@flamingo-stack/openframe-frontend-core 0.0.423 → 0.0.424-snapshot.20260714200421

package/dist/utils/seo-description.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Single source of truth for the `seo_description` length budget.
+ *
+ * Unlike `seo_title` (soft search-engine guidance), this is a HARD cap: the
+ * `seo_description` DB columns are `varchar(160)` and Postgres rejects longer
+ * values outright ("value too long for type character varying(160)").
+ *
+ * This number lives in exactly ONE place. Consumers:
+ *   - `SEOEditorPreview` — input `maxLength` + the too-long alert.
+ *   - the hub — imports it (via `@flamingo-stack/openframe-frontend-core/utils`)
+ *     for the AI generation prompt guidance and the rewrite-to-fit helper.
+ */
+export declare const SEO_DESCRIPTION_MAX_LENGTH = 160;
+//# sourceMappingURL=seo-description.d.ts.map

package/dist/utils/seo-description.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seo-description.d.ts","sourceRoot":"","sources":["../../src/utils/seo-description.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,0BAA0B,MAAM,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flamingo-stack/openframe-frontend-core",
-  "version": "0.0.423",
+  "version": "0.0.424-snapshot.20260714200421",
   "description": "Shared design system and components for all Flamingo platforms",
   "type": "module",
   "main": "./dist/index.js",

package/src/components/.tool-icon.md

@@ -1,5 +1,5 @@
 <!-- source-hash: 2db0b6673e5d8f02f2a3713fb6528d5d -->
-Renders the appropriate logo icon for a given MSP tool type (Fleet MDM, MeshCentral, TacticalRMM, Authentik, Osquery, or OpenFrame variants).
+Renders the appropriate logo icon for a given MSP tool type (Fleet MDM, MeshCentral, Authentik, Osquery, or OpenFrame variants).
 
 ## Key Components
 
@@ -25,9 +25,9 @@ import { ToolTypeValues } from "../types/tool.types";
 // Render a Fleet MDM icon at default size (16px)
 <ToolIcon toolType={ToolTypeValues.FLEET_MDM} />
 
-// Render a TacticalRMM icon at 24px with a custom class
+// Render a MeshCentral icon at 24px with a custom class
 <ToolIcon
-  toolType={ToolTypeValues.TACTICAL_RMM}
+  toolType={ToolTypeValues.MESHCENTRAL}
   size={24}
   className="h-6 w-6 text-accent"
 />

package/src/components/features/seo-editor-preview.tsx

@@ -10,6 +10,7 @@ import Image from '../../embed-shims/next-image';
 // SSOT for the field cap (server-safe constant). The seo_title renders as the
 // page <title> verbatim (no brand suffix), so this is the full ~60-char budget.
 import { SEO_TITLE_MAX_LENGTH } from '../../utils/seo-title';
+import { SEO_DESCRIPTION_MAX_LENGTH } from '../../utils/seo-description';
 
 export interface SEOEditorPreviewProps {
   // SEO fields - must be strings (not undefined)
@@ -76,6 +77,11 @@ export function SEOEditorPreview({
   const seoTitleLength = (seoTitle || '').length;
   const seoTitleTooLong = seoTitleLength > SEO_TITLE_MAX_LENGTH;
 
+  // SEO description length state — the column is varchar(160); flag over-length so
+  // the editor (or a programmatically-set value) can be brought within budget.
+  const seoDescriptionLength = (seoDescription || '').length;
+  const seoDescriptionTooLong = seoDescriptionLength > SEO_DESCRIPTION_MAX_LENGTH;
+
   // Use fallback values if OG fields are empty
   const displayTitle = seoTitle.trim() || title || 'Untitled';
   const displayDescription = seoDescription.trim() || summary || 'No description';
@@ -137,7 +143,7 @@ export function SEOEditorPreview({
           <div className="flex items-center justify-between gap-2">
             <span className="text-[11px] text-ods-error font-['DM_Sans']">
               {seoTitleTooLong
-                ? `Too long — search engines may truncate this title (keep it ≤ ${SEO_TITLE_MAX_LENGTH})`
+                ? `Too long: search engines may truncate this title (keep it under ${SEO_TITLE_MAX_LENGTH})`
                 : ''}
             </span>
             <span
@@ -206,10 +212,27 @@ export function SEOEditorPreview({
             value={seoDescription || ''}
             onChange={(e) => onSeoDescriptionChange(e.target.value)}
             disabled={disabled}
+            maxLength={SEO_DESCRIPTION_MAX_LENGTH}
+            invalid={seoDescriptionTooLong}
             placeholder="Enter SEO meta description..."
             className="bg-ods-bg border-ods-border text-ods-text-primary flex-1 resize-none"
             rows={6}
           />
+          <div className="flex items-center justify-between gap-2">
+            <span className="text-[11px] text-ods-error font-['DM_Sans']">
+              {seoDescriptionTooLong
+                ? `Too long: search engines may truncate this description (keep it under ${SEO_DESCRIPTION_MAX_LENGTH})`
+                : ''}
+            </span>
+            <span
+              className={cn(
+                "text-[11px] font-['DM_Sans'] tabular-nums shrink-0",
+                seoDescriptionTooLong ? 'text-ods-error font-semibold' : 'text-ods-text-secondary'
+              )}
+            >
+              {seoDescriptionLength}/{SEO_DESCRIPTION_MAX_LENGTH}
+            </span>
+          </div>
           {!seoDescription && summary && (
             <p className="text-[11px] text-ods-accent font-['DM_Sans']">
               Auto-populated from summary

package/src/components/icons-v2-generated/brand-logos/.index.md

@@ -13,7 +13,7 @@ A flat collection of named icon exports organized by brand/platform category:
 | **Microsoft** | `MicrosoftLogoIcon`, `MicrosoftLogoGreyIcon`, `Office365LogoIcon`, `WindowsIcon`, `WindowsLogoIcon` |
 | **AI Platforms** | `AnthropicLogoIcon`, `GeminiLogoIcon`, `OpenaiLogoIcon` (+ grey variants) |
 | **Social** | `FacebookIcon`, `InstagramIcon`, `LinkedinIcon`, `TwitterIcon`, `TwitterXIcon`, `TiktokIcon`, `YoutubeIcon` |
-| **MSP/IT Tools** | `TacticalRmmLogoIcon`, `MeshcentralLogoIcon`, `FleetMdmLogoIcon`, `OsqueryLogoIcon`, `PowershellLogoIcon` |
+| **MSP/IT Tools** | `MeshcentralLogoIcon`, `FleetMdmLogoIcon`, `OsqueryLogoIcon`, `PowershellLogoIcon` |
 | **Dev Tools** | `GithubIcon`, `FigmaIcon`, `FramerIcon`, `TrelloIcon`, `ClickupLogoIcon` |
 
 > Many brands include both a standard and a `Grey` variant (e.g., `SlackLogoIcon` / `SlackLogoGreyIcon`), useful for active/inactive states.
@@ -26,7 +26,6 @@ import {
   GithubIcon,
   SlackLogoIcon,
   SlackLogoGreyIcon,
-  TacticalRmmLogoIcon,
   OpenaiLogoIcon,
 } from '@/components/icons/brands';
 

package/src/components/platform/.ShellTypeBadge.md

@@ -1,5 +1,5 @@
 <!-- source-hash: f614dd9faeadf368597d094822bcd3c7 -->
-Displays a badge combining an icon and label for a given shell/script type, supporting all Tactical RMM shell types (PowerShell, CMD, Bash, Python, Nushell, Deno, Shell).
+Displays a badge combining an icon and label for a given shell/script type, supporting all OpenFrame RMM shell types (PowerShell, CMD, Bash, Python, Nushell, Deno, Shell).
 
 ## Key Components
 

package/src/components/platform/.ToolBadge.md

@@ -1,5 +1,5 @@
 <!-- source-hash: 5668aa064d8c050beff751a96d6469be -->
-A React component that renders a visual badge combining a tool icon and label for OpenFrame-integrated MSP tools (e.g., Tactical RMM, Fleet MDM, MeshCentral).
+A React component that renders a visual badge combining a tool icon and label for OpenFrame-integrated MSP tools (e.g., Fleet MDM, MeshCentral).
 
 ## Key Components
 
@@ -15,7 +15,7 @@ A React component that renders a visual badge combining a tool icon and label fo
 import { ToolBadge } from './components/ToolBadge'
 
 // Basic usage in a table cell
-<ToolBadge toolType="TACTICAL" />
+<ToolBadge toolType="OPENFRAME_RMM" />
 
 // With custom styling
 <ToolBadge

package/src/embed-shims/__tests__/next-navigation.test.ts

@@ -0,0 +1,165 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+/**
+ * Regression tests for the `next/navigation` shim fallback (unregistered host).
+ *
+ * The guarantee under test: an unregistered `useRouter().push/replace` must
+ * perform a same-origin SPA navigation via the History API and NEVER hard-load
+ * the document — a `?search=` write from `useApiParams` used to hard-reload via
+ * `window.location.replace`. The registered path must delegate to the host
+ * router untouched.
+ *
+ * `impl` is module-level singleton state, so each test re-imports the module
+ * fresh via `vi.resetModules()` to isolate registration state. We also stub
+ * `window.location` with a spy object so any hard navigation (assign/replace/
+ * reload) is observable — jsdom leaves those methods unimplemented anyway.
+ */
+
+const ORIGIN = 'http://localhost:3000'
+
+async function freshModule() {
+  vi.resetModules()
+  return import('../next-navigation')
+}
+
+let assignSpy: ReturnType<typeof vi.fn>
+let replaceSpy: ReturnType<typeof vi.fn>
+let reloadSpy: ReturnType<typeof vi.fn>
+let pushStateSpy: ReturnType<typeof vi.spyOn>
+let replaceStateSpy: ReturnType<typeof vi.spyOn>
+let originalLocation: Location
+
+beforeEach(() => {
+  originalLocation = window.location
+  assignSpy = vi.fn()
+  replaceSpy = vi.fn()
+  reloadSpy = vi.fn()
+  Object.defineProperty(window, 'location', {
+    configurable: true,
+    value: {
+      href: `${ORIGIN}/`,
+      origin: ORIGIN,
+      pathname: '/',
+      search: '',
+      assign: assignSpy,
+      replace: replaceSpy,
+      reload: reloadSpy,
+    },
+  })
+  // Real jsdom history — spy without changing behavior so we can assert which
+  // History API the fallback used (push vs replace encodes the nav semantics).
+  pushStateSpy = vi.spyOn(window.history, 'pushState')
+  replaceStateSpy = vi.spyOn(window.history, 'replaceState')
+})
+
+afterEach(() => {
+  Object.defineProperty(window, 'location', { configurable: true, value: originalLocation })
+  vi.restoreAllMocks()
+})
+
+describe('fallback useRouter (unregistered host)', () => {
+  it('replace() writes the URL via history.replaceState — never a hard navigation', async () => {
+    const { useRouter } = await freshModule()
+    const popstate = vi.fn()
+    window.addEventListener('popstate', popstate)
+
+    useRouter().replace('?search=laptop')
+
+    expect(replaceStateSpy).toHaveBeenCalledWith(null, '', `${ORIGIN}/?search=laptop`)
+    expect(pushStateSpy).not.toHaveBeenCalled()
+    // No full-document navigation of any kind — this is the reported bug.
+    expect(assignSpy).not.toHaveBeenCalled()
+    expect(replaceSpy).not.toHaveBeenCalled()
+    expect(reloadSpy).not.toHaveBeenCalled()
+    // Subscribers (usePathname/useSearchParams) get a re-render signal.
+    expect(popstate).toHaveBeenCalledTimes(1)
+
+    window.removeEventListener('popstate', popstate)
+  })
+
+  it('push() uses history.pushState (new entry) — never a hard navigation', async () => {
+    const { useRouter } = await freshModule()
+    useRouter().push('/scripts?tab=list')
+
+    expect(pushStateSpy).toHaveBeenCalledWith(null, '', `${ORIGIN}/scripts?tab=list`)
+    expect(replaceStateSpy).not.toHaveBeenCalled()
+    expect(assignSpy).not.toHaveBeenCalled()
+    expect(reloadSpy).not.toHaveBeenCalled()
+  })
+
+  it('falls back to a real navigation for cross-origin targets, honoring replace semantics', async () => {
+    const { useRouter } = await freshModule()
+    useRouter().replace('https://example.com/evil')
+
+    // replace() must use location.replace (no back-button entry), not assign.
+    expect(replaceSpy).toHaveBeenCalledWith('https://example.com/evil')
+    expect(assignSpy).not.toHaveBeenCalled()
+    expect(replaceStateSpy).not.toHaveBeenCalled()
+    expect(pushStateSpy).not.toHaveBeenCalled()
+  })
+
+  it('uses location.assign for a cross-origin push (new history entry)', async () => {
+    const { useRouter } = await freshModule()
+    useRouter().push('https://example.com/evil')
+
+    expect(assignSpy).toHaveBeenCalledWith('https://example.com/evil')
+    expect(replaceSpy).not.toHaveBeenCalled()
+    expect(pushStateSpy).not.toHaveBeenCalled()
+  })
+
+  it('falls back to a real navigation for a malformed href (push → assign)', async () => {
+    const { useRouter } = await freshModule()
+    useRouter().push('http://[invalid')
+
+    expect(assignSpy).toHaveBeenCalledWith('http://[invalid')
+    expect(replaceSpy).not.toHaveBeenCalled()
+    expect(pushStateSpy).not.toHaveBeenCalled()
+  })
+
+  it('falls back to a real navigation for a malformed href (replace → replace)', async () => {
+    const { useRouter } = await freshModule()
+    useRouter().replace('http://[invalid')
+
+    expect(replaceSpy).toHaveBeenCalledWith('http://[invalid')
+    expect(assignSpy).not.toHaveBeenCalled()
+    expect(replaceStateSpy).not.toHaveBeenCalled()
+  })
+
+  it('back/forward remain history-based (unchanged)', async () => {
+    const { useRouter } = await freshModule()
+    const backSpy = vi.spyOn(window.history, 'back').mockImplementation(() => {})
+    const forwardSpy = vi.spyOn(window.history, 'forward').mockImplementation(() => {})
+    useRouter().back()
+    useRouter().forward()
+    expect(backSpy).toHaveBeenCalledTimes(1)
+    expect(forwardSpy).toHaveBeenCalledTimes(1)
+  })
+})
+
+describe('registered useRouter (Next host)', () => {
+  it('delegates to the host router and never touches window.location or history', async () => {
+    const { useRouter, registerNavigation } = await freshModule()
+    const hostRouter = {
+      push: vi.fn(),
+      replace: vi.fn(),
+      back: vi.fn(),
+      forward: vi.fn(),
+      refresh: vi.fn(),
+      prefetch: vi.fn(),
+    }
+    registerNavigation({ useRouter: () => hostRouter })
+
+    const r = useRouter()
+    r.replace('?search=laptop', { scroll: false })
+    r.push('/scripts')
+
+    expect(hostRouter.replace).toHaveBeenCalledWith('?search=laptop', { scroll: false })
+    expect(hostRouter.push).toHaveBeenCalledWith('/scripts')
+    // The fallback path is completely bypassed — no navigation side effects.
+    expect(assignSpy).not.toHaveBeenCalled()
+    expect(replaceSpy).not.toHaveBeenCalled()
+    expect(reloadSpy).not.toHaveBeenCalled()
+    expect(pushStateSpy).not.toHaveBeenCalled()
+    expect(replaceStateSpy).not.toHaveBeenCalled()
+  })
+})

package/src/embed-shims/next-navigation.tsx

@@ -22,9 +22,11 @@
  * After registration, every exported hook in this file delegates to
  * the real implementation. Without registration, the stubs run:
  *
- *   - `useRouter()` → push/replace use `window.location.assign/replace`;
- *     back/forward use `history.back/forward`; refresh reloads; prefetch
- *     is a no-op.
+ *   - `useRouter()` → push/replace do a same-origin SPA navigation via the
+ *     History API (`pushState`/`replaceState` + a synthetic `popstate`), so a
+ *     query-param write never reloads the document; cross-origin/malformed
+ *     hrefs fall back to `window.location`. back/forward use
+ *     `history.back/forward`; refresh reloads; prefetch is a no-op.
  *   - `usePathname()` → returns `window.location.pathname` (popstate-
  *     subscribed so back/forward re-renders).
  *   - `useSearchParams()` → returns `URLSearchParams` view of
@@ -34,10 +36,12 @@
  *   - `notFound()` / `redirect()` / `permanentRedirect()` —
  *     best-effort equivalents using `window.location`.
  *
- * The fallback path subscribes to `popstate` only. Programmatic
- * `pushState`/`replaceState` does NOT fire popstate, so the fallback
- * does not auto-re-render on programmatic navigation. Embedders that
- * need that should register a real router or supply their own.
+ * The fallback path subscribes to `popstate`. Native `pushState`/
+ * `replaceState` do NOT fire popstate, but the fallback `useRouter`'s
+ * push/replace dispatch a synthetic `popstate` so this file's own
+ * `usePathname`/`useSearchParams` subscribers re-render. A URL mutated
+ * through some OTHER API still won't auto-re-render here — embedders
+ * that need that should register a real router or supply their own.
  */
 'use client'
 import { useEffect, useState } from 'react'
@@ -95,11 +99,44 @@ const noopRouter: RouterStub = {
   prefetch: () => {},
 }
 
+/**
+ * SPA navigation for the unregistered fallback. Uses the History API instead of
+ * `window.location.assign/replace` so a same-origin URL change (e.g. a table's
+ * `?search=` write via `useApiParams`) never triggers a full document reload —
+ * even if a real router was never registered, or the registration landed on a
+ * DIFFERENT module instance than this one (duplicate lib copy / ESM-CJS dual
+ * package). A synthetic `popstate` is dispatched so this file's own
+ * `usePathname`/`useSearchParams` subscribers re-render in response.
+ * Cross-origin or malformed hrefs still fall back to a real `window.location`
+ * navigation, which is the only correct behavior there.
+ */
+function softNavigate(href: string, mode: 'push' | 'replace'): void {
+  if (typeof window === 'undefined') return
+  try {
+    const url = new URL(href, window.location.href)
+    if (url.origin !== window.location.origin) {
+      // Preserve the caller's history semantics: replace() must not leave a
+      // back-button entry, so it uses `location.replace`, not `location.assign`.
+      if (mode === 'push') window.location.assign(url.href)
+      else window.location.replace(url.href)
+      return
+    }
+    if (mode === 'push') window.history.pushState(null, '', url.href)
+    else window.history.replaceState(null, '', url.href)
+    window.dispatchEvent(new PopStateEvent('popstate'))
+  } catch {
+    // Malformed href — a real navigation is safer than swallowing it, but still
+    // honor push vs replace history semantics.
+    if (mode === 'push') window.location.assign(href)
+    else window.location.replace(href)
+  }
+}
+
 function fallbackUseRouter(): RouterStub {
   if (typeof window === 'undefined') return noopRouter
   return {
-    push: (href: string) => window.location.assign(href),
-    replace: (href: string) => window.location.replace(href),
+    push: (href: string) => softNavigate(href, 'push'),
+    replace: (href: string) => softNavigate(href, 'replace'),
     back: () => window.history.back(),
     forward: () => window.history.forward(),
     refresh: () => window.location.reload(),

package/src/stories/.OSTypeBadge.stories.md

@@ -31,4 +31,4 @@ export const AllOSTypes: Story = {
 };
 ```
 
-The stories demonstrate OS type normalization from various MDM sources (Fleet, Tactical RMM) with support for aliases like "Darwin" → "macOS" and "win32" → "Windows". Includes examples for icon-only, label-only, and combined display modes with customizable sizing options.
+The stories demonstrate OS type normalization from various MDM sources (Fleet) with support for aliases like "Darwin" → "macOS" and "win32" → "Windows". Includes examples for icon-only, label-only, and combined display modes with customizable sizing options.

package/src/stories/.ShellTypeBadge.stories.md

@@ -1,5 +1,5 @@
 <!-- source-hash: fe5ee5e74229fbc813833a5d6c81b725 -->
-Storybook configuration for the ShellTypeBadge component, defining visual documentation and interactive examples for all supported Tactical RMM shell types including PowerShell, CMD, Bash, Python, Nushell, Deno, and generic Shell.
+Storybook configuration for the ShellTypeBadge component, defining visual documentation and interactive examples for all supported OpenFrame RMM shell types including PowerShell, CMD, Bash, Python, Nushell, Deno, and generic Shell.
 
 ## Key Components
 

package/src/stories/.Toaster.stories.md

@@ -9,7 +9,7 @@ Storybook stories for the `Toaster` / `ToastCard` component system, covering sta
 | `Playground` | Story | Arg-driven interactive card — use Storybook Controls to tweak `variant`, `title`, `description`, `duration`, and `dismissible` |
 | `CommandApprovalCollapsed` | Story | `CommandApprovalToast` in its default collapsed state |
 | `CommandApprovalExpanded` | Story | `CommandApprovalToast` with `defaultExpanded` showing the command preview and Approve/Reject actions |
-| `CommandApprovalPerTool` | Story | One expanded approval toast per supported tool type (`FLEET_MDM`, `TACTICAL_RMM`, `MESHCENTRAL`, `AUTHENTIK`, `OSQUERY`, `OPENFRAME`) to verify icon mapping |
+| `CommandApprovalPerTool` | Story | One expanded approval toast per supported tool type (`FLEET_MDM`, `MESHCENTRAL`, `AUTHENTIK`, `OSQUERY`, `OPENFRAME`) to verify icon mapping |
 | `CommandApprovalLive` | Story | Fires real Sonner toasts via `showCommandApprovalToast()` with `onApprove`/`onReject` callbacks |
 | `LiveTriggers` | Story | Button panel that fires every variant as a live Sonner toast using both `toast()` and `showToast()` |
 

package/src/stories/.ToolBadge.stories.md

@@ -4,7 +4,7 @@ Storybook configuration file for the ToolBadge component, providing interactive
 ## Key Components
 
 - **meta**: Main Storybook configuration with component metadata, controls, and documentation
-- **Story exports**: Individual stories showcasing different tool types (Tactical RMM, Fleet MDM, MeshCentral, etc.)
+- **Story exports**: Individual stories showcasing different tool types (Fleet MDM, MeshCentral, etc.)
 - **AllTools story**: Comparison view showing multiple tool badges together
 - **argTypes**: Interactive controls for `toolType` selection and `className` customization
 
@@ -14,7 +14,7 @@ Storybook configuration file for the ToolBadge component, providing interactive
 // Individual tool badge stories
 export const Default: Story = {
   args: {
-    toolType: 'TACTICAL_RMM',
+    toolType: 'OPENFRAME_RMM',
   },
 };
 

package/src/stories/.ToolExecutionDisplay.stories.md

@@ -5,7 +5,7 @@ Storybook stories for the `ToolExecutionDisplay` chat component, covering execut
 
 | Export | Description |
 |--------|-------------|
-| `CollapsedExecuting` | Spinner state while a tool (e.g. `run_script` via Tactical RMM) is in progress |
+| `CollapsedExecuting` | Spinner state while a tool (e.g. `run_script` via OpenFrame RMM) is in progress |
 | `CollapsedSuccess` | Green check state after successful tool execution, with result output |
 | `CollapsedFailure` | Red error icon state after a failed tool execution (e.g. Fleet MDM profile deploy) |
 | `constrainedDecorator` | Helper decorator that wraps stories in a `max-width` container (default 400px) |
@@ -18,7 +18,7 @@ import type { ToolExecutionData } from "../components/chat/types";
 
 const message: ToolExecutionData = {
   type: "EXECUTED_TOOL",
-  integratedToolType: "TACTICAL_RMM",
+  integratedToolType: "OPENFRAME_RMM",
   toolFunction: "run_script",
   parameters: { RunAsUser: "False", timeoutSeconds: 60 },
   result: "Script output here...",
@@ -34,8 +34,8 @@ Three fixture payloads cover the core display states:
 
 | Fixture | `type` | `integratedToolType` | `success` |
 |---------|--------|----------------------|-----------|
-| `executingMessage` | `EXECUTING_TOOL` | `TACTICAL_RMM` | — |
-| `executedSuccessMessage` | `EXECUTED_TOOL` | `TACTICAL_RMM` | `true` |
+| `executingMessage` | `EXECUTING_TOOL` | `OPENFRAME_RMM` | — |
+| `executedSuccessMessage` | `EXECUTED_TOOL` | `OPENFRAME_RMM` | `true` |
 | `executedFailureMessage` | `EXECUTED_TOOL` | `FLEET_MDM` | `false` |
 
 The component renders a collapsed card by default; clicking toggles full details including parameters and result output.

package/src/types/.os.types.md

@@ -1,5 +1,5 @@
 <!-- source-hash: 6581d93b3edee981ded786a177e99959 -->
-Defines the centralized source of truth for operating system type metadata across the Flamingo platform, normalizing OS values from Fleet MDM, Tactical RMM, and GraphQL into a unified structure.
+Defines the centralized source of truth for operating system type metadata across the Flamingo platform, normalizing OS values from Fleet MDM and GraphQL into a unified structure.
 
 ## Key Components
 

package/src/types/.shell.types.md

@@ -1,5 +1,5 @@
 <!-- source-hash: b8477e619839e162b7edcfaaf835462d -->
-Centralized type definitions for shell/script types supported across the Flamingo platform. Provides a single source of truth for shell metadata, icons, and labels based on Tactical RMM supported types.
+Centralized type definitions for shell/script types supported across the Flamingo platform. Provides a single source of truth for shell metadata, icons, and labels based on OpenFrame RMM supported types.
 
 ## Key Components
 

package/src/types/.tool.types.md

@@ -3,7 +3,7 @@ Centralized type definitions for MSP tool types used throughout the Flamingo/Ope
 
 ## Key Components
 
-- **`ToolTypeValues`** - Const assertion object containing all available tool type constants (TACTICAL_RMM, FLEET_MDM, MESHCENTRAL, etc.)
+- **`ToolTypeValues`** - Const assertion object containing all available tool type constants (FLEET_MDM, MESHCENTRAL, etc.)
 - **`ToolType`** - Union type derived from ToolTypeValues for type-safe tool type references
 - **`toolLabels`** - Record mapping tool types to human-readable display names
 
@@ -13,10 +13,10 @@ Centralized type definitions for MSP tool types used throughout the Flamingo/Ope
 import { ToolType, ToolTypeValues, toolLabels } from './tool.types'
 
 // Type-safe tool type usage
-const currentTool: ToolType = ToolTypeValues.TACTICAL_RMM
+const currentTool: ToolType = ToolTypeValues.MESHCENTRAL
 
 // Get display label for UI
-const displayName = toolLabels[currentTool] // "Tactical"
+const displayName = toolLabels[currentTool] // "MeshCentral"
 
 // Use in component props
 interface ToolBadgeProps {

package/src/utils/.tool-utils.md

@@ -22,7 +22,6 @@ import {
 } from './tool-utils'
 
 // Normalize various input formats
-normalizeToolType('tactical')       // => 'TACTICAL_RMM'
 normalizeToolType('FLEET-MDM')      // => 'FLEET_MDM'
 normalizeToolType('unknown')        // => undefined
 
@@ -31,7 +30,6 @@ normalizeToolTypeWithFallback('mesh')    // => 'MESHCENTRAL'
 normalizeToolTypeWithFallback('invalid') // => 'SYSTEM'
 
 // Convert to display labels
-toToolLabel('tactical')    // => 'Tactical'
 toToolLabel('fleet_mdm')   // => 'Fleet'
 
 // Validation
@@ -39,4 +37,4 @@ isValidToolType('authentik')  // => true
 isValidToolType('invalid')    // => false
 ```
 
-The utility supports all major MSP tools including Tactical RMM, Fleet MDM, MeshCentral, Authentik, and OpenFrame components with comprehensive alias mapping for different naming conventions.
+The utility supports all major MSP tools including Fleet MDM, MeshCentral, Authentik, and OpenFrame components with comprehensive alias mapping for different naming conventions.

package/src/utils/index.ts

@@ -29,6 +29,7 @@ export { getBaseUrl } from '../utils/cn'
 // SEO title length budget — server-safe constant (SSOT). Consumed by the hub
 // (prompt guidance + DB check value) and by SEOEditorPreview (input maxLength).
 export { SEO_TITLE_MAX_LENGTH } from './seo-title'
+export { SEO_DESCRIPTION_MAX_LENGTH } from './seo-description'
 
 // Brand silhouette SVG registry (CSS mask-image tinting) — centralized so
 // consumers (e.g. company-hub deck) don't ship their own copies of the marks.

package/src/utils/seo-description.ts

@@ -0,0 +1,13 @@
+/**
+ * Single source of truth for the `seo_description` length budget.
+ *
+ * Unlike `seo_title` (soft search-engine guidance), this is a HARD cap: the
+ * `seo_description` DB columns are `varchar(160)` and Postgres rejects longer
+ * values outright ("value too long for type character varying(160)").
+ *
+ * This number lives in exactly ONE place. Consumers:
+ *   - `SEOEditorPreview` — input `maxLength` + the too-long alert.
+ *   - the hub — imports it (via `@flamingo-stack/openframe-frontend-core/utils`)
+ *     for the AI generation prompt guidance and the rewrite-to-fit helper.
+ */
+export const SEO_DESCRIPTION_MAX_LENGTH = 160;