@infotrust/ui 0.0.0-stage → 0.30.0

package/LICENSE

@@ -0,0 +1,24 @@
+MIT License
+
+Copyright (c) 2026 InfoTrust, LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+The brand marks in this package and the third-party code it bundles are not
+covered by this license. See NOTICE.md.

package/NOTICE.md

@@ -0,0 +1,37 @@
+# Notices for @infotrust/ui
+
+The code written for this package is under the MIT License (see LICENSE). Two
+kinds of content in it are not.
+
+## Brand marks
+
+`ItPlatformLogo` and `ItPlatformChip` draw the logos of other companies'
+products (Google, Google Analytics, Google Tag Manager, Google Ads, Campaign
+Manager 360, Display & Video 360, Search Ads 360, Google Ad Manager, BigQuery,
+Looker Studio, Google Cloud, YouTube, Gmail, Google Sheets, Google Drive, Meta,
+Instagram, TikTok, Snapchat, LinkedIn, Pinterest, Reddit, X, Amazon Ads,
+Microsoft Advertising, Microsoft Teams, Microsoft Excel, Adobe Analytics,
+Tealium, Segment, Amplitude, Snowflake, ServiceNow, Jira, Slack, Salesforce,
+HubSpot, Shopify, and others). The art is in `dist/platform-art-*.js`.
+
+These logos are trademarks of their owners. They are included only so that
+InfoTrust products can name the platforms they connect to. The MIT License does
+not grant any right to them. Their use is subject to each owner's brand
+guidelines, and nothing here implies that any owner endorses InfoTrust or this
+package. Tag Inspector is a trademark of InfoTrust, LLC.
+
+## Third-party code bundled in dist
+
+The package bundles parts of these projects. Their license texts are in
+`dist/licenses/`.
+
+| Project | Version | License | Where it is | Source |
+|---|---|---|---|---|
+| elkjs (Eclipse Layout Kernel) | 0.12.0 | EPL-2.0 OR GPL-3.0-or-later (distributed here under EPL-2.0) | `dist/elk-worker.min-*.js`, the DAG layout worker | https://github.com/kieler/elkjs |
+| highlight.js | 11.12.0 | BSD-3-Clause, Copyright (c) 2006, Ivan Sagalaev | `dist/highlight-worker-*.js` and the code block styles | https://github.com/highlightjs/highlight.js |
+| vue-sonner | 2.0.9 | MIT, Copyright (c) 2022 Yunwei Xiao | the toast host in `dist/index.js` and `dist/components.css` | https://github.com/xiaoluoboding/vue-sonner |
+| @vue-flow/core (base styles) | 1.48.2 | MIT, Copyright (c) 2019-2025 webkid GmbH, Copyright (c) 2021-2025 Burak Cakmakoglu | `dist/components.css` | https://github.com/bcakmakoglu/vue-flow |
+
+The elkjs worker is the unmodified build that elkjs publishes. Its source code
+is available at the address above, under the Eclipse Public License 2.0
+(https://www.eclipse.org/legal/epl-2.0/).

package/README.md

@@ -1,3 +1,54 @@
-# Temporary Holding Version
+# @infotrust/ui
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+InfoTrust's Vue 3 + PrimeVue 4 component library, built on [`@infotrust/design-tokens`](https://www.npmjs.com/package/@infotrust/design-tokens). It is the standard UI for the InfoTrust Suite, its modules, Tag Inspector, and new InfoTrust apps.
+
+> **Built for InfoTrust products.** This package is public so InfoTrust's own apps and build systems can install it without credentials. It is not a general-purpose library and has no support for outside use. It changes when InfoTrust's products need it to, and a release (minor ones included, while it is 0.x) can change or remove anything without notice. Use it at your own risk under the MIT License.
+
+## Install
+
+```bash
+pnpm add @infotrust/ui @infotrust/design-tokens "primevue@^4.5.0" "@primeuix/themes@^2.0.3" lucide-vue-next
+```
+
+No registry setup and no token: it installs from the public npm registry.
+
+Peers: `vue ^3.5.0`, `primevue >=4.5.0 <5`, `@primeuix/themes ^2.0.3`, `lucide-vue-next >=0.400.0`, and optionally `vue-router ^4.0.0`. The DAG canvas (`@infotrust/ui/dag`) also needs `@vue-flow/core ^1.48.0` and `elkjs ^0.12.0`.
+
+## Use
+
+```ts
+import '@infotrust/ui/styles.css'; // fonts, tokens, base, and component CSS, in cascade layers
+import { createInfotrustUI, initItTheme } from '@infotrust/ui';
+
+initItTheme(); // before mount: applies the saved light/system/dark preference
+createApp(App).use(createInfotrustUI()).mount('#app');
+```
+
+`styles.css` declares the layer order `it-tokens, it-base, primevue, it-components, it-overrides`, and `createInfotrustUI()` puts PrimeVue's runtime theme in the `primevue` layer. App CSS is unlayered and always wins, so overrides never need `!important`. `@infotrust/ui/components.css` is the component CSS alone, for apps that load the tokens another way.
+
+Render `<ItOverlayHost />` once in the root component (toasts and confirmations).
+
+```vue
+<ItPage title="Monitor">
+  <template #meta><ItStatus status="succeeded" :label="`Last scan ${formatFreshness(lastScan)}`" /></template>
+  <template #actions><Button label="Run scan" @click="run" /></template>
+
+  <ItPanel padding="none">
+    <template #toolbar>
+      <ItDataToolbar v-model:search="q" :count="rows.length" noun="findings" />
+    </template>
+    <ItDataTable :value="rows" :loading="loading" data-key="id">
+      <Column field="score" header="Severity"><template #body="{ data }"><ItSeverityBadge :severity="data.score" /></template></Column>
+      <Column field="title" header="Finding" body-class="it-cell-primary" />
+    </ItDataTable>
+  </ItPanel>
+</ItPage>
+```
+
+Component choice, APIs, and page patterns are in the `infotrust-ui` Claude Code plugin and on design.infotrust.com (InfoTrust staff sign-in).
+
+## License and notices
+
+MIT, Copyright (c) 2026 InfoTrust, LLC. The brand logos that `ItPlatformLogo` draws are trademarks of their owners and are not covered by the MIT License. The package bundles third-party code under its own licenses (elkjs, highlight.js, vue-sonner, and Vue Flow's base styles). Both are listed in [NOTICE.md](./NOTICE.md), and the license texts are in `dist/licenses/`.
+
+Security problems: email ryan.bulcher@infotrustllc.com. Do not open a public issue.