, whichever domain Vercel lists first (flamingo.cx on flamingo, a 308; production on every preview), falling back to openmsp.
• multi-platform-hub re-implemented the platform URL, its own deployment URL, the request origin, local-host detection and redirect-target checks.
• openframe-oss-frontend had four copies of its app URL (getBaseUrl, getMetadataBaseUrl, two NEXT_PUBLIC_APP_URL reads in layout.tsx) with two different fallbacks (openframe.dev / openframe.ai).

What

Every URL rule now lives once, in the pure platform-domains subpath next to the registry. All five are also re-exported from ./utils.

Function	What it resolves
getPlatformUrl(platform, { environment })	Where a platform lives. platform is required. Dev URL outside a production build, registry URL otherwise; environment: 'production' forces the registry.
getDeploymentUrl({ platform, configuredUrl })	Where the running app is reachable, in order: the browser origin; a runtime-configured URL (a self-hosted OpenFrame install); a Vercel preview's immutable VERCEL_URL; the registry URL in production; NEXT_PUBLIC_DEV_URL / localhost on PORT in development.
getRequestOrigin(headers)	The origin a request arrived on, from host only (never x-forwarded-host); null without a Host header.
isLocalUrl(url)	A whole local hostname, so localhost.example.com is public.
resolveRedirectTarget(origin, target)	Throws when a relative target would leave the origin (//evil.example, /\evil.example).

Also in this PR:

• getBaseUrl is deleted from utils/cn.ts and the barrel. source-row-cta (+ test) and made-with-love use getPlatformUrl; READMEs, .cn.md and the embedding example's docs are updated.
• ensureScheme doc: no longer claims next.config.mjs keeps a copy, since this subpath is plain ESM.

Consumers (each moves in its own PR, after this is released)

• multi-platform-hub (flamingo-stack/multi-platform-hub#1296): lib/urls.ts becomes a binding that only supplies the current platform.
• openframe-oss-frontend: getAppUrl() = getDeploymentUrl({ platform: 'openframe-dashboard', configuredUrl: NEXT_PUBLIC_APP_URL }), replacing its four copies.
• react-embedding-example: doc comments only.

Verification

• npm run type-check: 0 errors.
• eslint: clean.
• vitest: full suite 5427 passed, including new tests for every function above (registry URL in production, VERCEL_PROJECT_PRODUCTION_URL ignored, preview URL, runtime-configured URL, dev port, browser origin, host-only request origin, local hostnames, refused redirect targets).

Release note

Breaking: getBaseUrl is removed from @flamingo-stack/openframe-frontend-core/utils. Use getPlatformUrl(platform) for a platform's URL, or getDeploymentUrl({ platform, configuredUrl }) for the running app's.

[github-actions]

🦩 Flamingo Code Review

No findings on the current head.

Mode: advisory

---

Need another pass? Commits pushed after this review are not reviewed automatically.

• Review the new commits — the commits added since this review
• Review the whole diff again — ignoring what was already reviewed

Prefer typing? Comment @flamingo-review, or @flamingo-review full. To review every push on this pull request, add the flamingo-review-always label.

React 👍/👎 on inline comments to teach the reviewer.

Started 2026-09-17 00:12 UTC · updated 2026-09-17 00:12 UTC · workflow run