Fix issues #1040-#1042: site URL, assets, and script lint

.env.local.example

@@ -4,6 +4,9 @@
 #
 # `.env.local` is git-ignored, so your local values never get committed.
 
+# Public site origin used for canonical, Open Graph, sitemap, and share URLs.
+NEXT_PUBLIC_SITE_URL=https://flowstar.app
+
 # ─── Stellar contract ─────────────────────────────────────────────────────────
 
 # Deployed streaming contract addresses on Stellar.

__tests__/components/streams/qr-share-dialog.test.tsx

@@ -1,6 +1,7 @@
 import { describe, it, expect, vi, beforeEach } from 'vitest'
 import { fireEvent, render, screen } from '@testing-library/react'
 import { QrShareDialog } from '@/components/streams/qr-share-dialog'
+import { SITE_URL } from '@/lib/site'
 import type { StreamData } from '@/types/stream'
 
 const { mockToastSuccess, mockWriteText } = vi.hoisted(() => ({
@@ -23,7 +24,7 @@ vi.mock('qrcode.react', () => ({
   ),
 }))
 
-const STREAM_URL = 'https://flowstar.app/stream/stream-123'
+const STREAM_URL = `${SITE_URL}/stream/stream-123`
 
 function makeStream(overrides?: Partial<StreamData>): StreamData {
   return {

app/app/stream/[id]/metadata.ts

@@ -3,6 +3,7 @@ import { fetchStream } from "@/lib/contract";
 import { NETWORK } from "@/lib/stellar";
 import { shortenAddress } from "@/lib/stream-utils";
 import { captureError } from "@/lib/sentry";
+import { SITE_URL } from "@/lib/site";
 
 export async function generateMetadata({
   params,
@@ -20,7 +21,7 @@ export async function generateMetadata({
       };
     }
 
-    const ogImageUrl = new URL("/api/og", "https://flowstar.app");
+    const ogImageUrl = new URL("/api/og", SITE_URL);
     ogImageUrl.searchParams.append(
       "amount",
       (
@@ -45,7 +46,7 @@ export async function generateMetadata({
     return {
       title: `Stream #${stream.id}`,
       description,
-      metadataBase: new URL("https://flowstar.app"),
+      metadataBase: new URL(SITE_URL),
       openGraph: {
         type: "website",
         siteName: "FlowStar",

app/app/stream/[id]/page.tsx

@@ -22,6 +22,7 @@ import {
 } from 'lucide-react'
 import { toast } from 'sonner'
 import { ConnectWalletButton } from '@/components/layout/connect-wallet-button'
+import { SITE_URL } from '@/lib/site'
 import { StreamStatusBadge } from '@/components/streams/stream-status-badge'
 import { ProgressBar } from '@/components/ui/progress-bar'
 import { TokenAmount } from '@/components/ui/token-amount'
@@ -795,7 +796,7 @@ function ShareButtons({
   const streamUrl =
     typeof window !== 'undefined'
       ? window.location.href
-      : `https://flowstar.app/app/stream/${streamId}`
+      : `${SITE_URL}/app/stream/${streamId}`
   const shareText = copy.shareButtons.shareText(streamId)
 
   function copyLink() {

app/layout.tsx

@@ -7,6 +7,7 @@ import { WalletProvider } from '@/components/providers/wallet-provider'
 import { Toaster } from '@/components/ui/sonner'
 import { ServiceWorkerRegister } from '@/components/pwa/service-worker-register'
 import { InstallPrompt } from '@/components/pwa/install-prompt'
+import { SITE_URL } from '@/lib/site'
 import './globals.css'
 
 // JSON-LD structured data
@@ -15,7 +16,7 @@ const jsonLd = {
   '@type': 'WebApplication',
   name: 'FlowStar',
   description: 'Stream tokens by the second with cliffs and cancellations on Stellar Soroban',
-  url: 'https://flowstar.app',
+  url: SITE_URL,
   applicationCategory: 'FinanceApplication',
   operatingSystem: 'Web',
   offers: {
@@ -43,7 +44,7 @@ export const metadata: Metadata = {
   description:
     'Stream tokens by the second with cliffs and cancellations on Stellar Soroban. Create vesting schedules, payroll, and grants that unlock continuously — withdraw anytime, cancel anytime.',
   keywords: ['stellar', 'soroban', 'token streaming', 'DeFi', 'payment streams', 'vesting', 'payroll', 'grants'],
-  metadataBase: new URL('https://flowstar.app'),
+  metadataBase: new URL(SITE_URL),
   alternates: {
     canonical: '/',
   },

app/sitemap.ts

@@ -1,7 +1,8 @@
 import { MetadataRoute } from 'next'
+import { SITE_URL } from '@/lib/site'
 
 export default function sitemap(): MetadataRoute.Sitemap {
-  const baseUrl = 'https://flowstar.app'
+  const baseUrl = SITE_URL
 
   return [
     {

components/streams/qr-share-dialog.stories.tsx

@@ -2,6 +2,7 @@ import type { Meta, StoryObj } from '@storybook/react'
 import { useState } from 'react'
 import { Toaster } from 'sonner'
 import { QrShareDialog } from './qr-share-dialog'
+import { SITE_URL } from '@/lib/site'
 import { Button } from '@/components/ui/button'
 import type { StreamData } from '@/types/stream'
 
@@ -56,7 +57,7 @@ export const OpenWithSampleStream: Story = {
   args: {
     open: true,
     onOpenChange: () => {},
-    streamUrl: 'https://flowstar.app/app/streams/42',
+    streamUrl: `${SITE_URL}/app/streams/42`,
     stream: sampleStream,
     status: 'streaming',
   },

components/streams/stream-card.tsx

@@ -30,6 +30,7 @@ import {
 } from '@/components/ui/dropdown-menu'
 import { getFederationNameForAddress } from '@/lib/address-book'
 import { streamCardCopy as copy } from '@/lib/copy/streams'
+import { SITE_URL } from '@/lib/site'
 import type { StreamData } from '@/types/stream'
 
 // Pick update interval based on a quick pre-check of stream state.
@@ -146,7 +147,7 @@ function StreamCardInner({
     const url =
       typeof window !== 'undefined'
         ? `${window.location.origin}/app/stream/${stream.id}`
-        : `https://flowstar.app/app/stream/${stream.id}`
+        : `${SITE_URL}/app/stream/${stream.id}`
     navigator.clipboard.writeText(url)
     setCopiedLink(true)
     setTimeout(() => setCopiedLink(false), 1500)

eslint.config.mjs

@@ -34,4 +34,11 @@ export default [
       },
     },
   },
+  {
+    files: ['scripts/**/*.mjs'],
+    rules: {
+      'no-console': 'off',
+      'security/detect-non-literal-fs-filename': 'off',
+    },
+  },
 ]

lib/site.ts

@@ -0,0 +1 @@
+export const SITE_URL = process.env.NEXT_PUBLIC_SITE_URL || 'https://flowstar.app'

next.config.mjs

@@ -12,6 +12,8 @@ async function withBundleAnalyzer(config) {
     const { default: analyzer } = await import('@next/bundle-analyzer')
     return analyzer({ enabled: true })(config)
   } catch {
+    // This warning explains why optional bundle analysis was skipped.
+    // eslint-disable-next-line no-console
     console.warn('[FlowStar] @next/bundle-analyzer not installed — skipping analysis')
     return config
   }