@flamingo-stack/openframe-frontend-core 0.0.721 → 0.0.723

package/src/types/trust-center.ts

@@ -188,6 +188,21 @@ export function isTrustCenterMonitored(
   return Number.isFinite(synced) && nowMs - synced <= data.monitoredWindowMs;
 }
 
+/**
+ * THE monitoring claim and its wording, judged against a clock: monitored,
+ * paused, or not enabled. The page reads it after mount (its own clock) and the
+ * PDF when it is generated, so both say the same thing in the same words.
+ */
+export function trustCenterMonitoringStatus(
+  data: Pick<TrustCenterPublic, 'connected' | 'syncedAt' | 'monitoredWindowMs'>,
+  nowMs: number,
+): { status: 'success' | 'pending' | 'missing'; label: string } {
+  if (!data.connected) return { status: 'missing', label: 'Live control monitoring is not enabled yet' };
+  return isTrustCenterMonitored(data, nowMs)
+    ? { status: 'success', label: 'Controls continuously monitored' }
+    : { status: 'pending', label: 'Monitoring paused' };
+}
+
 /** "SOC 2 Type II: In progress · ISO 27001: Planned" — the ONE framework summary line (chat card, RAG mapper). */
 export function trustFrameworksSummary(
   frameworks: ReadonlyArray<Pick<TrustCenterFramework, 'label' | 'monitoring' | 'percent'>>,
@@ -195,10 +210,16 @@ export function trustFrameworksSummary(
   return frameworks.map(f => `${f.label}: ${trustFrameworkBadge(f)}`).join(' · ');
 }
 
+/** A path BESIDE the page's `endpoint`, which may carry a query string (an embed proxy): `endpoint/segment?query`. */
+function besideTrustCenterEndpoint(endpoint: string, segment: string): string {
+  const [path, query] = endpoint.split('?', 2);
+  return `${path}/${segment}${query ? `?${query}` : ''}`;
+}
+
 /**
  * Where a public document opens: its own link, or — for a file — the hub's
- * documents route beside the page's `endpoint` (which may carry a query string,
- * e.g. an embed proxy). `null` for a document that is only available on request.
+ * documents route beside the page's `endpoint`. `null` for a document that is
+ * only available on request.
  */
 export function trustCenterDocumentUrl(
   endpoint: string,
@@ -206,8 +227,35 @@ export function trustCenterDocumentUrl(
 ): string | null {
   if (document.access !== 'public') return null;
   if (document.externalUrl) return document.externalUrl;
-  const [path, query] = endpoint.split('?', 2);
-  return `${path}/documents/${encodeURIComponent(document.id)}${query ? `?${query}` : ''}`;
+  return besideTrustCenterEndpoint(endpoint, `documents/${encodeURIComponent(document.id)}`);
+}
+
+/** Where the page downloads as a PDF: the hub's `pdf` route beside the page's `endpoint`. */
+export function trustCenterPdfUrl(endpoint: string): string {
+  return besideTrustCenterEndpoint(endpoint, 'pdf');
+}
+
+/**
+ * THE rule for which sections a trust center shows, in reading order: a section
+ * with nothing to list is left out; Contact always shows. The page and its PDF
+ * both read it, so the two can never disagree about what is published.
+ */
+export function visibleTrustCenterSections(
+  data: Pick<
+    TrustCenterPublic,
+    'aiPractices' | 'frameworks' | 'controlDomains' | 'documents' | 'subprocessors' | 'faqs'
+  >,
+): Array<(typeof TRUST_CENTER_SECTIONS)[number]> {
+  const hasContent: Record<TrustCenterSectionId, boolean> = {
+    ai: data.aiPractices.length > 0,
+    compliance: data.frameworks.length > 0,
+    controls: data.controlDomains.length > 0,
+    documents: data.documents.length > 0,
+    subprocessors: data.subprocessors.length > 0,
+    faq: data.faqs.length > 0,
+    contact: true,
+  };
+  return TRUST_CENTER_SECTIONS.filter(section => hasContent[section.id]);
 }
 
 // ---------------------------------------------------------------------------

package/src/utils/format.ts

@@ -1059,3 +1059,18 @@ export function formatWebinarTimeMeta(
   const time = formatProgramTimeRange(at, { startAt: opts.startAt, withZoneLabel: opts.withZoneLabel });
   return [time, duration].filter(Boolean).join(' · ');
 }
+
+/**
+ * A web address as it is shown to a person to read or type, not to follow: no
+ * scheme, no query or fragment, no trailing slash.
+ * `https://www.example.com/mobile?from=qr` reads `example.com/mobile`.
+ *
+ * `www` is dropped by default, because nobody types it; `keepWww` keeps it where
+ * the address is shown as the site's own name.
+ */
+export function formatUrlForDisplay(url: string, options: { keepWww?: boolean } = {}): string {
+  return url
+    .replace(options.keepWww ? /^https?:\/\//i : /^https?:\/\/(www\.)?/i, '')
+    .replace(/[?#].*$/, '')
+    .replace(/\/$/, '');
+}

package/src/utils/index.ts

@@ -16,7 +16,7 @@ export {
 // Number / currency / byte / date formatters live in `./format` (single
 // source of truth). Re-exported here so existing callers that pull from
 // the barrel keep working without changing imports.
-export { formatDate, formatNumber, formatPrice, formatBytes } from './format';
+export { formatDate, formatNumber, formatPrice, formatBytes, formatUrlForDisplay } from './format';
 export { TRIAL_DAYS, TRIAL_LABELS } from './trial';
 export {
   VENDOR_CLASSIFICATIONS,

package/src/utils/mobile-app.ts

@@ -1,8 +1,8 @@
 /**
- * The download page's own addresses: where it lives, the parameter that sends a
- * phone on to its store, and the URL the install QR code encodes. The store
- * listings and installer links are NOT here: they are the server's
- * (`DownloadsPublic`, read through `useDownloads`).
+ * The download page's address, and what a server needs to send a phone on to
+ * its store. No link lives here: the store listings, the installer links and
+ * the install link the QR code encodes are all the server's (`DownloadsPublic`,
+ * read through `useDownloads`).
  *
  * Pure and server-safe; also published as the granular subpath
  * `./utils/mobile-app`, for an Edge proxy and other server-only consumers.
@@ -13,37 +13,14 @@ import { detectVisitorOs } from './visitor-os';
 /** The website's download page: every installer and the mobile app. */
 export const DOWNLOAD_PAGE_PATH = '/download';
 
-/**
- * On the download page: "send a phone or a tablet on to its store". The install
- * QR code carries it, because whoever scans a code is holding the phone the app
- * goes on. Anyone who opens the page without it reads the page.
- */
-export const DOWNLOAD_PAGE_STORE_PARAM = 'store';
-
-/**
- * The one URL the install QR code encodes: the website's download page, asking
- * it to send a phone on to its store.
- *
- * Absolute and on the production host on purpose: a code must point at
- * production whichever deployment rendered the page it came from. `MobileAppQr`
- * draws this value as committed path data, so the two change together: see the
- * regeneration note on that component.
- */
-export const MOBILE_APP_INSTALL_URL = `https://www.flamingo.run${DOWNLOAD_PAGE_PATH}?${DOWNLOAD_PAGE_STORE_PARAM}=1`;
-
-/** The download page as it is printed for a human to read or type: no scheme, no `www`, no query. */
-export const MOBILE_APP_INSTALL_HOST_PATH = MOBILE_APP_INSTALL_URL.replace(/^https:\/\/(www\.)?/, '').replace(
-  /\?.*$/,
-  '',
-);
-
 /**
  * The store for a phone or tablet, or `null` for every other system and for a
  * store the server names no listing for (`links` is the server's answer).
  *
- * The server passes the request's User-Agent; a browser also passes
- * `navigator.maxTouchPoints`, the only signal that tells an iPad asking for the
- * desktop site (it calls itself a Macintosh) from a real Mac.
+ * The server passes the request's User-Agent (the install link's redirect).
+ * A browser may also pass `navigator.maxTouchPoints`, the only signal that tells
+ * an iPad asking for the desktop site (it calls itself a Macintosh) from a real
+ * Mac; the server cannot, so that iPad lands on the download page and its badges.
  */
 export function resolveMobileStoreUrl(
   links: MobileAppLinks,

package/dist/assets/mobile-app-qr.d.ts

@@ -1,17 +0,0 @@
-/**
- * The install QR code's artwork: the modules of `MOBILE_APP_INSTALL_URL`
- * (`utils/mobile-app`) at version 3, ECC level M, as one SVG path. Packaged with
- * the library like the other assets, so every consumer draws the same code with
- * no host-asset serving. `MobileAppQr` (components/ui) is the component that
- * renders it.
- *
- * It changes WITH that URL. To regenerate: with the `qrcode` package,
- * `QRCode.create(url, { errorCorrectionLevel: 'M' })` gives the modules; each
- * row is one `M{x+4} {y+4}.5h{run}` followed by `m{gap} 0h{run}` per further
- * run (the 4 is the quiet zone), and the viewBox side is `size + 8`.
- */
-/** The side of the artwork's square viewBox: 29 modules plus a 4-module quiet zone on each side. */
-export declare const MOBILE_APP_QR_VIEWBOX_SIZE = 37;
-/** The dark modules, as horizontal strokes one module tall (`stroke` draws them). */
-export declare const MOBILE_APP_QR_PATH = "M4 4.5h7m2 0h2m2 0h1m2 0h1m2 0h2m1 0h7M4 5.5h1m5 0h1m2 0h2m2 0h3m6 0h1m5 0h1M4 6.5h1m1 0h3m1 0h1m1 0h3m1 0h1m1 0h3m2 0h1m2 0h1m1 0h3m1 0h1M4 7.5h1m1 0h3m1 0h1m1 0h1m1 0h1m1 0h6m2 0h1m1 0h1m1 0h3m1 0h1M4 8.5h1m1 0h3m1 0h1m1 0h3m1 0h1m1 0h1m1 0h5m1 0h1m1 0h3m1 0h1M4 9.5h1m5 0h1m1 0h1m1 0h2m1 0h1m1 0h3m4 0h1m5 0h1M4 10.5h7m1 0h1m1 0h1m1 0h1m1 0h1m1 0h1m1 0h1m1 0h1m1 0h7M12 11.5h1m2 0h2m5 0h3M4 12.5h1m1 0h5m3 0h1m1 0h8m2 0h5M4 13.5h4m4 0h2m2 0h1m3 0h4m1 0h4m3 0h1M6 14.5h1m3 0h3m1 0h1m3 0h4m2 0h1M4 15.5h1m2 0h3m2 0h2m1 0h2m1 0h1m1 0h1m2 0h5m1 0h1m1 0h1M4 16.5h1m4 0h2m1 0h2m1 0h1m1 0h1m2 0h2m1 0h1m5 0h2M16 17.5h3m3 0h5m1 0h1m3 0h1M5 18.5h1m3 0h2m1 0h1m5 0h2m4 0h1m1 0h2m1 0h2M4 19.5h6m1 0h1m3 0h1m2 0h3m1 0h4m1 0h2m2 0h1M8 20.5h1m1 0h1m2 0h2m1 0h2m1 0h1m1 0h1m5 0h1m1 0h2M4 21.5h1m1 0h2m7 0h1m2 0h1m1 0h9m1 0h1m1 0h1M4 22.5h1m3 0h3m2 0h1m1 0h2m2 0h3m3 0h1m1 0h1m2 0h1M4 23.5h1m6 0h4m3 0h2m3 0h2m2 0h2m2 0h1M4 24.5h1m2 0h4m4 0h1m3 0h1m1 0h1m1 0h6m1 0h3M12 25.5h6m2 0h1m3 0h1m3 0h5M4 26.5h7m3 0h8m1 0h2m1 0h1m1 0h3M4 27.5h1m5 0h1m1 0h2m1 0h3m2 0h1m2 0h2m3 0h1M4 28.5h1m1 0h3m1 0h1m1 0h2m2 0h1m1 0h1m2 0h1m2 0h5m1 0h3M4 29.5h1m1 0h3m1 0h1m1 0h2m1 0h2m3 0h4m3 0h1m1 0h4M4 30.5h1m1 0h3m1 0h1m1 0h1m3 0h4m1 0h1m2 0h8M4 31.5h1m5 0h1m4 0h1m1 0h1m1 0h2m1 0h1m1 0h1m1 0h2m1 0h1m1 0h1M4 32.5h7m1 0h1m2 0h2m4 0h1m1 0h1m3 0h4";
-//# sourceMappingURL=mobile-app-qr.d.ts.map

package/dist/assets/mobile-app-qr.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mobile-app-qr.d.ts","sourceRoot":"","sources":["../../src/assets/mobile-app-qr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,oGAAoG;AACpG,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAE7C,qFAAqF;AACrF,eAAO,MAAM,kBAAkB,uyCACuwC,CAAC"}

package/src/assets/mobile-app-qr.ts

@@ -1,19 +0,0 @@
-/**
- * The install QR code's artwork: the modules of `MOBILE_APP_INSTALL_URL`
- * (`utils/mobile-app`) at version 3, ECC level M, as one SVG path. Packaged with
- * the library like the other assets, so every consumer draws the same code with
- * no host-asset serving. `MobileAppQr` (components/ui) is the component that
- * renders it.
- *
- * It changes WITH that URL. To regenerate: with the `qrcode` package,
- * `QRCode.create(url, { errorCorrectionLevel: 'M' })` gives the modules; each
- * row is one `M{x+4} {y+4}.5h{run}` followed by `m{gap} 0h{run}` per further
- * run (the 4 is the quiet zone), and the viewBox side is `size + 8`.
- */
-
-/** The side of the artwork's square viewBox: 29 modules plus a 4-module quiet zone on each side. */
-export const MOBILE_APP_QR_VIEWBOX_SIZE = 37;
-
-/** The dark modules, as horizontal strokes one module tall (`stroke` draws them). */
-export const MOBILE_APP_QR_PATH =
-  'M4 4.5h7m2 0h2m2 0h1m2 0h1m2 0h2m1 0h7M4 5.5h1m5 0h1m2 0h2m2 0h3m6 0h1m5 0h1M4 6.5h1m1 0h3m1 0h1m1 0h3m1 0h1m1 0h3m2 0h1m2 0h1m1 0h3m1 0h1M4 7.5h1m1 0h3m1 0h1m1 0h1m1 0h1m1 0h6m2 0h1m1 0h1m1 0h3m1 0h1M4 8.5h1m1 0h3m1 0h1m1 0h3m1 0h1m1 0h1m1 0h5m1 0h1m1 0h3m1 0h1M4 9.5h1m5 0h1m1 0h1m1 0h2m1 0h1m1 0h3m4 0h1m5 0h1M4 10.5h7m1 0h1m1 0h1m1 0h1m1 0h1m1 0h1m1 0h1m1 0h1m1 0h7M12 11.5h1m2 0h2m5 0h3M4 12.5h1m1 0h5m3 0h1m1 0h8m2 0h5M4 13.5h4m4 0h2m2 0h1m3 0h4m1 0h4m3 0h1M6 14.5h1m3 0h3m1 0h1m3 0h4m2 0h1M4 15.5h1m2 0h3m2 0h2m1 0h2m1 0h1m1 0h1m2 0h5m1 0h1m1 0h1M4 16.5h1m4 0h2m1 0h2m1 0h1m1 0h1m2 0h2m1 0h1m5 0h2M16 17.5h3m3 0h5m1 0h1m3 0h1M5 18.5h1m3 0h2m1 0h1m5 0h2m4 0h1m1 0h2m1 0h2M4 19.5h6m1 0h1m3 0h1m2 0h3m1 0h4m1 0h2m2 0h1M8 20.5h1m1 0h1m2 0h2m1 0h2m1 0h1m1 0h1m5 0h1m1 0h2M4 21.5h1m1 0h2m7 0h1m2 0h1m1 0h9m1 0h1m1 0h1M4 22.5h1m3 0h3m2 0h1m1 0h2m2 0h3m3 0h1m1 0h1m2 0h1M4 23.5h1m6 0h4m3 0h2m3 0h2m2 0h2m2 0h1M4 24.5h1m2 0h4m4 0h1m3 0h1m1 0h1m1 0h6m1 0h3M12 25.5h6m2 0h1m3 0h1m3 0h5M4 26.5h7m3 0h8m1 0h2m1 0h1m1 0h3M4 27.5h1m5 0h1m1 0h2m1 0h3m2 0h1m2 0h2m3 0h1M4 28.5h1m1 0h3m1 0h1m1 0h2m2 0h1m1 0h1m2 0h1m2 0h5m1 0h3M4 29.5h1m1 0h3m1 0h1m1 0h2m1 0h2m3 0h4m3 0h1m1 0h4M4 30.5h1m1 0h3m1 0h1m1 0h1m3 0h4m1 0h1m2 0h8M4 31.5h1m5 0h1m4 0h1m1 0h1m1 0h2m1 0h1m1 0h1m1 0h2m1 0h1m1 0h1M4 32.5h7m1 0h1m2 0h2m4 0h1m1 0h1m3 0h4';