@appilots/cli 0.11.3 → 0.14.0

package/dist/index.js

@@ -1,13 +1,13 @@
 'use strict';
 
 var fs = require('fs/promises');
-var path2 = require('path');
-var traverse4 = require('@babel/traverse');
+var crypto = require('crypto');
+var traverse5 = require('@babel/traverse');
 var BabelTypes = require('@babel/types');
+var path2 = require('path');
 var fastGlob = require('fast-glob');
 var parser = require('@babel/parser');
 var fs$1 = require('fs');
-var crypto = require('crypto');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -30,9 +30,9 @@ function _interopNamespace(e) {
 }
 
 var fs__default = /*#__PURE__*/_interopDefault(fs);
-var path2__namespace = /*#__PURE__*/_interopNamespace(path2);
-var traverse4__default = /*#__PURE__*/_interopDefault(traverse4);
+var traverse5__default = /*#__PURE__*/_interopDefault(traverse5);
 var BabelTypes__namespace = /*#__PURE__*/_interopNamespace(BabelTypes);
+var path2__namespace = /*#__PURE__*/_interopNamespace(path2);
 var fastGlob__default = /*#__PURE__*/_interopDefault(fastGlob);
 var parser__namespace = /*#__PURE__*/_interopNamespace(parser);
 
@@ -41,6 +41,343 @@ var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
+var MAX_HOPS = 8;
+function unwrap(path11) {
+  while (path11.isTSAsExpression() || path11.isTSTypeAssertion() || path11.isTSNonNullExpression() || path11.isTSSatisfiesExpression() || path11.isParenthesizedExpression())
+    path11 = path11.get("expression");
+  return path11;
+}
+function constantValue(path11, depth = 0) {
+  if (depth > MAX_HOPS) return void 0;
+  path11 = unwrap(path11);
+  if (!path11.isIdentifier()) return path11;
+  const binding = path11.scope.getBinding(path11.node.name);
+  if (!binding?.constant || !binding.path.isVariableDeclarator()) return path11;
+  const init = binding.path.get("init");
+  const resolved = init.node ? constantValue(init, depth + 1) : void 0;
+  if (resolved?.isObjectExpression() && binding.referencePaths.some(
+    (reference) => !reference.parentPath?.isJSXSpreadAttribute() && !reference.parentPath?.isSpreadElement()
+  ))
+    return void 0;
+  return resolved;
+}
+function propValue(path11, name) {
+  const readObject = (path12) => {
+    const resolved = constantValue(path12);
+    if (!resolved?.isObjectExpression()) return { blocked: true };
+    for (const property of [...resolved.get("properties")].reverse()) {
+      if (property.isSpreadElement()) {
+        const found = readObjectBounded(property.get("argument"));
+        if (found.value || found.blocked) return found;
+      } else if (property.isObjectProperty() || property.isObjectMethod()) {
+        if (property.node.computed) return { blocked: true };
+        const key = property.node.key;
+        if ((BabelTypes__namespace.isIdentifier(key) ? key.name : BabelTypes__namespace.isStringLiteral(key) ? key.value : "") === name)
+          return property.isObjectProperty() ? { value: property.get("value") } : { value: property };
+      }
+    }
+    return {};
+  };
+  let objectBudget = MAX_HOPS;
+  const readObjectBounded = (path12) => objectBudget-- > 0 ? readObject(path12) : { blocked: true };
+  for (const attr of [...path11.get("attributes")].reverse()) {
+    if (attr.isJSXAttribute() && BabelTypes__namespace.isJSXIdentifier(attr.node.name, { name })) {
+      const value = attr.get("value");
+      return value.isJSXExpressionContainer() ? unwrap(value.get("expression")) : value.node ? value : void 0;
+    }
+    if (attr.isJSXSpreadAttribute()) {
+      const found = readObjectBounded(attr.get("argument"));
+      if (found.value || found.blocked) return found.value;
+    }
+  }
+  return void 0;
+}
+function importIdentity(path11, depth = 0) {
+  if (depth > MAX_HOPS) return void 0;
+  path11 = unwrap(path11);
+  if (path11.isIdentifier() || path11.isJSXIdentifier()) {
+    const binding = path11.scope.getBinding(path11.node.name);
+    if (!binding?.constant) return void 0;
+    const declaration = binding.path;
+    if (declaration.parentPath?.isImportDeclaration()) {
+      const module = declaration.parentPath.node.source.value;
+      if (declaration.isImportSpecifier()) {
+        const imported = declaration.node.imported;
+        return { module, imported: BabelTypes__namespace.isIdentifier(imported) ? imported.name : imported.value };
+      }
+      if (declaration.isImportDefaultSpecifier()) return { module, imported: "default" };
+      if (declaration.isImportNamespaceSpecifier()) return { module, imported: "*" };
+    }
+    if (declaration.isVariableDeclarator() && declaration.get("init").node)
+      return importIdentity(declaration.get("init"), depth + 1);
+  }
+  if (path11.isJSXMemberExpression() || path11.isMemberExpression() && !path11.node.computed) {
+    const origin = importIdentity(path11.get("object"), depth + 1);
+    const key = path11.node.property;
+    if (origin && (BabelTypes__namespace.isIdentifier(key) || BabelTypes__namespace.isJSXIdentifier(key)) && (origin.imported === "*" || origin.module === "react" && origin.imported === "default"))
+      return { module: origin.module, imported: key.name };
+  }
+  return void 0;
+}
+function handlerFunction(path11, depth = 0) {
+  if (depth > MAX_HOPS) return void 0;
+  path11 = unwrap(path11);
+  if (path11.isFunction()) return path11;
+  if (path11.isIdentifier()) {
+    const binding = path11.scope.getBinding(path11.node.name);
+    if (!binding?.constant) return void 0;
+    if (binding.path.isFunctionDeclaration()) return binding.path;
+    if (binding.path.isVariableDeclarator() && binding.path.get("init").node)
+      return handlerFunction(binding.path.get("init"), depth + 1);
+  }
+  if (path11.isCallExpression()) {
+    const origin = importIdentity(path11.get("callee"));
+    if (origin?.module === "react" && origin.imported === "useCallback") {
+      const callback = path11.get("arguments")[0];
+      if (callback) return handlerFunction(callback, depth + 1);
+    }
+  }
+  if (path11.isMemberExpression() && !path11.node.computed && BabelTypes__namespace.isThisExpression(path11.node.object)) {
+    const key = path11.node.property;
+    if (!BabelTypes__namespace.isIdentifier(key)) return void 0;
+    const owner = path11.findParent((p) => p.isClassDeclaration() || p.isClassExpression());
+    if (!owner || !(owner.isClassDeclaration() || owner.isClassExpression())) return void 0;
+    for (const member of owner.get("body").get("body")) {
+      if (!(member.isClassMethod() || member.isClassProperty()) || member.node.computed || member.node.static)
+        continue;
+      if (!BabelTypes__namespace.isIdentifier(member.node.key, { name: key.name })) continue;
+      if (member.isClassMethod() && member.node.kind === "method") return member;
+      if (member.isClassProperty() && member.get("value").node)
+        return handlerFunction(member.get("value"), depth + 1);
+    }
+  }
+  return void 0;
+}
+
+// src/extractors/control-evidence.ts
+function symbol(node) {
+  if (BabelTypes__namespace.isTSAsExpression(node) || BabelTypes__namespace.isTSTypeAssertion(node) || BabelTypes__namespace.isTSNonNullExpression(node) || BabelTypes__namespace.isTSSatisfiesExpression(node))
+    return symbol(node.expression);
+  if (BabelTypes__namespace.isIdentifier(node) || BabelTypes__namespace.isJSXIdentifier(node)) return node.name;
+  if (BabelTypes__namespace.isThisExpression(node)) return "this";
+  if (BabelTypes__namespace.isMemberExpression(node) && !node.computed || BabelTypes__namespace.isJSXMemberExpression(node)) {
+    const object = symbol(node.object), property = symbol(node.property);
+    return object && property ? `${object}.${property}` : void 0;
+  }
+  if (BabelTypes__namespace.isUnaryExpression(node) && node.operator === "!") {
+    const value = symbol(node.argument);
+    return value ? `!${value}` : void 0;
+  }
+  return void 0;
+}
+function attribute(node, name) {
+  return node.attributes.find(
+    (a) => BabelTypes__namespace.isJSXAttribute(a) && BabelTypes__namespace.isJSXIdentifier(a.name, { name })
+  );
+}
+var ICON_LIBRARIES = [
+  "lucide-react-native",
+  "lucide-react",
+  "@tamagui/lucide-icons",
+  "@expo/vector-icons",
+  "@react-native-vector-icons/",
+  "react-native-vector-icons/"
+];
+function iconLibrary(module) {
+  return ICON_LIBRARIES.some(
+    (name) => name.endsWith("/") ? module.startsWith(name) : module === name || module.startsWith(name + "/")
+  );
+}
+function add(values, value, max = 12) {
+  if (value && value.length <= 240 && values.length < max && !values.includes(value))
+    values.push(value);
+}
+function iconName(path11, explicitIcon = false) {
+  const origin = importIdentity(path11);
+  if (origin && iconLibrary(origin.module) && origin.imported !== "*")
+    return origin.imported === "default" ? origin.module : `${origin.module}:${origin.imported}`;
+  const name = symbol(path11.node);
+  return name && (explicitIcon || /icon/i.test(name)) ? name : void 0;
+}
+function iconsInElement(path11, explicitIcon = false) {
+  const name = iconName(path11.get("name"), explicitIcon);
+  if (!name) return void 0;
+  const glyph = propValue(path11, "name");
+  const value = glyph && constantValue(glyph);
+  return value?.isStringLiteral() ? `${name}:${value.node.value}` : name;
+}
+function hasInteraction(path11) {
+  return ["onPress", "onLongPress", "onClick"].some(
+    (name) => attribute(path11.node, name) || propValue(path11, name)
+  );
+}
+function collectPresentationIcons(path11, icons) {
+  const namedIconProps = [
+    "icon",
+    "prefix",
+    "suffix",
+    "left",
+    "right",
+    "leadingIcon",
+    "trailingIcon",
+    "startIcon",
+    "endIcon",
+    "renderIcon"
+  ];
+  const props = new Set(namedIconProps);
+  for (const attr of path11.node.attributes)
+    if (BabelTypes__namespace.isJSXAttribute(attr) && BabelTypes__namespace.isJSXIdentifier(attr.name) && !/^on[A-Z]/.test(attr.name.name))
+      props.add(attr.name.name);
+  for (const prop of props) {
+    const icon = propValue(path11, prop);
+    if (icon) {
+      const value = constantValue(icon);
+      if (value?.isStringLiteral()) {
+        if (prop.toLowerCase().includes("icon")) add(icons, value.node.value, 8);
+      } else {
+        const explicitIcon = prop.toLowerCase() === "icon";
+        if (icon.isJSXElement()) {
+          if (hasInteraction(icon.get("openingElement"))) continue;
+          add(icons, iconsInElement(icon.get("openingElement"), explicitIcon), 8);
+        }
+        icon.traverse({
+          JSXAttribute(attr) {
+            if (BabelTypes__namespace.isJSXIdentifier(attr.node.name) && /^on[A-Z]/.test(attr.node.name.name))
+              attr.skip();
+          },
+          JSXElement(child) {
+            const opening = child.get("openingElement");
+            if (hasInteraction(opening)) {
+              child.skip();
+              return;
+            }
+            add(icons, iconsInElement(opening, explicitIcon), 8);
+          }
+        });
+        if (!icons.length && (namedIconProps.includes(prop) || explicitIcon))
+          add(icons, iconName(icon, explicitIcon), 8);
+      }
+    }
+  }
+}
+function collectIcons(path11) {
+  const icons = [];
+  collectPresentationIcons(path11, icons);
+  const jsx = path11.parentPath;
+  if (jsx.isJSXElement())
+    jsx.traverse({
+      // JSX mentioned inside an event callback is not a rendered child icon.
+      JSXAttribute(attr) {
+        attr.skip();
+      },
+      JSXElement(child) {
+        const opening = child.get("openingElement");
+        if (hasInteraction(opening)) {
+          child.skip();
+          return;
+        }
+        add(icons, iconsInElement(opening), 8);
+        collectPresentationIcons(opening, icons);
+      }
+    });
+  return icons;
+}
+function conditionsAt(path11) {
+  const conditions = [];
+  let child = path11;
+  for (let parent = child.parentPath; parent && !parent.isFunction(); child = parent, parent = parent.parentPath) {
+    let test;
+    let negated = false;
+    if (parent.isLogicalExpression() && parent.node.right === child.node) {
+      if (parent.node.operator === "&&") test = parent.node.left;
+      if (parent.node.operator === "||") {
+        test = parent.node.left;
+        negated = true;
+      }
+    } else if (parent.isConditionalExpression() && parent.node.test !== child.node) {
+      test = parent.node.test;
+      negated = parent.node.alternate === child.node;
+    } else if (parent.isIfStatement() && parent.node.test !== child.node) {
+      test = parent.node.test;
+      negated = parent.node.alternate === child.node;
+    }
+    const name = symbol(test);
+    if (name) add(conditions, negated ? name.startsWith("!") ? name.slice(1) : `!${name}` : name);
+  }
+  return conditions;
+}
+function collectHandlerEvidence(expression, evidence) {
+  const seen = /* @__PURE__ */ new Set();
+  let budget = 100;
+  const visit = (path11, depth) => {
+    if (depth > 4 || budget-- <= 0) return;
+    const fn = handlerFunction(path11);
+    if (!fn || seen.has(fn.node)) return;
+    seen.add(fn.node);
+    fn.traverse({
+      // Ignore uncalled helper definitions; inline callbacks remain source evidence.
+      Function(nested) {
+        if (!nested.parentPath.isCallExpression() && !nested.parentPath.isObjectProperty())
+          nested.skip();
+      },
+      CallExpression(call) {
+        if (budget-- <= 0) {
+          call.skip();
+          return;
+        }
+        add(evidence.calls, symbol(call.node.callee));
+        for (const arg of call.node.arguments) add(evidence.argumentBindings, symbol(arg));
+        visit(call.get("callee"), depth + 1);
+        if (!BabelTypes__namespace.isMemberExpression(call.node.callee) || call.node.callee.computed || !BabelTypes__namespace.isIdentifier(call.node.callee.property, { name: "alert" }))
+          return;
+        const callee = call.get("callee");
+        if (!callee.isMemberExpression()) return;
+        const origin = importIdentity(callee.get("object"));
+        if (origin?.module !== "react-native" || origin.imported !== "Alert") return;
+        const options = call.node.arguments[2];
+        const destructiveOption = BabelTypes__namespace.isArrayExpression(options) && options.elements.some(
+          (option) => BabelTypes__namespace.isObjectExpression(option) && option.properties.some(
+            (p) => BabelTypes__namespace.isObjectProperty(p) && !p.computed && symbol(p.key) === "style" && BabelTypes__namespace.isStringLiteral(p.value, { value: "destructive" })
+          )
+        );
+        if (destructiveOption)
+          evidence.nativeConfirmation = {
+            title: symbol(call.node.arguments[0]),
+            destructiveOption
+          };
+      }
+    });
+  };
+  visit(unwrap(expression), 0);
+}
+function extractControlEvidence(ast, source, file) {
+  const candidates = [];
+  const sourceHash = crypto.createHash("sha256").update(source).digest("hex");
+  traverse5__default.default(ast, {
+    JSXOpeningElement(path11) {
+      const node = path11.node;
+      if (attribute(node, "__appilotsControl")) return;
+      const value = propValue(path11, "onPress");
+      if (!value && !attribute(node, "onPress") || value?.isNullLiteral() || value?.isJSXEmptyExpression())
+        return;
+      const icons = collectIcons(path11);
+      if (!icons.length || node.end == null) return;
+      const evidence = {
+        version: 1,
+        siteId: crypto.createHash("sha256").update(`${file}:${sourceHash}:${node.start}`).digest("hex").slice(0, 20),
+        component: symbol(node.name) ?? "unknown",
+        icons,
+        ...value && symbol(value.node) ? { handler: symbol(value.node) } : {},
+        calls: [],
+        argumentBindings: [],
+        conditions: conditionsAt(path11)
+      };
+      if (value) collectHandlerEvidence(value, evidence);
+      candidates.push({ evidence, sourceHash, offset: node.end - (node.selfClosing ? 2 : 1) });
+    }
+  });
+  return candidates;
+}
 function byCodeUnit(a, b) {
   return a < b ? -1 : a > b ? 1 : 0;
 }
@@ -162,7 +499,7 @@ function classifyJsxComponent(name, element) {
 }
 function collectFunctions(ast) {
   const handlers = /* @__PURE__ */ new Map();
-  traverse4__default.default(ast, {
+  traverse5__default.default(ast, {
     FunctionDeclaration: (nodePath) => {
       if (nodePath.node.id?.name) handlers.set(nodePath.node.id.name, nodePath.node);
     },
@@ -265,7 +602,7 @@ function analyzeFunctionBehavior(name, fn, handlers, seen = /* @__PURE__ */ new
     }
   };
   if (fn.body) {
-    traverse4__default.default(fn.body, {
+    traverse5__default.default(fn.body, {
       noScope: true,
       enter: (nodePath) => inspectNode(nodePath.node)
     });
@@ -293,7 +630,7 @@ function setterToStateName(setterName) {
 }
 function extractNavigationCalls(ast) {
   const calls = [];
-  traverse4__default.default(ast, {
+  traverse5__default.default(ast, {
     noScope: !BabelTypes__namespace.isFile(ast),
     CallExpression: (nodePath) => {
       const node = nodePath.node;
@@ -417,6 +754,9 @@ function sanitisePermissionsObject(obj) {
   if (typeof obj.isPii === "boolean") {
     out.isPii = obj.isPii;
   }
+  if (typeof obj.assessment === "boolean") {
+    out.assessment = obj.assessment;
+  }
   if (Array.isArray(obj.blockedActions)) {
     const ids = obj.blockedActions.filter((x) => typeof x === "string" && !!x);
     if (ids.length > 0) out.blockedActions = ids;
@@ -444,6 +784,7 @@ var ScreenAnalyzer = class {
   routeTargetFiles;
   /** §D: Count of screens filtered out in strict mode (available after analyze()) */
   screensFilteredOut = 0;
+  controlEvidenceFiles = {};
   constructor(config, options) {
     this.config = config;
     this.routeTargetFiles = options?.routeTargetFiles ?? /* @__PURE__ */ new Set();
@@ -544,6 +885,11 @@ var ScreenAnalyzer = class {
       title: registerScreenMeta?.title,
       description: registerScreenMeta?.description,
       components,
+      controlCandidates: extractControlEvidence(
+        ast,
+        source,
+        path2__namespace.default.relative(this.config.rootDir, filePath)
+      ),
       forms,
       actions,
       navigationTargets,
@@ -554,6 +900,8 @@ var ScreenAnalyzer = class {
         ...permissionsFromJsDoc.isPii ? { isPii: true } : {}
       } : {}
     };
+    if (descriptor.controlCandidates?.length)
+      this.controlEvidenceFiles[path2__namespace.default.relative(this.config.rootDir, filePath).split(path2__namespace.default.sep).join("/")] = descriptor.controlCandidates;
     descriptor.__hasRegisterScreen = hasRegisterScreenCall;
     return descriptor;
   }
@@ -563,7 +911,7 @@ var ScreenAnalyzer = class {
    */
   detectRegisterScreenCall(ast) {
     let found = false;
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       CallExpression: (nodePath) => {
         if (found) return;
         const callee = nodePath.node.callee;
@@ -580,7 +928,7 @@ var ScreenAnalyzer = class {
    */
   extractRegisterScreenMetadata(ast) {
     let metadata = null;
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       CallExpression: (nodePath) => {
         const callee = nodePath.node.callee;
         if (BabelTypes__namespace.isIdentifier(callee) && callee.name === "registerScreen" || BabelTypes__namespace.isMemberExpression(callee) && BabelTypes__namespace.isIdentifier(callee.property) && callee.property.name === "registerScreen") {
@@ -877,7 +1225,7 @@ var ScreenAnalyzer = class {
    */
   extractDefaultComponentName(ast) {
     let componentName = "";
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       ExportDefaultDeclaration: (nodePath) => {
         const declaration = nodePath.node.declaration;
         if (BabelTypes__namespace.isFunctionDeclaration(declaration) && declaration.id?.name) {
@@ -902,7 +1250,7 @@ var ScreenAnalyzer = class {
    */
   extractNavigationTargets(ast) {
     const targets = /* @__PURE__ */ new Set();
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       CallExpression: (nodePath) => {
         const callee = nodePath.node.callee;
         if (BabelTypes__namespace.isMemberExpression(callee) && BabelTypes__namespace.isIdentifier(callee.object) && callee.object.name === "navigation" && BabelTypes__namespace.isIdentifier(callee.property) && callee.property.name === "navigate") {
@@ -921,7 +1269,7 @@ var ScreenAnalyzer = class {
   extractForms(ast) {
     const forms = [];
     const fields = /* @__PURE__ */ new Map();
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXOpeningElement: (nodePath) => {
         const element = nodePath.node;
         if (BabelTypes__namespace.isJSXIdentifier(element.name)) {
@@ -1042,7 +1390,7 @@ var ScreenAnalyzer = class {
   extractComponents(ast) {
     const components = [];
     const seen = /* @__PURE__ */ new Set();
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXOpeningElement: (nodePath) => {
         const element = nodePath.node;
         if (BabelTypes__namespace.isJSXIdentifier(element.name)) {
@@ -1106,7 +1454,7 @@ var ScreenAnalyzer = class {
     const actionLabels = new Map(
       actions.filter((a) => a.label).map((a) => [this.normalizeLabel(a.label), a])
     );
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXOpeningElement: (nodePath) => {
         const element = nodePath.node;
         if (BabelTypes__namespace.isJSXIdentifier(element.name)) {
@@ -1175,7 +1523,7 @@ var ScreenAnalyzer = class {
   }
   collectButtonHandlersByLabel(ast) {
     const out = /* @__PURE__ */ new Map();
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXOpeningElement: (nodePath) => {
         const element = nodePath.node;
         if (!BabelTypes__namespace.isJSXIdentifier(element.name)) return;
@@ -1257,7 +1605,7 @@ var ScreenAnalyzer = class {
       }
     };
     if (fn.body) {
-      traverse4__default.default(
+      traverse5__default.default(
         fn.body,
         {
           noScope: true,
@@ -1454,7 +1802,7 @@ var ScreenAnalyzer = class {
   extractCollections(ast) {
     const renderItemFns = this.collectRenderItemFunctions(ast);
     const collections = [];
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXOpeningElement: (nodePath) => {
         const element = nodePath.node;
         if (!BabelTypes__namespace.isJSXIdentifier(element.name)) return;
@@ -1491,7 +1839,7 @@ var ScreenAnalyzer = class {
   }
   collectRenderItemFunctions(ast) {
     const out = /* @__PURE__ */ new Map();
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       VariableDeclarator: (nodePath) => {
         if (!BabelTypes__namespace.isIdentifier(nodePath.node.id)) return;
         const init = nodePath.node.init;
@@ -1534,7 +1882,7 @@ var ScreenAnalyzer = class {
   }
   extractRowAction(fn) {
     let action;
-    traverse4__default.default(
+    traverse5__default.default(
       fn.body,
       {
         noScope: true,
@@ -1587,7 +1935,7 @@ var ScreenAnalyzer = class {
     } else if (BabelTypes__namespace.isIdentifier(firstParam)) {
       itemNames.add(firstParam.name);
     }
-    traverse4__default.default(
+    traverse5__default.default(
       fn.body,
       {
         noScope: true,
@@ -1629,7 +1977,7 @@ var ScreenAnalyzer = class {
   inferSearchField(ast, dataSource) {
     if (!dataSource) return void 0;
     let queryBinding;
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       CallExpression: (nodePath) => {
         const node = nodePath.node;
         if (!BabelTypes__namespace.isMemberExpression(node.callee)) return;
@@ -1640,7 +1988,7 @@ var ScreenAnalyzer = class {
         const fn = node.arguments[0];
         if (!BabelTypes__namespace.isArrowFunctionExpression(fn) && !BabelTypes__namespace.isFunctionExpression(fn))
           return;
-        traverse4__default.default(
+        traverse5__default.default(
           fn.body,
           {
             noScope: true,
@@ -1682,7 +2030,7 @@ var ScreenAnalyzer = class {
   }
 };
 var EXTENSIONS = [".tsx", ".ts", ".jsx", ".js", ".mjs", ".cjs"];
-var MAX_HOPS = 8;
+var MAX_HOPS2 = 8;
 var ModuleGraph = class {
   asts = /* @__PURE__ */ new Map();
   resolved = /* @__PURE__ */ new Map();
@@ -1801,7 +2149,7 @@ var ModuleGraph = class {
    * Devolve o arquivo e o nome sob o qual ele é definido lá.
    */
   resolveBinding(file, name, hops = 0) {
-    if (hops > MAX_HOPS) return null;
+    if (hops > MAX_HOPS2) return null;
     if (this.topLevelInit(file, name) !== null) return { file, name };
     const binding = this.imports(file).get(name);
     if (binding) {
@@ -1855,7 +2203,7 @@ var ModuleGraph = class {
    * com interpolação nem valor calculado, de propósito.
    */
   stringConstant(file, node, hops = 0) {
-    if (!node || hops > MAX_HOPS) return null;
+    if (!node || hops > MAX_HOPS2) return null;
     if (BabelTypes__namespace.isStringLiteral(node)) return node.value;
     if (BabelTypes__namespace.isTemplateLiteral(node)) {
       return node.expressions.length === 0 ? node.quasis[0]?.value.cooked ?? null : null;
@@ -1884,7 +2232,7 @@ var ModuleGraph = class {
    * que é como o `pocketpal` monta todas as telas do Drawer).
    */
   componentFile(file, node, hops = 0) {
-    if (!node || hops > MAX_HOPS) return null;
+    if (!node || hops > MAX_HOPS2) return null;
     if (BabelTypes__namespace.isCallExpression(node)) {
       for (const arg of node.arguments) {
         if (BabelTypes__namespace.isIdentifier(arg) || BabelTypes__namespace.isMemberExpression(arg)) {
@@ -2080,7 +2428,7 @@ function workspaceGlobs(dir) {
 }
 function expandWorkspaceGlobs(root, globs) {
   const out = [];
-  const add = (dir) => {
+  const add2 = (dir) => {
     const pkgPath = path2__namespace.default.join(dir, "package.json");
     if (!fs$1.existsSync(pkgPath)) return;
     try {
@@ -2101,12 +2449,12 @@ function expandWorkspaceGlobs(root, globs) {
       for (const entry of entries) {
         const dir = path2__namespace.default.join(parent, entry);
         try {
-          if (fs$1.statSync(dir).isDirectory()) add(dir);
+          if (fs$1.statSync(dir).isDirectory()) add2(dir);
         } catch {
         }
       }
     } else if (!glob.includes("*")) {
-      add(path2__namespace.default.join(root, glob));
+      add2(path2__namespace.default.join(root, glob));
     }
   }
   return out.sort((a, b) => b.name.length - a.name.length);
@@ -2426,7 +2774,7 @@ var NavigationAnalyzer = class {
     const ast = this.graph.parse(filePath);
     if (!ast) return [];
     const out = /* @__PURE__ */ new Map();
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       CallExpression: (nodePath) => {
         const callee = nodePath.node.callee;
         if (!BabelTypes__namespace.isIdentifier(callee)) return;
@@ -2587,7 +2935,7 @@ var NavigationAnalyzer = class {
     const ast = this.graph.parse(filePath);
     if (!ast) return [];
     const found = /* @__PURE__ */ new Map();
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXElement: (nodePath) => {
         const { node } = nodePath;
         const openingElement = node.openingElement;
@@ -2659,7 +3007,7 @@ var NavigationAnalyzer = class {
     if (!ast) return [];
     const byNavigator = /* @__PURE__ */ new Map();
     const resolved = /* @__PURE__ */ new Map();
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXElement: (nodePath) => {
         const name = nodePath.node.openingElement.name;
         if (!BabelTypes__namespace.isJSXMemberExpression(name) || !BabelTypes__namespace.isJSXIdentifier(name.object)) return;
@@ -2892,7 +3240,7 @@ var NavigationAnalyzer = class {
           ...this.config.parserPlugins || []
         ]
       });
-      traverse4__default.default(ast, {
+      traverse5__default.default(ast, {
         TSTypeAliasDeclaration: (nodePath) => {
           const { node } = nodePath;
           const typeName = node.id.name;
@@ -2965,7 +3313,7 @@ var NavigationAnalyzer = class {
     if (type.type === "TSUndefinedKeyword") return "undefined";
     if (type.type === "TSNullKeyword") return "null";
     if (type.type === "TSUnionType") {
-      return type.types.map((t13) => this.typeToString(t13)).join(" | ");
+      return type.types.map((t15) => this.typeToString(t15)).join(" | ");
     }
     if (type.type === "TSTypeLiteral") {
       return "object";
@@ -2986,7 +3334,7 @@ var NavigationAnalyzer = class {
   /** Attach parsed type params to navigator screens */
   attachParamsToNavigators(navigators, types) {
     for (const navigator of navigators) {
-      const matchingType = types.find((t13) => t13.type === navigator.type);
+      const matchingType = types.find((t15) => t15.type === navigator.type);
       if (matchingType) {
         for (const screen of navigator.screens) {
           const screenParams = matchingType.paramEntries.get(screen.name);
@@ -3075,7 +3423,7 @@ var ComponentAnalyzer = class {
         plugins: ["jsx", "typescript", ["decorators", { decoratorsBeforeExport: true }]]
       });
       const components = [];
-      traverse4__default.default(ast, {
+      traverse5__default.default(ast, {
         JSXElement: (path11) => {
           const component = this.extractComponentFromJSXElement(path11.node);
           if (component) {
@@ -3203,12 +3551,12 @@ var FormAnalyzer = class {
       this.stateVariables.clear();
       this.inputElements = [];
       this.submitButtons = [];
-      traverse4__default.default(ast, {
+      traverse5__default.default(ast, {
         CallExpression: (path11) => {
           this.extractStateVariables(path11.node);
         }
       });
-      traverse4__default.default(ast, {
+      traverse5__default.default(ast, {
         JSXElement: (path11) => {
           this.extractFormElements(path11.node);
         }
@@ -3244,23 +3592,23 @@ var FormAnalyzer = class {
     for (const attr of openingElement.attributes) {
       if (BabelTypes__namespace.isJSXAttribute(attr) && BabelTypes__namespace.isJSXIdentifier(attr.name)) {
         const propName = attr.name.name;
-        const propValue = this.extractAttributeValue(attr.value);
+        const propValue2 = this.extractAttributeValue(attr.value);
         switch (propName) {
           case "label":
-            info.label = propValue;
+            info.label = propValue2;
             break;
           case "placeholder":
-            info.placeholder = propValue;
+            info.placeholder = propValue2;
             break;
           case "keyboardType":
-            info.keyboardType = propValue;
+            info.keyboardType = propValue2;
             break;
           case "testID":
-            info.testID = propValue;
+            info.testID = propValue2;
             break;
           case "appilotsId":
-            info.appilotsId = propValue;
-            if (propValue) info.varName = propValue;
+            info.appilotsId = propValue2;
+            if (propValue2) info.varName = propValue2;
             break;
           case "value":
             if (attr.value && BabelTypes__namespace.isJSXExpressionContainer(attr.value) && BabelTypes__namespace.isIdentifier(attr.value.expression)) {
@@ -3309,7 +3657,7 @@ var FormAnalyzer = class {
   }
   extractValidationRules(ast) {
     const rules = {};
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       IfStatement: (path11) => {
         const test = path11.node.test;
         const rule = this.extractRuleFromCondition(test);
@@ -3463,7 +3811,7 @@ async function composeAffordances(options) {
     const exclusive = children.filter((c) => (fanIn.get(c) ?? 0) <= MAX_FAN_IN);
     if (exclusive.length === 0) continue;
     const actionIds = new Set(screen.actions.map((a) => a.id));
-    const targetIds = new Set((screen.targets ?? []).map((t13) => t13.id));
+    const targetIds = new Set((screen.targets ?? []).map((t15) => t15.id));
     const formIds = new Set(screen.forms.map((f) => f.id));
     let gained = false;
     for (const file of exclusive) {
@@ -3605,6 +3953,7 @@ var ReactNativePlatformAnalyzer = class {
     });
     return {
       screens: enrichedScreens,
+      controlEvidenceFiles: screenAnalyzer.controlEvidenceFiles,
       navigation,
       analyzedFiles: screenFiles.length,
       ...screenAnalyzer.screensFilteredOut > 0 ? { screensFilteredOut: screenAnalyzer.screensFilteredOut } : {},
@@ -3869,7 +4218,7 @@ function extractWebNavigationCalls(ast) {
       calls.push({ method: "navigate", targetPath: node.right.value });
     }
   };
-  traverse4__default.default(ast, {
+  traverse5__default.default(ast, {
     noScope: !BabelTypes__namespace.isFile(ast),
     enter: (nodePath) => inspect(nodePath.node)
   });
@@ -3991,7 +4340,7 @@ var WebScreenAnalyzer = class {
   // ── registerScreen ────────────────────────────────────────────────
   detectRegisterScreenCall(ast) {
     let found = false;
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       CallExpression: (nodePath) => {
         if (found) return;
         if (isRegisterScreenCallee(nodePath.node.callee)) {
@@ -4004,7 +4353,7 @@ var WebScreenAnalyzer = class {
   }
   extractRegisterScreenMetadata(ast) {
     let plain = null;
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       CallExpression: (nodePath) => {
         if (!isRegisterScreenCallee(nodePath.node.callee)) return;
         const arg = nodePath.node.arguments[0];
@@ -4052,7 +4401,7 @@ var WebScreenAnalyzer = class {
   extractComponentName(ast) {
     let defaultName = "";
     let firstExported = "";
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       ExportDefaultDeclaration: (nodePath) => {
         const declaration = nodePath.node.declaration;
         if (BabelTypes__namespace.isFunctionDeclaration(declaration) && declaration.id?.name) {
@@ -4081,7 +4430,7 @@ var WebScreenAnalyzer = class {
   extractComponents(ast) {
     const components = [];
     const seen = /* @__PURE__ */ new Set();
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXOpeningElement: (nodePath) => {
         const element = nodePath.node;
         const name = getJsxElementName(element);
@@ -4102,7 +4451,7 @@ var WebScreenAnalyzer = class {
   // ── <label htmlFor> association ───────────────────────────────────
   collectHtmlForLabels(ast) {
     const labels = /* @__PURE__ */ new Map();
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXElement: (nodePath) => {
         const element = nodePath.node;
         if (getJsxElementName(element.openingElement) !== "label") return;
@@ -4145,7 +4494,7 @@ var WebScreenAnalyzer = class {
       formBuckets.set(formElement, bucket);
       return bucket;
     };
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXElement: (nodePath) => {
         const element = nodePath.node;
         const name = getJsxElementName(element.openingElement);
@@ -4162,7 +4511,7 @@ var WebScreenAnalyzer = class {
         if (!bucket.fields.has(field.name)) bucket.fields.set(field.name, field);
       }
     });
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXElement: (nodePath) => {
         const element = nodePath.node;
         const name = getJsxElementName(element.openingElement);
@@ -4340,7 +4689,7 @@ var WebScreenAnalyzer = class {
     const actionLabels = new Map(
       actions.filter((a) => a.label).map((a) => [normalizeLabel(a.label), a])
     );
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXElement: (nodePath) => {
         const element = nodePath.node;
         const name = getJsxElementName(element.openingElement);
@@ -4571,7 +4920,7 @@ var WebScreenAnalyzer = class {
     for (const call of extractWebNavigationCalls(ast)) {
       if (call.targetPath && call.targetPath.startsWith("/")) targets.add(call.targetPath);
     }
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXOpeningElement: (nodePath) => {
         const element = nodePath.node;
         const name = getJsxElementName(element);
@@ -4591,7 +4940,7 @@ var WebScreenAnalyzer = class {
   extractCollections(ast) {
     const collections = [];
     const seen = /* @__PURE__ */ new Set();
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXExpressionContainer: (nodePath) => {
         const expr = nodePath.node.expression;
         if (!BabelTypes__namespace.isCallExpression(expr) || !BabelTypes__namespace.isMemberExpression(expr.callee) || !BabelTypes__namespace.isIdentifier(expr.callee.object) || !BabelTypes__namespace.isIdentifier(expr.callee.property) || expr.callee.property.name !== "map") {
@@ -4703,7 +5052,7 @@ function firstCalledFunctionName(node) {
 }
 function containsWindowConfirm(body) {
   let found = false;
-  traverse4__default.default(
+  traverse5__default.default(
     body,
     {
       noScope: true,
@@ -4755,7 +5104,7 @@ function collectionItemNames(callback) {
 function collectionDisplayFields(callback, itemNames) {
   const fields = /* @__PURE__ */ new Set();
   if (!callback.body) return [];
-  traverse4__default.default(
+  traverse5__default.default(
     callback.body,
     {
       noScope: true,
@@ -4772,7 +5121,7 @@ function collectionDisplayFields(callback, itemNames) {
 function collectionKeyField(callback, itemNames) {
   let keyField;
   if (!callback.body) return void 0;
-  traverse4__default.default(
+  traverse5__default.default(
     callback.body,
     {
       noScope: true,
@@ -4915,7 +5264,7 @@ var WebNavigationAnalyzer = class {
         if (BabelTypes__namespace.isJSXElement(child)) visitRoute(child, fullPath);
       }
     };
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       JSXElement: (nodePath) => {
         const name = getJsxElementName(nodePath.node.openingElement);
         if (name !== "Routes" && name !== "Route") return;
@@ -4954,7 +5303,7 @@ var WebNavigationAnalyzer = class {
       "createMemoryRouter",
       "useRoutes"
     ]);
-    traverse4__default.default(ast, {
+    traverse5__default.default(ast, {
       CallExpression: (nodePath) => {
         const callee = nodePath.node.callee;
         if (!BabelTypes__namespace.isIdentifier(callee) || !ROUTER_FACTORIES.has(callee.name)) return;
@@ -5387,8 +5736,8 @@ var ZodParsedType = util.arrayToEnum([
   "set"
 ]);
 var getParsedType = (data) => {
-  const t13 = typeof data;
-  switch (t13) {
+  const t15 = typeof data;
+  switch (t15) {
     case "undefined":
       return ZodParsedType.undefined;
     case "string":
@@ -9233,7 +9582,25 @@ function isSafeImageUrl(value) {
   return SAFE_IMAGE_URL_RE.test(trimmed);
 }
 
-// ../shared/dist/chunk-NMQNNPSJ.mjs
+// ../shared/dist/chunk-KUMPS6RH.mjs
+var SUPPORTED_APPILOTS_LOCALES = ["pt-BR", "en", "es", "fr"];
+
+// ../shared/dist/chunk-4RYPNBBY.mjs
+var symbols = external_exports.array(external_exports.string().max(240)).max(12);
+var controlEvidenceSchema = external_exports.object({
+  version: external_exports.literal(1),
+  siteId: external_exports.string().regex(/^[a-f0-9]{20}$/),
+  component: external_exports.string().max(240),
+  icons: symbols,
+  handler: external_exports.string().max(240).optional(),
+  calls: symbols,
+  argumentBindings: symbols,
+  conditions: symbols,
+  nativeConfirmation: external_exports.object({
+    title: external_exports.string().max(240).optional(),
+    destructiveOption: external_exports.boolean()
+  }).optional()
+});
 var locatorSourceSchema = external_exports.enum([
   "appilotsId",
   "testID",
@@ -9435,7 +9802,9 @@ var screenPermissionDescriptorSchema = external_exports.object({
   agentAccess: external_exports.enum(["read", "write", "none"]).optional(),
   requiresConfirmation: external_exports.boolean().optional(),
   blockedActions: external_exports.array(external_exports.string()).optional(),
-  isPii: external_exports.boolean().optional()
+  isPii: external_exports.boolean().optional(),
+  /** Graded assessment — see `screenPermissionSchema.assessment`. */
+  assessment: external_exports.boolean().optional()
 }).passthrough();
 var screenDescriptorSchema = external_exports.object({
   name: external_exports.string(),
@@ -9660,7 +10029,9 @@ var snapshotInputSchema = external_exports.object({
   inModal: external_exports.boolean().optional()
 }).passthrough();
 var snapshotButtonSchema = external_exports.object({
+  controlEvidence: controlEvidenceSchema.optional(),
   id: boundedString(160).optional(),
+  dispatchable: external_exports.boolean().optional(),
   provenance: identityProvenanceSchema.optional(),
   /**
    * False when the control is mounted but currently OUTSIDE the window —
@@ -9721,7 +10092,36 @@ var snapshotListSchema = external_exports.object({
    */
   source: boundedString(40).optional(),
   itemCount: external_exports.number().int().optional(),
+  /**
+   * Size of the whole collection when the app declared it, for a list
+   * that is a WINDOW onto more data than it holds.
+   *
+   * `itemCount` is how many rows the list is rendering from and
+   * `visibleItemCount` how many of those are mounted; neither can
+   * express "there are 36 and you are looking at the first 20",
+   * because a paginated list's `data` is the page. Absent means
+   * unknown — never "same as itemCount".
+   */
+  totalItemCount: external_exports.number().int().optional(),
   visibleItemCount: external_exports.number().int().optional(),
+  viewportItemCount: external_exports.number().int().nonnegative().optional(),
+  exploration: external_exports.object({
+    revision: external_exports.number().int().nonnegative(),
+    observedItemCount: external_exports.number().int().min(0).max(5e3),
+    observedRanges: external_exports.array(
+      external_exports.object({
+        start: external_exports.number().int().nonnegative(),
+        end: external_exports.number().int().nonnegative()
+      })
+    ).max(32),
+    rangesTruncated: external_exports.boolean(),
+    coverage: external_exports.enum(["partial", "all-loaded"]),
+    pagination: external_exports.enum(["possible", "not-declared"]),
+    scrollSteps: external_exports.number().int().nonnegative(),
+    remainingScrollSteps: external_exports.number().int().nonnegative(),
+    consecutiveNoProgress: external_exports.number().int().nonnegative(),
+    lastScroll: external_exports.enum(["moved", "no-progress", "boundary", "unverified"]).optional()
+  }).optional(),
   refreshing: external_exports.boolean().optional(),
   empty: external_exports.boolean().optional(),
   label: boundedString(300).optional(),
@@ -9769,6 +10169,7 @@ var snapshotChoiceGroupSchema = external_exports.object({
 }).passthrough();
 var snapshotElementSchema = external_exports.object({
   id: boundedString(160).optional(),
+  dispatchable: external_exports.boolean().optional(),
   role: boundedString(40).optional(),
   label: boundedString(300).optional(),
   texts: external_exports.array(boundedString(500)).max(50).optional(),
@@ -9831,6 +10232,8 @@ var agentSnapshotSchema = external_exports.object({
     loadingFinished: external_exports.boolean().optional(),
     textsAdded: external_exports.number().int().nonnegative().optional(),
     textsRemoved: external_exports.number().int().nonnegative().optional(),
+    buttonsAddedIndices: external_exports.array(external_exports.number().int().nonnegative()).max(12).optional(),
+    buttonsRemoved: external_exports.number().int().nonnegative().optional(),
     visibleRowsDelta: external_exports.number().int().optional(),
     totalRowsDelta: external_exports.number().int().optional(),
     fieldsNewlyFilled: external_exports.array(boundedString(160)).max(12).optional(),
@@ -9856,6 +10259,16 @@ var agentSnapshotSchema = external_exports.object({
   }).passthrough().optional()
 }).passthrough();
 var agentContextSchema = external_exports.object({
+  missionProtocol: external_exports.literal(1).optional(),
+  missionId: boundedString(160).optional(),
+  /** Preferred supported device language, reported by the SDK independently of map/UI labels. */
+  deviceLocale: external_exports.enum(SUPPORTED_APPILOTS_LOCALES).optional(),
+  /**
+   * Per-session plain-language override (short sentences, no jargon,
+   * numbered steps). Absent → the project's `plainLanguage` setting.
+   * Changes how the reply is WORDED only — see `PLAIN_LANGUAGE_PROMPT`.
+   */
+  plainLanguage: external_exports.boolean().optional(),
   /**
    * Client platform this observation was captured on. Optional and
    * additive (see `clientPlatformSchema`) — absent means
@@ -10106,6 +10519,12 @@ var actionDiagnoseSchema = external_exports.object({
   requiresUserInput: external_exports.boolean().optional()
 });
 var actionResultSchema = external_exports.object({
+  nativeConfirmation: external_exports.object({
+    title: external_exports.string().max(300),
+    message: external_exports.string().max(1e3).optional(),
+    buttonLabel: external_exports.string().max(160).optional(),
+    handlerCompleted: external_exports.boolean()
+  }).optional(),
   actionId: external_exports.string(),
   type: external_exports.string(),
   success: external_exports.boolean(),
@@ -10172,7 +10591,14 @@ var screenPermissionSchema = external_exports.object({
   agentAccess: agentAccessLevelSchema.optional(),
   requiresConfirmation: external_exports.boolean().optional(),
   blockedActions: external_exports.array(external_exports.string().min(1)).optional(),
-  isPii: external_exports.boolean().optional()
+  isPii: external_exports.boolean().optional(),
+  /**
+   * Graded assessment (exam, quiz, graded activity). The agent may
+   * explain the screen and navigate away, never write: every action
+   * except navigate/scroll is blocked server-side, and the model is told
+   * to refuse up front instead of trying. Wins over `agentAccess: 'write'`.
+   */
+  assessment: external_exports.boolean().optional()
 }).strict();
 external_exports.object({
   agentCanWrite: external_exports.boolean(),
@@ -10180,6 +10606,10 @@ external_exports.object({
   confirmDestructive: external_exports.boolean(),
   /**
    * Map of screenName → override. Keys must be non-empty strings.
+   * A key containing `*` or starting with `/` is a PATTERN, matched
+   * case-insensitively against the screen name and the navigation path
+   * (`*Quiz*`; a path key uses `*` per segment, see docs/permissions).
+   * An exact key beats patterns.
    * Limited to 200 entries to keep the JSON column small and editable
    * in the dashboard table view.
    */
@@ -10233,7 +10663,7 @@ external_exports.object({
   /** null = remove webhook, undefined = leave unchanged. */
   budgetWebhookUrl: external_exports.string().url().nullable().optional()
 }).strict();
-var localeSchema = external_exports.enum(["pt-BR", "en", "es"]);
+var localeSchema = external_exports.enum(SUPPORTED_APPILOTS_LOCALES);
 var hexColorSchema = external_exports.string().regex(/^#([0-9a-fA-F]{3}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/, {
   message: "Must be a hex color like #6366f1"
 });
@@ -10277,6 +10707,13 @@ var imageSourceField = external_exports.string().max(500).refine(isSafeImageUrl,
 external_exports.object({
   /** Tone / persona instructions appended to the system prompt. */
   personaPrompt: external_exports.string().max(2048).nullable(),
+  /**
+   * Accessibility: reply in plain language (short sentences, everyday
+   * words, numbered steps, one question at a time). Server-side only,
+   * like `personaPrompt`; a session can override it via
+   * `context.plainLanguage`.
+   */
+  plainLanguage: external_exports.boolean(),
   /** Display name in the chat header (e.g. "Aria"). */
   assistantName: external_exports.string().max(60).nullable(),
   /** URL or remote asset id for the avatar shown next to assistant turns. */
@@ -10300,6 +10737,7 @@ external_exports.object({
 });
 external_exports.object({
   personaPrompt: external_exports.string().max(2048).nullable().optional(),
+  plainLanguage: external_exports.boolean().optional(),
   assistantName: external_exports.string().max(60).nullable().optional(),
   assistantAvatar: imageSourceField.nullable().optional(),
   emptyStateIcon: imageSourceField.nullable().optional(),
@@ -10457,6 +10895,8 @@ external_exports.object({
    * the dev doesn't want their tokens metered.
    */
   silent: external_exports.boolean().optional(),
+  /** Run with the plain-language reply style on/off, overriding the project. */
+  plainLanguage: external_exports.boolean().optional(),
   /**
    * Prior turns of the conversation, in order, that precede `prompt`.
    * Lets a driver run the agent loop hop-by-hop headlessly (the multi-
@@ -11244,9 +11684,22 @@ var MCPGenerator = class _MCPGenerator {
     const filePath = path2__namespace.default.resolve(outputDir, `mcp-document.${this.options.format}`);
     await fs.writeFile(filePath, serialized, "utf-8");
     console.log(`[MCPGenerator] Document written to: ${filePath}`);
+    const controlFiles = analyzed.controlEvidenceFiles ?? {};
+    await fs.writeFile(
+      path2__namespace.default.resolve(outputDir, "control-evidence.json"),
+      JSON.stringify({ version: 1, files: controlFiles }, null, 2),
+      "utf-8"
+    );
     const checksumFilePath = path2__namespace.default.resolve(outputDir, ".appilots-checksum");
     await fs.writeFile(checksumFilePath, checksum, "utf-8");
     console.log(`[MCPGenerator] Checksum written to: ${checksumFilePath}`);
+    const evidenceCount = Object.values(controlFiles).reduce(
+      (sum, entries) => sum + entries.length,
+      0
+    );
+    console.log(
+      `[MCPGenerator] Source evidence: ${evidenceCount} icon controls across ${Object.keys(controlFiles).length} files (runtime binding required)`
+    );
     console.log("[MCPGenerator] Generation complete!");
     return {
       document,
@@ -11312,7 +11765,8 @@ var KNOWN_CONFIG_KEYS = [
   "navigationExclude",
   "platform",
   "manifestPath",
-  "eval"
+  "eval",
+  "knowledge"
 ];
 var KEY_ALIASES = {
   apiUrl: "serverUrl",
@@ -11460,7 +11914,8 @@ function saveConfig(dir, config) {
     navigationExclude: config.navigationExclude || existingConfig?.navigationExclude,
     platform: config.platform || existingConfig?.platform,
     manifestPath: config.manifestPath || existingConfig?.manifestPath,
-    eval: config.eval || existingConfig?.eval
+    eval: config.eval || existingConfig?.eval,
+    knowledge: config.knowledge || existingConfig?.knowledge
   };
   try {
     fs$1.writeFileSync(configPath, JSON.stringify(mergedConfig, null, 2), "utf-8");
@@ -11553,6 +12008,19 @@ function validateConfig(config) {
   if (config.manifestPath !== void 0 && typeof config.manifestPath !== "string") {
     errors.push("manifestPath must be a string");
   }
+  if (config.knowledge !== void 0) {
+    if (typeof config.knowledge !== "object" || config.knowledge === null || Array.isArray(config.knowledge)) {
+      errors.push("knowledge must be an object");
+    } else {
+      const kc = config.knowledge;
+      for (const field of ["sources", "exclude"]) {
+        const value = kc[field];
+        if (value !== void 0 && (!Array.isArray(value) || !value.every((item) => typeof item === "string"))) {
+          errors.push(`knowledge.${field} must be an array of strings`);
+        }
+      }
+    }
+  }
   if (config.eval !== void 0) {
     if (typeof config.eval !== "object" || config.eval === null || Array.isArray(config.eval)) {
       errors.push("eval must be an object");
@@ -11829,6 +12297,48 @@ var AppilotsAPIClient = class {
       };
     }
   }
+  /**
+   * Syncs knowledge documents with the Appilots backend.
+   *
+   * @param documents Array of documents to sync (filename, base64 content, mimeType, checksum)
+   * @returns KnowledgeSyncResult with counts of uploaded, skipped, and errored docs
+   */
+  async knowledgeSync(documents) {
+    try {
+      const response = await this.request(`${this.baseUrl}/cli/knowledge/sync`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bearer ${this.apiKey}`
+        },
+        body: JSON.stringify({ documents })
+      });
+      if (!response.ok) {
+        const errorData = await response.json().catch(() => ({}));
+        return {
+          success: false,
+          uploaded: 0,
+          skipped: 0,
+          errors: 0,
+          error: describeApiError(errorData, `HTTP ${response.status}: ${response.statusText}`)
+        };
+      }
+      const json = await response.json();
+      const inner = json.data ?? json;
+      return {
+        success: true,
+        ...inner
+      };
+    } catch (error) {
+      return {
+        success: false,
+        uploaded: 0,
+        skipped: 0,
+        errors: 0,
+        error: error instanceof Error ? error.message : "Failed to sync knowledge with Appilots API"
+      };
+    }
+  }
   /**
    * Checks if the Appilots API server is healthy
    *
@@ -11847,7 +12357,7 @@ var AppilotsAPIClient = class {
 };
 
 // src/version.ts
-var CLI_VERSION = "0.11.3";
+var CLI_VERSION = "0.14.0";
 
 exports.AppilotsAPIClient = AppilotsAPIClient;
 exports.CLI_VERSION = CLI_VERSION;